v0.2.0 — Grounded intelligence (Phase 2)
Phase 2 — grounded intelligence. Voyalier now turns confirmed plans into sourced, consent-gated intelligence and optional BYOK AI assist, all local-first and privacy-first.
Run from source — this is a source release; there is no signed installer yet (packaging, notarization, encrypted vault, and maps are Phase 3).
git clone https://github.com/udhawan97/Voyalier.git && cd Voyalier make bootstrap && make dev
Highlights
- Sourced readiness — a link-only entry-requirements item (curated official links, never asserted), plus consent-gated FCDO travel-advice snapshots (GOV.UK Content API) and an Open-Meteo weather outlook. Each is stored dated, source-linked, freshness-labeled, and invalidated when the trip's place/window changes. US State advisories are link-only (no machine-readable feed exists).
- Trip search — deterministic
searchTripover imported documents and confirmed facts, with provenance and transparent scoring. - Offline city packs — a validated catalog (Nashville plus the four Hawaii islands as separate packs, plus ~11 more), each keeping Overture places and a separate Wikivoyage prose layer under their own licenses. Per-trip download with consent, and a CI workflow that builds and publishes pack contents to the
packs-v1release. - BYOK AI assist — on-device detection (Ollama), OS-keychain key storage, a deterministic redacted request preview, on-device inference (Ollama) and cloud inference (OpenAI / Anthropic), and a per-trip activity log.
Privacy guarantees (verified)
- API keys live only in the OS keychain and only ever appear in an outgoing auth header — never in a payload, log, database, or error.
- Confirmation codes and traveler names are excluded from every AI request by construction (generation-time redaction), on-device and cloud alike.
- A fixed system prompt forbids inventing high-stakes facts (flights, prices, visa/entry, health, safety); replies carry a non-authoritative disclaimer. High-stakes facts are only quoted from cited sources.
- Every live fetch (advice, weather, pack download, AI send) happens only on an explicit click. No telemetry.
Under the hood
Each capability ships end to end — Rust core → SQLite app → Axum API → Tauri IPC → TypeScript contract → mock → web UI — additive and backward-compatible. This release was gap-checked, independently reviewed, and bug-checked; the full gate (Rust + web tests, clippy -D warnings, fmt, lint, typecheck, builds) is green, and on-device inference plus every route were verified live.