rdmbair15m5-changelog-20260829-2045-xentropy-ecs0lib-integration

Integrated the newly built ecs0lib modular framework into XEntropy.app with zero-cleartext Shannon entropy scanning, configurable scan locations, Apple Passwords static reference research, real-time security alerts, RFC 4180 CSV export, and responsive UI scaling.

1. Scope & System Environment

• Host: rdmbair15m5 (MacBook Air 15" M5, Apple Silicon arm64, macOS 27.0)
• Target Application: rdmsm4x:~/dev/apps/xentropy (XEntropy.app)
• Shared Framework: rdmsm4x:~/dev/lib/ecs0lib (ecs0lib v1.0.0, Swift 6 Strict Concurrency)
• Bundled Binaries: /Applications/XEntropy.app, /Applications/updateRoo.app, /Applications/AINetNode.app

2. Changes & Deliverables

A. ecs0lib Framework Integration (Package.swift)

• Linked ecs0lib modular framework (ECS0UI, ECS0Permissions, ECS0System, ECS0AppKit, ECS0Networking, ECS0Agentic, ECS0AI) into XEntropyCore and XEntropy.
• Set platform deployment target to macOS(.v15).

B. Shannon Entropy & Zero-Cleartext Scanning Engine (XEntropyCore)

• ShannonEntropyCalculator.swift: Exact bit-per-character Shannon entropy $H(X) = -\sum P(x) \log_2 P(x)$, classification thresholds (Low, Medium, High, Critical), and sliding window token isolation.
• SecretPatternMatcher.swift: Regex token patterns for Anthropic (sk-ant-api03...), OpenAI (sk-...), AWS Access Keys (AKIA...), GitHub PATs (ghp_...), Slack tokens, Stripe keys, PKI/SSH private keys, and JWTs.
• Non-reversible cryptographic SHA-256 fingerprinting + masked previews (sk-ant...8f9e); cleartext secrets are never stored or logged.
• ScannerEngine.swift: Actor-isolated multi-target scanner auditing Apple Notes, user dev repositories (~/dev), git working tree diffs, web endpoints, and password manager CLI status.
• ScanModels.swift: Models for ScanTarget, ScanConfiguration, DiscoveredSecretItem, SecretStatus, and ScanTelemetry.

C. Apple Passwords CLI Reference & Quarantine Architecture

• Staged in imports/reference-apple-passwords/:
  • README.md: Research on macOS 15+ standalone Passwords app, Keychain Services API, and CSV schemas.
  • MANDATORY SAFETY FLAG: [FROZEN REFERENCE POINT - DO NOT AUTO-UPDATE] explicitly prohibiting automated upstream updates without manual multi-agent audits.
  • ApplePasswordsCLIReference.swift: Safe static reference parser.
  • audit_metadata.json: Audit trail and security invariants.

D. Real-Time Actionable Security Notifications & Rotation Tracking

• SecurityNotificationService.swift: Tracks credential hash baselines across scans, detects API key rotations, unstaged git diff secret additions, and plaintext secrets, dispatching macOS notifications and recording entries to ECS0ActivityLogger.

E. RFC 4180 CSV Export

• CSVExporter.swift: Standardized CSV generator with proper character escaping for Key ID, Service / Name, Key Type, Masked Value / Hash, Entropy Score, Source Location, Rotation Timestamp, Status, Risk Level.

F. Responsive UI & Liquid Glass Experience

• ResponsiveScaleContainer: Keyboard shortcuts Cmd + (Zoom In), Cmd - (Zoom Out), Cmd 0 (Reset to 100%), scaling seamlessly up to 200%.
• Dynamic Appearance switcher (ECS0ThemeMode: System Auto, Dark, Light) and 4 Terminal Color Profiles (Antigravity Neon, Codex Obsidian, Warp Cyber, Tyrell LED Loom).
• ScannerView.swift: Live entropy throughput chart (BandwidthLiveChart), progress indicators, target toggles, and secrets inspector.
• SettingsView.swift: Pre-flight TCC permissions prober (PermissionProber), entropy threshold sliders, and theme pickers.
• AppIcon.icns: Vector AppIcon rendered with AppIconGenerator and embedded into .app bundles.

3. Verification & Test Evidence

• XEntropyCoreTests: 34 / 34 passing tests (100% green).
• XEntropyTests: 23 / 23 passing tests (100% green).
• Total Test Suite: 57 / 57 passing tests under Swift 6 strict concurrency.
• Build & Packaging: Executed build_and_package_apps.zsh — built, packaged, and code-signed /Applications/XEntropy.app, /Applications/updateRoo.app, and /Applications/AINetNode.app.