v0.6.5 — your values go back only where you sent them

Install: curl -fsSL https://omna.dev/cli/install.sh | bash
Homebrew: brew tap gaurjin/omna https://github.com/gaurjin/omna-plugin && brew install --cask omna

Follow-ups from the architecture review.

Your real values go back only where you sent them

In the browser, a reply from one AI site now gets back only the real values you sent to that same site. A reply from ChatGPT that mentions a [EMAIL_1] you created on claude.ai stays [EMAIL_1]. Values saved before this version keep working everywhere, so old chats still read normally. Values only Claude Code sent never appear in a website.

Nothing slips past

• Files an agent uploads through the AI company's files API are masked (text, code, Word, Excel); pictures and PDFs go as they are and the log says so.
• WebSocket chats: binary messages that are really text are masked, replies follow the restore switch, and the log records them.
• The answer to Cloudflare's robot check is still left alone, but a web form re-sent behind it is masked.
• A key written with a comma after it (sonar.login=KEY,) is caught.

Steadier

• omna mask or omna forget in a terminal no longer clash with the running curl command.
• The log no longer slows down as it grows.
• A website's own IDs are left alone in its background data, so its requests keep working.

Installer

install.sh runs only once it has fully downloaded, and installs this exact version (and a fixed version of uv). It is attached to every release.

Under the hood

Engine omna-pii-mask 0.2.12. The Homebrew build is signed and notarized by Apple.