Tome v0.3.0
Highlights
Tome v0.3.0 turns flows into a first-class automation tool and drops the misleading "air gap" terminology for the technically accurate "egress" — the allowlist proxy that actually governs what your agents can reach.
What's new
Flow products pipeline
- Run products. Every terminal node's output is copied to
out/<runId>/with amanifest.json(flow sha256, run id, containment state, git head/dirty, per-product sha256), a freshout/latest/, and an appendedruns-index.json. - Fail-closed contracts. A node that exits 0 still fails the run if it didn't actually write every output it declared.
- Export destinations. Export a finished run to a destination you've consented to once — consent is hash-pinned and revocable.
- Schedules. Run a flow on its own (daily, UTC). Scheduled runs are always contained, and a schedule suspends itself the moment its flow file changes on disk.
- Headless runner.
tome-runnerexecutes a.flow.jsonto completion outside the desktop app — on a server, undersystemd --usertimers, producing the same products and manifests. Seedocs/remote-runner.md.
Containment → egress
- The "air gap" framing is gone. The sandbox denies direct network egress (raw sockets, SSH, DNS); the only route out is a per-pane allowlist proxy limited to model-provider domains. The concept is now named egress across the codebase.
- Migrating users keep their passphrase/TOTP/consents — old
airgap*.jsonfiles are renamed in place on first boot. - Existing repos' committed
.tome/airgap.jsonstill resolve (with.tome/egress.jsonpreferred).
Assistant
- DeepSeek (V4 Pro / Flash) and a custom any-provider endpoint (any OpenAI- or Anthropic-compatible base URL + model + key).
- Requesty routing shortcut (
REQUESTY_API_KEY) for Claude Opus.
Mentor mode + Viibi
- New mentor mode: a gate overlay that judges your work against bundled skills, with a review report.
- Viibi, the status-bar mascot, reflects live app state (gated, blocked, running).
Docs
- New GitHub Pages landing page (
zwaneldmz.github.io/tome/), a bespoke hero banner, and a rewritten README. - Documentation and code comments aligned to the Google developer documentation style guide.
Fixes
- Layout restore for saved pane arrangements.
- CI hardening: cargo-audit gate, rust-cache, clippy/rustfmt drift, and the
h2supply-chain bump (RUSTSEC-2026-0258).
Downloads
Unsigned builds — verify against the SHA256SUMS manifests before opening. macOS: xattr -dr com.apple.quarantine /Applications/Tome.app after a fresh copy.