Full Changelog: v0.2.11...v0.2.12

What's Changed

• feat(integrations): add Flue sandbox support by @NathanFlurry in #1829
• feat(flue): complete Rivet-backed sandbox integration by @NathanFlurry in #1842
• docs(flue): align release guide and preview packages by @NathanFlurry in #1843

Full Changelog: v0.2.10...v0.2.11

What's Changed

• feat(integrations): add Flue sandbox support by @NathanFlurry in #1829
• feat(flue): complete Rivet-backed sandbox integration by @NathanFlurry in #1842

Full Changelog: v0.2.10...v0.2.11-rc.1

What's Changed

• fix(publish): exclude website from package build by @NathanFlurry in #1827
• fix(eve): align Vercel Eve release dependencies by @NathanFlurry in #1828

Full Changelog: v0.2.9...v0.2.10

What's Changed

• feat(sandbox): add sandbox provider API by @NathanFlurry in #1824
• feat(integrations): add Vercel Eve sandbox provider by @NathanFlurry in #1823

Full Changelog: v0.2.8...v0.2.9

What's Changed

• fix(ci): pin linux glibc floor for published binaries by @NathanFlurry in #1647
• test: cover actor plugin contract surface by @NathanFlurry in #1649
• feat(runtime-core): env-override the native sidecar frame timeout by @khaled-mansour-zid in #1641
• fix(agentos-sidecar): skip close_session teardown wait when the adapter already exited by @khaled-mansour-zid in #1640
• fix(runtime-core): preserve u64 stat identity fields as bigint by @NathanFlurry in #1652
• feat(runtime-core): replace the sidecar frame timeout with a heartbeat silence watchdog by @NathanFlurry in #1653
• fix(agentos-sidecar): harden the close_session already-exited short-circuit by @NathanFlurry in #1658
• fix(native-sidecar): resolve js_bridge mount-root realpath without a bridge round-trip by @NathanFlurry in #1659
• fix(core): deliver post-boot mountFs reconfiguration reliably to the native sidecar by @NathanFlurry in #1660
• fix(native-sidecar): use one universal resolve-beneath walk for host-mount confinement by @NathanFlurry in #1670
• docs(core): use @rivet-dev/agentos-core in Core Package docs and examples by @NathanFlurry in #1671
• ci: speed up publish workflow by @NathanFlurry in #1669
• feat(pi-acp): opt-in persistent sessions via PI_SESSION_DIR by @khaled-mansour-zid in #1672
• fix(shell): restore reliable interactive startup by @NathanFlurry in #1744
• feat(website): redesign landing page and registry around the virtual OS narrative by @NicholasKissel in #1718
• feat(website): describe the runtime as WASM instead of V8 isolates by @NicholasKissel in #1747
• feat(website): restyle landing benchmark cards, carousel, and topology cells by @NicholasKissel in #1749
• fix(native): restore interactive shell correctness by @NathanFlurry in #1746
• refactor(runtime): establish WASM registry foundations by @NathanFlurry in #1673
• feat(software): ship upstream registry tools and parity coverage by @NathanFlurry in #1708
• docs(networking): spec for full curl/wget/git TLS + networking parity by @NathanFlurry in #1730
• feat(toolchain): build mbedTLS for wasm32-wasip1 + ship CA bundle (TLS foundation) by @NathanFlurry in #1731
• feat(curl): real in-guest TLS (mbedTLS) + gzip/brotli/zstd + CA bundle by @NathanFlurry in #1732
• feat(git): HTTPS smart-HTTP (clone/fetch/push) via mbedTLS libcurl + real git-remote-http by @NathanFlurry in #1733
• feat(wget): real HTTPS via in-guest mbedTLS backend + gzip by @NathanFlurry in #1734
• fix(git): WASI-safe sideband demux (no fork in fetch-pack) for HTTPS transport by @NathanFlurry in #1735
• fix(execution): honor SOCK_NONBLOCK on host-net sockets so git push >16KiB completes by @NathanFlurry in #1736
• fix(git): resolve index-pack memory access out of bounds when cloning pushed packs by @NathanFlurry in #1737
• fix(vfs): propagate guest deletions in shadow->kernel sync (rm/rmdir/failed-clone cleanup) by @NathanFlurry in #1738
• feat(ssh): ship OpenSSH 10.4p1 with hermetic libcrypto and Git transport by @NathanFlurry in #1739
• fix(execution): match Linux process scheduling and Git-over-SSH behavior by @NathanFlurry in #1740
• feat(runtime): implement unified sidecar reactor by @NathanFlurry in #1753
• chore: repair repository build prerequisites by @NathanFlurry in #1757
• feat(actor): use direct sqlite uds sidecar by @NathanFlurry in #1755
• feat(actor): finalize native lifecycle hooks by @NathanFlurry in #1759
• docs(bindings): remove stale internal terminology by @NathanFlurry in #1756
• refactor(bindings): remove tool and toolkit terminology by @NathanFlurry in #1758
• test(agentos): share full-surface conformance across core and actor by @NathanFlurry in #1762
• refactor(packages): enforce AgentOS npm namespaces by @NathanFlurry in #1763
• test(agentos): move conformance into private harness by @NathanFlurry in #1764
• fix(runtime): strip executable hashbangs in commonjs loader by @NathanFlurry in #1766
• fix(runtime): route guest stdio and mounted writes correctly by @NathanFlurry in #1765
• test(actor): validate full AgentOS surface live by @NathanFlurry in #1767
• fix(runtime): restore main CI by @NathanFlurry in #1769
• test(core): validate packaged agents end to end by @NathanFlurry in #1770
• refactor(agentos): simplify native ACP runtime by @NathanFlurry in #1771
• feat(agentos): add durable sessions and portable API parity by @NathanFlurry in #1772
• feat: add filesystem correctness suite by @NathanFlurry in #1773
• fix(agentos): repair post-merge validation failures by @NathanFlurry in #1774
• fix(release): repair preview build failures by @NathanFlurry in #1776
• ci: restore wasm build caching by @NathanFlurry in #1781
• fix(ci): retain coreutils stub source by @NathanFlurry in #1782
• test: move sed actor replay to nightly by @NathanFlurry in #1783
• fix(ci): install nightly cmake prerequisite by @NathanFlurry in #1784
• fix(ci): restore stable Rust after nightly builds by @NathanFlurry in #1785
• ci: split fast PR validation from nightly suites by @NathanFlurry in #1787
• fix(ci): restore fast PR coverage and Rust setup by @NathanFlurry in #1788
• test(runtime): expand agent-oriented ecosystem coverage by @NathanFlurry in #1791
• fix(runtime): expand Node.js module and builtin compatibility by @NathanFlurry in #1789
• fix(runtime): align VM lifecycle and WebSocket behavior by @NathanFlurry in #1790
• test(runtime): cover Node process lifecycle compatibility by @NathanFlurry in #1792
• fix(runtime): harden Node process and filesystem semantics by @NathanFlurry in #1793
• test(runtime): document native package compatibility boundaries by @NathanFlurry in #1794
• fix(runtime): complete Node crypto and TLS bridge behavior by @NathanFlurry in #1795
• test(runtime): cover JavaScript frameworks and developer tooling by @NathanFlurry in #1796
• test(runtime): expand the Node ecosystem matrix by @NathanFlurry in #1797
• test(runtime): expand npm workflow compatibility coverage by @NathanFlurry in #1798
• ci(runtime): automate Node ecosystem compatibility validation by @NathanFlurry in #1799
• feat(gigacode): add AgentOS-backed OpenCode bridge by @NathanFlurry in #1748
• ci(publish): install Codex WASI build prerequisites by @NathanFlurry in #1819
• fix(agentos): support RivetKit 2.3.5 actor runtime socket by @NathanFlurry in #1820
• fix(software): republish default commands with executable metadata by @NathanFlurry in #1821

New Contributors

• @khaled-mansour-zid made their first contribution in #1641

Full Changelog: v0.2.7...v0.2.8

What's Changed

• fix(software): republish default commands with executable metadata by @NathanFlurry in #1821

Full Changelog: v0.2.8-rc.3...v0.2.8-rc.4

What's Changed

• refactor(runtime): establish WASM registry foundations by @NathanFlurry in #1673
• feat(software): ship upstream registry tools and parity coverage by @NathanFlurry in #1708
• docs(networking): spec for full curl/wget/git TLS + networking parity by @NathanFlurry in #1730
• feat(toolchain): build mbedTLS for wasm32-wasip1 + ship CA bundle (TLS foundation) by @NathanFlurry in #1731
• feat(curl): real in-guest TLS (mbedTLS) + gzip/brotli/zstd + CA bundle by @NathanFlurry in #1732
• feat(git): HTTPS smart-HTTP (clone/fetch/push) via mbedTLS libcurl + real git-remote-http by @NathanFlurry in #1733
• feat(wget): real HTTPS via in-guest mbedTLS backend + gzip by @NathanFlurry in #1734
• fix(git): WASI-safe sideband demux (no fork in fetch-pack) for HTTPS transport by @NathanFlurry in #1735
• fix(execution): honor SOCK_NONBLOCK on host-net sockets so git push >16KiB completes by @NathanFlurry in #1736
• fix(git): resolve index-pack memory access out of bounds when cloning pushed packs by @NathanFlurry in #1737
• fix(vfs): propagate guest deletions in shadow->kernel sync (rm/rmdir/failed-clone cleanup) by @NathanFlurry in #1738
• feat(ssh): ship OpenSSH 10.4p1 with hermetic libcrypto and Git transport by @NathanFlurry in #1739
• fix(execution): match Linux process scheduling and Git-over-SSH behavior by @NathanFlurry in #1740
• feat(runtime): implement unified sidecar reactor by @NathanFlurry in #1753
• chore: repair repository build prerequisites by @NathanFlurry in #1757
• feat(actor): use direct sqlite uds sidecar by @NathanFlurry in #1755
• feat(actor): finalize native lifecycle hooks by @NathanFlurry in #1759
• docs(bindings): remove stale internal terminology by @NathanFlurry in #1756
• refactor(bindings): remove tool and toolkit terminology by @NathanFlurry in #1758
• test(agentos): share full-surface conformance across core and actor by @NathanFlurry in #1762
• refactor(packages): enforce AgentOS npm namespaces by @NathanFlurry in #1763
• test(agentos): move conformance into private harness by @NathanFlurry in #1764
• fix(runtime): strip executable hashbangs in commonjs loader by @NathanFlurry in #1766
• fix(runtime): route guest stdio and mounted writes correctly by @NathanFlurry in #1765
• test(actor): validate full AgentOS surface live by @NathanFlurry in #1767
• fix(runtime): restore main CI by @NathanFlurry in #1769
• test(core): validate packaged agents end to end by @NathanFlurry in #1770
• refactor(agentos): simplify native ACP runtime by @NathanFlurry in #1771
• feat(agentos): add durable sessions and portable API parity by @NathanFlurry in #1772
• feat: add filesystem correctness suite by @NathanFlurry in #1773
• fix(agentos): repair post-merge validation failures by @NathanFlurry in #1774
• fix(release): repair preview build failures by @NathanFlurry in #1776
• ci: restore wasm build caching by @NathanFlurry in #1781
• fix(ci): retain coreutils stub source by @NathanFlurry in #1782
• test: move sed actor replay to nightly by @NathanFlurry in #1783
• fix(ci): install nightly cmake prerequisite by @NathanFlurry in #1784
• fix(ci): restore stable Rust after nightly builds by @NathanFlurry in #1785
• ci: split fast PR validation from nightly suites by @NathanFlurry in #1787
• fix(ci): restore fast PR coverage and Rust setup by @NathanFlurry in #1788
• test(runtime): expand agent-oriented ecosystem coverage by @NathanFlurry in #1791
• fix(runtime): expand Node.js module and builtin compatibility by @NathanFlurry in #1789
• fix(runtime): align VM lifecycle and WebSocket behavior by @NathanFlurry in #1790
• test(runtime): cover Node process lifecycle compatibility by @NathanFlurry in #1792
• fix(runtime): harden Node process and filesystem semantics by @NathanFlurry in #1793
• test(runtime): document native package compatibility boundaries by @NathanFlurry in #1794
• fix(runtime): complete Node crypto and TLS bridge behavior by @NathanFlurry in #1795
• test(runtime): cover JavaScript frameworks and developer tooling by @NathanFlurry in #1796
• test(runtime): expand the Node ecosystem matrix by @NathanFlurry in #1797
• test(runtime): expand npm workflow compatibility coverage by @NathanFlurry in #1798
• ci(runtime): automate Node ecosystem compatibility validation by @NathanFlurry in #1799
• feat(gigacode): add AgentOS-backed OpenCode bridge by @NathanFlurry in #1748
• ci(publish): install Codex WASI build prerequisites by @NathanFlurry in #1819
• fix(agentos): support RivetKit 2.3.5 actor runtime socket by @NathanFlurry in #1820

Full Changelog: v0.2.8-rc.2...v0.2.8-rc.3

What's Changed

• docs(core): use @rivet-dev/agentos-core in Core Package docs and examples by @NathanFlurry in #1671
• ci: speed up publish workflow by @NathanFlurry in #1669
• feat(pi-acp): opt-in persistent sessions via PI_SESSION_DIR by @khaled-mansour-zid in #1672
• fix(shell): restore reliable interactive startup by @NathanFlurry in #1744
• feat(website): redesign landing page and registry around the virtual OS narrative by @NicholasKissel in #1718
• feat(website): describe the runtime as WASM instead of V8 isolates by @NicholasKissel in #1747
• feat(website): restyle landing benchmark cards, carousel, and topology cells by @NicholasKissel in #1749
• fix(native): restore interactive shell correctness by @NathanFlurry in #1746

Full Changelog: v0.2.8-rc.1...v0.2.8-rc.2

What's Changed

• fix(ci): pin linux glibc floor for published binaries by @NathanFlurry in #1647
• test: cover actor plugin contract surface by @NathanFlurry in #1649
• feat(runtime-core): env-override the native sidecar frame timeout by @khaled-mansour-zid in #1641
• fix(agentos-sidecar): skip close_session teardown wait when the adapter already exited by @khaled-mansour-zid in #1640
• fix(runtime-core): preserve u64 stat identity fields as bigint by @NathanFlurry in #1652
• feat(runtime-core): replace the sidecar frame timeout with a heartbeat silence watchdog by @NathanFlurry in #1653
• fix(agentos-sidecar): harden the close_session already-exited short-circuit by @NathanFlurry in #1658
• fix(native-sidecar): resolve js_bridge mount-root realpath without a bridge round-trip by @NathanFlurry in #1659
• fix(core): deliver post-boot mountFs reconfiguration reliably to the native sidecar by @NathanFlurry in #1660
• fix(native-sidecar): use one universal resolve-beneath walk for host-mount confinement by @NathanFlurry in #1670

New Contributors

• @khaled-mansour-zid made their first contribution in #1641

Full Changelog: v0.2.7...v0.2.8-rc.1