• v1.18.0 8eb409cd70

    ChatTLLX v1.18.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 7m17s
    Container images / Build temporary amd64 candidates (push) Successful in 8m8s
    Container images / Smoke-test App candidate (push) Successful in 1m8s
    Container images / Smoke-test Whisper candidate (push) Successful in 50s
    Container images / Publish immutable amd64 candidates (push) Successful in 1m23s
    Release / Verify and publish release (push) Successful in 1m25s
    Stable

    Ghost released this 2026-09-27 21:25:23 +00:00 | 2 commits to main since this release

    Added

    • Read, write, and atomically edit files in the chat sandbox with workspace_read,
      workspace_write, and workspace_edit; unique, non-overlapping replacements leave
      the original file unchanged on failure.
    • Show sandbox output as clickable download tiles, with inline previews for verified
      PNG, JPEG, WebP, GIF, and AVIF images. Images may also be inspected with workspace_read.
    • Copy selected Plus attachments and web images actually used by the model into the
      corresponding encrypted chat workspace when the sandbox and durable storage are enabled.
      Full text and binary uploads are available to sandbox tools; vision images use the
      compressed bytes sent to the model. Import failures are reported instead of advertising
      unavailable files to the model.

    Fixed

    • Keep light-theme sandbox download tiles readable.
    • Avoid starting a local Whisper worker when external transcription is configured,
      and stop an app-started worker when switching to an external server.

    Security

    • Require matching chat ownership and verify actual image bytes before importing web
      images into the sandbox workspace or serving inline sandbox image previews.
    • The updated signed Agent-Ready image pre-creates the chat/user workspace scope
      directories at agent startup and applies their permissions and ownership through a
      no-follow descriptor, so a concurrent symlink swap can no longer redirect an agent-restart
      chmod/chown to an unrelated guest path. This applies to newly provisioned sandboxes;
      existing sandboxes keep their current runtime and are unaffected.
    Downloads