Changelog

What we
shipped.

We build in the open, on a near-weekly cadence. Every release in plain language — newest first.

Prefer the story? Read the monthly digest on the blog →

July 2026

v2.1 2026-07-07 NewFix

Claude Sonnet 5 as an opt-in model, plus a correctness and data-safety wave across memory and upgrades

  • You can now pick Claude Sonnet 5 for the balanced tier — it adds a one-million-token context window. Your existing setup is unchanged until you choose it, in Settings → LLM.
  • A correctness and data-safety wave across the knowledge base: upgrades that never discard data when a database migration hits an error, memory edits that stay consistent everywhere, and a new, reversible way to merge two entries for the same person.
  • Under-the-hood reliability and billing accuracy improvements. Self-hosting behind a reverse proxy? Client-IP handling changed for stronger rate-limiting — set LYNOX_TRUST_PROXY=true so per-client limits keep working.
v2.0 2026-07-06 MilestoneNewSecurity

Foundation Rework: a unified automation core, media processing, and a broad reliability, billing, and security hardening

  • Workflows, triggers, and tasks now share one consolidated store with a clearer “when vs. what” model and reusable connections — a stronger base for automation. On upgrade everything migrates itself, with no action and no data loss.
  • New media tool: transcode, extract audio, and generate thumbnails from audio and video, safely and within strict limits.
  • More accurate billing across every metered path, clearer handling of interrupted runs, and message timestamps plus artifact-card fixes in the chat.
  • A wide security-hardening wave (vault, filesystem, network egress, injection guards) and, for managed hosting, a one-click EU right-of-withdrawal and more robust provisioning.

June 2026

v1.22 2026-06-30 New

Foundation groundwork, a configurable network policy, and GDPR data controls

  • The Foundation Rework groundwork ships dormant — a new consolidated data store behind an off-by-default flag, doing nothing yet. It is the base the 2.0 release builds on.
  • A configurable outbound network policy (allow-all, deny-all, or an allow-list) gates where the agent is allowed to reach.
  • GDPR: data erasure now wipes the new store as well, and the data export paginates so large datasets come out complete.
v1.21 2026-06-29 NewSecurity

Connect a mailbox from chat — the password never touches the agent

  • A new flow resolves a known provider’s mail servers and hands off to an in-chat consent step where you enter the app password.
  • The password goes straight from your browser to the vault — it never enters the agent context, the run history, or the prompt store.
v1.20 2026-06-29 New

Readable PDF and Word uploads, remembered across conversations

  • A PDF or Word file dropped into chat is text-extracted server-side and read by the agent, instead of rejected.
  • What it read persists into memory, so the document is recalled automatically in later turns and threads.
v1.19 2026-06-26 New

The navigation maps to the agent loop

  • Triggers get an editable home with pause, delete, and run-now; Workflows, Tasks, and settings each map to a primitive instead of a feature.
  • “Open in chat” on tasks, contacts, and API profiles — create or edit them by talking to the agent.
  • Cheaper watch change-detection — it hashes the page’s visible content on the fast tier instead of re-fetching raw HTML.
v1.18 2026-06-25 New

The inbox becomes chat-first, and contacts get a real identity

  • Replying to or composing a mail opens a chat with the message loaded as context — the standalone composer is gone.
  • Saved correspondents become real contacts keyed on email, and the task model splits into user-TODOs and agent-triggers.
v1.17 2026-06-24 New

Saved workflows become a scheduled, chat-editable surface

  • Schedule a saved workflow on a cron; a run that needs your input opens an unread chat thread with the full context.
  • Edit or fix a workflow by talking to the agent — no bespoke step-editor.
  • Headless runs gain explicit autonomy, full observability, and fail-closed capability contracts.
v1.16 2026-06-22 NewFix

Context-cost tooling, a thread debug-export, and cheaper long conversations

  • A thread debug-export bundles the messages and per-run cost, tokens, and cache composition (secrets scrubbed).
  • Long threads auto-summarize against a token budget to bound the cost of large-context conversations.
v1.15 2026-06-17 New

Provider-agnostic routing: each tier on its own provider and model

  • A Standard mode keeps one provider for every tier; an opt-in Hybrid mode lets you mix providers freely, tier by tier.
  • A per-tier editor with a model picker; managed tenants stay on the curated Anthropic + Mistral allow-list.
v1.14 2026-06-16 New

Mistral becomes a first-class provider; canonical environment names

  • The “EU-sovereign mode” toggle is retired — Anthropic and Mistral are freely switchable providers.
  • Managed-Pro can reach Opus for deep work while everyday chat stays on a cost-sane tier.
v1.13 2026-06-12 NewFix

Managed-Pro on Opus, background work on Mistral, plus cost and crash hardening

  • Managed-Pro deep work runs on Opus; background and bulk tasks route to the cheaper Mistral profile.
  • Free-text answers on tabbed questions, a calendar-month spend cap, and auto-capped oversized HTTP responses.
v1.12 2026-06-09 NewFix

Provenance: every recalled fact carries where it came from

  • An un-spoofable marker tags each fact’s origin — user-asserted, tool-verified, agent-inferred, or external-unverified — through recall and compaction.
  • Managed billing fix: saved and scheduled workflows now count against the budget and the credit gate, instead of running uncapped.
v1.11 2026-06-08 NewSecurity

EU AI Act transparency, hardened BYOK endpoints, and sanctions screening

  • A persistent notice that responses are AI-generated and may contain errors (EU AI Act Art. 50), in German and English.
  • Production sanctions name-screening is populated with non-Latin coverage, and BYOK custom-endpoint handling is hardened.
v1.10 2026-06-06 NewFix

Chat runs survive reloads, and long threads stop losing messages

  • A chat run is no longer tied to its browser connection — reload or disconnect and it keeps going headless, resumable when you return.
  • The prompt cache works again — a large cost drop on long conversations — and assistant messages no longer vanish after compaction.
v1.9 2026-06-04 NewFix

Nothing vanishes silently: durable turns, artifact history, one cost number

  • Artifacts gain a real version history (up to 10 snapshots), so an accidental overwrite is recoverable.
  • A user message is persisted at run start, so an abort or reload mid-stream can’t lose it; and cost shows one consistent number everywhere.
v1.8 2026-06-03 NewFix

Provider-agnostic model tiers, diagnostics, and inbox polish

  • Model tiers are now named by what they do — deep / balanced / fast — instead of one vendor’s brand names. Old names keep working.
  • New opt-in chat diagnostics panel with per-message metrics, plus JSON export for any conversation.
  • Inbox: encoded and non-UTF-8 mail renders correctly, and mail context moved below the message for a calmer read.
  • Clearer settings: an invalid provider config now shows the real reason, and managed instances always show the correct provider and data-residency.

May 2026

v1.7.5–1.7.9 2026-05-27 NewFixSecurity

Launch-hardening: honesty by default and a smoother first run

  • When web search isn’t configured, the agent says so instead of inventing results — no more fabricated sources.
  • Setup now validates your API key before saving it, so a typo is caught up front instead of on your first message.
  • Dozens of self-host rough edges smoothed: provider-aware setup hints, correct sender names on email, cleaner installer output.
v1.7.0 2026-05-22 New

Saved Workflows and a livelier chat stream

  • Save any multi-step task as a reusable workflow and re-run it from a dedicated library tab.
  • The chat now shows a live activity ticker, interleaved thinking, and a marker where long conversations were compacted.
v1.6.0 2026-05-19 NewSecurity

Passwordless email login and light mode

  • Magic-link login: sign in with a one-time emailed code, alongside passkey and password.
  • Light-mode theme for the whole web UI.
  • Connect any API yourself: managed customers can now add their own credentials without filing a support ticket.
v1.5.0 2026-05-16 New

Settings overhaul and smart API setup

  • Reorganized settings with per-tool toggles and server-side enforcement of what the agent may use.
  • API Setup v2: point lynox at a docs URL and it bootstraps the connection for you.
v1.4.0 2026-05-14 NewSecurity

Unified Inbox and a security audit pass

  • Unified Inbox: read and act on your mail straight inside lynox.
  • Thirteen critical and high-severity findings from a full codebase audit fixed before launch.

April 2026

v1.3.0 2026-04-21 Milestone

The April build-out: voice, automation, and multi-provider

  • A month of near-daily releases adding voice, scheduled automation, and support for multiple LLM providers.
v1.0.0 2026-04-15 Milestone

First public release of lynox

  • The business runtime engine goes public on npm and GitHub — self-host with one command.
Full technical release notes on GitHub →