Gabriel Brown
c02329ac3c
The launcher's Copy Password command, built alone and last as the plan required, because every line of it is the security design: the secret travels rbw to wl-copy through a pipe -- never argv, never a file -- and the copy carries wl-clipboard's --sensitive hint, which vicinae's clipboard history documents it ignores. That claim was not taken on faith: a plain probe landed in the live history database and a sensitive one did not, before any of this was written. A transient timer clears the clipboard after thirty seconds. An unconfigured rbw gets a setup message; a vault that locks between list and get gets an honest failure instead of an empty copy claiming success. rbw joins desktop-packages, and the contract pins the whole journey with a stub vault, including that the secret never appears on a command line.
10 lines
456 B
Bash
Executable File
10 lines
456 B
Bash
Executable File
#!/usr/bin/env bash
|
|
# @vicinae.schemaVersion 1
|
|
# @vicinae.title Copy Password
|
|
# @vicinae.mode silent
|
|
# @vicinae.icon ../../icons/hicolor/scalable/apps/panama-settings.svg
|
|
# @vicinae.description Pick a Bitwarden entry; the password lands on the clipboard, concealed from history, and clears in 30 seconds.
|
|
# @vicinae.keywords ["password", "bitwarden", "vault", "credentials", "login", "secret"]
|
|
|
|
exec "$HOME/.config/quickshell/scripts/panama-pick" password
|