Voyalier v0.4.3

Voyalier v0.4.3 is the first published self-updating build.

Changed

• Ships signed updater bundles and the cross-platform latest.json manifest, so installs from v0.3.0 can discover and minisign-verify this update.
• Includes macOS Apple Silicon DMG/app archives and Windows NSIS/MSI installers, per-platform SHA-256 checksum files, signatures, and build-provenance attestations.

Distribution note

The updater signature is independent of OS code signing. Apple notarization and Windows Authenticode remain blocked on paid certificates, so first launch of a fresh download can still show the operating system's unidentified-developer warning.

v0.4.2 was tagged but not published because its version bump omitted the Cargo lockfile refresh; the tag was abandoned rather than moved.

Voyalier v0.4.1 — Flow-gap fixes

Voyalier v0.4.1 — Flow-gap fixes

A small follow-up to v0.4.0 that closes a class of dead-end affordances — buttons that looked clickable but did nothing useful.

Fixed

• Import and Add flight or stay primary buttons were enabled on an empty form, so clicking them only produced an error. They're now disabled until there's something to submit. (The .eml/.html/.txt file picker + drag-and-drop from v0.4.0 makes the non-paste path obvious.)
• The vault unlock screen was a dead end on a forgotten passphrase — it now offers a "Forgot your passphrase?" explainer with the honest no-recovery reality and the restore-from-backup path.

Still a source-only public beta (build and run from source — see the README); signed installers remain blocked on paid certificates.

See the CHANGELOG for details.

Voyalier v0.4.0 — Public beta polish

Voyalier v0.4.0 — Public beta polish

Voyalier is a calm, local-first trip workspace: your trips, documents, and keys
stay on your device, imports are reviewed rather than believed, and AI is
optional and previewed before anything leaves the machine.

v0.4.0 is a source-only public beta. It builds and runs from source today;
signed, notarized installers are still blocked on paid certificates (the free
in-app updater's own minisign signing is separate and already in place).

Run it

git clone https://github.com/udhawan97/Voyalier.git
cd Voyalier
make bootstrap
make dev

Open http://127.0.0.1:5173. Requires Node.js 24+, pnpm 11+, and a current
stable Rust toolchain.

What's new since the 0.3.0 base

Setup that helps

• Assistive trip setup — origin/destination are an accessible combobox that
  suggests places from your history and the pack catalog (offline, no per-keystroke
  geocoding), and setup surfaces packs recommended for your destination.
• Guided on-device AI setup — a step-by-step install → start → get-a-model
  wizard when no Ollama runtime is found, with in-app model downloads once it's
  running.
• Validated cloud keys — BYOK OpenAI/Anthropic keys get a Validate & save
  check and a "How to get a key" helper. Keys never leave the OS keychain.
• Editable AI instructions — view and override the system instructions used
  for assist and for the on-device lodging-date draft, each with a reset. The date
  draft stays locked to dates; replies stay marked non-authoritative.

Everyday flow

• Edit and unarchive trips, with an archive show/hide toggle.
• Relaxed, typeahead in-trip search — any word matches (partial too), matching
  terms become autofill chips, and results copy to reuse.
• On-device lodging-date drafts — "Fill gaps with on-device AI" proposes
  missing lodging dates from your own imported text; every one is a draft you review.
• Import from a file — drop or pick a .eml/.html/.txt file, read on-device
  (no upload), format inferred from the extension. Pasting still works.

Look and feel

• A real type identity — the app finally loads its named typefaces (Zen Kaku
  Gothic New, Shippori Mincho), self-hosted as small Latin WOFF2 subsets with no
  web-font CDN request. The documentation site does the same.
• Subtle, token-driven motion and a faint paper texture (all under the existing
  reduced-motion setting), unified icon + heading treatment across sections, and a
  plain-language copy pass throughout.

Correctness & safety

• Data-loss fix: returning a manual fact from the Blueprint used to delete it
  silently — it's now an explicit, confirmed "Remove."
• Confirm-guards on the destructive, no-undo actions (dismiss a candidate,
  remove a manual fact / a pack / a stored key).
• Trip search no longer resurrects results after you clear the box; the delete
  confirmation is localization-safe; the map explains WebGL/load failures instead
  of showing a blank frame; a WCAG-AA contrast fix for small meta text; plus a
  dozen smaller robustness fixes.

See the CHANGELOG for the complete list.

Your data

Trips, imported documents, downloaded packs, and your encryption key live in the
OS data directory — nothing is uploaded, and connected features (advice, weather,
packs, maps, cloud AI, update checks) each wait for an explicit click.

City packs (packs-v1)

Overture places (CDLA-Permissive-2.0) + Wikivoyage prose (CC BY-SA 3.0), per pack. Built by .github/workflows/packs.yml.

v0.2.0 — Grounded intelligence (Phase 2)

Phase 2 — grounded intelligence. Voyalier now turns confirmed plans into sourced, consent-gated intelligence and optional BYOK AI assist, all local-first and privacy-first.

Run from source — this is a source release; there is no signed installer yet (packaging, notarization, encrypted vault, and maps are Phase 3).

git clone https://github.com/udhawan97/Voyalier.git && cd Voyalier
make bootstrap && make dev

Highlights

• Sourced readiness — a link-only entry-requirements item (curated official links, never asserted), plus consent-gated FCDO travel-advice snapshots (GOV.UK Content API) and an Open-Meteo weather outlook. Each is stored dated, source-linked, freshness-labeled, and invalidated when the trip's place/window changes. US State advisories are link-only (no machine-readable feed exists).
• Trip search — deterministic searchTrip over imported documents and confirmed facts, with provenance and transparent scoring.
• Offline city packs — a validated catalog (Nashville plus the four Hawaii islands as separate packs, plus ~11 more), each keeping Overture places and a separate Wikivoyage prose layer under their own licenses. Per-trip download with consent, and a CI workflow that builds and publishes pack contents to the packs-v1 release.
• BYOK AI assist — on-device detection (Ollama), OS-keychain key storage, a deterministic redacted request preview, on-device inference (Ollama) and cloud inference (OpenAI / Anthropic), and a per-trip activity log.

Privacy guarantees (verified)

• API keys live only in the OS keychain and only ever appear in an outgoing auth header — never in a payload, log, database, or error.
• Confirmation codes and traveler names are excluded from every AI request by construction (generation-time redaction), on-device and cloud alike.
• A fixed system prompt forbids inventing high-stakes facts (flights, prices, visa/entry, health, safety); replies carry a non-authoritative disclaimer. High-stakes facts are only quoted from cited sources.
• Every live fetch (advice, weather, pack download, AI send) happens only on an explicit click. No telemetry.

Under the hood

Each capability ships end to end — Rust core → SQLite app → Axum API → Tauri IPC → TypeScript contract → mock → web UI — additive and backward-compatible. This release was gap-checked, independently reviewed, and bug-checked; the full gate (Rust + web tests, clippy -D warnings, fmt, lint, typecheck, builds) is green, and on-device inference plus every route were verified live.

See the changelog and roadmap.