October 11, 2026

Update: A First-Run Setup, Tighter Security for Shared Projects, and Cleaner Click-to-Source

New accounts now get a set-up screen on the dashboard where they pick a theme, background animation and assistant style before the first project exists. Shared projects are harder to abuse: removed collaborators lose live access at once, Markdown previews and links from bibliography fields are sanitised, and stale memberships can no longer pose as ownership. Click-to-source skips generated build files, and the assistant stops retrying a request a provider has already rejected.

This build's three biggest changes are a first-run set-up on the dashboard, where you choose how TeXposit looks and how the assistant writes before you create anything, tighter security for shared projects, which closes several ways a collaborator, or someone who used to be one, could reach things they should not, and cleaner click-to-source, which no longer sends you to files LaTeX generates for itself. Alongside those, the assistant's personal notes stay out of your project history, and a request that an AI provider has rejected is no longer retried over and over.

Three changes worth a closer look

A first-run set-up on the dashboard

A new account used to land on an empty dashboard and meet the appearance and assistant questions later, inside the editor's welcome tour. Those questions now come first. The dashboard greets you by name and offers three ways to begin: start a new project, upload one, or browse templates. Above them is a short set-up strip where you pick a light or dark theme, switch the background animation on or off, and set the assistant's style. You can skip it entirely.

The assistant questions are the same preference rows you find under My preferences, so a choice made here is the one you see there, and anything your organization has locked is shown as locked rather than offered. The editor's welcome tour no longer repeats these steps.

Tighter security for shared projects

Everyone in a project can type into it, so anything one collaborator writes is something another collaborator's browser will display. This build goes through those paths.

  • Removing a collaborator, or lowering their role, now drops their live connections to the project at once. Before, a connected browser kept receiving the project's real-time events until it disconnected.
  • Raw HTML typed into a shared Markdown file is sanitised before any collaborator's preview renders it.
  • Links coming from bibliography fields and search results only become clickable when they are http or https addresses, so a javascript: link in a .bib entry does nothing. Author names, abstracts, section names and saved prompts are escaped wherever they are shown.
  • An AI chat session can only be joined from the project it belongs to. Knowing a session's identifier is not enough to read a conversation from another project.
  • Project ownership no longer depends on stale rows. When a project is deleted and a new one reuses its internal number, an old membership row could be mistaken for the new project's owner. Memberships older than their project are now ignored everywhere.

Click-to-source skips generated files

Clicking in the PDF jumps to the matching source line. For some documents the hit landed in a .bbl, .aux, .toc or similar file that LaTeX writes by itself, which you cannot usefully edit. These are now skipped unless the file is actually in your file tree, so a hand-written .bbl still works and a generated one does not open.

Change notes for update build 261011

  • New: first-run set-up on the dashboard: Theme, background animation and assistant style can be chosen before you create a project, or skipped. Start a new project, upload one or browse templates from the same screen.
  • Changed: the assistant's notes are yours alone: The assistant's todo.md and context.md are kept per person and outside the file tree, so they no longer appear in your project's history, and one collaborator's notes do not overwrite another's.
  • Changed: Handbook is now Docs: The Help menu entry points to the documentation under its new name. The separate AI task sessions guide entry is gone.
  • Better: click-to-source ignores generated build files unless they are in your file tree.
  • Better: assistant fallback: When OpenRouter rejects a request body outright, TeXposit no longer cycles through the model list again. It tells you instead of waiting.

Bugfixes

  • Fixed removed collaborators keeping live access: Their connections to the project are now closed when they are removed or their role changes.
  • Fixed unsanitised Markdown preview: Raw HTML in a shared Markdown file could run in other collaborators' previews. The preview is now sanitised before anything reaches the page.
  • Fixed unsafe links: Bibliography URLs and search-result links that were not http(s) could be turned into clickable links. They are now dropped.
  • Fixed unescaped text in panels: Author names, abstracts, section names, saved prompts and the history panel's file name are now escaped before they are shown.
  • Fixed AI chat sessions being joinable across projects: A session must belong to the project you join it from.
  • Fixed stale memberships taking over new projects: An old membership row could be read as ownership of a newer project that reused the same number. The PDF of one project could be looked up in another user's directory this way. Such rows are now ignored.