v1.1.0

OLS (Open Local Server) v1.1.0

Release date: 2026-09-30 · Platform: Windows 10/11 (64-bit) · License: GPL-3.0-only

Incremental release. Product as described in v1.0.0.md is unchanged.

Added

• Bulk site management on the Sites page: select with checkboxes, then enable/disable, add auto domains, move to another web server, or delete.
• New commands bulk_set_domains_enabled, bulk_set_domain_server, bulk_remove_domains. One CoreResponse::Bulk result reports what changed and what was skipped, with a reason per skip.
• Pagination on the Sites list.

Fixed

• Explorer right-click entries opened OLS instead of adding the folder (ols.exe and OLS.exe are the same file on Windows). The CLI is now olsc.exe, found by name and refused if it is the running app.
• ols <command> opened the app instead of running the command line. The app ships as OLS.exe and Windows does not
  tell two names apart by case, so ols is the app — and a shim beside it could not help, because within one folder cmd
  resolves by PATHEXT and .EXE comes before .CMD. The app now hands any argument that is not its own to
  olsc.exe and exits with the command's exit code, so ols works with the GUI closed and there is no second name
  to install.
• The shell menu card no longer reports "installed" while every entry points at the app; it checks the command it actually wrote.
• Explorer entries use the app's icon.ico instead of falling back to the console icon.
• Folders on network shares can be added from the right-click menu. Explorer passes UNC\server\share and the core produced that same unusable spelling; both are fixed, and a local folder named UNC… is left alone.
• The Setup window's "Read the docs" link opens externally via open_url.
• Legacy Start menu entries are cleaned up on upgrade.
• Daemon shutdown logs a service the OS refuses to stop, instead of dropping it.

Upgrading

OLS-1.1.0-setup.exe, verify against OLS-1.1.0-SHA256SUMS.txt. In place from 1.0.0: no settings, sites, secrets, service or certificate move.

v1.0.0

OLS (Open Local Server) v1.0.0: First Public Release

Release date: 2026-09-29 · Platform: Windows 10/11 (64-bit) · License: GPL-3.0-only

OLS is a local development environment manager for Windows: runtimes, sites, databases, and trusted HTTPS, with no manual system edits. It succeeds XAMPP and Laragon with broader runtime coverage and full extensibility. One core engine (ols-core) powers three front doors: a desktop GUI, a CLI (ols), and a local HTTP API. Every project gets isolated runtimes, its own .test domain, and trusted local HTTPS.

✨ Key Features

Runtimes & Toolchain

• Side-by-side versions with a version manager (search, install, default badge, per-version paths).
• Managed: PHP NTS 8.1–8.5 (per-version extensions, Xdebug, PECL), Node 22/24 (corepack), Composer, Python venvs, portable Git, k6.
• Online catalogs with 24h cache and resume-safe, atomic installs. You can also register existing PHP/Node/Python installs.
• Resolution order: project manifest pin > auto-detected > global default. Changing the default never touches project files.

Sites, Web Servers & HTTPS

• Custom domains with wildcard subdomains, automatic <folder>.test, static sites, and reverse proxy to any host:port.
• Trusted HTTPS via an on-device CA: 397-day certificates, auto-renewed under 30 days.
• Nginx 1.28, Apache 2.4, and Caddy 2.11, each with its own HTTP/HTTPS ports, and per-site PHP versions.
• Generated configs (Managed / Advanced / Manual) with validate-before-reload, rollback, drift detection, and diff/restore history.
• localhost/<prefix> routes proxy to the site's own vhost (HTTPS when available).
• Built-in wildcard DNS for .test / .localhost / .internal, plus an optional elevated helper that avoids repeated UAC prompts.

Projects & Reproducible Environments

• Auto-detects frameworks from composer.json, package.json, manage.py, and markers.
• Manifests (.openlocalserver/*.yaml) and a 14-step setup pipeline (plan → dry-run → apply) with journaling and rollback.
• Profiles (Development / Testing / Debugging / Demo), snapshots, and a lossless .env editor.
• 13 Quick App recipes (Laravel, Symfony, WordPress, Express, React/Vite, Vue, Next.js, Django, FastAPI, static, reverse proxy) and one-click Composer/npm scripts.
• The project name autofills the folder, domain, and route together.

Databases & Services

• MariaDB 11.4, PostgreSQL 17, MongoDB, Redis (community redis-windows build), Mailpit, SQLite, and custom services (any program + port + health check).
• Per-engine DB/user management, backup/restore with a safety copy, and one-click HeidiSQL, pgAdmin 4, NoSQLBooster, and Tiny RDM.
• Live importers for Laragon, XAMPP, and WampServer databases (no SQL dumps needed).
• Mailpit capture per framework, and a dedicated log per service.

Dashboard & Monitoring

• Services card with color-coded controls; unavailable actions render flat grey.
• Responsive layout, fixed-column web-server ports tab, and in-app number steppers.
• CPU/RAM/disk donuts and a traffic graph from the access log.
• Diagnostics and Doctor report each finding as Problem / Cause / Fix, with safe one-click repair.
• Unified log viewer, process manager, command palette (Ctrl+Shift+P), and global search (Ctrl+K).

Resource Limits

• Memory and CPU caps for databases, cache, mail, custom services, and all three web servers.
• CPU limits use the vendored cpulimit utility (share of total CPU or thread count).
• A cap that can't be applied is refused with a fix, never silently ignored.

Sharing & Tunnels

• Cloudflare, ngrok, LocalTunnel, and Tailscale, with exposure confirmation, optional password, and one-click stop.
• Traffic inspector with redacted log, replay, and webhook tester.

CLI, API & Automation

• ols CLI (setup, doctor, repair, status, start, stop, and more) with a background daemon that runs with the GUI closed.
• Local HTTP API on 127.0.0.1:7420 with bearer token, origin rejection, and read-only vs operate scopes.
• Workers (Procfile.dev import), cron scheduler, integrated terminals, and a full Git manager.
• k6 load testing, and an AI assistant (LM Studio, Ollama, Hugging Face, OpenRouter, or OpenAI-compatible), off by default and bring-your-own-model.
• Signed plugin catalogs, a signed self-updater, tray icon, and start with Windows.

Reliability

• A single "Stop all" shared by the tray, Dashboard, and API; it names any process the OS refuses to kill.
• Recovery from a poisoned core mutex, deadlines and retry on site settings reads, and timeouts on helper replies.
• Backups accept database names with -, ., or spaces.
• Faster site removal, and the confirm dialog names what will be deleted.

Settings & State

• Configurable default TLD, and visible, dated, undoable site/project exclusions.
• State in SQLite (data/app.db); OLS_HOME overrides all paths.

🛠️ Technical Highlights

• Architecture: GUI (React) / CLI / HTTP API → Core::dispatch(CoreCommand) → Managers, with a single command dispatcher, single response type, and a single error shape Diagnostic{problem,cause,fix}.
• Stack: Rust (Tokio, serde, reqwest/rustls, rcgen, portable-pty, sysinfo), Tauri 2.11, React 19, Vite 8, Tailwind 4, shadcn/ui, CodeMirror 6, xterm.js.
• Safety: operation journal with rollback, config versioning, and a ProcessSupervisor with crash restart and tree-kill.
• Privilege separation: the main app is never elevated. ols-helper exposes a closed, validated set (hosts/NRPT/service).

🔒 Security

• All runtime downloads are SHA-256 verified. The local CA key never leaves the device.
• Secrets live in the OS keyring only, and are redacted from logs, tunnel inspector, and AI prompts.
• Tunnels need explicit first-exposure confirmation.
• AI: prompt preview, per-request confirmation for remote providers, and allowlisted steps that run only after approval.
• The cpulimit hash is self-pinned (upstream publishes no release asset); provenance is in vendor/cpulimit/README.md and re-checked at installer build.
• Report vulnerabilities privately via GitHub Security → "Report a vulnerability" (see SECURITY.md).

⚠️ Known Limitations

• Tunnel binaries (cloudflared, ngrok) are located or placed by hand, not downloaded.
• The traffic inspector skips WebSocket upgrades and streamed/chunked responses.
• Memory limits apply at the next service start.
• The scheduler runs only while the app or ols daemon is open.
• The installer hasn't yet passed a clean-VM release gate.
• Python venvs are managed, but the Python runtime itself is not.
• Redis is a community Windows build.
• Windows only; Linux is planned for 2.0.

📋 Getting Started

Download OLS-1.0.0-setup.exe from the release assets, run it on Windows 10/11 64-bit, and verify it against OLS-1.0.0-SHA256SUMS.txt.