v0.16.0

Agent runs can now answer questions about the website's own content with cited evidence instead of model world-knowledge.

RAG site-search tools (rag tool group)

Two new tools bring the built-in set to 41 tools in 8 groups (#332, #333, ADR-049):

• site_rag_query — question in, curated evidence package out: source_id, title, URL and a match excerpt per source, always labelled with the backend that answered.
• site_fetch_source — reads the full indexed text behind a source_id, so the model can study a promising source beyond its excerpt before answering.

Evidence comes from whichever search index the installation already runs, through a priority cascade:

1. EXT:solr — via the Solr HTTP select API, resolved from the documented solr_*_read site configuration (per-language cores supported)
2. ke_search — reading tx_kesearch_index directly (MATCH … AGAINST on MySQL/MariaDB)
3. indexed_search — reading the core index_* tables directly (word-hash matching)
4. Database fallback — always available: word-wise search over pages and content elements, ranked by how many query words a page covers, so plain natural-language questions find their pages

No extra dependency is required — none of the search extensions is a composer requirement; each backend activates when its extension is installed and indexed.

Public-only by construction: every backend filters at index level to what the anonymous visitor could read — fe_group restrictions (including extendToSubpages sections), hidden/timed pages, workspace drafts and ke_search's hidden_content never reach the model. Tool arguments are treated as untrusted: strict source_id grammar, length caps, Lucene/boolean-operator escaping.

CI

• Functional tests now also run against MariaDB (one matrix cell), keeping the MySQL-only retrieval branches permanently exercised (#334, #337). Two pre-existing MySQL incompatibilities in the e2e-backend suite surfaced by this are tracked in #335 and #336.

Docs

• README: overview and Playground screenshots, Skills/Tools bullets (#331)

Installation

composer require netresearch/nr-llm

Publication status

• TER: extensions.typo3.org/extension/nr_llm — 0.16.0 verified
• Packagist: packagist.org/packages/netresearch/nr-llm — 0.16.0 verified
• Documentation: docs.typo3.org/p/netresearch/nr-llm/0.16/en-us/ — render verified

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-llm-0.16.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-llm-0.16.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.