Repository navigation
Releases: gaurjin/omna-plugin
Release list
0.6.16
One record system for the curl command and Omna for Chrome. Every receipt is now built from the masking engine's own audit events: what was found (kind, which layer caught it, what was done) and a fingerprint of each value — never the value.
- Value fingerprints are keyed per computer. A plain hash of a short value (a 9-digit ID, a phone number) can be worked back out by hashing every possible value; Omna's fingerprints are keyed with a secret that never leaves your machine, so they cannot. The same value is still recognised again on the same machine.
- Omna for Chrome's records join this chain. While the curl command runs, what Omna for Chrome masks (text you hid, files, pictures) is added to the same hash-chained receipts, and
omna reportshows it under the "chrome" door. - The totals in a receipt are worked out from what was found, so they can never disagree with it.
- The WebSocket path now records which layer caught each value, like every other way in.
Needs the masking engine omna-pii-mask 0.2.19 (installed automatically).
Install or upgrade: curl -fsSL https://omna.dev/cli/install.sh | sh · brew upgrade --cask gaurjin/omna/omna
omna 0.6.15
Smart masking is now on by default. It catches names and addresses written as ordinary sentences, on top of the rules. Every machine gets a compact open-source model (Apache-2.0, ~64 MB); machines with 16 GB of memory or more also get the OpenAI privacy filter, and both read every text. Models download in the background — starting Omna never waits, and every message gets fast masking until a model is ready.
omna smart on|off— saved;omna status, the installer and a one-time Mac notification say what smart masking does, whether it is on or off.omna categories off PHONE(andon) — let a category through: names, emails, phones, addresses, government IDs, money, health, work, devices and links, dates of birth. Secrets are always masked and cannot be switched off.- India: fast masking now finds Indian names and GSTIN, UPI IDs, driving licences, vehicle numbers, ABHA, UAN, PIN codes and mobiles written with a leading 0 — alongside Aadhaar, PAN, Voter ID and passport.
- Names without a model: a first name and surname written together ("Emma Clarke") are masked by fast masking, from public name lists. One word alone never counts.
- Smart masking no longer cuts a word in half (a model once marked the "U" of "UPI").
Needs the masking engine omna-pii-mask 0.2.18 (installed automatically).
Install or upgrade: curl -fsSL https://omna.dev/cli/install.sh | sh · brew upgrade --cask gaurjin/omna/omna
0.6.14
Smart masking (--smart) is about twice as fast and catches more: it now uses up to 4 cores (stepping down to 3 after 10 minutes and 2 after 30 minutes of non-stop work, so a long job does not overheat a fanless Mac) and reads every text with two on-device models — the OpenAI privacy filter and a compact open-source model (Apache-2.0) — whose finds are merged. Pictures and screenshots up to 100 MB are masked on a Mac (was 25 MB). Requires the masking engine omna-pii-mask 0.2.17.
v0.6.13
v0.6.12
v0.6.11
v0.6.10
v0.6.9
Omna for Chrome can now mask screenshots and pictures without the Mac app: the curl command reads the text in them with Apple Vision (built into macOS, no download) and Omna for Chrome blacks out the sensitive lines or sends masked text. macOS only.