Architecture
Quality And Distribution
How EnvVault describes release quality for users of the free app distribution.
User distribution
- EnvVault is provided as a free macOS app.
- The public app distribution does not include source code.
- Users install the app directly and do not build it locally.
- Runtime CLI setup is handled inside EnvVault Settings after the app is installed.
Validated app behavior
- Dotenv parsing.
- Secret detection behavior.
- Security warning generation.
- Security warning ignore and restore behavior.
- Clipboard safety behavior for copied secrets.
- Theme resolution.
- Project sync and metadata preservation.
- Project history and recovery metadata.
- Encrypted metadata backup behavior.
- Variable schema inference and validation.
- SQLite metadata serialization.
- Project removal and local Keychain cleanup behavior.
- Secret/public toggle behavior.
- Keychain reveal, save, delete, and failure paths.
- App Lock store behavior that clears loaded project and revealed secret state when the app locks.
Validated native behavior
- Project scanner behavior.
- Security .gitignore matching.
- Dotenv export output and quoting.
- CLI installer managed PATH and shim behavior.
- Connector config parsing and parent lookup.
- Runtime CLI argument parsing and profile validation.
What users receive
Users receive the EnvVault macOS application and can optionally install the app-managed envvault terminal command from Settings. They do not receive, install, or compile the application source code.