Skip to content

OpenTerminalUI 0.8.0

Choose a tag to compare

@Hitheshkaranth Hitheshkaranth released this 29 Sep 16:57
· 18 commits to main since this release
Mission Control dashboard Launchpad workspace
RELIANCE Security Hub with provenance Six-pane chart workstation

OpenTerminalUI 0.8.0

Highlights since 0.7.0:

Trust the numbers

  • Every security snapshot carries a provenance envelope (live / delayed / cached / synthetic / unavailable, source, as-of, latency), shown as a chip on the Security Hub and symbol rail.
  • Per-provider health row in the status bar; blank metrics say why they are blank.
  • Fabricated data is no longer shown as live: ticker tape, yield curve, insider rows, dividends, hotlists and events now come from real sources or honest empty states; the synthetic order book is labelled and anchored to the real last price.

Manage providers in-app

  • Settings → Data Providers shows what each provider unlocks and its live status (Kite is probed for real); admins can set, mask, test and clear API keys from the browser.

Analysis → action

  • Zerodha Kite holdings/positions import and CSV import (Zerodha / Groww / generic) into a holdings-first Portfolio page.
  • Paper Buy/Sell from the symbol rail and right-click menu; alert actions (paper order, add to watchlist, webhook) with dry-run.

One product, not 77 pages

  • Grouped, collapsible navigation rail with pinned and recent pages; symbol-aware Context Rail; unified events hub (earnings, dividends, corporate actions, F&O expiry, macro); global market follows the open symbol.
  • Linked research notes on the launchpad.

Agent

  • Persisted runs and threads, symbol-scoped memory and reflections, portfolio-aware tools, approval-gated actions, investor-persona ensemble.
  • MCP surface: 16 → 45 tools (38 read-only + 7 approval-gated writes), API-key auth bound to a user, HTTP transport (/api/mcp), otui:// resources, prompts, and {ok, data, provenance} result envelopes.

Security

  • Screener query RCE, strategy sandbox escapes, unauthenticated path traversal on the SPA fallback, watchlist IDOR, cross-user audit log / agent memory, admin-only plugin controls.
  • Secrets no longer leak into logs or third-party hosts; javascript:/data: links from news/LLM output neutralised; .env files created with restrictive permissions.

Fixes

  • ~200 verified bugs from a whole-repo review and ~45 data/UI defects from a screen-by-screen QA sweep of all 72 screens — backtest trade pairing, beta, Sortino, option Greek units, crypto market cap, ETF weights, exchange status, stuck charts/heatmap, mobile layout, timezone shifts.

Verified: backend 1219 passed; frontend 543 passed; e2e 60/60 (desktop+mobile) and 31/31 (CI).

Full changelog: v0.7.0...v0.8.0

Docker image

docker pull ghcr.io/hitheshkaranth/openterminalui:0.8.0
docker run -p 8000:8000 ghcr.io/hitheshkaranth/openterminalui:0.8.0

Multi-arch (linux/amd64, linux/arm64). Also tagged 0.8. Package: https://github.com/Hitheshkaranth/OpenTerminalUI/pkgs/container/openterminalui