Architecture

Quality And Distribution

How EnvVault describes release quality for users of the free app distribution.

User distribution

  • EnvVault is provided as a free macOS app.
  • The public app distribution does not include source code.
  • Users install the app directly and do not build it locally.
  • Runtime CLI setup is handled inside EnvVault Settings after the app is installed.

Validated app behavior

  • Dotenv parsing.
  • Secret detection behavior.
  • Security warning generation.
  • Security warning ignore and restore behavior.
  • Clipboard safety behavior for copied secrets.
  • Theme resolution.
  • Project sync and metadata preservation.
  • Project history and recovery metadata.
  • Encrypted metadata backup behavior.
  • Variable schema inference and validation.
  • SQLite metadata serialization.
  • Project removal and local Keychain cleanup behavior.
  • Secret/public toggle behavior.
  • Keychain reveal, save, delete, and failure paths.
  • App Lock store behavior that clears loaded project and revealed secret state when the app locks.

Validated native behavior

  • Project scanner behavior.
  • Security .gitignore matching.
  • Dotenv export output and quoting.
  • CLI installer managed PATH and shim behavior.
  • Connector config parsing and parent lookup.
  • Runtime CLI argument parsing and profile validation.

What users receive

Users receive the EnvVault macOS application and can optionally install the app-managed envvault terminal command from Settings. They do not receive, install, or compile the application source code.