Ankita v2.5.0: a desktop companion island that never misses an approval

说明与用途

Ankita v2.5.0 引入了一个始终显示审批请求的伴侣岛屿，实现了四层审批系统，启发式只能建议但不能拒绝，并提供安全的浏览器捕获和通过 OAuth 的无密钥 Composio 登录。

问题

Users need a desktop AI assistant that reliably surfaces approvals and protects against unauthorized tool calls, while providing a seamless, visually engaging interface.

结果

Ankita v2.5.0 delivers a persistent companion island that surfaces approvals, a robust four‑tier approval gate that never silently denies, secure browser capture, and keyless OAuth sign‑in, improving usability and security.

工作流

• 1. Launch Ankita and the companion island appears on the screen edge.
• 2. When a tool call is made, it is evaluated against blocklist, explicit rules, per‑app rules, locked defaults, and a heuristic.
• 3. The heuristic can suggest allow, ask, or ask‑once but never deny.
• 4. If a tool call lowers protection, it is blocked under auto‑approve and recorded in mcp‑tiers.json.
• 5. Users can capture browser pages via the MV3 extension, which pairs over a loopback bridge and preserves drafts.
• 6. Authentication to Composio is performed via OAuth 2.1 + PKCE, storing only a grantId in the OS vault.

证据

The headline feature is a companion "island" that lives on the top edge of the screen, driven by the assistant's real threads, tools and approval flows.

来源

MCP tool calls now go through a four-level approval gate where a heuristic can suggest but never deny, and no scheduled job can quietly loosen its own protection.

来源

The island (368px wide, in compact/expanded/petit modes, plus a 14px wake strip to peek it back out) shows up to four teammate mascots in an activity grid.

来源

Pairing runs over the desktop's authenticated loopback bridge with single-use drag tickets — replayed, expired or cancelled tickets are rejected, and pairing survives browser restarts.

来源

Keyless Composio sign-in: nothing to host, nothing to leak. Connecting an app used to mean an API key in an env var. v2.5.0 replaces that with a browser OAuth 2.1 + PKCE flow.

来源

A heuristic can never deny. The last resolution step can recommend allow, ask or ask‑once, but never deny.

来源