Encrypted offline-first AI prompt console
PromptVault
PromptVault is an encrypted, local-first command center for engineering, organizing, and executing high-value AI prompts. Built for privacy and operational resilience, it pairs zero-knowledge AES-256-GCM client encryption with an intelligent AI Librarian backed by a Gemini multi-key pool, per-key rate-limit circuit breakers, and Groq fallback. Version 2.2 introduces zero-token CLI key health diagnostics, in-flight request deduplication, agentic crawler endpoints (llms.txt), and conflict-safe Supabase cloud synchronization.

Problem
AI operators and prompt engineers routinely scatter high-value prompts across fleeting chat threads, notes apps, and browser tabs. Existing cloud prompt managers force subscription lock-in and introduce privacy exposure, while free-tier LLM workflows suffer abrupt 429 rate-limit blocks, redundant API call spikes, and zero visibility into API key health.
Solution
PromptVault keeps prompt operations entirely local with AES-256-GCM encryption using a client-derived PIN or passphrase. An integrated backend proxy orchestrates a multi-key Gemini pool with automatic retry-after parsing, circuit-breaker backoffs, and failover to Groq. This is reinforced by request deduplication, a zero-token key diagnostic CLI (npm run test:keys), dynamic {{variable}} templating, agentic crawler discovery, and conflict-safe Supabase sync.
Outcome
A hardened, production-grade prompt operations console delivering sub-millisecond local retrieval, absolute data sovereignty, zero subscription dependency, resilient multi-provider LLM failover, and comprehensive key pool observability.
Standout Features
- Client-side AES-256-GCM vault encryption with PIN/passphrase and single-use recovery key
- AI Librarian with Gemini multi-key pooling, per-key 429 cooldown detection, and Groq fallback
- Zero-token API key health diagnostic CLI (test:keys) with real-time rate-limit monitoring
- In-flight request deduplication and circuit-breaker triggers preventing redundant LLM calls
- Agentic crawler discovery endpoints (llms.txt, llms-full.txt) and automated Open Graph generation
- Dynamic {{variable}} fill-in-the-blank prompt templates with instant ⌘K command search
- Conflict-resilient 3-way cloud sync with Supabase preserving cross-device deletions
Stack & Signals
- React
- TypeScript (Strict)
- Vite
- Tailwind CSS
- AES-256-GCM Web Crypto
- Google Gemini API
- Groq API
- Node.js Proxy
- Supabase
- Vitest & Playwright
promptvault.multihat.dev
Official production environment and canonical host for this project.