Repository navigation
OpenTerminalUI 0.8.0
![]() |
![]() |
![]() |
![]() |
OpenTerminalUI 0.8.0
Highlights since 0.7.0:
Trust the numbers
- Every security snapshot carries a provenance envelope (
live / delayed / cached / synthetic / unavailable, source, as-of, latency), shown as a chip on the Security Hub and symbol rail. - Per-provider health row in the status bar; blank metrics say why they are blank.
- Fabricated data is no longer shown as live: ticker tape, yield curve, insider rows, dividends, hotlists and events now come from real sources or honest empty states; the synthetic order book is labelled and anchored to the real last price.
Manage providers in-app
- Settings → Data Providers shows what each provider unlocks and its live status (Kite is probed for real); admins can set, mask, test and clear API keys from the browser.
Analysis → action
- Zerodha Kite holdings/positions import and CSV import (Zerodha / Groww / generic) into a holdings-first Portfolio page.
- Paper Buy/Sell from the symbol rail and right-click menu; alert actions (paper order, add to watchlist, webhook) with dry-run.
One product, not 77 pages
- Grouped, collapsible navigation rail with pinned and recent pages; symbol-aware Context Rail; unified events hub (earnings, dividends, corporate actions, F&O expiry, macro); global market follows the open symbol.
- Linked research notes on the launchpad.
Agent
- Persisted runs and threads, symbol-scoped memory and reflections, portfolio-aware tools, approval-gated actions, investor-persona ensemble.
- MCP surface: 16 → 45 tools (38 read-only + 7 approval-gated writes), API-key auth bound to a user, HTTP transport (
/api/mcp),otui://resources, prompts, and{ok, data, provenance}result envelopes.
Security
- Screener query RCE, strategy sandbox escapes, unauthenticated path traversal on the SPA fallback, watchlist IDOR, cross-user audit log / agent memory, admin-only plugin controls.
- Secrets no longer leak into logs or third-party hosts;
javascript:/data:links from news/LLM output neutralised;.envfiles created with restrictive permissions.
Fixes
- ~200 verified bugs from a whole-repo review and ~45 data/UI defects from a screen-by-screen QA sweep of all 72 screens — backtest trade pairing, beta, Sortino, option Greek units, crypto market cap, ETF weights, exchange status, stuck charts/heatmap, mobile layout, timezone shifts.
Verified: backend 1219 passed; frontend 543 passed; e2e 60/60 (desktop+mobile) and 31/31 (CI).
Full changelog: v0.7.0...v0.8.0
Docker image
docker pull ghcr.io/hitheshkaranth/openterminalui:0.8.0
docker run -p 8000:8000 ghcr.io/hitheshkaranth/openterminalui:0.8.0Multi-arch (linux/amd64, linux/arm64). Also tagged 0.8. Package: https://github.com/Hitheshkaranth/OpenTerminalUI/pkgs/container/openterminalui



