v2.0.2

AetherShell v2.0.2

Security patch completing 2.0.1. Double-quoted PowerShell and
AppleScript injection (CWE-78).

2.0.1 asserted the double-quoted PowerShell sites were safe because they
escape the quote character. That was read, not tested, and was wrong: a
double-quoted PowerShell string expands $, so $(command) executes with
no quote in the payload at all. 21 sites affected; all now interpolate
through ps_quote into a single-quoted literal, which removes expansion
outright. The two macOS osascript sites get applescript_quote.

Upgrade from 2.0.0 and 2.0.1.

See docs/security/SECURITY_AUDIT_2026-07-30.md finding 10c.