nongnu: Add bitwarden-desktop.

* nongnu/packages/password-utils.scm: New file;
(bitwarden-desktop): New variable.

nongnu/packages/password-utils.scm

@@ -0,0 +1,77 @@
+;;; SPDX-License-Identifier: GPL-3.0-or-later
+;;; Copyright © 2025 Giacomo Leidi <goodoldpaul@autistici.org>
+
+(define-module (nongnu packages password-utils)
+  #:use-module (gnu packages gnome)
+  #:use-module (guix download)
+  #:use-module (guix gexp)
+  #:use-module (guix packages)
+  #:use-module (nonguix build-system chromium-binary)
+  #:use-module ((guix licenses) #:prefix free-license:))
+
+(define-public bitwarden-desktop
+  (package
+    (name "bitwarden-desktop")
+    (version "2025.1.3")
+    (source
+     (origin
+       (method url-fetch)
+       (uri
+        (string-append "https://github.com/bitwarden/clients/releases/download/"
+                       "desktop-v" version "/Bitwarden-" version "-amd64.deb"))
+       (file-name (string-append name "-" version ".deb"))
+       (sha256
+        (base32
+         "1rvlv7lmqkirxf47lnnjq7q28gx27caydvl8ap02254yhj0nkf90"))))
+    (build-system chromium-binary-build-system)
+    (arguments
+     (list
+      #:substitutable? #f
+      #:validate-runpath? #f ; TODO: fails on wrapped binary and included other files
+      #:wrapper-plan
+      #~(map (lambda (file)
+               (string-append "opt/Bitwarden/" file))
+             '("bitwarden-app"
+               "chrome-sandbox"
+               "chrome_crashpad_handler"
+               "libEGL.so"
+               "libffmpeg.so"
+               "libGLESv2.so"
+               "libvk_swiftshader.so"
+               "libvulkan.so.1"
+               "resources/app.asar.unpacked/node_modules/@bitwarden/desktop-napi/desktop_napi.linux-x64-musl.node"))
+      #:install-plan
+      #~'(("opt/" "/share")
+          ("usr/share/" "/share"))
+      #:phases
+      #~(modify-phases %standard-phases
+          (add-before 'install 'patch-assets
+            (lambda _
+              (let* ((bin (string-append #$output "/bin"))
+                     (usr/share "./usr/share")
+                     (old-exe "/opt/Bitwarden/bitwarden")
+                     (exe (string-append bin "/bitwarden")))
+                (substitute* (string-append usr/share "/applications/bitwarden.desktop")
+                  (((string-append "^Exec=" old-exe)) (string-append "Exec=" exe))))))
+          (add-before 'install-wrapper 'symlink-entrypoint
+            (lambda _
+              (let* ((bin (string-append #$output "/bin"))
+                     (share (string-append #$output "/share/Bitwarden")))
+                (mkdir-p bin)
+                (for-each
+                 (lambda (entrypoint)
+                   (define exe (string-append bin "/" entrypoint))
+                   (define target (string-append share "/" entrypoint))
+                   (symlink target exe)
+                   (wrap-program exe
+                     `("LD_LIBRARY_PATH" = (,share))))
+                 '("bitwarden" "bitwarden-app"))))))))
+    (inputs
+     (list libsecret))
+    (synopsis "Access your sensitive information on any device with secure cloud sync")
+    (supported-systems '("x86_64-linux"))
+    (description "Bitwarden is a password manager for securely storing,
+managing, and sharing sensitive online data such as passwords, passkeys, and
+credit cards.")
+    (home-page "https://bitwarden.com")
+    (license free-license:gpl3)))