bolt8, branch HEAD

readme: pre-release note

2026-04-18T02:47:37Z

commit ca737a5e3d1970d51078cee6cc10279351759870 parent 76f871d6ac71873c5aa078c1079dd03dad74ad01 Author: Jared Tobin Date: Sat, 18 Apr 2026 10:47:37 +0800 readme: pre-release note

test: add property-based tests

2026-01-25T07:01:20Z

commit 76f871d6ac71873c5aa078c1079dd03dad74ad01 parent cfae46878f0df71b63fc5d131b1fa11ef043131c Author: Jared Tobin Date: Sun, 25 Jan 2026 11:01:20 +0400 test: add property-based tests Add QuickCheck properties for: - Handshake round-trip with random valid keys - Encrypt/decrypt round-trip with random payloads (0-256 bytes) - decrypt_frame consuming exactly one frame - decrypt_frame_partial returning NeedMore on short buffers Uses fixed ephemeral keys for determinism. All 26 tests pass. Co-Authored-By: Claude Opus 4.5

meta: add README with usage examples

2026-01-25T06:55:30Z

commit cfae46878f0df71b63fc5d131b1fa11ef043131c parent 19c3972a136c164219c357c00ee359480fa8f01c Author: Jared Tobin Date: Sun, 25 Jan 2026 10:55:30 +0400 meta: add README with usage examples Co-Authored-By: Claude Opus 4.5

doc: add framing section to module header

2026-01-25T06:55:30Z

commit 19c3972a136c164219c357c00ee359480fa8f01c parent 90533d227b2bad3d44051fd709854651082266da Author: Jared Tobin Date: Sun, 25 Jan 2026 10:55:30 +0400 doc: add framing section to module header Co-Authored-By: Claude Opus 4.5

meta: add guidance on non-exhaustive pattern matches

2026-01-25T06:55:30Z

commit 90533d227b2bad3d44051fd709854651082266da parent 5e83d290b828178f360e53a1349f46bae09db625 Author: Jared Tobin Date: Sun, 25 Jan 2026 10:55:30 +0400 meta: add guidance on non-exhaustive pattern matches Co-Authored-By: Claude Opus 4.5

test: eliminate non-exhaustive pattern matches

2026-01-25T06:22:55Z

commit 5e83d290b828178f360e53a1349f46bae09db625 parent 991f84308a8597540ddbceb608b189ddfab42353 Author: Jared Tobin Date: Sun, 25 Jan 2026 10:22:55 +0400 test: eliminate non-exhaustive pattern matches Add expectJust/expectRight helpers that fail tests with clear messages instead of using partial 'let Just' patterns. Make flip_byte total by returning IO. All 22 tests pass with no pattern match warnings. Co-Authored-By: Claude Opus 4.5

meta: docs

2026-01-25T05:45:50Z

commit 991f84308a8597540ddbceb608b189ddfab42353 parent a2adc22ba86ac58835d283a9b1fdabcf0ad8ce31 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:45:50 +0400 meta: docs

doc: add IMPL4 plan

2026-01-25T05:44:29Z

commit a2adc22ba86ac58835d283a9b1fdabcf0ad8ce31 parent c890b7a7ca091a1a684253480c940a485b7af8e9 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:44:29 +0400 doc: add IMPL4 plan Co-Authored-By: Claude Opus 4.5

(IMPL4): Recoverable partial framing

2026-01-25T05:44:20Z

commit c890b7a7ca091a1a684253480c940a485b7af8e9 parent 73edeb4503c449cfdafd7a0817ce686b297960a8 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:44:20 +0400 (IMPL4): Recoverable partial framing Add FrameResult ADT and decrypt_frame_partial for non-blocking I/O: - NeedMore indicates how many additional bytes are required - FrameOk returns plaintext, remainder, and updated session - FrameError wraps decryption errors This enables incremental buffer processing without exceptions, useful for async/event-driven network code. Co-Authored-By: Claude Opus 4.5

test: add partial framing tests

2026-01-25T05:43:56Z

commit 42afaddad44020e841f7ec0468b6626b8ee0d913 parent 2b87813654c338fef2cb90795ec24d031615df20 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:43:56 +0400 test: add partial framing tests Test decrypt_frame_partial behavior: - Short buffer (< 18 bytes) returns NeedMore - Partial body (header complete, body incomplete) returns NeedMore - Full frame returns FrameOk with plaintext and remainder Co-Authored-By: Claude Opus 4.5

lib: add FrameResult and decrypt_frame_partial

2026-01-25T05:43:52Z

commit 2b87813654c338fef2cb90795ec24d031615df20 parent 4af1d8ed7eac2b14b8d4ada83183237f1625ac11 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:43:52 +0400 lib: add FrameResult and decrypt_frame_partial Add recoverable partial framing support: - FrameResult ADT with NeedMore, FrameOk, FrameError constructors - decrypt_frame_partial returns NeedMore when buffer incomplete - Useful for non-blocking I/O with incremental data arrival Co-Authored-By: Claude Opus 4.5

test: add bounds check to flip_byte helper

2026-01-25T05:43:27Z

commit 73edeb4503c449cfdafd7a0817ce686b297960a8 parent 4af1d8ed7eac2b14b8d4ada83183237f1625ac11 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:43:27 +0400 test: add bounds check to flip_byte helper Guard against out-of-bounds index to give a clear error message rather than crashing on BS.index. Addresses review finding from REVIEW-ebf75f4. Co-Authored-By: Claude Opus 4.5

doc: add IMPL3 plan

2026-01-25T05:39:17Z

commit 4af1d8ed7eac2b14b8d4ada83183237f1625ac11 parent ebf75f4de8031a369868aba3a94ef89b6a25422b Author: Jared Tobin Date: Sun, 25 Jan 2026 09:39:17 +0400 doc: add IMPL3 plan Co-Authored-By: Claude Opus 4.5

(IMPL3): Doc fixes and negative tests

2026-01-25T05:38:55Z

commit ebf75f4de8031a369868aba3a94ef89b6a25422b parent 81aae98a5edd7607f0f1074101fb1d16b5e7bcae Author: Jared Tobin Date: Sun, 25 Jan 2026 09:38:55 +0400 (IMPL3): Doc fixes and negative tests Fix Haddock comments for encrypt/decrypt to correctly describe key rotation timing (at nonce 1000). Add comprehensive negative tests verifying proper rejection of: - Wrong version byte in act2 - Wrong message length in act2 - Invalid MAC in act3/finalize - Short packets in decrypt Co-Authored-By: Claude Opus 4.5

test: add negative tests for handshake and decrypt

2026-01-25T05:38:33Z

commit d819f8f89352481cf227aeb18e3316a98a959074 parent dd8b8b337a890f37e8b98a478cffbcd4c469ea31 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:38:33 +0400 test: add negative tests for handshake and decrypt Add tests verifying rejection of malformed inputs: - act2 rejects wrong version byte - act2 rejects wrong message length - act3 rejects invalid MAC (corrupted ciphertext) - finalize rejects invalid MAC (corrupted ciphertext) - decrypt rejects short packet Co-Authored-By: Claude Opus 4.5

doc: fix key rotation comment (1000 not 500)

2026-01-25T05:38:28Z

commit dd8b8b337a890f37e8b98a478cffbcd4c469ea31 parent 81aae98a5edd7607f0f1074101fb1d16b5e7bcae Author: Jared Tobin Date: Sun, 25 Jan 2026 09:38:28 +0400 doc: fix key rotation comment (1000 not 500) Haddock for encrypt/decrypt incorrectly described key rotation timing. It occurs at nonce 1000, not "every 500 messages". Co-Authored-By: Claude Opus 4.5

(IMPL2): Document HKDF invariant

2026-01-25T05:35:53Z

commit 81aae98a5edd7607f0f1074101fb1d16b5e7bcae parent c3040f68303ff39e02a8b61074f02074662315d6 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:35:53 +0400 (IMPL2): Document HKDF invariant Add comment near mix_key explaining why HKDF.derive cannot return Nothing: the limit is 255 * hashlen (8160 bytes for SHA256), well above the 64 bytes requested. No behavioral changes.

doc: document HKDF length invariant in mix_key

2026-01-25T05:34:57Z

commit 4934458985c631128ddf96b891ca609a415fd4b6 parent c3040f68303ff39e02a8b61074f02074662315d6 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:34:57 +0400 doc: document HKDF length invariant in mix_key Explain why the Nothing case from HKDF.derive is impossible: HKDF limits output to 255 * hashlen (8160 bytes for SHA256), well above the 64 bytes requested. Co-Authored-By: Claude Opus 4.5

(IMPL1): Packet framing for decrypt

2026-01-25T05:32:09Z

commit c3040f68303ff39e02a8b61074f02074662315d6 parent c47ceec3852147cc3d10f1ca586ad37e8e4aace2 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:32:09 +0400 (IMPL1): Packet framing for decrypt Add decrypt_frame that returns the remainder after consuming one frame, enabling streaming decryption. Update decrypt to be strict, rejecting trailing bytes. Changes: - decrypt_frame :: Session -> ByteString -> Either Error (ByteString, ByteString, Session) - decrypt now wraps decrypt_frame and rejects non-empty remainder - Added tests for framing behavior

lib: add decrypt_frame, make decrypt strict

2026-01-25T05:31:34Z

commit b35594af9fe488daffa823331c81339e4f5c9a93 parent c47ceec3852147cc3d10f1ca586ad37e8e4aace2 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:31:34 +0400 lib: add decrypt_frame, make decrypt strict - decrypt_frame decrypts a single frame and returns the remainder, useful for streaming scenarios with buffered data - decrypt now rejects trailing bytes (wraps decrypt_frame) - added tests for framing behavior

doc: add CLAUDE.md and BOLT #8 spec

2026-01-25T05:15:43Z

commit c47ceec3852147cc3d10f1ca586ad37e8e4aace2 parent 7aea70c1f1c6c49f83a4537daedd6fee14ac0e3b Author: Jared Tobin Date: Sun, 25 Jan 2026 09:15:43 +0400 doc: add CLAUDE.md and BOLT #8 spec

doc: add AGENTS.md

2026-01-25T05:15:26Z

commit 7aea70c1f1c6c49f83a4537daedd6fee14ac0e3b parent 38eaaf17c0bdaf264f26f08e5bbb9efb9149956c Author: Jared Tobin Date: Sun, 25 Jan 2026 09:15:26 +0400 doc: add AGENTS.md

etc: add bolt8 spec

2026-01-25T05:14:56Z

commit 38eaaf17c0bdaf264f26f08e5bbb9efb9149956c parent 7a30233a1417f34e9dae47455f2332bbf6d5b7f1 Author: Jared Tobin Date: Sun, 25 Jan 2026 09:14:56 +0400 etc: add bolt8 spec

lib: basic module header

2026-01-12T10:04:54Z

commit 7a30233a1417f34e9dae47455f2332bbf6d5b7f1 parent 6a8fe194e7148d95adcc5c803c7bc52f5a0b60af Author: Jared Tobin Date: Mon, 12 Jan 2026 14:04:54 +0400 lib: basic module header

lib: general refactor

2026-01-12T09:54:20Z

commit 6a8fe194e7148d95adcc5c803c7bc52f5a0b60af parent a2df1e41a98a39eea2adbd5253932ed187769416 Author: Jared Tobin Date: Mon, 12 Jan 2026 13:54:20 +0400 lib: general refactor

bench: skeleton

2026-01-11T10:16:52Z

commit a2df1e41a98a39eea2adbd5253932ed187769416 parent 29d72235097657273919adcf73f4030d6d7a9b7d Author: Jared Tobin Date: Sun, 11 Jan 2026 14:16:52 +0400 bench: skeleton

lib: minor refactoring

2026-01-11T07:29:01Z

commit 29d72235097657273919adcf73f4030d6d7a9b7d parent a82df07d3cf43cb46d609887b555e3cc587ebb58 Author: Jared Tobin Date: Sun, 11 Jan 2026 11:29:01 +0400 lib: minor refactoring

lib: basic haddock examples

2026-01-11T07:22:39Z

commit a82df07d3cf43cb46d609887b555e3cc587ebb58 parent 8f15422892a73ba5f44b47b530ccacccb25a7a1d Author: Jared Tobin Date: Sun, 11 Jan 2026 11:22:39 +0400 lib: basic haddock examples

lib: fleshed-out skeleton

2026-01-11T07:18:35Z

commit 8f15422892a73ba5f44b47b530ccacccb25a7a1d parent 9122d67da4937c6146bdb33755068b75f0d3383f Author: Jared Tobin Date: Sun, 11 Jan 2026 11:18:35 +0400 lib: fleshed-out skeleton

flake: update

2026-01-11T06:27:15Z

commit 9122d67da4937c6146bdb33755068b75f0d3383f parent 5bed2126efb3a6d91224b05a6395ddc2e566470b Author: Jared Tobin Date: Sun, 11 Jan 2026 10:27:15 +0400 flake: update

lib: update deps

2026-01-11T05:37:24Z

commit 5bed2126efb3a6d91224b05a6395ddc2e566470b parent 5c168f3f037616a3c64986d82bb5b0c4f0317d2b Author: Jared Tobin Date: Sun, 11 Jan 2026 09:37:24 +0400 lib: update deps

lib: initial commit

2026-01-11T05:35:45Z

commit 5c168f3f037616a3c64986d82bb5b0c4f0317d2b Author: Jared Tobin Date: Sun, 11 Jan 2026 09:35:45 +0400 lib: initial commit