v0.21.0

What's Changed

• Codebase review: bug fixes, performance and docs accuracy by @RogerReed in #339
• Forwarding: re-send a session another member or org owns under this owner's id by @RogerReed in #340
• org link: use the device flow automatically on headless machines by @RogerReed in #341
• desktop/README: drop links to gitignored plan files by @RogerReed in #346
• Cloud daily rollup ceiling: notice once a day, pause no later than midnight UTC by @RogerReed in #343
• Runbooks index: Cloud plan-pricing changes by @RogerReed in #344
• Docs: Cloud's Free plan, and a current machine-cap fixture by @RogerReed in #345
• Desktop (Windows): sign with the TraceRoost Azure Artifact Signing profile by @RogerReed in #342
• Signals: agent prompts, three false-positive fixes, plainer names, Opus-class tier bar by @RogerReed in #348
• Desktop (Windows): flag to switch signing off by @RogerReed in #347
• View Alert: open the fired alert instead of the Alerts list by @RogerReed in #351
• Org panel: unlinked, Open TraceRoost Cloud sits under the Link callout by @RogerReed in #349
• Desktop (Windows): winget package (TraceRoost.TraceRoost) by @RogerReed in #352
• Desktop release: no more *-preview names for unsigned macOS and Windows builds by @RogerReed in #356
• Stop re-running unchanged git lookups on every idle poll and forward by @RogerReed in #355
• Show the evidence behind every signal, and highlight it in the waterfall by @RogerReed in #354
• Desktop (macOS): ready to sign and notarize when the Apple membership lands by @RogerReed in #353
• CI: skip the slowest desktop checks on PRs that don't touch desktop/ by @RogerReed in #357
• Weekly OpenTelemetry upstream watch, emailed to the owners by @RogerReed in #358
• OTel watch: look for the state branch by its full ref by @RogerReed in #362
• UX review fixes: dashboard, extension, CLI, desktop, README by @RogerReed in #359
• Dashboard layout: Alerts panel, Filters popover, 11px floor, theme-aware agent colours by @RogerReed in #361
• Agent setup: Remove agent setup, Not now re-asks, background service owns configs by @RogerReed in #360
• Database performance: cheaper writes, bounded tables, 3 s saves by @RogerReed in #363
• Docs: keep core's docs core-only; fake org name in the Org panel test by @RogerReed in #364
• Security review: release-age gate, Dependabot cooldown, triaged findings by @RogerReed in #365
• Signals: plain-language explanations, and two accuracy fixes by @RogerReed in #366
• Signals: one consistent icon tile, severity by fill by @RogerReed in #367
• Docs: bring ARCHITECTURE.md up to date; limit CLOUD_ARCHITECTURE.md to the Cloud interface by @RogerReed in #370
• Pre-launch docs: user-doc fixes, release runbook, Windows signing and withdrawal runbooks by @RogerReed in #369
• Docs: point §11 at pricing.ts instead of repeating the model list by @RogerReed in #372
• Signals: a tool call is identified by its tool and arguments, not its label by @RogerReed in #371
• Pre-launch review: privacy, data-safety and release fixes; Node 22+ by @RogerReed in #368
• Desktop (macOS): teal tile app icon, built by iconutil by @RogerReed in #373
• Advisor: per-repo instruction panels, sort and filter notice, only agents in use; Limit column rename by @RogerReed in #374

Full Changelog: v0.20.0...v0.21.0

Opening the desktop app

These downloads are not code-signed. They are the builds CI tested, byte for byte (TraceRoost-desktop-*-SHA256SUMS), but your OS will warn before opening them:

• macOS (TraceRoost-*-mac-*.dmg): ad-hoc signed, not notarized. Gatekeeper refuses the first open; right-click the app → Open, then Open again (or xattr -d com.apple.quarantine /Applications/TraceRoost.app).
• Windows (TraceRoost-*-win-*.exe installer): not code-signed. SmartScreen shows "Windows protected your PC"; click More info → Run anyway.

v0.20.0

What's Changed

• Cloud forwarding: an offline machine no longer unlinks itself and drops its queue by @RogerReed in #329
• WINDOWS_VALIDATION: check the non-VS Code link path opens the full authorize URL by @RogerReed in #326
• Test: reconcileMany timeout and retrying teardown — Windows build-and-test was red on every open PR by @RogerReed in #330
• Org panel: name TraceRoost Cloud in the header, Cloud link up top, long text as tooltips by @RogerReed in #324
• Comments: the access token and its cookie apply only off loopback by @RogerReed in #323
• Header icons: every button shows a tooltip naming what it is by @RogerReed in #327
• Settings → Dashboard port; service install keeps your settings by @RogerReed in #325
• Desktop app for macOS and Linux, released from v* tags by @RogerReed in #328
• Ask before setting up agents; licensing notices; legal wording by @RogerReed in #332
• Desktop app for Windows (x64 and arm64) by @RogerReed in #331
• Desktop: one install file per platform, smaller downloads by @RogerReed in #334
• fix(explain-payload): print the forwarder's own payload, not a stale rebuild by @RogerReed in #333
• Docs: OpenCode and Cursor have telemetry TraceRoost doesn't read yet by @RogerReed in #336
• Desktop release: pass signing secrets by name, not secrets: inherit by @RogerReed in #337
• Desktop release: attach unsigned macOS and Windows builds as previews by @RogerReed in #338

Full Changelog: v0.19.2...v0.20.0

Desktop app downloads (preview)

Files named *-preview are not yet code-signed. They are the builds CI tested, byte for byte (TraceRoost-desktop-*-SHA256SUMS), but your OS will warn before opening them:

• macOS (TraceRoost-*-mac-*-preview.dmg) (preview): ad-hoc signed, not notarized. Gatekeeper refuses the first open; right-click the app → Open, then Open again (or xattr -d com.apple.quarantine /Applications/TraceRoost.app).
• Windows (TraceRoost-*-win-*-preview.exe installer) (preview): not code-signed. SmartScreen shows "Windows protected your PC"; click More info → Run anyway.

v0.19.2

What's Changed

• homebrew-formula.mjs: wait up to ~15 minutes for npm to serve a fresh publish by @RogerReed in #315
• release.yml: pass the Docker job only the two Docker Hub secrets by @RogerReed in #316
• Forwarding: lift a 426 upgrade pause as soon as the client version changes by @RogerReed in #317
• Windows: open URLs with rundll32's FileProtocolHandler, not cmd /c start by @RogerReed in #318
• npm package: no runtime dependencies, sql.js wasm from our own dist/, MCP SDK 1.32.1 by @RogerReed in #319
• Forwarding: send a repo's instruction-file state with every forwarded session by @RogerReed in #320

Full Changelog: v0.19.1...v0.19.2

v0.19.1

What's Changed

• Homebrew: brew install traceroost/tap/traceroost, then traceroost service install by @RogerReed in #313
• Release 0.19.1: Homebrew fixes, service install opens the dashboard, no token in the loopback URL by @RogerReed in #314

Full Changelog: v0.19.0...v0.19.1

v0.19.0

What's Changed

• Fit the README demo GIF under GitHub's 5 MB image limit by @RogerReed in #273
• Instruction suggestions for every repo; OpenCode/Cursor targets; session language and change size; Windows coverage by @RogerReed in #274
• Language dropdown lists only languages the loaded traces have by @RogerReed in #280
• chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by @dependabot[bot] in #279
• chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 by @dependabot[bot] in #278
• chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.4.0 by @dependabot[bot] in #277
• chore(deps): bump docker/build-push-action from 6.19.2 to 7.4.0 by @dependabot[bot] in #276
• chore(deps): bump actions/cache from 4.3.0 to 6.1.0 by @dependabot[bot] in #275
• Traces: pinned expanded row + Repo (ID) in detail header; dev builds default to stage by @RogerReed in #281
• Plan limit column: one window in the table, every window in the trace; org privacy wording by @RogerReed in #282
• Org privacy notice: mirror TraceRoost Cloud's teammate-visibility wording by @RogerReed in #283
• Traces table: narrower Plan limit column, smaller Signals icons, compact Turns errors by @RogerReed in #285
• Traces: abbreviated language names; agent pills only for agents with data by @RogerReed in #284
• Code changes chart, "Make a suggestion" link, more languages by @RogerReed in #286
• Docs and Help review: cover new features, fix drift, tighten wording by @RogerReed in #287
• By language in cloud's format; stable trace identity (feature 11) by @RogerReed in #288
• UI touch-ups: environment-aware suggestion link, Export scope box + Cloud note, Instructions empty state by @RogerReed in #289
• Log level: forwarding and trace-manifest counts at debug, TRACEROOST_LOG_LEVEL to opt in by @RogerReed in #290
• Link watcher: catch up after a link made outside this process by @RogerReed in #291
• Trace forwarding fixes: queue revisions, log-scan forwarding, shared OTLP parser by @RogerReed in #293
• Catch-up after a link: start sending while the history is still being prepared by @RogerReed in #294
• Language: name code-free traces by the kind of file they touched by @RogerReed in #295
• Keep the trace keys core holds, counts and sends in step with the cloud by @RogerReed in #296
• Privacy accuracy, network opt-out, CLI safety, listing and docs by @RogerReed in #297
• Standalone hardening, one-window pipeline, store evolution by @RogerReed in #298
• Owner decisions: no .staged-* references, one turn definition by @RogerReed in #299
• Remove the skipped_checks (Unverified Ship) signal by @RogerReed in #301
• Show a blank Lang abbreviation for traces with no files by @RogerReed in #307
• Forward idle OTEL traces after 2 minutes instead of 3 by @RogerReed in #308
• License field (MIT AND BUSL-1.1); sixteen signals in README and Help by @RogerReed in #309
• Pricing runbook: refresh core and TraceRoost Cloud together by @RogerReed in #311
• Pre-launch fixes: manifest horizon, refresh recovery, dashboard origin checks, long-context pricing, docs by @RogerReed in #310
• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #303
• chore(deps): bump actions/attest-build-provenance from 2.4.0 to 4.2.2 by @dependabot[bot] in #304
• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #305
• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #306
• chore(deps): bump softprops/action-gh-release from 2.6.2 to 3.0.3 by @dependabot[bot] in #302
• Pricing refresh 2026-10-11: Haiku 5.5, GPT-6.1 Sol, Grok 4.7; Sonnet 5.5 cache read by @RogerReed in #312

Full Changelog: v0.18.1...v0.19.0

v0.18.1

What's Changed

• Version the dashboard favicon URL so upgrades show the new icon by @RogerReed in #267
• Show Codex Business plans in Plan limits; don't drop the dashboard's first messages by @RogerReed in #268
• Fix the five failing local tests and run the fixture check in CI by @RogerReed in #269
• Traces table: Plan limit used, blank Sig, no column gaps; capitalize log messages by @RogerReed in #270
• Update the disclaimer: local files, and third-party changes by @RogerReed in #271
• Help: plan limits covers windowless plans and why it might not show by @RogerReed in #272

Full Changelog: v0.18.0...v0.18.1

v0.18.0

What's Changed

• chore(deps): bump docker/metadata-action from 5.10.0 to 6.2.0 by @dependabot[bot] in #253
• Show subscription plan limits, and port outcome & token spend to core by @RogerReed in #264
• chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in #256
• chore(deps): bump pnpm/action-setup from 4.3.0 to 6.1.0 by @dependabot[bot] in #257
• chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #252
• chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.4.1 by @dependabot[bot] in #254
• chore(deps): bump docker/login-action from 3.7.0 to 4.6.0 by @dependabot[bot] in #255
• Rename "TraceRoost Pro" to "TraceRoost Cloud" by @RogerReed in #259
• Allow the claude and dependabot[bot] accounts in the CLA check by @RogerReed in #265
• Windows end-to-end CI: extension host, shipped artifacts, configure scripts, real agents by @RogerReed in #250
• Docs alignment, code review fixes, and test coverage by @RogerReed in #266

New Contributors

• @dependabot[bot] made their first contribution in #253

Full Changelog: v0.17.1...v0.18.0

v0.15.5

Full Changelog: v0.15.4...v0.15.5

v0.17.1

What's Changed

• Link alerts to their trace, expand OTel conflict banner, and misc fixes by @RogerReed in #261
• Refresh model pricing: GPT-6 Sol/Luna, Claude Opus/Sonnet 5.5 by @RogerReed in #262
• Show the dashboard immediately while local log history loads by @RogerReed in #263

Full Changelog: v0.17.0...v0.17.1

v0.17.0

What's Changed

• UX stability: fix trace-filter jitter, add cursor agent color by @RogerReed in #247
• Fix audit findings and speed up ingestion, storage, dashboard and server by @RogerReed in #248
• Core edition: ship releases without TraceRoost Cloud code by @RogerReed in #249
• Merge cloud into main — v0.17.0 by @RogerReed in #251
• Show the Out column with a single repo; real git outcomes in the demo GIF by @RogerReed in #258

Full Changelog: v0.16.2...v0.17.0