Pure Vault

Changelog

One entry so far, and it is honest about its status: everything below exists and builds locally. No signed, notarized public installer has been published.

Unreleasedlocal prerelease

Added

  • Native desktop shell: platform application menus, a command palette (Cmd/Ctrl+K), right-click context menus, stacked toasts, and a hidden-inset macOS title bar. One shared action registry drives every surface.
  • macOS-only launch scope: a universal release candidate and a local packaging script. Other platform package definitions remain deferred development work, not available products.
  • Local Wails desktop shell with a Go import engine, React reading interface, and bundled Source Sans 3 typography.
  • Shared viewers for messages, notes, contacts, calendars, media, bookmarks, and files.
  • Content-aware adapters with explicit Preview and Experimental evidence tiers for common portable exports and Apple Messages.
  • Read-only file, directory, and non-extracting ZIP sources with one bounded manifest reused across format detection.
  • Switchable memory-only workspaces, viewport-derived paging with totals, opaque media previews, import diagnostics, and explicit normalized export.
  • Fictional all-viewer sample, accessibility coverage, hostile-input tests, and local build documentation.
  • Opt-in Remember opened backups: a local, capped list of reopen pointers holding the path, detected format, and counts, never content. Entries can be forgotten one at a time, the whole list is deleted when you switch the setting off, and reopening runs through the normal import pipeline.
  • Optional local app password: a screen-lock overlay, encrypted remembered-backup pointers while it is on, idle relock, and optional YubiKey HMAC-SHA1 slot 2 as a second factor. Original export files stay unencrypted.
  • Inspired-by conversation views for WhatsApp, iMessage, Messenger, SMS, Telegram, Signal, and Pure Vault. The choice is stored per backup as a path hash.
  • A one-time official-package license on this site. Source access is private. Contact is contact@purevault.app.

Changed

  • Startup JavaScript shrank and production builds ship a tightened content-security policy; supported macOS is 11 or newer. Cold start and memory now have recorded baselines with derived budgets.
  • Renamed the project from Archive Hearth to Pure Vault across the application, the release artifacts, and this site. The name remains provisional and is not a cleared trademark.
  • Page queries no longer sort per request: each collection's order is computed once at import, so paging deep into a 50,000-message thread costs microseconds and search no longer allocates lowered copies of every field.
  • Conversations open at their recent tail in one call and land on the newest message; the message stream is virtualized, keeping the interface responsive at any history depth. Format detection probes run concurrently with identical results.

Fixed

  • A full-project review pass repaired real-world parsing across the message adapters (iOS WhatsApp punctuation marks, Meta text encoding, Telegram single-chat exports, Android group MMS threading, Apple attachment paths), calendar and contact edge cases, and one-bad-file failures that used to discard whole categories.
  • Timestamps order chronologically across mixed timezones, export destinations and media paths resist path tricks, and the interface can no longer mix one conversation's messages into another.

Verification

  • macOS ARM64: source tests, race tests, compiler checks, a 13 MB native application build, ad-hoc signature verification, launch smoke, and a no-open-socket check passed on 2026-08-19.
  • macOS ARM64: the full local acceptance set (frontend check, test, and build, plus go test, race tests, and go vet) re-passed on 2026-08-20 after the review-fix and performance work.
  • Current release: macOS only. Only macOS downloads are currently available; other platforms are deferred.

No signed, notarized public installer has been published. Source is on GitHub. Official packages, when a version tag exists, are on GitHub Releases. Unsigned packages are not a substitute for a notarized build.