Changelog 

Added 

• Usage Analytics dashboard. A new Admin Tools → LLM → Analytics submodule with cost and request trends, breakdowns by provider, model, and service, KPI tiles, and per-user usage against each user's monthly budget. The Providers, Models, Configurations, and Tasks list views also gained per-row Cost / Requests / Tokens (last 30 days) columns. See Usage analytics.
• Real cost tracking. Usage is now priced from the configured model rates (prompt/completion token split), so the AI cost this month widget and the dashboard show real figures instead of 0. The tx_nrllm_service_usage table gained model and token-split columns plus per-task attribution.
• Automatic budget pre-flight. Completion, embedding, translation, and vision requests are checked against the configured budget before the call is made.

Changed 

• The domain API moved to typed value objects (chat messages, tool specs, vision content, capability sets, provider options). The legacy string/array options accessors are deprecated in favour of the typed equivalents.
• Requires netresearch/nr-vault ^0.6.0.

Breaking 

• The legacy Model::CAPABILITY_* class constants have been removed in favour of the ModelCapability backed enum (for example ModelCapability::CHAT->value). They had been deprecated since the enum was introduced.

Added 

• Provider fallback chain. LlmConfiguration can now list other configuration identifiers to retry against when the primary fails with a retryable error (connection / HTTP 5xx / 429 rate- limit). Non-retryable errors (4xx other than 429, configuration problems, unsupported feature) bubble up unchanged. Streaming is intentionally excluded from fallback because chunks cannot be replayed against a different provider. See ADR-021: Provider Fallback Chain and Fallback chain.
• Attribute-based provider registration. New #[AsLlmProvider(priority: N)] attribute. Providers bearing the attribute are automatically tagged and made public by ProviderCompilerPass at container compile time; no services.yaml edit required. Legacy yaml tagging still works for third-party providers and takes precedence when both mechanisms are present. See ADR-022: Attribute-Based Provider Registration and Registering a provider.
• Per-capability BE group permissions. Every ModelCapability enum value is now a native TYPO3 customPermOptions entry under the nrllm namespace. BE group editors see a checkbox per capability (chat, completion, embeddings, vision, streaming, tools, json_mode, audio). New CapabilityPermissionService resolves checks against the current BE user with admin short-circuit and CLI / frontend bypass. See ADR-023: Native Backend Capability Permissions and BE group permission checks.
• Dashboard widgets. Two TYPO3 dashboard widgets sourced from tx_nrllm_service_usage: AI cost this month (NumberWithIconWidget) and AI requests by provider (7d) (BarChartWidget). Loaded conditionally from Configuration/Services.php only when typo3/cms-dashboard is installed. See ADR-024: Dashboard Widgets.
• Per-user AI budgets. New tx_nrllm_user_budget table with six independent ceilings (requests / tokens / cost × daily / monthly). New BudgetService::check() aggregates usage on demand from tx_nrllm_service_usage — one DB roundtrip for both windows via conditional SUM(). Orthogonal to the existing per-configuration daily limits: both checks must pass. See ADR-025: Per-User AI Budgets and Per-user AI budgets.

Changed 

• CI: mutation testing runs only on push, merge_group and schedule events. PR CI gets the fuzz suite + unit / functional / PHPStan / rector / code style; the  15 min mutation job is deferred because its per-PR signal is hard for authors to action locally.
• CI: .semgrepignore added to exclude Tests/, Build/Scripts/ and vendor directories from Opengrep SAST. Previously failing on legitimate unlink() fixture cleanup.
• CI: fuzz workflow now invoked with fuzz-testsuite: fuzzy matching the phpunit.xml suite name.

Added 

• DocumentCapableInterface: providers can now advertise PDF/document support; ChatCapabilitiesInterface exposes this via getProviderCapabilities().
• Multimodal content arrays in chatCompletion: pass images, PDFs, and text blocks as structured content arrays alongside regular string messages.
• Tool message conversion: tool_result blocks are now mapped correctly when assembling provider payloads.

Changed 

• Migrated CI infrastructure to netresearch/typo3-ci-workflows shared workflows (PHP tests, docs, E2E).
• Replaced GrumPHP with CaptainHook for pre-commit hooks.

Fixed 

• PHPStan baseline regenerated; ignoreErrors patterns broadened for deprecation and array function rules to handle phpstan-typo3 v2/v3 parameter name differences.
• E2E tests stabilised: heading verification added, module overview landing page assertions updated.

Added 

• AI-powered full-chain task wizard: describe a task in plain language, AI generates task + configuration + model recommendation in one step.
• AI-powered configuration wizard: generate configurations with system prompts, parameters, and model selection.
• Custom TCA ModelIdElement: input field with "Fetch Models" button that populates from provider API, auto-fills capabilities and pricing.
• ModelConstraintsWizard: field wizard that loads parameter constraint bounds per model.
• Dashboard improvements: side-by-side wizard callouts, fixed headline from "LLM Providers" to "LLM Integration".
• Task execution UI: collapsible prompt details, improved result display.
• Enhanced model discovery: better Anthropic, Google, DeepSeek, Mistral support.
• TER publish workflow.
• Documentation: wizards guide with screenshots, tasks section, updated configuration reference.

Changed 

• Renamed SafeCastTrait extracted from duplicated helpers in TaskController and WizardGeneratorService.
• SQL injection defense: regex whitelist validation for table/column names in FetchRecordsRequest and LoadRecordDataRequest.

Fixed 

• Restored method_exists() guards for setShortcutContext() (TYPO3 v13 compatibility).
• PHPUnit 12: replaced createStub with createMock to fix deprecation warnings.

Changed 

• Rewritten introduction with value-oriented positioning.
• Restructured README around value proposition and audience segments.
• Updated package metadata with value-oriented descriptions.
• Added integration guide for extension developers.

Added 

• Help page in the LLM backend module.
• Setup wizard links on empty-state list pages.

Fixed 

• Use canonical endpoint URLs for known providers in setup wizard.
• Remove container class from backend module templates.

Fixed 

• Add Fluid-compatible getHasApiKey() getter for {provider.hasApiKey} in templates.

Fixed 

• Use GET /v1/models for Anthropic connection test.

Fixed 

• Use table-specific connection and simplify column checks.
• Wrap test cleanup in try/finally and assert labelField.

Fixed 

• Handle tables without uid column in TCA utilities.
• Remove hardcoded temperature from chat completions.

Fixed 

• Add rootLevel to provider, configuration, and model TCA definitions.

Fixed 

• Use max_completion_tokens instead of max_tokens for OpenAI chat completions.

Breaking 

• Prevent plaintext API key storage via setup wizard; keys now require vault encryption.

Fixed 

• Cast ExtensionConfiguration timeout values to integer.

Changed 

• Use Symfony Uuid::v7() instead of manual UUID generation.

Added 

• Extract thinking blocks from LLM responses (<think> tag support).

Fixed 

• Preserve newlines in extractThinkingBlocks.
• Restrict CI push trigger to main branch only.
• Add merge_group trigger to CI workflow.

Fixed 

• Add Overview submodule for TYPO3 v13 module overview compatibility.

Added 

• Expose chatWithConfiguration and streamChatWithConfiguration on LlmServiceManagerInterface.

Fixed 

• Use integer values for f:be.infobox state attribute for TYPO3 v13 compatibility.
• Explicitly enable fuzz and mutation tests.

Fixed 

• Use tools parent for TYPO3 v13 module compatibility.

Changed 

• Consolidate caller workflows into 4 grouped files.
• Fix documentation issues found by analysis.

Changed 

• Require netresearch/nr-vault ^0.4.0 for API key encryption.

Added 

• PHP 8.2+ and TYPO3 v13.4+ compatibility.
• TYPO3 v13.4 ddev install command.
• Coverage uploads and fuzz/mutation CI workflow.
• Unit tests for enums, WizardResult DTO, providers, services, and specialized classes.
• Coverage tests for PromptTemplateService and TranslationService.

Changed 

• Moved phpunit.xml and phpstan-baseline.neon into Build/ directory.
• Expanded CI matrix to PHP 8.2-8.5 and TYPO3 v13.4/v14.
• Replaced TYPO3 v14-only APIs with v13-compatible equivalents.
• Narrowed testing-framework to ^9.0 for PHPUnit 12 compatibility.
• Removed dead ProviderRegistry class and orphaned phpstan baseline file.
• Removed 55 dead translation keys.
• Harmonized composer script naming to ci:test:php:* convention.
• Migrated CI to centralized workflows.
• Added SPDX copyright and license headers.
• Replaced generic emails with GitHub references.

Fixed 

• Resolved CI failures for PHP 8.2 and TYPO3 v13 compatibility.
• Resolved PHPStan failures for dual TYPO3 v13/v14 support.
• Fixed PHPUnit deprecation warnings.
• Used CoversNothing for excluded exception and enum test classes.
• Localized user-facing hardcoded strings in controllers.
• Disabled functional tests in CI (environment-specific).
• Fixed direct php-cs-fixer call in ci:test:php:cgl script.

Fixed 

• Fixed CI: use correct org secret name for TER token.
• Simplified TER upload workflow.

Fixed 

• Fixed CI: create zip archive for TER upload.

Added 

Core Features

• Multi-provider support (OpenAI, Anthropic Claude, Google Gemini, Ollama, OpenRouter, Mistral, Groq).
• Unified API via LlmServiceManager.
• Provider abstraction layer with capability interfaces.
• Typed response objects (CompletionResponse, EmbeddingResponse).
• Three-tier configuration architecture (Providers, Models, Configurations).
• Encrypted API key storage using sodium_crypto_secretbox.

Feature Services

• CompletionService: Text completion with format control (JSON, Markdown).
• EmbeddingService: Vector generation with caching and similarity calculations.
• VisionService: Image analysis with alt-text, title, description generation.
• TranslationService: Translation with formality control and glossary support.
• PromptTemplateService: Centralized prompt management with database-driven templates.

Specialized Services

• Image generation (DALL-E).
• Text-to-speech (TTS) and speech transcription (Whisper).
• DeepL translation integration.

Provider Capabilities

• Chat completions across all providers.
• Embeddings (OpenAI, Gemini).
• Vision/image analysis (all providers).
• Streaming responses (all providers).
• Tool/function calling (all providers).

Infrastructure

• TYPO3 caching framework integration.
• Backend module for provider management and testing.
• Prompt template management with versioning and performance tracking.
• Comprehensive exception hierarchy.
• Type-safe enums and DTOs for domain constants.

Developer Experience

• Option objects with factory presets (ChatOptions).
• Full backwards compatibility with array options.
• Extensive PHPDoc documentation.
• Type-safe method signatures.

Security

• Enterprise readiness security workflows and supply chain controls.
• SLSA Level 3 provenance, Cosign signatures, and SBOM generation.
• OpenSSF Scorecard and Best Practices compliance.

Testing

• Comprehensive unit and integration tests.
• E2E testing with Playwright.
• Property-based (fuzz) testing support.

Upgrading from Pre-Release 

If you used a pre-release version:

1. Remove old extension

   Remove old extension

   composer remove netresearch/nr-llm

   Copied!

2. Clear caches

   Clear caches

   vendor/bin/typo3 cache:flush

   Copied!

3. Install current version

   Install current version

   composer require netresearch/nr-llm:^0.2

   Copied!

4. Run database migrations

   Run database migrations

   vendor/bin/typo3 database:updateschema

   Copied!

5. Update configuration

   Review your TypoScript and extension configuration for any changed keys or deprecated options.

Breaking Changes Documentation 

Each major version will document:

1. Removed or changed public APIs
2. Migration steps with code examples
3. Compatibility layer availability
4. Deprecation timeline for removed features