v0.10.0

[0.10.0] - 2026-07-22

Fixed

• Resolved user-scoped configuration and component paths through native Windows
  profile variables when HOME is absent, so commands such as
  a3s install webview work in PowerShell and clean Windows CI environments.
• Pinned managed sandbox release verification to the x64 macOS 15 runner that
  still provides Seatbelt, explicitly provisioned its ripgrep dependency, and
  added pull-request coverage for both packaged and first-use behavior. The
  first-use compatibility patcher now also recognizes macOS's symlinked
  temporary-directory paths and ships inside the crates.io package.
• Restored executable permissions for the managed sandbox CLI and native
  seccomp helpers after GitHub artifact transport, and now reject release
  archives that contain non-executable Unix sandbox components.
• Ordered mandatory Linux sandbox child mounts before A3S's stricter parent
  denies and collapsed mounts that converge on the same missing ancestor,
  preventing bubblewrap startup failures in both bundled and first-use managed
  sandbox installations. The runtime's immutable seccomp helper also remains
  readable when the surrounding user home is hidden, without weakening either
  policy boundary.
• Made local Claude Code, Codex, Kimi Code, and WorkBuddy account discovery
  fall back to the native Windows user profile when HOME is unset. WorkBuddy
  now locates its bundled CodeBuddy CLI through standard Windows installation
  directories and registered uninstall metadata, including custom install
  locations.
• Made official installers accept both legacy archives and complete 0.10
  bundles. Web assets, the WebView companion, and managed sandbox support now
  activate as one rollback-safe installation, while transient Windows download
  failures receive bounded retries.