Create

How the private Computer capability works

Computer is a private, bounded working area for one chat. It can inspect authorized file extracts, safely unpack a public ZIP, clone a public GitHub repository, and run a reviewed project command when the task requires it.

Updated Aug 10, 20266 min read

When Computer is useful

Computer is useful for multi-file scratch work, ZIP inspection, and reviewing or testing a public code repository. It is not a second chat mode and there is no separate Computer switch.

Ask directly, for example: “Download and inspect this ZIP” or “Clone this public GitHub repository, inspect the code, and run its tests.” LLMBase may also use Computer when a visible plan contains dependent file or project steps.

Files, working state, and final deliverables

  • Authorized text extracted from recent attachments is copied into a read-only input area.
  • Temporary notes and intermediate files stay in a separate writable working area for that chat.
  • Downloaded archives and cloned repositories use a short-lived project area and are limited by file count, size, and runtime.
  • The working area is not a download folder and is not exposed as a general device filesystem.
  • A requested Excel, Word, PowerPoint, CSV, Markdown, or text deliverable is finished through the normal private Artifacts flow.
Computer never grants access to files you did not attach or otherwise authorize for the chat.

Archives, repositories, and commands

ZIP downloads must use a reachable public HTTPS address. Computer rejects encrypted archives, unsafe paths, links, excessive compression, and archives that exceed its limits. Public GitHub repositories are cloned without private credentials and checked before inspection.

Running project code requires a separate confirmation that shows the exact command. Commands run in an isolated foreground session with a time limit and bounded output. Package downloads are limited to supported public source and package hosts.

What Computer cannot do

  • It cannot access your device filesystem or private repositories.
  • It cannot use unrestricted network access, publish a service, or expose an inbound port.
  • It cannot keep a background job running after the reviewed command finishes.
  • It cannot send messages, make purchases, or approve a sensitive action on your behalf.

Retention and control

Computer working data is scoped to the account and chat. Deleting the chat deletes its Computer workspace, and deleting a Workspace or account also cleans up associated chat workspaces. Consult the current Privacy Policy and applicable DPA/AVV for contractual retention terms.

Organization action policies still apply. A plan explains intended work, but it does not bypass a confirmation or block required for a specific action.

Frequently asked questions

Does Computer run on my phone or laptop?

No. It is a bounded chat capability. It does not execute code on your device or gain access to your local filesystem.

Can Computer run any GitHub repository?

It supports bounded public GitHub repositories. Private repositories, oversized projects, unsafe links, unsupported dependencies, or commands that exceed the time limit can be rejected.

Still need help?

Send the Support team a sanitized description, timestamp, affected surface, and exact visible error.

Contact Support