• v1.15.0 6d593df8e0

    ChatTLLX v1.15.0
    All checks were successful
    CI / Safe checks (pull_request) Successful in 4m50s
    Container images / Build temporary amd64 candidates (push) Successful in 5m22s
    Container images / Smoke-test App candidate (push) Successful in 58s
    Container images / Smoke-test Whisper candidate (push) Successful in 42s
    Container images / Publish immutable amd64 candidates (push) Successful in 38s
    Release / Verify and publish release (push) Successful in 1m48s
    Stable

    Ghost released this 2026-09-13 05:19:16 +00:00 | 84 commits to main since this release

    Fixed

    • Stop the model from self-approving calendar and scheduled-task writes: an approved field in the
      model's own tool arguments no longer grants authorization. These writes still require the explicit
      in-chat approval or denial, and a denied or expired proposal is never executed.
    • Canonicalize every static file request before serving it. Paths that escape the public directory, as
      well as .mjs and source-map files, are no longer reachable as public assets, while all documented
      login-page scripts stay public and application modules still require a session.
    • Capture user state with a deep snapshot when a save is queued, so a state mutation during an in-flight
      query can no longer corrupt the exact payload that is written and its integrity hashes.
    • Keep the extra final-answer recovery round text-only: the tool schemas stay available for a stable
      prompt prefix, but the model cannot start researching again or leak native or textual tool calls into
      a finished-looking answer. A complete exact repeat of the previous phase at the end of a stream is no
      longer flushed as new content, while partial or divergent continuations still render. Normal
      interactive tool chains remain unlimited.
    • Open the native attachment picker directly and keep the send guards independent from the attachment
      state, so a ready attachment can no longer block an ordinary send.

    Changed

    • Move the data-side preparation of new user turns (message records, title and memory-snapshot rules,
      archive/folder metadata, conversation ordering, and failed-job metadata rollback) out of the frontend
      composition root into the focused chat-turn-preparation module, and group the user and admin
      settings controller dependencies into small documented capability objects with fail-fast validation.

    Operations

    • Add a PostgreSQL integration test that mutates in-process state exactly while a real COMMIT runs and
      verifies the captured snapshot is what reached the database.
    Downloads