PathKeep v0.2.0

PathKeep v0.2.0

PathKeep v0.2.0 is a release-truth reset around the work that is actually ready: stronger local recall, safer release packaging, patched security dependencies, and clearer boundaries for optional AI.

Highlights

• Lexical Recall V2 is now the default local search path, with ICU4X NFKC normalization, OpenCC-derived Traditional/Simplified Chinese folding, CJK grams, trigram recall, alias expansion, and bounded typo fallback.
• Explorer keyword mode now supports local Google-like operators such as site:, leading -, quoted phrases, OR, intitle:, inurl:, filetype: / ext:, after:, and before:.
• Windows preview release support no longer blocks on code signing. The release workflow can build unsigned MSI / NSIS installers and keeps WebView2 installer size small through the bootstrapper path.
• Background Jobs, Settings, Dashboard, Explorer, and Assistant now consistently show optional AI, semantic / hybrid search, MCP / skill artifacts, vector sidecars, and readable webpage body fetching as v0.3 roadmap work instead of v0.2.0 features.
• Dependabot security alerts were handled by refreshing patched OpenSSL and Tauri Rust dependencies before this release.

Screenshots

Captured from the current PathKeep v0.2.0 app preview using the deterministic local fixture. No cloud service or generated mockup is involved.

macOS unsigned app install

The macOS DMG builds in this preview are not signed with an Apple Developer ID and are not notarized. macOS Gatekeeper may block the app after download.

1. Download the DMG for your Mac:
   • Apple Silicon: PathKeep_0.2.0_darwin_aarch64.dmg
   • Intel: PathKeep_0.2.0_darwin_x64.dmg
2. Open the DMG and drag PathKeep.app to /Applications.
3. Verify the download checksum if desired:

cd ~/Downloads
shasum -a 256 PathKeep_0.2.0_darwin_aarch64.dmg
shasum -a 256 PathKeep_0.2.0_darwin_x64.dmg

Expected SHA-256:

662de697c8591feaa458c050b637b5318451812843133528ce64168b2df0cb07  PathKeep_0.2.0_darwin_aarch64.dmg
09cc0edc59f8ae740c64e614b9bc85519791df0cbf97a5b7e6225f684def1d68  PathKeep_0.2.0_darwin_x64.dmg

4. Remove the quarantine attribute and open the app:

xattr -dr com.apple.quarantine /Applications/PathKeep.app
open /Applications/PathKeep.app

If you put the app somewhere else, replace /Applications/PathKeep.app with that path. If Finder still blocks launch, use right-click -> Open once, or check System Settings -> Privacy & Security.

Deferred To v0.3

These remain intentionally disabled in v0.2.0: AI Assistant runtime, embeddings, semantic / hybrid search, MCP / skill artifacts, vector sidecar payloads, and readable webpage body fetching. PathKeep still works without LLMs or embeddings: archive, backup/import, keyword search, Audit, Jobs, Schedule, Settings, and deterministic Core Intelligence remain local-first.

Security

This release includes Rust lockfile refreshes for the Dependabot advisories against openssl and tauri.

Notes

• Windows installers are unsigned preview artifacts. Unknown Publisher and SmartScreen prompts are expected.
• Updater artifacts are only produced when the release workflow is run with updater signing configured; unsigned preview builds skip updater publishing.

PathKeep v0.1.0 Preview

PathKeep v0.1.0 Preview

This is the first PathKeep preview release. It is macOS-only for now and intended for tester use before Apple Developer ID signing, notarization, and updater signing are wired.

Download

• PathKeep_0.1.0_universal.dmg - macOS universal build for Apple Silicon and Intel Macs.
• SHA256SUMS.txt and RELEASE-MANIFEST.json are attached for checksum and artifact traceability.

macOS unsigned app install

This preview build is not signed with an Apple Developer ID and is not notarized. macOS Gatekeeper may block the app after download.

1. Download PathKeep_0.1.0_universal.dmg.
2. Open the DMG and drag PathKeep.app to /Applications.
3. Verify the download checksum if desired:

cd ~/Downloads
shasum -a 256 PathKeep_0.1.0_universal.dmg

Expected SHA-256:

7e24878eb9e344b7f93dc08fdcb4d90441a3af11aa1cf011ab1869500637e0b4  PathKeep_0.1.0_universal.dmg

4. Remove the quarantine attribute and open the app:

xattr -dr com.apple.quarantine /Applications/PathKeep.app
open /Applications/PathKeep.app

If you put the app somewhere else, replace /Applications/PathKeep.app with that path. If Finder still blocks launch, use right-click -> Open once, or check System Settings -> Privacy & Security.

Supported in this preview

• macOS archive, import, backup, audit, jobs, schedule, settings, and local security flows.
• Public browser-history support currently covers Google Chrome, Microsoft Edge / Edge Dev, Firefox history-only baseline, Safari on macOS after Full Disk Access, ChatGPT Atlas on macOS, and Perplexity Comet on macOS.
• Optional AI, semantic / hybrid search, vector sidecar, MCP / skill artifacts, and readable-content refetch are intentionally deferred from v0.1.0.

Security refresh

• Rust lockfile refreshed for the v0.1.0 draft after Dependabot review.
• openssl is now patched at 0.10.78.
• vulnerable rand versions were removed or updated to patched 0.8.6 / 0.9.4 paths.
• obsolete core2 and old rand 0.7 transitive paths were removed by the compatible Tauri/Wry/RMCP dependency refresh.
• GitHub Dependabot open alerts are currently clear. The remaining Linux GTK3 glib transitive alert was dismissed as tolerable risk because v0.1.0 ships macOS only and PathKeep app code does not use the affected API path.

Not yet supported

• Windows and Linux binaries are not attached to this draft.
• Windows testing still has known bugs, and my GitHub Actions monthly quota is currently exhausted, so Windows and Linux release builds were not run for this preview.
• Auto-update artifacts are not attached because updater signing is intentionally not configured for this unsigned preview.

Local validation

Built from commit 83876802.

• bun run verify passed locally.
• The macOS release app was rebuilt as a universal x86_64 + arm64 binary with updater artifacts disabled for this preview build.
• The DMG was mounted and inspected locally; the embedded app binary is universal.
• spctl rejects the app as expected because this build has no usable Developer ID signature.