feat(proton-pass): add Proton Pass backend

config.go

@@ -98,4 +98,27 @@ type Config struct {
 
 	// OPDesktopAccountID is the 1Password account name or UUIDj for Desktop Integration (1Password Desktop App only)
 	OPDesktopAccountID string
+
+	// ProtonPassPAT is the Proton Pass Personal Access Token ("pst_<token>::<key>").
+	// The "pst_<token>" half authenticates; the "::<key>" half is the client-side
+	// vault-unwrap key. Falls back to the PROTON_PASS_PERSONAL_ACCESS_TOKEN env var.
+	ProtonPassPAT string
+
+	// ProtonPassShareID is the Share ID of the Proton Pass vault that aws-vault uses.
+	// Falls back to the PROTON_PASS_SHARE_ID env var.
+	ProtonPassShareID string
+
+	// ProtonPassItemTitlePrefix is the prefix to prepend to Proton Pass item titles.
+	ProtonPassItemTitlePrefix string
+
+	// ProtonPassAPIBase overrides the Proton API base URL (default https://pass-api.proton.me).
+	ProtonPassAPIBase string
+
+	// ProtonPassTimeout is the per-operation timeout for Proton Pass API calls. Zero
+	// selects a built-in default.
+	ProtonPassTimeout time.Duration
+
+	// ProtonPassTokenFunc is an optional function used to prompt for the PAT when no
+	// config field or environment variable supplies one.
+	ProtonPassTokenFunc PromptFunc
 }

go.mod

@@ -18,6 +18,7 @@ require (
 	github.com/stretchr/testify v1.11.1
 	golang.org/x/sys v0.46.0
 	golang.org/x/term v0.44.0
+	google.golang.org/protobuf v1.36.11
 )
 
 require (
@@ -36,6 +37,5 @@ require (
 	github.com/uber/jaeger-lib v2.4.1+incompatible // indirect
 	go.opentelemetry.io/proto/otlp v1.9.0 // indirect
 	go.uber.org/atomic v1.11.0 // indirect
-	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )