16.4.2

CE-Deploy 16.4.2

CE-Deploy 16.4.2 brings reliability and security improvements across device management, workspace CSV workflows, MacroFactory, QR tools and network diagnostics. It also includes the redesigned PhonePilot and other features introduced in 16.4.1.

Upgrade guidance

16.4.1 has been withdrawn from recommendation after a reproducible Windows startup error (Clipboard service dependencies are unavailable) and reports of processes remaining after exit. On the same Windows machine, the installed 16.4.2 application launched successfully and passed repeated shutdown/restart checks without lingering processes. This is owner-reported verification on that machine; the precise cause of the 16.4.1 failure has not been established, and no specific clipboard or shutdown correction is claimed.

Reliability improvements

• Workspace CSV: added header mapping and downloadable templates, and repaired authorization for selected CSV attachments.
• Organizations and device sessions: prevented duplicate cloud organization records and isolated device-session ownership across renderer windows. Cloud bulk commands stop for offline endpoints, with improved disposal of device logs.
• MacroFactory: preserved macro active state across inventory views, distinguished enabled state from runtime-reported activity, and added conditional guidance when an enabled macro is not reported running. Extensive owner smoke testing was completed.
• Forge AI: repaired provider integration and enabled OpenAI with isolated provider testing.
• Image exports: restored selected-image Base64 conversion and verified large Base64, Data URI and HTML clipboard exports before reporting success.
• QR backgrounds: reject malformed, unsupported, oversized or non-fitting backgrounds before output creation, with validation repeated in the main process. PNG/JPEG backgrounds support up to 20 MiB, 8,192 pixels per side and 16 million pixels total. Open Folder now reports success or failure and prevents duplicate clicks while pending.
• SCEP: restored enrollment and added a focused test harness.
• Support: updated application support and community links to Discord.

Security and network diagnostics

• Render imported, device-provided and AI-generated content safely across macro logs, CSV previews, configuration baselines, inventory drawers, deployments, SCEP, webhooks, organizations, UI extensions, scheduled jobs and phonebooks.
• Restrict child-window access to stored secrets; remove credentials from diagnostic logs and recent terminal history.
• Verify cloud TLS certificates while retaining explicit proxy exceptions and visible errors.
• Verify SSH device identity before authentication, prompt for first-use fingerprint approval, persist approved host keys and reject changed keys.
• Route HTTP connectivity checks through the configured application proxy transport. A failed local DNS lookup no longer overrides a successful HTTP probe when the proxy can resolve the destination. This corrects the diagnostic inconsistency; it does not establish the cause of every endpoint-action failure reported in support issue #12.
• Add telemetry safeguards and automated checks. These notes do not claim verification of a hosted telemetry deployment.

Included from 16.4.1

• Redesigned PhonePilot Control and Diagnose workspaces with live call/SIP diagnostics, session timelines, screenshot history, privacy-aware evidence exports and Pro or Partner Plus access enforcement.
• Selective device-tag removal that preserves unselected tags, repaired Partner deployment modal lifecycles and organization action menus, and a CE-Deploy-branded browser sign-in confirmation.
• Bounded Environmental Intelligence polling and the lightweight Living Building signage view.
• Electron 44.4.3, development credential isolation and acquisition telemetry transition improvements.

Downloads and verification

Release assets include universal macOS DMG/ZIP packages for Apple silicon and Intel, plus a Windows x64 installer and portable executable.

Verification includes 1,970 Electron-Mocha unit tests, 124 security cases, production webpack compilation, focused regression tests and owner smoke checks for proxy diagnostics, SSH trust and QR workflows. Windows installed-app launch and repeated shutdown/restart were verified by the owner. Live corporate-proxy reproduction and broad Windows hardware coverage are not claimed.

These notes cover source changes after the 16.4.1 boundary dd4132e8 through 14317e05, and carry forward the 16.4.1 feature highlights.