Skip to content

v0.8.1-beta.2

Pre-release
Pre-release

Choose a tag to compare

View all tags
@HANCORE-linux HANCORE-linux released this 03 Sep 23:26
· 135 commits to main since this release
v0.8.1-beta.2
5a8cfaa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.8.1-beta.2

OmaQ v0.8.1-beta.2 is a security, reliability and usability prerelease for invite-only chat in the Omarchy bar. Its helper implements Protocol 14; the base UI remains compatible with Protocol 7 through 13 helpers and gates newer capabilities.

Important

The earlier v0.8.1-beta.1 tag remains immutable and predates the source updater, private-repository authentication, shell-readiness hardening, README and rail-icon polish, and semantic Omarchy theme support. This prerelease includes those follow-ups rather than moving the earlier tag.

Highlights

  • Added inline Reply plus exact pointer and keyboard selection with a selection-only Copy action.
  • Added per-chat search with bounded helper-authored results and helper-authoritative local timestamps.
  • Extended message scaling to composer input without scaling controls, receipts or member labels.
  • Added helper-managed imports for bounded PCM WAV notification sounds.
  • Added GroupChat file, image, clipboard, drag-and-drop, acceptance, cancellation, history and playback parity with DirectChat.
  • Extended group administration with admin invitations and moderation of offline ordinary members.
  • Bound every chat delegate to one conversation for reliable saved size and placement.
  • Improved Unicode emoji presentation, reaction interaction, constrained layouts and destructive confirmations.
  • Fixed TCP-only relay registration after disconnect so startup and periodic recovery both restore compiled relays.

Changes since beta 1

  • Added a shell-off source updater that clones and builds outside the monitored plugin tree, validates the exact commit and helper, stops the shell supervisor and Quickshell, and atomically exchanges the complete Git checkout without a copy fallback.
  • Added bounded staging, exact filesystem and mount checks, retained external rollback trees, group-safe helper activation, consumer verification, and same-commit no-op handling.
  • Added private GitHub access through a validated GitHub CLI and a host-scoped in-memory Git header without persisting credentials in arguments or checkout configuration.
  • Hardened asynchronous shell restart readiness, session-lock rechecks, supervisor relaunch handling, and process identity binding across consumer checks and rollback.
  • Added semantic Omarchy theme palette support while preserving legacy color0 through color7 precedence.
  • Polished the README header and kept Safety code and Identity rail icons outlined when selected.

Security and reliability

  • Direct text messages continue to require the Signal Double Ratchet and never fall back to plaintext.
  • Hardened helper input, UTF-8 handling, JSON parsing, persistence, rate limits, storage boundaries, attachment verification, and group-admin authorization.
  • Enforced plain-text rendering for remote QML text except the explicitly escaped Markdown message renderer and chat header.
  • Added group-safe helper backup, activation, rollback and update handling with process, peer-credential, protocol and hash binding.
  • Hardened installation order, release diagnostics and uninstall cleanup, including descriptor-relative no-follow checks for runtime-rule removal.
  • Replaced the retired notification clip with sounds/uhoh.wav and clarified the source and binary license scopes.

Upgrade notes

Installations that already contain the source updater can run the following command while canonical origin/main still matches this release:

~/.config/omarchy/plugins/hancore.omaq/scripts/update-omaq.sh \
  --yes --expect-commit 5a8cfaafc4f053294b6e50e7dc5f0028a59c2e50

The exact commit binding makes the command fail closed rather than installing a different origin/main revision.

Installations from v0.8.1-beta.1 or older revisions that do not contain this command must use the external bootstrap procedure, adding the same --expect-commit 5a8cfaafc4f053294b6e50e7dc5f0028a59c2e50 binding to its final updater invocation. Private repository access requires an authenticated GitHub CLI session.

After upgrading, validate the plugin and inspect helper status:

omarchy plugin validate ~/.config/omarchy/plugins/hancore.omaq
~/.config/omarchy/plugins/hancore.omaq/scripts/update-helper.sh --status

Helper replacement remains pending while private groups are active when a group-safe restart cannot be proven. Do not copy identity, Ratchet, group-registry or history state between machines as part of a source update.

Known limitations

  • This is a beta prerelease; packaging and AUR publication remain paused.
  • Signal Double Ratchet protection applies to direct text messages, not files, calls, or group traffic.
  • Calls are available only in direct chats.
  • Complete native multi-monitor, separate-network and three-peer group-attachment acceptance remains ongoing.
  • A historical retired sound blob remains reachable from older Git history and v0.8.0; no history rewrite has been performed.

Licensing

  • OmaQ QML and project-original assets: MIT, except where separately attributed.
  • Helper source: GPL-3.0-or-later.
  • Distributed helper binary linked with libsignal-protocol-c 2.3.3: GPL-3.0-only.
  • Bundled media retain the licenses recorded in THIRD_PARTY.md and sounds/ATTRIBUTION.md.

Compare v0.8.0 with v0.8.1-beta.2

Compare v0.8.1-beta.1 with v0.8.1-beta.2

Assets 2
Loading