v0.0.3

Fixes for the Cloudflare Tunnel, ports, the data folder and downloads, the images on Alibaba Cloud for mainland China, three new maintenance commands, and themes kept with your account.

Fixed

• Cloudflare Tunnel: changing the tunnel (or the kind of link) while cloudflared waited to restart could leave two of them running, fighting over the metrics port (address already in use). There is now only ever one.
• Installs no longer publish PostgreSQL (5432) and Valkey (6379) on the host, so they don't clash with a database already running there.
• A data folder owned by root (Docker recreates it that way after it was deleted) made the server restart over and over (EACCES … /data/.secret). coltex start, restart and update now fix the owner first, and the server says which chown to run instead of printing a stack trace.
• docker compose commands run by hand no longer warn that COLTEX_BIND is not set.

Improved

• The theme is kept with your account instead of the browser, so it follows you to other browsers, and the sign-in page always shows ColTex's default blue. Dark and Moss use dark grey instead of near-black. Sepia and Espresso are replaced by Lavender and Plum (violet). Project cards take the theme's colour.
• The skills chat (Settings → AI skills) has a floating message box with the model, thinking level and usage inside it.
• Skills are personal: the project settings no longer have an AI skills section, and skills the AI agent drafts are saved to your skills.
• Choose your avatar colour in Settings → Account (it is also your cursor's colour in the editor). The initials grow with the avatar.
• References → Add has a Search (or Add, for a DOI or arXiv id) button that shows when it is working.
• coltex cli reset-password leaves a trace: the account's owner gets a notification, and the server's log records it.
• The sign-in, setup and invitation pages link "Open source under AGPL-3.0" to the repository.
• Cloudflare Tunnel: when QUIC can't get through (a firewall, or a proxy that drops UDP), it switches to HTTP/2 by itself. A rate-limited temporary link (429) is asked for again less and less often instead of every 5 seconds. Common errors are explained in plain words, each line once, and changing the tunnel warns that its hostnames stay on the old one (Error 1033).
• The compiler images come in layers of about a gigabyte instead of one TeX Live layer of up to 7 GB, so a download that breaks only repeats the part it was on.
• Downloads cut off by the network are tried again (three times in all, keeping the finished layers), in the installer and in coltex update. When it still fails, it says how to use a mirror of ghcr.io and which Docker settings help on a poor connection.
• The images are also on Alibaba Cloud Container Registry, for mainland China. The installer downloads from whichever of the two answers faster from the machine (Alibaba Cloud in mainland China, ghcr.io elsewhere); --images aliyun or --images ghcr chooses by hand (running the install command again with it switches an existing install; settings and data stay). With Alibaba Cloud, PostgreSQL, Valkey and Caddy come from there too, since Docker Hub is hard to reach from mainland China. --images REGISTRY takes any other mirror of ghcr.io (Docker's registry-mirrors doesn't apply to ghcr.io).
• The help explains running the built-in Tailscale and Cloudflare Tunnel next to the server's own, and why ColTex shouldn't be given the server's tunnel token.
• When ~/.local/bin isn't in PATH, the installer links coltex into /usr/local/bin if it can, or shows the line that adds it. When this user may not use Docker, it shows the usermod command.

New

• coltex cli reset-password <email>: a new password for an account, from the server's terminal, signing it out everywhere.
• coltex reset: deletes all data and starts again from the setup page (asks you to type reset first).
• coltex uninstall: removes ColTex from the machine in one go: containers, database, data, images, the coltex command and its folder (asks you to type uninstall first; Docker stays).