Initial release: bw-secrets agent-friendly Bitwarden/Vaultwarden helper

Single-file pure-Python tool for retrieving secrets from a self-hosted
Bitwarden/Vaultwarden vault. Org-first by default, agent exit codes
(0/1/2), no session file on disk, no jq/pexpect dependencies.

Includes: install.sh, README with org setup walkthrough and agent
onboarding prompt, SKILL.md agent documentation.

install.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# install.sh — Install bw-secrets to ~/.local/bin
+set -euo pipefail
+
+SRC="$(cd "$(dirname "$0")" && pwd)/bw-secrets"
+DEST="${HOME}/.local/bin/bw-secrets"
+
+mkdir -p "${HOME}/.local/bin"
+install -m 700 "${SRC}" "${DEST}"
+echo "Installed bw-secrets → ${DEST}"
+
+# Ensure ~/.local/bin is on PATH
+case ":${PATH}:" in
+  *":${HOME}/.local/bin:"*) ;;
+  *) echo "NOTE: add ${HOME}/.local/bin to your PATH" ;;
+esac
+
+# Optional: create config dir with template
+CONFIG_DIR="${HOME}/.config/bw"
+if [[ ! -f "${CONFIG_DIR}/config.env" ]]; then
+  mkdir -p "${CONFIG_DIR}"
+  cat > "${CONFIG_DIR}/config.env" <<'EOF'
+# bw-secrets configuration (chmod 600)
+# BW_SERVER and BW_ORG_ID are required — set them to your vault.
+# BW_SERVER=https://vault.example.com
+# BW_ORG_ID=<your-org-id>
+# BW_MASTER_PW_FILE=${HOME}/.config/bw/master_pw
+EOF
+  chmod 600 "${CONFIG_DIR}/config.env"
+  echo "Created config template → ${CONFIG_DIR}/config.env"
+fi
+
+echo "Done. Set BW_SERVER and BW_ORG_ID in ${CONFIG_DIR}/config.env, then test with: bw-secrets status"