54 releases 54 tags

RSS feed

• v1.0.14 03c48061ad

  Compare

  ChatTLLX v1.0.14 Stable

  Ghost released this 2026-07-16 08:50:09 +00:00 | 375 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.14] - 2026-07-16

  Fixed

  • Verify the current container identity and require three consecutive healthy observations before
    update verification or rollback verification proceeds.

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.14.tar.gz
    2 downloads · 2026-07-16 08:50:58 +00:00 · 17 MiB
  • chattllx-1.0.14.tar.gz.sha256
    2 downloads · 2026-07-16 08:50:59 +00:00 · 89 B
• v1.0.13 5fd68c0f06

  Compare

  ChatTLLX v1.0.13 Stable

  Ghost released this 2026-07-16 08:29:51 +00:00 | 377 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.13] - 2026-07-16

  Fixed

  • Require an actual healthy container state during updates instead of treating a temporarily
    missing health status as successful.

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.13.tar.gz
    2 downloads · 2026-07-16 08:29:56 +00:00 · 17 MiB
  • chattllx-1.0.13.tar.gz.sha256
    2 downloads · 2026-07-16 08:29:57 +00:00 · 89 B
• v1.0.12 ba354aafd2

  Compare

  ChatTLLX v1.0.12 Stable

  Ghost released this 2026-07-16 08:11:18 +00:00 | 379 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.12] - 2026-07-16

  Fixed

  • Wait for PostgreSQL, the application, Whisper, and the optional Caddy proxy to become healthy
    before post-update verification and after an automatic rollback.

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.12.tar.gz
    2 downloads · 2026-07-16 08:11:47 +00:00 · 17 MiB
  • chattllx-1.0.12.tar.gz.sha256
    2 downloads · 2026-07-16 08:11:47 +00:00 · 89 B
• v1.0.11 a2689ef301

  Compare

  ChatTLLX v1.0.11 Stable

  Ghost released this 2026-07-16 07:52:43 +00:00 | 381 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.11] - 2026-07-16

  Changed

  • Expanded every administrator token-usage window with separate uncached input, output, and total
    values while preserving system-only aggregation and account privacy.

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.11.tar.gz
    2 downloads · 2026-07-16 07:52:47 +00:00 · 17 MiB
  • chattllx-1.0.11.tar.gz.sha256
    2 downloads · 2026-07-16 07:52:48 +00:00 · 89 B
• v1.0.10 bbf8b629c3

  Compare

  ChatTLLX v1.0.10 Stable

  Ghost released this 2026-07-16 07:25:33 +00:00 | 383 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  [1.0.10] - 2026-07-16

  Added

  • Split diagnostics, backups, and private system-wide token aggregates into dedicated administrator
    views. The usage windows cover 7, 30, and 90 days plus all recorded time without returning
    account identifiers or individual usage values.

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.10.tar.gz
    2 downloads · 2026-07-16 07:25:37 +00:00 · 17 MiB
  • chattllx-1.0.10.tar.gz.sha256
    2 downloads · 2026-07-16 07:25:37 +00:00 · 89 B
• v1.0.9 43a7fa3c81

  Compare

  ChatTLLX v1.0.9 Stable

  Ghost released this 2026-07-15 18:09:14 +00:00 | 386 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  1.0.9 - 2026-07-15

  Fixed

  • Restored text and hybrid web search after the DNS-pinned network dispatcher had been paired with
    an incompatible built-in Fetch runtime.

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.9.tar.gz
    1 download · 2026-07-15 18:09:28 +00:00 · 17 MiB
  • chattllx-1.0.9.tar.gz.sha256
    1 download · 2026-07-15 18:09:28 +00:00 · 88 B
• v1.0.8 bda6e772f3

  Compare

  ChatTLLX v1.0.8 Stable

  Ghost released this 2026-07-15 17:18:14 +00:00 | 388 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  1.0.8 - 2026-07-15

  Security

  • Made the configured origin and bind-address boundaries authoritative, ignored spoofable
    forwarding headers, and routed browser automation and server-side fetches through DNS-pinned,
    policy-checked sockets.
  • Hardened account setup and credential changes with a one-time initial setup token, host-scoped
    cookies, session rotation, stronger password hashes with transparent migration, and safer
    account-input handling.
  • Prevented private response caching, redacted internal upstream, tool, automation, and renderer
    failures, bounded every auxiliary upstream response, and required explicit approval before
    exposing public errors.
  • Confined encrypted files and restore staging to validated data paths, serialized file-quota
    reservations, validated backup contents before replacement, and enforced exclusive push-endpoint
    ownership with stable key identity.
  • Sanitized diagram resources, translations, calendar URLs, administrator-controlled settings,
    persistent UI identifiers, and the pre-login secret at their trust boundaries.
  • Hash-pinned Whisper Python dependencies and prevented CI from downloading undeclared packages.

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.8.tar.gz
    2 downloads · 2026-07-15 17:18:23 +00:00 · 17 MiB
  • chattllx-1.0.8.tar.gz.sha256
    2 downloads · 2026-07-15 17:18:23 +00:00 · 88 B
• v1.0.7 a1c7bcb607

  Compare

  ChatTLLX v1.0.7 Stable

  Ghost released this 2026-07-15 11:16:05 +00:00 | 431 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  1.0.7 - 2026-07-15

  Fixed

  • Restored the fixed mobile PWA viewport so browser pinch zoom no longer changes the application
    scale.
  • Kept the full-screen boot-logo reveal while removing its continuous idle pulse and isolating the
    transform on a compositor layer to avoid startup stutter on mobile devices.
  • Added bounded PDF text extraction to website reading so PDF bytes never appear as corrupted text
    in tool traces or model context.
  • Added one automatic final-answer recovery after normal tool results and report a visible error if
    the model still stops without answering instead of silently completing the chat job.

  1.0.6 - 2026-07-14

  Added

  • Added a validated server.proxyBindHost setting so an external reverse proxy on another trusted
    host can reach the Compose application without wildcard port exposure.

  Fixed

  • Imported protected native translation files without weakening the durable container capability
    boundary or changing their application ownership.
  • Normalized migrated runtime metadata ownership so the production doctor remains clean on
    setgid installation directories.

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.7.tar.gz
    2 downloads · 2026-07-15 11:16:15 +00:00 · 17 MiB
  • chattllx-1.0.7.tar.gz.sha256
    2 downloads · 2026-07-15 11:16:16 +00:00 · 88 B
• v1.0.5 f3ea8a9afc

  Compare

  ChatTLLX v1.0.5 Stable

  Ghost released this 2026-07-14 21:13:07 +00:00 | 441 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  1.0.5 - 2026-07-14

  Fixed

  • Added an explicit migration override for preserving metadata whose encrypted file artifact was
    already missing from the native source, while continuing to reject every unsafe path.

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.5.tar.gz
    4 downloads · 2026-07-14 21:13:19 +00:00 · 17 MiB
  • chattllx-1.0.5.tar.gz.sha256
    4 downloads · 2026-07-14 21:13:19 +00:00 · 88 B
• v1.0.4 4eeb8eeb98

  Compare

  ChatTLLX v1.0.4 Stable

  Ghost released this 2026-07-14 20:45:27 +00:00 | 443 commits to main since this release

  Changelog

  All notable public changes to ChatTLLX are documented here. The project follows
  Keep a Changelog and uses semantic versioning for
  published releases.

  Unreleased

  1.0.4 - 2026-07-14

  Fixed

  • Excluded the regenerable native Whisper cache and virtual environment from the cutover data
    validation, allowing standard virtual-environment links while preserving strict validation for
    every path copied into the Compose runtime.

  1.0.3 - 2026-07-14

  Fixed

  • Allowed normal links inside the regenerable Whisper cache and virtual environment to remain
    excluded from native disaster-recovery backups while retaining strict link rejection for every
    path that enters the encrypted package.
  • Enforced the reviewed Docker operating-system matrix even when an end-of-life Ubuntu release
    omits support metadata from /etc/os-release.

  1.0.2 - 2026-07-14

  Added

  • Added a staged native-to-Compose migration that prepares images while the existing service stays
    online, moves the encrypted SQLite state into PostgreSQL, and verifies the protected/public HTTP
    boundaries before completing the cutover.
  • Added consistent SQLite snapshots, age-encrypted native backups, externally verified backup
    checksums, an encrypted post-migration backup, and automatic rollback to the native systemd
    service when the Compose cutover fails.
  • Added an opt-in end-to-end migration fixture using the real PostgreSQL and Compose services.

  Changed

  • Published English and German migration runbooks for backup, cutover, verification, and rollback.
  • Refused automatic Docker installation after a host operating system reaches its declared support
    end.

  Fixed

  • Included the required license and community files in fresh container build contexts.
  • Kept the source migration lease active while creating the final consistent SQLite snapshot.

  1.0.1 - 2026-07-14

  Security

  • Replaced vulnerable transitive dependencies in the bundled Excalidraw renderer with reviewed,
    pinned versions and regenerated the browser runtime.
  • Added an exact install-script allowlist for esbuild and a CI audit gate for the complete
    dependency tree.
  • Replaced the deprecated transitive sliced package with a documented, MIT-licensed local
    compatibility implementation.

  1.0.0 - 2026-07-14

  Added

  • Interactive, checksum-verified Compose installer for Linux/amd64.
  • PostgreSQL storage separated into identity, content, automation, files, and operations schemas.
  • Self-hosted Whisper service, encrypted backups, restore tooling, and atomic updates.
  • Forgejo CI and immutable, reproducible release archives.
  • English-first public documentation, community policies, AGPL-3.0-or-later licensing, and an
    explicit no-telemetry guarantee.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • chattllx-1.0.4.tar.gz
    5 downloads · 2026-07-14 20:45:41 +00:00 · 17 MiB
  • chattllx-1.0.4.tar.gz.sha256
    4 downloads · 2026-07-14 20:45:41 +00:00 · 88 B