2.5.0 — Living Operating System

The release where the terminal grew a memory that outlived the browser tab.

Up to here the terminal was a single-device toy: everything you tracked lived in one browser on one phone, and a cleared cache was a wiped campaign. 2.5.0 is the release that made it an operating system you could trust with your data. Google sign-in and cloud saves arrived, but the story worth telling is the paranoia underneath them — every save checksummed and version-stamped, three automatic backups taken before any load, uploads that refuse to overwrite, and remote safety switches that can pause the cloud or AI without shipping an update. The philosophy that runs through everything after this — fail safe, never silently corrupt the user's data — is laid down here.

It is also where the security posture hardened into its permanent shape: a strict content-security policy, a pinned Firebase library, locked-down database rules, an automatic secret-scan on every commit, and the first real test gate. 747 tests is small next to what came later, but it is the moment the project started proving its claims instead of asserting them.

Notably, this is the release whose sign-in method quietly set a boundary that still holds: popup-only auth. Redirect sign-in was tried and banned (it fails invisibly on GitHub Pages and mobile) — see the graveyard.

ACCOUNT STATUS · filed, not yet approved by the archive owner. This text was drafted from the application's own changelog for that release; it stands until an approved account replaces it.