TotumVault v2.0.0

TotumVault v2.0.0 — Major Milestone Release

TotumVault v2.0.0 is a milestone release delivering robust offline background notifications, dual-calendar support, strict air-gap isolation, and comprehensive system hardening. This release consolidates all major features developed from v1.3.2 through v2.0.0 into a unified, production-grade local-first security platform.

---

What's New in TotumVault 2.0.0

1. Real Offline Android Document Expiry Notification Pipeline

• Native Background Scheduling: Full background alarms powered by Android AlarmManager and DocumentReminderReceiver with persistent broadcast filters (BOOT_COMPLETED, MY_PACKAGE_REPLACED, TIMEZONE_CHANGED, TIME_SET, DATE_CHANGED).
• Resilient Multi-Path SQLite Resolution: Automatically resolves vault.sqlite across context.dataDir (Tauri v2 Android app data), applicationInfo.dataDir, subdirectories, and shallow recursive fallback.
• Concurrent SQLite WAL Mode: OPEN_READWRITE or ENABLE_WRITE_AHEAD_LOGGING eliminates lock contention against the Rust backend.
• DST-Safe Countdown: Robust day-difference calculations (Math.round) ensuring exact milestone alerts (5, 4, 3, 2, 1 days before, expiry day, and post-expiry notice).
• Test Alarm: 30-second scheduled test alarm (Test 30s Alarm) in Document Settings to verify background wakeups and delivery on physical devices and emulators.
• Contextual In-App Permissions: User-friendly permission explanation dialog (NotificationPermissionPrompt) triggered upon enabling expiry alerts.
• Zero-Leak Diagnostic Logging: Safe diagnostic logging (REMINDER: prefix) with zero sensitive data or credential leakage.

2. Collision-Aware Dual Calendar System (Gregorian AD + Nepali Bikram Sambat BS)

• Bidirectional Offline Conversion: Accurate offline conversion between Gregorian (AD) and Nepali Bikram Sambat (BS) calendars.
• Responsive UI Across All Viewports: Zero horizontal overflow across 320px–1920px screens with full touch-target compliance (44px–48px minimum hit areas).
• Dynamic Month Lengths: Automatically handles variable BS month lengths based on astronomical and historical Nepali calendar tables.
• Integrated Expiry Tracking: Dual AD/BS date presentation across Documents & Bills, Software Licenses, and item forms.
• Customizable Preference: User setting to select default calendar format (Gregorian AD or Nepali BS) across the entire application.

3. Application-Level Air-Gap Mode & Network Isolation

• Strict Network Isolation: Centralized network policy service blocking outbound network requests when Air-Gap Mode is enabled.
• Early Defense-in-Depth Gate: Intercepts global fetch calls synchronously before network dispatch.
• Verification Command: Built-in verification test (test_air_gap_blocking) guaranteeing zero network bytes transmitted.
• Live State Synchronization: Real-time event notifications (totumvault://air-gap-changed) across desktop and mobile.

4. Complete Production Preferences Redesign

• 7 Dedicated Categories: General, Appearance, Security, Privacy & Network, Documents & Expiry, Data Management, and Updates.
• Desktop Sidebar Navigation: Instant section switching with real-time status badges.
• Mobile-Optimized Segmented Navigation: Compact overview tabs and persistent vault status.
• Single-Source Updates: Unified update toggle and dynamic authoritative app version resolution bound directly to get_app_version().

5. Unified Single Documents Search & Navigation

• Authoritative Toolbar: Context-aware global header unmounting in Documents view, establishing a single authoritative search and filter toolbar.
• Quick Keyboard Access: Focus search with Ctrl+K / ⌘K and clear/blur with Escape.

6. Hardened Multi-Tier Secure Clipboard Engine

• Concurrency-Safe Auto-Clear: Atomic mutex serialization (op_mutex) and monotonic generation reservation (pending_generation) prevent race conditions.
• Android 13+ Privacy: Android native bridge support with EXTRA_IS_SENSITIVE flag preventing clipboard previews and cloud sync.
• Cryptographic HMAC Session Tracking: Native Rust clipboard tracking with ZeroizeOnDrop ensuring zero plaintext secret retention.
• Multi-Tier Fallback: Graceful fallback across Android native, Tauri plugin, Web API, and DOM execCommand.

7. Production Codebase Hardening & Official Portal

• Official Portal Branding: Updated Lock Screen to link directly to totumvault.app.
• Codebase Excellence Pass: Removed redundant comments, placeholder text, and vibe-coded artifacts across 43 codebase files.
• Preserved Core Invariants: Retained genuine technical comments documenting Android Keystore BIOMETRIC_STRONG encryption, HMAC session tracking, and calendar math.

---

Bug Fixes & Reliability Improvements

• Android In-Place Upgrade & Signature Consistency: Resolved Android installation failure (INSTALL_FAILED_UPDATE_INCOMPATIBLE / "package conflicts with an existing package of the same name") caused by ephemeral keystore generation in CI. Replaced ephemeral keys with an official permanent 4096-bit RSA release keystore (scripts/android/totumvault-release.jks), automated 4-byte zipalign, and synced monotonic versionCode (2000000). (Note: Users upgrading from an older ephemeral release need to export a quick vault backup in Settings -> Data Management, reinstall once, and restore; all future updates will install in-place seamlessly without any conflict).
• Mobile Status Bar & Notch Safe Areas: Applied dedicated edge-to-edge safe area insets (pt-safe pl-safe pr-safe) to Document Library, Scanner, Viewer, and Security Health dashboards, preventing top action buttons and headers from overlapping mobile device status bars or teardrop notches.
• Documents Header Responsiveness: Prevented title truncation on small mobile screens and gracefully adapted action buttons across narrow viewports.
• Android Scheduled Notification Delivery: Resolved issue where scheduled alarms could not locate vault.sqlite in context.dataDir.
• Documents Duplicate Search Input: Resolved layout defect where global vault search and document library search rendered concurrently.
• Secure Clipboard Concurrency: Hardened auto-clear timers and generation tracking for atomic clipboard purging.
• Version Reporting Consistency: Eliminated hardcoded version fallback strings across all settings and navigation components.

---

Available Downloads

Production distribution packages for Windows (.exe), macOS (.dmg), Ubuntu/Debian (.deb), Fedora/RPM (.rpm), Arch Linux (.pkg.tar.zst), AppImage (.AppImage), and Android (.apk).

TotumVault v1.2.0

Production distribution packages for TotumVault Password Manager (Windows, macOS, Ubuntu/Debian, Fedora/RPM, Arch Linux, and Android).

Veylock v1.1.0

Production distribution packages for Veylock Password Manager (Windows, Ubuntu/Debian, Fedora/RPM, Arch , MacOS and Android).