v0.2.0

What's Changed

• feat: rust kernel sidecar by @NathanFlurry in #1430
• chore: module loading perf by @NathanFlurry in #1433
• feat: re-implement pyodide in Rust kernel by @NathanFlurry in #1434
• chore: rust kernel hardening & feature parity by @NathanFlurry in #1435
• Runtime isolation hardening + test quality by @NathanFlurry in #1437
• chore: finish ts rust migration by @NathanFlurry in #1442
• fix: pin ghostty-web SHA in opencode build to preserve frozen-lockfile by @abcxff in #1458
• feat(client): add Rust client e2e coverage and V8 resolver fixes by @NathanFlurry in #1463
• [SLOP(claude-opus-4-8)] feat(release): mirror rivetkit publish/preview-publish flow (scripts/publish package + unified publish.yaml workflow) by @NathanFlurry in #1466
• [SLOP(claude-opus-4-8-high)] chore(agent-os): match rivet-dev/rivet for native binary — npm-publish exec bit + typed-config spawn path by @NathanFlurry in #1464
• [SLOP(claude-opus-4-8)] feat(base-filesystem): bake /etc/agentos/instructions.md into the base layer so createSession has OS instructions (single prompt source) by @NathanFlurry in #1465
• [SLOP(claude-opus-4-8)] feat(sidecar): generalize non-flat node_modules detection across pnpm/bun/yarn-pnp/yarn-pnpm; add Docker layout test suite by @NathanFlurry in #1467
• Rust review sweep + runtime fixes, reconciled onto main by @NathanFlurry in #1468
• feat(website): standalone Agent OS Astro+Starlight site (agentos-sdk.dev) by @NathanFlurry in #1472
• feat(core): VFS module access — replace moduleAccessCwd with explicit node_modules mount by @NathanFlurry in #1473
• fix(acp): surface adapter stderr + error.data on session bootstrap failure by @NathanFlurry in #1474
• feat(client): migrate CreateVm to typed JSON config (CreateVmConfig) by @NathanFlurry in #1477
• chore: rustfmt/prettier import + line-width churn by @NathanFlurry in #1479
• test: regression guards for already-fixed VM behaviors by @NathanFlurry in #1480
• test(sidecar): regression guard for adapter stderr/exit surfacing by @NathanFlurry in #1481
• fix(ci): resolve pnpm/action-setup version conflict by @NathanFlurry in #1484
• docs(CLAUDE): security model + testing conventions by @NathanFlurry in #1483
• Security review fixes (agent-os) by @NathanFlurry in #1482
• Security review fixes: browser egress (F-008/F-009) by @NathanFlurry in #1485
• Security: enforce per-connection ownership on ACP close_session + session_request (F-010 follow-up) by @NathanFlurry in #1487
• Security: fix remaining agent-os findings (cron argv, session-id isolation) + regression guards by @NathanFlurry in #1489
• docs(claude): add Agent Working Directory convention by @NathanFlurry in #1475
• ci: check out + build secure-exec sibling for @secure-exec/core link by @NathanFlurry in #1486
• chore: repin agent-os to secure-exec 0.3.0-rc.1 (unblock build + CI) by @NathanFlurry in #1488
• Security: browser isolation fixes — ambient fetch egress (F-012), cross-tenant OPFS (F-015), permission-validation hardening (F-016–F-019) by @NathanFlurry in #1490
• docs: add three-component trust model to Security Model by @NathanFlurry in #1492
• [codex] security followups for cron argv and OPFS cleanup by @NathanFlurry in #1491
• chore: rename to @agentos-software & @rivet-dev/agentos by @NathanFlurry in #1495
• fix(shell): resolve registry WASM from secure-exec sibling in local mode by @NathanFlurry in #1497
• docs: agentOS website docs + backing examples + API reference by @NathanFlurry in #1504
• docs: revert default agent working directory back to /home/user by @NathanFlurry in #1506
• feat: land agentOS dylib on main (agentos-* / @agentos-software rename) by @NathanFlurry in #1505
• feat: Bindings rename + /workspace cwd + docs by @NathanFlurry in #1508
• chore: consume published secure-exec deps by @NathanFlurry in #1512
• feat: add onAgentStderr for agent process logs by @NathanFlurry in #1514
• [codex] publish Darwin sidecar and plugin artifacts by @NathanFlurry in #1511
• feat: Custom Software/Agents docs + native options schema (zod) + sidecar logfmt observability by @NathanFlurry in #1518
• docs: move Bindings into Operating System group below Filesystem by @NathanFlurry in #1520
• test(publish): cover native platform optional deps by @NathanFlurry in #1515
• [codex] test Agent OS mountFs layers by @NathanFlurry in #1521
• fix: agentos rivetkit runtime issues (SerializeState handler + client process/cmdline) by @NathanFlurry in #1529
• perf(2a): pi SDK snapshot bundle (one snapshottable IIFE) by @NathanFlurry in #1525
• perf(2c+safety): pi-tui Intl.Segmenter Foreign fix + snapshot opt-in flag + docs by @NathanFlurry in #1526
• perf: agent SDK snapshot wiring + bench harness + preview secure-exec dep by @NathanFlurry in #1527
• docs: Limits, Bounds & Observability standard + architecture/limits/debugging docs by @NathanFlurry in #1519
• feat(codex+claude): codex e2e test + dep tooling (rebased onto @agentos-software layout) by @NathanFlurry in #1528
• perf(bench): make session.bench actually measure the agent-SDK snapshot by @NathanFlurry in #1530
• feat(core): share one sidecar process per AgentOsSidecar handle by @NathanFlurry in #1531
• Homepage redesign: hero, code showcase, OS & orchestration sections by @NicholasKissel in #1524

Full Changelog: v0.1.1...v0.2.0