Skip to content

v0.2.25

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 12:06
v0.2.25
906c321

v0.2.25 — Reliable auto-login, security hardening, explorer & graph conveniences

Release date: 2026-07-03
Previous version: v0.2.24

TL;DR

"Remember me" now actually survives app restarts. A batch of security hardening (auth, XSS, path traversal) landed across the server, and new conveniences were added: send files from the explorer straight to a terminal or task, link knowledge-graph nodes via right-click, and description fields that auto-grow with content.

Highlights

Auto-login persists across restarts

  • Previously, checking "Remember me" still forced a re-login after every server (app) restart — sessions lived only in memory and the signing key was regenerated per process.
  • Sessions and the signing key are now persisted in SQLite, so the 30-day session works regardless of restarts.

Security hardening

  • Auth bypass, information exposure, XSS, and path traversal protections were applied across the server (files/images/memory/vault/projects routes, WebSocket, Electron).
  • New network and path safety utilities validate every externally reachable path consistently.

File explorer → send to terminal/task

  • Right-click a file in the explorer to send its path to a running terminal or create a task (TODO) from it. Results are confirmed via toast.

Knowledge graph (wiki) conveniences

  • Right-click a graph node to link it to another document with a wikilink.
  • Added a toggle for showing/hiding node names.

UI polish

  • Description fields in the terminal-create and planner forms auto-grow with content (scroll past max height; manual resize still works).
  • Dropdowns and popovers are unified under a shared AnchoredPopover, so they no longer get clipped; accent color tokens were made consistent.
  • Session dock tray and pop-out window sync improved.

Install / Update

npm i -g clitrigger@0.2.25

Desktop app: use the .exe / .dmg / .AppImage from the GitHub Release assets.

Full commit list

  • 35fd4a9 fix(auth): 자동 로그인이 서버 재시작 후에도 유지되도록 세션 영속화
  • e470372 WIP(ui): 설명 textarea 최대 높이 제한 + 내용 맞춤 자동 크기
  • 8004e1c fix(security): 인증·노출·XSS·경로 하드닝 일괄 적용
  • 9d38ac8 WIP(ui): AnchoredPopover 도입, accent 토큰 통일, 탐색기 토스트
  • 8d8a936 wip: update 3 files
  • 040e5b0 WIP(vault): 그래프 노드 우클릭으로 위키링크 연결 + 이름 표시 토글
  • 5dcdc06 WIP(files): 파일 탐색기 우클릭 메뉴에 터미널/작업 전송 추가

Related docs

Full Changelog: v0.2.24...v0.2.25

Assets 18
Loading