Add Bitwarden provider with comprehensive security enhancements

.claude/settings.local.json

@@ -3,8 +3,11 @@
     "allow": [
       "Bash(mkdir:*)",
       "Bash(jq:*)",
-      "Bash(cat:*)"
+      "Bash(cat:*)",
+      "Bash(rustc:*)",
+      "Bash(git commit:*)",
+      "Bash(git push:*)"
     ],
     "deny": []
   }
-}
+}

.gitignore

@@ -1,4 +1,5 @@
 .devenv*
-.pre-commit*
+.pre-commit-hooks.yaml
 .direnv
 target
+.DS_Store

.pre-commit-config.yaml

@@ -0,0 +1,5 @@
+repos:
+  - repo: https://github.com/doublify/pre-commit-rust
+    rev: v1.0
+    hooks:
+      - id: fmt

CHANGELOG.md

@@ -9,6 +9,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 - Integrate `secrecy` crate for secure secret handling with automatic memory zeroing
+- Bitwarden provider supports Bitwarden & Bitwarden Secrets Manager via
+  `bitwarden://` & `bws://` URIs with enhanced error message sanitization.
 - Add `reflect()` method to Provider trait for provider introspection
 - Export `Provider` trait from secretspec crate for use in derived code
 
@@ -24,11 +26,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.2.0] - 2025-07-17
 
 ### Changed
+
 - SDK: Added `set_provider()` and `set_profile()` methods for configuration
 - SDK: Removed provider/profile parameters from `set()`, `get()`, `check()`, `validate()`, and `run()` methods
 - SDK: Embedded Resolved inside ValidatedSecrets
 
 ### Fixed
+
 - Fix stdin handling for piped input in set/check commands
 - Fix SECRETSPEC_PROFILE and SECRETSPEC_PROVIDER environment variable resolution
 - Ensure CLI arguments take precedence over environment variables
@@ -38,14 +42,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.1.2] - 2025-01-17
 
 ### Fixed
+
 - SDK: Hide internal functions
 
 ## [0.1.1] - 2025-07-16
 
 ### Added
+
 - `secretspec --version`
 
 ### Fixed
+
 - Profile inheritance: fields are merged with current profile taking precedence
 
 ## [0.1.0] - 2025-07-16

Cargo.toml

@@ -35,6 +35,7 @@ trybuild = "1.0"
 insta = "1.34"
 linkme = "0.3"
 secrecy = { version = "0.10.3", features = ["serde"] }
+base64 = "0.22"
 secretspec-derive = { version = "0.2.0", path = "./secretspec-derive" }
 secretspec = { version = "0.2.0", path = "./secretspec" }