Development updates

What we've been building

Short notes on how enveigh is coming together, newest first.

June 9, 2026

Black & white, and it follows your system

enveigh is now strictly monochrome and defers entirely to your macOS appearance — Light or Dark, no custom color scheme to fight your desktop. The only hue left is red, reserved for danger (an exposed or overdue key). The brand mark and app icon went black-and-white to match.

Why bother? A secrets tool should feel calm and trustworthy, not loud. Removing color removed a whole class of fiddly theming and let the content carry the weight.

Design
June 8, 2026

Run with your environment — without the keys

The command runner is now a right-hand panel that slides into the main window (⌘R), instead of a separate floating window. Pick an environment, type a command, and it runs with the secrets injected as env vars — with every value redacted from the output and nothing written to disk.

It auto-selects the environment you're viewing and drops your cursor straight in the command field. The whole idea: the secure path is the fast path.

Feature
June 7, 2026

A local broker, not a daemon

Agents reach the vault over a token-gated UNIX-domain socket that only exists while the vault is unlocked — no always-on network service, no port to scan. Each client gets a scoped token, and scope is enforced on the broker side so a client can't reach outside the environment you granted it.

Release builds run under the Hardened Runtime and drop get-task-allow, so another process can't attach and scrape decrypted values from memory. Updates ship signed via Sparkle.

Security