Introducing · v0.1.0

QueryVault

A local-first desktop home for the SQL you run every day. Document the queries your team depends on, and execute them against Oracle behind guard rails that scale with the blast radius.

SQL>

Download for macOS & Windows View on GitHub

Private by construction

No phoning home. Verifiable, not promised.

Beyond the Oracle databases you configure, QueryVault makes no network calls — enforced by a default-src 'self' content-security policy, with Monaco bundled locally instead of a CDN. Passwords are encrypted in your OS keychain and never reach the UI.

Get QueryVault Browse features

Everything you need, nothing that phones home

A focused, developer-grade workbench for the queries you already write — built to be safe against the databases that matter.

⛨

Typed write confirmations

Any non-SELECT opens the guard: type RUN to proceed, or the profile’s name on a red dialog when it’s tagged prod. Read-only profiles refuse writes in the backend.

⏳

Nothing commits itself

Writes run with auto-commit off on a long-lived connection. The status bar turns amber; review every pending change, then commit deliberately — or quit, and it rolls back.

🔎

Full-text query library

SQLite FTS5 search across titles, SQL, notes and tags. Named binds like :customer_id are detected, prompted at run time, and remembered per query.

🔒

Credentials in the OS vault

Passwords are encrypted with Electron safeStorage — macOS Keychain, Windows DPAPI. Only the encrypted blob touches disk; plaintext never reaches the UI process.

🔌

Oracle with zero install

node-oracledb in Thin mode connects over plain TCP — no Instant Client, no native libraries. Every engine sits behind one DatabaseAdapter interface.

📊

Fast grid, snapshots & export

A virtualized grid streams in 5,000-row batches with a 50,000-row cap. CSV export streams every row to disk; snapshots chart a row-count trend per query over time.