Release Bolt 0.1.153 · SparcleHQ/sparcle.app

Bolt 0.1.153

Full mode opens at the actual size of your work area. It used to open at a fraction of the screen, which on a large display left a visible margin that looked like a bug.
Your window geometry survives a restart. Full mode could lose its size and position on quit; Bolt now flushes the geometry as it exits, including the paths that restart the app rather than quitting it.
On more than one display, Bolt resolves the right monitor at startup. Reopening on a secondary screen could clamp the window against the wrong display's bounds.
Zen and Full keep separate geometry. Switching between them no longer drags one mode's size onto the other, and the switch itself no longer animates through an intermediate size.
Switching modes hides the reflow. The content is veiled for the moment the native window is resizing, so you see the new layout rather than the page rearranging itself.

The default zoom now accounts for your screen. On smaller or lower-resolution displays Bolt starts at a readable size instead of one tuned for a large monitor.
Full mode on an ultrawide no longer stretches every surface edge to edge. Reading width is constrained where it helps — the chat column — and left alone everywhere else.
The chat composer lines up with the messages above it.
The left rail has one width authority instead of two that could disagree, which is what made it appear to jump.

Severity decides whether a file interrupts you at all. A low-risk finding no longer stops what you are doing the way a serious one does.
Three visually distinct states, and red only means a refusal. A warning no longer looks like a block.
A slow scan reads as slow, not as a block. There is a latency budget, so waiting on a scan is visibly waiting rather than looking like a refusal.
Picking several files at once keeps all of them. A multi-file selection used to be replaced by the last pick instead of reconciled with it.
An oversize file is no longer released and painted red at the same time — it said "blocked" while letting the file through.
The file guard now covers the same ground as the typing guard, including the corporate-host exemption, rather than protecting one path and not the other.
Where a Block cannot reach is stated at the point an administrator chooses it, instead of appearing to cover everything.
The extension's own input guard uses Bolt's in-page notice rather than a native browser dialog.

Sending something to Bolt from the browser now hands over the file itself, not just its name, through a single-use staging handle. What Bolt scans is what you sent.

The header no longer grows and shrinks as you focus and unfocus the search bar. Settings has moved into the avatar menu, and the avatar is always visible at a fixed width instead of sliding out of a drawer.
The avatar sits inside the input card rather than floating outside it.
Search ranking no longer breaks ties alphabetically by internal id, which had let one kind of result quietly outrank another for no reason a person would recognise.
What you picked last time wins a tie. When two results match a query equally well, the one you chose before is preferred, so typing password settles on the thing you actually meant.

Updating Bolt no longer depends on reaching Apple at install time. The update package now carries its own notarisation ticket, so it installs on a Mac that is offline or on a restricted network instead of being refused.
"Open in Bolt" carries the file again. The endpoint that redeems a handed-over file was unreachable, so every attempt reported "That file was not carried over". File preview was affected the same way.
Bolt installs without administrator rights on all three platforms.
The pinned-shortcuts rail scrolls by click-drag outside edit mode.
The Zen/Full minimum-size floor scales with your zoom level, so a zoomed view no longer fights the window's lower bound.
Clicking an option in a searchable dropdown does something again. In lists long enough to show the filter box, the click was being swallowed.
The window controls no longer sit on top of a note's title, and Zen mode respects auto-hide.
App results in search are typed correctly, so a .app is presented as an application rather than a folder.

Your own name and address are no longer flagged as someone else's personal data, and a job title next to a name no longer swallows the name itself.
Role addresses at known vendors (support@, billing@ and similar) stop being reported as personal data.
A file with a part we could not read is no longer treated as fully scanned. If an attachment contains an encrypted or corrupt section — a password-protected file inside a zip, say — Bolt now reports exactly that and holds the file as unscreened, instead of clearing it on the strength of the parts it could read.
Incident records are scoped to your own organisation — a read can no longer return another tenant's rows.
Our compliance documentation now describes SAML support as partial, in all three places that previously overstated it.

Server-assembled prompt context is now scanned at the same chokepoint as everything else, so text the server adds to a request is inspected rather than assumed safe.
The hybrid scanner forwards its refusal tier correctly instead of downgrading it.
Bolt's desktop posture degrades a governance-pack refusal to a warning rather than a hard stop.
The app's authoritative DLP posture is served to the extension, so the two cannot disagree about what is enabled.
Security: the legacy TLS stack was removed from the build and the remaining certificate-verification library unified on a single current version, clearing four advisories (RUSTSEC-2026-0049, -0098, -0099, -0104).
Faster startup app search on macOS, which now also finds the system utilities kept outside the normal Applications folder.