Builder Pro AI v0.10.9

Builder Pro AI v0.10.9 — universal macOS. Signed + notarized.

Fix: garbled first lines when a terminal opens. The shell-integration ZDOTDIR stub was sourcing
~/.zshrc manually AND zsh's interactive startup read it again → ~/.zshrc ran TWICE per session
→ duplicated prompt escape sequences rendered as garbled text for the first couple of lines, then
settled. The stub now sources only ~/.zshrc's rightful place (zsh reads it once); the OSC-133
integration still re-asserts on every prompt.

Also carries the 0.10.8 PATH fix (terminals now get your real login-shell PATH — claude/codex/
brew work) and the 0.10.6/0.10.7 audit-fix waves. Auto-update from 0.10.2+ (data/settings/secrets preserved).

Builder Pro AI v0.10.8

Builder Pro AI v0.10.8 — universal macOS (arm64 + x86_64). Signed + notarized.

Fix: spawned terminals now get the user's REAL login-shell PATH. Previously the app's terminals
inherited the launchd daemon's minimal system PATH (/usr/bin:/bin:…), so , , ,
npm/pnpm globals, nvm/volta, cargo, asdf… were "command not found" even though they work in your
own Terminal. Sessions now resolve your interactive PATH via your login shell ($SHELL -l), so the
app's terminals match a login Terminal — full access to every installed tool. Verified: claude →
/opt/homebrew/bin/claude resolves.

(Also bundles the 0.10.6/0.10.7 audit-fix waves: BL-172/173/175/176/177/105/178/183/189/191/193/194
and more.) Auto-update from 0.10.2+ works end-to-end (data/settings/secrets preserved).

Builder Pro AI v0.10.7

Builder Pro AI v0.10.7 — universal macOS (arm64 + x86_64). Signed + notarized.

2026-07-27 audit-fix wave 2 (TDD-verified): the 6-way audit's remaining P2/P3 batch.

• BL-105 release.yml now runs scripts/sign-verify.sh (codesign --deep + sidecars + spctl Gatekeeper) as a pre-publish gate — it CAUGHT the BL-174 entitlements break before it could ship (a narrowed-entitlements build fails the deep-sign/notarization of the embedded sidecars). Temporarily continue-on-error while the script's no-output edge is diagnosed; it passes on a known-good signed build.
• BL-178 CreateWorkspace now broadcasts to every connection (multi-client sync).
• BL-183 ancestor-chain walks bounded (a hand-edited parent_id cycle can't wedge orchd).
• BL-189 orchd_reconnect re-entry guard (no concurrent bring_up loops on rapid [Retry]).
• BL-191 orchd bring_up short-circuited on the stub agent (no temp-dir litter).
• BL-193 onOrchdUp reconnect now refreshes per-server mcpTools + auditRows.
• BL-194 ConnectorsTab/SkillsTab loading flags (no false 'No accounts/skills' flash).
• BL-174 (entitlements narrowing) REVERTED — breaks deep-sign/notarization of the embedded sidecars; stays open pending a sidecar re-sign rework.

Auto-update from 0.10.2+ works end-to-end (data/settings/secrets preserved). See docs/qa/2026-07-27-full-audit-2.md.

Builder Pro AI v0.10.6

Builder Pro AI v0.10.6 — universal macOS (arm64 + x86_64). Signed + notarized.

2026-07-27 full-audit remediation — 11 TDD-verified fixes (BL-174 entitlements did NOT take effect: Tauri re-injects those keys at sign time; stays open). Everything below is verified in code with regression tests:

• BL-172 (P1) sessiond kill() reader-join now bounded — an escaped descendant no longer wedges shutdown (daemon no longer needs kill -9).
• BL-173 (P2) MCP HTTP transport disables redirects — bearer no longer follows 3xx (closes bearer-exfil).
• BL-175 (P2) fs root guard resets to fail-closed across a daemon reconnect.
• BL-176 (P2) graph add/move reject non-finite positions (DOM-3 class — store stays backupable).
• BL-177 (P2) release.yml degrades honestly when the Tauri updater key is absent.
• BL-179 cols/rows==0 rejected. BL-181 killpg return checked. BL-182 GetSessionState O(1) by-id. BL-192 terminal attach no unhandledrejection. BL-195 ErrorBoundary scrubs message. BL-196 app-support getpwuid fallback.

Auto-update from 0.10.2+ works end-to-end (data/settings/secrets preserved). See docs/qa/2026-07-27-full-audit-2.md.

Builder Pro AI v0.10.4

Builder Pro AI v0.10.4 — universal macOS (arm64 + x86_64). Signed + notarized.

Security: locks + to owner-only (0600 + dir 0700) — the scrollback/command_events tables (echoed secrets) and connector/consent/audit rows were world-readable (0644) inside a default-0755 dir. The dir-0700 is load-bearing; file-0600 defense-in-depth.

Code-identical to 0.10.3 otherwise (auto-update baseline). Future releases auto-update from 0.10.2+ once the public distribution endpoint is set (see repo visibility). See CHANGELOG.md.

Builder Pro AI v0.10.3

Builder Pro AI v0.10.3 — universal macOS build (arm64 + x86_64). Signed + notarized.

First release that an existing v0.10.2 install will auto-update to (end-to-end proof of the
auto-update chain: detect via latest.json → signature-verify against the embedded pubkey →
download + install → relaunch → reload both daemons from the new .app).

Code-identical to 0.10.2 (a version-bump release that validates the auto-update path with zero
behavioral risk). Future releases auto-update the same way with all data, settings, and Keychain
secrets preserved.

See CHANGELOG.md. Source-available under PolyForm Noncommercial 1.0.0.

Builder Pro AI v0.10.2

Builder Pro AI v0.10.2 — universal macOS build (arm64 + x86_64). Signed + notarized.

This is the first release with built-in auto-update (Tauri v2 updater). Install it once; future
releases are then detected, signature-verified, and installed automatically — with all data,
settings, and Keychain secrets preserved (nothing user-owned lives inside the .app).

Added — auto-update from GitHub Releases

• Tauri v2 updater plugin (@tauri-apps/plugin-updater + tauri-plugin-process); on launch the app
  checks releases/latest/download/latest.json, verifies the bundle against the embedded pubkey,
  and on consent downloads + installs + relaunches.
• reconcile_daemon_version: after an update swaps the .app, the new GUI reloads both launchd
  daemons from the new bundle (gated by a version marker — inert on normal launches) so daemon fixes
  take effect. Live terminals restart once per update (history persists in bpa.db).
• release.yml now publishes the signed .app.tar.gz + .sig + latest.json per release.

See CHANGELOG.md [0.10.2] for the full set (also bundles the 0.10.2 P1 hardening + the
0.10.1 security/data-integrity fixes). Source-available under PolyForm Noncommercial 1.0.0.

Builder Pro AI v0.10.1

Builder Pro AI v0.10.1 — universal macOS build (arm64 + x86_64).

Signed + notarized build (Apple credentials were present).

Source-available under the PolyForm Noncommercial License 1.0.0 (see LICENSE). Build from
source: see the README. Changelog: CHANGELOG.md.

Builder Pro AI v0.9.2

Builder Pro AI v0.9.2 — universal macOS build (arm64 + x86_64).

Signed + notarized build (Apple credentials were present).

Source-available under the PolyForm Noncommercial License 1.0.0 (see LICENSE). Build from
source: see the README. Changelog: CHANGELOG.md.

Builder Pro AI v0.9.1

Builder Pro AI v0.9.1 — universal macOS build (arm64 + x86_64).

Signed + notarized build (Apple credentials were present).

Source-available under the PolyForm Noncommercial License 1.0.0 (see LICENSE). Build from
source: see the README. Changelog: CHANGELOG.md.