August 27, 2026

Web Chat open to all users

12 new 9 improved 16 fixed

Web Chat is now open to all users this week, alongside a full air-gap deployment story for self-hosted installs and a wave of runtime, session, and capability fixes.

New

Web Chat open to all users. Web Chat is now available to all users (marked beta), with session search, correct session scoping, mismatched project URL correction, and recoverable transcript and runtime errors all landing together.
Web Chat documentation. Six new documentation pages cover the web Chat UI: overview, quickstart, sessions, runtimes, agents and models, and slash commands.
Air-gap mode for disconnected installs. A new airgapped configuration brings all front end resources local and API from making outbound requests to public hosts — fonts are vendored locally, the analytics notebook is hidden, model pricing is served from a bundled catalog, and capability dependencies are pre-baked into the runtime image so sandbox boot requires no network access.
Helm chart hardening for private-CA clusters. Self-hosted Helm charts now support non-root container execution and custom CA bundle mounts for outbound TLS trust, enabling deployment in hardened enterprise environments with private certificate authorities.
Bulk archive and unarchive for agent sessions. You can now select multiple agent sessions and bulk archive or unarchive them from the Sessions tab, with context-aware actions depending on whether the selection is active, archived, or mixed.
TUI /status command. The TUI now has a /status command that displays your current session, model, user, org, workspace, and project at a glance.
Offline-clean capability installs in air-gapped deployments. Air-gapped and offline deployments are pre-baked into the runtime image and install steps are skipped or run offline-only when egress is unavailable.
Guard invocations highlighted in session transcripts. The session view now highlights guard invocations and their policy decisions inline within the conversation transcript.
IP rotation via Cloudflare Workers in web-security. A new IP rotation tool in the web-security capability deploys Cloudflare Worker proxies on demand, enabling round-robin request routing through rotating egress IPs during engagements.
HTTP desync and request-smuggling tooling. HTTP desync and request-smuggling detection is now available in the web-security capability, covering 11 smuggling families with fingerprinting, payload construction, cache-poisoning detection, and victim-response classification.
Geo-distributed DNS resolution in web-security. The web-security capability can now resolve target hostnames through open DNS resolvers in multiple countries (via Shodan or Censys) to detect geo-fenced infrastructure, GSLB routing, and region-locked DNS responses.
LSB steganography in web-security capability. The web-security capability can now perform LSB steganography on PNG images, enabling payload smuggling tests and upload pipeline inspection via the built-in Python tool.

Improvements

Chat session list pagination and search. The chat session list now supports pagination and full-text search by title, model, agent, and label — no more 100-session cap cutting off older history.
Sandbox detail page redesign. The sandbox detail page now shows resolved workload context, and the sandbox list and detail views have been substantially redesigned with search, navigation, and richer runtime information.
dn runtime ls ownership awareness. dn runtime ls now marks runtimes you don’t own and accepts --mine to filter to only your runtimes.
Air-gap install documentation. Air-gap installation now has a complete procedure covering all three install paths, with corrected claims about outbound endpoints and bundle availability.
Vendored model catalog for air-gapped deployments. Air-gapped deployments no longer silently lose model pricing: the model catalog is now vendored locally and outbound connections are enforced by server-side policy.
On-prem runtime image pinning. On-prem deployments now pin the sandbox runtime to the exact release version, ensuring Helm charts, Replicated manifests, and air-gap bundles all resolve the same immutable image.
Helm CLI air-gap egress switch. Helm CLI air-gap installs can now set replicated.isAirgap=true to prevent the Replicated SDK pod from attempting outbound connections to replicated.app.
postMessage handler detection expanded. The web-security capability’s DOM analysis skills now detect postMessage handlers registered via window.onmessage, MessagePort/MessageChannel, and monitoring-shim wrappers, and flag additional origin-validation bypasses including unescaped-dot and missing-anchor regex bugs.
Failed capability preflight checks surfaced to agents and operators. When required tools (e.g. dnsx, katana) fail preflight checks, the agent now receives an explicit warning in its system prompt and operators see a log warning — instead of silently proceeding and burning tokens on a broken run.

Fixes

Long LLM generations will not time out on SaaS. The SDK now streams and reassembles responses internally to stay within gateway limits.
Admin-provisioned owner account setup. Admin-provisioned organization owners now receive the correct setup email and see an actionable account-setup form instead of a blank screen.
Runtime private-CA TLS on self-hosted installs. Remote runtimes on self-hosted installs with a private CA now connect successfully; connection failures report the actual cause instead of a generic message.
Self-hosted sandbox reconciliation. Self-hosted sandboxes (Docker and OpenSandbox) now reconcile correctly — stuck “running” rows are cleaned up and runtime credentials are cleared when a sandbox is confirmed dead.
Chat session URL project mismatch corrected. Opening a chat session URL with the wrong project key now redirects to the correct project instead of rendering the session under the wrong project’s header, capability count, and runtime — preventing compute from being billed to the wrong project.
Chat session list scoped to your own sessions. The chat session list now shows only your own sessions — foreign sessions from workspace colleagues no longer appear as dead-end “Untitled session” entries in the sidebar.
Session list search matches displayed text. Session list search now matches the text each row actually displays, including preview text for untitled sessions.
Returning users land in their last-used project. Returning to the app now lands you in the project you last used, instead of an empty default project or a 404.
Capability picker shows full installed list. The capability picker no longer hides already-installed capabilities, so you can see and select the full list.
Capability installer no longer hangs in Web Chat. The capability installer in Web Chat no longer hangs indefinitely — installs that succeed but time out on confirmation now resolve correctly, and the picker shows capability descriptions instead of bare slugs.
Transcript load failures show a readable error. Transcript load failures now show the HTTP status and a readable reason in the error panel, instead of a generic message with no detail.
Agent session confirmation dialogs accept paste. You can now paste the challenge string (e.g. DELETE-1, FREEZE-3) into agent session confirmation dialogs instead of typing it by hand.
Web chat message ordering fixed. Messages in the web chat session now appear in the correct order.
Agent selection in web chat no longer behaves confusingly. Agent selection in the web chat session view no longer behaves confusingly when switching between agents.
Caido web-security capability aligned to 0.57. The Caido web-security capability now works correctly with Caido 0.57+: the replay API, SDK version pins, and MCP server are all aligned to the 0.57 schema.
Web-security capability installs in air-gapped environments. The web-security capability now installs successfully in air-gapped and disconnected environments, skipping downloads for tools already present.