Skip to content

v0.3.8

Choose a tag to compare

View all tags
@Abdul-Omira Abdul-Omira released this 15 Sep 17:29
· 54 commits to main since this release
v0.3.8
768d48e

Koder v0.3.8

A security- and reliability-focused release across the CLI, the desktop app, and the web app, plus the Omni managed-SDK runtime and bounded session autonomy.

Security

  • Fixed a command-injection in the desktop app's WSL path handling — a crafted path could run arbitrary commands on Windows + WSL; path expansion no longer goes through a shell.
  • Desktop link handling hardened — the open-link IPC and rendered markdown links now only open http/https/mailto, and the web app's link opener does the same, closing a file:/javascript: vector.
  • Windows desktop updates now verify the installer's Authenticode signature when the build is signed.
  • Deep links are validated at the desktop trust boundary before reaching the UI.
  • Store filenames and default-server URLs are validated so neither can escape the profile directory or point the app at a non-http(s) origin.
  • Baseline security headers (X-Frame-Options, nosniff, referrer, HSTS, frame-ancestors) added to the hosted web app.

Desktop

  • Windows and Linux now get a full application menu (previously macOS-only) — New Window, Reload, Check for Updates, Settings, and navigation are all reachable.
  • "Open with editor" works on Windows — the editor allow-list now matches resolved executable paths.
  • A startup failure now shows an error dialog instead of a blank window.
  • Desktop logs are stamped in UTC to line up with server logs.

CLI & onboarding

  • A fresh install no longer shows a scary "one time database migration, may take a few minutes" message when there is nothing to migrate.
  • A mistyped session id gives a clear "Invalid session ID" message instead of "Unexpected error, check log file".
  • Onboarding warns when a pasted API key is the wrong shape (most often the browser session token) across the CLI, desktop, and web.

Web

  • Fixed the hosted web app connecting to the wrong origin (a case-sensitivity bug that made it silently fail every request).
  • Prod error-reporting filter fixed; leftover third-party branding replaced with aiXplain.

Features

  • Omni managed aiXplain SDK runtime, with browser/memory/todo tools exposed by their real IDs and MCP grants reserved for verified server tools.
  • Bounded session autonomy.

Notes

This release is distributed as CLI binaries for macOS, Linux, and Windows, plus the macOS and Linux desktop apps.

Assets 28
Loading