Product UpdateNovember 6, 20266 min read

Six months in one page: faster, safer, runs anywhere.

Stop means stop. Voice works on iPhone. Your AI follows you across machines. Self-hosting needs no Docker. And a test robot closed eight security holes.

Our last update was in May. Since then we tore the codebase down to the studs, rebuilt it flatter, and spent months fixing what real people hit in production.

No fluff list of 200 bullet points. Here is what you will actually feel - grouped by where you feel it.

Chat that obeys

The small things that made chatting feel slow or stubborn.

Stop means stop

Hit stop and tokens stop appearing that instant - no waiting for the server to tear down. Stop now also reaches incognito and logged-out chats, where it used to do nothing.

Input sized to your model

The message box knows how much room the selected model has left in this thread, instead of one flat limit for every model.

Models keep their train of thought

Reasoning blocks are sent back to the model on the next turn instead of being stripped - so thinking models build on what they already worked out.

Type while it works

Send messages while the AI is mid-answer - they queue up in order. Long tool runs compact their context mid-stream instead of hitting the wall.

Voice that works everywhere

Speech-to-text got the attention it needed.

iPhone and iPad fixed

Safari on iOS suspended the audio engine, so dictation silently died. It now resumes properly.

Record as long as you like

Recordings are split into chunks, so dictation is no longer capped by one upload.

Windows fixed

A run of fixes made speech-to-text work on Windows desktops.

Your AI, across your machines

Thea runs in the cloud. Hermes runs on your computer. Now they truly work together.

Two-way remote threads

Hand a thread from the cloud to your machine or back, in both directions. If the other side has no API key, your side falls back and runs it locally.

How Hermes and Thea talk

A coding agent you can watch

Thea can start an interactive coding agent on your machine - a real console window you can see - tracked as a task, with the result reported back.

Meet the coding agent

Sharper tools

Better browser automation with device emulation, desktop tools on Windows, and SSH tools for every customer - not just admins.

Self-hosting got easy

Running your own instance used to mean Docker and a C++ toolchain. Not anymore.

No Docker needed

Point DATABASE_URL at a file and the server runs on an embedded Postgres (PGlite). Migrations and seeds just work.

Windows is first-class

Months of Windows fixes: paths, file locks, user seeding, database functions. Clone, install, run.

No compiler required

Password hashing moved to prebuilt binaries - no node-gyp, no build tools. Same algorithm, existing hashes still valid.

Comes back on its own

The production server restarts after a crash, and a database restart can no longer take the app down with it.

Safer by default

Security work you will never see - which is the point.

A robot tests every page

60 end-to-end suites now drive the real pages in a real browser. They found and we closed eight security holes, from an open redirect to private files cached publicly.

Read what it found

Patched base image

Our container pulls the latest Alpine security patches, including the fix for CVE-2026-111497.

Fewer broken tool calls

When a model sends malformed tool-call JSON, it gets repaired instead of failing the whole turn.

See it for yourself.

Every change above is live on unbottled.ai today - and in the open-source code if you run your own.

Start chatting Self-host it

Back to Blog