[giordano-lucas]

Based on #170 (API client regeneration, which main needs to pass CI): its two commits show in this diff until #170 merges, then I rebase onto main.

Adds notte vaults connect --provider bitwarden and notte vaults disconnect. A cloud session can then fill logins from the user's Bitwarden Password Manager through Agent Access (aac). The backend is nottelabs/monorepo#5083; the commands do nothing useful until it's deployed.

Usage

notte vaults connect --provider bitwarden --session-id <id>
notte page fill 'input[name=password]' --vault-field password --session-id <id>

How vaults connect works

1. Runs aac listen --reusable-psk in the terminal. The user unlocks the vault there (/unlock) and approves each login request.
2. Builds the token <psk>_<listener fingerprint> from aac's own files, not its screen:
   • the first PSK in ~/.access-protocol/psk_store_user_client.json, which --reusable-psk loads; the CLI writes one when the store is empty;
   • the fingerprint from aac connections list --client-type user.
3. Sends it to POST /sessions/{id}/vault/connection. The token is never printed.
4. Waits until the user quits aac (Esc or Ctrl+C), then calls DELETE on the same route.

With --token (or AAC_TOKEN), the user runs the listener themselves and the command only connects. Only reusable PSK tokens are accepted: a /pair code pairs once. A hidden --aac-provider flag runs aac's demo provider (example), for trying the flow without a vault.

The routes are outside the published schema for now, so internal/api/vault_connection.go calls them by hand, as payments.go does. check-skills needs nottelabs/notte-skills#61 merged first.

Testing

• Unit tests:

  • internal/aac: PSK store creation and reuse, aac's PSK id, refusal of invalid stores, fingerprint parsing, token shape.
  • internal/cmd: token mode, a pairing code refused, the listener run until it quits followed by a disconnect, and the listener stopped when the session refuses the connect.
  • go test -race ./... and golangci-lint pass.
  • checkcoverage -check skills passes against the skills branch.

• Live: the built binary ran in a PTY with real aac v0.11.0 (demo provider) against a recording API:

  • It sent POST with a well-formed token from the stored PSK.
  • The monorepo backend's lookup used that token to get the github.com login after one approval.
  • Ctrl+C quit aac, and the CLI sent DELETE and exited 0.

• Live against monorepo #5083's full-stack preview:

  • The built binary connected a cloud session with aac's demo provider.
  • A placeholder form_fill on github.com/login filled the demo login after one approval, with neither value in the responses.
  • Quitting aac disconnected the session.

Not verified with a real Bitwarden vault.

🤖 Generated with Claude Code

[greptile-apps]

Confidence Score: 5/5

[Critical impact] The latest changes appear safe to merge, with no new actionable issues found.

Summary

Adds Bitwarden connections for browser sessions through aac.

• Session fills can use logins approved through a local Bitwarden listener.
• Go callers can use generated methods for payment requests and wallet status.

_{Reviews (4) · Last reviewed commit: "Disconnect a session whose connect may h..." · Reviewed by Greptile}

[giordano-lucas]

@greptileai review

[giordano-lucas]

@greptileai review