Passage refactor (#8)

* Add work base from /init + initial prompt

* extract display and list utilities to lib

* extract file utils, prompt and validation

* update cache

* extract recipients functions

* extract retry operations

* make verbose a boolean, not a ref

* extract comment input functions

* extract secret helpers

* extract helpers for recipients

* composable checks pt1

* cleanup

* make lib DRYer

* add missing tests

* lwt refactor pt1

* lwt refactor pt2

* abstract and share editor tools

* update editor error messages

* refactor shell control to use devkit+bos

* general form cleanup

* always use bos to run commands

* remove serena mcp files

* make compiler happy in gh CI

* update completions

* don't use List.is_empty in secret.ml

* remove List.is_empty usages

* fix cmdliner version declaration

* quote filenames in age commands

* cleanup after PR review

* update cmdliner dep version

* lib: move helpers to util module

Author: thatportugueseguy

CLAUDE.md

@@ -0,0 +1,59 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Passage is a command-line tool for storing and managing access to shared secrets using age encryption. It supports multiple recipients, group management, and template substitution.
+
+## Essential Commands
+
+### Development Workflow
+- `make build` - Build the project (uses `dune build`)
+- `make test` - Run all tests (uses `dune runtest`)
+- `make fmt` - Format code with OCamlformat (uses `dune fmt --auto-promote`)
+- `make promote` - Run tests and promote expected outputs
+- `make clean` - Clean build artifacts
+
+### Testing
+- Tests use cram-style testing in `.t` files
+- Run single test: `dune runtest tests/command_name.t`
+- Test the compiled binary: `./_build/default/bin/main.exe <command>`
+- Test fixtures in `tests/fixtures/` with sample keys and secrets
+- Use `make promote` when test outputs need updating
+
+### Dependencies
+- Requires `age` encryption tool: `apt install age`
+- Install OCaml dependencies: `opam install . --deps-only --with-dev-setup`
+
+## Code Architecture
+
+### Structure
+- **bin/main.ml**: Main CLI entry point with all commands organized as modules (Create, Edit, Get, etc.)
+- **lib/**: Core library modules:
+  - `storage.ml`: Secret storage, encryption/decryption, recipient management
+  - `config.ml`: Configuration and environment variables
+  - `secret.ml`: Secret data structures and parsing
+  - `template.ml` + related files: Template substitution system with `{{{secret_name}}}` syntax
+  - `age.ml`: Age encryption wrapper
+
+### Key Patterns
+- CLI commands are modules in main.ml using cmdliner for argument parsing
+- Library modules provide core functionality, main binary orchestrates CLI calls
+- Storage abstraction handles all filesystem operations
+- Template system supports both single-line and multi-line secrets with comments
+
+### Code Style
+- OCamlformat 0.26.2 with 120-character line length.
+- 2-space indentation, snake_case for functions/variables
+- Error handling via Result types or descriptive exceptions
+- Module names in PascalCase (e.g., `Secret_name`, `Edit_cmd`)
+
+## Task Completion
+
+When completing tasks:
+1. Run `make fmt` to format code
+2. Run `make build` to ensure compilation
+3. Run `make test` to verify tests pass
+
+The project requires age encryption tool and follows established CLI command patterns in main.ml.

bin/dune

@@ -2,6 +2,4 @@
  (name main)
  (public_name passage)
  (package passage)
- (libraries cmdliner devkit lwt.unix passage qrc re2 unix)
- (preprocess
-  (pps lwt_ppx)))
+ (libraries cmdliner devkit passage qrc re2 unix))