16.5.0

CE-Deploy 16.5.0

16.5.0 introduces the read-only command-line interface for terminal users and
local AI tools. Enable selected organizations in Settings → General → CLI Read
Access, then start the local gateway. CE-Deploy must stay running.

Read-only CLI

• Discover devices with provider connection status, product and type where available.
• Select the organization explicitly, independently of the app's selected organization.
• Read catalog-backed xAPI Status and Configuration leaves or wildcard trees.
• Submit fleet queries and retrieve incremental, disk-backed pages with progress,
  resumable cursors, cancellation and complete outcome accounting. There is no
  fixed endpoint-count limit; paging controls delivery size.
• Use the bundled AI guide and exported skill, with version compatibility checks,
  plus xAPI search/schema commands. AI chooses the evidence and interprets it;
  CE-Deploy authorizes and executes admitted reads.
• Copy commands and prompts from built-in Docs; long examples wrap to fit.

Other fixes

Workspace Designer can use GPU/WebGL rendering again in its sandboxed community
window. Documentation examples are easier to copy and read.

Reliability improvements since 16.4.3

• Standardize CSV and JSON save workflows across inventory, dashboards, macro tools,
  certificates, phonebooks, templates and history, with clearer save outcomes.
• Correct deployment and cancellation counts in summaries and history, improve
  saved-password recovery, and keep immediate deployments out of the scheduler panel.
• Improve Macro and Button Factory editing, organization ownership, drift review
  and device-update feedback.
• Stop phonebook Replace additions when the required clearing step fails; retain
  edited contacts through target selection, cancellation and summary dismissal.
• Report unread devices as unknown in Config Auditor and inventory rather than
  implying fleet-wide success or compliance.
• Keep Tag Schema preview controls working after edits, preserve existing tags in
  Merge mode, and support an intentionally empty Replace.
• Improve Dashboard and Certificate Inventory recovery and organization context;
  refresh SCEP macro profiles and report generation/copy failures clearly.
• Improve Action Button, Wi-Fi Provisioner and Environmental Intelligence operation
  cleanup and device-operation deadlines.

Security maintenance

Strengthen credential protection in exports, logs and inventory workflows, and
keep child-window operations bound to their initiating organization. The new CLI
uses explicit grants, authenticated local access and read-only query admission.

Access and limitations

The gateway currently uses a 30-minute session. Grants persist, but access requires
an enabled running gateway. Its settings display now resets automatically at
expiry. CLI skill installation is optional and grants no device access itself.

Device changes and production xCommands are disabled. Sensitive/unknown values
are withheld; missing evidence and failed reads remain explicit. Complete fleet
accounting does not mean every endpoint returned usable data. Query handles do
not survive app restart. Windows/signed-package and live transport qualification
must be completed for the release platforms before publication.

Configurable session lifetime, unattended scheduled reads and optional writes are
future roadmap items and are not included in 16.5.0.

Get started

Open Docs → Organizations and Access → Command Line and AI Access for manual
terminal setup, first-time skill prompts and examples. Settings → General → CLI
Read Access controls gateway and organization access.

Packages

The draft contains universal macOS DMG/ZIP packages and Windows x64 installer
and portable packages. Public downloads will be available from the
16.5.0 release
after publication. Until then, use the
current public downloads.