Skip to content

v1.4.18

Choose a tag to compare

@cagostino cagostino released this 15 Apr 00:38
· 119 commits to main since this release
356fbd8
  • Security: desktop.py shell command injection fix (shell=True → shlex.split)
  • Security: torch.load weights_only=True for diff/image_gen checkpoints; explicit weights_only=False with comment for DIAMOND models
  • Security: Agent gains safe_tools=True param — excludes sh and python execution tools from default set
  • Security: SandboxedEnvironment for user-controlled Jinja2 rendering in serve.py and mcp_server.py
  • Jinx.execute() accepts a list or NPCArray as npc — runs jinx in parallel across all instances
  • README: streaming example uses parse_stream_chunk (provider-agnostic), NPCArray jinx section, long sections collapsed to dropdowns