ElixirOffice 0.3.2

ElixirOffice desktop 0.3.2

Released 2026-10-23 (beta). Linux, Windows and macOS (Apple Silicon) packages; see the known limitations below.

Changed and fixed

• Release notices under your control. Check for updates is on by default and can be disabled in File > Options > Updates. The app makes at most one bounded background GitHub release-metadata attempt per day; prereleases are included. Release notes and Download open the matching release page in the system browser. Remind me later and Skip this version are available. Documents, file names, paths, recent files and user identity are not sent; GitHub receives ordinary HTTPS connection metadata, including the IP address. No asset download or installation runs inside the app. See release notices and privacy.
• Optional compact desktop title bar on Linux/X11. Options > Window > Use a custom title bar combines the title or tabs with the existing Quick Access actions and command search in one band. It applies to new windows and remains off by default. Windows, macOS, Wayland and unknown backends retain the native frame. A bounded native-frame recovery preserves live documents when compact startup or controls fail. See compact title bar.
• Aligned document icons. Native-frame header icons align with Save, Undo, Redo and the title in the desktop adapters for Word, Cell, Slide and PDF. Hosted editor styling is unchanged.
• Less repeated computer-font name work. Cache normalized font names during matching rather than repeatedly rebuilding the same normalized strings. This addresses the demonstrated large-font-list hot path behind the Playwrite investigation (issue31); improvement on the reporter's Windows machine remains unmeasured. See computer fonts.
• Reliable AppImage release inputs. Maintainer packaging uses a persistent, manifest-addressed raw tool store. Planning and execution check all pinned file sizes and hashes before reserving a build number. Packaging stages its own verified copies and disables download fallback, including if an input disappears after verification. Tool, runtime and builder-image pins are unchanged. See release preflight.

Validation and limits

• Linux/Windows build18 package checks passed; final macOS and physical-platform acceptance remain separately recorded. Source/UI tests and cross-reviews do not certify new Linux, Windows or macOS installers, physical printing, native browser actions, Gatekeeper, all display scales or all window managers.
• Compact-window source evidence covers an isolated Linux/X11 environment. Other platforms keep the native frame; no physical Windows/macOS or Wayland compact qualification is claimed. Actual Linux header geometry covers four editors in light/dark, native/compact configurations.
• Release-notice labels/privacy strings exist in 45 desktop locales; linguistic review is deferred to 0.3.3. Presence tests are not a linguistic verdict.
• The owner's earlier 30‚Äì60-second Windows opening freeze with high CPU on a Core i3 / 8 GiB remains unproven as resolved. New-window Wasm compilation and the existing deferred font discovery remain; no cross-editor compiled-module reuse is included. Windows tester timing and copied content-free opening diagnostics remain useful.
• The reported blank printing / Ctrl+P issue32 was not reproduced in the 0.3.1 investigation; no speculative printing fix is included here. Physical printers still require platform testing.
• Automatic installation is not included. The separate signed-update design and unshipped metadata helper do not enable an automatic updater in this release.
• Windows installers remain unsigned; macOS distribution remains Apple Silicon, ad-hoc signed and not notarized, subject to actual final packaging checks.
• Inherited conversion limits remain: the modern LibreOffice 26.8 encrypted ODS envelope is unsupported; strict ODF 1.3 and normative ODF 1.2 validity are not claimed. Desktop original-PDF text editing, OCR, PDF-to-DOCX, offline digital signatures and real-time coediting remain unavailable.

Mac validation provenance

The original macOS input archive omitted two test-only helper sources under tools/desktop-updates. They were supplied from the exact frozen product revision, with independently verified hashes. Mac validation also uses a reviewed test-only overlay: three compact-recovery fixtures explicitly select Linux, since compact frames are Linux-only. The reviewed Mac validation harness also routes the builder logger to stderr to avoid a reproduced Node 22 test-runner framing defect while retaining every diagnostic. One added logging regression brings that validation suite to 843 cases, with two workers; the original Linux-build and Windows-packaging suites remain 842 cases each. No existing assertion or timeout, application code, runtime pin, or build identity was changed. The final native Mac gate result remains separately recorded. The original input archive and private build metadata remain unchanged. Initial failures and subsequent validation receipts are retained in the audit evidence; the final result is recorded separately in BUILD-INFO.json. This does not qualify native GUI behavior, physical printing, or Gatekeeper.

Build qualification

Linux-build and Windows-packaging suites each passed 842/842 with zero failures/skips. Each packaged resource tree matched all 18776 selected entries and both runtime manifests. Clean DEB-only dependency installation passed a six-ELF audit as UID1000, with root-owned4755 sandbox helper and no manually provisioned runtime libraries. Default-worker, public ODS/CBC and static PDF browser/pixel gates passed. These checks do not certify a clean native start in the namespace-restricted container, physical printing, Gatekeeper, or final Windows/macOS GUI behavior.

Windows performance feedback

If opening or creating a document temporarily freezes the interface, report Windows and ElixirOffice version/build, CPU/RAM, approximate delay, first versus subsequent open, blank versus existing document, separate windows versus optional tabs, and CPU/memory observations. Include the app opening diagnostics if available, after reviewing them for private information. Do not share private document names, paths or contents. The original 30–60 second report on a Core i3 with 8 GiB RAM has not been remeasured; the font-name cache does not prove that startup delay fixed.

ElixirOffice 0.3.1

ElixirOffice desktop 0.3.1

Released 2026-10-22 (beta). Linux, Windows and macOS (Apple Silicon) packages; see the known limitations below.

Changed

• A separate window for each document by default. The first document reuses the empty startup window. File > Options > Window offers Open documents in tabs and Show Home tab, both off by default. Home is available with tabs. Changing preferences affects future opens; existing editors retain their windows and edits. File > Close returns the last document to the start page; closing its native window still closes that window. The optional Home affordance does not consume another document slot. The global limit remains 16 document views. See document windows and tabs.

• File commands in Office order. The integrated File menu groups document commands, keeps native Rename and Move to another window in Info and routes Export through the existing Save As workflow for supported output formats. Save, close and move continue to use their existing document guards. See desktop behavior.

• Office-style start screen. Home, New and Open share the editor's templates and recent files; Options, Help and About remain available before opening a document. Embedded File > Home does not duplicate application navigation.

• Remembered window placement and clearer tabs. Window size and position are restored within the available display work area. Optional tabs show file-type icons and a modified dot. A successful open finishes without a floating notice; important progress, errors and saved-file actions remain available. Opening an already-open file focuses its existing window rather than creating a duplicate.

Fixed and improved

• Equation category icons. Shared ordinary and large buttons render the shipped SVG symbols for the twelve equation categories. Menus and mathematical choices are unchanged; modern icons, image overrides and custom fallbacks keep their existing behavior. See equation icons.
• Late menu captions (issue 34). A normal menu item can receive its caption after rendering without dereferencing a missing anchor or replacing its icon. Header-only and divider paths retain their behavior. The reported complete Garuda startup failure was not reproduced; this fixes the demonstrated caption error, not every possible startup failure.
• Document-opening diagnostics and deferred font discovery. Background computer-font discovery waits until after first paint, a five-second delay and ready/idle document views. Consented computer-font support remains available. Bounded local diagnostics record opening stages such as Wasm compilation, font work and conversion, with numeric durations and fixed outcomes, without document paths or contents. The existing diagnostics-copy command includes these records.
• Release prerequisites checked before allocation. Planning and execution verify usable pip with --python support and the required exact pinned local builder images before creating output or reserving a build number. Failure gives an actionable error; the check installs, pulls and builds nothing. See release preflight.

Validation and limits

• The final build 17 Linux and Windows packages contain these source changes. Revised window/Home navigation, the File menu and equation assets still need physical acceptance against the final 0.3.1 packages on each target platform.
• The Windows owner's 30‚Äì60-second opening freeze with high CPU on a Core i3 / 8 GiB machine remains an investigation item. Deferring font discovery reduces competing startup work; no before/after measurement on that machine proves the delay resolved. Ask Windows testers for OS/app version, CPU/RAM, approximate opening time, first versus subsequent opens and copied opening diagnostics. Do not request document content or private file names. Wasm is still recompiled per new document window (about 0.5‚Äì1 second on slower CPUs in bounded experiments); no cross-editor compiled-module reuse is included.
• Equation checks cover 112 template cases and a Linux source-overlay run in light/dark themes at 100/150 percent scale. These do not certify fresh Mac/Windows package assets, native dialogs or physical printing.
• Linux test-harness teardown now signals its owned main process before a bounded group-kill fallback while the display stays alive. This is a test-cleanup correction, not a product lifecycle change or proof of the cause of the historical forced-cleanup SIGSEGV.
• The compact title bar is not included in 0.3.1. The system window frame remains the release default. Mac-host fixture tests model platform branches on Linux; they are not physical macOS acceptance. The revised tabs/windows behavior is not physically qualified on Windows. The owner's successful 0.3.0 Windows test does not certify these revised 0.3.1 packages.
• Native physical printing, OS associations, all display scales/compositors and every save environment remain outside automated source-test acceptance. Windows installers remain unsigned; the established Mac distribution is Apple Silicon, ad-hoc signed and not notarized. Final packaging claims must be checked against actual artifacts.
• Inherited conversion limits remain: the modern LibreOffice 26.8 encrypted ODS envelope is unsupported; strict ODF 1.3 conformance is not claimed and normative ODF 1.2 validity remains unmeasured. Desktop original-PDF text editing, OCR, PDF-to-DOCX, offline digital signatures and real-time coediting remain unavailable.
• The separate Nextcloud/Murena integration experiment is server-side synthetic compatibility evidence, not a new desktop coediting feature or production deployment. Ordinary PDF annotation saves were verified there; accepting a warning to leave without saving does not promise persistence. No PDF application fix is included.

Candidate qualification

Check	Actual result
Product / DocumentServer source	b10cda5e8c735d92ae5e8fbd64204e08e8a49e3b / adc905b591220200bd00907f66cc2d5b9e6144aa
Linux and Windows packaging unit suites	669/669 each; zero failed, skipped, cancelled or todo
Independent payload identity, editor resources, runtime and ASAR checks	PASS; 18,776 resources in each of five payloads
Clean DEB installation	PASS with apt-only declared dependencies; six ELF dependency checks as UID 1000; root-owned mode 4755 sandbox helper; no native-start claim
Packaging, default converter worker, public ODS/CBC browser gates	PASS
PDF page-order/browser/pixel checks	PASS; four page-order/browser/pixel jobs after a reviewed temporary-directory setup correction; original setup failure retained
Final Mac DMG	PASS actual arm64 package audits; Mac strict units 669/669 with zero failed/skipped; ad-hoc signed, not notarized
Revised 0.3.1 Windows/macOS physical behavior	UNVERIFIED
Physical printing and Gatekeeper acceptance	UNVERIFIED

The pinned-tool download and PDF harness setup failures are retained in private build evidence. Neither is represented as a successful original run. Package bytes and frozen source/runtime pins are unchanged by qualification recovery. Publishing this candidate remains an owner action.

ElixirOffice 0.3.0

ElixirOffice desktop 0.3.0

ElixirOffice 0.3.0 adds document tabs and moving documents between windows, with clearer desktop dialogs and improved computer-font startup. It includes the saving and installer fixes from 0.2.4 and earlier releases.

Added

• Document tabs. Keep several documents in one window and switch without losing edits, destinations, password state or undo history. Up to 16 document and Home tabs are supported across the app's windows.
• Move documents between windows. Drag a tab out to detach it, drag it onto another window's tab strip, or use File > Move document, the tab-strip button or the focused tab's Shift+F10 menu. The editor stays alive while moving.
• Arch Linux community package. Install with yay -S elixiroffice-bin or paru -S elixiroffice-bin. This community AUR package repackages the released DEB and is not maintained by the ElixirOffice project. Report packaging problems on its AUR page and application problems in the project's issue tracker.

Improved and fixed

• Linux DEB runtime dependencies. Explicit ALSA, GBM and GL dispatch dependencies avoid relying on libraries installed by unrelated desktop or test packages.

• Desktop dialogs. Options uses grouped controls; Rename accepts Enter; recovery choices explain whether a copy is available and preserve durable recovery copies. Save/Don't Save/Cancel remains scoped to the document that initiated it.

• Computer fonts. Background font discovery waits for the document engine and retries within a bounded startup budget. A warm index no longer causes a false read-failure warning; genuine permission, index and read failures remain visible.

• macOS artwork. Refined application and disk-image artwork includes Apple-generated small icon representations.

• ODS charts and password saves. Preserve embedded chart caches and worksheet identities, including local-table name collisions. Protected ODF exports use corrected CBC padding. The matched Wasm pair and three public LibreOffice 24.8.2.1 load/XLSX-export controls preserve ordered chart values and worksheet identities.

Qualification and known limitations

• Final DEB dependency qualification requires a normal apt/dpkg installation, fixed-point ldd, dlopen/LD_DEBUG checks and Arch/Electron dependency cross-checks against the final build identity. The minimal container cannot start Electron because namespace setup returns EPERM, so no clean native start is claimed; host runs use a different sandbox helper and are diagnostic only.

• AppImageUpdate uses updater-tool bytes matching the exact recovered pins. A moving download URL is a plausible cause of the earlier mismatch, but that cause is not proven.

• Native tab detach/move behavior is qualified on Linux X11 at display scale 1 without a window manager. The owner manually tested tabs on macOS with the ad-hoc 0.3.0-rc.191 test build on 2026-10-20: several documents and detach to a separate window, with no crash or unusual behavior observed. This manual owner test is not a physical qualification matrix. On 2026-10-21 the owner tested the build 16 Windows candidate: tabs opened, closed and detached to another window successfully. This is a manual functional check, not a complete physical qualification matrix; other Windows configurations, compositors and display scales need further testing. Automated tests do not establish physical OS behavior.

• Pressing Escape during a drag outside a window can still detach the tab. The document stays open; use Move document to bring it back.

• The modern LibreOffice 26.8 encrypted ODS envelope is unsupported. Support for older tested protected ODS inputs does not cover this envelope.

• Strict ODF 1.3 schema checks fail on all 27 tested XML parts in both the accepted 0.2.2 runtime and the new complete exports; both declare ODF 1.2. No regression is shown by this comparison; normative ODF 1.2 validity remains unmeasured. Strict ODF 1.3 conformance is not claimed. Source chart-fixture schema and converter roundtrip checks have separate, narrower scope.

• Native LibreOffice qualification used public synthetic fixtures, a temporary app copy, a fresh profile and loopback UNO without a sandbox; no network-isolation result is claimed. Longer startup waits changed timing only.

• Converter archive checks retain three ignored path-member cases with unchanged sentinels and two accepted DOCX/DOCM late-CRC cases. The full runtime qualification records these raw results.

• Windows installers are unsigned. The macOS package is Apple Silicon only, ad-hoc signed and not notarized. Final installer/native acceptance must be recorded against the final build; earlier runtime or source checks do not certify final package bytes.

• Original PDF text editing, OCR, PDF-to-DOCX, offline digital signatures and real-time co-editing remain unavailable. Physical printing, OS associations and every Windows save environment are not certified by automated checks.

Final build verification

Build 16 from Product 650967856ce88022a785cdc422ebe3aa97d4a631 and DocumentServer 2831cb0984207071f025bfe300a22f3eaef3e69e. Linux/Windows packaging and static resource audits are recorded in BUILD-INFO.json. Final Linux/Windows independent payload/resource/runtime identity checks, 606/606 strict desktop tests on each build platform, clean DEB dependency/install checks and default-worker/public-ODS/PDF browser gates passed. The owner accepted the targeted Windows tab open/close/detach test on 2026-10-21. The final macOS arm64 DMG passed static identity, source, resource, image-integrity and ad-hoc signature audits. The final build 16 Mac-host desktop suite recorded 603 passes out of 606 tests, with exactly three known platform-fixture failures and no skipped tests; these failures remain deferred to 0.3.1. The suite is not green. Final native GUI and printing acceptance remain unverified.

Linux DEB installation qualification uses the fixed-point ELF dependency audit, dynamic-loader observations, Arch/Electron dependency cross-checks and a fresh dpkg/apt install test. A pristine-container native start is unavailable because Chromium namespace creation is denied by the container environment. Host fallback runs with a different configured sandbox helper are diagnostic only; they do not certify a clean native package start. Physical/native acceptance is recorded separately.

Follow-up observations and tester feedback

• The Windows owner reports a 30–60 second interface freeze and high CPU use while creating or opening a document on a Core i3 computer with 8 GiB RAM. The owner considers this non-blocking for release. The timing and cause have not been independently measured.
• Windows testers: report whether this occurs, the ElixirOffice version/build and Windows version, CPU/RAM, document type, first versus subsequent open/create timing, and Task Manager CPU/memory/disk observations. Prefer a blank or synthetic document and omit private document content and filenames from reports. Also report whether Computer fonts is enabled and whether only ElixirOffice or the whole desktop stalls. The existing %APPDATA%/ElixirOffice/desktop-safety.log, when present and non-empty, contains timestamped reason codes and may be attached after quitting; it does not record opening durations. Save diagnostics apply only if saving also fails.
• A Windows owner screenshot shows garbled characters around the document name in the save-changes confirmation. A UI follow-up is deferred; occurrence on other platforms and the underlying cause are unconfirmed.
• The floating equation toolbar has blank category icons in affected DOCX documents; its palettes still contain mathematical choices. This issue was also reproduced in 0.2.4 and is deferred to 0.3.1.

Shutdown and diagnostic scope

Build 16's focused Linux X11 test used a private app copy with a different, already configured sandbox helper. All three functional scenarios passed, with four native view-order samples and no page errors. The overall harness nevertheless exited 1 after its 300-second close timeout after both synthetic documents were modified; the exact wait cause was not instrumented. All owned processes were cleaned up. This is a disclosed alternate-helper diagnostic, not a pristine package or full-run PASS. The earlier forced-cleanup SIGSEGV remains unresolved; this timeout does not establish or dismiss its cause. Physical printing and broader native platform qualification remain unverified.

ElixirOffice desktop 0.2.4 (beta)

ElixirOffice desktop 0.2.4

ElixirOffice 0.2.4 is an urgent fix for saving documents on Windows, with three small interface fixes. Everything in the 0.2.3 release is included.

Fixed

• Windows saving. Saving no longer fails, or shows an error for a document that was in fact saved, when antivirus software or another program briefly holds the document or its backup copy. Every step on the existing file is retried within a short limit, and a leftover backup copy that is locked no longer turns a successful save into an error: it is cleaned up at the next save or when you quit. If the file really cannot be replaced, the message now says that your edits stay open and that you can use Save As with a new name. #8, #12
• Diagnostics for save problems. A small local log records which step failed and the error code (no file names, folders or document content). The save error message has a "Copy diagnostics" action so you can paste it into a bug report. Nothing is sent automatically.
• Quick Access toolbar buttons (Save, Undo, Redo) are clearly visible in the Classic Light theme. #13
• Page shadow no longer gets darker as you type or after reopening a document. #13
• Printing: the small "Waiting for your choice" status panel is hidden while the system print dialog is open (screen readers are still told).

Security

• No change to the converter hardening of 0.2.2. A DOCX archive that contains a path-escaping member is still cleaned (that member is ignored and never written) rather than rejected; strict rejection is planned.

Known limitations

• The zoom slider can still overlap the plus button in the spreadsheet and presentation editors (#2); system fonts can be missing on some Linux setups (#9).
• The Windows saving fix is verified with automated tests that simulate locked files; it has not yet been confirmed on every Windows setup (antivirus, synchronized folders, network shares). If saving still fails, please use "Copy diagnostics" and attach the text to the issue.
• Limitations of 0.2.2 and 0.2.3 still apply: one document window at a time (#7), unsigned installers (the macOS package is Apple Silicon only, ad-hoc signed and not notarized), local PDF editing remains limited.

Verification

Final build 10 from product 4b494775f8e2 and DocumentServer 5a56689a150f. Linux and Windows package and identity/resource audits are recorded in BUILD-INFO.json. The selected converter runtimes are unchanged from 0.2.2. The final macOS arm64 package passed the maintained identity, exact-source, resource, hdiutil, deep strict ad-hoc codesign and complete DMG application comparison audits. It is ad-hoc signed and not notarized; final10 native GUI and print checks were not rerun. The owner must test Windows saving with this build10 installer before publication; earlier RC7 printing results are historical evidence and were not repeated for this changed application source. Physical-printer and broader final native GUI checks remain unverified; browser PDF reorder was not rerun. Debian package and fresh isolated Ubuntu 26.04 installation/permission-repair checks passed. Actual production CSS/header-icon and SDK page-shadow bundle checks passed, including exact compiled bytes in the packaged copies.

Mac native printing carries the owner’s RC7 PASS result by the lead’s release decision; it was not rerun on final10. Owner acceptance of saving with this final10 Windows installer is still pending before publication.

ElixirOffice desktop 0.2.3 (beta)

ElixirOffice desktop 0.2.3

ElixirOffice 0.2.3 is an urgent fix for the Debian/Ubuntu package. All other installers are rebuilt from the same application source as 0.2.2, so everything in the 0.2.2 release is included.

Fixed

• Debian/Ubuntu package did not start on Ubuntu 26.04. The .deb installed the Electron sandbox helper without the permission it needs on systems that restrict unprivileged user namespaces (Ubuntu 24.04 and later). The package now installs and repairs those permissions during installation. If you installed 0.2.1 or 0.2.2 and applied the manual workaround from the issue, installing 0.2.3 replaces it. The AppImage was not affected. #19
• README download links for Windows and macOS are now on separate lines. #20

Security

• No change to the converter hardening of 0.2.2. A DOCX archive that contains a path-escaping member is still cleaned (that member is ignored and never written) rather than rejected; strict rejection is planned.

Known limitations

• The limitations listed for 0.2.2 still apply: one document window at a time (#7), physical-printer output and some older-Linux checks still need confirmation, local PDF editing remains limited, and installers remain unsigned (the macOS package is Apple Silicon only, ad-hoc signed and not notarized).
• A small "Waiting for your choice" status panel stays visible while the system print dialog is open.
• The Debian/Ubuntu fix passed package-content checks and a fresh disposable Ubuntu 26.04 installation, including repair of the helper permissions. Native GUI startup on a real Ubuntu 24.04 or 26.04 desktop remains unverified; user reports are welcome.

Verification

Final build 9 from product b540dc7c14fd and DocumentServer 04839f098fdc. Linux and Windows package and identity/resource audits are recorded in BUILD-INFO.json. The selected converter runtimes are unchanged from 0.2.2. The final macOS arm64 package passed A’s identity, resources, exact-source, deep strict ad-hoc codesign and complete DMG application comparison checks; it is not notarized. Final native GUI checks were not repeated; native Windows/macOS printing results are carried from the same application code tested for 0.2.2. Physical-printer, native Windows save/font and broader final GUI checks remain unverified; browser PDF reorder was not rerun. Debian archive and fresh isolated Ubuntu 26.04 installation checks passed: chrome-sandbox is 4755 root/root, and postinst repairs its mode and owner. These checks do not establish native GUI startup on a user desktop.

ElixirOffice desktop 0.2.2 (beta)

ElixirOffice desktop 0.2.2

ElixirOffice 0.2.2 focuses on Windows saving and fonts, printing, keyboard access and a more comfortable start page.

New

• Improved right-to-left Home layout for Arabic, Hebrew and Urdu, with mirrored navigation and clearer display of mixed-script file names.
• Light and dark Home appearance follows the app's appearance setting or the system preference.
• Better use of fonts installed on your computer, including suitable fonts for local PDF export. Existing font-permission choices are respected; font files stay on your computer. Small bundled Arabic/Urdu and Sinhala fallback fonts remain available when computer fonts are disabled.
• More localized desktop templates: the four examples add Japanese, Simplified and Traditional Chinese, Korean, Sinhala and Urdu versions. East Asian versions require suitable installed fonts and permission to use them; otherwise the English templates remain available.

Fixed

• Windows repeated saves and AutoRecover: address failures after the first save, including temporary file-access errors. Saving retries short-lived refusals and uses a verified backup when a replacement needs a fallback. A failed save does not mark the document as saved. #8
• Windows computer fonts: include per-user and registered fonts, and skip unreadable files or folders without abandoning all readable fonts. #9
• Word zoom slider: the track no longer overlaps the plus button. #2
• Printing: wait for the prepared PDF to load before opening the system print dialog, avoiding the observed blank-page and viewer-controls output. The PDF print path preserves text and vector shapes; platform limitations are listed below.
• Saving from File > Close correctly completes Save As for an untitled document and waits for saving to finish before closing. Cancelling or failing to save keeps the document open.
• Open page: clicking anywhere in the Browse area, or pressing Enter or Space while it has focus, opens the file chooser. File dropping continues to work.
• Keyboard focus: Options returns typing to the document; picture Layout Options can be reached and used from the keyboard; functions without arguments, such as NOW, start with OK focused in the formula wizard.
• Clearer dialogs: feature tips wait while dialogs and AI panels are open. Empty tip titles no longer display “New undefined”. Existing password-dialog Keep, Change and Remove labels and protection warnings are translated into the editor language, with English fallback.
• Screen-reader labels: name editor dialogs and desktop Options and Recovery, and improve labels for key fields in the formula wizard, picture settings and sheet renaming.
• Desktop menus and notices: hide the duplicate native menu bar on Windows and Linux while keeping Help, About, Quit and file actions reachable. Informational notices fade after eight seconds and pause while hovered or focused; errors and warnings remain visible.

Security

• Converter hardening for imported documents. Documents are now checked more strictly before they are opened:
  • Archive-based files (Office, EPUB) are limited in entry count, size, total size and compression ratio, and every archive member is checked for corruption.
  • A path inside an archive can no longer write outside its extraction folder.
  • XML parsing no longer loads external entities, external DTDs or network resources.
  • SVG images inside documents only show embedded PNG/JPEG images and references inside the same document; external, file and network images are ignored.
  • EPUB books with an invalid reading order are rejected, and a damaged embedded archive (for example a picture or SmartArt package inside a presentation) now fails the conversion instead of producing a partial result.
• Known limit: a DOCX archive that contains a path-escaping member is cleaned (that member is ignored and never written) rather than rejected. Strict rejection is planned for 0.2.3.

Known limitations

• One document window at a time remains the desktop behavior; opening another document uses the existing window. Multiple document windows are not added in this version. #7
• Printing still needs platform checks: Linux Print to File output and cancellation have been checked. The owner confirmed native printing on Windows and macOS using build 7 from the same source. Physical-printer output and compatibility with the older Linux systems that reported printing crashes remain unverified. A small “Waiting for your choice” status panel stays visible while the system print dialog is open; improving this is planned for 0.2.3.
• Windows save and font fixes still need confirmation on real Windows installations. Automated checks do not establish compatibility with every antivirus, synchronized folder, network share or font installation.
• Local PDF limits remain: editing existing page text, OCR, redaction and digital signing are unavailable. Some protected or unsupported PDFs cannot be saved in place; Save a copy can lose document properties or other unsupported information. PDF AutoRecover remains unavailable.
• PDF page reordering and some right-to-left table import/export improvements are not yet available with the current local converter. Rotating PDF pages remains available.
• Some language and font limits remain: the Arabic Word Insert > Pictures menu can have no usable commands, and some picture controls remain untranslated. Arabic, Urdu and Sinhala text extracted from PDFs can have incorrect spacing or ordering. Native checks of the new font and template combinations are incomplete.
• ODS files with embedded objects can lose those objects or their PDF preview. The existing warning and separate-copy choice remain in place.
• Installers: the Windows installer is unsigned. The macOS package is Apple Silicon (arm64) only, ad-hoc signed and not notarized.

Verification

Final build 8 from product b6693281d494 and DocumentServer 04839f098fdc, using the same source and runtime pins as build 7. Linux and Windows packaging, resource and identity checks are recorded in BUILD-INFO.json. The owner confirmed native Windows and macOS printing on build 7 from the same source. The final Apple Silicon macOS DMG passed static source, identity, resource and signature audits; its printing result is carried from the owner’s build 7 test. Broader native checks were not repeated on the final package. Physical-printer output and real Windows save/font checks remain unverified. The browser PDF reorder gate was not rerun on this runtime pair.

ElixirOffice 0.2.1 (desktop)

ElixirOffice 0.2.1 is a bug-fix and polish update of the free and open source (AGPLv3) office suite for people used to Microsoft Office. It works entirely on your computer: Word, Excel, PowerPoint and OpenDocument files, and PDF.

Download

System	File
Windows (x64)	ElixirOffice-0.2.1-win-x64.exe
macOS (Apple Silicon)	ElixirOffice-0.2.1-mac-arm64.dmg
Linux (AppImage)	ElixirOffice-0.2.1-x86_64.AppImage
Debian / Ubuntu	ElixirOffice-0.2.1-linux-amd64.deb

The installers are not signed yet. Windows: More info > Run anyway. macOS: if it is blocked, System Settings > Privacy & Security > Open Anyway.

Fixed

• Opening files no longer fails with a misleading "the file is open elsewhere" message after a network-share, OneDrive or settings error (#4).
• On Windows, using the computer's fonts no longer fails when some font files cannot be read (#4).
• Office-identical file shortcuts in open documents: Ctrl+N, Ctrl+O, Ctrl+S, Ctrl+P; Save As is F12 on Windows and Linux, Cmd+Shift+S on macOS. Word's own Ctrl+Shift+S, Ctrl+Shift+E and Ctrl+Q keep working (#6).
• No more browser-only "keys blocked" notice in the desktop app (#3).
• A "Cancelled" message no longer stays at the bottom of the window (#2).

New

• Saving and exporting show progress, can be cancelled, and end with a "file ready" message with Open and Show in folder.
• A new Save As dialog lists every format with a short description, then lets you choose the folder and name.
• Closing a modified document asks, like Word, whether to save the changes to that document: Save, Don't Save or Cancel.
• PDF pages can be rotated; Arabic templates no longer show missing characters.
• Help > About shows the version, build number and source revision.
• Security fixes for links in documents (and for the server version), with credits to the ONLYOFFICE fixes we ported; details in RELEASE-NOTES.md.

Known limitations

• On some older Linux systems (seen on elementary OS 6.1, based on Ubuntu 20.04, with Intel UHD 620 graphics), Ctrl+P can close the application: save before printing. Current Ubuntu, Windows and macOS are not affected; a fix is in progress.
• Tagged PDFs can only be saved as a copy. Opening several documents at once (one window per document) is planned (#7).

Full notes, checksums and the corresponding source code are attached. Please report problems at https://github.com/leag1234/elixiroffice/issues

ElixirOffice 0.2.0 (desktop)

ElixirOffice is a free and open source office suite (AGPLv3) for people used to Microsoft Office: documents, spreadsheets and presentations with the Office ribbon, menus, dialogs and keyboard shortcuts. It is derived from Euro-Office and ONLYOFFICE Docs. This is the desktop app: it works entirely on your computer, with no server and no account. AI is off by default.

This is a beta: keep backups of important files and check saved documents and PDF output before sharing them. The self-hosted server is a separate release (see the release history).

What's new since beta 2

• PDF files, locally: open, scroll (mouse wheel, trackpad, pinch zoom), search, select and copy text, add comments and annotations, fill in forms, print, and export an edited copy. "Save" writes your changes after the original content (the original stays intact inside the file); PDFs that cannot be saved safely (signed, encrypted, XFA, scripted, and for now those created by browsers or Word, which are "tagged") open read-only for original-file saving: use "Save a copy".
• Password-protected files: open, edit and save password-protected Word, Excel, PowerPoint and OpenDocument files; keep, change or remove the password. No automatic recovery copies are made for protected documents.
• Rename a document and choose the folder when saving a copy.
• Computer fonts: Options now shows whether your computer's fonts are enabled, with an on/off switch.
• Closing the app with unsaved changes is more robust (fixes a case where the app could not be closed).
• Home templates (letter, resume, fractions worksheet, assessment grid) in 39 languages.
• AppImage: new file name, plus update information: you can check for updates with the external AppImageUpdate tool. ElixirOffice itself never checks for updates.

Downloads and install

Platform	File	Install
Windows x64	ElixirOffice-0.2.0-win-x64.exe	Run the installer. It is not signed: SmartScreen may warn; if you trust the download choose "More info", then "Run anyway".
macOS (Apple Silicon)	ElixirOffice-0.2.0-mac-arm64.dmg	Open the image and drag ElixirOffice to Applications. It is not notarized: if macOS blocks it, use "Open Anyway" in System Settings > Privacy & Security.
Linux (any distribution)	ElixirOffice-0.2.0-x86_64.AppImage	chmod +x the file and run it. The .zsync file is for AppImageUpdate.
Debian / Ubuntu	ElixirOffice-0.2.0-linux-amd64.deb	sudo apt install ./ElixirOffice-0.2.0-linux-amd64.deb

Check your download against SHA256SUMS (Linux: sha256sum -c; macOS: shasum -a 256; Windows PowerShell: Get-FileHash). Checksums detect corruption; they do not identify the publisher.

Known limitations

• Home templates are offered in 39 languages; Japanese, Chinese, Korean, Sinhala and Urdu use the English templates (the bundled fonts lack these scripts). A few italic notes in the Arabic templates show missing characters (fix planned). In right-to-left documents, tables are not mirrored.
• Without enabling Use computer fonts in Options, text in scripts that the bundled fonts do not cover (Chinese, Japanese, Korean, Sinhala, parts of Urdu) shows missing-character squares.
• PDF documents: no automatic recovery (the original file is untouched until you save), no editing of the original text yet, and a copy saved with "Save a copy" loses some of the original's structure (the app tells you).
• Not available offline: mail merge, document compare, version history, editing the original text of a PDF, OCR and PDF-to-Word conversion, plugins and macros, digital signatures, external workbook links, real-time co-editing. AI is available only in the Word editor of the desktop app.
• Windows and Linux were checked by automated tests but not yet on the final packages on real hardware. On macOS, the final package passed its static and unit checks; interactive tests (windows, wheel and pinch on this exact build, completing the Save panel for a PDF copy), physical printing, Gatekeeper and file associations were not run on it.
• The AppImage runs without the Chromium sandbox, with a warning, when the system does not allow user namespaces; the .deb does not.
• Complex formatting, fonts and embedded objects can still show conversion differences: check round trips and PDF output with your own documents.

Details, source code and licence

RELEASE-NOTES.md (attached) has the full notes, BUILD-INFO.json the exact source revisions and verification details. The corresponding source code is in elixiroffice-desktop-source.tar.gz and at github.com/leag1234/elixiroffice. Released under the GNU Affero General Public License v3.0; third-party licences and attributions are included. ElixirOffice is not affiliated with or endorsed by Microsoft, Ascensio System SIA or the Euro-Office project; Microsoft, Word, Excel and PowerPoint are trademarks of Microsoft Corporation.

Reporting bugs

Open an issue with the release name, your system, what you did, what you expected and what happened; a screenshot helps. Attach a document only if it contains nothing private, and never attach keys or passwords. Reports about behaviour that differs from Word, Excel or PowerPoint are welcome too.

ElixirOffice server 0.1.1 (beta 1.1)

ElixirOffice server 0.1.1 (beta 1.1) is the self-hosted version of the free and open source (AGPLv3) office suite for people used to Microsoft Office, in your browser. This update fixes renaming and "Save a copy" reported by beta 1 users, and localizes the start-page templates. The desktop apps are a separate release.

Install

It is a Docker image with a deployment bundle. Installation is the same as in the beta 1 release; see docs/install-server.md in the bundle for installation, backup, upgrade and rollback. Linux x86_64 image (use the digest in production):

ghcr.io/leag1234/elixiroffice-server:beta1.1
ghcr.io/leag1234/elixiroffice-server@sha256:bb2dfabd7bdd5174eab4385070cc52ee6f2cfa17aef0572d8c837a3bb2e794e3

Verify SHA256SUMS for the source and deployment files, and do a save/reopen check after upgrading. AI stays off until you configure it.

What changed

• Rename: File > Rename renames the stored document in "This server" storage and in the start-page Nextcloud/Murena connector, with collision and permission checks. Later saves follow the renamed file.
• Save a copy: opens a destination-folder picker for the current storage and saves your current edits into an independent copy. Read-only files can be copied into writable destinations when their policy permits.
• File names: new names reject Windows reserved devices (also with extensions), bidi control characters and names over 255 UTF-8 bytes. Names are normalized to NFC; existing device-named files on Linux stay readable.
• Templates: the four start-page templates are localized in 39 languages, with matching previews. Japanese, Simplified Chinese, Traditional Chinese, Korean, Sinhala and Urdu use the English version because the bundled fonts do not cover those scripts.
• Language: the start page and New document select templates by UI language and keep it when opening the editor. Folder-picker, error and save messages use the existing translations with English fallback.

Before upgrading

Save and close open documents, keep your configuration and secrets, and back up your data volumes. Document keys in "This server" storage change once on upgrade: reopen your documents after deploying. Sessions left open across the upgrade lose co-editing continuity. Nextcloud document keys do not change.

Known limitations

• PDF editor: mouse-wheel scrolling may not work in Chromium-based browsers (use the scrollbar or keyboard). Fix planned for 0.1.2.
• Templates: Arabic italic notes may show missing characters (fix planned for 0.1.2). Right-to-left tables are not mirrored.
• Not verified: certificate issuance from a public authority, real external Murena/Nextcloud accounts, ARM servers and fresh native DEB/RPM installation need checks by the operator. Desktop installation, Windows hardware, physical printing and production deployment are outside this server release.
• Security: the optional start page is for a trusted network or behind your own access layer; local profiles are not authentication or a multi-tenant boundary.
• Shortcuts and context menus: some known issues remain; actual results and the comparison with beta 1 are in checks.json.

Files

release.json identifies the tested image and the matched runtime pair (528e920e4f34-bd14d110aa08-st / 528e920e4f34-98ab90f5d735-st). Localized template content was checked by source bytes and literal text, not by new visual fidelity tests for every script. The corresponding source keeps build prerequisites and licences, with internal plans omitted and private host/path identifiers neutralised; SOURCE-OMISSIONS.json records these transformations.

ElixirOffice 0.1.0 beta 2 (desktop)

ElixirOffice is a free and open source office suite (AGPLv3) for documents, spreadsheets and presentations, with the Office ribbon, menus, dialogs and keyboard shortcuts. It is derived from Euro-Office and ONLYOFFICE Docs.

Beta 2 introduces the desktop app for Linux, Windows and macOS. It opens, edits and converts documents locally with a bundled WebAssembly engine; it does not require a document server. The self-hosted server version is unchanged since beta 1; it remains available in the beta 1 server release. AI is off by default.

Desktop release tag: v0.1.0-beta.2.

This is a beta: keep backups of important files and check saved documents and PDF output before sharing them.

Downloads

Platform	File	Installation
Linux x86_64	ElixirOffice-0.1.0-linux-x86_64.AppImage	Make executable and run.
Debian/Ubuntu x86_64	ElixirOffice-0.1.0-linux-amd64.deb	Install with your package manager.
Windows x64	ElixirOffice-0.1.0-win-x64.exe	Run the installer and choose an installation directory.
macOS Apple Silicon arm64	ElixirOffice-0.1.0-mac-arm64.dmg	Open the image and drag ElixirOffice to Applications.

The release also includes SHA256SUMS, BUILD-INFO.json (exact source revisions) and the corresponding source archive. Check the downloaded files against the supplied checksums.

SHA-256

File	SHA-256
ElixirOffice-0.1.0-linux-x86_64.AppImage	7c438ca71a7db5776fcd942324e38ee4daf7a246e9125e3b1c92fa0bb2317f4d
ElixirOffice-0.1.0-linux-amd64.deb	ddb426f1bf4c00684de9304f482e586610d66a273e6651ed47b6dfbb022e2df8
ElixirOffice-0.1.0-win-x64.exe	c081792ed6b26b81551ac403cbabff7fd82e65548cad1793b458fcca2e3b4a71
ElixirOffice-0.1.0-mac-arm64.dmg	6de86494ac084dba9785124276483db9efb57ec85faa5a33444358b33af78c63

Install

Linux

For the AppImage:

chmod +x ElixirOffice-0.1.0-linux-x86_64.AppImage
./ElixirOffice-0.1.0-linux-x86_64.AppImage

If FUSE is unavailable, use:

./ElixirOffice-0.1.0-linux-x86_64.AppImage --appimage-extract-and-run

For Debian/Ubuntu:

sudo apt install ./ElixirOffice-0.1.0-linux-amd64.deb

Windows

Run the x64 installer. It has no publisher certificate, so Windows may show an unknown-publisher or SmartScreen warning. If you trust the download, “More info” and “Run anyway” may be available. Smart App Control or an administrator policy may block installation; do not disable system protections.

macOS

Open the arm64 DMG and drag ElixirOffice to Applications. This build supports Apple Silicon only. It is ad-hoc signed, without a Developer ID certificate, and is not notarized. The ad-hoc signature seals the bundle but does not identify a trusted publisher.

Gatekeeper may block opening the app. If you trust the download, use the per-app “Open Anyway” option in System Settings > Privacy & Security where available. See Apple's instructions.

Check the download

On Linux, run sha256sum <downloaded-file> and compare the result with the matching entry in SHA256SUMS. On macOS, run shasum -a 256 <downloaded-file> and compare the result with the matching entry. On Windows, use PowerShell Get-FileHash <downloaded-file> -Algorithm SHA256.

Checksums detect corruption; they do not authenticate the publisher.

Highlights

• Local editing and same-file saving for DOCX, XLSX, PPTX, ODT, ODS and ODP, with local PDF export. Additional supported input formats open as converted copies; Save As offers the formats available for each editor.
• Offline comments in documents, spreadsheets and presentations, and single-user Track Changes in Word.
• Picture insertion from files, clipboard and drag and drop, including PNG, JPEG, GIF, BMP, SVG and WebP. Unavailable remote picture URLs produce an error.
• Bundled spelling dictionaries, thesauri and hyphenation, offline Help, free fonts and ElixirOffice sample documents.
• Separate periodic recovery copies and a next-start restore prompt. Explicit Save writes the document to its chosen destination.
• Desktop author-name preferences, validated external hyperlinks and embedded slide media.
• Optional AI in the desktop Word editor, using an endpoint and key you configure. AI entries stay hidden until configured; network access requires consent.

Word saves distinguish repeated layout notifications from actual edits. Changes made while a save is running remain unsaved until the next save, including typing, paste and undo/redo. The ODS embedded-object fix preserves the charts affected by the earlier conversion regression.

Known limitations

The following features are not available offline:

• Mail merge.
• Document compare/combine.
• Version history.
• Opening password-protected files.
• Opening or editing PDF files.
• Plugins and macros.
• Digital signatures.
• External workbook links and their refresh.
• Real-time co-editing.

AI is available only in the desktop Word editor. A configured remote AI service requires a network connection; local document editing and conversion do not.

The Windows installer was verified on real hardware on earlier builds only. That does not establish native Windows acceptance for these final beta 2 packages.

macOS supports arm64 Apple Silicon only. The app is ad-hoc signed and not notarized. The final macOS package passed the six-format open/edit/save/reopen/PDF checks, offline Help and recovery checks. Downloaded-app Gatekeeper behavior remains to be verified.

Physical printing has not been tested. Successful PDF export does not establish printer or native print-dialog acceptance.

Complex formatting, fonts and embedded objects can still show conversion differences. Check round trips and PDF output with your own documents.

Source code and licence

ElixirOffice is released under the GNU Affero General Public License v3.0. Product source is at github.com/leag1234/elixiroffice; the modified components are listed in its README. The release's build information identifies the exact source revisions. Third-party licences and attributions are included in the application and source notices.

ElixirOffice is not affiliated with or endorsed by Microsoft, Ascensio System SIA or the Euro-Office project. Microsoft, Word, Excel and PowerPoint are trademarks of Microsoft Corporation.

Reporting bugs

Open an issue at ElixirOffice GitHub Issues with the release name, operating system and architecture, what you did, what you expected and what happened. Include relevant error messages; a screenshot helps.

Attach a small synthetic or anonymized example only if it contains nothing private. Never attach API keys, passwords or configuration containing secrets. For conversion problems, include the input and output formats and explain which content changed. Reports about behavior that differs from Word, Excel or PowerPoint are welcome too.