Inference is not magic.推理不是魔法。

The credential vault for agents. Secrets that never reach the transcript.面向智能体的凭证保险库。绝不进入对话记录的密钥。

Agents read .env in the clear and the keys end up in logs and provider transcripts. AgentVault closes that hole: one encrypted vault, one master password, and secrets delivered as environment variables at the exact moment a command runs. Offline-first, single binary, optional zero-knowledge sync.智能体会以明文读取 .env，密钥最终落入日志与供应商的对话记录中。AgentVault 堵住这个漏洞：一个加密保险库、一个主密码，密钥在命令运行的精确时刻作为环境变量交付。离线优先、单一二进制、可选的零知识同步。

• Runtime injection.运行时注入。 Secrets enter the process as env vars — never printed, never logged, revealed only on explicit request and audited when they are.密钥以环境变量进入进程——从不打印、从不记录，仅在显式请求时显露，并在显露时被审计。
• Boring cryptography.无趣的密码学。 Argon2id for key derivation, XChaCha20-Poly1305 for everything else. Standard primitives only — no custom crypto to regret.Argon2id 用于密钥派生，XChaCha20-Poly1305 用于其余一切。只用标准原语——没有日后会后悔的自定义密码。
• Rotation without re-encryption.无需重新加密的轮换。 Envelope keys: changing the master password rewraps one key, the vault body is never touched.信封密钥：更换主密码只需重新包装一把密钥，保险库本体从不被触碰。
• Tamper-evident.防篡改可证。 The audit log is an HMAC chain — doctor verifies it or tells you where it broke.审计日志是一条 HMAC 链——doctor 会验证它，或告诉你它在哪里断裂。
• Recovery is a real plan.恢复是真正的预案。 A 24-word BIP-39 recovery key opens the vault if the password is gone. Losing both is the only failure mode.若主密码遗失，一把 24 词 BIP-39 恢复密钥可开启保险库。唯一会失败的情形，是两把都丢。

Markdown editor, viewer and inspector. Your files read like documents, not like text.Markdown 编辑器、查看器与检查器。你的文件读起来像文档，而非文本。

One compiled binary: render in the terminal, open a native window, or run in the browser. Snapshot history, content-level diffs, restore, PDF and HTML export. The file on disk stays plain markdown — the instrument does the heavy lifting and gets out of the way.一个编译好的二进制：可在终端渲染、打开原生窗口，或在浏览器中运行。快照历史、内容级差异对比、恢复、PDF 与 HTML 导出。磁盘上的文件仍是纯 Markdown——工具完成繁重的活，然后让开。

• Zero dependencies.零依赖。 A single executable, no runtime to install, no admin rights. Windows installer with file association included.单一可执行文件，无需安装运行时，无需管理员权限。附带文件关联的 Windows 安装程序。
• Conflicts decided by content.由内容判定冲突。 A file touched but identical is not a conflict. An edit elsewhere in the document merges with yours instead of rejecting it.被改动但内容相同的文件不算是冲突。文档别处的编辑会与你的修改合并，而非被拒绝。
• History built in.内建历史。 Snapshots, diff against the last version, walk back through history, restore any point.快照、与上一版本的差异对比、回溯历史、恢复任意节点。
• Export that respects the text.尊重文本的导出。 PDF with selectable text and HTML — not screenshots of a render.带可选文本的 PDF 与 HTML——而非渲染图的截图。
• Hygiene as a command.以命令执行的整洁检查。 --check runs the document rulebook; help and UI in IT, EN and ZH.--check 运行文档规则集；帮助与界面支持意大利语、英语与中文。

A personal OS in the Notion style that lives on your disk. The folder is the database.风格如 Notion 的个人操作系统，栖身于你的磁盘之上。文件夹即数据库。

Pages are markdown files with frontmatter inside a local vault. A block editor with drag & drop and slash commands. A local AI that reads and writes with you. No cloud, no account, no telemetry — and the data stays files you can open, diff and version with anything else in this house.页面是本地保险库中以 frontmatter 标注的 Markdown 文件。一个支持拖放与斜杠命令的块编辑器。一个与你一同读写本地内容的 AI。无云、无账户、无遥测——数据始终是你可以打开、对比并版本化的文件，与这间工坊的任何其他工具兼容。

• The file is the truth.文件即真相。 Every page is clean .md — readable by any tool, git-able, portable forever. The search index is rebuildable from the folder at any time.每个页面都是干净的 .md——任何工具可读、可纳入 git、永久可移植。搜索索引随时可从文件夹重建。
• Sovereign by construction.构造上即主权。 The server binds to localhost only. Nothing leaves the machine unless you explicitly turn on an external provider — and the interface says so when you do.服务器仅绑定 localhost。除非你显式开启外部供应商，否则没有任何东西离开这台机器——而界面会在你开启时如实告知。
• AI that is yours.属于你的 AI。 A local model reads and writes with you: summarize, find, draft. Not a metered bolt-on sitting on someone else's GPU.一个本地模型与你一同读写：总结、查找、起草。不是坐在他人 GPU 上、按量计费的附加件。
• Agent-friendly.对智能体友好。 The vault is honest markdown: other agents can read and write it without special tools or paid APIs.保险库是诚实的 Markdown：其他智能体无需特殊工具或付费 API 即可读写。
• Notion-grade editing, no lock-in.Notion 级编辑，无锁定。 Blocks, nesting, toggles and tables — with an export that is the actual document, not a hostage file.块、嵌套、折叠与表格——其导出即真实文档，而非人质文件。

You talk, the machine writes. Dictation and speech across the whole desktop — not inside one app.你说话，机器记录。贯穿整个桌面的听写与语音——而非局限在单个应用之内。

A daemon owns the microphone and the models; whatever window has focus receives the text. Local speech recognition kept warm in memory, a wake word with open vocabulary — set any phrase you like, no retraining — and text-to-speech that reads back to you in Italian, English and Chinese. No Electron, no Chromium, no account: roughly 55 KB of Python and a tray icon. Also packaged as a Pi agent extension — the same engine running inside the agent editor, for voice-driven workflows.一个守护进程掌管麦克风与模型；获得焦点的任意窗口都会收到文本。本地语音识别常驻内存保持温热，唤醒词支持开放词表——可设定任意短语，无需重新训练——并以意大利语、英语与中文向你朗读。无 Electron、无 Chromium、无账户：约 55 KB 的 Python 与一个托盘图标。也打包为 Pi agent 扩展——同一引擎运行于智能体编辑器内部，用于语音驱动的工作流。

• System-wide, not app-locked.全系统，而非应用锁定。 One focus owner: the text lands in whatever application is active — terminal, browser, editor.单一焦点所有者：文本落在任意活动应用——终端、浏览器、编辑器。
• Open-vocabulary wake word.开放词表唤醒词。 The activation phrase is configuration, not a trained model. Change it in a line, it works the next day.激活短语是配置，而非训练出的模型。改一行，次日即生效。
• The model stays local.模型始终本地。 Recognition is warm in RAM and offline-first — the voice never has to leave the machine to become text.识别常驻内存保持温热且离线优先——语音无需离开机器即可转为文字。
• Two forms, one engine.两种形态，同一引擎。 Standalone desktop daemon with tray panel and CLI — or the Pi agent package for voice inside the agent loop.带托盘面板与 CLI 的独立桌面守护进程——或用于智能体循环内语音的 Pi agent 包。
• Light by policy.以策略求轻。 No 240 MB runtime to say a sentence. Single-owner microphone handling: recording, wake and playback never fight for the device.无需 240 MB 运行时只为说一句话。单一所有者的麦克风处理：录音、唤醒与播放从不争夺设备。