Skip to content

Baram v0.5.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 04:57
v0.5.0
a4e2fb3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Baram v0.5.0

The plugin release. Baram now runs third-party plugins in an isolated sandbox with explicit,
per-plugin consent — and ships a viewer extension point, a PDF viewer and an HTML viewer.

Plugins now actually run

Plugins were disabled by default in v0.4.x while the execution model was rebuilt. They are on
in this release, and the model is new (§260):

  • Sandboxed tier. A plugin's code runs in its own isolated realm, not in the app. It can
    never touch the editor directly; every privileged operation goes through a Rust broker that
    authorizes each call against the specific plugin that asked.
  • Consent before install. Install shows exactly which capabilities a plugin declares and
    what tier it runs in. Nothing is granted silently.
  • Declarative contributions. Status-bar items, commands, settings and viewers are declared
    in the manifest rather than executed as arbitrary code.
  • A published plugin API for authors — see the plugin development guide.

Plugins published before this model existed cannot be installed; they must be republished with
a declared trust tier.

New

  • PDF viewer — open a PDF read-only, in-app (§5.1)
  • HTML viewer — view and edit HTML with a sandboxed live preview (§5.1)
  • Image and SVG viewer, shipped as a built-in plugin, on a new viewer extension point
    that plugins can use for their own file types (§69)
  • Click below the last block to append a paragraph, so a document never dead-ends (§4.2)
  • The crash screen now shows the underlying error instead of only a generic message (§4.2)

Fixed

  • The file tree header stays pinned while scrolling, and the scrollbar no longer shifts the
    layout (§4.3)
  • Block-handle menus and submenus are clamped to the viewport instead of being cut off (§4.8)
  • The text caret renders correctly on empty paragraphs (§4.9)
  • Built-in plugins appear in Settings again (§69)

Security

  • Secrets no longer cross the IPC boundary: the keyring, LLM and embedding commands were
    reworked so API keys stay in the backend (§259)
  • Every app command now opts into Tauri's ACL, with permissions granted per window tier — a
    sandboxed plugin's window is granted nothing it does not need (§260)

Requires macOS 13.0 or later. macOS builds are a universal binary (Apple Silicon + Intel).

Assets 16
Loading