LanternOps/breeze v0.62.12 on GitHub

Highlights

File browser timeout UX (#392) — distinguishes "device transiently unreachable" from "device offline" so users get accurate, actionable errors instead of a misleading 30s silent timeout. Bulk-op timeouts on destructive ops (delete/move/purge) now flag results as unverified so the UI can warn users to refresh-and-verify rather than safely retry.
macOS Screen Sharing self-enable tracking (#398) — fixes a regression where the agent was disabling Screen Sharing on tunnel close even when the user (or MDM) had enabled it themselves. The agent now only disables Screen Sharing it turned on itself.

Audit log RLS escape (#396) — createAuditLog no longer runs inside the caller's request transaction. Fixes two latent issues: RLS denials for partner-scope callers writing NULL-org audit rows, and silent rollback of the caller's real work when an audit insert failed inside the request tx.
Agent build on all platforms (#393) — fixes Build Agent failures on linux, darwin/amd64, darwin/arm64, and windows/amd64. Adds a non-Windows stub for switchThreadToInputDesktop and the missing lastDesktopSkipLog field on dxgiCapturer.
Agent slog error serialization (#397) — slog.Warn("error", err) was serializing as {} in 4 sites in the websocket client. Now uses err.Error() so log entries actually contain the error message.

macOS CGEvent session-tap input fallback (#399) — adds a CGEvent fallback path used when IOHIDSystem is unavailable (held exclusively by WindowServer in some TCC states). Login window now reports unsupported_os so the UI falls back to VNC Relay.
Dev-push for breeze-desktop-helper (#400) — POST /dev/push now accepts a component field. Setting component=desktop_helper downloads, verifies, installs, and kickstarts the helper LaunchAgents without bouncing the main agent.

Test mock debt (#394) — fixes 163 test files that were missing withSystemDbAccessContext / withDbAccessContext / .orderBy() / .returning() / redis.get() in their mock factories. Drops Test API failure count from 19 to 11 (the remaining 11 are pre-existing unrelated failures).
CLAUDE.md RLS reference (#395) — comprehensive "Tenant Isolation / RLS" section documenting the five tenancy shapes, the DB context helpers, the workflow for adding new tables, and production rollout guidance.
RLS app role bootstrap (in #392) — autoMigrate self-derives DATABASE_URL_APP and hard-fails on BYPASSRLS/SUPERUSER to prevent silent loss of tenant isolation on self-hosted upgrades. New 2026-04-11-a-rls-function-bootstrap.sql migration unblocks fresh-install ordering for the RLS bucket-C migrations.

Full Changelog: v0.62.11...v0.62.12