-
ChatTLLX v1.18.1
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 5m21sContainer images / Build temporary amd64 candidates (push) Successful in 23m20sContainer images / Smoke-test App candidate (push) Successful in 1m3sContainer images / Smoke-test Whisper candidate (push) Successful in 45sContainer images / Publish immutable amd64 candidates (push) Successful in 1m21sRelease / Verify and publish release (push) Successful in 3m41sreleased this
2026-09-28 11:11:16 +00:00 | 0 commits to main since this releaseChanged
- Enable chat workspace tools by default for all accounts when an administrator has configured
the sandbox. Existing saved off values are turned on once during a versioned settings
migration; users can disable the tools again, and administrator controls remain authoritative. - Guide the model to build large files in small, verifiable steps instead of repeatedly
sending oversized writes. Raw and exact administrator prompts remain unchanged. - Hide the chat sandbox status/specification menu while that user's workspace tools are off,
and do not poll or resume the sandbox until they are enabled again.
Fixed
- Increase the
workspace_writeper-call limit from 100,000 to 500,000 characters and
return an actionable size error when a write exceeds it.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Enable chat workspace tools by default for all accounts when an administrator has configured
-
ChatTLLX v1.18.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 7m17sContainer images / Build temporary amd64 candidates (push) Successful in 8m8sContainer images / Smoke-test App candidate (push) Successful in 1m8sContainer images / Smoke-test Whisper candidate (push) Successful in 50sContainer images / Publish immutable amd64 candidates (push) Successful in 1m23sRelease / Verify and publish release (push) Successful in 1m25sreleased this
2026-09-27 21:25:23 +00:00 | 2 commits to main since this releaseAdded
- Read, write, and atomically edit files in the chat sandbox with
workspace_read,
workspace_write, andworkspace_edit; unique, non-overlapping replacements leave
the original file unchanged on failure. - Show sandbox output as clickable download tiles, with inline previews for verified
PNG, JPEG, WebP, GIF, and AVIF images. Images may also be inspected withworkspace_read. - Copy selected Plus attachments and web images actually used by the model into the
corresponding encrypted chat workspace when the sandbox and durable storage are enabled.
Full text and binary uploads are available to sandbox tools; vision images use the
compressed bytes sent to the model. Import failures are reported instead of advertising
unavailable files to the model.
Fixed
- Keep light-theme sandbox download tiles readable.
- Avoid starting a local Whisper worker when external transcription is configured,
and stop an app-started worker when switching to an external server.
Security
- Require matching chat ownership and verify actual image bytes before importing web
images into the sandbox workspace or serving inline sandbox image previews. - The updated signed Agent-Ready image pre-creates the
chat/userworkspace scope
directories at agent startup and applies their permissions and ownership through a
no-follow descriptor, so a concurrent symlink swap can no longer redirect an agent-restart
chmod/chownto an unrelated guest path. This applies to newly provisioned sandboxes;
existing sandboxes keep their current runtime and are unaffected.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Read, write, and atomically edit files in the chat sandbox with
-
ChatTLLX v1.17.1
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 3m46sContainer images / Build temporary amd64 candidates (push) Successful in 6m19sContainer images / Smoke-test App candidate (push) Successful in 59sContainer images / Smoke-test Whisper candidate (push) Successful in 43sContainer images / Publish immutable amd64 candidates (push) Successful in 49sRelease / Verify and publish release (push) Successful in 1m16sreleased this
2026-09-26 12:59:16 +00:00 | 13 commits to main since this releaseAdded
- Provide a signed, checksum-bound Proxmox-host setup script and guided command that creates,
personalizes, and seals the Agent-Ready base CT without commands inside the guest.
Fixed
- Allow longer Proxmox clone tasks and guest startup; pause automatic warm-pool provisioning
after a failure instead of creating an unattended clone retry loop. - Retire incomplete sandbox journal entries only when the cluster confirms the CT is absent,
and bound deleted tombstones so they cannot exhaust the encrypted journal. - Add an offline operator journal-repair command for stale locks, confirmed-absent records,
and verified encrypted-backup restores; preserve encrypted evidence before every change. - Ship the CT image with D-Bus and an enabled systemd-networkd DHCP profile rather than requiring
post-install package/network patches. Give unprivileged guest jobs private, writable, size-bounded
RAM-backed/tmpand/var/tmp; check both services and scratch during host setup.
Security
- Refuse sandbox image publication until the complete local release passes checksum and
minisign verification against the application's pinned public key. Scan only real image
files and fail closed on scanner errors instead of following dangling symlinks. Require a clean
source tree before recording a Git revision in an official image.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Provide a signed, checksum-bound Proxmox-host setup script and guided command that creates,
-
ChatTLLX v1.17.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 4m15sContainer images / Build temporary amd64 candidates (push) Successful in 18m37sContainer images / Smoke-test App candidate (push) Successful in 58sContainer images / Smoke-test Whisper candidate (push) Successful in 42sContainer images / Publish immutable amd64 candidates (push) Successful in 54sRelease / Verify and publish release (push) Successful in 1m29sreleased this
2026-09-25 09:04:24 +00:00 | 23 commits to main since this releaseAdded
- Add encrypted, versioned per-chat and optional per-user document workspaces with isolated Linux,
coding, testing, PDF, DOCX, and XLSX tooling. - Add optional Proxmox API sandboxes with an encrypted ownership journal, authenticated TLS guest
agent, one-way warm-pool assignment, per-chat continuity, idle stop, retention, and recovery. - Add a guided Administration assistant for the signed, secret-free Agent-Ready LXC image, including
release downloads, verification commands, one-time enrollment import, sealing, and preflight. - Add reproducible Agent-Ready image metadata, package inventory, SPDX SBOM, checksums, minisign
signatures, disposable-worker builds, and checksum-verified Forgejo publication.
Changed
- Keep assigned chat containers across idle periods, application restarts, and confirmed command
resets instead of returning them to the warm pool or silently replacing them. - Present sandbox lifecycle and resource details in a compact status control beside the chat title.
Fixed
- Refresh the sandbox indicator when the initial chat finishes loading and while a chat remains open.
- Preserve the same chat container after cancelled or failed guest commands; quarantine an
unconfirmed reset rather than assigning a different container. - Improve settings overflow, branch-comparison readability, and branch review lifecycle behavior.
Security
- Separate Proxmox and guest TLS trust, keep all sandbox credentials write-only, and restrict each
CA to its matching HTTPS peer. - Require journal, hostname, description, VMID, node, unprivileged mode, and container policy to
agree before ChatTLLX starts, stops, executes in, or deletes a sandbox.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Add encrypted, versioned per-chat and optional per-user document workspaces with isolated Linux,
-
ChatTLLX v1.16.4
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 5m9sContainer images / Build temporary amd64 candidates (push) Successful in 6m52sContainer images / Smoke-test App candidate (push) Successful in 58sContainer images / Smoke-test Whisper candidate (push) Successful in 48sContainer images / Publish immutable amd64 candidates (push) Successful in 49sRelease / Verify and publish release (push) Successful in 1m24sreleased this
2026-09-22 11:13:04 +00:00 | 57 commits to main since this releaseAdded
- Collapse long user messages into a five-line preview with a faded edge and an accessible,
animated expand/collapse control that preserves its state across chat re-renders.
Fixed
- Keep collapsed user messages and their controls within the available mobile chat width,
including long unbroken text and viewport-size changes.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Collapse long user messages into a five-line preview with a faded edge and an accessible,
-
ChatTLLX v1.16.3
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 4m40sContainer images / Build temporary amd64 candidates (push) Successful in 9m3sContainer images / Smoke-test App candidate (push) Successful in 57sContainer images / Smoke-test Whisper candidate (push) Successful in 41sContainer images / Publish immutable amd64 candidates (push) Successful in 44sRelease / Verify and publish release (push) Successful in 2m9sreleased this
2026-09-22 08:26:41 +00:00 | 59 commits to main since this releaseSecurity
- Contain malformed request URLs and asynchronous HTTP handler failures at the request boundary,
preventing request-triggered process shutdown while preserving safe error responses and streams. - Block private and reserved Web Push destinations at registration and delivery, enforce public
connection-time DNS resolution, and bound delivery time, headers and response bodies. - Authorize scheduled tool execution against the exact offered tool list, preventing disabled or
unavailable tools from executing through unexpected model responses.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Contain malformed request URLs and asynchronous HTTP handler failures at the request boundary,
-
ChatTLLX v1.16.2
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 4m23sContainer images / Build temporary amd64 candidates (push) Successful in 9m8sContainer images / Smoke-test App candidate (push) Successful in 59sContainer images / Smoke-test Whisper candidate (push) Successful in 44sContainer images / Publish immutable amd64 candidates (push) Successful in 56sRelease / Verify and publish release (push) Successful in 1m49sreleased this
2026-09-22 05:43:21 +00:00 | 65 commits to main since this releaseFixed
- Prevent the legacy mini-sidebar from creating an extra grid row when navigation is collapsed,
restoring the full chat height on tablets and desktop layouts. - Align the touch chat shell with the visual viewport position as well as its height when Safari
pans the page for the keyboard, avoiding unused space above the keyboard. - Let the empty-chat welcome layout shrink while the keyboard is open instead of overflowing
fixed minimum-height rows and pushing the composer outside the visible area.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Prevent the legacy mini-sidebar from creating an extra grid row when navigation is collapsed,
-
ChatTLLX v1.16.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 6m50sContainer images / Build temporary amd64 candidates (push) Successful in 7m20sContainer images / Smoke-test App candidate (push) Successful in 1m0sContainer images / Smoke-test Whisper candidate (push) Successful in 42sContainer images / Publish immutable amd64 candidates (push) Successful in 46sRelease / Verify and publish release (push) Successful in 1m11sreleased this
2026-09-20 22:49:30 +00:00 | 69 commits to main since this releaseAdded
- Present
ask_userquestions in a focused, accessible overlay that can be minimized into a
persistent question pill and restored without losing the pending interaction. - Give temporary chats a distinct neutral, motion-aware composer treatment so their ephemeral state
stays visible without competing with the message content.
Changed
- Keep tool activity collapsed by default and open the reasoning trace only on demand, removing the
older per-user detailed, compact, collapsed, and hidden display modes.
Fixed
- Keep the application viewport aligned when the iPad keyboard opens and closes, including Safari's
separate visual-viewport shift and collapsed-sidebar layouts. - Restore reliable creation of folders without an existing PIN and improve the empty and mobile
layouts of scheduled tasks so controls remain reachable without overlap.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Present
-
ChatTLLX v1.15.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 4m50sContainer images / Build temporary amd64 candidates (push) Successful in 5m22sContainer images / Smoke-test App candidate (push) Successful in 58sContainer images / Smoke-test Whisper candidate (push) Successful in 42sContainer images / Publish immutable amd64 candidates (push) Successful in 38sRelease / Verify and publish release (push) Successful in 1m48sreleased this
2026-09-13 05:19:16 +00:00 | 84 commits to main since this releaseFixed
- Stop the model from self-approving calendar and scheduled-task writes: an
approvedfield in the
model's own tool arguments no longer grants authorization. These writes still require the explicit
in-chat approval or denial, and a denied or expired proposal is never executed. - Canonicalize every static file request before serving it. Paths that escape the public directory, as
well as.mjsand source-map files, are no longer reachable as public assets, while all documented
login-page scripts stay public and application modules still require a session. - Capture user state with a deep snapshot when a save is queued, so a state mutation during an in-flight
query can no longer corrupt the exact payload that is written and its integrity hashes. - Keep the extra final-answer recovery round text-only: the tool schemas stay available for a stable
prompt prefix, but the model cannot start researching again or leak native or textual tool calls into
a finished-looking answer. A complete exact repeat of the previous phase at the end of a stream is no
longer flushed as new content, while partial or divergent continuations still render. Normal
interactive tool chains remain unlimited. - Open the native attachment picker directly and keep the send guards independent from the attachment
state, so a ready attachment can no longer block an ordinary send.
Changed
- Move the data-side preparation of new user turns (message records, title and memory-snapshot rules,
archive/folder metadata, conversation ordering, and failed-job metadata rollback) out of the frontend
composition root into the focusedchat-turn-preparationmodule, and group the user and admin
settings controller dependencies into small documented capability objects with fail-fast validation.
Operations
- Add a PostgreSQL integration test that mutates in-process state exactly while a real COMMIT runs and
verifies the captured snapshot is what reached the database.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Stop the model from self-approving calendar and scheduled-task writes: an
-
ChatTLLX v1.14.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 3m54sContainer images / Build temporary amd64 candidates (push) Successful in 12m3sContainer images / Smoke-test App candidate (push) Successful in 1m0sContainer images / Smoke-test Whisper candidate (push) Successful in 44sContainer images / Publish immutable amd64 candidates (push) Successful in 47sRelease / Verify and publish release (push) Successful in 1m12sreleased this
2026-09-05 22:16:08 +00:00 | 93 commits to main since this releaseChanged
- Split chat rendering, trace and artifact lifecycles, sidebar and folder interactions, encrypted
startup, memory retrieval, prompt context, and tool execution into focused modules with isolated
regression tests. - Load administration, personal settings, calendar, scheduled-task management, and chat transfer
screens on demand instead of including their controllers in every initial chat session. - Centralize overlay ownership, completion status, code-card actions, and account lifecycle guards;
remove unused assignments and tighten lint checks against dead code.
Fixed
- Publish only the matching version's changelog section on each Forgejo release page; reject missing
or ambiguous release notes instead of publishing the entire history. - Keep completed but undelivered generations recoverable when a user closes the browser or PWA and
returns later. The default recovery window is seven days, with encrypted replay tails on disk;
successful encrypted chat persistence acknowledges delivery and shortens replay retention. - Recover older unsaved answers even when a newer answer is already saved, resume from durable
checkpoints without duplicating completed responses, and retry recovery after a temporary history
loading failure. Server process restarts still interrupt jobs and discard their temporary replay. - Discard stale startup and recovery work after logout or account changes, and avoid replacing
unreadable encrypted history with an empty recovered conversation. - Restore reliable folder creation from the sidebar and keep scheduled-task editors scrollable on
tablets and small screens.
Operations
- Add the deployment-owned
limits.chatJobRecoveryMswindow for undelivered completed jobs;
limits.chatJobRetentionMsremains the post-delivery grace period. Existing runtime models,
credentials, response modes, and database schema remain unchanged.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Split chat rendering, trace and artifact lifecycles, sidebar and folder interactions, encrypted