AutoTrace v0.2.0

What's new in 0.2.0

Highlights

• Proper AutoTrace icon everywhere. Installers, the app window, taskbar/Dock, tray and the in-app logo now use the AutoTrace clock icon. 0.1.1 still shipped Tauri's placeholder icon on Windows and macOS.
• AI providers you can actually set up. New Agent → Providers panel: add Anthropic, OpenAI, OpenRouter, Ollama, LM Studio or any OpenAI-compatible endpoint, test it, restrict models, and set daily/monthly token limits.
• Database encryption that's safe to use. "Encrypt & close" now stops tracking, closes the database, encrypts it and verifies the result before removing the plaintext. On the next launch AutoTrace asks for your passphrase before opening anything.

Security & privacy

• Links open only if they're https://, and never through a shell (fixes a command-injection risk on Windows).
• Strict Content-Security-Policy; the app font is now bundled, so AutoTrace no longer contacts Google Fonts on launch.
• AI API keys are encrypted with a random per-device key, and are only sent to the optional local AI sidecar when you switch it on.
• The local export API accepts the token only in the Authorization header and compares it in constant time.
• Sync tokens are only sent over HTTPS (or to this machine).

Fixes

• Claude responses no longer come back empty on newer models; the default Claude model is now claude-opus-5.
• The local AI sidecar talks to the local API on the port you configured instead of always 17890.

⚠️ Action needed if you integrate with AutoTrace

• Webhooks: verify the new X-AutoTrace-Signature-256 header (HMAC-SHA256 of the raw body). The old X-AutoTrace-Signature header is gone. See docs/architecture/local-api.md.
• Local API / MCP clients: send Authorization: Bearer <token>; ?access_token= no longer works.
• Self-hosted sync server: it now refuses to start without SYNC_TOKEN (16+ characters) and listens on 127.0.0.1 unless you set HOST=0.0.0.0.

Windows: still seeing the old icon?

Windows caches icons. Unpin and re-pin AutoTrace on the taskbar, or run ie4uinit.exe -show and sign out and back in.

---

Installers

Download the asset for your OS below.

Platform	Asset
Windows	.exe (NSIS) or .msi
Linux	.AppImage or .deb
macOS Apple Silicon	.dmg / .app (arm64)
macOS Intel	.dmg / .app (x64)

Updates

• In-app: Settings → Account → Check for updates
• Signed updater manifest: latest.json (when signing secrets are configured)

Notes

• Early builds may be unsigned — Windows SmartScreen / macOS Gatekeeper can warn; choose “More info → Run anyway” or right-click → Open on macOS.
• AutoTrace stays local-first; cloud sync / OAuth are optional.
• See docs/release.md for build + updater details.

AutoTrace v0.1.1

Installers

Download the asset for your OS below.

Platform	Asset
Windows	.exe (NSIS) or .msi
Linux	.AppImage or .deb
macOS Apple Silicon	.dmg / .app (arm64)
macOS Intel	.dmg / .app (x64)

Updates

• In-app: Settings → Account → Check for updates
• Signed updater manifest: latest.json (when signing secrets are configured)

Notes

• Early builds may be unsigned — Windows SmartScreen / macOS Gatekeeper can warn; choose “More info → Run anyway” or right-click → Open on macOS.
• AutoTrace stays local-first; cloud sync / OAuth are optional.
• See docs/release.md for build + updater details.

AutoTrace v0.1.0

Installers

Download the asset for your OS below.

Platform	Asset
Windows	.exe (NSIS) or .msi
Linux	.AppImage or .deb
macOS Apple Silicon	.dmg / .app (arm64)
macOS Intel	.dmg / .app (x64)

Notes

• Early builds may be unsigned — Windows SmartScreen / macOS Gatekeeper can warn; choose “More info → Run anyway” or right-click → Open on macOS.
• AutoTrace stays local-first; cloud sync / OAuth are optional.
• See docs/release.md for build details.