Release Ogma v0.3.1 · ogmabox/ogma

v0.3.1

Added application translations in 24 languages, covering the interface, desktop dialogs, browser controls, workflow feedback, and exported security reports.
Added a first-run language prompt, bilingual language names, and language-specific plural and number formatting.
Added right-to-left layouts for supported languages while keeping URLs, protocol syntax, and technical viewers readable left to right.
Improved keyboard navigation, modal focus handling, visible focus indicators, and translated layouts.

Added seek-based pagination, bounded table caches, and visible-page prioritization to reduce memory use and unnecessary work in large histories.
Removed the loaded-row ceiling from filtered history browsing; additional results are fetched as needed rather than retained together in memory.
Stabilized row selection, inspected requests, column sizing, and scroll position while new traffic arrives or background refreshes complete.
Improved live reconciliation when responses change whether a request matches the active filter, including requests outside the currently loaded window.
Fixed stale scope settings, show-all scope behavior, and manual HTTPQL queries being overwritten by header filters.
Added the HTTPQL is_null operator for missing-response filters and corrected short Unicode body searches.
Added pinned Search queries, HTTPQL field suggestions, and pagination controls for results beyond the first page.
Added saved-filter import and export, and improved selected-request exports and history context actions.

Added project cookie jars with per-session selection in Replay.
Made Match & Replace application optional for Replay requests and sequences, and added controls for preserving or recalculating Content-Length.
Added per-session undo, request search, request-file saving, a GET/POST toggle, and target synchronization when pasting raw requests.
Improved Replay tab shortcuts, request-draft preservation, and attempt selection when opening sessions.
Added redirect following, response-side Match & Replace processing, payload alignment, a column picker, and bulk deletion in Automate.
Added placeholder creation from selected request text and hexadecimal payload support.
Improved WebSocket interception and browser message sending, prevented reconnects after an intentional disconnect, and bounded transcript rendering.
Improved live SSE history refreshes, filtering, deletion, and WebSocket connection highlighting.

Fixed the blank embedded-browser pane caused by an Electron rendering regression and updated Electron to 44.4.5.
Added website HTTP authentication prompts and proxy-aware handling for authenticated WebSocket upgrades.
Preserved connection-bound NTLM and Negotiate authentication and native popup contexts used by SSO flows.
Added TLS client-certificate selection and ensured configured identities are presented to upstream targets and specialized probes.
Added browser authentication controls and passkey account selection, with credential use restricted to trusted domains.
Added optional per-instance proxy username and password authentication, with automatic credential handling in the embedded browser.
Added a network-interface picker for proxy listener addresses and Linux transparent HTTP/HTTPS proxying gated on the required privileges.
Preserved HTTP/2 request trailers during upstream forwarding and expanded HPACK regression coverage.

Added workflow creation and testing through AI assistant conversations.
Added cross-workflow node copy and paste, HTTPQL preset filters, a resizable node configuration panel, and a full URL-encoding mode.
Allowed structurally incomplete workflows to be saved while keeping validation feedback available for testing and execution.
Reduced repeated graph serialization and polling updates, and improved node configuration and run-comparison state handling.
Fixed project switching so Replay drafts are saved and Automate results, workflow execution details, Sitemap, and Search do not retain stale project state.

Added durable assessment checkpoints and a recovery timeline so agents can resume work after losing context.
Added bounded tool discovery, exact contract lookup, compact Replay contracts, and actionable follow-up information while keeping the full tool list available.
Updated MCP tool listings to preserve the protocol-required result type supplied by rmcp.
Improved background-tab input, active-tab synchronization, browser snapshots, JavaScript dialogs, storage operations, and download metadata.
Preserved primary finding evidence when linking supporting requests and added persisted WebSocket conversations for evidence workflows.
Improved Match & Replace tool contracts, request-body searches, scope declaration, sitemap results, and long-running passive scan progress.
Reduced redundant project lookups and browser health probes, and retained execution receipts across uncertain sends and session recovery.

Improved project activation so stale list responses cannot restore the wrong active project.
Added local-filesystem paths for saving and importing project backups, and a backup-management interface.
Added Markdown and fullscreen finding descriptions, complete-project finding exports, and project-prefixed export filenames.
Improved Sitemap navigation, path display, persisted expansion state, and endpoint details.
Added collapsible navigation groups, additional appearance themes, shortcut import/export, and a CodeMirror editor for custom JavaScript and CSS.
Reduced unnecessary allocations, repeated list refreshes, local-storage writes, and heavy syntax highlighting across the interface.
Fixed stale plugin commands, file-upload and deletion state, export polling, scanner settings, and generated finding notifications.
Improved startup progress, desktop window geometry, quit dialogs, and recovery from partially migrated databases.

Migrated application metadata to OgmaBox and updated compatible frontend and Rust dependencies.
Bounded generated release notes so the first release in a new repository cannot exceed GitHub's description limit.
Fixed retries to reuse existing draft releases instead of attempting to create them again.
Restricted Linux capability helpers to Linux production builds while retaining cross-platform unit-test coverage, fixing the macOS and Windows compilation errors found during the v0.3.0 build.