ElastOS Runtime v0.2.0

Added

• Added the Home browser shell capsule, home-cli, and the elastos home command path as the visible front door.
• Added first-party System, Inbox, Library, Documents, Chat Room, GBA Emulator, and uCity browser/content capsules to the shipped Home catalog.
• Added runtime-owned browser capsule routing, object/viewer launch foundations, and app-scoped launch tokens for Home-launched surfaces.
• Added Documents provider APIs for summary, create, get, save, save-as, publish, unpublish, delete, and immutable elastos://<cid> document opens.
• Added Library document browsing and Chat Room attachment flow through Home orchestration instead of browser file upload.
• Added Chat Room browser-session pairing, same-browser Home session reuse, guest identity separation, guest kick controls, and runtime member invite/block controls.
• Added System appearance controls for wallpaper, reset, overlay toggle, and overlay opacity.
• Added Home PWA metadata, mobile fullscreen support, touch-first desktop icon behavior, reversible desktop icons, and mobile-safe window behavior.
• Added GBA save-state persistence, mobile touch controls, keyboard mapping labels, fullscreen ratio handling, compact controls, and fail-fast unsupported-WebView detection.
• Added shared first-party design-system docs and scripts/home-entropy-check.mjs for UI, naming, authority, and stale-copy drift checks.

Changed

• Renamed the visible product front door from PC2 to Home and aligned setup profiles, proof scripts, docs, and CLI smoke tests around the Home naming.
• Replaced md-viewer with Documents and room-browser with Chat Room.
• Split setup profiles more explicitly between the core Home path, the broader demo surface, and the explicit operator lane.
• Hardened release proofing around clean-home setup, the PTY Home front door, chat-room packaging, source-local trusted-source checks, and Home/browser journey smoke coverage.
• Moved Home wallpaper and contrast overlay configuration into System -> Appearance backed by the runtime appearance store.
• Made Documents object-first: DID-backed document identity is the mutable object, localhost://Users/self/Documents/... is only the local working copy, and elastos://<cid> is the immutable published revision.
• Made Library content-first around documents and typed content instead of raw working-copy paths.
• Moved Inbox list rendering, read state, approval, denial, dismissal, and source-app open actions into the Inbox capsule; Home now owns only badge and launch.
• Aligned first-party capsule UI colors, spacing, mobile padding, and accessible controls with the shared light capsule token set.
• Aligned roadmap, principles, architecture, namespaces, and security docs around the four quadrants, object/capsule/space ontology, and capability-scoped Carrier/provider boundary.

Fixed

• Unified main DID derivation with the device key and aligned local nickname persistence onto one shared codec.
• Removed stale live-host conflicts so managed Home/chat lanes and the explicit operator lane do not silently share one home.
• Cleaned up the public room naming so the shipped chat-room route, packaging, and proof tooling all agree.
• Moved Documents publish/unpublish IPFS-specific logic out of the gateway edge into the provider plane.
• Removed the gateway-owned IPFS provider bridge path; public CID reads now use cached content or the runtime provider registry and fail closed otherwise.
• Required Home authority before minting app launch tokens, app-scoped launch tokens for System and Inbox APIs, and browser-context-bound chat-room access polling.
• Redacted room bearer tokens from public/Home summaries and preferred the native Home room session over paired browser identity when both exist in one browser profile.
• Fixed browser Chat Room identity handling so messages from the native Home member no longer appear as the browser guest's own messages.
• Fixed Documents publish/unpublish behavior so unchanged content does not produce unnecessary new published revisions.
• Fixed document delete confirmation to use in-surface UI instead of browser alerts.
• Fixed Home window dragging so windows can move partially offscreen without jumping back when their title bar is clicked.
• Fixed desktop drag selection, desktop icon removal/re-add, mobile launcher focus, and maximized-window coverage over Home chrome.