Platforms

Notes

- Added macOS desktop Exit Node support through the packaged VPN provider. - Added remembered Exit Node selection per account so the app restores the last choice after sign-in. - Fixed single sign-on redirects so trailing slashes in the controller URL no longer break login. - Improved node info location updates so the app keeps showing stable location data while routes change. - Improved macOS connect and disconnect handling so approval, reconnect, and logout flows stay in sync.

Platforms

Notes

- Added MFA checks before Connect so the desktop app waits for successful verification before starting the VPN. - Added MFA enrollment and verification screens with English and Vietnamese copy, QR setup, and clear error messages. - Added MFA verification status reporting so access policies can recognize a successfully verified session. - Preserved existing device registration behavior while adding MFA before connection. - Improved MFA cleanup on logout, app close, and sign-in failures so stale verification state does not carry over.

Platforms

Notes

- Improved VPN recovery when the VPN daemon restarts or temporarily becomes unreachable, reducing unnecessary logout loops. - Kept the Reconnecting state visible until controller, network, and VPN health checks have all recovered. - Fixed internet recovery status so the app no longer shows Connected while another recovery issue is still active. - Keep macOS user data writable after pkg upgrades.

Platforms

Notes

- Controller reachability check no longer rolls back a healthy tunnel on a transient probe failure. The agent resolves the controller hostname via a public DNS chain so a tunnel-pushed resolver outage no longer blocks connect. - Fixed an intermittent login / register failure that surfaced as "error reading response body: context canceled" on busy networks. - "Trust this certificate?" prompt only fires for genuine certificate-trust events (unknown CA, hostname mismatch, invalid cert). Transport failures (DNS, TCP, timeout) route back through the reconnect loop. The prompt also cancels cleanly on Disconnect / Reset / Logout, fixing a stale rejection that could disconnect a healthy session seconds after connect. - Clearer "Internal DNS unavailable" notification when the network's internal DNS server cannot be reached through the VPN; clears automatically once the resolver is back. - VPN auto-recovers after a background service restart instead of flipping to Disconnected — no manual reconnect needed. - Fixed a stuck white window on app close when the renderer was unresponsive; the app now force-quits after a short probe timeout.

Platforms

Notes

- Watchdog pipe communication is now cryptographically authenticated to prevent impersonation attacks. - Resolved a critical update UI hang on slow networks and low-CPU machines — the update progress no longer gets stuck. - macOS runtime paths unified under a consistent namespace for cleaner behavior and better compatibility. - Unix runtime directory permissions corrected on upgrade to ensure proper accessibility. - Fixed stale WireGuard session state before force re-authentication to prevent lingering connection issues. - Small stability and reliability improvements across all platforms.

Platforms

Notes

- Fixed connection startup to fail fast with a clear controller outage message instead of hanging or showing internal probe details. - Restored immediate posture enforcement after VPN connection and prevented stale controller auth keys from crossing registrations. - Improved Windows posture collection reliability and crash handling so disconnect state is reflected correctly in the UI. - The app now tears down the VPN tunnel promptly when exiting. - Strengthened watchdog safeguards around local process verification, background health checks, and service recovery. - Fixed a macOS issue where the VPN service could get stuck in a reinstall loop — connections now recover cleanly. - The agent now restores itself automatically if its background service record ever goes missing, so you no longer need to reinstall when that happens. - Improved stability of background processes with smarter restart behavior under intermittent failures. - Crisper system tray icon on macOS — smaller, better proportioned, and sharper on high-DPI (Retina) displays. - Improved Windows posture check reliability by preserving complete process evidence while keeping startup-safe fallback collection paths. - Faster network fallback behavior during connectivity recovery, reducing fallback transport delay to improve responsiveness. - Added clearer watchdog timing diagnostics around local process collection to improve troubleshooting on slower machines. - Small polish and reliability improvements under the hood.

Platforms

Notes

- VPN connection is now faster and more reliable — the agent manages connections natively without depending on external command-line tools. - Permission and login issues on Linux, macOS, and Windows have been resolved so connecting works smoothly out of the box. - Critical updates are now downloaded in the background and installed automatically when you quit the app, so you always stay on the latest version. - Improved security across the app to better protect against malicious content and unexpected crashes. - Refreshed system tray icon — now matches the app icon, with clearer visibility for connected and disconnected states. - Better stability under unexpected conditions: the app keeps running gracefully when something goes wrong instead of crashing. - Various small fixes and polish to deliver a smoother day-to-day experience.

Platforms

Notes

- WebSocket handler hardening: panic recovery shims on all goroutines processing external input, preventing a single malformed message from crashing the agent. - Fixed white screen on force-logout when the WebSocket connection is already broken. - Fixed spurious ERR_ABORTED and sub-frame errors surfacing as fatal did-fail-load events. - Improved node registration reliability with increased timeout. - Posture v2: self-healing Bootstrap when token is expired or burned — agent recovers without manual reconnect. - gRPC: stale unary goroutine is cancelled when the node re-registers, eliminating goroutine leaks.

Platforms

Notes

- Posture v2 with signed device reports and encrypted device key storage. - Stronger anti-spoofing for process verification (multi-layered signing checks). - New gRPC unary protocol with automatic TLS probing and TOFU trust for self-signed controllers. - Enterprise/vendor builds now ship via a dedicated release channel with auto-update support. - Reliable logout experience with clear messages when a device is removed or access is revoked. - UI polish: fixed login button jitter, footer alignment, and clipped toolbar icons on macOS/Linux.

Platforms

Notes

- Added support for runtime client configuration updates with automatic token refresh handling. - Improved configuration update reliability with GRPC fallback support when the primary port is unavailable.

Platforms

Notes

- Added support to register the Windows app to launch at startup, with in-app toggle control. - Upgraded the networking core across all platforms for more stable connectivity. - Improved auto-update workflows and installer behavior across platforms. - Enhanced post-update app restart behavior. - Fixed macOS PKG preinstall/postinstall scripts to better detect app bundle paths in Applications and improve install reliability. - Standardize macOS launchd service management

Platforms

Notes

- Fix finished gracefully without crashing on windows - Update tunnel service - Fix passport in agent