• v1.18.1 eadefb46d4

    ChatTLLX v1.18.1
    All checks were successful
    CI / Safe checks (pull_request) Successful in 5m21s
    Container images / Build temporary amd64 candidates (push) Successful in 23m20s
    Container images / Smoke-test App candidate (push) Successful in 1m3s
    Container images / Smoke-test Whisper candidate (push) Successful in 45s
    Container images / Publish immutable amd64 candidates (push) Successful in 1m21s
    Release / Verify and publish release (push) Successful in 3m41s
    Stable

    Ghost released this 2026-09-28 11:11:16 +00:00 | 0 commits to main since this release

    Changed

    • Enable chat workspace tools by default for all accounts when an administrator has configured
      the sandbox. Existing saved off values are turned on once during a versioned settings
      migration; users can disable the tools again, and administrator controls remain authoritative.
    • Guide the model to build large files in small, verifiable steps instead of repeatedly
      sending oversized writes. Raw and exact administrator prompts remain unchanged.
    • Hide the chat sandbox status/specification menu while that user's workspace tools are off,
      and do not poll or resume the sandbox until they are enabled again.

    Fixed

    • Increase the workspace_write per-call limit from 100,000 to 500,000 characters and
      return an actionable size error when a write exceeds it.
    Downloads
  • v1.18.0 8eb409cd70

    ChatTLLX v1.18.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 7m17s
    Container images / Build temporary amd64 candidates (push) Successful in 8m8s
    Container images / Smoke-test App candidate (push) Successful in 1m8s
    Container images / Smoke-test Whisper candidate (push) Successful in 50s
    Container images / Publish immutable amd64 candidates (push) Successful in 1m23s
    Release / Verify and publish release (push) Successful in 1m25s
    Stable

    Ghost released this 2026-09-27 21:25:23 +00:00 | 2 commits to main since this release

    Added

    • Read, write, and atomically edit files in the chat sandbox with workspace_read,
      workspace_write, and workspace_edit; unique, non-overlapping replacements leave
      the original file unchanged on failure.
    • Show sandbox output as clickable download tiles, with inline previews for verified
      PNG, JPEG, WebP, GIF, and AVIF images. Images may also be inspected with workspace_read.
    • Copy selected Plus attachments and web images actually used by the model into the
      corresponding encrypted chat workspace when the sandbox and durable storage are enabled.
      Full text and binary uploads are available to sandbox tools; vision images use the
      compressed bytes sent to the model. Import failures are reported instead of advertising
      unavailable files to the model.

    Fixed

    • Keep light-theme sandbox download tiles readable.
    • Avoid starting a local Whisper worker when external transcription is configured,
      and stop an app-started worker when switching to an external server.

    Security

    • Require matching chat ownership and verify actual image bytes before importing web
      images into the sandbox workspace or serving inline sandbox image previews.
    • The updated signed Agent-Ready image pre-creates the chat/user workspace scope
      directories at agent startup and applies their permissions and ownership through a
      no-follow descriptor, so a concurrent symlink swap can no longer redirect an agent-restart
      chmod/chown to an unrelated guest path. This applies to newly provisioned sandboxes;
      existing sandboxes keep their current runtime and are unaffected.
    Downloads
  • v1.17.1 ef715848a7

    ChatTLLX v1.17.1
    All checks were successful
    CI / Safe checks (pull_request) Successful in 3m46s
    Container images / Build temporary amd64 candidates (push) Successful in 6m19s
    Container images / Smoke-test App candidate (push) Successful in 59s
    Container images / Smoke-test Whisper candidate (push) Successful in 43s
    Container images / Publish immutable amd64 candidates (push) Successful in 49s
    Release / Verify and publish release (push) Successful in 1m16s
    Stable

    Ghost released this 2026-09-26 12:59:16 +00:00 | 13 commits to main since this release

    Added

    • Provide a signed, checksum-bound Proxmox-host setup script and guided command that creates,
      personalizes, and seals the Agent-Ready base CT without commands inside the guest.

    Fixed

    • Allow longer Proxmox clone tasks and guest startup; pause automatic warm-pool provisioning
      after a failure instead of creating an unattended clone retry loop.
    • Retire incomplete sandbox journal entries only when the cluster confirms the CT is absent,
      and bound deleted tombstones so they cannot exhaust the encrypted journal.
    • Add an offline operator journal-repair command for stale locks, confirmed-absent records,
      and verified encrypted-backup restores; preserve encrypted evidence before every change.
    • Ship the CT image with D-Bus and an enabled systemd-networkd DHCP profile rather than requiring
      post-install package/network patches. Give unprivileged guest jobs private, writable, size-bounded
      RAM-backed /tmp and /var/tmp; check both services and scratch during host setup.

    Security

    • Refuse sandbox image publication until the complete local release passes checksum and
      minisign verification against the application's pinned public key. Scan only real image
      files and fail closed on scanner errors instead of following dangling symlinks. Require a clean
      source tree before recording a Git revision in an official image.
    Downloads
  • v1.17.0 5fc0382bc1

    ChatTLLX v1.17.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m15s
    Container images / Build temporary amd64 candidates (push) Successful in 18m37s
    Container images / Smoke-test App candidate (push) Successful in 58s
    Container images / Smoke-test Whisper candidate (push) Successful in 42s
    Container images / Publish immutable amd64 candidates (push) Successful in 54s
    Release / Verify and publish release (push) Successful in 1m29s
    Stable

    Ghost released this 2026-09-25 09:04:24 +00:00 | 23 commits to main since this release

    Added

    • Add encrypted, versioned per-chat and optional per-user document workspaces with isolated Linux,
      coding, testing, PDF, DOCX, and XLSX tooling.
    • Add optional Proxmox API sandboxes with an encrypted ownership journal, authenticated TLS guest
      agent, one-way warm-pool assignment, per-chat continuity, idle stop, retention, and recovery.
    • Add a guided Administration assistant for the signed, secret-free Agent-Ready LXC image, including
      release downloads, verification commands, one-time enrollment import, sealing, and preflight.
    • Add reproducible Agent-Ready image metadata, package inventory, SPDX SBOM, checksums, minisign
      signatures, disposable-worker builds, and checksum-verified Forgejo publication.

    Changed

    • Keep assigned chat containers across idle periods, application restarts, and confirmed command
      resets instead of returning them to the warm pool or silently replacing them.
    • Present sandbox lifecycle and resource details in a compact status control beside the chat title.

    Fixed

    • Refresh the sandbox indicator when the initial chat finishes loading and while a chat remains open.
    • Preserve the same chat container after cancelled or failed guest commands; quarantine an
      unconfirmed reset rather than assigning a different container.
    • Improve settings overflow, branch-comparison readability, and branch review lifecycle behavior.

    Security

    • Separate Proxmox and guest TLS trust, keep all sandbox credentials write-only, and restrict each
      CA to its matching HTTPS peer.
    • Require journal, hostname, description, VMID, node, unprivileged mode, and container policy to
      agree before ChatTLLX starts, stops, executes in, or deletes a sandbox.
    Downloads
  • v1.16.4 21b5beaa9e

    ChatTLLX v1.16.4
    All checks were successful
    CI / Safe checks (pull_request) Successful in 5m9s
    Container images / Build temporary amd64 candidates (push) Successful in 6m52s
    Container images / Smoke-test App candidate (push) Successful in 58s
    Container images / Smoke-test Whisper candidate (push) Successful in 48s
    Container images / Publish immutable amd64 candidates (push) Successful in 49s
    Release / Verify and publish release (push) Successful in 1m24s
    Stable

    Ghost released this 2026-09-22 11:13:04 +00:00 | 57 commits to main since this release

    Added

    • Collapse long user messages into a five-line preview with a faded edge and an accessible,
      animated expand/collapse control that preserves its state across chat re-renders.

    Fixed

    • Keep collapsed user messages and their controls within the available mobile chat width,
      including long unbroken text and viewport-size changes.
    Downloads
  • v1.16.3 0aee8d756c

    ChatTLLX v1.16.3
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m40s
    Container images / Build temporary amd64 candidates (push) Successful in 9m3s
    Container images / Smoke-test App candidate (push) Successful in 57s
    Container images / Smoke-test Whisper candidate (push) Successful in 41s
    Container images / Publish immutable amd64 candidates (push) Successful in 44s
    Release / Verify and publish release (push) Successful in 2m9s
    Stable

    Ghost released this 2026-09-22 08:26:41 +00:00 | 59 commits to main since this release

    Security

    • Contain malformed request URLs and asynchronous HTTP handler failures at the request boundary,
      preventing request-triggered process shutdown while preserving safe error responses and streams.
    • Block private and reserved Web Push destinations at registration and delivery, enforce public
      connection-time DNS resolution, and bound delivery time, headers and response bodies.
    • Authorize scheduled tool execution against the exact offered tool list, preventing disabled or
      unavailable tools from executing through unexpected model responses.
    Downloads
  • v1.16.2 2452eaffd9

    ChatTLLX v1.16.2
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m23s
    Container images / Build temporary amd64 candidates (push) Successful in 9m8s
    Container images / Smoke-test App candidate (push) Successful in 59s
    Container images / Smoke-test Whisper candidate (push) Successful in 44s
    Container images / Publish immutable amd64 candidates (push) Successful in 56s
    Release / Verify and publish release (push) Successful in 1m49s
    Stable

    Ghost released this 2026-09-22 05:43:21 +00:00 | 65 commits to main since this release

    Fixed

    • Prevent the legacy mini-sidebar from creating an extra grid row when navigation is collapsed,
      restoring the full chat height on tablets and desktop layouts.
    • Align the touch chat shell with the visual viewport position as well as its height when Safari
      pans the page for the keyboard, avoiding unused space above the keyboard.
    • Let the empty-chat welcome layout shrink while the keyboard is open instead of overflowing
      fixed minimum-height rows and pushing the composer outside the visible area.
    Downloads
  • v1.16.0 cb2e54823d

    ChatTLLX v1.16.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 6m50s
    Container images / Build temporary amd64 candidates (push) Successful in 7m20s
    Container images / Smoke-test App candidate (push) Successful in 1m0s
    Container images / Smoke-test Whisper candidate (push) Successful in 42s
    Container images / Publish immutable amd64 candidates (push) Successful in 46s
    Release / Verify and publish release (push) Successful in 1m11s
    Stable

    Ghost released this 2026-09-20 22:49:30 +00:00 | 69 commits to main since this release

    Added

    • Present ask_user questions in a focused, accessible overlay that can be minimized into a
      persistent question pill and restored without losing the pending interaction.
    • Give temporary chats a distinct neutral, motion-aware composer treatment so their ephemeral state
      stays visible without competing with the message content.

    Changed

    • Keep tool activity collapsed by default and open the reasoning trace only on demand, removing the
      older per-user detailed, compact, collapsed, and hidden display modes.

    Fixed

    • Keep the application viewport aligned when the iPad keyboard opens and closes, including Safari's
      separate visual-viewport shift and collapsed-sidebar layouts.
    • Restore reliable creation of folders without an existing PIN and improve the empty and mobile
      layouts of scheduled tasks so controls remain reachable without overlap.
    Downloads
  • v1.15.0 6d593df8e0

    ChatTLLX v1.15.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m50s
    Container images / Build temporary amd64 candidates (push) Successful in 5m22s
    Container images / Smoke-test App candidate (push) Successful in 58s
    Container images / Smoke-test Whisper candidate (push) Successful in 42s
    Container images / Publish immutable amd64 candidates (push) Successful in 38s
    Release / Verify and publish release (push) Successful in 1m48s
    Stable

    Ghost released this 2026-09-13 05:19:16 +00:00 | 84 commits to main since this release

    Fixed

    • Stop the model from self-approving calendar and scheduled-task writes: an approved field in the
      model's own tool arguments no longer grants authorization. These writes still require the explicit
      in-chat approval or denial, and a denied or expired proposal is never executed.
    • Canonicalize every static file request before serving it. Paths that escape the public directory, as
      well as .mjs and source-map files, are no longer reachable as public assets, while all documented
      login-page scripts stay public and application modules still require a session.
    • Capture user state with a deep snapshot when a save is queued, so a state mutation during an in-flight
      query can no longer corrupt the exact payload that is written and its integrity hashes.
    • Keep the extra final-answer recovery round text-only: the tool schemas stay available for a stable
      prompt prefix, but the model cannot start researching again or leak native or textual tool calls into
      a finished-looking answer. A complete exact repeat of the previous phase at the end of a stream is no
      longer flushed as new content, while partial or divergent continuations still render. Normal
      interactive tool chains remain unlimited.
    • Open the native attachment picker directly and keep the send guards independent from the attachment
      state, so a ready attachment can no longer block an ordinary send.

    Changed

    • Move the data-side preparation of new user turns (message records, title and memory-snapshot rules,
      archive/folder metadata, conversation ordering, and failed-job metadata rollback) out of the frontend
      composition root into the focused chat-turn-preparation module, and group the user and admin
      settings controller dependencies into small documented capability objects with fail-fast validation.

    Operations

    • Add a PostgreSQL integration test that mutates in-process state exactly while a real COMMIT runs and
      verifies the captured snapshot is what reached the database.
    Downloads
  • v1.14.0 4a8459e2b3

    ChatTLLX v1.14.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 3m54s
    Container images / Build temporary amd64 candidates (push) Successful in 12m3s
    Container images / Smoke-test App candidate (push) Successful in 1m0s
    Container images / Smoke-test Whisper candidate (push) Successful in 44s
    Container images / Publish immutable amd64 candidates (push) Successful in 47s
    Release / Verify and publish release (push) Successful in 1m12s
    Stable

    Ghost released this 2026-09-05 22:16:08 +00:00 | 93 commits to main since this release

    Changed

    • Split chat rendering, trace and artifact lifecycles, sidebar and folder interactions, encrypted
      startup, memory retrieval, prompt context, and tool execution into focused modules with isolated
      regression tests.
    • Load administration, personal settings, calendar, scheduled-task management, and chat transfer
      screens on demand instead of including their controllers in every initial chat session.
    • Centralize overlay ownership, completion status, code-card actions, and account lifecycle guards;
      remove unused assignments and tighten lint checks against dead code.

    Fixed

    • Publish only the matching version's changelog section on each Forgejo release page; reject missing
      or ambiguous release notes instead of publishing the entire history.
    • Keep completed but undelivered generations recoverable when a user closes the browser or PWA and
      returns later. The default recovery window is seven days, with encrypted replay tails on disk;
      successful encrypted chat persistence acknowledges delivery and shortens replay retention.
    • Recover older unsaved answers even when a newer answer is already saved, resume from durable
      checkpoints without duplicating completed responses, and retry recovery after a temporary history
      loading failure. Server process restarts still interrupt jobs and discard their temporary replay.
    • Discard stale startup and recovery work after logout or account changes, and avoid replacing
      unreadable encrypted history with an empty recovered conversation.
    • Restore reliable folder creation from the sidebar and keep scheduled-task editors scrollable on
      tablets and small screens.

    Operations

    • Add the deployment-owned limits.chatJobRecoveryMs window for undelivered completed jobs;
      limits.chatJobRetentionMs remains the post-delivery grace period. Existing runtime models,
      credentials, response modes, and database schema remain unchanged.
    Downloads