Blog

Bernato Changelog

Akshay Sarode Apr 22, 2026

v0.2.0 — 2026-04-22

Onboarding wizard rewrite. Three steps: welcome, workspace folder, all permissions on one card with live status badges. Permission grants open System Settings plus a helper window that reveals Bernato in Finder. Restart-to-apply persists the wizard step.
Native window UI. Cross-platform onboarding via webview_go (NSWindow / WebView2 / webkit2gtk).
Tray icon redesign. Programmatically-rendered black logo as a macOS template image — adapts to menu bar appearance. No more brand text in the menu bar.
Per-agent capability grants. JSON config at ~/.bernato_capabilities.json. Agent-name pattern + source + command match block.
Sandbox audit log streaming. SSE at /v1/capabilities/log. Live tail in the dashboard's Activity panel.
macOS TCC status detection. Live "Granted / Not granted" badges in the wizard via CGPreflightScreenCaptureAccess + AXIsProcessTrusted + TCC.db file probe.
Self-restart via syscall.Exec. Daemon re-execs in-place after permission grants — keeps the .app bundle association and PID stable.

Sandbox-exec wrap for every spawn (default ON for new installs).
Workspace folder picker, default ~/BernatoAgents.
Phase 4 capabilities: screen_capture, accessibility, full_disk_access with Mach service allowlists.
Mobile web dashboard — fleet view and approvals.
30-day SQLite agent history.
Tunnel relay migration to mail.ujex.dev:7000 with CAA-pinned Let's Encrypt certs.
bernatod ctl REPL with tab completion and --json one-shot mode.
Revoke-all-sessions Cloud Function from tray + dashboard account menu.

First public daemon binary, dashboard, pairing flow, fleet view, multi-client PTY fanout, auto-restart with 5/60s ceiling, and Firebase ID-token daemon auth.