OpenFrame v1.5.0 - M365/Google Workspace, Software Management, AI Incident Detection & Remote Access Permissions

Manage Exchange, Teams, SharePoint, and Microsoft Graph from OpenFrame - license management, security posture monitoring, compliance tracking, and automated user provisioning for M365 tenants.

Unified visibility and control over Gmail, Drive, Calendar, and Admin APIs, with automated user lifecycle management, license assignment, and security alert monitoring.

Centralized log aggregation with machine learning-based anomaly detection, behavioral baselines, and context-aware alerting across all OpenFrame services and device logs.

Request-and-approve attended sessions plus pre-approved unattended access, with visible session indicators and notifications so end users always know who's connected and why.

Install, upgrade, remove, and keep software up to date on Windows and macOS endpoints using Chocolatey, winget, and Homebrew - all from the OpenFrame UI.

Technicians had to re-explain context since the AI agent couldn't retrieve prior sessions or earlier scripts.

Mingo reported no browsing capability despite web search being enabled, due to a toolset wiring gap.

Updater script used PowerShell features unavailable on PS 3.0, blocking legacy server updates.

Users could not complete the permissions flow, leaving required permissions ungranted.

Long or complex conversation compactions failed in production due to an insufficient timeout.

Offline clients applied queued update messages out of order, reverting to older chat versions on reconnect.

Reinstalls failed to complete when a file handle blocked deletion of the mesh install directory; the client now detects and resolves the lock automatically.

A race between service start and binary write caused valid updates to be marked failed on Windows (os error 32).

Tickets board and client chat failed to mark messages as read while a conversation was already open on screen.

A client reply matching the technician's prior message vanished from the Fae chat view.

Messages received while a technician was away from a ticket appeared twice upon reopening.

Backup and recovery copies (.lkg, .prev, .old, .bak) and temp scripts were not cleaned up on uninstall.

A stuck process caused the client to exit without triggering Windows service recovery, leaving endpoints dark.

/opt/orbit directory and keys persisted after uninstall, causing hosts to remain in the old tenant after reinstall.

Failed Fleet ID registration attempts leaked an orphaned osqueryd process roughly every 5 minutes.

Clicking the number and time-ago text on a ticket card failed to open the ticket.

Cards in the AI Handling lane briefly showed an assign button that should never appear there.

Direct links to Device Guardrails landed on the default tab due to a feature-flag loading race condition.

Avatar URLs built from an internal tenant hostname failed to resolve in the browser, falling back to initials.

Broader structured and unstructured log collection across OpenFrame components feeds the new analyzer and improves overall diagnostic visibility.

Added a 'Compact Context' button so users can manually summarize and reset stale conversation context on demand.

Broke up large god classes in the AI service into smaller, focused components for easier maintenance.

Settings → Usage now surfaces payment and plan status alongside existing usage counters.

Third-party integrations can now read, search, and retrieve knowledge base articles through the public API.

Sensitive values like API keys and tokens can now be stored encrypted for use in scripts instead of plain text.

A visible on-device indicator and end-user approval prompt now accompany every MeshCentral remote session.

Enrollment commands now track the technician's employee ID, surfaced on the Device Details page.