Xuro 0.1.1

Xuro — Release Notes

✨ Features

• Library — Personal books and manga shelf with List, Grid, and Bento views.
• Book catalog — Search and add books from the public Open Library catalog.
• Manga catalog — Search and add manga from Jikan.
• Content filtering — Public catalog results are filtered against explicit content.
• Personal uploads — Upload your own PDF, EPUB, CBZ, and CBR files.
• Vault Library storage — Uploaded files are copied into the Library/ folder inside your vault for backup and syncing.
• System viewer support — Library files open through your system's default viewer for now.

🛡️ Security

• Real vault encryption — PIN locks are now a real encryption boundary, not just a UI hide. Locking a note or folder encrypts its file content on disk using AES-256-GCM.
• Per-vault encryption key — Each vault generates a random 256-bit encryption key once.
• OS keychain storage — Encryption keys are stored securely using Keychain on macOS, Credential Manager on Windows, and Secret Service on Linux.
• PIN-independent encryption — Encryption keys are never written to disk in plain text and are never derived from the PIN, so resetting a forgotten PIN cannot permanently lock you out of your data.
• Portable unlocked files — Unlocking decrypts a note back into an ordinary, fully portable .md file.
• Dependency security — Fixed 9 dependency vulnerabilities reported by npm audit, including 2 high and 7 moderate severity issues.
• OTP security — Hardened Xuro Cloud OTP verification with constant-time code comparison to remove a potential timing side-channel.
• Update security cleanup — Removed unused signed-update-manifest tooling that was not actually consumed by the application.

🔄 Changed

• GitHub repository reference — Normalized repository casing to Wooinxlkz/Xuro across the update checker, website, and release scripts.