release: v0.7.15

fix(updater): let electron-builder publish assets directly (--publish always)
instead of softprops/action-gh-release to ensure latest.yml filenames
match actual asset names — fixes Windows auto-update failure

fix(ci): consolidate macOS x64+arm64 into single build job so
latest-mac.yml includes both architectures

feat(ui): add custom minimize/maximize/close buttons for Windows/Linux
fix(security): block sensitive keys from store:get-setting
fix(security): remove exposed window.electron ipcRenderer bypass
fix(ssh): tear down port forwards on session disconnect
fix(db): encrypt credentials during JSON migration
fix(ui): only show AI summary toast for active session
fix(terminal): re-init highlighter after device auto-detection

Author: AnasProgrammer2

.github/workflows/release.yml

@@ -28,21 +28,16 @@ jobs:
         include:
           - os: macos-latest
             platform: mac
-            arch: arm64
-            build_cmd: npm run build && npx electron-builder --mac --arm64
-          - os: macos-latest
-            platform: mac
-            arch: x64
-            build_cmd: npm run build && npx electron-builder --mac --x64
+            build_cmd: npm run build && npx electron-builder --mac --x64 --arm64 --publish always
           - os: windows-latest
             platform: win
-            build_cmd: npm run build:win
+            build_cmd: npm run build && npx electron-builder --win --publish always
           - os: ubuntu-latest
             platform: linux
-            build_cmd: npm run build:linux
+            build_cmd: npm run build && npx electron-builder --linux --publish always
 
     runs-on: ${{ matrix.os }}
-    name: ${{ matrix.os }} ${{ matrix.arch || '' }}
+    name: ${{ matrix.os }}
 
     steps:
       - name: Checkout
@@ -126,23 +121,10 @@ jobs:
             Write-Host "No Windows certificate found — building unsigned."
           }
 
-      - name: Build & package
+      - name: Build, package & publish
         env:
           APPLE_TEAM_ID:               ${{ secrets.APPLE_TEAM_ID }}
           APPLE_ID:                    ${{ secrets.APPLE_ID }}
           APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: ${{ matrix.build_cmd }}
-
-      - name: Upload to GitHub Release
-        uses: softprops/action-gh-release@v3
-        with:
-          fail_on_unmatched_files: false
-          files: |
-            dist/*.dmg
-            dist/*.zip
-            dist/*.exe
-            dist/*.AppImage
-            dist/*.deb
-            dist/*.yml
-          token: ${{ secrets.GITHUB_TOKEN }}

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "netcopilot",
-  "version": "0.7.14",
+  "version": "0.7.15",
   "description": "NetCopilot – AI-powered SSH/Telnet terminal for network engineers",
   "main": "./out/main/index.js",
   "author": {

package.json

@@ -1,5 +1,5 @@
 import Database from 'better-sqlite3-multiple-ciphers'
-import { app } from 'electron'
+import { app, safeStorage } from 'electron'
 import path from 'path'
 import { existsSync, readFileSync } from 'fs'
 import { Connection, ConnectionGroup, SSHKey } from '../types/shared'
@@ -187,7 +187,12 @@ function migrateFromJson(db: Database.Database): void {
               "INSERT OR IGNORE INTO settings (key, value) VALUES (@key, @value)"
             )
             for (const [k, v] of Object.entries(credData.credentials ?? {})) {
-              insertCred.run({ key: `cred:${k}`, value: JSON.stringify(v) })
+              if (safeStorage.isEncryptionAvailable()) {
+                const encrypted = safeStorage.encryptString(v)
+                insertCred.run({ key: `cred:${k}`, value: JSON.stringify(encrypted.toString('base64')) })
+              } else {
+                insertCred.run({ key: `cred:${k}`, value: JSON.stringify(v) })
+              }
             }
           } catch {/* ignore credential migration errors */}
         }

src/main/db.ts

@@ -53,6 +53,13 @@ function createWindow(): void {
     mainWindow?.show()
   })
 
+  mainWindow.on('maximize', () => {
+    mainWindow?.webContents.send('window:maximized-change', true)
+  })
+  mainWindow.on('unmaximize', () => {
+    mainWindow?.webContents.send('window:maximized-change', false)
+  })
+
   // Zoom in/out/reset via Cmd+= / Cmd+- / Cmd+0
   mainWindow.webContents.on('before-input-event', (event, input) => {
     if (input.type !== 'keyDown') return
@@ -121,6 +128,15 @@ app.whenReady().then(() => {
 
   ipcMain.handle('app:get-version', () => app.getVersion())
 
+  // Window controls for custom titlebar (Windows/Linux)
+  ipcMain.handle('window:minimize', () => mainWindow?.minimize())
+  ipcMain.handle('window:maximize', () => {
+    if (mainWindow?.isMaximized()) mainWindow.unmaximize()
+    else mainWindow?.maximize()
+  })
+  ipcMain.handle('window:close', () => mainWindow?.close())
+  ipcMain.handle('window:is-maximized', () => mainWindow?.isMaximized() ?? false)
+
   setupStoreHandlers(ipcMain)
   setupSshHandlers(ipcMain, () => mainWindow)
   setupTelnetHandlers(ipcMain, () => mainWindow)

src/main/index.ts

@@ -21,6 +21,14 @@ function teardownSession(sessionId: string): void {
     try { session.jumpClient.end() } catch { /* already closed */ }
   }
   activeSessions.delete(sessionId)
+
+  // Close any port forwards tied to this session
+  for (const [id, fwd] of activeForwards) {
+    if (fwd.sessionId === sessionId) {
+      fwd.server.close()
+      activeForwards.delete(id)
+    }
+  }
 }
 
 const activeSessions   = new Map<string, ActiveSession>()

src/main/ssh.ts

@@ -118,6 +118,8 @@ export function setupStoreHandlers(ipcMain: IpcMain): void {
   // ── Settings ────────────────────────────────────────────────────────────────
 
   ipcMain.handle('store:get-setting', (_, key: string) => {
+    const forbidden = ['license.key', 'masterPasswordHash', 'dbKey']
+    if (forbidden.includes(key) || key.startsWith('cred:')) return undefined
     const row = getDb()
       .prepare('SELECT value FROM settings WHERE key = ?')
       .get(key) as { value: string } | undefined

src/main/store.ts

@@ -1,5 +1,4 @@
 import { contextBridge, ipcRenderer } from 'electron'
-import { electronAPI } from '@electron-toolkit/preload'
 
 const api = {
   // Store
@@ -96,6 +95,19 @@ const api = {
     getVersion: (): Promise<string> => ipcRenderer.invoke('app:get-version'),
   },
 
+  // Window controls (custom titlebar for Windows/Linux)
+  window: {
+    minimize:    () => ipcRenderer.invoke('window:minimize'),
+    maximize:    () => ipcRenderer.invoke('window:maximize'),
+    close:       () => ipcRenderer.invoke('window:close'),
+    isMaximized: () => ipcRenderer.invoke('window:is-maximized'),
+    onMaximizedChange: (cb: (maximized: boolean) => void) => {
+      const handler = (_: unknown, maximized: boolean) => cb(maximized)
+      ipcRenderer.on('window:maximized-change', handler)
+      return () => ipcRenderer.removeListener('window:maximized-change', handler)
+    },
+  },
+
   // Auto-updater
   updater: {
     check:       () => ipcRenderer.invoke('updater:check'),
@@ -216,14 +228,11 @@ const api = {
 
 if (process.contextIsolated) {
   try {
-    contextBridge.exposeInMainWorld('electron', electronAPI)
     contextBridge.exposeInMainWorld('api', api)
   } catch (error) {
     console.error(error)
   }
 } else {
-  // @ts-ignore
-  window.electron = electronAPI
   // @ts-ignore
   window.api = api
 }

src/preload/index.ts

@@ -1,4 +1,4 @@
-import { Settings, Zap, Network, HelpCircle, BookOpen, Keyboard } from 'lucide-react'
+import { Settings, Zap, Network, HelpCircle, BookOpen, Keyboard, Minus, Square, X, Copy } from 'lucide-react'
 import { useState, useRef, useEffect } from 'react'
 import { useAppStore } from '../store'
 
@@ -12,8 +12,15 @@ export function TitleBar({ onShortcuts, onWelcome }: Props): JSX.Element {
   const isMac = navigator.userAgent.includes('Mac')
   const activeSessions = sessions.filter(s => s.status === 'connected').length
   const [helpOpen, setHelpOpen] = useState(false)
+  const [isMaximized, setIsMaximized] = useState(false)
   const helpRef = useRef<HTMLDivElement>(null)
 
+  useEffect(() => {
+    if (isMac) return
+    window.api.window.isMaximized().then(setIsMaximized)
+    return window.api.window.onMaximizedChange(setIsMaximized)
+  }, [isMac])
+
   useEffect(() => {
     if (!helpOpen) return
     const handler = (e: MouseEvent) => {
@@ -26,7 +33,7 @@ export function TitleBar({ onShortcuts, onWelcome }: Props): JSX.Element {
   return (
     <div
       className="drag-region h-11 flex items-center justify-between border-b border-border bg-sidebar shrink-0"
-      style={{ paddingLeft: isMac ? '80px' : '16px', paddingRight: '12px' }}
+      style={{ paddingLeft: isMac ? '80px' : '16px', paddingRight: isMac ? '12px' : '0px' }}
     >
       {/* Logo */}
       <div className="flex items-center gap-2 no-drag">
@@ -100,6 +107,36 @@ export function TitleBar({ onShortcuts, onWelcome }: Props): JSX.Element {
           <Settings className="w-4 h-4" />
         </button>
       </div>
+
+      {/* Window controls — Windows/Linux only */}
+      {!isMac && (
+        <div className="flex items-center no-drag ml-2">
+          <button
+            onClick={() => window.api.window.minimize()}
+            className="w-11 h-11 flex items-center justify-center text-muted-foreground hover:bg-white/10 hover:text-foreground transition-colors"
+            title="Minimize"
+          >
+            <Minus className="w-4 h-4" />
+          </button>
+          <button
+            onClick={() => window.api.window.maximize()}
+            className="w-11 h-11 flex items-center justify-center text-muted-foreground hover:bg-white/10 hover:text-foreground transition-colors"
+            title={isMaximized ? 'Restore' : 'Maximize'}
+          >
+            {isMaximized
+              ? <Copy className="w-3.5 h-3.5 rotate-180" />
+              : <Square className="w-3 h-3" />
+            }
+          </button>
+          <button
+            onClick={() => window.api.window.close()}
+            className="w-11 h-11 flex items-center justify-center text-muted-foreground hover:bg-red-500 hover:text-white transition-colors"
+            title="Close"
+          >
+            <X className="w-4 h-4" />
+          </button>
+        </div>
+      )}
     </div>
   )
 }

src/renderer/src/components/TitleBar.tsx

@@ -54,15 +54,17 @@ export function TabBar(): JSX.Element {
           onActivate={() => setActiveSession(session.id)}
           onClose={() => {
             if (session.id === splitSessionId) setSplitSession(null)
-            // Generate session summary from ARIA messages before closing
-            const { aiMessages } = useAppStore.getState()
-            const cmds = aiMessages.filter(m => m.toolCalls?.length).flatMap(m => m.toolCalls ?? []).filter(t => t.status === 'done')
-            if (cmds.length > 0) {
-              const names = [...new Set(cmds.map(t => t.command.split(' ').slice(0, 3).join(' ')))].slice(0, 3)
-              toast.info(`Session closed — ${session.connection.name}`, {
-                description: `ARIA ran ${cmds.length} command${cmds.length > 1 ? 's' : ''}: ${names.join(', ')}${cmds.length > 3 ? '…' : ''}`,
-                duration: 5000,
-              })
+            // Only summarize AI messages when closing the active session (aiMessages is global)
+            if (session.id === activeSessionId) {
+              const { aiMessages } = useAppStore.getState()
+              const cmds = aiMessages.filter(m => m.toolCalls?.length).flatMap(m => m.toolCalls ?? []).filter(t => t.status === 'done')
+              if (cmds.length > 0) {
+                const names = [...new Set(cmds.map(t => t.command.split(' ').slice(0, 3).join(' ')))].slice(0, 3)
+                toast.info(`Session closed — ${session.connection.name}`, {
+                  description: `ARIA ran ${cmds.length} command${cmds.length > 1 ? 's' : ''}: ${names.join(', ')}${cmds.length > 3 ? '…' : ''}`,
+                  duration: 5000,
+                })
+              }
             }
             closeSession(session.id)
           }}