β Per-app profiles cover system, secure, and global settings tables. β WRITE_SECURE_SETTINGS granted once via Shizuku, no PC required afterward. β Foreground service watches settings live and flags drift instantly. β Ongoing notification carries a one-tap Revert action mid-session. β Quick settings tiles trigger profiles with short or long press. β Homescreen shortcuts launch a profile straight past the app UI. β Fixes Geto's Shizuku service dying on USB debugging disable. β Zero network permission in the manifest, nothing to phone home to.
β Organizations split access by Collections, Member Roles, and Groups. β Directory Connector syncs users straight from your existing directory service. β Event Logs track every vault action for audit visibility. β Two-factor covers Authenticator, Email, FIDO2 WebAuthn, YubiKey, and Duo. β Send shares files and text without exposing the full vault. β Ships a modified Web Vault client bundled right in the container. β Runs on Rocket, needing HTTPS for the Web Crypto API to unlock. β Self-hosted with data persisted to a single mounted volume, no account tied to it.
β Connects to OpenAI, Anthropic, OpenRouter, Moonshot, Fireworks, Llama.cpp, or vLLM. β Runs shell commands through an allowlist plus exec-plan approval model. β Schedules recurring agent tasks via cron-style heartbeats. β Searches the web through a self-hosted SearXNG integration. β Fetches and converts web pages to markdown with a dedicated skill. β Edits Word, Excel, and PowerPoint files through built-in document skills. β Summarizes and persists conversation memory across sessions automatically. β Encrypts stored API keys with Android Keystore, backup disabled for prefs.