I shipped ragleap-core v0.10.0 with login throttling, Setup tab, and a read-only skill for coding agents. 44 minutes later I shipped v0.10.1.
Why? First real Windows test with Docker Desktop.
A local PostgreSQL was already on port 5433. Installer stopped. That's it.
That's the most honest bug report you'll get in AI.
What shipped in v0.10.0 (hardening):
- Login throttling: 10 bad API keys in 5 mins → 15 min 429 lock with Retry-After. Proxy-aware via TRUSTED_PROXIES, off with AUTH_THROTTLE=off
- Setup tab + GET /setup/status: Shows what's configured/missing, never shows secrets, zero AI calls
- Read-only skill for coding agents: manifest + small client (health, employees, ask). Can't change anything by design
- Ollama context 8192 default: Long docs no longer silently cut
- Installer checks: Free disk check (4GB / 14GB for local AI), refuses if Compose project name already used, can use Ollama app already running on Win/Mac. Added install.ps1 PowerShell installer
- Security: Every third-party GitHub Action pinned to exact commit
**
What shipped in v0.10.1 (Windows reality):
**
This is where it gets real.
- Free host ports: All ports are now settings — APP_PORT 8000, DB_PORT 5433, VOICE_PORT 8766, NEO4J 7475/7688, REDIS 6380. On fresh install, installer picks next free port if busy, writes to .env, uses it for dashboard link. Existing .env never changed.
- ragleap key --rotate: Writes new random API key to .env, restarts only app, checks old key is refused + new accepted, prints new link. DB untouched.
- Browser instead of printed key: On desktop (Win/Mac/Linux with display, no SSH), opens dashboard in browser, no key in terminal. Servers/SSH/CI still print link. RAGLEAP_NO_BROWSER=1 to always print.
- Fixed: DB exists check matched ANY Docker volume with same name, even unrelated installs → now matches only this setup's volume. API docs now says needs x-api-key header (401 by design).
Honest limits (we list these in release notes):
- Tested on one Windows machine with Docker Desktop, Gemini/Ollama/skip menu set to skip. Ollama on Windows not tested yet
- One-liner irm ... | iex fails on that machine, cause unknown. Use two-step: $s = irm ; iex $s
- PATH hint writes for bash, not PowerShell
- Windows reserved excluded ranges not detected by busy-port check
- While browser launches, key briefly visible in process list
**
What is RagLeap Core?
**
Self-hosted AI Business OS — 46 autonomous AI Employees (9 core + 37 vertical like Recruiter, Real Estate Agent, Legal Intake), Graph RAG (Neo4j), multi-channel (WhatsApp/Telegram/Discord/Voice), BYOK 19 providers + Ollama local, MIT licensed.
curl -fsSL https://ragleap.com/install.sh | bash
or Windows
$s = irm https://ragleap.com/install.ps1; iex $s
18 stars → aiming 20⭐️
GitHub: github.com/antonyrag/ragleap-core
Website: ragleap.com
Building in public
Top comments (0)