Release v0.62.12
Apr 11, 2026
Major release: macOS login-window remote control, enrollment short links, file browser timeout UX, and a deep tenant isolation pass.
Remote Management
- macOS remote desktop now works at the login window — you can sign in remotely without anyone being logged in at the console.
- Smarter input handling that automatically switches between input modes when the user logs in or out, so keyboard and mouse keep working through session changes.
- macOS Screen Sharing is now only disabled by Breeze when explicitly enabled by Configuration Policy, leaving customer-managed VNC setups untouched.
- Remote desktop helper is more resilient to reconnect storms when the network flaps.
- Deterministic copy-paste between viewer and remote with explicit acknowledgement, fixing silent failures.
Deployment & Enrollment
- Short, shareable enrollment links: send a single short URL like /s/abc123 to install on any platform — the right installer is delivered automatically with one-time-use enforcement.
- Hidden PowerShell window flash during MSI custom actions for a cleaner installer experience.
- Better forensic error messages when enrollment fails inside the MSI installer.
Security & Compliance
- Comprehensive tenant isolation hardening across device inventory, security/patch data, file system data, sessions, executions, admin tables, user-scoped data, and partner/organization roots — every tenant table is now enforced at the database layer in addition to the application.
Web App
- Running a script from a device page now prompts you for any required parameters before executing.
- Partner Settings now has a Company tab for managing partner-level details.
- Partner context is correctly seeded from your login token when switching organizations.
Reliability
- Fixed a heartbeat starvation issue that could cause agents to look offline under heavy load.
- Audit logs are now written outside the request transaction so a failed write can't roll back the original action.
This is a major release. The headline features are macOS remote desktop at the login window (so you can sign in to a Mac with no one at the keyboard) and short, shareable enrollment links that send the right installer to any platform from a single URL.
Behind the scenes we also completed a sweeping tenant isolation pass that hardens every database table at the row level, on top of the existing application checks. This is invisible to most users but is foundational for the multi-tenant guarantees MSPs depend on.
Smaller wins: the script execution flow now prompts for parameters before running, partner branding gets a dedicated Company tab, and a long list of remote desktop and clipboard polish items.