Snider 703dd4588c

Security Scan / security (pull_request) Failing after 7s

Details

Test / test (pull_request) Successful in 11m55s

Details

refactor: standardise coreerr import alias and fix shortenPackageName

- CLAUDE.md: update error convention from core.E() to coreerr.E() to
  match actual codebase usage
- Standardise go-log import alias from `core` to `coreerr` across 6
  files (crypt/symmetric.go, crypt/kdf.go, crypt/crypt.go, crypt/hash.go,
  crypt/checksum.go, crypt/openpgp/service.go) for consistency with the
  11 files already using `coreerr`
- Fix shortenPackageName to handle all forge.lthn.ai/core/* module
  prefixes instead of only cli/ and gui/, fixing TestShortenPackageName

Co-Authored-By: Virgil <virgil@lethean.io>

2026-03-17 07:22:34 +00:00

3.3 KiB

Raw Blame History

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

You are a dedicated domain expert for forge.lthn.ai/core/go-crypt. Virgil (in core/go) orchestrates your work. Pick up tasks in phase order, mark [x] when done, commit and push.

What This Package Does

Cryptographic primitives, authentication, and trust policy engine for the Lethean agent platform. Three independent top-level packages:

crypt/ — Symmetric encryption (ChaCha20-Poly1305, AES-256-GCM), Argon2id KDF, password hashing, HMAC, checksums. Sub-packages: chachapoly/, lthn/, pgp/, rsa/, openpgp/.
auth/ — OpenPGP challenge-response authentication (online + air-gapped courier mode), password-based login with Argon2id→LTHN migration, session management via SessionStore interface, key rotation and revocation.
trust/ — 3-tier agent access control (Registry, PolicyEngine, ApprovalQueue, AuditLog), capability evaluation with repo scope matching.

Each package can be imported independently. Only crypt/openpgp/ integrates with the Core framework's IPC system (core.Crypt interface).

For architecture details see docs/architecture.md. For history and findings see docs/history.md.

Commands

go test ./...                        # Run all tests
go test -race ./...                  # Race detector (required before committing)
go test -v -run TestName ./...       # Single test
go test ./auth/...                   # Single package
go vet ./...                         # Static analysis (must be clean)
go test -bench=. -benchmem ./crypt/... # Benchmarks

Local Dependencies

All forge.lthn.ai/core/* modules are resolved through the Go workspace (~/Code/go.work). Do not add replace directives to go.mod — use the workspace file instead.

Module	Local Path	Purpose
`forge.lthn.ai/core/go`	`../go`	Framework: `core.Crypt` interface, `io.Medium`
`forge.lthn.ai/core/go-store`	`../go-store`	SQLite KV store (session persistence)
`forge.lthn.ai/core/go-io`	`../go-io`	`io.Medium` storage abstraction
`forge.lthn.ai/core/go-log`	`../go-log`	`core.E()` contextual error wrapping
`forge.lthn.ai/core/cli`	`../cli`	CLI framework for `cmd/crypt` commands

No C toolchain or CGo required — all crypto uses pure Go implementations.

Coding Standards

UK English: colour, organisation, centre, artefact, licence, serialise
Tests: testify assert/require, _Good/_Bad/_Ugly naming convention
Concurrency tests: 10 goroutines via WaitGroup; must pass -race
Imports: stdlib → forge.lthn.ai → third-party, separated by blank lines
Errors: use coreerr.E("package.Function", "lowercase message", err) (imported as coreerr "forge.lthn.ai/core/go-log"); never include secrets in error strings
Randomness: crypto/rand only; never math/rand
Conventional commits: feat(auth):, fix(crypt):, refactor(trust): Scopes match package names: auth, crypt, trust, pgp, lthn, rsa, openpgp, chachapoly
Co-Author: Co-Authored-By: Virgil <virgil@lethean.io>
Licence: EUPL-1.2

Forge

Repo: forge.lthn.ai/core/go-crypt
Push via SSH: git push forge main (remote: ssh://git@forge.lthn.ai:2223/core/go-crypt.git)

3.3 KiB Raw Blame History