diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 7c05be3..5193f77 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,5 +1,5 @@
 {
-  "libs/bog-agents": "0.9.9",
-  "libs/cli": "0.9.9",
-  "libs/daemon": "0.9.9"
+  "libs/bog-agents": "0.9.10",
+  "libs/cli": "0.9.10",
+  "libs/daemon": "0.9.10"
 }
diff --git a/libs/bog-agents/CHANGELOG.md b/libs/bog-agents/CHANGELOG.md
index 57994e4..6e61626 100644
--- a/libs/bog-agents/CHANGELOG.md
+++ b/libs/bog-agents/CHANGELOG.md
@@ -1,5 +1,27 @@
 # Changelog
 
+## [0.9.10](https://github.com/bogware/bog-agents/compare/bog-agents==0.9.9...bog-agents==0.9.10) (2026-07-12)
+
+
+### Features
+
+* **sdk:** add GoalToolsMiddleware for persistent agent-visible goals ([70ffb43](https://github.com/bogware/bog-agents/commit/70ffb43cc879287fb9dd83c4f00a0929f53c2310))
+* **sdk:** add pluggable symlink-trust checker hook to SkillsMiddleware ([6000c2f](https://github.com/bogware/bog-agents/commit/6000c2f1c0dc7fd12a47461c930528788e7293f0))
+* **sdk:** complete deepagents backend rewrite (FileData v2, delete, overwrite) ([836cdea](https://github.com/bogware/bog-agents/commit/836cdea6a0a240fd738e949ee902c48a6364e0ae))
+* **sdk:** deepagents 0.6.12 backend type foundation + dep floors ([3e0ef8b](https://github.com/bogware/bog-agents/commit/3e0ef8b2c3e6d112eef164cfd2e1468b2a27824f))
+* **sdk:** deepagents drop-in core API (SystemPromptConfig, exports, profiles) ([674906a](https://github.com/bogware/bog-agents/commit/674906a72ce6272a3fe0bb375bb22215eff4f968))
+* **sdk:** middleware interop surface + fix two permission-bypass vulns ([7687282](https://github.com/bogware/bog-agents/commit/768728284b2e54bfcc5fc549490395efca21d112))
+* **sdk:** ship built-in model profiles + bedrock caching + video read ([38e7930](https://github.com/bogware/bog-agents/commit/38e793024c67a2fdd1f374698035090fc6e8585e))
+
+
+### Bug Fixes
+
+* **sdk:** activate no-op safety/feature middleware + harden serve ([bfc03f2](https://github.com/bogware/bog-agents/commit/bfc03f2946396e12670815d4d706f284bb3b8358))
+* **sdk:** checkpointing works on fresh repos and never touches the user's git index ([d5a9df0](https://github.com/bogware/bog-agents/commit/d5a9df0194cdb6e42faba192da77b9907284c850))
+* **sdk:** data-integrity + concurrency hardening (lost edits, atomic writes, DLP, worktree) ([2b28420](https://github.com/bogware/bog-agents/commit/2b2842084f8658ccb4a0fe105a2d9fd15ed35c33))
+* **sdk:** don't follow a symlinked leaf on filesystem write/delete ([055bd81](https://github.com/bogware/bog-agents/commit/055bd818ef7e97e3bcad1f627837d76d1d33f826))
+* **sdk:** resiliency/reliability/observability hardening across middleware and backends ([0999527](https://github.com/bogware/bog-agents/commit/0999527322336a872d878c7c562f958b7f039318))
+
 ## [0.9.9](https://github.com/bogware/bog-agents/compare/bog-agents==0.9.8...bog-agents==0.9.9) (2026-06-19)
 
 
diff --git a/libs/bog-agents/bog_agents/_version.py b/libs/bog-agents/bog_agents/_version.py
index 85850ac..7d8ba7a 100644
--- a/libs/bog-agents/bog_agents/_version.py
+++ b/libs/bog-agents/bog_agents/_version.py
@@ -1,3 +1,3 @@
 """Version information for `bog-agents` (SDK)."""
 
-__version__ = "0.9.9"  # x-release-please-version
+__version__ = "0.9.10"  # x-release-please-version
diff --git a/libs/bog-agents/pyproject.toml b/libs/bog-agents/pyproject.toml
index 248d48a..fbfffef 100644
--- a/libs/bog-agents/pyproject.toml
+++ b/libs/bog-agents/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "bog-agents"
-version = "0.9.9"
+version = "0.9.10"
 
 description = "Bog Agents — a still-water agent framework. Patient by default, opinionated where it matters, batteries included. Build agents on top of any major LLM provider (Anthropic, OpenAI, Bedrock, Google, Mistral, Groq, DeepSeek) or run local with Ollama. 80+ middlewares, real subagents, file-system + shell + sandbox backends, MCP tooling, a typed config surface. Built on LangGraph; pass through in harmony."
 readme = "README.md"
diff --git a/libs/cli/CHANGELOG.md b/libs/cli/CHANGELOG.md
index 42cf1b6..d0d1545 100644
--- a/libs/cli/CHANGELOG.md
+++ b/libs/cli/CHANGELOG.md
@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.9.10](https://github.com/bogware/bog-agents/compare/bog-agents-cli==0.9.9...bog-agents-cli==0.9.10) (2026-07-12)
+
+
+### Features
+
+* **cli:** env-var registry + config manifest with real config command ([e602887](https://github.com/bogware/bog-agents/commit/e602887fc48b467a6c59922c5edecab51267f251))
+* **cli:** managed ripgrep auto-install + ${VAR} MCP header interpolation ([6c4df82](https://github.com/bogware/bog-agents/commit/6c4df82d0010c2d4601b7b9035088c373101ce5f))
+* **cli:** native reasoning-effort, ctrl+x external editor, /goal and /rubric ([9feaeb3](https://github.com/bogware/bog-agents/commit/9feaeb3067a13579905644de0af2e4fa84b2940a))
+* **cli:** spec-compliant MCP OAuth (mcp SDK OAuthClientProvider) ([c30d5ed](https://github.com/bogware/bog-agents/commit/c30d5edc6967af472a57f6e9b0152b594abf0f76))
+* **cli:** theme system, skill trust store, and UX polish ([8271f4b](https://github.com/bogware/bog-agents/commit/8271f4bf8c1bd315e0f0b1c41555007c1f399d4e))
+
+
+### Bug Fixes
+
+* **cli:** concurrency + lifecycle hardening (orchestrator, auto-commit race, fork lock, oauth state) ([5b0a0dc](https://github.com/bogware/bog-agents/commit/5b0a0dc413dff66db4f7ce4c087d52e9b64bd832))
+* **cli:** escape untrusted markup on trust surfaces + headless HITL/cache bugs ([70e4e50](https://github.com/bogware/bog-agents/commit/70e4e50769db5b9ba72ad81881dc287361d8c9cd))
+* **cli:** resiliency/reliability/observability hardening (TUI, auth, sessions, ops) ([b3fcbd1](https://github.com/bogware/bog-agents/commit/b3fcbd16417f2091c4aa48d2763950adbb095874))
+* **cli:** SSRF guards on web/agent fetch, sign TraceFile header, fix dreamscape laws ([11e589d](https://github.com/bogware/bog-agents/commit/11e589d1683d7ab304866095aec99a99418c1d67))
+
 ## [0.9.9](https://github.com/bogware/bog-agents/compare/bog-agents-cli==0.9.8...bog-agents-cli==0.9.9) (2026-06-19)
 
 
diff --git a/libs/cli/bog_agents_cli/_version.py b/libs/cli/bog_agents_cli/_version.py
index b0a9f5c..07c686c 100644
--- a/libs/cli/bog_agents_cli/_version.py
+++ b/libs/cli/bog_agents_cli/_version.py
@@ -1,3 +1,3 @@
 """Version information for `bog-agents-cli`."""
 
-__version__ = "0.9.9"  # x-release-please-version
+__version__ = "0.9.10"  # x-release-please-version
diff --git a/libs/cli/pyproject.toml b/libs/cli/pyproject.toml
index 2ad8ebd..1405b8f 100644
--- a/libs/cli/pyproject.toml
+++ b/libs/cli/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "bog-agents-cli"
-version = "0.9.9"
+version = "0.9.10"
 description = "Bog Agents CLI — your coding agent in the terminal, patient as still water. 80+ slash commands, any LLM provider (Anthropic, OpenAI, Bedrock, Google, Ollama and more), persistent memory, plan mode, /qa acceptance-criteria harness, /peat personal scheduler, /record + /replay, in-memory secrets vault, MCP marketplace with 35+ servers, deep doctor, panic dumps, and a matte swamp/neon-green TUI. One install, no code required. Pass through in harmony."
 readme = "README.md"
 license = { text = "MIT" }
diff --git a/libs/daemon/CHANGELOG.md b/libs/daemon/CHANGELOG.md
index e165fa9..088b8c0 100644
--- a/libs/daemon/CHANGELOG.md
+++ b/libs/daemon/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.9.10](https://github.com/bogware/bog-agents/compare/bog-agents-daemon==0.9.9...bog-agents-daemon==0.9.10) (2026-07-12)
+
+
+### Features
+
+* **cli:** managed ripgrep auto-install + ${VAR} MCP header interpolation ([6c4df82](https://github.com/bogware/bog-agents/commit/6c4df82d0010c2d4601b7b9035088c373101ce5f))
+* **sdk:** deepagents 0.6.12 backend type foundation + dep floors ([3e0ef8b](https://github.com/bogware/bog-agents/commit/3e0ef8b2c3e6d112eef164cfd2e1468b2a27824f))
+
+
+### Bug Fixes
+
+* **daemon:** harden the unattended runner (triggers, token, scheduler, lint) ([0c9901b](https://github.com/bogware/bog-agents/commit/0c9901bf8d5592ca237249614818848d39617f72))
+* **daemon:** scheduler dispatch for event triggers + safe-by-default unattended shell ([63c04b5](https://github.com/bogware/bog-agents/commit/63c04b5099c4657378c0e727be1786bd0ae3bbf8))
+
 ## [0.9.9](https://github.com/bogware/bog-agents/compare/bog-agents-daemon==0.9.8...bog-agents-daemon==0.9.9) (2026-06-19)
 
 
diff --git a/libs/daemon/bog_agents_daemon/__init__.py b/libs/daemon/bog_agents_daemon/__init__.py
index 3080080..538c3d4 100644
--- a/libs/daemon/bog_agents_daemon/__init__.py
+++ b/libs/daemon/bog_agents_daemon/__init__.py
@@ -1,3 +1,3 @@
 """Bog Agents Daemon — ambient agent service."""
 
-__version__ = "0.9.9"
+__version__ = "0.9.10"
diff --git a/libs/daemon/pyproject.toml b/libs/daemon/pyproject.toml
index e9047e6..a9fac99 100644
--- a/libs/daemon/pyproject.toml
+++ b/libs/daemon/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "bog-agents-daemon"
-version = "0.9.9"
+version = "0.9.10"
 description = "Bog Agents Daemon — the patient watcher. Runs your bog-agents on cron schedules, file-change triggers, webhooks, and git push events; survives reboots, persists state, and reports back. Use it when you want an agent that wakes itself rather than waiting for you. Pass through in harmony."
 readme = "README.md"
 license = { text = "MIT" }