This repository was archived by the owner on Sep 13, 2026. It is now read-only.
v1.3.8
·
47 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Fixed
- RFC 9207 issuer validation in
neus setup/neus auth. The CLI now validates theissparameter returned in the OAuth authorization response against the expected NEUS issuer (https://neus.network), preventing authorization-code interception via a malicious authorization server spoof. Paired with the protocol'sauthorization_response_iss_parameter_supportedadvertisement in authorization-server metadata. - Builder guidance rebalanced across all IDEs.
neus setupoutput now gives accurate, client-specific next steps for Cursor, Codex, Claude Code, and VS Code — no more Cursor-only bias in the post-setup instructions. - Removed legacy
neus-trustplugin fallback detection. The CLI no longer probes for the retiredneus-trustplugin name.
Upgrade
npm i @neus/sdk@1.3.8
# or zero-install
npx -y -p @neus/sdk@1.3.8 neus setup
npx -y -p @neus/sdk@1.3.8 neus doctor --live