-
ChatTLLX v1.15.0
StableAll checks were successfulCI / Safe checks (pull_request) Successful in 4m50sContainer images / Build temporary amd64 candidates (push) Successful in 5m22sContainer images / Smoke-test App candidate (push) Successful in 58sContainer images / Smoke-test Whisper candidate (push) Successful in 42sContainer images / Publish immutable amd64 candidates (push) Successful in 38sRelease / Verify and publish release (push) Successful in 1m48sreleased this
2026-09-13 05:19:16 +00:00 | 84 commits to main since this releaseFixed
- Stop the model from self-approving calendar and scheduled-task writes: an
approvedfield in the
model's own tool arguments no longer grants authorization. These writes still require the explicit
in-chat approval or denial, and a denied or expired proposal is never executed. - Canonicalize every static file request before serving it. Paths that escape the public directory, as
well as.mjsand source-map files, are no longer reachable as public assets, while all documented
login-page scripts stay public and application modules still require a session. - Capture user state with a deep snapshot when a save is queued, so a state mutation during an in-flight
query can no longer corrupt the exact payload that is written and its integrity hashes. - Keep the extra final-answer recovery round text-only: the tool schemas stay available for a stable
prompt prefix, but the model cannot start researching again or leak native or textual tool calls into
a finished-looking answer. A complete exact repeat of the previous phase at the end of a stream is no
longer flushed as new content, while partial or divergent continuations still render. Normal
interactive tool chains remain unlimited. - Open the native attachment picker directly and keep the send guards independent from the attachment
state, so a ready attachment can no longer block an ordinary send.
Changed
- Move the data-side preparation of new user turns (message records, title and memory-snapshot rules,
archive/folder metadata, conversation ordering, and failed-job metadata rollback) out of the frontend
composition root into the focusedchat-turn-preparationmodule, and group the user and admin
settings controller dependencies into small documented capability objects with fail-fast validation.
Operations
- Add a PostgreSQL integration test that mutates in-process state exactly while a real COMMIT runs and
verifies the captured snapshot is what reached the database.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Stop the model from self-approving calendar and scheduled-task writes: an