Complete list of features, improvements and corrections in FrameworX 10.1 Update 6 (version 10.1.6), by product area.

Home → Support Resources → Release Notes → Update 6 → Update 6 - Detailed Release Notes


FrameworX 10.1 Update 6, October 15, 2026

Version: 10.1.6. Summary: Update 6.

AI, MCP and automation

Displays and Symbols

HTML5 and web client

Mobile client

Unified Namespace, ontology and knowledge graph

Devices and protocols

Alarms, Historian and redundancy

Designer and data

Scripts

Security and access

Runtime and platform


Changes to Review Before Upgrading

These changes affect how an existing solution, script or integration behaves on 10.1.6.

Change

Action

The MCP-over-HTTP servers of AI Designer, AI Console and AI Runtime accept connections only from the same computer until an API key is configured.

To connect from another computer, set an API key in the server settings and enter the same key in the client. See MCP and Claude Setup.

The AI Runtime connector no longer attaches to the first running runtime it finds.

Point the connector at a runtime at launch, or name the solution and profile when connecting.

AI guidance files placed in the shared machine-wide AI folder are ignored.

Move the file to the product installation folder.

The FrameworX File Access extension starts a fixed, tested version of its file server.

Remove the installed extension from the AI client, install it again from this version, and restart the client. See MCP and Claude Setup.

Chat actions on displays now write to the Return Value tag, run their Expressions rows and act on the chat control of their own display.

Review chat actions that have a Return Value tag, Expressions rows or a value in the Object field.

The AI Runtime alarm-history tool takes a time range and filters and no longer accepts SQL text.

Change AI prompts or automation that passed SQL text to use the time range and filter parameters.

AI Designer rejects legacy display write shapes that it used to accept while discarding data.

Update automation that writes displays through the AI tools to the documented shapes.

The AI tools refuse a device point address written as separate fields and an expression time they cannot read.

Write device point addresses in the compact form of the protocol and expression times in an accepted time form.

New solutions created by the AI tools no longer arrive with an AI model endpoint filled in.

Set the AI model endpoint in the Local AI configuration of the new solution.

Tags created through the AI tools without a Visibility value are created as Protected and become readable over OPC UA and other protocols.

Set Visibility to Private in the write where a tag must stay unpublished.

AI delete and rename require the MCP flag on the Category of the object, and a category name that contains MCP no longer qualifies.

Enable the MCP flag on the category in Solution Categories for objects an AI session manages.

When a root asset folder and a root tag share a name, the OPC UA Server publishes the folder under a node identifier with the suffix #Folder.

Update OPC UA clients that address such a folder by node identifier.

Solution imports and AI writes now apply values to the built-in alarm groups and device access types, which they skipped before.

Review the values of built-in rows in files you import.

Building or verifying a solution from an AI Console workspace returns a failure when rows are missing, and an unknown template path is refused.

Have automation handle the failure result and name an existing template.

The AI Console verification tools name a nested asset folder by its name followed by its full path, and a workspace that defines one object in several files applies the files in a fixed order.

Update expected folder names in test scripts and check workspaces that repeat an object across files.

Exports of displays with a Trend Chart carry the Y scale mode on every chart and the Auto setting on every pen.

Expect a one-time difference in exported workspace files and Git exports.

Reading configuration through the AI tools no longer changes the page the Designer shows.

Use the navigate action in AI workflows that relied on a read to bring a page into view.

The AI tools use the documentation content installed with the product and make no online update check at startup.

None.

A Merge plugin import replaces a local image that has the same name and a different picture, where earlier versions kept the local image.

Uncheck the image in the import list to keep the local image.

Solution Center and the Designer start in the Windows display language when a matching translation exists.

To keep an English interface on a non-English Windows, select English once in Solution Center or the Designer.

A multi-file import asks whether to skip or replace items that already exist, where before it skipped them without asking.

Choose Skip to keep the earlier result.

The Built-in MQTT Broker settings dialog saves the SSL protocol option with a valid value, and installing the update does not repair a settings file saved earlier.

If the built-in MQTT broker does not listen after the upgrade, open the Built-in MQTT Broker settings dialog and click OK.

In the C# and VB.NET script editors, a tag found by name in autocomplete is inserted with Tab or Enter, and typing a period or a space does not insert it.

None.

Designer and Solution Center popups do not stay above other applications, and they move, minimize, and restore with their main window.

None.

Four connectors appear under new names: MES CoreM Connector (was LineMonitor Connector), Mitsubishi MELSEC FX Ethernet Connector, NI Labview Data Sockets Read-Only Connector, and SCPI Protocol Connector.

None. Existing channels and tag providers keep working without changes.

Two MachineHMI servers configured for redundancy run as an active and standby pair instead of both fully active.

None. The standby server pauses alarm, historian and device processing and refuses client connections until it takes over.

In the Designer, the secondary server port of a redundant pair is read-only and equals the primary server port.

Set both servers to the same port if the Designer reports different ports, and use fixed ports with redundancy on the Production and Validation profiles.

The standby server of a redundant pair sends unreplicated Alarm and Tag Historian records back to the active server.

None. A history table whose ID column is not auto-increment cannot take recovered records, and the active server logs a warning that names it.

A stalled OPC UA subscription sets the affected tags to Uncertain quality instead of Good.

Review scripts, alarms and displays that react to tag quality on OPC UA Client nodes.

Report Out Of Range By Exception on MQTT Sparkplug B publisher connections compares values against the tag ScaleMin and ScaleMax instead of Min and Max.

Enable the option only on tags whose scale range is narrower than the values to report.

The Built-in MQTT Broker sends Sparkplug B updates of folder tags on the Asset device instead of the Tag device.

Update Sparkplug B consumers that read folder tag updates from the Tag device.

The Modbus master connector refuses Points whose Bit modifier does not fit the data type or whose address is out of range.

Use DataType Word with the Bit modifier for bit access to a holding register, and correct the Points the connector reports.

A Device channel with more than 100,000 pending writes delivers only the latest value of each point.

None. The limit can be changed in the machine settings, as described in Devices Channels Reference.

The legacy Siemens S7 connector and the SorbaAI device connector are no longer offered for new Device channels.

Use Siemens S7 Plus for new Siemens channels, and replace a SorbaAI device channel with a SorbaAI Tag Provider.

A device node with no backup partner reports redundancy as disabled, and the node failover status no longer returns the backup status.

Review scripts, display bindings and reports that read the redundancy, failover or backup status of a device node.

OPC UA Client read polling and NI LabVIEW Data Sockets apply tag scaling once instead of twice.

Review scaled tags on these connectors if the solution compensated for the double scaling.

The Value Simulator flags a point address with a decimal Min, Max or Step as invalid, and the RAMP sequence changes when the step does not divide the range evenly.

Change Value Simulator addresses to whole numbers, and check tests that depend on the exact RAMP sequence.

The Mitsubishi MELSEC FX Ethernet Connector reads X and Y addresses as octal, supports a fixed list of devices and refuses partial-register writes.

Review existing points on this connector.

Siemens S7 Plus tag import sets the full STRING length, including the two header bytes.

Re-import or correct STRING tags that an earlier version imported with the Siemens S7 Plus importer.

CSV exports of Normalized Historian tables no longer carry an extra number ahead of the tag values in each row.

Update scripts or external tools that parse these exports and compensated for the extra number.

An alarm Initial Disable Time of 1 to 9 milliseconds means no disable time, and the AI tools table schema states the Alarms time settings in milliseconds.

Check alarm time values that an AI tool wrote as seconds, because they are applied as milliseconds.

A display parameter combined with a numeric tag value inside OR, AND or XOR now evaluates, where before the expression had no value.

Review visibility, color and security-disable conditions that combine a display parameter with a numeric tag value inside OR, AND or XOR.

Code on the startup display opening event and expressions on a Display Action inside a Symbol now run, where before they were ignored.

Review that code and those expressions before upgrading.

A tag bound to Selected Index on a TabControl or Carousel is now written when the tab changes, and at display open the control goes to the tab the tag indicates.

Check solutions that bind a tag to Selected Index.

On a Tab Control driven by a text tag, an empty or unreadable tag value now empties the tab strip, and design-time tabs are not shown.

Check Tab Controls that combine design-time tabs with a tag-driven tab list.

Calendar and time-list picks in the date and time pickers now follow write permission, the Min/Max range and electronic signature, as typed values do.

Check pickers that relied on picks bypassing those rules.

When a display script adds pens to a TrendChart and calls Refresh, the chart resolves them and its time window returns to live.

None.

In the web client, the pen settings and pen color cells of a Trend Chart pen grid are no longer edited as raw text.

Use the pen settings editor and the color picker, as in the Rich Client.

The web client ignores the startupobjectlist URL argument, and the desktop and embedded clients still accept it.

Replace web client links that use that argument with display links that carry parameter values.

In the web client, a Linear Gauge with its scale on the left or on top is laid out as the mirror of a scale on the right or below, so the bar and numbers can shift.

Review web client displays that use those gauge layouts, especially with a large Label Size.

In the web client, a PushButton linked to a writable tag with no action now holds the tag at 1 while pressed and returns it to 0 on release, as in the Rich Client.

Review web client displays that contain such buttons.

With alarm notifications enabled in the iPhone and iPad app, the runtime sends each new top alarm message to the device through the Tatsoft notification service and Apple.

To keep alarm text inside the network, turn off the push relay in the runtime machine settings and restart the runtime. See Mobile App.

At runtime a Reference member of a UserType instance follows the target set for that instance instead of the UserType default, and a target that no longer resolves leaves the reference empty.

Review UserType instances that have per-instance Reference targets.

The engineering API (EngWrapper) no longer sets a UserType member Description per instance.

Update code that set a per-instance member Description, and set the Description on the instance tag to annotate one instance.

When an imported asset folder names its parent by folder name and several folders share that name, the import reports the row and skips it.

Use the full parent path for that row and import again, and delete duplicate folders left by earlier versions in the Asset Tree.

Asset tree import rejects a folder name that contains a dot or a slash, where before it split the name into extra folders.

Rename those asset folders before importing.

New top-level asset folders with a duplicate name are refused, and for an existing pair a full path uses the folder created in the Designer.

Rename one folder of any existing pair of top-level asset folders that share a name.

Exported RDF files differ from earlier versions: values use the ontology property names, dates are typed, standard vocabulary terms are not declared as solution properties, and built-in tags are left out.

Review downstream tooling that consumes the export.

The Runtime API accepts a session token only from a Runtime API sign-in or a bearer token linked to a user, and enforces each tag's Read Security and Write Security.

Update custom Runtime API callers to sign in through the Runtime API or use a bearer token linked to a user, and review the security of the tags they read and write.

An AutoStartClient from an earlier release cannot check which redundant server is active on a server of this release.

Install the AutoStartClient from this release on every station that connects to a 10.1.6 server.

Blocking or deleting a user does not revoke that user's Runtime API bearer tokens.

Disable or delete the user's token rows to remove the user's API access.

Clients on other computers receive blank values for stored passwords and secrets in the configuration tables.

Update any client-side script that read stored passwords or secrets from the configuration tables.

The Designer grids no longer show stored secret values, and copy and paste does not carry passwords or secrets between rows or solutions.

Read a stored secret with the administrator reveal action, and set passwords and secrets in their own editors.

A user who signs in through an external identity provider and matches a user in the solution receives that user's permission groups, and the provider's group claims are ignored.

Review the permission groups of solution users who sign in through an external identity provider.

OpenID Connect sign-in refuses asserted user names with control characters, leading or trailing spaces or reserved names, and ignores group values that contain a semicolon or have a numeric form.

Check that the user names and group names asserted by the identity provider follow these rules.

Active Directory (LDAP) sign-in reads the user's directory groups to grant permission groups.

Run the runtime as a service on a domain computer or under a domain account, and on the .NET 10 runtime map a regular directory group, not the user's primary group.

Permission group names with a space or one of the characters - ! \ / . are refused when a name is created or renamed.

To map an identity-provider group whose name contains spaces, name the permission group with underscores in place of the spaces.

A user whose security policy cannot be found signs in under the Guest user's security policy, and an electronic-signature check that cannot be completed requires a signature.

Check the trace for missing-policy warnings after upgrading, and assign an existing security policy to each user named there.

On clients connected with Windows authentication, electronic signatures and alarm acknowledgment comments check the Windows password of the user named, in the server's own domain only.

Have operators sign with their Windows password, and use accounts from the server's domain.

A Windows user who reaches the runtime through a Secure Gateway and is not defined in the solution receives only the permission groups that match that user's own Windows groups.

Review the permissions of these users, and optionally list the accepted gateway accounts in the server settings. See SecureGateway Services Reference.

Windows authentication relayed by the Secure Gateway depends on the account the gateway service runs under.

Keep the Secure Gateway service running under the LocalSystem account when it relays Windows authentication.

TLS on the Windows Authentication port is enabled in the server's machine settings file, not in the server executable's configuration file.

Enable TLS on the Windows Authentication port in the server's machine settings. See Runtime Startup Reference.

File and process services between FrameworX computers accept only allowed folders and FrameworX programs.

Add each folder used for remote solution loading or file transfer to the allowed folders in the machine settings, and restart the service.

The Solution Center service reads its auto-start list only from the installation folder.

Turn on AutoStart in Solution Center for each solution that must start, and have an administrator add any other program to the list in the installation folder.

On Windows, the runtime reads start settings and .NET 10 database provider registrations only from the installation folder, and a start settings file is selected by solution and profile.

Move start settings and custom provider registrations from the shared settings folder to the installation folder, and place them again after installing a new release.

The runtime server and the Solution Center service refuse requests above a size limit.

Raise the limits in the server settings file if a site needs larger requests.

Dataset filters and queries refuse to run when a value from a tag or from the signed-in user would end a quoted text in the SQL command.

Test Dataset queries and table filters after upgrading, and where a value closes the quotes on purpose, move the quotes from the query into the value.

A forced write updates a tag's Previous Value and Timestamp even when the forced value equals the current value.

Review logic that depends on the Previous Value or Timestamp of tags that receive forced writes.

A Digital tag raises an event on a Device read or normal write only when its value or quality changes, and stores 0 or 1 in more cases.

Review logic that relied on an event at every read of an unchanged value or on a Digital tag holding a number other than 0 or 1.

A solution from an earlier version does not open when its backup copy cannot be written.

Free disk space or shorten the solution path, then open the solution again.

A Linux or Docker runtime refuses to start a solution that targets Windows.

Open the solution in the Designer, change the target platform to Multiplatform in Solution Settings and run Build All.

Operators see the license expiration warning only in the final week before expiration, and maintenance-plan expirations are not shown to operators.

Monitor the server event log for license and maintenance-plan expiration notices.

The continuous runtime trace file lists its columns in the written order and quotes values that contain a tab, a double quote or a line break.

Update any tool that parses the file by the earlier header order or that does not handle quoted fields.


Compatibility and Lifecycle


Security Note

This release contains security corrections and hardening. For per-item detail (affected versions, severity, required action) and the component manifest (CycloneDX) of your version, contact support@tatsoft.com.