Release Notes

You're viewing Insider release notes

These builds are early-access and may contain bugs or breaking changes. Switch to Stable release notes.

2026-10-21

Website v1.0.0-build.66-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-20

Website v1.0.0-build.65-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-19

Website v1.0.0-build.64-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-18

Website v1.0.0-build.63-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-17

Website v1.0.0-build.62-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-16

Website v1.0.0-build.61-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-15

Website v1.0.0-build.60-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-14

CLI v1.1.0-build.117-channel.insider

• Added Initial release of Niksphere CLI
• Added Require explicit server URL for environment authentication login (env auth login)
• Added Centralized authentication handler with explicit 127.0.0.1 loopback binding for OAuth logins
• Added Add nik env actor and nik env client commands for managing actors and OAuth clients
• Added Add nik dev mcp enable|disable|show commands to register or remove the Niksphere MCP server (nik mcp) in AI client configuration files (Claude Code, Cursor, Antigravity, VS Code), with --client to target specific clients and --json on show for machine-readable client discovery
• Added Add a token configuration value (settable as the NIKSPHERE_CLI_TOKEN environment variable, or in the CLI''s own configuration file) to supply a Personal Access Token directly for headless/CI environments, bypassing the OS keyring and any interactive login flow
• Added Add cloud_url and cloud_token configuration values (settable via NIKSPHERE_CLI_CLOUD_URL and NIKSPHERE_CLI_CLOUD_TOKEN environment variables, or in the CLI''s configuration file) to support custom Cloud targets and Personal Access Token authentication in headless/CI environments
• Added Show in nik cloud auth status when a Personal Access Token override (NIKSPHERE_CLI_CLOUD_TOKEN or cloud_token in configuration) is in effect
• Added Generate a CycloneDX JSON Software Bill of Materials (SBOM) for each platform binary during the build, listing every dependency''s exact version, cryptographic hash, and license
• Added Generate a JSON configuration schema (config.json) during the build, documenting every configuration key, its environment variable, type, default value, and description
• Added Add nik self release-notes to show release notes for the currently installed version, and nik self update release-notes to show release notes for every version a nik self update would install
• Added Add nik env session list (showing session id, connected-at timestamp, and the authenticated actor''s id and name) and nik env session terminate <id> commands to list active Client Runtime sessions on a Niksphere Environment and to forcibly terminate one, for developers debugging or scripting against active app sessions
• Added Add full Business Central AL preprocessor support (#if, #elif, #else, #endif, #define, #undef, and safe skipping of #region, #endregion, #pragma) to nik dev convert bc, including boolean expression evaluation (not, and, or, parentheses), automatic symbol resolution from app.json, and --define / -D flag for custom preprocessor symbols
• Changed Remove the artificial 30-second client-side HTTP timeout on Environment and Cloud SDK requests; operations now run until completed by the server or cancelled by the user via Ctrl+C, preventing premature timeouts during long-running tasks such as large app installations or schema migrations
• Changed Improved CLI --help layout: displayed commands prior to options and unified flags under a single Flags section
• Changed Render --help descriptions as formatted Markdown (bold, italic, inline code, lists, syntax-highlighted code blocks) under clear Usage/Description/Flags sections, including clickable links in supporting terminals
• Changed Pressing Ctrl+C now cleanly cancels an in-progress command or login instead of showing a confusing error
• Changed Unified wording of success and error messages with the Engine and VS Code Extension across all env app, env actor, env client, and env idp external commands
• Changed Add detailed --help descriptions to nik mcp and nik dev lsp clarifying they are started by an AI client or editor as a subprocess, not meant to be run manually
• Changed BREAKING: Move nik dev integrate lsp to nik dev lsp and remove the now-empty nik dev integrate command group
• Changed Show in nik env auth status when a Personal Access Token override (the NIKSPHERE_CLI_TOKEN environment variable, or token in the CLI''s own configuration file) is in effect; it silently took priority over any logged-in session for every environment, previously indistinguishable from a normal login
• Changed BREAKING: Remove the server configuration key/NIKSPHERE_CLI_SERVER environment variable, a fallback alias for the target Engine server URL; use server_url/NIKSPHERE_CLI_SERVER_URL instead
• Changed BREAKING: Rename the server_url configuration key/NIKSPHERE_CLI_SERVER_URL environment variable to engine_url/NIKSPHERE_CLI_ENGINE_URL, so it reads unambiguously as the Engine URL rather than the generic "server" also used elsewhere for the Cloud; rename the server_url field in nik env auth status/nik cloud auth status --json output to target_url (holding the Engine or Cloud URL depending on which command produced it), and the engineUrl field in nik cloud env list --json output to engine_url for consistency with the rest of the CLI''s snake_case JSON output
• Changed nik self update/--check now shows a short summary of how many new versions are available in the channel instead of their full release notes; run nik self update release-notes to see what changed
• Changed BREAKING: Split the app manifest author field into publisher and developer; nik env app list now shows separate PUBLISHER/DEVELOPER columns instead of AUTHOR, nik dev init scaffolds both fields in the generated nikapp.yaml, and the Business Central AL importer maps app.json''s single publisher field onto both (Business Central itself has no separate developer field)
• Changed BREAKING: Remove deprecated root-level compatibility fields (app_id, app_version, app_package_path, and msgs) from compilation and validation JSON output (nik dev compile --json, nik dev validate --json); consumers must read these structured properties from the nested data object (data.app_id, data.app_version, data.app_package_path, and data.diagnostics)
• Changed BREAKING: Rename the engine_url and token configuration keys (and NIKSPHERE_CLI_ENGINE_URL / NIKSPHERE_CLI_TOKEN environment variables) to env_url and env_token (NIKSPHERE_CLI_ENV_URL / NIKSPHERE_CLI_ENV_TOKEN) for consistency with the nik env and nik cloud command hierarchy
• Changed Format Cloud SDK errors across all nik cloud commands using the centralized error formatter to display server error messages and actionable login hints on authentication failures
• Changed Optimize Model Context Protocol (MCP) server execution architecture to execute CLI commands in-process instead of spawning separate subprocesses, eliminating process spawn latency on tool invocations
• Changed Enforce non-interactive execution for all MCP tool calls with automatic confirmation for confirmation flags (such as --yes) and fail-fast validation for missing required arguments, preventing deadlocks on standard input
• Fixed Fix project path validation in dev commands by rejecting paths with null bytes across all platforms and returning filesystem access errors on failure
• Fixed Fix Model Context Protocol (MCP) server initialization reporting a static version string instead of the dynamic CLI build version
• Fixed Fix nik dev init referencing the legacy CLI command name in its completion message, updating it to nik dev compile
• Fixed Fix WebSocket connection URL generation in telemetry monitoring by replacing silent fallback schemes with strict URL validation and unified ticket acquisition
• Fixed Fix nik env inspect data sending unauthenticated requests and silently swallowing HTTP errors by validating user sessions before launch, attaching authorization tokens to Data Explorer requests, and failing fast with descriptive messages on HTTP errors
• Fixed Fix Cloud SDK client sending Bearer authentication tokens to unvalidated hosts by applying strict host validation for Cloud endpoints
• Fixed Fix Business Central AL conditional compilation directives being treated as comments, which caused all conditional branches to be parsed unconditionally and resulted in duplicate member collisions and conflicting property overrides
• Fixed Fix Business Central AL parser silently overwriting duplicate property assignments within the same declaration block; duplicate properties on tables, table extensions, enums, enum extensions, pages, page extensions, fields, enum values, and page controls are now rejected with a descriptive parser error
• Fixed Fix duplicated or reworded success/error messages on admin commands (e.g. "Successfully installed. App X ... successfully installed" or "failed to edit actor: Actor not found.") by relaying the Engine''s own message verbatim
• Fixed Centralized server URL resolution across environment commands (nik env ...) to avoid silent fallback to localhost
• Fixed Fix login and token refresh failing due to a retired, unregistered OAuth client ID
• Fixed Rename the positional argument of nik env client edit|delete|enable|disable from <client-id> to <id>, matching the ID column from nik env client list; the Engine resolves it against the client''s internal id, not its client_id slug, so passing the slug previously failed with "Client not found."
• Fixed Fix silent session-refresh failures (missing refresh token, unreachable Engine, revoked refresh token) reusing the stale, already-expired access token instead of failing outright; commands now report a clear error pointing at nik env auth login instead of a bare 401 Unauthorized
• Fixed Fix nik env auth status reporting "Logged in" for a session whose access token had already expired; it now applies the same expiry check a real command would, and reports whether a refresh token is available to silently renew it
• Fixed Fix env app/env actor/env client/env idp external commands showing a generic "no error factory is registered for this code: 401" instead of the Engine''s actual reason (e.g. "actor is suspended or inactive") on a 401 response; requires a paired Engine release with the matching OpenAPI documentation
• Fixed Fix Cloud commands silently reusing a stale, already-expired access token when a session refresh failed (missing refresh token, unreachable identity provider, revoked refresh token) instead of failing outright; they now report a clear error pointing at nik cloud auth login instead of a bare 401 Unauthorized
• Fixed Fix nik cloud auth status reporting "Logged in" for a session whose access token had already expired; it now applies the same expiry check nik env auth status does, and reports whether a refresh token is available to silently renew it
• Fixed Fix var/out parameters not being passed by true reference; changes made to them inside a routine could silently fail to reach the caller
• Fixed Fix records passed to a routine by value not being copied; modifying such a parameter inside the routine could unexpectedly change the caller''s original record
• Fixed Fix overloaded routines (same name, different parameter types) sometimes being registered twice, which could break compilation or resolve to the wrong overload
• Fixed Fix debugger call stack frames showing "anonymous" instead of the actual routine name
• Fixed Fix debugger not showing global variables while stepping through code, and show them in their own "Globals" section separate from local variables
• Fixed Fix nik dev convert bc silently skipping enums without values, table extensions without new fields, and enum extensions without values, which made the converted app fail to compile with "unit ... not found"; these objects are now converted, and any AL object that still cannot be converted is listed with its file and reason and makes the command fail
• Fixed Fix nik dev convert bc generating bogus empty enums (e.g. type UnknownField = partial enum ();) from Enum "..." variables declared inside report extensions, interfaces, control add-ins, profiles and page customizations; these object types are now skipped as a whole
• Fixed Fix nik dev convert bc converting every AL enum without an Extensible property into an extensible partial enum, although Business Central enums are not extensible by default; such enums are now converted as non-extensible enums, and an enum that has no values and is not extensible is reported as a conversion failure
• Fixed Fix nik dev convert bc producing apps that fail to compile with "unit ''....Enum.pas'' not found" when AL objects extend or use enums that are built into the Business Central platform (e.g. "Copilot Capability", "Event Category"); these platform objects are now declared in a generated Source/Platform.pas unit, and a reference to a table or enum that exists neither in the AL sources nor in the platform makes the conversion fail, naming the AL file, object and missing target
• Fixed Fix nik dev convert bc emitting duplicate member declarations for fields moved across apps; fields marked with ObsoleteState = Moved or ObsoleteState = Removed are now excluded during conversion, preventing member collisions when target extensions declare active counterparts
• Fixed Fix nik dev convert bc emitting [UID] attributes instead of [Table] on entities and [Field] on fields, and placing table attributes after the class header where the compiler ignored them, which caused the Engine''s schema generator to detect zero tables and skip database table creation
• Fixed Fix nik dev convert bc exiting with code 0 instead of reporting an error when no valid AL table or enum definitions are found or converted
• Fixed Fix CLI commands bypassing central error handling and process termination on errors, ensuring consistent human-readable and JSON (--json) error formatting and clean deferred cleanup
• Fixed Fix confirmation prompts, warning banners, and progress messages in nik env app drop-data, nik self uninstall, and nik self update being printed to standard output instead of standard error, ensuring standard output remains clean for pipeline scripting and data redirection
• Fixed Fix nik dev compile emitting misleading static progress events before the compiler starts, ensuring console and JSON output strictly reflect actual compilation diagnostics and results
• Fixed Fix compiler file reads incurring redundant mutex synchronization and in-memory document cache resolution during non-LSP operations (such as nik dev compile), improving compilation performance
• Security Close several security vulnerabilities in the CLI''s networking and login/authentication components

Website v1.0.0-build.59-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-13

Website v1.0.0-build.58-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-12

Website v1.0.0-build.57-channel.insider

• Added Initial release of Niksphere Website and Documentation Portal
• Added Integrated automated reference documentation generation from releases catalog
• Added Support for Stable and Insider release channel deployment
• Added Add "CLI MCP Server Concept" documentation and a "Developing with AI Coding Agents" guide
• Added Add cross-product Release Notes overview (/docs/reference/release-notes) grouped by date and product, generated from all product release specifications, with a dedicated Insider variant and a Stable/Insider switch link
• Added Document Engine default and configured admin provisioning (first-start default admin, and configuration-driven emergency/CI admin) in the "Engine Authentication & Identity Concept" page
• Added Document the Engine''s minimum 8-character state parameter requirement and add a "Troubleshooting" section to the Engine API Consume quickstart, covering the redirect_uri mismatch and invalid_state errors encountered when configuring Postman''s OAuth 2.0 Authorization Code flow
• Added Add a "Security & Supply Chain" reference page documenting the CycloneDX SBOM published alongside CLI, Engine, and VS Code Extension release artifacts (format, per-product coverage, and where to find it)
• Added Add a "Standard Directories Concept" page (/docs/concepts/standard-directories) documenting the OS-standard Config/State/Cache directories shared by the CLI and Engine, why they''re split this way, concrete per-platform paths, and the Engine''s startup log output, cross-linked from both Configuration Concept pages
• Changed Rename the "Architecture & Concepts" documentation section to "Concepts" (/docs/architecture/ moves to /docs/concepts/), and rename its page titles from "X Architecture" to "X Concept" (e.g. "Engine Deployment Architecture" becomes "Engine Deployment Concept")
• Changed Simplify Postman API quickstart guide to use Personal Access Token (PAT) authentication as the primary path, with the OAuth Authorization Code flow kept as an alternative for custom clients
• Changed Redesign release notes rendering (per-product and cross-product) as a flat, color-coded change-type badge list instead of separate Added/Changed/Fixed headings
• Changed Simplify the Reference overview page by removing the Product Reference Manuals table and Configuration & IDE References list
• Changed Split the "Engine Configuration" reference page into a new "Engine Configuration Concept" page (/docs/concepts/engine/configuration) explaining configuration sources, the --config flag, and precedence rules with usage examples, and a slimmed-down "Engine Configuration Reference" page listing only the configuration keys, environment variables, flags, and defaults
• Fixed Update client_id references in the engine client governance diagram to match the renamed engine web frontend client
• Fixed Update CLI identity management documentation to reference the nik env actor command
• Fixed Correct Personal Access Token prefix (niksphere_pat_) and CI/CD environment variable name (NIKSPHERE_CLI_TOKEN) in the Engine Authentication & Identity Concept documentation to match the actual implementation
• Fixed Fix a malformed Markdown table in the Engine Configuration reference (stray blank line splitting the Database Connection Settings table in two)
• Fixed Register both of Postman''s OAuth 2.0 callback URLs (.../v1/callback and .../v1/browser-callback) for the postman OAuth client in the Engine API Consume quickstart, fixing an invalid_request: redirect_uri mismatch that occurred depending on Postman''s "Authorize using browser" setting
• Fixed Fix diagrams on documentation pages rendering far too small to read

2026-10-02

Engine v1.1.0-build.116-channel.insider

• Added Initial release of Niksphere Engine
• Added Unified design for device authorization flow UI in IdP Broker matching React SPA frontend
• Added Implement actor and identity architecture with universal admin client access, fail-fast validation, and full OpenAPI documentation
• Added Add configuration-driven admin provisioning (admin_username/admin_password/admin_pat, settable via NIKSPHERE_ENGINE_ADMIN_* environment variables or the engine config file) for self-hosted emergency access and headless CI/CD provisioning
• Added Generate a CycloneDX JSON Software Bill of Materials (SBOM) for each platform binary during the build, covering both the Go module graph and the npm dependencies of the embedded frontends, with exact versions, cryptographic hashes, and licenses
• Added Add GET /admin/sessions and DELETE /admin/sessions/{id} Admin API endpoints to list active Client Runtime sessions (connection id, connected-at timestamp, and the authenticated actor''s id and name) and to forcibly terminate one, for developers building tooling around active app sessions
• Added Add allow_debugging configuration setting (enabled by default, settable via NIKSPHERE_ENGINE_ALLOW_DEBUGGING or the engine config file) to control whether a debugger may be attached to this Engine — intended to be disabled on Production environments
• Changed Optimize database schema migrations by bundling initial table columns directly into table creation and batching subsequent column additions as well as column deletions per table, significantly accelerating app installation and upgrade performance
• Changed Render --help descriptions as formatted Markdown (bold, italic, inline code, lists, syntax-highlighted code blocks) under clear Usage/Description/Flags sections, including clickable links in supporting terminals
• Changed Admin API error messages now consistently start with "Failed to <action>: <reason>", mirroring the existing "Successfully <action>..." convention on success, so the outcome is clear from the first word alone
• Changed Generate a random, per-installation default admin account on a genuinely empty installation (shown once in that startup''s log output) instead of a fixed default
• Changed BREAKING: Split the app manifest author field into publisher (the organization distributing the app) and developer (who wrote it) — renamed in nikapp.yaml, the AppVersion database model, and the author field returned by the Admin API''s app list/upload/publish endpoints
• Fixed Fix the Engine starting with an invalid trusted_proxies setting and silently trusting every proxy; the Engine now refuses to start when an entry is not a valid IP address or CIDR range, or when a range such as 0.0.0.0/0 would trust every client
• Fixed Fix Admin API upload/publish responses nesting the success message under data.message instead of the top level, which caused the CLI and VS Code Extension to show a generic fallback message instead of the server''s actual text
• Fixed Include configured routePrefix in verificationURI and external OAuth2 redirect URLs (IdP Broker)
• Fixed Updated frontend dependencies to resolve security audit vulnerabilities
• Fixed Added HTTP/HTTPS scheme annotations to OpenAPI specification generator for SDK compatibility
• Fixed Return consistent 404 responses for unknown actors, clients, apps, and their sub-resources instead of an empty success or malformed error
• Fixed Apply configured idp_token_expiry_hours / idp_refresh_token_expiry_days settings instead of ignoring them
• Fixed Fix external identity provider login page leaking OAuth client secrets to the browser (IdP Broker)
• Fixed Fix frontend login using an unregistered OAuth client ID
• Fixed Fix Admin API 401 responses (missing/invalid token, inactive client, suspended actor, ...) using a different body shape ({"error": "..."}) than every other response ({"status": "error", "message": "..."}), and document them in the OpenAPI spec; SDK clients can now parse the real reason instead of discarding the response body as an unmapped status code
• Fixed Fix var/out parameters not being passed by true reference; changes made to them inside a routine could silently fail to reach the caller
• Fixed Fix records passed to a routine by value not being copied; modifying such a parameter inside the routine could unexpectedly change the caller''s original record
• Fixed Fix overloaded routines (same name, different parameter types) sometimes being registered twice, which could break compilation or resolve to the wrong overload
• Fixed Fix debugger call stack frames showing "anonymous" instead of the actual routine name
• Fixed Fix debugger not showing global variables while stepping through code, and show them in their own "Globals" section separate from local variables
• Fixed Fix app installation failing during database schema generation with "maximum nesting depth exceeded" when an entity field references an enum that shares its name with a database table
• Security Remove the hardcoded default admin credential (previously identical across every Engine build) in favor of a per-installation randomly generated or explicitly configured administrative account
• Security Close several security vulnerabilities in the web interface (engine console and IdP broker login pages), including denial-of-service and open-redirect issues
• Security Close several security vulnerabilities in the backend server, including TLS/certificate handling and authentication token issues

Cloud v1.0.0-build.93-channel.insider

• Added Initial release of Niksphere Cloud
• Added Multi-architecture Docker container support (linux/amd64 and linux/arm64)
• Added Integrate actor-based IdP broker with dynamic OIDC authentication
• Added Add configuration-driven admin provisioning (admin_username/admin_password/admin_pat, settable via NIKSPHERE_CLOUD_ADMIN_* environment variables or the config file) for emergency access and headless CI/CD provisioning
• Changed Prevent the provisioning worker from hanging indefinitely on a stuck provider call
• Changed Generate a random, per-installation default admin account on a genuinely empty installation (shown once in that startup''s log output) instead of a fixed admin/admin default
• Fixed Fix Cloud starting with an invalid trusted_proxies setting and silently trusting every proxy; Cloud now refuses to start when an entry is not a valid IP address or CIDR range, or when a range such as 0.0.0.0/0 would trust every client
• Fixed Fix external identity provider login page leaking OAuth client secrets to the browser (IdP Broker)
• Fixed Apply configured idp_token_expiry_hours / idp_refresh_token_expiry_days settings instead of ignoring them; remove dead, unused OIDC config options
• Fixed Fix CLI and web logins using conflicting, unregistered OAuth client IDs by seeding dedicated niksphere-cli and niksphere-cloud-web clients
• Fixed Fix login failing with a Postgres value too long for type character varying(255) error during token exchange, caused by JWT (RS256) access token signatures exceeding the column size sized for opaque HMAC signatures (IdP Broker)
• Fixed Fix the web app reloading endlessly after a successful login by correcting the API client''s OIDC session lookup, which used a stale client ID and so never found the access token
• Fixed Fix /auth/me always returning an empty sub field due to a context key mismatch between the auth middleware and the handler
• Fixed Fix the navbar showing the user''s internal ID instead of their display name by propagating the actor''s name through /auth/me
• Security Remove the hardcoded default admin credential (admin/admin, previously identical across every installation) in favor of a per-installation randomly generated or explicitly configured administrative account
• Security Close several security vulnerabilities in the web interface (cloud console and IdP broker login pages), including denial-of-service and open-redirect issues
• Security Close several security vulnerabilities in the backend server, including TLS/certificate handling and authentication token issues

2026-10-01

VS Code Extension v1.0.0-build.96-channel.insider

• Added Initial release of Niksphere VS Code Extension
• Added Add "Copy" submenu (ID / Name / Version) for apps and app versions in the environment explorer
• Added Add "Niksphere: Enable/Disable AI Agent Integration (MCP)" commands to register or remove the Niksphere MCP server for AI coding agents (Claude Code, Cursor, Antigravity, VS Code Copilot), with a client picker sourced dynamically from the installed CLI
• Added Generate a CycloneDX JSON Software Bill of Materials (SBOM) for the packaged extension during the build, listing every npm dependency''s exact version, cryptographic hash, and license
• Added Add a "Sessions" view showing the session id per row, with the authenticated actor''s name (falling back to their id) as a smaller description and full session/actor/connection details in the tooltip, refreshing whenever the active environment changes, with a "Terminate" action per session for developers debugging active app sessions
• Added Add "Niksphere: Show CLI Logs" command and title bar action in the environment and app views to easily access the CLI output channel
• Added Add "Copy CLI Command" and "Show CLI Logs" action buttons to error dialogs when CLI actions fail
• Added Include command execution duration in milliseconds and action results in CLI logs
• Added Expose all Niksphere CLI commands in the Command Palette following the "Niksphere: <Group>: <Action Description> (nik <command-path>)" naming pattern, with interactive prompts and environment selection
• Changed Removed duplicate flat environment context menu entries now fully covered by the Environment Actions submenu
• Changed Made login, install, uninstall, drop-data, upload, download, and delete cancellable from their progress notification instead of blocking until the CLI process finishes
• Changed Use a hollow ring badge instead of a dot for uninstalled app versions/apps with existing data, so it is distinguishable from the installed badge by shape, not just color
• Changed Show the logged-in username directly in the Environments view instead of wrapped in parentheses
• Changed Upgrade CLI output channel to vscode.LogOutputChannel with native log levels, automatic timestamps, and disk persistence
• Changed Route raw CLI stdout JSON payloads to Debug level while keeping command executions, durations, and action results on Info
• Changed Mask sensitive arguments and credentials (tokens, passwords, secrets, URL credentials) in CLI execution logs and copied commands
• Fixed Unified success/error message formatting: success messages start with "Successfully ...", error messages with "Failed to {action}: {message}"
• Fixed Update Language Server invocation from nik dev integrate lsp to nik dev lsp to match the CLI''s command rename
• Fixed Cloud view no longer shows the "not logged in" welcome message and login button while actually signed in with zero cloud environments; it now shows a dedicated "No cloud environments found." message
• Fixed Fix environment selection prompts displaying duplicate server URLs for active and saved environments
• Removed Remove the "Publish App" status bar item in favor of running publish commands via the Command Palette or keybinding