Goal

Grab API keys from a secure password manager instead of hardcoding somewhere. Ideal use case would be for LLM provider API tokens that are stored as environment variables i.e. OpenAI.

Proposal

Use bitwarden-cli as secret manager. I believe they also have a secret manager, however unclear what other benefits of that would be outside of I imagine cloud integrations (i.e. using it in AWS?).

Issues

Bitwarden APIs cannot be controlled for scope currently - feature request