-
ChatTLLX v1.18.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 7m17sContainer images / Build temporary amd64 candidates (push) Successful in 8m8sContainer images / Smoke-test App candidate (push) Successful in 1m8sContainer images / Smoke-test Whisper candidate (push) Successful in 50sContainer images / Publish immutable amd64 candidates (push) Successful in 1m23sRelease / Verify and publish release (push) Successful in 1m25sreleased this
2026-09-27 21:25:23 +00:00 | 2 commits to main since this releaseAdded
- Read, write, and atomically edit files in the chat sandbox with
workspace_read,
workspace_write, andworkspace_edit; unique, non-overlapping replacements leave
the original file unchanged on failure. - Show sandbox output as clickable download tiles, with inline previews for verified
PNG, JPEG, WebP, GIF, and AVIF images. Images may also be inspected withworkspace_read. - Copy selected Plus attachments and web images actually used by the model into the
corresponding encrypted chat workspace when the sandbox and durable storage are enabled.
Full text and binary uploads are available to sandbox tools; vision images use the
compressed bytes sent to the model. Import failures are reported instead of advertising
unavailable files to the model.
Fixed
- Keep light-theme sandbox download tiles readable.
- Avoid starting a local Whisper worker when external transcription is configured,
and stop an app-started worker when switching to an external server.
Security
- Require matching chat ownership and verify actual image bytes before importing web
images into the sandbox workspace or serving inline sandbox image previews. - The updated signed Agent-Ready image pre-creates the
chat/userworkspace scope
directories at agent startup and applies their permissions and ownership through a
no-follow descriptor, so a concurrent symlink swap can no longer redirect an agent-restart
chmod/chownto an unrelated guest path. This applies to newly provisioned sandboxes;
existing sandboxes keep their current runtime and are unaffected.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Read, write, and atomically edit files in the chat sandbox with