TUFF 9.3.0

TUFF 9.3.0 can run web search, page reads and file search inside a sandbox.

A huge thanks to @Osiriss664, who designed and built all of this across four pull requests (#48, #50, #51 and #52, tracked in #38): the sandbox image and its server, the firewalls, the signed connection between TUFF and the sandbox, starting and stopping it, and the web and file search that go through it. That's over 20,000 lines of careful code and tests. Thank you!

• Settings > Search > Run web search and page reads in a sandbox. Searches and the pages the model reads are fetched inside a small Linux virtual machine, and pages and PDFs are turned into text there, so TUFF only receives finished text. The sandbox can't reach your Mac or your local network.
• Settings > Search > Files > Read my search folders in a sandbox too. A second sandbox with no network at all reads the folders you picked, read-only, and turns your files into passages for the search index.
• Both are off by default. They need macOS 26 or newer and Apple's container tool, version 1.5 or newer. The first start downloads the sandbox image (about 65 MB).
• If a sandbox isn't ready, web or file search fails with a message. It never falls back to reading pages or files in TUFF.
• File and folder names with hidden or direction-changing characters are now shown written out, so a name can't pretend to be another file type. This applies with or without the sandbox.

More details are in Web sandbox.