Loach v1.1.1
What's new
- macOS support. Loach now ships a native Apple Silicon build (
.dmgfor fresh installs,.app.tar.gzfor auto-update). Gatekeeper bypass is required on first launch — see the install instructions inREADME.md. Intel Macs are not supported.
Fixes & hardening
- Web-fetch tool is now rate-limited and rejects requests to private, loopback, link-local, and other non-routable addresses to prevent SSRF.
- Export, IPC, and MCP surfaces hardened: tighter input validation on exported chats, additional bounds checks across IPC commands, and MCP server error messages are sanitized before being surfaced as notices.