Added

• NTLM authentication with DOMAIN\user and password on every platform,
  including Linux and macOS (extra.ntlm, "Use NTLM" checkbox).

Changed

• Upgrade Microsoft's mssql-tiberius-bridge to 0.3.0 and mssql-tds to 0.4.0.
• Update OpenSSL, UUID and the EXPLAIN parser's development dependencies.

Security

• Document an audit exception for RUSTSEC-2026-0441: pin-utils is
  unmaintained and has no patched release. It is pulled in by sspi through
  async-dnssd on macOS/iOS; the plugin does not use its pinning macros
  directly. Revisit the exception when those upstream dependencies migrate.
  The transitive maintenance risk remains accepted (#63).

Download the archive for your platform below. The EXPLAIN parser is published as @tabularis/[email protected]. Requires Tabularis 0.25.1-5 or later. macOS packages require macOS 10.15+ on Intel or macOS 11+ on Apple Silicon.

Full changelog: v1.0.0-beta.4...v1.0.1

Requires Tabularis 0.25.1-5 or later. This beta ships the protocol fixes previously available only on main.

Changed

• Upgrade Microsoft's mssql-tiberius-bridge and mssql-tds to 0.2.0 (#38).
• Update Tokio, UUID, serde_json and the EXPLAIN package's development tools.
• Declare the stable plugin id and display name in the registry manifest (#43).

Fixed

• Correct LOGIN7 Unicode field lengths through the protocol upgrade, allowing
  non-ASCII login names and passwords (#51).
• Support explicit transaction batches, including minimal BEGIN TRANSACTION; COMMIT TRANSACTION;, through the protocol upgrade (#44).
• Preserve SQL Server runtime errors followed by result sets (#37, #39).
• Read triggers and metadata on databases below compatibility level 110 (#34).
• Explicitly include Node types when checking EXPLAIN tests with Vitest 5.

Tests

• Add live JSON-RPC regressions for committed transaction batches and Unicode
  authentication across disable, preferred and require TLS modes.

Validation

• 221 Rust unit tests, 3 host-model conformance tests and 34 live SQL Server integration tests.
• 13 EXPLAIN parser tests, 2 connection UI tests, declaration and browser bundle builds.
• Formatting, Clippy, security audit, manifest validation and Markdown lint.
• Optimized macOS release binary tested through JSON-RPC for Unicode authentication and explicit transactions.

Dependency updates: #45, #46, #47, #49, #52 and #53. TypeScript 7 (#16) is deferred because the declaration builder is incompatible.

Full comparison

SQL Server Generate SQL and pagination fixes

Requires Tabularis 0.25.1-5 or newer. Update both Tabularis and this plugin.

Recommended host: Tabularis nightly 0.25.1-6 or newer, or the next stable release. macOS users must use -6 or newer: the -5 bundles incorrectly report Rust runtime 0.25.0 and reject this plugin. The packaging bug is fixed in Tabularis #835.

The matching host changes are in Tabularis #818.

Fixed

• Generate SQL → SELECT fields now emits SQL Server SELECT TOP (100) instead of LIMIT 100.
• Queries with an explicit outer TOP or OFFSET/FETCH are no longer rewritten with conflicting host pagination. This applies to individual queries and batches; ordinary unbounded SELECTs retain automatic pagination.

Added

• Driver-owned SELECT, UPDATE and DELETE previews with schema-qualified, bracket-escaped identifiers.
• Unique editor :value_N placeholders for UPDATE, including similarly named columns.
• WHERE 1 = 0 guards for UPDATE/DELETE previews. Preview generation itself never executes SQL.
• Live regression coverage and a reusable desktop end-to-end checklist.

The CREATE TABLE inspection tab is unchanged. On tables with IDENTITY/computed columns, remove read-only assignments before executing an UPDATE preview.

Validation

218 Rust unit tests, 3 host-model conformance tests and 29 live SQL Server integration tests passed. EXPLAIN parser and connection UI typecheck/tests/build, formatting, Clippy and Markdown lint also passed.

Closes the plugin side of #26; the complete fix requires the matching Tabularis host.

Distribution

The platform archives include the native executable, manifest, connection UI and EXPLAIN parser bundle. @tabularis/explain-sqlserver is version-aligned at 1.0.0-beta.3.

Tabularium already indexes beta.3, all five platform archives, the minimum runtime and the table_query_templates capability. Its live driver-kind schema now correctly declares capabilities.table_query_templates as an optional boolean with default false, matching the published manifests.

What's new

• Windows/Kerberos authentication via SSPI/GSSAPI, with a plugin-owned Use Windows Authentication checkbox. Integrated authentication is also available through Integrated Security=True or Trusted_Connection=True in connection strings. Thanks to @egertaia for the implementation and Windows SSPI testing! (#25)
• SQL Server metadata comments for tables and columns. (#24)
• Saved integrated-auth connections now hide credential inputs when reopened. SQL and integrated authentication use separate pool-cache keys, and mixing integrated authentication with a username/password is rejected.
• Command Timeout is accepted in connection strings as a client-side no-op; the plugin's query-timeout setting remains authoritative.

Compatibility

Requires Tabularis 0.24.1-2 or later, first available in nightly-20260918-992d969. Stable 0.24.0 and the September 17 nightly do not include the required credential-hiding/keychain behavior.

Windows authentication uses the current Windows identity. Linux/macOS integrated authentication requires a working Kerberos environment and a valid ticket (for example, obtained with kinit).

This is a beta release. The plugin archives include the connection-modal UI extension and the EXPLAIN parser bundle.

Full changelog: v1.0.0-beta.1...v1.0.0-beta.2