rdmsm4x-changelog-20260905-1732-xentropy-desktop-auth-and-multi-key-discovery

Zero-friction desktop auth delegation to 1Password & Apple Keychain, multi-source API key discovery across dotfiles and process environments, and GitHub Desktop liquid glass UI styling for XEntropy.

Scope

• Host: rdmsm4x (macOS 15.6 Darwin arm64)
• Applications: apps/Xentropy (xentropyctl, XEntropy.app, XEntropyCore)
• Tickets: FEAT-20260905-30, FEAT-20260905-31, UI-20260905-01 (all resolved)

Exact Files Touched

• apps/Xentropy/app/Sources/XEntropyCore/DelegatedPresence.swift (New: DelegatedAgentPresenceToken, FileDelegatedAgentPresenceTokenStore, DesktopAuthCoordinator, DesktopAuthDiagnostics)
• apps/Xentropy/app/Tests/XEntropyCoreTests/DelegatedPresenceTests.swift (New: token lifecycle, validation, expiration, and hardware token diagnostic tests)
• apps/Xentropy/app/Sources/XEntropyCore/LocalSecretAuthority.swift (Updated: MultiFileEnvironmentSecretAuthority for ~/.secrets/*.env, ProcessEnvironmentSecretAuthority, CompositeLocalSecretAuthority)
• apps/Xentropy/app/Sources/XEntropy/APIKeyTableView.swift (Updated: APIKeyFilterPill toggle bar, search input, StatusTagPill multi-tag badges, and enhanced Notes column with tooltip)
• apps/Xentropy/app/Sources/XEntropy/CredentialCatalogClient.swift (Updated: dynamic injection of multi-source developer keys, status tag resolution, and source labeling)
• apps/Xentropy/app/Sources/XEntropy/UIConfiguration.swift (Updated: case githubLiquid = "github-liquid" with Base16 dark mode and clean light mode)
• apps/Xentropy/app/Sources/XEntropyCLI/CLICommand.swift & CLIOutput.swift (Updated: auth status, auth delegate, auth tokens list, auth tokens revoke subcommands)
• apps/Xentropy/app/Sources/XEntropyCLI/main.swift (Updated: standalone auth subcommands dispatch)
• apps/Xentropy/app/Tests/XEntropyTests/UITemplateTests.swift (Updated: added github-liquid template assertions)
• apps/Xentropy/app/Tests/XEntropyCLITests/CLICommandTests.swift (Updated: auth CLI parsing assertions)
• apps/Xentropy/docs/product/PRD-zero-friction-desktop-auth-and-1password-delegation.md
• apps/Xentropy/docs/product/PRD-comprehensive-api-key-discovery-and-state-matrix.md
• apps/Xentropy/docs/product/PRD-ui-ux-mockup-recovery-and-variant-system.md
• dist/XEntropy.app (Rebuilt Universal2 x86_64 arm64)

Commands Run

• swift test --package-path app (All unit tests passed across XEntropyCore, XEntropy, XEntropyCLI)
• app/.build/out/Products/Debug/xentropyctl auth status (Verified 1Password IPC and biometric detection)
• app/.build/out/Products/Debug/xentropyctl auth delegate --agent codex --duration 2h --scope "ai-providers,git" (Verified token issuance)
• app/.build/out/Products/Debug/xentropyctl auth tokens list (Verified token registry listing)
• app/.build/out/Products/Debug/xentropyctl auth tokens revoke --id <id> (Verified revocation)
• ./script/build_and_run.sh --verify (Verified Universal2 bundle generation)
• ticket resolve FEAT-20260905-30, FEAT-20260905-31, UI-20260905-01
• git commit -m "feat(auth,keys,ui): zero-friction 1Password delegation, multi-source key discovery, and GitHub liquid glass UI" (Commit 7f1648d)

Verification Evidence

• Full test suite output: 0 failures across all modules.
• Live 1Password IPC status detected (1Password IPC active · Biometric hold-down).
• Universal2 binary verification: architectures ok: x86_64 arm64.

How to Undo

• Revert Git commit: git revert 7f1648d in /Users/richh/dev/apps/Xentropy.
• Remove tokens: rm -rf ~/.xentropy/delegated_tokens.json.

Outstanding Owner Actions

• None required. All deliverables built, packaged, and verified.