CrypTex

CrypTex is a Linux-first, local-first desktop environment for writing cryptography papers in standard LaTeX. Project folders remain ordinary LaTeX projects that can be compiled with latexmk or uploaded to Overleaf.

CrypTex application source is licensed under GPL-3.0-or-later. See LICENSE and licensing notes.

The project is in foundation development. See PRODUCT, ARCHITECTURE, SECURITY, and TASKS before changing product behavior.

Toolchain

• Node.js 22 LTS and pnpm 10
• Rust stable
• Tauri 2 system prerequisites

Commands

pnpm install --frozen-lockfile
pnpm check
pnpm test
pnpm acceptance:validate
pnpm portability:validate
pnpm packaging:validate
pnpm performance:test
pnpm tauri build

pnpm dev starts the web UI. pnpm tauri dev starts the desktop application.

The D1 TeX Live spike can measure an official TLPDB and verify an isolated installation without modifying the system:

node scripts/measure-texlive.mjs /path/to/texlive.tlpdb
scripts/verify-texlive-spike.sh /path/to/texlive/bin/x86_64-linux

See ADR-002 for the pinned payload decision, measured size, licensing gates, and remaining clean-machine checks.

Status

M0 and local project editing through C6 are implemented. D1-D3 have frozen the managed TeX Live direction, verified installed toolchains, added restricted process execution, explicit build permissions, deterministic root/engine resolution, and safe latexmk request construction, deterministic scheduling, supervised builds, streamed logs, visible build state, cancellation, cache-confined cleanup, and conservative structured log diagnostics, a filterable Problems panel, inline source markers, and raw-log review, a secure local PDF.js preview with navigation, zoom, and search, race-safe retention of the last successful PDF, and bidirectional SyncTeX navigation between source and preview. The bounded best-effort project-index contract is frozen; bounded tolerant extraction and incremental include/dependency indexing are implemented; a live outline provides project-wide indexed navigation; the versioned command-catalog contract is frozen and an offline, version-pinned baseline LaTeX/cryptocode catalog is bundled and fixture-tested; bounded deterministic local search now ranks exact, prefix, fuzzy, context, and detected-package evidence. The keyboard-first Command Finder now provides reviewed, undoable snippet insertion with explicit package warnings. Context-aware catalog completion, hover, and signature help are integrated into CodeMirror. Versioned external notation profiles, defaults, project overrides, validation, and import/export are implemented. A searchable notation palette now explains preference provenance and inserts exact preferred forms explicitly. A bounded project-wide scanner recognizes only declared high-confidence command forms with source ranges and stale-fingerprint protection. Conservative notation findings now distinguish exact nonpreferred forms from multiple declared forms, support navigation and external suppressions, and never claim mathematical error. Reviewed notation replacement now provides explicit per-file before/after review, selectable application, fingerprint revalidation, atomic writes, and partial-failure reporting. The J1 manifest-driven release fixture harness covers the complete planned matrix without falling back to a developer-global TeX installation. The J2 adversarial suite now covers path escape, concurrent/stale/failed writes, symlink substitution, watcher recovery, and crash-recovery storage. J3 now enforces scheduled performance and soak budgets for startup, large trees/sources, indexing, Finder, atomic I/O, memory, and build/view artifact cycling. J4 now validates unchanged ordinary project copies, rejects proprietary requirements, and applies semantic PDF/SyncTeX expectations to ordinary latexmk builds. J5 Linux packaging and clean-machine installation are next. No production release exists.