Release OpenGUI 0.7.2

CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.7.2
+
+### Images and uploads
+
+- Show previews for Host image files referenced in assistant replies, including Project-relative,
+  absolute, Windows, and file URL paths. Click a preview to open the image viewer. Remote image
+  URLs remain blocked, and inaccessible files show an unavailable placeholder.
+- Fix Desktop Local transcript image previews by using the backend sidecar's actual address.
+  Token-authenticated Remote Host previews now load with the appropriate Host credentials.
+- Keep uploads associated with a Project in its `.opengui-uploads/` directory, including on
+  Desktop Local, so they survive temporary-directory cleanup. A local `.gitignore` keeps them
+  out of version control.
+- File responses now include content security headers and refresh images overwritten in place.
+
+### Providers
+
+- Custom backends can declare supported reasoning levels in Settings. The composer offers the
+  selected levels using the existing model capability configuration.
+
+### Operations
+
+- Add `scripts/backup-databases.ts` for verified SQLite snapshots from inside the Host's
+  container or sandbox. Snapshots are self-contained files with restricted permissions.
+- Correct backup guidance for sandboxed Hosts: opening live databases from outside the sandbox,
+  even for read-only queries, can destroy live WAL state. Run the backup command inside the
+  container and copy the closed snapshots instead.
+
 ## 0.7.1
 
 ### Chat and sidebar

docker/sandbox/compose.yml

@@ -2,7 +2,7 @@ name: "${OPENGUI_SANDBOX_NAME:-opengui-sandbox}"
 
 services:
   opengui:
-    image: "${OPENGUI_IMAGE:-ghcr.io/akemmanuel/opengui:0.7.1}"
+    image: "${OPENGUI_IMAGE:-ghcr.io/akemmanuel/opengui:0.7.2}"
     container_name: "${OPENGUI_SANDBOX_NAME:-opengui-sandbox}"
     runtime: "${OPENGUI_SANDBOX_RUNTIME:-runsc}"
     restart: unless-stopped

docs/docker.md

@@ -15,7 +15,7 @@ curl --fail http://127.0.0.1:${PORT:-4839}/api/health
 To pin the Host to this release instead of following `latest`:
 
 ```bash
-OPENGUI_IMAGE=ghcr.io/akemmanuel/opengui:0.7.1 docker compose up -d
+OPENGUI_IMAGE=ghcr.io/akemmanuel/opengui:0.7.2 docker compose up -d
 ```
 
 Open `http://127.0.0.1:4839`. The first browser creates the Host owner Account. The compose file

package.json

@@ -1,6 +1,6 @@
 {
   "name": "opengui",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "private": false,
   "description": "OpenGUI - first-party coding agent for desktop and web",
   "homepage": "https://github.com/akemmanuel/OpenGUI",