Getting started

ValetFS has two halves: the iOS app (the vault, which holds your secrets) and the daemon (which runs on the computer where an AI agent or tool needs those secrets). The app is useless on its own — install the daemon first.

On the computer, install and start the daemon:

curl -fsSL https://winm2m.github.io/valet-fs/install.sh | bash
then valetfs serve

It prints a QR code. In the app, tap Pair a daemon and scan it. Full instructions are in the installation guide.

Common questions

The daemon shows “offline” but the process is running.

The daemon needs outbound WebSocket access to valetfs-signaling.winm2m.workers.dev. Corporate proxies and firewalls that block WebSocket upgrades are the usual cause. Upgrade to the latest daemon version, which sends a keepalive every 25 seconds.

My files disappeared from the daemon.

That is the design. When the app goes offline a grace timer starts, and when it expires the daemon unmounts and wipes its memory — nothing is written to disk. Reopen the app to reconnect and re-push. You can change the grace period, including to zero, on the session screen.

The app will not let me open a secret.

Reading a secret requires Face ID, Touch ID or a device passcode. If your device has none enrolled, the app denies access by design rather than falling open. Enrol a passcode in Settings → Face ID & Passcode.

QR scanning does not work.

Grant camera access in Settings → ValetFS → Camera. If you cannot scan, use Enter Session ID manually on the pairing screen instead.

The app warns that the daemon key changed.

ValetFS pins a daemon's public key the first time it pairs. A change means either the daemon was reinstalled, or someone is impersonating it. If you did not reinstall, do not proceed — “Forget” the session and pair again by scanning the QR code in person.

Reporting a security issue

Please email yjkwon@winm2m.com directly rather than opening a public issue.