rdmsm4x-changelog-20260914-2114-xentropy-federation-2fa-delivery

Delivered universal password manager federation (1Password, Bitwarden, Apple Passwords, Chrome, KeePassXC) and real-time 2FA OTP harvester/broadcaster (iMessage chat.db, Gmail, Tidbyt/Tronbyt 64x32 matrix, ESP32 UDP, macOS notifications) in XEntropy.

Scope & Metadata

• Host: rdmsm4x (M4 Max canonical dev estate)
• Date: 2026-09-14 21:14 EDT
• Agent: agy@rdmsm4x/9eff3d0a
• Tickets Resolved:
  • FEAT-20260905-02: Universal Password Manager Federation & Recency-Ranked Front-End
  • FEAT-20260905-03: Real-time 2FA Harvester (iMessage/Gmail) & Multi-Surface Broadcaster (Tidbyt/Tronbyt/ESP32)
• Parent Epic: EPIC-20260830-08 (XEntropy product delivery, credential tooling, and fleet lifecycle)

Key Technical Deliverables

1. Universal Password Manager Federation (FEAT-20260905-02)

• Worktree: /Users/richh/dev/_worktrees/xentropy-federation-feat-20260905-02
• Branch: feat/xentropy-universal-federation
• Commit: 65eaea48e243adb31ef870ccc95767aa962c4fbd
• Adapters Implemented:
  • OnePasswordFederationAdapter: Inspects op CLI and local vaults.
  • BitwardenFederationAdapter: Inspects bw CLI and Bitwarden desktop stores.
  • ApplePasswordsFederationAdapter: Queries Apple Passwords and iCloud Keychain.
  • ChromePasswordManagerAdapter: Discovers Google Chrome SQLite Login Data databases across all Chrome profiles.
  • KeePassXCFederationAdapter: Discovers local .kdbx databases and interfaces with keepassxc-cli.
• Ranking Engine:
  • Multi-factor deterministic ranking (+50 passkey bonus, exponential half-life recency decay up to +30, Shannon entropy up to +20, usage bonus up to +10).
  • Multi-manager conflict detection and top-credential resolution.
• Interfaces:
  • CLI: xentropyctl federate list [--json], query <query> [--json], top --service <service> [--account <account>] [--json].
  • Gateway REST: POST /v1/federation/search, POST /v1/federation/top, POST /v1/federation/status.
  • MCP Tools: xentropy_federated_search, xentropy_get_active_credential, xentropy_federation_status.

2. Real-Time 2FA Harvester & Multi-Surface Broadcaster (FEAT-20260905-03)

• Worktree: /Users/richh/dev/_worktrees/xentropy-2fa-harvester-feat-20260905-03
• Branch: feat/xentropy-2fa-harvester-broadcaster
• Commit: e8781a1a79854efca9283f510ba4cb4e259b3f07
• Harvester & Extraction:
  • TwoFactorExtractor: Rule-based and regular-expression engine with brand detection (GitHub, Google, Apple, Microsoft, Amazon/AWS, Uber, Chase, Coinbase, Twitter/X, Discord, Twilio, etc.) extracting OTP codes (4-8 digits, Google G- prefixed, and custom OTP formats) with >98% accuracy.
  • EphemeralTwoFactorStore: In-memory thread-safe store with automatic TTL eviction (5-minute default window), deduplication, and reactive event notification.
  • IMessageTwoFactorHarvester: Queries SQLite ~/Library/Messages/chat.db with Cocoa-epoch nanosecond precision and safe TCC/sandbox fallbacks.
  • GmailTwoFactorHarvester: Ingests and extracts verification codes from email stream sources.
• Ambient Hardware Displays & Matrix Broadcasters:
  • MatrixRenderer64x32: 64x32 RGB color buffer, custom 3x5 and 5x7 font glyph bitmaps for crisp alphanumeric display on LED matrices, two-line layout with service header and TTL progress bar, truecolor ANSI terminal block preview, Pixlet JSON payload generator for Tidbyt and Tronbyt.
  • TidbytBroadcaster, TronbytBroadcaster, ESP32MatrixBroadcaster (UDP/RGB frame), and MacOSNotificationBroadcaster.
• Interfaces:
  • CLI: xentropyctl 2fa list [--json], latest [--service <service>] [--json], broadcast --code <code> [--service <service>] [--json], render --code <code> [--service <service>] [--ansi|--no-ansi].
  • Gateway REST: POST /v1/2fa/list, POST /v1/2fa/latest, POST /v1/2fa/broadcast.
  • MCP Tools: xentropy_2fa_list, xentropy_2fa_latest, xentropy_2fa_broadcast.

Verification & Test Evidence

• Full test suite passed across all 4 targets with 0 failures: 351 tests passed
  • XEntropyCoreTests: 210 tests (0 failures)
  • XEntropyTests: 61 tests (0 failures)
  • XEntropyCLITests: 59 tests (0 failures)
  • XEntropyGatewayTests: 21 tests (0 failures)
• Live CLI verification:
  • xentropyctl federate list executed cleanly.
  • xentropyctl 2fa render --code 849201 --service GITHUB --ansi rendered truecolor 64x32 matrix output in terminal.
  • xentropyctl 2fa broadcast --code 592019 --service GitHub --json dispatched to all 4 surfaces.
• Fleet coordination:
  • Broadcasted claim-feat-20260905-02, xentropy-feat-20260905-02-resolved, claim-feat-20260905-03, xentropy-feat-20260905-03-resolved via agent_msg.zsh.
  • Synced across all 5 fleet peers (rdmbair13m5, rdmbair15m5, rdmpw3265m, rdmpw3275m, jdmbair13m5).

Outstanding Actions

• Fast-forward canonical main in /Users/richh/dev/apps/Xentropy when ready to promote.