[agent/codex] Full audit per issue #4. Read CLAUDE.md. Report ALL findings... #5

Merged
Virgil merged 11 commits from agent/deep-audit-per-issue--4--read-claude-md into dev 2026-03-22 18:12:40 +00:00

11 commits

Author SHA1 Message Date
Snider
163692870f Merge remote-tracking branch 'github/dev'
Some checks failed
CI / auto-fix (push) Failing after 0s
CI / auto-merge (push) Failing after 0s
CI / test (push) Failing after 1s
2026-03-22 00:25:27 +00:00
Snider
4b8d05559b ci: add Core ecosystem CI workflow with CodeRabbit auto-fix
Some checks failed
CI / test (push) Failing after 2s
CI / auto-fix (push) Failing after 0s
CI / auto-merge (push) Failing after 0s
Uses dAppCore/build actions for test, auto-fix on CodeRabbit changes,
and auto-merge on CodeRabbit approval.

Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-22 00:25:20 +00:00
Snider
94950c711f Merge remote-tracking branch 'github/dev' 2026-03-22 00:25:08 +00:00
Claude
61d66f45a8
chore: migrate to dappco.re vanity import path
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 23:44:10 +00:00
00279e457a Merge pull request '[agent/claude] Update all Go files that import forge.lthn.ai/core/go or for...' (#2) from agent/update-all-go-files-that-import-forge-lt into main 2026-03-21 12:08:30 +00:00
Snider
92e85351a6 refactor: migrate core import to dappco.re/go/core
Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-21 12:08:11 +00:00
Snider
1b147f4680 chore: sync dependencies for v0.1.7
Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-17 17:52:56 +00:00
Snider
949b0098dc chore: sync dependencies for v0.1.6
Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-17 17:47:54 +00:00
Snider
f3f741c0a7 feat(security): add WriteMode to Medium interface for file permissions
Codex security review found that migrating os.WriteFile(path, data, 0600)
to coreio.Local.Write() changed permissions from owner-only to world-readable
(0644). This is a security regression for encryption output, private keys,
and auth hashes.

WriteMode(path, content, mode) allows callers to specify permissions.
Write() remains the default (0644) for non-sensitive files.

Affected implementors updated: local.Medium, MockMedium, Node, datanode.Medium.

Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-17 17:23:31 +00:00
9c7a447214 Merge pull request '[agent/claude:opus] DX audit and fix. 1) Review CLAUDE.md — update any outdate...' (#1) from agent/dx-audit-and-fix--1--review-claude-md into main 2026-03-17 08:03:32 +00:00
Snider
dbe5086a0a fix(dx): audit errors, update CLAUDE.md, clean up node import guard
- Replace errors.New() with coreerr.E() in sigil/sigils.go (HashSigil.In, NewSigil)
- Update CLAUDE.md: add missing deps (go-crypt, x/crypto, testify), fix go/pkg/core path,
  add GOWORK=off note, document sentinel error convention, add qa command
- Remove redundant unused import guard in node/node.go

Co-Authored-By: Virgil <virgil@lethean.io>
2026-03-17 07:19:20 +00:00