github.com/KeeForge/KeeForge (link)

commit signals (100)

source signals (79)

• KeeForgeTests/AGENTS.mdvia agents-md

  # KeeForge Unit Tests
  
  Use this folder to find the smallest test slice that proves a change. Prefer unit tests over UI tests unless the behavior is truly UI-driven.
  
  ## Running Tests
  
  ```bash
  xcodebuild test -project KeeForge.xcodeproj -scheme KeeForge \
    -destination 'platform=iOS Simulator,name=iPhone 17 Pro' \
    -only-testing:KeeForgeTests/DatabaseViewModelTests -quiet
  ```
  
  - Run only the classes touched by the change.
  - `-only-testing:` takes test **class** names; the map below lists files, and the two

• KeeForge/Views/Entry/AGENTS.mdvia agents-md

  # Entry Views
  
  Entry detail, editing, history, attachments, icon selection, and the shared row-action state.
  
  ## Screen Map
  
  - `PendingRowActions.swift` is the single home for the row-action state the three shells share: `PendingEntryDeletion`, `PendingGroupDeletion`, `PendingDeletion` (with `confirmationAlert(viewModel:)`), and `PendingMove`. `GroupListView.swift`, `EntryListView.swift`, and the macOS `../../App/RegularDatabaseWorkspaceView.swift` all build their delete confirmations and move sheets from i

• KeeForge/Services/Persistence/AGENTS.mdvia agents-md

  # Persistence Services
  
  This folder owns database references, cached copies, file access, and local-save infrastructure.
  
  ## Main Files
  
  - `AppGroupContainer.swift` is the single resolution point for App Group storage: the container directory (`AppGroupContainer.url`) and the shared `UserDefaults` suite (`AppGroupContainer.defaults`). Every reader and writer of shared storage — this folder, `../AppSupport/SettingsService.swift`, `../AppSupport/FaviconService.swift`, `../AutoFill/AutoFillDiagnostics.swift`

• KeeForge/Services/AppSupport/AGENTS.mdvia agents-md

  # App Support Services
  
  This folder holds app-scoped helpers that support UI behavior and secondary product surfaces.
  
  ## Main Files
  
  - `SettingsService.swift` decides what is local-only versus App Group-shared with the extension. Its app-local appearance settings include the color scheme and optional sRGB accent color; no stored accent means the asset-catalog default. It owns the app-local `AuthenticationGracePeriod` (Always Ask by default, at most five minutes, never unbounded) that `../Security/SecretAcc

• KeeForge/App/AGENTS.mdvia agents-md

  # App Folder
  
  This folder owns app startup, scene transitions, and the adaptive root shell that connects the database list to one active database session.
  
  ## Main Files
  
  - `KeeForgeApp.swift` creates the shared `DatabaseListViewModel` and `AppRoutingCoordinator`, owns the optional active `DatabaseViewModel`, chooses the compact vs regular-width root layout, and wires global scene-phase behavior. It reads the persisted appearance mode and optional app accent color with `@AppStorage`, applying both to the ma

• KeeForgeTests/Support/AGENTS.mdvia agents-md

  # Test Support
  
  Shared test infrastructure: fixtures, fakes, spies, and assertion helpers. Nothing here declares a test class — suites live one level up in `../`.
  
  ## Helpers
  
  - `TestDatabaseSupport.swift` builds fixture URLs, supports fixture subdirectories, reads non-database fixture bytes (`fixtureData(named:extension:bundle:)`, for key files), and creates bookmark-backed `DatabaseReference` values for tests.
  - `FakeCredentialIdentityStore.swift` is the lock-guarded in-memory `CredentialIdentityStorePr

• KeeForge/Views/Components/AGENTS.mdvia agents-md

  # Components Views
  
  Reusable controls shared across the feature folders.
  
  ## Screen Map
  
  - `FaviconView.swift` renders an entry's icon: a custom `Meta/CustomIcons` image, a cached/fetched favicon, or the standard-icon glyph fallback from `StandardIconView.swift`. Its `FaviconLoadModel` clears the previous image when the requested domain changes and ignores stale or cancelled fetch responses; `FaviconLoadModelTests` covers that lifetime without network requests.
  - `StandardIconView.swift` is the single rende

• KeeForge/Services/AutoFill/AGENTS.mdvia agents-md

  # AutoFill Services
  
  This folder holds extension-facing helpers shared between the main app and the AutoFill target.
  
  ## Main Files
  
  - `AutoFillSaveCoordinator.swift` stages and saves new credentials, refreshes shared caches, and queues deferred cloud uploads when needed. `destinationGroup(in:preferredGroupID:)` is the one place that decides which group a new AutoFill entry goes into; Database Details and the AutoFill creators display the same resolution.
  - `CredentialMatcher.swift` matches KeePass entries 

• .agents/AGENTS.mdvia agents-md

  # Repository Agent Workflows
  
  Read the relevant skill before release or pre-release review work:
  
  - `skills/prepare-release/SKILL.md` prepares a new version or patch's first candidate.
  - `skills/respin-release/SKILL.md` replaces an unshipped candidate of the same version.
  - `skills/ship-release/SKILL.md` publishes accepted artifacts. Shared release procedures live in `skills/prepare-release/references/`.
  - `skills/pre-release-review/SKILL.md` performs a static review before candidate preparation, including 

• KeeForge/Views/DatabaseList/AGENTS.mdvia agents-md

  # DatabaseList Views
  
  Database picking, creation, per-database settings, master-key and encryption-settings changes, and export to Files.
  
  ## Screen Map
  
  - On iOS/iPadOS, `DatabaseListView` owns the `EditMode` binding shared by its Edit button and list, and allows row moves only while editing. This keeps the long-press context menu from competing with the reorder gesture and leaving XCTest waiting for animations. macOS retains ordinary drag reordering without an Edit button.
  - `DatabaseListView.swift` takes

• AutoFillExtension/AGENTS.mdvia agents-md

  # AutoFillExtension
  
  This target provides password, passkey, one-time-code, and new-credential save/generate fulfillment through `AuthenticationServices`.
  
  ## Main Files
  
  - `CredentialProviderCoordinator.swift` is the platform-neutral core: request handling (passwords, passkeys, one-time codes, save/generate-password), vault access and unlock orchestration, credential matching, passkey assertion, and the `cleanup()` teardown lifecycle. It must stay free of UIKit/AppKit so both the iOS and macOS shells can h

• KeeForge/Services/Cloud/AGENTS.mdvia agents-md

  # Cloud Services
  
  This folder owns provider abstractions plus the cloud-backed open/save pipeline.
  
  ## Main Files
  
  - `CloudSyncModels.swift` describes cloud provider files and sync metadata used by the database list and sync coordinator. Optimistic concurrency uses a single opaque `rev` field; the provider-specific mapping (Dropbox rev, OneDrive cTag/eTag, WebDAV ETag, FTP SHA-256 of the file bytes → `rev`) happens in the this folder providers.
  - `CloudProvider.swift` and `CloudProviderRegistry.swift` def

• KeeForge/Services/Security/AGENTS.mdvia agents-md

  # Security Services
  
  This folder holds device-security integrations and secret-handling helpers outside the core models.
  
  ## Main Files
  
  - `BiometricService.swift` wraps LocalAuthentication flows used by the app and AutoFill. `quickUnlockPolicy` is what the app's explicit quick-unlock action evaluates: `.deviceOwnerAuthenticationWithBiometricsOrCompanion` in the native Mac app, `.deviceOwnerAuthenticationWithBiometrics` on iPhone and iPad. AutoFill always passes the biometric-only default. Neither accepts t

• AGENTS.mdvia agents-md

  # AGENTS.md
  
  Entry point for coding agents working on KeeForge. This file is intentionally brief; most useful guidance now lives in folder-local docs next to the code.
  
  ## High level guidance
  
  - Do not preserve backward compatibility unless required by the existing install base. Remove obsolete paths instead of adding compatibility layers, fallbacks, or migrations.
  - Choose the simplest implementation that fully meets the current requirements. Avoid speculative abstractions, configuration, and indirection.
  

• .github/AGENTS.mdvia agents-md

  # GitHub CI And Templates
  
  GitHub Actions workflows, issue/PR templates, funding config, and repo assets. Actions is one leg of CI; Xcode Cloud and a local release gate cover the rest.
  
  ## Workflows
  
  - `workflows/ios18-ui-regression.yml` — manual diagnosis of the five b60 UI failures on pinned Xcode 26.3, iOS 18.6, and iPhone SE (3rd generation). Select an immutable source ref, the five methods or their four complete classes, and one, three, or five repetitions. Optional `test_helpers_ref` overlays `Entry

• KeeForge/Extensions/AGENTS.mdvia agents-md

  # Extensions Folder
  
  Use this folder for small app-specific extensions and conformances that are shared across multiple views or models but do not justify their own feature folder.
  
  ## Current Files
  
  - `NavigationConformances.swift` keeps navigation state workable with the app's model types. `KPEntry` and `KPGroup` compare equal by ID alone, so `@Observable` does not notify when a property such as `DatabaseViewModel.searchResults` is reassigned entries that differ only in content, and a view fed from it kee

• KeeForge/Views/TOTP/AGENTS.mdvia agents-md

  # TOTP Views
  
  TOTP enrollment: QR scanning and the incoming-URL destination picker.
  
  ## Screen Map
  
  - `TOTPQRScannerSheet.swift` (whole file `#if os(iOS)`; VisionKit's `DataScannerViewController` does not exist on macOS, where the scan affordance is hidden) is the TOTP enrollment camera sheet: a `DataScannerViewController` representable restricted to QR symbology. Scanning starts from a deferred main-actor task with one retry (`startScanning()` fails before the scanner is on screen), a still-failing start s

• KeeForge/Views/Unlock/AGENTS.mdvia agents-md

  # Unlock Views
  
  Unlocking a single database: password and key-file entry, biometric affordances.
  
  ## Screen Map
  
  - `UnlockView.swift` owns password/key-file entry and biometric affordances for one database. On the native Mac app the biometric button and caption name whichever of Touch ID and Apple Watch can approve right now (`DatabaseViewModel.biometricLabel` / `biometricCaption`); it is only ever an explicit action, never a lifecycle auto-unlock. Its header padlock: `isSealed` starts shut, and `sealShutIf

• KeeForgeMacUITests/AGENTS.mdvia agents-md

  # KeeForge macOS UI Tests
  
  Smoke suite for the native macOS app (target `KeeForgeMacUITests`, scheme `KeeForgeMac`). Methodology and fixture guidance live in `../KeeForgeUITests/README.md`; this suite reuses the same fixtures and accessibility identifiers — preserve them in both places. `MacUITestCase` mirrors the iOS target's fixture-injection launch environment but uses clicks, `typeKey` keyboard shortcuts, and right-click context menus instead of taps/swipes.
  
  ## Test Classes
  
  - `MacSmokeUITests` — u

• KeeForge/Views/Settings/AGENTS.mdvia agents-md

  # Settings Views
  
  App settings, release education, support surfaces, and DEBUG-only developer tooling.
  
  ## Screen Map
  
  `../../ViewModels/AppSettingsViewModel.swift` owns app preference persistence and live effects, account loading/sign-out, and favicon cache clearing. `SettingsView` connects it to the current database session on appearance and session changes, then reloads values without replaying effects. Keep layout, platform presentation, and color conversion here; add preference effects to the model wit

• KeeForge/Views/Group/AGENTS.mdvia agents-md

  # Group Views
  
  Post-unlock group navigation, the group editor, and the group icon and move-destination pickers.
  
  ## Screen Map
  
  - `GroupListView.swift`, `EntryListView.swift`, `EntryDetailView.swift`, and `SearchView.swift` own post-unlock navigation, entry/group creation and deletion affordances, expired-entry list/detail warnings, enabled expiration timestamps, detail presentation, and the global read-only + unsaved-change surfaces shown while a database is open. On macOS the sidebar column cannot host pu

• KeeForge/Views/Cloud/AGENTS.mdvia agents-md

  # Cloud Views
  
  Cloud provider file browsing and the manual WebDAV and FTP connect forms.
  
  ## Screen Map
  
  - `WebDAVConnectView.swift` owns the manual WebDAV connect sheet (server address, username, password with `PasswordInputRow`, advanced unencrypted-HTTP opt-in, inline error, Connect/Cancel), backed by `WebDAVConnectViewModel`. Its nested sheet sizes itself to the form, so nothing is clipped today, but the `Form` still takes `macGroupedForm()` for the sheet rule above; each field takes `macFormFieldStyle(

• KeeForge/Models/AGENTS.mdvia agents-md

  # Models Folder
  
  This folder holds the data and logic that the rest of the app depends on. It is the most security-sensitive part of the repo.
  
  ## High-Risk Core
  
  The canonical high-risk file list (kept in sync with `AGENTS.md`): `KDBXParser.swift`, `KDBX3Parser.swift`, `KDBXWriter.swift`, `KDBXXMLSerializer.swift`, `KDBXCrypto.swift`, `KDBXOuterCipher.swift`, `OpaqueXMLNodes.swift`, `DatabaseDraft.swift`, `EntryEdit.swift`, `Entry.swift`, `Group.swift`, `EncryptedValue.swift`, `TOTPGenerator.swift`.
  
  - `KD

• KeeForge/AGENTS.mdvia agents-md

  # Shared App Sources
  
  The app-target map and cross-cutting flows live in [README.md](README.md). Read the owning subfolder's `AGENTS.md` before changing its code.
  
  ## Workflows
  
  - App and Mac targets use folder globs in `../project.yml`; `xcodegen generate` picks up new files. The `KeeForgeAutoFill` and `KeeForgeMacAutoFill` shared-source allow-lists must stay byte-identical. Edit both together and keep shared imports/APIs extension-safe; read `../AutoFillExtension/AGENTS.md` when changing extension-shared 

• KeeForge/ViewModels/AGENTS.mdvia agents-md

  # ViewModels Folder
  
  Observable app state and UI-independent workflow owners live here. Use Foundation/Observation, never SwiftUI (enforced by `ci_scripts/validate_architecture.py` during XcodeGen). Keep session policy, workspace state, form state, and workflow lifetimes separate; adding methods to the largest model is not the default.
  
  ## Main View Models
  
  - `DatabaseWorkspaceState.swift` owns selection, typed `DatabaseRoute` navigation, browsing mode, search activation, and menu request counters. `Databas

• KeeForge/Views/SearchAndTags/AGENTS.mdvia agents-md

  # SearchAndTags Views
  
  Search results and the tag browser.
  
  ## Screen Map
  
  - `MacQuickSearchView.swift` (`#if os(macOS)`) is the content of the menu bar quick-search panel (`../../Services/AppSupport/MacQuickAccessController.swift`) over `../../ViewModels/MacQuickSearchViewModel.swift`: a hand-off card for no database / locked (button → main window), or a search field plus `EntryRow` results whose selected row shows copy and Open in KeeForge buttons. Keys are handled by the panel's key monitor, not here, 

• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .claudedirectoryvia claude-code
• .agents/skills/prepare-release/SKILL.mdvia unspecified

  ---
  name: prepare-release
  description: Prepare the first KeeForge candidate for a new marketing version, including minor/major releases and patches or hotfixes to shipped versions. Prepare version and release notes, use the correct release branch, build and gate iOS, Mac App Store, and direct Mac artifacts, and hand off for soak. Use for a new version, version bump, release cut, patch, or initial TestFlight candidate; use respin-release for another candidate of the same version and ship-release for producti

• .agents/skills/keeforge-swiftui/SKILL.mdvia unspecified

  ---
  name: keeforge-swiftui
  description: Review KeeForge SwiftUI views for accessibility, state, navigation, and rendering problems, or apply that guidance to a requested UI change. Invoke explicitly during the adoption pilot.
  license: MIT
  ---
  
  # KeeForge SwiftUI
  
  Apply this skill to the requested views or diff. Review requests are read-only unless the user also asks for fixes. Do not expand a UI task into a repository-wide modernization.
  
  ## Start with the local contract
  
  Read the applicable folder guidance

• .agents/skills/test-audit/SKILL.mdvia unspecified

  ---
  name: test-audit
  description: >
    Assess KeeForge test quality, redundant coverage, and test-support complexity;
    audit a selected subsystem or apply an authoring checklist while changing tests.
    Use for test audits, consolidation, and pruning requests. Release readiness across
    changes belongs to pre-release-review; ordinary test authoring needs only the
    checklist, not an audit campaign.
  ---
  
  # KeeForge Test Audit
  
  Improve regression protection and reduce maintenance without losing distinct contra

• .agents/skills/triage-feedback/SKILL.mdvia unspecified

  ---
  name: triage-feedback
  description: Triage product feedback by inspecting its message and attachments, checking implementation and existing issues, classifying each concern, and drafting a reporter response. Use when reviewing a bug report, feature request, or support message.
  ---
  
  # Triage feedback
  
  Produce an evidence-backed disposition for the selected feedback. Preserve the distinction between what the reporter observed, what inspection establishes, and what still needs reproduction. Default to inves

• .agents/skills/pre-release-review/SKILL.mdvia unspecified

  ---
  name: pre-release-review
  description: >
    Statically review KeeForge changes since a shipped release for behavior risks,
    documentation inconsistencies, i18n gaps, and missing test coverage. Return a
    prioritized action list before candidate preparation, without running tests or
    writing a report. Use for a pre-release review or readiness audit.
  ---
  
  # KeeForge Pre-release Review
  
  Review changes before candidate preparation and return actionable findings in chat.
  This is a static review: do not run t

• .agents/skills/publish-app-store-version/SKILL.mdvia unspecified

  ---
  name: publish-app-store-version
  description: Prepare and publish an already-built KeeForge iOS or macOS version through the App Store Connect API using an API key. Use for uploaded-build selection, localized listing and release notes, reviewer attachments, release settings, and App Review staging or submission. Do not use for version bumps, release candidates, tags, compatibility gates, or archive creation; use prepare-release or respin-release for candidates, and ship-release for coordinated production

• .agents/skills/respin-release/SKILL.mdvia unspecified

  ---
  name: respin-release
  description: Replace an unshipped KeeForge candidate after a fix on an existing release branch. Keep the marketing version, advance the global build number, rebuild all three channels, repeat gates, and restart soak. Use for a respin or another RC of the same version; use prepare-release for a new marketing version and ship-release for production publication.
  ---
  
  # Respin a KeeForge candidate
  
  Read [the shared release contract](../prepare-release/references/shared.md) first.
  Confir

• .agents/skills/keeforge-github-issues/SKILL.mdvia unspecified

  ---
  name: keeforge-github-issues
  description: >
    Create, edit, comment on, close, reopen, classify, or change project fields for issues in
    KeeForge/KeeForge. Use whenever an action will mutate a KeeForge GitHub issue. Do not use for
    read-only issue searches or reviews that will not change GitHub state.
  ---
  
  # KeeForge GitHub Issues
  
  Apply this workflow before every GitHub issue mutation, including mutations requested as part of
  another workflow. Keep the mutation within the user's authorized scope.
  
  ##

• .agents/skills/ship-release/SKILL.mdvia unspecified

  ---
  name: ship-release
  description: Ship an accepted, soaked KeeForge candidate across iOS, Mac App Store, and direct Mac. Verify the recorded artifact identities and soak evidence, coordinate App Store review, create the shipped tag after approval and final go, publish the exact artifacts, and reconcile released issues. Use when asked to ship or promote a soaked build; never create a replacement candidate here.
  ---
  
  # Ship a KeeForge release
  
  Read [the shared release contract](../prepare-release/references

• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified
• .agentsdirectoryvia unspecified

ignorefile signals (1)