Dollar 1.1.3 — Windows and macOS

This is the first release where both platforms ship the same version together. It rolls up everything since 1.1.1, including the 1.1.2 work that was never published.

If you are on macOS: you are updating from 1.1.1, so this brings you the 1.1.2 changes as well — the write-time credential gate, the approval-timeout ordering fix, the point-release price correction, and the repeat-launch crash fix. Everything listed below applies to you too.

Interception

• Autopilot no longer auto-runs a recursive delete that was written differently. A recursive force-delete was correctly graded high risk when written the usual way, but only medium risk when the flags were reordered, split apart, spelled out in full, placed after the path, or issued through the PowerShell and CMD aliases. Autopilot's default ceiling is medium risk, so those spellings ran without asking. They are now graded the same as the usual form. This does not change the ordinary approval tiers, where a delete already prompted either way.
• Live credentials are caught as they are written into a file. Previously only the file path was checked, so a real key written into ordinary source was treated as a routine edit. Ten credential formats are now recognised at the moment of writing, and unlike other checks this one is never auto-approved, on any tier.
• Uninstalling Dollar now stops supervision. Previously the hook could stay registered after the app was removed, blocking commands in the name of software that was no longer there.

Cost accuracy

• Your cost totals no longer shrink as your history grows. The local store keeps a bounded number of individual records. Trimming used to discard the newest ones instead of the oldest, and discarded spend disappeared from your all-time and monthly figures entirely. Trimming now removes the oldest, and — this is the part that matters — the spend from trimmed records is still counted toward your totals. Nothing you have already spent stops counting.
• Fixed prices for point-release models. Some model identifiers fell back to the previous generation's price, overstating cost for those models. Unrecognised versions are now reported as unconfirmed rather than guessed.

Stability

• Launching Dollar while it is already running no longer crashes. The second process now hands focus to the running window and exits cleanly.
• The shipped binary is hardened with Electron fuses, verified against the built executable.

Everyday use

• Writing technical documentation is no longer mistaken for running it. With Dollar closed, writing a file that merely mentioned a destructive command could be held as if the command were being executed. File contents are no longer matched against destructive-command patterns. They are still scanned for credential formats, which is what catches a key being written to disk.
• Approval history is worth reviewing again. It kept ten entries described only by a truncated title. It now keeps 200 and records the command actually issued, with credentials redacted.
• Snapshots no longer record files an operation never touched.

Performance

• Cost scanning skips records that have not changed since the last pass, so the periodic refresh does far less work on a large history.