Architecture

Active product boundary

• apps/mac: Electron shell and Editorial Archive renderer.
• packages/core: local SQLite archive, Messages import, exact search, local embeddings, analytics, and the canonical behavior layer.
• packages/shared-types: contracts shared across local packages.
• packages/shared-tokens: the semantic visual token system used by the Mac app and website.
• apps/web: public landing page and documentation only.

Other experimental packages can exist in the repository, but they are not part of the current product pitch or required local entry path.

Local retrieval

OpenFolio reads the macOS Messages database in read-only mode and imports records into a separate local SQLite archive. Search combines full-text matches with embeddings generated by a bundled q8 all-MiniLM-L6-v2 ONNX model. Model files are pinned and hash-verified. If semantic retrieval cannot initialize, full-text search continues without a network fallback.

Results are stored records with stable navigation targets. Message results can open the exact cited message and its surrounding conversation; OpenFolio does not generate an answer from retrieved snippets.

Network boundary

Production policy denies network, navigation, download, and external HTTP(S) handoff paths. There is no required account, hosted service, connector, automatic updater, or provider key. Release-level zero-traffic claims still require PID-attributed observation of the signed artifact on macOS; see Privacy for the precise claim boundary.