RagLeap
Blog

v0.11.0: Documents tab, a non-root container and experimental computer control, the first release under the ragleap organisation

ragleap-core v0.11.0 was published on 2026-10-20. It is the first release under the ragleap organisation: the repository moved from antonyrag/ragleap-core to ragleap/ragleap-core, and the old links redirect. Everything below comes from the release notes.

New in the app

  • Documents tab. List, upload and delete documents. Deleting also removes the document's entries from the knowledge graph.
  • 28 file types and web pages by address can be added from the dashboard.
  • Proactive and Connectors tabs in the AI Office.
  • Offline language detection. LANGUAGE_DETECTION_MODEL=lite works without internet.
  • Safer container. The app runs as a non-root user with pinned dependencies.
  • One scheduler. Only one process runs the background jobs, so extra web workers no longer repeat scheduled triggers.
  • New provider. DemonRoute, an OpenAI-compatible hosted service.
  • Windows install. Clearer steps and the direct one-line command.

Computer control, first slices (experimental, off by default)

Folders can be shared with AI employees only by a command run on the machine (ragleap files). A sandbox runner reads them read-only. AI employees can list and read files and can ask for access, which always needs the owner's approval and grants nothing by itself. File contents stay out of the activity log, and the Files tab shows the grants. ragleap files off pauses everything.

It has not been independently reviewed. Please do not switch COMPUTER_CONTROL on for real data. Reviewers are welcome: issue #800.

Upgrade notes

  • The container now runs as user 10001. The app writes no files of its own, so the standard setup needs no change.
  • The packages (ragleap-rag, ragleap-graph, voice, agents and others) have their own versions and changelogs.

What the release notes say is not done

  • The compose file still ships a public default password for the graph database (Neo4j listens on localhost only). A random password per install is planned.
  • Tested by the maintainer on one Windows laptop and on Linux servers. macOS, Linux desktops and the Ollama option on Windows are not verified yet (issues #779 to #781).
  • No named users or roles yet, and no independent security review yet.

Community

Testing issues (#779 to #787), number words for every language (#801) and the ragleap-phone RFC (#814). The release notes thank @sammist2, @mig-builds, @ahmet-izgi and @haterfactory for their contributions.

Back to the blog