chore(main): release 0.2.0

[github-actions]

🤖 I have created a release beep boop

0.2.0 (2026-07-05)

Features

• add --auto flag for LLM-generated commit messages (#423) (b0abde7)
• add zero changes push and pr subcommands, and extra repo-info metrics (#391) (2312abe)
• agent quality, caching, retry, and tooling upgrades (#506) (3c81fea)
• agent: curb over-engineering the solution in the editing discipline (#517) (f4c998a), closes #516
• agent: inject per-user config.UserConfigDir()/zero/ZERO.md guidelines into system prompt (#475) (7b10aab)
• openai: forward prompt_cache_key for server-side prefix cache routing (#515) (87e7e69)
• providers: add zero providers models to discover a provider's models (#386) (0bc8074)
• providers: add KiloCode and OpenCode provider support (#388) (b1ccb6d)
• providers: add Meituan LongCat catalog preset (#424) (b4275e3)
• providers: split minimax zai into intl cn (#398) (aaad4d2)
• require manual approval before npm publish + drop release-as pin (#369) (bd89a1f)
• sandbox: unelevated Windows fallback tier instead of prompts-only degrade (#427) (b9ddd6f)
• support shift enter for composer newlines (#462) (daf65e0)
• tui: add search/filter to provider picker in setup wizard (#400) (2fcea71)
• update: add zero upgrade command to apply self-updates (#461) (5f36349)

Bug Fixes

• action: keep provider key scoped to zero step (#448) (407a927)
• add android platform support for Termux npm install (#455) (9bd93c6), closes #449
• agent: reject a malformed additional_permissions payload before prompting (#453) (e4f760e)
• allow non-TLS connections to private-network provider endpoints (#444) (1d86384)
• auth: route zero auth login chatgpt to the dedicated ChatGPT flow (#443) (305a62c)
• config: fall back to a usable saved provider instead of forcing full re-onboarding (#410) (c60ad87)
• config: let a gateway ANTHROPIC_BASE_URL resolve as anthropic-compatible (#497) (30dd7c3), closes #479
• config: unbrick first-run setup — default google/anthropic models, enter setup on fixable config errors (#385) (72eed06)
• config: use ~/.config on macOS and enter setup when no provider (#371) (#372) (027a8f2)
• docs: rename AGENTS.MD > AGENTS.md (#438) (4266baf)
• gemini: strip unsupported JSON Schema fields from tool declarations (#374) (39e7100), closes #373
• install: persist install dir to user PATH on Windows (#407) (bdb1b0e)
• mcp: block cross-origin credential redirects (#396) (f915f70)
• oauth: treat Windows ERROR_ACCESS_DENIED as lock contention in createSecretFile (#445) (d05e914)
• openai: handle Ollama reasoning stream deltas (#486) (f6c0606)
• preserve conversation context in exec prompts (#460) (949ee43)
• provider-wizard: allow multiple custom OpenAI-compatible providers (#403) (3fbbd28)
• sandbox: fix nested pipe creation under the Windows restricted token (#456) (563a6db)
• sandbox: gate /tmp test assertions on GOOS, not path existence (#426) (f653dca)
• sandbox: self-heal a corrupt unelevated setup marker (#437) (8d0c5fe)
• specialist: cap max specialist nesting depth (#491) (177442c)
• Termux/Android support — PRoot scroll, SIGSYS sandbox, build docs (#509) (0f69d99)
• tools: CRLF line ending mismatch in edit_file tool on Windows (#378) (33dc7ae)
• tools: fix cmd.exe /S/C corrupting commands with embedded quotes (#465) (190241b)
• tools: flag piped POSIX utilities before running on Windows (#412) (5658a36)
• tools: make grep and glob respect run cancellation (#464) (ba6c026)
• tools: require permission before web_search requests (#382) (960db96)
• tui: compose help overlay through the viewport overlay pipeline (#421) (5b2b4de)
• tui: keep the profile name on /model switch so the stored key resolves (#441) (9134148), closes #440
• tui: resolve every permission request so the agent can't deadlock (#397) (952788f)
• tui: show an M suffix for million-scale token counts (#457) (0562e3b)
• tui: title /model rows by model name, not the catalog description (#395) (cdf9d83)

Performance Improvements

• cache TUI model registry (#496) (e7d88b4)
• universal tool-output ceiling with spill + async post-edit diagnostics (#518) (95ccd5b)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Zero automated PR review

Verdict: No blockers found

Blockers

• None found.

Validation

• [pass] Diff hygiene: git diff --check
• [pass] Tests: go test ./...
• [pass] Build: go run ./cmd/zero-release build
• [pass] Smoke build: go run ./cmd/zero-release smoke

Scope

Head: 498878728080
Changed files (4): .release-please-manifest.json, CHANGELOG.md, package-lock.json, package.json

This deterministic review checks validation status and basic diff hygiene. A human reviewer still owns product judgment and design quality.