Expand description
bw:// backend for hasp.
Grammar: bw://<item>/<field-path>
<item>— Bitwarden item name (host component). Must be non-empty.<field-path>— Dot-separated path into the item JSON (first path segment). Examples:login.password,notes,fields.0.value.- No query parameters.
Supported operations: get, exists.
put, list, delete: UnsupportedOperation.
Authentication is ambient only: BW_SESSION. If the variable is missing,
every operation fails fast with AuthenticationFailed before spawning
the bw binary, preventing biometric unlock prompts in headless contexts.
Every bw invocation carries a wall-clock timeout (15 s for get,
10 s for exists) because bw may prompt for unlock in interactive
mode. The --nointeraction flag mitigates but does not eliminate hangs.
bw get item returns full item JSON. The backend extracts only the
requested field and wraps it in SecretString. exists also fetches
full item JSON because bw lacks a metadata-only existence probe.