Skip to content

v0.9.15

Choose a tag to compare

@Lyin01 Lyin01 released this 14 Jul 15:18
· 127 commits to main since this release

Highlights

  • More reliable agent and session lifecycles. Shutdown, resume, compaction, LSP, MCP, and SDK race conditions now converge cleanly; late provider responses can no longer write into closed or replaced sessions.
  • Better memory retrieval. Hybrid keyword/vector search now includes semantic-only matches, ranking is more balanced, and SQLite/legacy JSONL migrations plus embedding writes are safer under concurrent use.
  • Improved Google GenAI compatibility. Function-call IDs, thought signatures, media tool results, usage metadata, thinking settings, and filtered responses now follow the current @google/genai protocol.
  • More accurate TUI behavior. /mcp shows each server's effective configuration source and safely removes overrides; /revoke stays synchronized across compaction and archived transcript boundaries; large diff previews use bounded memory and sanitize terminal content.
  • Safer source installs and updates. New source installs keep code in ~/lmcode and user data in ~/.lmcode; existing layouts remain supported. /update is fast-forward-only, uses a frozen lockfile, enforces bounded process execution, and automatically selects a compatible pnpm 11 release.
  • Security hardening. File tools validate physical paths around symlinks, MCP subprocesses inherit a reduced environment, configuration parsing resists prototype pollution, Goal completion fails closed when verification is unavailable, and WolfPack output is bounded.

Compatibility notes

  • Directory symlinks are no longer recursively traversed by Glob. This is an intentional security-first behavior change.
  • Node.js >=22.19.0 remains required.
  • This release is distributed through npm; no native executable artifacts are included.

Verification

  • Full workspace suite: 5,086 tests passed, 50 skipped, and 2 todo across 404 passing test files.
  • Typecheck, build, lint, Sherif, package lint, and dependency audits passed.
  • Windows installer tests and WSL POSIX installer security smoke tests passed.
  • CLI packaging was validated through npm publish dry-run and runtime smoke tests.

Full Changelog: v0.9.14...v0.9.15