mirror of https://github.com/Nighthawk42/bnet_auth_tool.git synced 2026-08-30 06:22:27 +00:00

Files

T

Nighthawk42andClaude Opus 4.8 023ccd9f74 Rewrite as a packaged tool with an encrypted vault (v2.0.0)

Replace the single-file v1.3.1 script with a proper src/bnet_auth_tool/
package: config (YAML settings + platformdirs), crypto (scrypt + AES-256-GCM
with a versioned header; legacy PBKDF2 100k/600k still decrypt), storage
(single encrypted vault), fileio (atomic 0600 writes), api, totp, migrate, and
a cli with an interactive menu plus argparse subcommands.

Security/audit fixes: drop catch-all excepts, stop leaking server bodies/tokens
in errors, atomic permission-hardened writes, explicit Ctrl-C handling,
versioned format header, best-effort passphrase scrubbing.

Add packaging (pyproject for uv, organized requirements.txt fallback, uv.lock),
.gitignore, settings.yaml, CLAUDE.md/AGENTS.md, 22 pytest tests, and ruff
config. Online attach/retrieve is preserved but kept labelled unverified.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-13 19:56:35 -04:00

277 B

Raw Permalink Blame History

CLAUDE.md

This project's agent guidance lives in AGENTS.md. Read it before making changes — it covers the architecture, the hard constraints (legacy-decryption back-compat, secret hygiene, and the "online flows are unverified" framing), and the dev workflow.

277 B Raw Permalink Blame History

CLAUDE.md

277 B

Raw Permalink Blame History