v0.2.25 — Reliable auto-login, security hardening, explorer & graph conveniences

Release date: 2026-07-03
Previous version: v0.2.24

TL;DR

"Remember me" now actually survives app restarts. A batch of security hardening (auth, XSS, path traversal) landed across the server, and new conveniences were added: send files from the explorer straight to a terminal or task, link knowledge-graph nodes via right-click, and description fields that auto-grow with content.

Highlights

Auto-login persists across restarts

• Previously, checking "Remember me" still forced a re-login after every server (app) restart — sessions lived only in memory and the signing key was regenerated per process.
• Sessions and the signing key are now persisted in SQLite, so the 30-day session works regardless of restarts.

Security hardening

• Auth bypass, information exposure, XSS, and path traversal protections were applied across the server (files/images/memory/vault/projects routes, WebSocket, Electron).
• New network and path safety utilities validate every externally reachable path consistently.

File explorer → send to terminal/task

• Right-click a file in the explorer to send its path to a running terminal or create a task (TODO) from it. Results are confirmed via toast.

Knowledge graph (wiki) conveniences

• Right-click a graph node to link it to another document with a wikilink.
• Added a toggle for showing/hiding node names.

UI polish

• Description fields in the terminal-create and planner forms auto-grow with content (scroll past max height; manual resize still works).
• Dropdowns and popovers are unified under a shared AnchoredPopover, so they no longer get clipped; accent color tokens were made consistent.
• Session dock tray and pop-out window sync improved.

Install / Update

npm i -g [email protected]

Desktop app: use the .exe / .dmg / .AppImage from the GitHub Release assets.

Full commit list

• 35fd4a9 fix(auth): 자동 로그인이 서버 재시작 후에도 유지되도록 세션 영속화
• e470372 WIP(ui): 설명 textarea 최대 높이 제한 + 내용 맞춤 자동 크기
• 8004e1c fix(security): 인증·노출·XSS·경로 하드닝 일괄 적용
• 9d38ac8 WIP(ui): AnchoredPopover 도입, accent 토큰 통일, 탐색기 토스트
• 8d8a936 wip: update 3 files
• 040e5b0 WIP(vault): 그래프 노드 우클릭으로 위키링크 연결 + 이름 표시 토글
• 5dcdc06 WIP(files): 파일 탐색기 우클릭 메뉴에 터미널/작업 전송 추가

Related docs

• Detailed changelog — per-date technical decision records

Full Changelog: https://github.com/HyperAITeam/CLITrigger/compare/v0.2.24...v0.2.25