ChatWalaʻau v0.110.0

This release adds four improvements to ChatWalaʻau: authenticated image serving, a File Explorer attach-to-chat shortcut, Ontology canvas upgrades, and direct PDF analysis.

Behavior change: uploaded and generated image URLs are no longer public. See the security highlight below.

Highlights

Uploaded and generated images are served behind authentication (v0.110.0)

• The endpoint that serves files from your uploads folder was previously public -- anyone who knew or guessed the URL could open the image without signing in, and the chat's "open full size" link handed out that raw URL. It is now gated by the same authentication as the rest of the app.
• Because the app and its API share one origin, your browser automatically sends your session cookie when it loads an image or opens one full size, so a signed-in user sees and opens images exactly as before, while someone without a session gets an authentication error. The chat also loads inline images through an authenticated request, so the raw URL no longer appears in the page.
• When web login is enabled, a directly-opened image URL now requires a signed-in session even on localhost and when the app runs behind a dev or reverse proxy. With no web login configured, single-user local runs stay open with zero configuration.
• Action for external integrations: if a tool or bookmark fetched an image URL without credentials, it must now authenticate. No new setting is required.

Attach a PDF and analyze it directly (v0.110.0)

• An attached PDF is now given to the model as context, the same way an image is -- no extra steps, no RAG setup, and the assistant no longer tries to parse it with coding tools.
• On Azure OpenAI / OpenAI / Foundry the PDF is attached natively, so the model reads its text, tables, and even scanned pages. On a provider whose connector cannot take a PDF (e.g. Anthropic / Claude) the text is extracted and included with your message instead.
• A new optional setting PDF_ATTACH_MODE (auto / native / text, default auto) controls this; text is a safe fallback if a specific deployment rejects file input. The text path is bounded by PDF_INLINE_MAX_CHARS (default 20000).
• Ingesting a PDF into the knowledge base is easier too: the Pipeline rag-ingest job accepts just the uploaded PDF's filename (resolved against the uploads folder) instead of a full server path.

File Explorer: attach a file to the chat (v0.110.0)

• When you have an image or PDF open in the File Explorer and there are no unsaved edits, a new Attach to chat button adds that file to the message composer -- it closes the explorer and attaches the file just like a drag-and-drop.

Ontology canvas: connect anywhere, separate parallel edges, rename (v0.110.0)

• Connect from anywhere on a node. Entity nodes now have two rings: drag the inner circle to move the node, and start or end a relationship anywhere on the outer ring (a full 360 degrees). Edges attach to the nearest point on each circle and follow the nodes as you move them.
• Multiple relationships between two entities are now easy to select. Parallel relationships fan out along separate curves with their own labels instead of stacking; a relationship from an entity to itself draws as a loop.
• Rename an ontology in place. The ontology list gains a Rename action for a concept model's name and description, without deleting and re-creating it (the ontology and its graph are preserved).

Included in this release

This release includes implementation work from:

• v0.110.0 through v0.110.0

Notes

• Internal design management content and architecture control artifacts are intentionally omitted from this release note.

Installation

See the repository README for setup and usage instructions.

Version

• Release version: 0.110.0
• Previous release: 0.109.0