Jakubantalik
精选
thinking-orbs
A React component library that renders six hand-tuned animated thought orb loading indicators on a plain 2D canvas, with two purpose-tuned sizes and automatic theme detection for AI and agent UIs.
AI 仓库情报摘要
FR-AI / ANALYSIS为什么值得关注
它针对日益增长的 AI 和第三方访问风险（例如将敏感信息存放在 Google Docs 等常用工具中），采用零信任、开源、可自行托管的架构，并实施强客户端加密。
适合谁使用
- 需要安全存储凭证和 API 密钥的开发者
- 厌倦在共享文档中存放秘密的安全意识用户
- 管理云服务商登录信息及 SMTP 凭据的系统管理员与 DevOps 团队
- 希望审计代码并自行部署实例的自托管爱好者
典型使用场景
- 安全存储生产数据库密码、AWS 密钥和 Cloudflare 登录信息
- 在团队间安全共享加密的秘密，避免暴露给 Google 或第三方
- 管理个人敏感文件，如银行信息和恢复码
- 自建基于个人 Google Drive 的秘密管理方案
项目优势
- 开源且可自行托管：任何人都可以分支代码、审计并在自有基础设施上部署
- 客户端加密：使用 Argon2id KDF 和 AES-256-GCM，明文绝不接触 Google Drive 或 IndexedDB
- 无服务器：应用完全在浏览器中运行，通过最小权限的 drive.file 作用域同步至 Google Drive
- 高效附件处理：大文件拆分为 512 KiB 块，每块独立加密
使用前须知
- 需要 Google 账号和 Google Drive，不支持仅本地模式或替代同步后端
- 仅支持 Google OAuth，用户需自行创建 OAuth 客户端并启用 Drive API
- 依赖 Google 基础设施进行存储和认证，不适用于离线或隔离环境
README 快速开始
ZeroTrust
Encrypted personal vault for stuff you probably shouldn't leave in a Google Doc.
Why this exists
Most of us store passwords and other sensitive info in Notion, Google Docs, Sheets, random wikis, whatever's handy. Bank details, AWS keys, Cloudflare logins, SMTP creds. We've always done it. It wasn't great before, but with AI in the picture it's worse.
Companies are hoovering up user data (sometimes with consent, sometimes not) and feeding it to employees or third parties for training, research, whatever. That doc you shared with the team? The sheet with prod credentials? More people (and systems) can get at that data than you think. You only need one person with bad intentions.
Why ZeroTrust
No server. The app runs in your browser and syncs to your Google Drive. Drive never sees the actual content, only encrypted blobs. Plaintext stays in memory while you're unlocked. We don't even put readable secrets in IndexedDB, just ciphertext.
It's open source. Don't trust my deployment. Fork it, read the code, host it yourself on Vercel/Cloudflare/S3/wherever. Use your own Google OAuth app if you want.
Deploy your own
Build is just static files:
npm run build
# output in dist/
Host dist/ anywhere that serves a SPA (Vercel, Cloudflare Pages, Netlify, S3 + CloudFront, etc.).
You'll need a Google OAuth client:
- Google Cloud Console → APIs & Services → Credentials → Create OAuth client ID → Web application
- Authorized JavaScript origins: your app URL(s), e.g.
http://localhost:5173for dev andhttps://vault.yourdomain.comfor prod - Copy the client ID into
VITE_GOOGLE_CLIENT_IDat build time (.env.localfor dev, env var in your host's build settings for prod) - Enable the Google Drive API for that project
The app only asks for drive.file scope. It can read/write files it created in Drive, not your whole Drive.
Data lands in a folder called ZeroTrustVault on the signed-in user's Drive.
Run it locally
npm install
npm run dev
You need Google Drive. There's no local-only mode. Put this in .env.local:
VITE_GOOGLE_CLIENT_ID=your-oauth-client-id.apps.googleusercontent.com
How encryption works
Short version: everything is encrypted in the browser before it hits Drive or IndexedDB. Drive and the local cache only see ciphertext. Yo
项目描述
Sensitive data scattered across Docs, Sheets, and wikis can be exposed to more people, systems, and AI pipelines than you realise. ZeroTrust keeps your data encrypted, stores only ciphertext in Google Drive, and is fully open source and self-hostable.
相关仓库与替代方案
根据分类、Topic 和编程语言匹配的相似项目。
makecindy
精选
cindy
Cindy is an open-source AI agent that runs locally on your machine, integrates multiple AI harnesses and models, and provides memory, skills, and automation to perform real work in your projects and apps.
mereyabdenbekuly-ctrl
精选
clodex-ide
Clodex is an open-source, local-first agentic IDE that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and governed execution in one Electron workspace, currently in technical preview.