Skip to content

v0.10.0 — client apps + Lite self-host

Latest
Latest

Choose a tag to compare

View all tags
@therudywolf therudywolf released this 03 Jul 11:57
· 154 commits to main since this release
v0.10.0
f7e09eb

OneToThree is a self-hosted, end-to-end-encrypted messenger. There are two
distinct things in this release — pick what you need:

⬇️ 1. Get a client app (to use the hosted service — onetothree.ru)

These are client applications. They connect to the public onetothree.ru
server — they are not the server itself. (Or just open the web app / install the PWA.)

Platform Download How
Android OneToThree-0.10.0-android.apk install the APK (signed; updates 0.9.x in place)
Windows OneToThree_0.10.0_x64-setup.exe run the NSIS installer (x64)
Linux — Debian/Ubuntu OneToThree_0.10.0_amd64.deb sudo dpkg -i … (needs libwebkit2gtk-4.1 + libgtk-3)
Linux — portable OneToThree_0.10.0_amd64.AppImage chmod +x … and run, any distro

Each has a matching .sha256. These clients target onetothree.ru; building a
client that points at your own server (build:selfhost) is on the roadmap.

🪶 2. Run your OWN server (self-host — the "Lite" edition)

This is not a download here — you self-host from the repo with one command.
No file below is a "server build"; the server is the repo + the guided installer:

git clone https://github.com/therudywolf/OneToThree.git
cd OneToThree
npm run lite     # guided installer: no-domain (localhost) OR with a domain, tick features, go

The installer stands up your own instance — without a domain (on your machine)
or with a domain (automatic HTTPS) — serving web + API + realtime from a single
origin behind Caddy. Full guide (EN + RU):
docs/guides/LITE.md.

What's new in 0.10.0

The headline of this release is the Lite self-host edition above. Under the hood:

  • Feature flags FEATURE_MEDIA/CALLS/STICKERS/GIF/PUSH/2FA/ADMIN/GROUPS (all
    default ON, so the full/hosted edition is unchanged), surfaced at GET /capabilities.
  • End-to-end capability gating — a disabled feature is removed from the UI
    (no dead buttons) and the API (route groups 404, chat-media 403s while
    avatars stay open, WS rejects call signaling).
  • Single-origin compose stack; calls use an external LiveKit you provide
    (OT_LIVEKIT_*) — a bundled LiveKit is on the roadmap.

Verified: client 296 + server 183 tests green (incl. new capability/route-gating
suites), typechecks, ESLint, production build; a 5-agent adversarial audit found and
fixed 7 gating gaps before release.

Full changelog: CHANGELOG.md ·
Roadmap: ROADMAP_SELFHOST_LITE.md

Assets 10
Loading