v0.1.38

v0.1.38 — blank window fix, visible overlaps, dd/mm/yyyy

Fixes the blank window that appeared the moment a member requested time
in v0.1.37 and survived every restart: the endpoint returned a row without
its project relation, the client threw rendering it, and React unmounted
the whole tree. Fixed at the endpoint, at the client, and with an error
boundary so no render error can blank the tracker again.

Banners were laid out as columns beside the panes rather than strips above
them — invisible in the narrow window, a full-height slab when maximised.

Requesting time now shows the day's existing entries and names the one it
clashes with, instead of only refusing the submission afterwards.

Dates are dd/mm/yyyy throughout and no longer follow the reader's machine.
Date and time entry use the app's own controls rather than the webview's
locale-driven ones.

A screenshot the desktop refuses is retried rather than silently lost.

v0.1.37

v0.1.37 — Linux/Wayland tracking, request time from the tracker

Tracking now works on a Wayland session. rdev is X11-only and, under
Wayland, reported itself healthy while seeing nothing — so members were
told they were away, scored 0% activity, and had to re-enter their day by
hand. The compositor's idle monitor is now a real activity source, the
gdbus idle parser that had never once returned a real figure is fixed,
and screenshots go through GNOME Shell with a hard timeout instead of a
portal call that blocked the worker thread for a minute.

Members can request missed time from the tracker itself, with a reason,
for an admin to approve or reject. Approved time does not affect activity
scores.

Linux downloads now lead with the .deb: it is the only artifact that
declares the tracker's runtime dependencies, and the only one that can be
uninstalled.

v0.1.36

v0.1.36 — activity measurement and tracked-time integrity

Activity levels read 30-40% because of measurement defects, not
performance. Fixed at source:

- Suspended time no longer inflates the activity denominator. A block
  followed by an overnight lid-close reported 0.36% where the truth was
  83%; every laptop suspend did this.
- Activity blocks are clipped to the report window, so a session that
  began before it no longer contributes all of its activity against only
  the hours inside it.
- The measurement window now credits the 3 seconds following an input
  event, rounded up from the 2.5s validated against video observation by
  Chang et al. (Ergonomics 2009). Fixed, not configurable.
- Anomaly detection no longer flags a break, or a dead input hook, as
  robotic gaming, and measures real elapsed time instead of assuming
  every block is ten minutes.

Tracked time is also no longer lost or fabricated:

- The stale-session sweeper closed sessions after 150 seconds of silence
  and nothing reopened them, so any network outage — or any deploy —
  erased the rest of the shift. Now six hours, and recoverable.
- A deleted member's tracker no longer destroys their queued work.
- Sessions are no longer branded as tampered by ordinary out-of-order
  delivery, and the flag can now clear.
- An honest offline day no longer generates fraud flags.
- Future-dated blocks can no longer mint hours.
- Screenshots no longer duplicate on a retried upload confirmation.

v0.1.35

Trax v0.1.35

- Fixes Linux auto-update, which has never worked: every previous update manifest
  pointed Linux clients at a file that does not exist in the release. Windows was
  unaffected.

Also in v0.1.34, if you are coming from earlier:
- Check for updates from the window, not just the tray.
- Release and update links point at the renamed repository directly.

v0.1.34

Trax v0.1.34

- Check for updates from the window, not just the tray. There's a button in the
  footer beside the settings gear; it shows what changed and lets you decide,
  and always tells you something — the version you're on, or why it couldn't ask.
- Release and update links now point at the renamed repository directly instead
  of relying on a GitHub redirect.

v0.1.33

Trax v0.1.33

Tracked time you can trust, and a dashboard that stays up.

- A session the app was not running for is never resumed or credited. Abandoned
  sessions are closed at the last evidence they were alive, rather than growing
  for as long as the row exists.
- Time spent away — idle past the org threshold, or the machine asleep — comes off
  the clock when you return, and is added back only if you say Keep.
- Hours are attributed to the day they were worked, so a shift across midnight and
  a gap across two days both land where they belong.
- The ring stays today's total and the row beneath it becomes "This session", so
  the two numbers no longer repeat each other.
- The Insights page no longer takes the whole dashboard down when a member has been
  deleted, and no single page can blank the app again.

v0.1.31

Fixes a privacy hole in the desktop gallery.

- "On this device" read captures straight off local disk and rendered them
  without consulting the server, so the organisation's blur setting never
  applied to it. With blur on, a staff member could still see every capture
  taken on their machine - the exact case the setting exists to prevent. It now
  applies the same rule the dashboard does: owner/admin see everything; with
  blur on a member gets the row (time, monitor, upload state) but no image.
- Org policy changes now reach a client when the dashboard loads, not only
  after a session registers. Previously a change an admin made arrived one
  session late, and never at all for someone who had stopped tracking.

Carried from v0.1.30: update checks now run every 6 hours with an OS
notification, instead of once at launch. From v0.1.29: waking from sleep shows
the same Keep / Discard prompt as returning from idle.

Note blur remains a display policy, not a guarantee - the capture is taken on
the user's own machine and the file is still on that disk.

v0.1.30

Desktop
- Update notifications no longer wait for you to open the app. The updater ran
  once per launch, so a release published while TraxStaff sat in the tray went
  unnoticed until the next restart. It now re-checks every 6 hours and raises
  an OS notification naming the version, with a new "Notify me when an update
  is available" toggle (on by default).
- Carried over from v0.1.29: waking from sleep or hibernation now shows the
  same Keep / Discard prompt as returning from ordinary idle, so away-time can
  be dropped without ending the session. Task deletion asks first.

Web (server-side, live independently of this installer)
- Members can see their own screenshots when the org's blur setting is off.
  The gallery previously keyed on role alone, so a member never saw their own
  captures however blur was configured.
- Audit log of membership and destructive actions.
- Removing a member is a real delete; their tracked work is kept.

v0.1.29

Desktop
- Idle and sleep now ask the same question. Waking the machine after it
  slept or hibernated used to offer only "Keep tracking" or "Stop"; it now
  shows the same Keep / Discard prompt that returning from ordinary idle
  does, so away-time can be dropped without ending the session. The prompt
  raises the window if the app was minimised, and auto-resolves to Keep
  after 60 minutes if nobody answers.
- Task deletion asks for confirmation instead of firing on a single click.
- Screenshot queue and local gallery are partitioned per account.

Web (already live, listed for context)
- Audit log of membership and destructive actions.
- Removing a member is a real delete; their tracked work is kept.

v0.1.28

v0.1.28 — fix: exit dialog could get stuck at "Records remaining: 0"

The desktop app's close/exit dialog ("Uploading your data...") could
get stuck indefinitely even after the sync flush genuinely finished,
if the underlying window-destroy call ever failed for any reason —
there was no error handling and no fallback. Now bounded to 5s with a
hard process-exit fallback, so the app always actually closes once the
flush completes.