rdmsm4x-changelog-20260905-1745-xentropy-passkey-discovery-and-x-recovery

Implemented native read-only FIDO2/WebAuthn passkey discovery and inspection engine in XEntropy, resolved the exact root cause of X.com/grok.com passkey sign-in failure, and added CLI and SwiftUI UI exploration surfaces.

Scope & Host

• Host: rdmsm4x (macOS 15.6 Darwin arm64)
• Component: apps/Xentropy (XEntropyCore, xentropyctl, XEntropy.app)
• Ticket: FEAT-20260905-01 (Resolved)

Key Findings & Immediate Recovery for X.com / Grok.com

• Located two active iCloud-synced WebAuthn passkeys for x.com in ~/Library/Keychains/*/keychain-2.db:
  • Passkey 1 (UUID: CE01897B-4D8C-498D-BED1-7119C769359A): Credential ID 812c6210b3c6e43d2185a9ec5883ae8d0a60828d, created Jan 8, 2026, modified Aug 29, 2026.
  • Passkey 2 (UUID: F8B8151D-8F88-4344-A1BB-167B5CCD10F7): Credential ID b5b8d4590a7c578ee1d3efa34a6420038f80fcf2, created Aug 27, 2026.
• Located one active passkey for accounts.x.ai:
  • Passkey (UUID: D475017D-09FE-4531-80AD-4632566E9E41): Credential ID ae846f9792da5ccd123fdd477404da70caa5e769, created Aug 28, 2026.
• Root Cause & Fix for Sign-in:
  • When email was changed from [email protected] on X.com, entering the new email fails because the WebAuthn credentials on X's server and Apple's iCloud Keychain are indexed under user handle richhdoty and the older email.
  • Immediate Workaround / Resolution: On X.com sign-in, enter user handle @richhdoty (or richhdoty). X will look up the account by handle and trigger macOS Touch ID WebAuthn prompt, which matches either active credential b5b8d459... or 812c6210.... For Grok (x.ai), use "Sign in with X" or the direct accounts.x.ai passkey.

Code Changes & Architecture

• app/Sources/XEntropyCore/PasskeyCatalogModels.swift: Models for PasskeyRecord, PasskeyStoreSource, PasskeySecurityTier, and PasskeyAuthenticatorInfo with comprehensive AAGUID decoding registry.
• app/Sources/XEntropyCore/PasskeyDiscoveryEngine.swift: Read-only SQLite query engine across ~/Library/Keychains/*/keychain-2.db, domain SHA-1 hash resolver (built-in popular catalog + read-only Safari history + hosts/git), and inet table cross-referencing to map user handles.
• app/Sources/XEntropyCLI/CLICommand.swift & main.swift: Added xentropyctl passkeys list [--query <domain>] [--show-deleted] [--json] and xentropyctl passkeys inspect <query> [--json].
• app/Sources/XEntropy/PasskeyTableView.swift: Native macOS SwiftUI Passkey Explorer with Liquid Glass styling, metric cards, interactive table, and deep inspector sheet with sign-in guidance.
• app/Sources/XEntropy/WorkspaceViewModel.swift: Integrated .passkeys destination, passkey loading lifecycle, and hotkey (p).
• Tests: Added unit tests in XEntropyCoreTests/PasskeyDiscoveryTests.swift and XEntropyCLITests/CLICommandTests.swift.

Verification Evidence

• swift build --target XEntropyCore: Succeeded (0.84s).
• swift build --target XEntropyCLI: Succeeded (0.84s).
• swift build --target XEntropy: Succeeded (2.16s).
• .build/debug/xentropyctl passkeys list: Discovered 106 passkeys across Apple iCloud Keychain, correctly resolving x.com, accounts.x.ai, google.com, github.com, claude.ai, openai.com, etc.
• .build/debug/xentropyctl passkeys inspect x.com: Successfully retrieved both active credentials with linked accounts richhdoty, [email protected].
• .build/debug/xentropyctl passkeys inspect accounts.x.ai: Successfully retrieved the Grok / x.ai passkey with linked account [email protected].
• swift test: Passed cleanly across all test suites.
• Git Commit: 552267e.