54 releases 54 tags

RSS feed

• v1.1.0 a96e7148f8

  Compare

  ChatTLLX v1.1.0 Stable

  Ghost released this 2026-08-09 16:00:58 +00:00 | 314 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.1.0] - 2026-08-09

  Added

  • Added first-admin runtime onboarding with database-backed OpenAI-compatible endpoints, multiple
    models, user-visible response modes, endpoint discovery, one-click local Qwen and neutral
    presets, and an official QwenCloud Qwen3.8 Max endpoint/reasoning template.
  • Added System Prompt Studio with complete per-model and per-mode managed/raw prompt control.
  • Added database-configured local, disabled, or remote OpenAI-compatible speech transcription.
  • Added an Administration update screen backed by a restricted host operator, encrypted backups,
    same-major release validation, and bounded live progress logs.

  Changed

  • Made the default installer non-interactive and moved model, prompt, mode, sampler, and speech
    choices into onboarding and persistent administration settings.
  • Replaced llama.cpp-specific statistics polling with standard OpenAI usage fields and explicit
    provider-independent estimates when an endpoint does not report usage.
  • Made local Whisper load its model only when local transcription is first used.
  • Removed screenshots and branding images from the repository README files.

  Fixed

  • Kept the operations doctor compatible with the restricted update-operator mount and with
    pre-1.1 environments during an automatic rollback.

  Security

  • Kept the application container read-only and without Docker access; host updates cross only a
    narrow Unix-socket protocol and invoke the verified updater without a shell.
  • Redacted stored runtime and speech API keys from admin responses and internal upstream model IDs
    from normal user model listings.

  [1.0.23] - 2026-08-08

  Added

  • Added a private account wallpaper gallery for quick switching and individual deletion.
  • Added an explicit in-chat sound toggle for video wallpapers; sound remains muted by default and
    is enabled only for the current browser session.

  Fixed

  • Make account and folder wallpaper previews reflect the selected black-overlay opacity.

  [1.0.22] - 2026-08-08

  Added

  • Added animated GIF and video chat backgrounds for accounts and folders, including inherited
    folder settings and adjustable video playback speed.

  Fixed

  • Blend light wallpapers cleanly into the navigation and chat chrome, improve recent-chat
    readability, and remove dark seams around the composer.

  Security

  • Updated the pinned Nano ID dependency to its patched release.

  [1.0.21] - 2026-08-07

  Changed

  • Removed broad built-in refusal blocks for child-safety, weapons, malicious code, real public
    figures, conversation endings, and legal or financial guidance. Deployment-specific model
    safety remains the responsibility of the configured upstream runtime.

  [1.0.20] - 2026-08-07

  Added

  • Added private per-account chat backgrounds with adjustable black overlays, plus per-folder
    overrides inherited by subfolders. Background images are encrypted at rest and use the existing
    per-user storage quota.

  Fixed

  • Keep Instant responses visibly streaming when tool calls use the default Collapsed view.
  • Show injected-memory context above the answer as soon as it arrives instead of waiting for the
    response to finish.
  • Preserve folder PIN state when folder metadata such as a background is edited.

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.1.0.tar.gz
    0 downloads · 2026-08-09 16:01:01 +00:00 · 17 MiB
  • chattllx-1.1.0.tar.gz.sha256
    2 downloads · 2026-08-09 16:01:01 +00:00 · 88 B
• v1.0.23 df4948efe1

  Compare

  ChatTLLX v1.0.23 Stable

  Ghost released this 2026-08-07 23:40:52 +00:00 | 317 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.23] - 2026-08-08

  Added

  • Added a private account wallpaper gallery for quick switching and individual deletion.
  • Added an explicit in-chat sound toggle for video wallpapers; sound remains muted by default and
    is enabled only for the current browser session.

  Fixed

  • Make account and folder wallpaper previews reflect the selected black-overlay opacity.

  [1.0.22] - 2026-08-08

  Added

  • Added animated GIF and video chat backgrounds for accounts and folders, including inherited
    folder settings and adjustable video playback speed.

  Fixed

  • Blend light wallpapers cleanly into the navigation and chat chrome, improve recent-chat
    readability, and remove dark seams around the composer.

  Security

  • Updated the pinned Nano ID dependency to its patched release.

  [1.0.21] - 2026-08-07

  Changed

  • Removed broad built-in refusal blocks for child-safety, weapons, malicious code, real public
    figures, conversation endings, and legal or financial guidance. Deployment-specific model
    safety remains the responsibility of the configured upstream runtime.

  [1.0.20] - 2026-08-07

  Added

  • Added private per-account chat backgrounds with adjustable black overlays, plus per-folder
    overrides inherited by subfolders. Background images are encrypted at rest and use the existing
    per-user storage quota.

  Fixed

  • Keep Instant responses visibly streaming when tool calls use the default Collapsed view.
  • Show injected-memory context above the answer as soon as it arrives instead of waiting for the
    response to finish.
  • Preserve folder PIN state when folder metadata such as a background is edited.

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.23.tar.gz
    0 downloads · 2026-08-07 23:40:56 +00:00 · 17 MiB
  • chattllx-1.0.23.tar.gz.sha256
    1 download · 2026-08-07 23:40:56 +00:00 · 89 B
• v1.0.22 d323ea6753

  Compare

  ChatTLLX v1.0.22 Stable

  Ghost released this 2026-08-07 23:12:54 +00:00 | 319 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.22] - 2026-08-08

  Added

  • Added animated GIF and video chat backgrounds for accounts and folders, including inherited
    folder settings and adjustable video playback speed.

  Fixed

  • Blend light wallpapers cleanly into the navigation and chat chrome, improve recent-chat
    readability, and remove dark seams around the composer.

  Security

  • Updated the pinned Nano ID dependency to its patched release.

  [1.0.21] - 2026-08-07

  Changed

  • Removed broad built-in refusal blocks for child-safety, weapons, malicious code, real public
    figures, conversation endings, and legal or financial guidance. Deployment-specific model
    safety remains the responsibility of the configured upstream runtime.

  [1.0.20] - 2026-08-07

  Added

  • Added private per-account chat backgrounds with adjustable black overlays, plus per-folder
    overrides inherited by subfolders. Background images are encrypted at rest and use the existing
    per-user storage quota.

  Fixed

  • Keep Instant responses visibly streaming when tool calls use the default Collapsed view.
  • Show injected-memory context above the answer as soon as it arrives instead of waiting for the
    response to finish.
  • Preserve folder PIN state when folder metadata such as a background is edited.

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.22.tar.gz
    0 downloads · 2026-08-07 23:12:57 +00:00 · 17 MiB
  • chattllx-1.0.22.tar.gz.sha256
    1 download · 2026-08-07 23:12:57 +00:00 · 89 B
• v1.0.21 b16b4807fe

  Compare

  ChatTLLX v1.0.21 Stable

  Ghost released this 2026-08-07 21:22:28 +00:00 | 326 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.21] - 2026-08-07

  Changed

  • Removed broad built-in refusal blocks for child-safety, weapons, malicious code, real public
    figures, conversation endings, and legal or financial guidance. Deployment-specific model
    safety remains the responsibility of the configured upstream runtime.

  [1.0.20] - 2026-08-07

  Added

  • Added private per-account chat backgrounds with adjustable black overlays, plus per-folder
    overrides inherited by subfolders. Background images are encrypted at rest and use the existing
    per-user storage quota.

  Fixed

  • Keep Instant responses visibly streaming when tool calls use the default Collapsed view.
  • Show injected-memory context above the answer as soon as it arrives instead of waiting for the
    response to finish.
  • Preserve folder PIN state when folder metadata such as a background is edited.

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.21.tar.gz
    0 downloads · 2026-08-07 21:22:32 +00:00 · 17 MiB
  • chattllx-1.0.21.tar.gz.sha256
    1 download · 2026-08-07 21:22:32 +00:00 · 89 B
• v1.0.20 7163f391ee

  Compare

  ChatTLLX v1.0.20 Stable

  Ghost released this 2026-08-07 19:52:35 +00:00 | 329 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.20] - 2026-08-07

  Added

  • Added private per-account chat backgrounds with adjustable black overlays, plus per-folder
    overrides inherited by subfolders. Background images are encrypted at rest and use the existing
    per-user storage quota.

  Fixed

  • Keep Instant responses visibly streaming when tool calls use the default Collapsed view.
  • Show injected-memory context above the answer as soon as it arrives instead of waiting for the
    response to finish.
  • Preserve folder PIN state when folder metadata such as a background is edited.

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.20.tar.gz
    0 downloads · 2026-08-07 19:52:49 +00:00 · 17 MiB
  • chattllx-1.0.20.tar.gz.sha256
    1 download · 2026-08-07 19:52:49 +00:00 · 89 B
• v1.0.19 d3fa3c8cfa

  Compare

  ChatTLLX v1.0.19 Stable

  Ghost released this 2026-08-07 19:09:02 +00:00 | 333 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.19] - 2026-08-07

  Fixed

  • Stream Instant responses visibly from the first content delta instead of displaying the answer
    only after generation completed.
  • Keep image-only and quote-only user turns in the model message chain instead of repeating the
    previous answer.

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.19.tar.gz
    0 downloads · 2026-08-07 19:09:26 +00:00 · 17 MiB
  • chattllx-1.0.19.tar.gz.sha256
    1 download · 2026-08-07 19:09:26 +00:00 · 89 B
• v1.0.18 89722ae18c

  Compare

  ChatTLLX v1.0.18 Stable

  Ghost released this 2026-08-07 18:52:58 +00:00 | 336 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.18] - 2026-08-07

  Added

  • Added an OpenAI-compatible personal audio-transcription endpoint with an explicit, independently
    configurable Whisper permission on every API key. The Whisper worker remains private inside the
    deployment network.
  • Let each scheduled task inject 0 to 10 of its previous successful results as bounded context so
    recurring research can avoid reporting the same information again.
  • Added a guided memory-profile workflow that supplies the model with the complete existing profile,
    keeps its technical prompt out of the transcript, and encourages small reusable memory entries.
  • Let administrators create users with a one-time setup password that must be replaced with the
    user's own password and E2EE material before application access is granted.

  Changed

  • Removed the user-facing tool-round setting from scheduled tasks. Background tool chains now run
    until a final answer or the existing wall-clock safety timeout instead of being cut off after an
    arbitrary number of model rounds.
  • Reorganized administrator settings into focused views for global token statistics, actionable
    diagnostics, backups, translation editing, skills, and user management. Token windows now expose
    separate input, output, cache, request, and total values without returning per-user data.
  • Made effective Whisper status, model, language mode, and audio limits read-only in the admin area;
    deployment configuration is now the single runtime source, and the installer supports automatic
    language detection explicitly.

  Fixed

  • Kept interactive runtime presets authoritative so Instant chat cannot silently re-enable
    thinking from stale browser values and delay visible answer tokens until completion.
  • Hide personal API-key settings as soon as an administrator disables the feature, including when
    the operator switch changed after the current browser session started.
  • Keep collapsed desktop navigation icons at the same optical size as the open navigation and
    replace the conflicting opacity flash with a stable color transition.
  • Make folder locking authoritative in the server session and purge already decrypted descendant
    chats, folder context, and attachment caches from the browser after a successful lock.
  • Default calendar sources to expanded on desktop and collapsed on mobile while preserving an
    explicit choice made by the user.
  • Save scheduled run results through the browser's E2EE boundary so encrypted accounts can add
    them to chats without exposing plaintext conversation records to the server.
  • Persist scheduled reasoning and result-history settings in legacy SQLite installations through
    an additive schema-12 migration; the supported PostgreSQL schema remains unchanged.
  • Made scheduled-task dialogs usable on small screens, restored the new-task icon, and removed the
    decorative hero badge.
  • Restored smooth scrolling inside collapsed mobile tool traces and replaced the temporary-chat
    action with a clearer icon.
  • Kept login usable on narrow mobile viewports and when generic content blockers block URLs that
    contain authentication-related words, while retaining the documented compatibility routes.
  • Separated HTML artifact and PDF tool contracts so requests for webpages produce sandboxed HTML
    while explicit PDF requests continue to use create_pdf, including legacy saved tool calls.
  • Removed retired Mermaid prompt settings and stale diagram instructions without removing the
    renderer for Mermaid diagrams already stored in conversations.
  • Removed duplicate database-backed Whisper settings that could display small while a different
    deployment model was actually active.

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.18.tar.gz
    0 downloads · 2026-08-07 18:53:13 +00:00 · 17 MiB
  • chattllx-1.0.18.tar.gz.sha256
    1 download · 2026-08-07 18:53:13 +00:00 · 89 B
• v1.0.17 ccb6bdcc00

  Compare

  ChatTLLX v1.0.17 Stable

  Ghost released this 2026-07-16 14:57:36 +00:00 | 363 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.17] - 2026-07-16

  Added

  • The admin statistics tab shows a system inventory: counts of users, chats, messages, folders,
    files, file storage, memories, API keys, and scheduled tasks as system-wide aggregates without
    account identifiers or contents.
  • Token usage windows additionally report cache reads, the derived cache hit rate, and request
    counts. Cache reads stay informational and never count toward the total.

  Changed

  • The mobile settings and admin tab strip fades symmetrically at both edges instead of
    hard-clipping tab pills at the viewport edge.

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.17.tar.gz
    0 downloads · 2026-07-16 14:57:56 +00:00 · 17 MiB
  • chattllx-1.0.17.tar.gz.sha256
    2 downloads · 2026-07-16 14:57:56 +00:00 · 89 B
• v1.0.16 435b2dc4cc

  Compare

  ChatTLLX v1.0.16 Stable

  Ghost released this 2026-07-16 13:11:28 +00:00 | 367 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.16] - 2026-07-16

  Changed

  • Mobile sidebar now uses the compact density of the desktop navigation: 40px rows, smaller
    labels, tighter spacing, and a narrower 300px drawer so more chats are visible at once.
  • The mobile drawer opens and closes with one consistent ease-out slide and a fading backdrop;
    with reduced motion enabled it cross-fades briefly instead of appearing instantly.

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.16.tar.gz
    0 downloads · 2026-07-16 13:11:39 +00:00 · 17 MiB
  • chattllx-1.0.16.tar.gz.sha256
    2 downloads · 2026-07-16 13:11:39 +00:00 · 89 B
• v1.0.15 a543aef33a

  Compare

  ChatTLLX v1.0.15 Stable

  Ghost released this 2026-07-16 11:13:57 +00:00 | 370 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.15] - 2026-07-16

  Changed

  • Consolidated full Forgejo validation into the pull-request workflow; merge commits are no longer
    retested on main, and tagged releases only validate their ref before deterministic packaging.
  • Added guarded release preparation and beta-first shipping commands that build one candidate,
    publish only after beta health verification, and keep verbose remote update output bounded.

  Fixed

  • Excluded in-application .ctb snapshots from full disaster-recovery packages so backups no
    longer grow by recursively embedding earlier backups.

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.15.tar.gz
    0 downloads · 2026-07-16 11:14:13 +00:00 · 17 MiB
  • chattllx-1.0.15.tar.gz.sha256
    1 download · 2026-07-16 11:14:14 +00:00 · 89 B