v0.3.0: TUI Dashboard and Universal Installer
[0.3.0] - 2026-04-25
Added
- Interactive TUI: Introduced a terminal-based dashboard using
ratatuifor side-by-side code and security analysis. - Remote Auditing: Support for fetching and scanning scripts directly from Raw URLs (GitHub/Gists) without writing to disk (memory-only analysis).
- Universal Shell Support: Added native hooks for Bash and Fish, ensuring parity with the existing Zsh integration.
- Mend-Style Automated Installer: A new
install.shthat handles dependency checks, compilation, and automatic shell hook injection. - Final Verdict Logic: Added a summary message providing a clear recommendation (Safe/Caution/Dangerous) based on audit results.
- Word Boundary Detection: Implemented
\bregex boundaries to significantly reduce false positives in benign scripts (e.g.,encodevsnc).
Changed
- Engine Pivot: Transitioned from a Landlock-based "Enforcement" model to a Static Analysis "Intelligence" model for better portability.
- Global Deployment: The installer now deploys Oversight to
~/.local/bin, moving it out of the development directory for system-wide use. - Wrapper Logic: Unified the shell logic to focus on a thin "glue" layer, moving the intelligence into the core Rust binary.
Fixed
- Pattern Noise: Fixed an issue where variable names containing command fragments (like 'nc') triggered high-severity network warnings.
- Resource Cleanup: All remote audits are now performed in volatile memory, ensuring no temporary files or sensitive data are left behind.
Full Changelog: v0.1.0...v0.3.0