Ogma v0.1.4

Authenticated Browser Journeys

• Added reusable authenticated browser journey profiles.
• Record and replay login sequences.
• Verify authentication using URLs, DOM state, cookies, or HTTP requests.
• Automatically refresh expired sessions.
• Support manual MFA checkpoints.
• Maintain multiple identities for authorization and IDOR testing.
• Persist journey configuration across application restarts.
• Improve recovery when selectors, navigation targets, or authentication state change.

Schema-Aware API Imports

• Expanded OpenAPI 3 support with:

  • Request bodies and examples.
  • Path, query, header, and cookie parameters.
  • Local references and reusable components.
  • Security schemes and authentication metadata.
  • Server variables.
  • Schema-derived values and insertion points.

• Added GraphQL introspection import and operation generation.

• Added SOAP/WSDL operation and request generation.

• Improved Postman variable, URL, body, and authentication handling.

• Added schema metadata for type-correct request mutation and automated testing.

• Improved format detection and rejection of unsafe external references.

Plugin SDK 1.1

• Completed frontend SDK contracts for:

  • Request retrieval, raw access, and search.
  • Findings.
  • Scope.
  • Projects.
  • Navigation and sidebar integration.
  • Backend communication.
  • Theme and UI lifecycle.

• Added reliable asynchronous SDK initialization.

• Added compatibility declarations for Ogma and SDK versions.

• Improved plugin permission handling and installation review.

• Exposed runtime limits and plugin validation information.

• Strengthened plugin runtime isolation and callback failure handling.

• Improved Community Marketplace package and registry validation.

• Existing unsigned plugins remain fully compatible.

• Published @kaijinlab/ogma-sdk@1.1.0 to npm.

Workflow Improvements

• Workflows are now shared across projects in the same workspace by default.
• Project-specific workflows remain supported.
• Restored workflow node details after navigating away and returning.
• Improved workflow selection and editor state restoration.
• Moved workflow action controls below workflow names for a more compact studio layout.
• Increased the usable workspace available to the node editor.

HTTP History Accuracy

• Replaced the misleading inspected state with accurate modification tracking.
• Requests altered by Match & Replace or interception are now identified as modified.
• Corrected HTTPQL filtering when selecting traffic state indicators.
• Improved visual distinction between traffic sources and modified entries.