v0.7.0

Changes

• Merge pull request #73 from netresearch/feat/migrate-nr-llm-0.25
• chore(deps): update actions/checkout action to v7.0.1 (#72)

Installation

composer require netresearch/nr-mcp-agent

Publication status

• TER: skipped
• Packagist: skipped
• Documentation: skipped

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-mcp-agent-0.7.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-mcp-agent-0.7.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

v0.6.6

Changes

• Merge pull request #71 from netresearch/release/v0.6.6
• Merge pull request #70 from netresearch/fix/chat-host-flex

Installation

composer require netresearch/nr-mcp-agent

Publication status

• TER: skipped
• Packagist: skipped
• Documentation: skipped

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-mcp-agent-0.6.6.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-mcp-agent-0.6.6.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

v0.6.5

Changes

• Merge pull request #69 from netresearch/release/v0.6.5
• Merge pull request #68 from netresearch/fix/chat-iframe-full-height

Installation

composer require netresearch/nr-mcp-agent

Publication status

• TER: skipped
• Packagist: skipped
• Documentation: skipped

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-mcp-agent-0.6.5.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-mcp-agent-0.6.5.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

v0.6.4

Changes

• Merge pull request #67 from netresearch/release/v0.6.4
• Merge pull request #66 from netresearch/fix/chat-viewport-and-input-enabled

Installation

composer require netresearch/nr-mcp-agent

Publication status

• TER: skipped
• Packagist: skipped
• Documentation: skipped

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-mcp-agent-0.6.4.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-mcp-agent-0.6.4.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

v0.6.3

AI Chat now runs on nr-llm's agent runtime

The backend AI Chat no longer drives its own MCP-only tool loop. Every chat turn is now handed to nr-llm's AgentRuntime, which runs the model over nr-llm's builtin tool registry — the ~45 backend tools nr-llm already ships (system log and last exceptions, system status, deprecations, record search, page content, and more). The assistant can look things up and act on the TYPO3 installation directly instead of being limited to whatever an MCP server exposed.

What changed

• Native nr-llm tools out of the box. Tool availability no longer depends on a configured MCP server; nr-llm's registry (with its RBAC and per-configuration tool gate) is used directly. Admin-only tools such as the log reader are offered when the acting backend user is an admin.
• A proper identity. A fixed identity/behaviour contract is always part of the system prompt: the assistant introduces itself as the TYPO3 Backend AI Chat by Netresearch, is steered to use its tools rather than ask you to paste data, never claims to be ChatGPT or made by OpenAI, and replies in your language. It no longer self-identifies as ChatGPT.
• Clearer failures. A missing or misconfigured nr-llm Task now fails the turn with a clear message instead of silently falling back to a tool-less chat. Non-completing agent outcomes (guardrail blocks, approval requests, provider errors) surface as a sanitized error on the conversation.

Upgrade notes

• Requires netresearch/nr-llm ^0.23.1 (the release that introduced the agent runtime).
• The MCP client classes remain in the package but are no longer used by the chat turn.
• No configuration changes are required. File attachments (images/documents) continue to work.

This is an additive patch release.

v0.6.2

This additive 0.x patch broadens compatibility and tidies the docs pipeline.

• Wider nr-llm support — the extension now accepts nr-llm ^0.23 alongside the existing ^0.22, so installs on either line resolve cleanly.
• Documentation CI — adds a dedicated docs workflow and normalizes the guides version, keeping the rendered documentation in step with the release.
• Carried through this line — branded backend icons and backend dark-mode support.

This is a non-breaking, additive 0.x patch, so downstream consumers pinning a caret range on this package (^0.6) pick it up automatically. Cowriter is the one dependency tracked on a >=1.0 line.

v0.6.1

What changed

Backend UI polish, no API changes.

• Dark/light mode: the backend chat panel, the markdown renderer and the chat-core modal now follow the TYPO3 v14 backend color scheme (driven by var(--typo3-*) custom properties, verified in both schemes), instead of a hardcoded light palette.
• Icons: a branded extension tile plus a dedicated module icon in the TYPO3 v14 3-color style, with a v13 legacy tile selected at runtime by TYPO3 version. The placeholder "AI" text icon is gone.

Shipped as a 0.x patch so ^0.6 consumers pick it up automatically. See #60.

v0.6.0

A compatibility release: nr-mcp-agent now requires the nr-llm 0.22 library. This unblocks TYPO3 sites that want to run the AI chat module on the current nr-llm line — for example, the typo3-demo project could not resolve composer update while this extension still pinned nr-llm 0.12–0.19.

What changed

• Requires nr-llm ^0.22 (was ^0.12 || … || ^0.19). No behavior or code changes — every nr-llm symbol the extension uses (the provider-adapter registry, the provider capability contracts, CompletionResponse, ToolSpec, ToolCall, Model) is identical across nr-llm 0.20–0.22.
• Routine CI and dependency maintenance since v0.5.0 (GitHub Actions bumps, org-wide Renovate/gitleaks adoption).

The full backend AI chat feature set — FAL file picker, conversation history, MCP content tools, per-provider image/PDF handling — shipped in v0.5.0 and is carried forward unchanged.

Upgrade

Update nr-llm to ^0.22 together with this release; no configuration or database changes are needed.

Installation

composer require netresearch/nr-mcp-agent

Publication status

• TER: skipped
• Packagist: skipped
• Documentation: skipped

Security

All release artifacts are signed with Sigstore keyless signing.

Verify signatures

cosign verify-blob \
  --bundle nr-mcp-agent-0.6.0.zip.sigstore.json \
  --certificate-identity-regexp "https://github.com/netresearch/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  nr-mcp-agent-0.6.0.zip

Verify checksums

sha256sum -c checksums.txt

Software Bill of Materials (SBOM)

SBOMs are provided in both SPDX and CycloneDX formats for supply chain transparency.

v0.5.0

Highlights

This release ports the AI chat agent to nr-llm 0.12 and its typed tool-invocation API.

nr-llm 0.12 support

nr-llm 0.12 replaced the legacy array shapes at the provider layer: chatCompletionWithTools() now takes list<ToolSpec> and providers return list<ToolCall> objects. The agent loop now converts MCP wire-shape tool definitions to ToolSpec value objects before each provider call and normalises ToolCall responses back to the legacy array shape before persisting — conversations store tool calls as JSON and resumed conversations replay plain arrays. Malformed entries are still dropped instead of failing the conversation.

ProviderAdapterRegistry became final in nr-llm 0.12; the service layer and tests now depend on ProviderAdapterRegistryInterface.

Breaking for integrators: the composer constraint moves from nr-llm ^0.6 to ^0.12 — both extensions resolve together or not at all.

Release pipeline repairs

The tag-triggered release workflow had been silently broken since March (it referenced a reusable workflow removed from typo3-ci-workflows); it now uses the grouped release-typo3-extension.yml caller with TER/Packagist/docs publication skipped until those channels are set up. The CI test matrix also re-resolves the full dependency tree for the older TYPO3 branch instead of a partial downgrade.

Installation

composer require netresearch/nr-mcp-agent

(Not yet on Packagist — consumers add the GitHub repository as a vcs entry.)

v0.4.1

Bug fixes

• Tab rename: spacebar no longer causes the typed text to be reselected and deleted on the next keypress (spacebar was bubbling up to the parent button, triggering a re-render; additionally the inline ref callback was unstable and re-fired on every render)