CloudZero Desktop Agent 0.2.5

0.2.5 (2026-07-23)

Release 0.2.5 hardens managed (MDM) deployments: the app now adopts an MDM-provisioned proxy configuration instead of overwriting it, uninstall leaves that managed configuration intact, and administrators can uninstall unattended. It also fixes a case where Identity edits could be lost when quitting the app.

New Features

• Unattended uninstall for managed fleets: Administrators can now remove the app without any user interaction, suitable for MDM-driven removal across a fleet. Run the app binary with --uninstall --silent; add --force to continue past individual step failures rather than stopping at the first one. The interactive uninstall wizard is unchanged for end users.

Bug Fixes

• Managed proxy configuration is adopted, not overwritten: On Macs where the transparent-proxy configuration is delivered by an MDM configuration profile, the app now uses that managed configuration as-is instead of replacing it with its own. Managed users are no longer re-prompted to approve a proxy the administrator already provisioned.
• Managed proxy configuration is preserved on uninstall: Uninstalling on an MDM-managed Mac no longer removes the proxy configuration delivered by the configuration profile. The app removes only a configuration it created itself, so a later reinstall silently re-adopts the managed one with no new prompt.
• No orphaned proxy configuration left behind: Fixed a case where uninstalling could leave a disabled "CloudZero AI" transparent-proxy entry behind in Network settings instead of removing it cleanly.
• Identity edits are saved immediately: Email and Department changes on the Identity screen are now saved as you type. Previously an edit could be lost if you quit the app directly from one of those fields without first clicking away.

Improvements

• Reduced detail in captured request context: Trimmed the free-text work detail that could be included alongside captured requests, so less incidental content leaves the device.
• Improved debug logging: Debug logging now lists proxy processed by bypass paths for enhanced understanding of when we do not perform inspection on a given domain name + endpoint.