Bolt · Changelog
What's new in Bolt.
Every Bolt release, newest first. The latest is Bolt 0.1.174, released October 20, 2026. Each entry lists what is new and what changed; the full notes, including every fix, are on GitHub.
Each entry describes the release it names. A later release can change or retire something listed here. For what Bolt does in the current release, read Bolt features. Bolt updates itself; you can also download any release from GitHub.
Bolt 0.1.174
This release gives companies firmer control over who can use Bolt and on which devices, lets you unlock your vault with Touch ID, makes emailed sign-in codes fill more often, and fixes problems on Windows.
What's new
- Unlock your vault with Touch ID. On a Mac with a master password set, you can turn on Touch ID in Settings, Password Vaults. After you enter your master password once, Touch ID unlocks the vault until your session ends. After a restart, Bolt asks for the master password again. Touch ID also stops working once the session length has passed, even if your Mac was asleep, and if you add or remove a fingerprint Bolt asks you to turn Touch ID on again. Your company can turn Touch ID unlock off.
- Search a messaging site straight from the launcher. Type a prefix and a name, such as wa and a contact's name, and press Enter: Bolt opens WhatsApp, Telegram, Slack, Teams or a similar site in its browser, or reuses the tab you already have, and types the name into the site's own search box. If the site is still showing its sign-in screen, the text goes on your clipboard and Bolt says how to paste it.
- Emailed sign-in codes fill more often. Bolt waits about a minute for a code that has not arrived yet instead of asking you to try again, reads codes in lower case, reads emails the way your mail app shows them, and fills a code from another part of the same site when you have a login saved there. When a code comes from another part of the same site and Bolt is not sure, it names the sender and lets you confirm it once.
- Admins can end a departing person's access. From the admin console, an admin can end every session and connected device a person has, or remove one device, even without automatic user provisioning.
- Device policy that locks the vault. When your company retires a device, marks it as not meeting its security rules, removes it from management, or the device stays offline longer than the company allows, Bolt locks the vault and pauses sync on that device.
- "Why is my vault locked" explained. When a device is locked this way, the vault unlock screen, Settings and Secure Sync say what happened, what still works and what to do. An offline lock offers Reconnect and try again. If an admin has ended your account, the sign-in screen says so.
- A notice before Bolt records activity on a managed device. On a device your company manages, Bolt shows a one-time notice explaining what it records, why, where it is kept and how to see, delete or pause it. Nothing is recorded until you choose "I understand". Your company can change the wording.
Improvements
- The launcher calculator reads k, m, b and t as thousand, million, billion and trillion when they follow a number in a sum, so 1m/86k works, and it shows how it read the input: 1,000,000 ÷ 86,000.
- When Gmail limits how often Bolt can search your mail, Bolt slows down, shows "Paused, back at" with the time, and says that search still works for your other sources.
- Screen readers announce a paused card as paused.
- Bolt no longer freezes when your computer's keychain is slow to answer. If it is slow at launch, Bolt says it is waiting for the keychain and keeps your conversations readable. Signing out says so if Bolt could not remove the saved sign-in.
- When Secure Sync has nowhere to save, Bolt stops sending the same items again and waits longer between tries.
- On a self-hosted server, Bolt reaches its bundled search service over an encrypted connection. If you keep your own copy of Bolt's Docker Compose file, update it from this release before you upgrade, or the bundled search service will not start.
Changes you will notice
- The =flight, =ticker, =dose and =drip launcher tools are removed.
- Admin access by group now works only with Okta, Auth0, generic OIDC or single-tenant Microsoft Entra, and there is no longer a built-in list of admin group names. If you sign in with Google, Zoho or multi-tenant Microsoft, give each admin a role directly or list them as admins by email. With single-tenant Microsoft Entra, list admin groups by their object ID or group email address, not their display name; the server log names any entry to change. Companies with several email domains can list them all.
- Administrators of a Google, Zoho or Microsoft organization now get Bolt admin rights only if they belong to your company. Set your Microsoft tenant or your company domain so Bolt knows which company is yours. For Microsoft, only Global Administrators count; other Microsoft admin roles no longer grant Bolt admin, so give those people a role directly.
- A job title such as "admin" in your company directory no longer counts as an administrator in company policies.
- On a company server, admin pages need an assigned admin role. People the company lists as administrators keep full access.
Security and compliance
- Admin access fails closed. On a company server, every admin page and action checks the person's role in one place, and a person with no assigned role is refused. Admins can assign roles.
- Companies can set an idle timeout, a maximum session length, and require multi-factor sign-in (MFA). A session that passes a limit ends, and Bolt says why and asks you to sign in again.
- Companies can give admin roles by group from their own sign-in provider, such as Okta, by listing which group gets which role.
- When your identity provider deactivates or deletes a user, Bolt ends all of that person's sessions, connected devices and paired apps.
- Companies that use a SAML-only identity provider, such as ADFS, Ping or Shibboleth, can sign their people in to Bolt on the web, and every sign-in is checked against the company's trusted certificates. On the desktop app, choosing SAML sign-in explains that it works on the web for now and offers to open Bolt on the web.
- Every documented device policy setting takes effect, including the sensitive data rules, risky sites, page capture, the company server address and the vault auto-lock time.
- New device policy settings let a company turn off Touch ID unlock, lock the vault on a retired, non-compliant or long-offline device, and change or turn off the notice shown before activity is recorded.
- Companies that send Bolt's audit events to their security monitoring system can have each delivery signed, so the receiver can check it came from Bolt, and can turn on automatic retries. Both are off until a company sets them up.
- Bolt's activity log stays linked across restarts, and a check of the log reads the whole file, so an edited entry is caught.
- On Windows, every program inside the Bolt installers is signed, not only the installers, so Smart App Control and similar policies allow Bolt to run.
Bolt 0.1.173
This release locks your saved logins under your master password, makes Bolt's browser feel like a real everyday browser, and fixes problems on Windows, Linux and AI sites.
What's new
- Your saved logins are encrypted under your master password. Bolt moves them into an encrypted store the first time you unlock, keeps a backup until every login is safely moved, and then removes the old copy.
- App settings sync between your devices. With Secure Sync on, your launcher rail, world clocks and search engines follow you, sealed on your device before they leave it.
- Chat, AI and email tabs keep running. WhatsApp, Slack, ChatGPT, Gmail and similar sites stay live when Bolt is hidden, so messages keep arriving. You can keep any other tab running from its menu.
- Idle tabs sleep instead of closing. A sleeping tab shows a small moon, uses almost no memory, and wakes where you left it.
- Your open tabs survive a restart, and bookmarks and open tabs sync between your devices. History sync is off unless you turn it on. You can import and export bookmarks in the format Chrome, Edge, Firefox and Safari use.
- A cleaner browser. Site icons in tabs, a simpler toolbar with a single menu, the address shown with the site name first, and a compact sidebar while you browse.
- Familiar shortcuts. Cmd+L (Ctrl+L) for the address bar, Cmd+Shift+T to reopen a closed tab, back and forward keys and trackpad swipe, and Cmd-click or middle click to open a link in a new tab.
- A speaker icon appears on a tab only while it plays sound. Click it to mute or unmute the tab.
- Pressing Enter on a QR code copies the image, and pastes it into the app you came from when it can.
- Claude Code started from Bolt goes through Bolt's masking on your computer, so secrets you paste are replaced before they reach the model and restored for the commands it runs.
- The Bolt browser extension now ships inside Bolt and updates itself whenever Bolt updates. Bolt shows a one-time step to load it, and nudges you if your copy is older.
- "Open in Bolt" on an AI site opens a new Bolt chat with what you typed, pasted or attached as an unsent draft, with the sensitive parts marked.
- Searches in the launcher can go straight to your connected sources, such as Confluence and Jira, next to Aeira and Ask AI.
Changes you will notice
- On Linux, the Bolt package is now named sparcle-bolt. Installing Bolt no longer replaces the system's Thunderbolt service, and upgrading restores it if an earlier Bolt removed it.
Security and compliance
- A browser you pair with Bolt asks once, in the Bolt window, before it can use your terminal, passwords, sync and notes.
- A paired browser or app needs your consent for each saved login it fills or reveals.
- Only Bolt itself can read your clipboard history.
- Bolt's browser tabs cannot use your camera or microphone for now.
- On AI sites, Bolt checks only what you type, paste or attach, never the site's own data. Under Allow, nothing you send is changed.
- When an admin sets Mask or Block, Bolt enforces it everywhere on that computer: typing, pasting and attached files on ChatGPT and Gemini, signed in or not. Mask sends a masked copy of text, images and PDFs; Block stops the send and says so. Masking changes only the secret value in lines like KEY=value.
- If Bolt cannot mask an attached file under a company policy, it holds the file instead of sending the original. This covers zip files, including password-protected ones, and files that Claude Code, Codex or Gemini CLI started from Bolt try to send.
- Before an AI web search sends text that looks like a password or key, Bolt asks you first.
- The installer never installs an older version than the one you have, and refuses a download it cannot verify.
Bolt 0.1.172
This release fixes problems found in 0.1.171, brings your notes to all your devices, and gives your vault its own key.
What's new
- Notes sync between your devices. With Secure Sync on, your notes follow you, sealed on your device before they leave it. A note deleted on one device can be restored on any device for 30 days. Your company can turn notes sync off.
- Your vault has its own key. Saved logins are now protected by a key of their own, separate from the key that protects sync.
- Previews say why. When Bolt cannot show a file or image preview, it now says why and offers the fix, such as allowing access to a folder in your Mac's privacy settings.
- Finished background runs are not missed. If a background run finishes while you are away, a quiet notice in Bolt points you to it.
- Unlock Bitwarden from Bolt. If you use Bitwarden, you can turn this on in Settings and unlock it without leaving Bolt. It is off until you turn it on, and Bolt never stores the password. Your company can turn it off.
Changes you will notice
- Bolt's sensitive data checks now act on how sure Bolt is. A phone number or email address gets a hint at most. Masking or blocking happens only for clear secrets such as keys and card numbers, and only when your company's policy asks for it.
- The Bolt browser extension needs Bolt's secure local connection. It is not yet available on Linux, or on managed computers where the company does not allow Bolt's local certificate. Bolt now says so, instead of offering setup steps that cannot work.
Bolt 0.1.171
This release is about signing in. Bolt now offers your saved logins and passkeys the moment you need them, on the page or in Bolt itself, unlocks when you ask it to do something, and gets out of the way once it is done.
What's new
- One place to sign in. Open Bolt on a sign-in page and it shows the logins and passkeys you have for that site. Use the arrow keys to choose, Enter to fill, Shift+Enter to fill and sign in.
- Passkeys you can choose. When a site has more than one passkey saved, Bolt lists them by account and asks which one to use, on the page and in Bolt. A single passkey is named too, so you always see which account you are signing in to.
- Unlocks when you act. If your vault is locked when you press Fill, Save, Update or use a passkey, Bolt asks you to confirm it's you right there and then finishes what you asked. No trip to Settings.
- Password changes are noticed. When you change a password on a site, Bolt offers to update the saved login. If you miss the offer, it waits in Bolt for you.
- Nothing is lost if you miss an offer. A login you did not save on the page waits in Bolt for an hour, ready to save with one key.
- Works with the vault you already use. Logins kept in 1Password or Bitwarden can now be updated and re-saved from Bolt, and Bolt says plainly when one of them needs your attention before it can be searched.
- Clear confirmation on the page. After Bolt fills, saves, updates or signs you in, a short note in the corner of the page says so, and Bolt hides.
- Previous passwords. Bolt keeps the previous password for a login on this device for a short time, so you can restore it if a change goes wrong.
- A clearer sync screen. Secure Sync now shows which account your drive is connected as, lets you disconnect this device, and lists what syncs.
- New launcher shortcuts open your messaging apps. They open the desktop app when it is installed, or the web version, and a setting chooses which.
- Brightness and audio toggles in the launcher show your system's own on-screen feedback.
Improvements
- A login now belongs to its whole site. A login saved on one address of a site is offered on the site's other addresses, while sites that only share a hosting provider are kept apart.
- Local and company addresses work. Bolt fills on localhost, on single-word company addresses and on numbered addresses. On your own machine, addresses with different ports are treated as different sites.
- Save offers survive two-step sign-ins and redirects within the same site, and sign-in forms inside a same-site frame are recognized.
- In the password list, each login is titled by its account, and Edit and Delete are labelled buttons.
- A newly saved login appears in Bolt at once.
- The generated password is hidden until you choose to reveal it, and hides again shortly after.
- System toggles show your computer's current state and update when it changes.
- Notifications disappear on time, keep your focus when dismissed, and share one stack in the corner, clear of the chat input.
- The system prompt Bolt shows to confirm it's you now says exactly what it is for.
Changes you will notice
- The one-line sign-in hint in the launcher bar is replaced by the sign-in dialog. Your typed query and results are left untouched behind it.
- Bolt hides after it fills or signs you in for a page. If you already had Bolt open, it stays.
- On your own machine, a login saved for one port is no longer offered on another port.
- Passkeys saved in Bolt stay on the device where you saved them. They do not sync between devices yet.
Security
- Bolt asks you to confirm it's you only for something you pressed yourself, never for a background check or a request made by a web page.
- A look-alike site is refused before anything is filled.
Bolt 0.1.170
A master password for your vault, passkey saving, one-time secret links, and new launcher shortcuts.
What's new
- A master password for your vault. Lock your vault behind a master password, with "Forgot PIN" recovery through your device sign-in.
- Add, edit and delete vault items directly, including items in 1Password and Bitwarden. Read-only vaults say so.
- A vault popup in the browser extension, and a vault panel in Bolt's built-in browser, so you can find and fill passwords where you are.
- Save passkeys: Bolt offers to save passkeys you create on websites, in the extension and in Bolt's browser.
- Send a secret once: share a password or secret through a link that works a single time.
- Better password saving: Bolt remembers the right site address and offers to save when you sign in.
- Paste back what you copied: richer clipboard items keep their formatting and files when you paste them again.
- New AI shortcuts in the launcher for your favorite AI engines.
- Connect Codex through Bolt.
- Show as QR: show any result as a QR code to open it on your phone, such as a link, Wi-Fi details, a contact or an event.
- System info in the launcher: type ip to see your IP addresses and device details.
- A Dashboard view of what Bolt has done for you, with counts you can check.
Improvements
- Zen opens centered at a size that fits your screen, and double-clicking the title bar switches between Zen and the full window.
- What you type in the launcher is no longer written to Bolt's local logs.
- Dropping a file onto Bolt works again after you visit a web tab in Bolt's browser.
- Launcher search keeps working when the privacy policy service is briefly unreachable.
- The add and edit form for vault items fits narrow windows, with labels and fields lined up.
- Connector actions now follow the same privacy checks and audit record as connector searches.
- When a connected service such as Jira refuses access, Bolt offers Reconnect instead of failing quietly.
- Clearer messages when an AI provider is out of credit or a connection is missing a permission.
- Linux: smoother AppImage on more desktops, including window behavior and graphics on X11.
Bolt 0.1.169
Speak to the launcher, a calmer Do Next strip, and hardening across sign-in and local file access.
New
- A mic button in the launcher: click it to speak your request instead of typing.
- The Do Next strip is calmer. Remind me, Not urgent, Not important, Already done and Wrong priority each move it to the next item straight away, with Undo, and what you set aside stays out of the way after a refresh or restart.
- Ask AI only appears when an AI model is actually ready to answer.
- Calendars you hide stay hidden everywhere in Bolt.
- Plugins have been retired. Everything they did is now built into Bolt.
Improved
- The launcher now gets itself ready quietly in the background after Bolt starts.
Bolt 0.1.168
A simpler first run, workspace connection from inside Bolt, a faster launcher, and smoother browser pairing.
What's new
- A simpler first run. Bolt now opens straight to your workspace with no setup screens. A short in-app tour covers folder access (one click to Allow), Accessibility, and securing Bolt's local connection, and it offers the folder your screenshots save to.
- Connect your workspace from inside Bolt. Link your Google, Microsoft or Zoho account in a single consent, including bring-your-own projects, and change your sign-in provider later in Settings.
- A faster launcher. Common requests act instantly, a site chip plus your text searches that site, Bolt remembers what you pick, and shell commands never run until you confirm them.
- Smoother browser pairing with extension 1.0.15. Bolt says plainly who is asking, pairing only starts from your click, switching accounts keeps your browser paired, and Re-pair is one click.
- Recent files now shows what you downloaded, wherever you saved it, and new files appear as Created.
- Meeting descriptions show their formatting, and Join links inside them are detected.
- Consistent dialogs across the app, and a redesigned macOS installer window.
- Resetting your accounts now also disconnects any paired browsers.
- Enterprise: a clear notice when your license expires, with a shortcut to renew.
Bolt 0.1.167
Security hardening for sign-in, session handling and local communication between Bolt's parts, plus a startup integrity check on Linux.
Bolt 0.1.166
Two macOS first-run fixes, a clearer certificate trust screen, wider default masking of national IDs, and two Labs switches.
What's new
- The screen that asks you to trust Bolt's local HTTPS certificate names the certificate, says it is used for localhost only, and explains how to remove it later. Uninstalling Bolt on Windows removes it.
- India's PAN joins the identifiers masked by default, next to US Social Security and passport numbers, and a web search typed in the launcher passes the same outbound data check as connected-service actions.
- AI suggestions wait for your click before anything is sent to a model.
- Settings, Labs: an off-by-default diagnostics log you can copy for support, with anything shaped like a secret redacted before it reaches the clipboard.
- Search across connected services shows one row, with a segment per provider you are connected to.
- Settings shows the folder patterns the file indexer skips by default, editable in advanced mode.
Bolt 0.1.165
Signed with a new key, so this one release is installed by hand; automatic updates work again from here. Fixes first-run, install and sign-in dead ends.
What's new
- The install scripts verify signatures across the change of signing key.
- Developer diagnostics endpoints answer "not found" on a shipped desktop build.
- Activating a licence requires the desktop app's own token.
- Bolt no longer writes inside its signed app bundle on macOS.
- Pairing a Safari tab completes, and Clips and Files work in a paired browser.
- Replies come back faster.
Bolt 0.1.164
Clearer refusals and launcher polish.
Improvements
- An administrator chooses whether Aeira requires a client secret.
- The browser's caught-data review opens from the launcher as well as from the browser.
- Browser tabs, the clipboard and the launcher name the refusal they were given, in their own words.
Bolt 0.1.163
The update signing key was rotated, so this release is installed once by hand. Steadier typing, a defined Escape, a three-screen onboarding, and passkeys end to end.
What's new
- Passkeys work end to end across the Bolt browser extension, the command-line helper and Bolt's own browser.
- Onboarding is three screens.
- Escape steps back one layer at a time across the app.
- /emails filters by sender, subject, attachment, unread or date.
- /images shows your recent image matches, with a preview of the one you pick.
- Licences state their entitlements explicitly.
Bolt 0.1.162
The browser inside Bolt becomes a full browser, and the governance evidence Bolt collects becomes reports you can hand to a board or an auditor.
What's new
- Browser: find in page, print, downloads, history that survives a restart, bookmarks with folders, Delete Browsing Data with a time range, and address bar suggestions from your tabs, bookmarks and history.
- Private browsing: nothing from a private tab reaches history, cache or any log on disk.
- Reports: eight governance reports produced on the device (AI exposure assessment, board summary, auditor evidence, questionnaire response, security and risk, cost and exposure, coverage and operation, client findings), read in the app and exported as one self-contained file. Each states what it did not see as well as what it did.
- Bring your own AI provider and key, set in Settings.
- Every settings page is reachable from search.
- Images, binary uploads and unrecognised model content go through the same screening as text.
Bolt 0.1.161
A security release: a patched desktop framework, stricter local pairing, and Linux builds that start on mainstream distributions.
What's new
- Every app command is declared in a permission manifest generated from the app's own command list, and only Bolt's own window receives those permissions.
- A pairing is bound to the account that approved it, and revoking a pairing ends every session it granted.
- The installer refuses a download it cannot verify.
- Linux: Bolt runs on Ubuntu 22.04 LTS and newer, Debian 12 and 13, and Fedora 36 and newer.
- For administrators: updates can be turned off or pinned to a version by managed policy, and the bundled database is reachable only by Bolt.
Bolt 0.1.160
Screening on the major AI assistants works from the start, and every masked send shows a receipt.
What's new
- What you type, paste, drop or attach on the major AI assistants is checked before it leaves the browser, with nothing to enable first. You can decline it for a site, and the choice is remembered.
- When something is masked, a small marker names how many items were caught, with a way to see what they were.
- Administrators set policy per category of information, can release a single flagged item, and can offer a way to request approval.
- A local model can be your primary model for chat.
- macOS apps are signed and notarised by Apple for Apple Silicon and Intel, and Windows installers are signed with an extended validation certificate issued to Sparcle Inc.
Bolt 0.1.159
Colour picking on the ruler, the current Model Context Protocol, and a published security contact.
What's new
- Ruler: hold the pointer over any pixel to read its colour, with the nearest of your design tokens named.
- MCP: Bolt speaks the 2026 protocol revision and runs local servers over stdio. Adding a server shows its tools and permissions for confirmation, and you choose which tools are exposed.
- A security contact and vulnerability disclosure policy at the standard well-known location and inside the app.
- Tokens for connected accounts are encrypted with a key derived per record.
- Connecting a Google account asks only for the permissions the app declares.
Bolt 0.1.158
Image search returns results again, voice input leaves Labs, and the ruler measures more.
What's new
- Words inside your screenshots are searchable even when the vision model is off or still downloading.
- On-device voice input in Settings, Desktop App, Voice input, on Apple Silicon Macs and Linux. Nothing downloads until you turn it on: a Standard model (about 148 MB) or a higher accuracy model (about 488 MB).
- Ruler: angle, diagonal and a real-world scale you set from one known length.
- Quick answers can answer a country statistic from World Bank data, and stay silent when unsure.
- Administrators can add AWS Bedrock as a model provider and route models by department, role or group.
- Data-loss policy can be aimed at a department, role or group.
- Server deployments connect to PostgreSQL over TLS, and an unknown key in that configuration stops startup.
Bolt 0.1.157
A reliability release: a slow or disconnected drive can no longer freeze the app.
Improvements
- The embedded browser recovers a crashed tab, and opens local files such as an HTML or Markdown file.
- File indexing and local file browsing are bounded per location, so one stalled folder does not hold up the rest.
Bolt 0.1.156
Reliability and correctness: the launcher window on first install, lower-priority background indexing, and a Compare tool that fits narrow windows.
Bolt 0.1.155
Saved-login autofill inside Bolt's own browser, private clips kept out of history on every platform, and a service that is harder to overload.
What's new
- Bolt's browser offers to fill saved logins as you land on a sign-in page, including sign-ins split across more than one page.
- A clip you or an app marks private stays out of clipboard history on Mac, Windows and Linux.
- Windows reads text inside images for data-loss scanning.
- Administrators can declare their own sensitive data, such as customer IDs or account numbers, and Bolt matches it exactly under rules the admin sets.
- Automated enforcement decisions (block, allow, mask) are recorded in the sealed evidence chain administrators can audit.
- Bolt installs without administrator rights on Mac, Windows and Linux.
Bolt 0.1.153
Zen and Full remember where you put them, the browser extension interrupts less, and privacy detection is more precise.
What's new
- Zen and Full each remember their own size and position, across restarts and displays.
- Browser extension: how serious a finding is decides whether a file interrupts you, and a warning no longer looks like a block.
- Open in Bolt hands over the file itself, through a single-use handle, so what Bolt scans is what you sent.
- A file with a part Bolt could not read, such as a password-protected file inside a zip, is held as unscreened.
- Updates install on a Mac that is offline or on a restricted network.
- Your own name and address are no longer flagged as someone else's personal data.
Bolt 0.1.152
Bolt gets its own password vault, a keyboard command mode, policy as code, and notes from anywhere.
What's new
- Bolt's own vault: generate a password with =pw and save it in one step, fill a login by right-click in the browser, save a login after a successful sign-in, or save it into 1Password or Bitwarden.
- Vault lock: idle lock and PIN unlock across every connected vault, with the PIN hashed with Argon2id and attempts rate-limited. Your organisation can enforce both.
- On Linux, Bolt stores secrets in the system keyring through the Secret Service API, next to macOS Keychain and Windows Credential Manager.
- Command mode and on-screen hints let you drive Bolt from the keyboard, and any rail tile can have its own shortcut.
- /settings and /help are launcher scopes, and a setting found by search can be switched in place.
- boltctl: keep your organisation's policy as a YAML file in git and validate, diff, apply, list versions or roll back from the command line.
- Select text in your browser or in any macOS app (through the Services menu) and it becomes a note, with where it came from.
- Recall can seal a day into a note.
- The macOS network filter can be made non-removable by policy (macOS 15 and later).
- Encryption at rest covers the screenshot, vector and thumbnail stores.
Bolt 0.1.151
The app is now called Bolt. Image redaction, Windows Group Policy, and a macOS installer package for MDM.
What's new
- Bolt finds personal information in an image and blanks it in place, so a shared screenshot has the sensitive parts covered.
- Windows reads device policy from Group Policy, with an ADMX template, and settings your organisation enforces show as managed.
- macOS: a signed, notarised installer package for deployment through MDM with a configuration profile.
- An OpenAI-compatible endpoint at /v1/chat/completions, streaming included, under the same PII protection as Bolt's own chat.
- Every release carries a signed checksum manifest next to its software bill of materials.
- Homebrew: brew upgrade --cask bolt moves you to the new app.
- AI and Tokens records cost on every model call.
Bolt 0.1.150
A first launch that explains each permission, and an observe-only network filter for macOS administrators.
What's new
- First launch asks for permissions as one numbered sequence. Every step says what it is for, and every step can be skipped: skipping is a no, never a yes.
- Network filter (macOS, admin): reports which apps on the machine reached an AI endpoint outside Bolt. It reads destination host and app identity, never content, and blocks nothing.
- Settings reports whether FileVault protects what Bolt stores on the Mac.
- When something fails, Bolt names the reason (a rejected key, a rate limit, a timeout, a misconfigured endpoint) and what to try next.
Bolt 0.1.149
Recall organises your day into moments.
What's new
- Recall groups activity into moments with the files, pages, apps and people involved, on a timeline. Resume a moment in one click, pin it, or mark it Not useful.
- Recall does not capture raw keystrokes, and scrubs personal information before anything reaches AI.
Bolt 0.1.148
Launcher and notes fixes, and stability for the macOS network filter.
Bolt 0.1.147
One step to connect your workspace, compliance export windows, scanning inside archives, and signed Windows binaries.
What's new
- Connect your workspace in one step. Sign-in asks only for the minimum permission, and broader access only when you turn on a feature that needs it.
- Compliance dashboard: Seal now, and an export window from the last hour to all time.
- Sensitive-data detection looks inside zip, tar and gzip attachments.
- Windows release binaries, including bolt-cli.exe, are Authenticode signed.
Bolt updates itself.
New releases arrive through the in-app updater. Every installer is signed, and each release publishes a checksum manifest and a software bill of materials.