Kyle Isom 490db0599c Step 25: Real FIDO2 hardware key support. ...

HardwareFIDO2 implements FIDO2Device via go-libfido2 (CGo bindings to
Yubico's libfido2). Gated behind //go:build fido2 tag to keep default
builds CGo-free. Nix flake adds sgard-fido2 package variant.

CLI changes: --fido2-pin flag, unlockDEK helper tries FIDO2 first,
add-fido2/encrypt init --fido2 use real hardware, auto-unlock added
to restore/checkpoint/diff for encrypted entries.

Tested manually: add-fido2, add --encrypt, restore, checkpoint, diff
all work with hardware FIDO2 key (touch-to-unlock, no passphrase).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-24 12:40:46 -07:00

..

diff_test.go

Step 7: Remaining commands — remove, verify, list, diff.

2026-03-23 21:55:37 -07:00

diff.go

Step 17: Encryption core — passphrase-only, selective per-file.

2026-03-24 08:50:53 -07:00

e2e_test.go

Step 8: Polish — lint, clock abstraction, e2e test.

2026-03-23 22:03:53 -07:00

encrypt_e2e_test.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

encrypt_fido2_test.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

encrypt_fido2.go

Step 18: FIDO2 support with interface and mock.

2026-03-24 09:15:20 -07:00

encrypt_rotate_test.go

Step 24: DEK rotation.

2026-03-24 12:01:57 -07:00

encrypt_test.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

encrypt.go

Step 24: DEK rotation.

2026-03-24 12:01:57 -07:00

fido2_hardware.go

Step 25: Real FIDO2 hardware key support.

2026-03-24 12:40:46 -07:00

fido2_nohardware.go

Step 25: Real FIDO2 hardware key support.

2026-03-24 12:40:46 -07:00

garden_test.go

Merge branch 'worktree-agent-a0166844'

2026-03-23 23:44:30 -07:00

garden.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

hasher.go

Step 4: Garden core with Init, Open, Add and CLI commands.

2026-03-23 21:34:55 -07:00

list_test.go

Add list command to display all tracked entries

2026-03-23 21:51:01 -07:00

list.go

Add list command to display all tracked entries

2026-03-23 21:51:01 -07:00

lock_test.go

Step 21: Lock/unlock toggle commands.

2026-03-24 11:07:40 -07:00

lock.go

Step 21: Lock/unlock toggle commands.

2026-03-24 11:07:40 -07:00

locked_test.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

mirror_test.go

Add directory recursion for Add and mirror up/down commands.

2026-03-23 23:42:58 -07:00

mirror.go

Add locked files and directory-only entries.

2026-03-24 09:56:57 -07:00

prune_test.go

Step 15: CLI wiring, prune, and sgardd daemon.

2026-03-24 00:03:51 -07:00

prune.go

Step 15: CLI wiring, prune, and sgardd daemon.

2026-03-24 00:03:51 -07:00

remove_test.go

Step 7: Add remove command to stop tracking files.

2026-03-23 21:49:57 -07:00

remove.go

Step 7: Add remove command to stop tracking files.

2026-03-23 21:49:57 -07:00

verify_test.go

Add verify command to check blob store integrity.

2026-03-23 21:50:17 -07:00

verify.go

Add verify command to check blob store integrity.

2026-03-23 21:50:17 -07:00