Release Nexora v0.1.5 · rohitect/nexora-ide-releases

Nexora 0.1.5

Plugins arrive in Nexora — sandboxed, signed extensions you install in one click. Plus commit & push in one move.

Nexora now has a real plugin system: sandboxed, signed extensions that add AI tools and panels to the app — no rebuild, installed in one click.

Sandboxed by default — a plugin's backend runs in an embedded WebAssembly runtime. It can only reach the network hosts, secrets and files it declares, and you approve those at install. Plugins load lazily and idle-suspend when unused.
Install on double-click — grab a .nexplugin from the new plugin marketplace and double-click it (or Plugins → Install from file). A consent sheet shows the publisher signature and the exact permissions before anything runs.
Signed & verified — packages are minisign-signed, and upgrades must come from the same publisher. A new Plugins page in the sidebar lists everything you've installed, with enable/disable, per-plugin secrets (kept in the OS keychain), and one-click uninstall.
AI-aware — a plugin can expose tools the in-app assistant calls and panels that open like any other view.

The first plugin in the marketplace: a full S3 browser, scoped to whatever AWS account and role you choose.

Three ways to sign in — reuse your machine's existing aws sso login, run the SSO device flow in-app (pick an account → permission-set role, just like the AWS access portal), or use static access keys.
Browse & manage — navigate buckets and folders, preview and download objects, upload, create folders and delete — across regions automatically.
In your chats too — the assistant can list buckets and objects and read objects from the active session.
Install it from the marketplace.

The Commit button in a service's Source Control panel now has a sibling: Commit & Push.

Split button — hit the main button to run your usual action, or open the chevron menu to choose between Commit and Commit & Push.
Push happens right after the commit — Commit & Push commits your staged changes and immediately pushes them to origin on the current branch, so there's no second trip to the Push button.
Remembers your choice — whichever action you pick from the menu becomes the new default for that button (and your ⌘/Ctrl+Enter shortcut), and it sticks across restarts.
Safe on failure — if the commit lands but the push can't (auth, network, etc.), the commit is still saved and the push error is shown so you can retry from the header Push button.

Nexora now turns on Touch ID protection automatically — no toggle to hunt for.

Vault unlock — when your secrets vault is set up (and on the next unlock of an existing vault), Nexora enrolls Touch ID for you on any Mac that supports it. Unlocking is a fingerprint away, with your passphrase always available as a fallback.
Database connections — new connections require Touch ID to open, test or export by default, and existing connections that never set a preference are protected too. You can still turn it off per connection, and that choice is remembered.
Nothing forced where it can't work — on machines without biometrics (or builds that can't reach the secure keychain), it quietly stays on passphrase/login-password unlock.

Push a brand-new branch — it just works now. Pushing from a branch that had never been pushed used to silently fail (git aborts with "the current branch has no upstream branch"). Push (and Commit & Push) now publishes the branch automatically, setting its upstream to origin/<branch> on that first push — no command line needed.
See at a glance when a branch isn't pushed. The Source Control header now flags a branch that has no upstream yet: an amber "N unpushed" / "Not published" badge instead of the usual ↑/↓ counts, and the Push button reads Publish branch. Once published, it goes back to the normal ahead/behind indicators.