Versions

Official node and hub releases are only published at https://www.talesmith.studio. If you download Talesmith node or hub software anywhere else, it is not from us.

Official version list and checksums

The live list of published node versions and SHA-256 hashes is here:

https://talesmith.studio/updates/node/versions.txt

Each line is: version hash (for example 0.8.131 followed by a 64-character hex string). Optional words after the hash control stepped updates:

  • required — must be installed before later catalog lines are offered.
  • auto — Check for updates installs this release automatically after verification (no separate install step).

Example: 0.10.320 abc… required then 0.10.321 def… required auto.

Matching zip files live at:

https://talesmith.studio/updates/node/{version}/{version}.zip

The list rotates over time; older zips may be removed from the mirror even if the version still runs on nodes already installed.

Hub releases use the same pattern under /updates/hub/.

Check the copy on your server

Open node.php in a text editor. Near the top you will see constants similar to:

define('TS_VERSION', '0.8.131');
define('TS_INTEGRITY_HASH', 'fe2ef24d4958c8f58e27ae642ce72c37f84b02dab1c23913ffe92601b7cb7801');

The version should match a line in versions.txt. The TS_INTEGRITY_HASH value should match the hash on that same line for that version.

In-app updates

After setup, sign in and use Settings → Social → Check for updates to install official releases when your host allows outbound HTTPS and ZipArchive. Step-by-step: Updates.

Integrity protection (data/config.php)

After the first run, data/config.php includes strict_integrity (default true). When enabled, the node refuses to run if node.php has been modified and no longer matches the sealed hash.

The file is a guarded PHP data file (not plain JSON on disk). It begins with a PHP line that returns 403 if requested directly, then JSON settings—for example:

<?php http_response_code(403); exit; ?>
{
    "strict_integrity": true,
    "csp_allow_insecure": false
}

Turning strict_integrity off removes that tamper check. Only change it if you understand the risk.

The safest approach is still to install and update from https://www.talesmith.studio only.