v0.9.15
Highlights
- More reliable agent and session lifecycles. Shutdown, resume, compaction, LSP, MCP, and SDK race conditions now converge cleanly; late provider responses can no longer write into closed or replaced sessions.
- Better memory retrieval. Hybrid keyword/vector search now includes semantic-only matches, ranking is more balanced, and SQLite/legacy JSONL migrations plus embedding writes are safer under concurrent use.
- Improved Google GenAI compatibility. Function-call IDs, thought signatures, media tool results, usage metadata, thinking settings, and filtered responses now follow the current
@google/genaiprotocol. - More accurate TUI behavior.
/mcpshows each server's effective configuration source and safely removes overrides;/revokestays synchronized across compaction and archived transcript boundaries; large diff previews use bounded memory and sanitize terminal content. - Safer source installs and updates. New source installs keep code in
~/lmcodeand user data in~/.lmcode; existing layouts remain supported./updateis fast-forward-only, uses a frozen lockfile, enforces bounded process execution, and automatically selects a compatible pnpm 11 release. - Security hardening. File tools validate physical paths around symlinks, MCP subprocesses inherit a reduced environment, configuration parsing resists prototype pollution, Goal completion fails closed when verification is unavailable, and WolfPack output is bounded.
Compatibility notes
- Directory symlinks are no longer recursively traversed by Glob. This is an intentional security-first behavior change.
- Node.js
>=22.19.0remains required. - This release is distributed through npm; no native executable artifacts are included.
Verification
- Full workspace suite: 5,086 tests passed, 50 skipped, and 2 todo across 404 passing test files.
- Typecheck, build, lint, Sherif, package lint, and dependency audits passed.
- Windows installer tests and WSL POSIX installer security smoke tests passed.
- CLI packaging was validated through npm publish dry-run and runtime smoke tests.
Full Changelog: v0.9.14...v0.9.15