# What's New & Changelog > Recent feature releases, PeopleTools object additions, security enhancements, and system updates in psLens. --- LLMS index: [llms.txt](/llms.txt) --- ## Release & Change History This page tracks major updates, new PeopleTools object handlers, security features, and configuration enhancements in psLens. ### August 15, 2026 — MCP Server Enhancements: Proactive Health Sensor & Priority Intelligence Tools Expanded the native **embedded Model Context Protocol (MCP) Server** with real-time proactive health sensor telemetry and deep diagnostic tooling for autonomous AI agents and pair-programming workflows: - **Proactive System Health Sensor & Telemetry**: - Enhanced `get_system_health` into a real-time health sensor evaluating Process Scheduler heartbeats (`PSSERVERSTAT`), Integration Broker domain dispatchers (`PSAPMSGDOMSTAT`), blocked message nodes (`PSNODESDOWN`), stalled/overdue process requests, locked-user process blockers, recent errors, and active firing alerts with automatic `HEALTHY`, `DEGRADED`, or `CRITICAL` categorization. - Added real-time passive resources `pslens://alerts/active` and `pslens://system/health/{db}`. - Introduced `proactive_system_monitor` prompt for autonomous AI agents monitoring production PeopleSoft instances. - **Universal Markdown Export (`export_object_markdown`)**: - Export any of the 32+ PeopleSoft object types directly into LLM-optimized and structured Markdown with optional recursive PeopleCode reference resolution (`recursive_pc: true`). - **Point-to-Point Object Comparison (`compare_object`)**: - Compare individual objects (records, SQL objects, PeopleCode programs, roles, permission lists, App Engines, components, pages, file layouts, messages, and service operations) cross-environment without requiring an Application Designer project definition. - **Process Request Runtime Drilldown (`get_process_request_details`)**: - Inspect full runtime parameters, automatically discovered run control table parameters, and parent/child job trees for any Process Scheduler instance. - **Integration Broker Transaction Deep Inspection (`get_ib_transaction_details`)**: - Inspect async publication/subscription contracts by PubID or synchronous transactions by GUID with full payload error logs. --- ### August 14, 2026 — Embedded Model Context Protocol (MCP) Server & AI Assistant Integration Added a native, high-performance **embedded Model Context Protocol (MCP) Server** running directly inside the psLens Go server process over HTTP/SSE, allowing AI assistants like **Claude Desktop**, **Claude Code CLI**, and **Cursor** to query, inspect, and analyze PeopleSoft metadata and runtime operations in real time. - **Embedded Architecture**: Zero external dependencies, python bridges, or local daemons to install. The MCP server runs natively inside the psLens binary alongside the web UI. - **Personal Access Token Authentication**: Built-in token engine under **Settings → MCP Tokens** (`/settings/mcp`) allowing users to generate revocable API tokens (`psl_mcp_...`) with configurable expiration windows and automatic last-used tracking. - **One-Click AI Client Setup**: Settings page provides copy-ready configuration snippets for Claude Desktop (`claude_desktop_config.json`) and Claude Code CLI (`claude mcp add ...`). - **20+ PeopleSoft Intelligence Tools**: - *Metadata & PeopleCode*: Universal object search (`search_objects`), structured schema exploration with recursive subrecord flattening (`get_object_definition`), PeopleCode source retrieval across all event types (`get_peoplecode`), forward and reverse dependency where-used graph (`get_object_dependencies`), full-text SQL/PeopleCode search (`search_code_sql`), and safe table data sampling (`get_table_sample_and_count`). - *Security & Access*: Complete 360-degree user access profile (`user_access_summary`), reverse security path traversal (`who_has_access`), high-risk grant auditing (`audit_dangerous_access`), Query Security Tree authorizations (`query_tree_access`), and authentication history audit (`user_login_audit`). - *Operational Triage*: Multi-point system health check (`get_system_health`), Process Scheduler triage with human-readable run statuses (`triage_process_scheduler`), Integration Broker transaction triage (`triage_integration_broker`), and active alert review (`list_active_alerts`). - *Cross-Database Comparison & Reports*: Cross-environment project comparisons with PeopleCode diffs (`compare_project`), recurring schedule drift detection (`compare_recurring_processes`), missing projects detection (`find_missing_projects`), report catalog discovery (`list_available_reports`), and on-demand report execution (`run_report`). - **Agent Ergonomics & Context Preservation**: Built-in tool safety annotations to eliminate permission prompts, human-readable enum descriptors alongside numeric constants, and credential column protection for safe table inspection. - **Guided Workflow Prompts & Passive Resources**: Standardized prompts for post-migration verification, on-call incident triage, user security audits, and change impact analysis, plus passive context resources for connected databases and object catalogs. See [MCP Server](/docs/mcp/). --- ### August 13, 2026 — Live Field Alias Discovery & Field Pages Pagination Added live field alias discovery and pagination support to Field detail pages (`/fields/{fieldname}`). - **Field Alias Discovery**: Automatically inspects SWS prompt tables and record metadata to check if a field is an alias of a canonical entity, or to discover all alternative field names that act as aliases (e.g. `AV_EMPLID`, `PARTNER_EMPLID`, or `INSTRUCTOR_ID` as aliases for `EMPLID`). - **Likely vs Confirmed Aliases**: Softens the verdict to "Likely Field Alias Identified" and flags ambiguity when multiple matching keys are found on a prompt table. - **Ambiguity Softening**: Displays candidate canonical fields sorted deterministically by key priority. - **Field Pages Pagination**: Replaced the previous 200-item hard limit on the "Pages using field" list with infinite scroll offset-based pagination. - **Markdown Export Integration**: Extends the field exporter to include the aliases details in the generated Markdown file. - **Optimized Performance**: Reuses SWS client helpers to collapse sequential query calls by orders of magnitude. --- Added native OpenID Connect (OIDC) authentication support for enterprise Single Sign-On (SSO). - **Native OIDC Integration**: Added native OIDC authentication (`auth.mode: oidc`), allowing direct integration with enterprise Identity Providers such as Microsoft Entra ID, Okta, Keycloak, Auth0, and Google Workspace without requiring a reverse proxy. - **Automated OpenID Discovery & Token Verification**: Uses standard OpenID Connect discovery (`.well-known/openid-configuration`), OAuth 2.0 PKCE, and automated JWKS key signature verification to validate user identity claims. - **Group Claim Verification & User Authorization**: Supports optional group claim enforcement (`allowedGroups`) and user allowlist matching (`authorizedUsers`). - **1Password Secret Resolution**: Integrated `op://` reference resolution for OIDC client ID (`clientId`) and client secret (`clientSecret`) settings. - **Environment Overrides & Schema Update**: Supported configuration via `PSLENS_AUTH_MODE` and `PSLENS_OIDC_*` environment variables. Updated configuration JSON schema verification. See [Authentication & Access](/security/authentication-and-access/) and [Configuration](/docs/getting-started/configuration/). --- ### August 8, 2026 — Code & SQL Text Search & Auth Configuration Added full-text search capabilities across SQL and PeopleCode and refined authentication configuration. - **Code & SQL Text Search Report**: Introduced a new report (`code-sql-search`) that allows searching for specific text strings across all stored SQL statements and PeopleCode in the database. Added to the navigation sidebar under Definitions and in the command palette. --- ### August 6, 2026 — Campus Solutions Row-Level Security Integration Added support for Campus Solutions (CS) application-level security tables, user defaults inspection, responsive sidebar toggling, Markdown export integration, and Full User Access Report inclusion. - **Campus Solutions Security Integration**: Added discovery and inspection for 9 Campus Solutions security tables: - `OPR_DEF_TBL_CS`: User Defaults (Institution, Career, Program, Plan, Term, Aid Year, Business Unit, SetID, Campus, Admission Application/Recruiter Center) - `SCRTY_TBL_INST`: Academic Institution Security - `SCRTY_TBL_CAR`: Academic Career Security - `SCRTY_TBL_PROG`: Academic Program Security - `SCRTY_TBL_PLAN`: Academic Plan Security - `SCRTY_TBL_ACAD`: Academic Organization Security - `SCRTY_TBL_STGP`: Student Group Security - `SCRTY_TBL_SRVC`: Service Indicator Security - `OPR_GRP_3C_TBL`: 3C Group Security - **User Detail Page Integration**: Added a dedicated **Campus Solutions Security** panel on User detail pages (`/users/{oprid}`), accessible via an optional toggle switch under **Related Data** in the right sidebar. - **Dynamic Direct Querying & Graceful Degradation**: Direct SWS endpoint querying fetches active security grants in parallel without requiring upfront connection status cache updates. If no CS security tables are whitelisted for a database, an informative guidance card displays candidate table whitelist instructions. - **Full User Access Report Integration**: Extended `SecurityUserAccessReport` to concurrently query and include Campus Solutions row-level security grants in generated Full Access Reports. - **Markdown Export**: Integrated Campus Solutions Security tables into User detail Markdown exports (`/users/{oprid}/export`). - **Documentation & Whitelist Tables**: Updated [Whitelist Tables](/docs/getting-started/whitelist-tables/) documentation with Campus Solutions security table requirements. See [Campus Solutions Security](/docs/security/campus-solutions/). --- ### August 1, 2026 — COBOL SQL Statements (`SQLSTMT_TBL`) Added COBOL SQL statement discovery and inspection to Record detail pages (`/records/{recname}`). - **COBOL SQL Statements Panel**: Sourced from `SQLSTMT_TBL`, this panel displays stored SQL statements (`PGM_NAME`, `STMT_TYPE`, `STMT_NAME`) used by COBOL programs that reference the record in statement text, program names, or statement names. - **Syntax Highlighting & Type Badges**: Displays formatted SQL statement text with syntax highlighting alongside color-coded badges for statement types (`Select`, `Update`, `Insert`, `Delete`). - **Markdown Export**: Integrated COBOL SQL statements into Record Markdown exports for documentation and offline review. - **Whitelist Table Requirements**: Added `SQLSTMT_TBL` to system table requirements and [Whitelist Tables](/docs/getting-started/whitelist-tables/). See [Records](/docs/objects/records/). --- ### August 1, 2026 — Process Definition Recurrence History & Schedule Variance Added recurrence execution history analysis and start delay variance visualization to Process Definitions (`PRCSDEFN`). - **Recurrence History & Variance Panel**: Automatically analyzes process requests in `PSPRCSRQST` executed via recurrence schedules (`RECURNAME <> ' '`). - **Start Delay Variance (`BEGINDTTM - RUNDTTM`)**: Calculates and displays schedule latency, comparing target scheduled run times against actual execution start times. - **Aggregate KPI Metrics**: Displays summary metrics for Total Recurring Runs, Average Start Delay, Maximum Start Delay (with instance reference), and On-Time Rate percentage. - **Visual Delay Breakdown**: Progress bar categorizing runs into On-Time (≤ 1m), Minor Delay (1-5m), and Significant Delay (> 5m). - **Historical Run Log**: Detailed table listing process instance numbers, recurrence schedule links (`/recurrences/{recurname}`), scheduled run times, actual start times, color-coded variance badges, execution durations, run statuses, and executing servers. - **Markdown Export**: Integrated recurrence history summary metrics and recent recurring run logs into Process Definition Markdown exports. See [Process Definitions](/docs/objects/process-definitions/). --- ### August 1, 2026 — File Layout Definitions (`PSFLDDEFN`) Added full metadata browsing, definition hierarchy visualization, and Markdown export for PeopleSoft **File Layout** definitions. - **New Object Handler**: Dedicated File Layouts browser at `/filelayouts` and detail page at `/filelayouts/{flname}`. - **Definition Hierarchy (App Designer View)**: Visual tree representation mapping parent-child segment hierarchies (`PSFLDSEGDEFN` via `FLDSEGPARENT`), field data types (`PSFLDFIELDDEFN`), start positions, lengths, and date formatting masks. - **Related Data Sidebar Toggles**: On-demand SSE toggles for Application Designer Projects (`PSPROJECTITEM` where `OBJECTTYPE = 31`) and PeopleCode Cross-References (`PSPCMNAME`). - **PeopleCode Cross-References**: Discovery of all PeopleCode programs referencing the File Layout via `PSPCMNAME`. - **Markdown Export**: One-click Markdown export (`/filelayouts/{flname}/export`) generating structured documentation with ASCII definition hierarchy trees, projects, and PeopleCode references. - **Global Search & Navigation**: Integrated into the `⌘K` command palette and sidebar under **Definitions**. - **Whitelist Table Requirements**: Added `PSFLDDEFN`, `PSFLDSEGDEFN`, and `PSFLDFIELDDEFN` to system table requirements and [Whitelist Tables](/docs/getting-started/whitelist-tables/). See [File Layouts](/docs/objects/file-layouts/). --- ### July 31, 2026 — Hot-Reload Configuration & SWS Whitelist Management Enhanced live NATS KV configuration management and database connection synchronization. - **Live Config Hot-Reload**: Real-time NATS KV configuration updates for database connections, alert thresholds, and notification rules without restarting the server. - **Air Hot-Reload File Guard**: Excluded `config.yaml` from live-reload file watchers to prevent infinite build loops during automated config sync. - **Report Link Generation**: Standardized deep-link URL generation across security and object comparison reports using `appBaseURL`. - **SWS Whitelist Discovery**: Updated `CHG_PSLENS_WL` runtime discovery to validate table authorizations on startup. See [Configuration](/docs/getting-started/configuration/). --- ### July 28, 2026 — Component Record Hierarchy & Menu Market Metadata Expanded component data hierarchy analysis and menu item metadata inspection. - **Component Record Hierarchy**: Enhanced the `/components/{compname}` record hierarchy panel with scroll levels, page access types, and updatable record identification. See [Components](/docs/objects/components/). - **Menu Market Metadata**: Added Market metadata parsing to menu item detail views for cross-market navigation analysis. --- ### July 27, 2026 — Search Definitions, DDL Parameters & Granular Page Security Introduced Search Definitions browsing, database DDL parameter inspection, 1Password secret resolution, and granular item-level security grants. - **Search Definitions (`PSPTSF_SD`)**: New metadata browser for Search Framework definitions, document category attributes (`PSPTSF_SD_DCATR`), search categories (`PSPTSF_SRCCAT`), and OpenSearch/Elasticsearch index mappings. - **Database DDL Storage Parameters**: Added DDL parameter inspection (`PSRECDDLPARM`, `PSIDXDDLPARM`, `PSSPCDDLPARM`) to record detail pages (`/records/{recname}`) for Oracle, SQL Server, and DB2 table storage verification. - **Item-Level Page Security (`PNLITEMNAME`)**: Added `PNLITEMNAME` field resolution across `PSAUTHITEM` security queries to detect page-item-level authorization overrides in Permission Lists. See [Permission Lists](/docs/security/permission-lists/). - **1Password Secret Resolution**: Native resolution of `op://` secret references in database credentials and SMTP notification settings. --- ### July 22 - 23, 2026 — Infrastructure Enhancements Optimized container deployment options and background notification delivery. - **SMTP Notification Pipeline**: Upgraded background notification delivery and retry logic for scheduled audit report distribution.