v0.2.0

v0.2.0 is the biggest Spacebot release yet.

The agent is no longer a single-channel chatbot, it's a multi-agent system with real orchestration primitives.

Agents coordinate through a spec-driven task system with a full kanban board in the UI. Tasks are structured markdown documents with requirements, constraints, and acceptance criteria. The cortex background loop picks up ready tasks, spawns workers, and handles completion or re-queuing on failure. Agents see the shared task board through the bulletin system, so delegation happens through specs, not conversation.

Workers got a complete visibility overhaul. Full transcript persistence with gzip compression, live SSE streaming of tool calls as they happen, and a new worker_inspect tool so branches can verify what a worker actually did instead of trusting a one-line summary.

On the security front, the old string-based command filtering (215+ lines of whack-a-mole regex) has been replaced with kernel-enforced filesystem sandboxing via bubblewrap on Linux and sandbox-exec on macOS. The LLM can't write outside the workspace because the OS won't let it.

This release also brings OpenAI and Anthropic subscription auth support, better channel history preservation with deterministic retrigger handling, structured text payload blocking to keep raw JSON/XML out of user-facing messages, self-hosted update controls in the settings UI, new provider support (Kilo Gateway, OpenCode Go), prebuilt Linux binaries for amd64/arm64, a Nix flake, and a pile of fixes across cron scheduling, OAuth, model routing, and more.

What's Changed

• feat(nix): add Nix flake for building and deploying Spacebot by @skulldogged in #47
• Fix chatgpt oauth by @marijnvdwerf in #187
• Multi-agent communication graph by @jamiepine in #150
• Process sandbox: kernel-enforced filesystem containment for shell/exec by @jamiepine in #188
• Workers tab: full transcript viewer, live SSE streaming, introspection tool by @jamiepine in #192
• add settings update controls and harden self-hosted update flow by @jamiepine in #207
• feat(web): ui/ux cleanup by @skulldogged in #143
• feat(ci): publish binaries for linux/amd64 and linux/arm64 on release by @morgaesis in #94
• block structured text payloads from user replies by @jamiepine in #209
• Fix Z.AI Coding Plan model routing by @jamiepine in #210
• fix: use Bearer auth when key comes from ANTHROPIC_AUTH_TOKEN by @worldofgeese in #196
• fix: use Bearer auth for ANTHROPIC_AUTH_TOKEN and add ANTHROPIC_MODEL by @worldofgeese in #197
• Task tracking system with kanban UI and spec-driven delegation by @jamiepine in #227
• fix: make background result retriggers deterministic by @jamiepine in #231
• fix: guide users to enable device code login for ChatGPT OAuth by @mwmdev in #214
• fix(cron): make cron scheduler reliable under load and in containers by @mmmeff in #186
• Fix Z.AI coding-plan model remap for GLM-5 by @vsumner in #223
• fix: Default cron delivery target to current conversation by @jaaneh in #213
• feat(llm): add Kilo Gateway and OpenCode Go provider support by @skulldogged in #225

New Contributors

• @morgaesis made their first contribution in #94
• @worldofgeese made their first contribution in #196
• @mwmdev made their first contribution in #214
• @mmmeff made their first contribution in #186
• @jaaneh made their first contribution in #213

Full Changelog: v0.1.15...v0.2.0