Repository navigation
Releases
Releases · discorgento/ouija
v0.8.0
0.8.0 (2026-10-22)
Features
Bug Fixes
- chat: show the resolved path in approvals and keep the debug log private (09ff234)
- config: refuse duplicate keys and reveal hidden text in ouija trust (66c104d)
- config: stop discovery at the home directory whatever its name (0d31c6e)
- engine: confine bash with seccomp and a PID namespace, and widen the git restore (6083b7c)
- engine: keep a confined git init quiet (19a54ce)
- engine: mark failed tool calls on their trace span (2046cc8)
- engine: open files through os.Root and show the real target in approvals (9ab96f5)
- engine: refuse a FIFO with the same error on every OS (0f67f3b)
- engine: refuse bash commands with tag and other format characters (02faa51)
- engine: resolve absolute paths inside the project (4d2b1a8)
- engine: stop npm and pip retrying in a closed sandbox (05b3e7f)
- install: pin provenance to main and make pre-releases opt-in (1f99ff1)
- mcp: count a root's depth before resolving its symlinks (8724ff7)
- mcp: refuse tool calls from a broad root (924f384)
- providers: refuse cross-host redirects and bound responses (b3bc83e)
- totems: pin the doc encoding and disable git filters in review (185a4d7)
Documentation
- assets: frame the demo GIF like the install GIF (fdee0b9)
- bring every page in line with the hardened sandbox and trust (04f0f6a)
- fix pages that disagreed with the code (4d1fc65)
- readme: put the quick start right after the demo and size every image alike (56a713e)
- security: describe absolute paths, the quiet git init and offline retries (08d9266)
- security: say what a Landlock ABI v9 kernel leaves open for UDP (f89c888)
- site: let the framed screenshots and demo carry their own title bar (92b218b)
- style: use one markup for images and make screens for screenshots (74fd59e)
v0.7.0
0.7.0 (2026-10-22)
Features
- engine: turn the bash sandbox on by default and harden the tool gate (e0f07d5)
Bug Fixes
- cli: list the current trust-only keys in the help (21cad2d)
- cli: show --continue in the chat usage (d6d64a9)
- config: tighten project trust and the global config (9cd20d7)
- engine: drop symlinked home grants to credentials; refuse unsandboxed bash without a permission config (7d71952)
- engine: fix the sandbox and protected paths on macOS and Windows (02abebb)
- engine: protect more credential files without blocking ordinary project paths (a087e6f)
- install: require an absolute install dir without shell metacharacters (c6f40b0)
- mcp: bound messages and calls, refuse duplicate ids, harden resources/read (f584a2d)
- setup: refresh the fallback list of free OpenRouter models (8e73bb4)
Documentation
v0.6.0
0.6.0 (2026-10-21)
⚠ BREAKING CHANGES
- sandbox: with tools.bash.sandbox enabled, commands that use the network (downloading dependencies, calling a local service) now need network.connect, e.g. [443], or network.all.
Features
v0.5.1
v0.5.0
v0.4.0
v0.3.0
0.3.0 (2026-10-20)
Features
- install: add install.sh for Linux and macOS (1dd1d71)
- site: add a live terminal demo and animate the séance (27f8f32)
- site: add a terminal-styled landing page published to GitHub Pages (733fcb8)
- site: compare a prompt with a totem, add a first-five-minutes guide and a light theme (4c53dc6)
Bug Fixes
- install: fall back to the newest release that has its Windows archive (17ff28f)
v0.2.0
v0.1.0
0.1.0 (2026-10-20)
⚠ BREAKING CHANGES
- config: DefaultConfig has no provider or model, and LoadConfig no longer requires them; run Validate on the merged config.
- registry: Totem no longer includes Init/Cleanup; implement Initializer (Init(ctx, eng)) and Cleaner instead, and run totems with registry.Invoke.
- config: Config.Passes and Config.Dimensions are removed; use Config.Totems / TotemConfig.
- engine: Agent.Run takes a RunEnv; NewReAct takes no config and ReActConfig is gone; PermissionConfig must be changed through SetTool / SetDefault once handed to an Engine.
Features
- a purple planchette logo, built on the original design (edee6f4)
- bootstrap: expose config-to-engine wiring for external totems (8853598)
- bootstrap: run a totem binary from one line with bootstrap.Main (993f6e1)
- chat: name the totems on the welcome again (f218297)
- chat: redesign the TUI — welcome, tools, diffs, approvals, search (e15f34c)
- chat: run every totem, /learn, command output and golden screens (bb40b5c)
- chat: smooth streaming,
@filementions, /undo, /task, sessions and themes (4b64c28) - chat: trim the welcome to the logo and four places to start (ff1be74)
- cli: add a shared palette and restyle doctor, setup and init (e66bcd8)
- cli: draw totem runs live on the terminal (ab58dbb)
- config: require the developer to choose the provider and model (bd20015)
- config: require trust before applying a discovered project config (38482fb)
- engine: add an undo journal and project file listing (d8c2374)
- engine: confine bash commands with Linux Landlock (opt-in) (df96861)
- engine: fit tool results and history to the model's context window (fdea40d)
- engine: report run start/end, turn tool summaries and context use (72d1b10)
- generate: scaffold standalone external totem modules (5f7daac)
- harness: add CLI, MCP server, engine, providers and totems (852ae3d)
- mcp: run tool calls concurrently and support cancellation (5833612)
- models: list each provider's models from its own API (9f6186c)
- registry: make the totem lifecycle optional and add typed inputs (6c1c5b7)
- sticker: mark the sticker with the new planchette (2eeb850)
- take the context window from the config, the model lists or Ollama's default (8e314fc)
- theme: add catppuccin, dracula and mono themes (5245d54)
- theme: add OUIJA_NO_ANIMATION for a still screen (c6f3d55)
- theme: move ouija's palette from pink toward purple (7609d13)
- trace: mark turns instead of resetting the tracer (cc18514)
- trace: show the grep/glob pattern next to the path (c9e5807)
Bug Fixes
- bash: judge expanded words in the denylist and keep failing output (85c205a)
- bash: stop learned patterns from pre-approving extended commands (208c0a5)
- build: pass ldflags once in make install and trim release paths (52f47dc)
- chat: fetch model lists off the event loop, keep text terminal-safe (cf824a8)
- chat: keep the session trace and match approval keys to the menu (65d6ccd)
- chat: send slash commands as typed and fix approval and queue flow (5ff153a)
- chat: send the assembled system prompt and unify generation handling (7c4ad1f)
- chat: show the checkboxes of a task list (f8b385c)
- chat: Windows key releases, editor default and config writes (6f26e15)
- cli: make --help safe, exit codes consistent and first-run hints right (66ee37f)
- cli: reject stray totem args and surface broken config errors (2415db7)
- cli: stop listing the task totem twice in help (1a06630)
- cli: strip terminal controls from repo and model text; check the key (8698e69)
- config: harden project trust and never overwrite a broken config (99fb4e3)
- config: keep the sandbox root inside the project (60859ea)
- config: scope the project API key to its provider (b62fb49)
- deps: build with Go 1.26.9 for 27 standard-library vulnerabilities (fc8ef01)
- doc: lock the generated HTML down with a Content-Security-Policy (01b3023)
- doc: put the CSP before any model-written markup (40a5134)
- engine: bound provider streams by silence, not length, and retry dropped ones (289ff54)
- engine: classify stream errors and harden the tool pipeline (de5d87b)
- engine: close sandbox escapes through dangling symlinks (2ccc5bf)
- engine: close Windows sandbox escapes and run bash in a real shell (19ae53a)
- engine: enforce protected paths through symlinks (7c3fe4d)
- engine: guard protected paths and the home dir on Windows too (69199c1)
- engine: judge bash path words by value and physical location (66ae8e1)
- engine: keep tool order, count cache tokens and stop on cancel (9e09a99)
- engine: make structured output and long chats reliable (6dea3e9)
- engine: make the file tools work on large repositories (442c3f6)
- engine: mark a failing bash command f...