Glyphi 0.5.2

Full Changelog: desktop-v0.5.1...desktop-v0.5.2

Glyphi 0.5.1

Full Changelog: desktop-v0.5.0...desktop-v0.5.1

Glyphi 0.5.0

Full Changelog: desktop-v0.4.8...desktop-v0.5.0

Glyphi 0.4.8

Glyphi cloud, now on its own database

Cloud save used to point at a service we no longer run. It now lives on a Supabase project that Glyphi owns, and the app talks to it through one Edge Function that keeps the same API contract the desktop already spoke — so sign-in, hourly saving, restore and the public leaderboard all work again.

Security is the point of this release. Every table sits in a private Postgres schema that PostgREST does not publish, with row-level security on and no policies. anon and authenticated hold no table privileges, and every read or write goes through a SECURITY DEFINER function whose EXECUTE is granted to service_role alone — a key the desktop never receives. Session tokens are 48 random bytes stored only as SHA-256 hashes, device codes are single-use and expire in ten minutes, and each endpoint is rate limited per IP and per account. Inputs are bounded before they reach the database: 25 records or 40 facts per batch, 512 KiB bodies, regex-checked ids, clamped numbers.

What you see

• Settings → Cloud is back: connected account, the hourly auto-save switch, Save to cloud, Restore from cloud, progress, sources held back and any conflict to resolve. The profile page's "turn it on in Settings" hint leads there again.
• Sign-in opens a browser page served by the API. Glyphi shows a code, the page asks for your email and password, and a new email creates the account. You get a 90-day session; signing out revokes it server-side.
• UsageAtlas is fully gone. The cloud origin, profile links, embed card URLs, share links, the image CSP and the dashboard schema id now point at Glyphi or at the API.

Downloads

File	What it is
Glyphi-0.4.8.Setup.exe	Windows installer (x64)
Glyphi-0.4.8-full.nupkg + RELEASES	Update feed for installed copies
Glyphi-win32-x64-0.4.8.zip	Portable build
SHA256SUMS	Checksums for the four files above

The installer is unsigned, so Windows SmartScreen will ask you to confirm. Verify a download against SHA256SUMS if you want to be sure it is intact.

Privacy

Cloud save is optional and off until you sign in. It uploads daily token totals, hourly buckets, model keys, an estimated cost and the day's time zone — never prompts, completions, code, file paths, project names or provider credentials. Your password is only exchanged with Supabase Auth and is never stored by Glyphi.

Glyphi 0.4.7

Full Changelog: desktop-v0.4.6...desktop-v0.4.7

Glyphi 0.4.6

Glyphi 0.4.6 is the first build published under the Glyphi name.

The new identity

• Glyphi, with its own repository, licence (PolyForm Noncommercial 1.0.0) and documentation.
• The Eye of Horus icon as a glass tile: the surrounding frame is gone, the corners stay transparent, and the PNG, ICO (16-256), ICNS and installer artwork are rendered from one master.
• A desert dune backdrop replaces the eleven previous wallpapers.
• Egyptian styling: sun discs, stelae, cartouches and the scales of Maat redraw the icon set, and Cinzel, Marcellus and Cormorant Garamond set the type.

What did not change

Cloud save and public profiles keep using the live usageatlas.com service while the Glyphi account service is built, so existing saves and profiles continue to work.

Install

• Glyphi-0.4.6 Setup.exe - per-user install, no administrator prompt.
• Glyphi-win32-x64-0.4.6.zip - portable build.

The installer is not Authenticode-signed yet, so SmartScreen may ask for More info -> Run anyway.

Assets

RELEASES and the .nupkg feed the in-app updater. SHA256SUMS lists every download under the name GitHub serves it.