Release create-monox 0.2.0 stable

[Mosharush]

Summary

• promote the deterministic create-monox generator and generated offline contracts to 0.2.0 under the stable npm channel
• keep the source-only delivery CLI, remote adapters, cloud providers and production case study inside their verified boundaries
• update EN/HE site copy, social assets, CSP parity and release documentation
• verify npm latest/next dist-tags during trusted-publishing release verification
• rename the 0.2 acceptance workflow and add explicit generator lock/version assertions

Stable support boundary

create-monox@0.2.0 ships the generator, 24 bundled workspace recipes, generated deployment contracts, local-service/CI/container artifacts and deterministic monox.lock records. It does not install the npm-private @monox/cli.

PM2, SSH, Coolify and Kubernetes state changes remain guarded behind injected transports. AWS and Google Cloud remain plan-only. The private production reference is not presented as a completed public case study.

Verification

• yarn install --immutable
• yarn check (176 tests, 29 workspace builds, infrastructure validation)
• yarn workspace create-monox test
• yarn npm audit --all --recursive --severity high
• npm@12.0.1 pack --dry-run --json --workspaces=false
• actionlint .github/workflows/*.yml
• focused web, CSP, generator and provider tests
• EN/HE browser QA at desktop and 390 px, with no horizontal overflow or console warnings

Before tagging, the exact merged main commit will also run the 0.2 release acceptance workflow and the complete hosted 24-recipe catalog matrix.

[Copilot]

Pull request overview

Promotes MonoX / create-monox from 0.2.0-alpha.1 to the stable 0.2.0 line, updating versioned metadata, generator/contract boundary messaging, and the public site + release workflows to reflect the stable support surface (deterministic generation + offline contracts) while keeping remote/cloud execution guarded/plan-only.

Changes:

• Bump versions across the repo from 0.2.0-alpha.1 → 0.2.0, including runtime health responses, fixtures, and package metadata.
• Update docs/site copy to explicitly describe the stable generator boundary and that create-monox@0.2.0 does not install a public monox delivery CLI (source-checkout only).
• Tighten release automation wording and verification (acceptance workflow rename + npm release verification enhancements).

Reviewed changes

Copilot reviewed 74 out of 81 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
SUPPORT.md	Update support boundary wording for 0.2 stable generator line
SECURITY.md	Narrow supported versions guidance to 0.2.x line + default branch
scripts/kubernetes-runtime-smoke.sh	Align expected API health version to 0.2.0
README.md	Update top-level project messaging + stable npm create instructions
packages/workspaces/package.json	Version bump to 0.2.0
packages/test-utils/package.json	Version bump to 0.2.0
packages/telemetry/package.json	Version bump to 0.2.0
packages/shared/package.json	Version bump to 0.2.0
packages/service-discovery/package.json	Version bump to 0.2.0
packages/runner/package.json	Version bump to 0.2.0
packages/provider-gcp/src/index.mjs	Update plan-only messaging + version constant
packages/provider-gcp/README.md	Update 0.2.0 plan-only wording
packages/provider-gcp/package.json	Version bump to 0.2.0
packages/provider-aws/src/index.mjs	Update plan-only messaging + version constant
packages/provider-aws/README.md	Update 0.2.0 plan-only wording
packages/provider-aws/package.json	Version bump to 0.2.0
packages/mono-runner/package.json	Version bump to 0.2.0
packages/logger/package.json	Version bump to 0.2.0
packages/lifecycle/package.json	Version bump to 0.2.0
packages/kube-renderer/test/fixtures/v2-worker.json	Update fixture image tag to 0.2.0
packages/kube-renderer/package.json	Version bump to 0.2.0
packages/fastify/package.json	Version bump to 0.2.0
packages/deploy-schema/src/generated.d.ts	Update “0.2 alpha” compatibility comment
packages/deploy-schema/scripts/generate-types.mjs	Keep generated comment in sync with declarations
packages/deploy-schema/package.json	Version bump to 0.2.0
packages/create-monox/test/generator.test.mjs	Add lock/version assertions + updated boundary text expectations
packages/create-monox/test/cli.test.mjs	Update CLI output expectations to stable wording/version
packages/create-monox/src/generator.mjs	Set generator version + update guarded delivery/k8s placeholder copy
packages/create-monox/src/generator.d.ts	Update declared generator version literal
packages/create-monox/src/cli.mjs	Update help text wording for unavailable delivery targets
packages/create-monox/README.md	Update stable quickstart + clarify CLI boundary; pin header asset to release tag
packages/create-monox/package.json	Version bump to 0.2.0
packages/config/package.json	Version bump to 0.2.0
packages/cloudapter-static/src/index.mjs	Version bump to 0.2.0
packages/cloudapter-static/README.md	Update wording about source-tree CLI being npm-private
packages/cloudapter-static/package.json	Version bump to 0.2.0
packages/cloudapter-ssh/src/index.mjs	Version bump to 0.2.0
packages/cloudapter-ssh/package.json	Version bump to 0.2.0
packages/cloudapter-pm2/src/index.mjs	Version bump to 0.2.0
packages/cloudapter-pm2/package.json	Version bump to 0.2.0
packages/cloudapter-local/src/index.mjs	Version bump to 0.2.0
packages/cloudapter-local/package.json	Version bump to 0.2.0
packages/cloudapter-kubernetes/src/index.mjs	Version bump to 0.2.0 constant
packages/cloudapter-kubernetes/package.json	Version bump to 0.2.0
packages/cloudapter-core/src/index.mjs	Update NoopCloudapter default version to 0.2.0
packages/cloudapter-core/package.json	Version bump to 0.2.0
packages/cloudapter-coolify/src/index.mjs	Version bump to 0.2.0
packages/cloudapter-coolify/package.json	Version bump to 0.2.0
packages/cli/README.md	Clarify CLI is source-tree-only in 0.2.0; update examples to yarn monox
packages/cli/package.json	Version bump to 0.2.0
packages/app-runtime/package.json	Version bump to 0.2.0
packages/agent-kit/package.json	Version bump to 0.2.0
packages/affected/package.json	Version bump to 0.2.0
package.json	Root version bump to 0.2.0
infra/kubernetes/example.v2.deployment.json	Update example image tag to 0.2.0
docs/security-gate.md	Reframe gate for public 0.2.x releases (not just alpha)
docs/roadmap.md	Rewrite roadmap around stable generator boundary + follow-up tracks
docs/migration.md	Update guidance for source-tree CLI usage (needs small fix)
docs/deployment.md	Update 0.2.0 wording + switch examples to source-tree yarn monox flow
docs/capability-status.md	Update vocabulary + mark which capabilities are “Verified in release”
docs/architecture.md	Reframe 0.2 as stable generator/offline-contract line
docs/agent-contract.md	Clarify yarn monox is source-checkout tooling; generator doesn’t install CLI
CHANGELOG.md	Add 0.2.0 release entry dated 2026-07-26
assets/brand/monox-readme-header.svg	Update copy to stable @latest create command
assets/brand/monox-og.svg	Update copy to stable @latest create command
apps/web/test/server.test.mjs	Assert stable copy + CSP parity between app + nginx config
apps/web/src/server.mjs	Update CSP hash + runtime version to 0.2.0
apps/web/public/index.html	Update EN site copy to stable boundary + cache-busted OG image URL
apps/web/public/index.he.html	Update HE site copy to stable boundary + cache-busted OG image URL
apps/web/package.json	Version bump to 0.2.0
apps/web/deploy/nginx/monox.dev.conf	Update CSP hash to match site structured-data hash
apps/api/test/server.test.mjs	Update expected API health version to 0.2.0
apps/api/src/server.mjs	Update runtime version to 0.2.0
apps/api/package.json	Version bump to 0.2.0
.github/workflows/release-acceptance.yml	Rename workflow + adjust concurrency group key
.github/workflows/README.md	Update workflow docs to match stable/prerelease dist-tag policy
.github/workflows/npm-release-verification.yml	Add dist-tag verification during automated (non-manual) verification
.github/ISSUE_TEMPLATE/bug-report.yml	Update version placeholder to 0.2.0

Comments suppressed due to low confidence (1)

docs/migration.md:54

• This redacted-report example still uses --root . and writes output relative to the current directory, which contradicts the updated guidance to point --root at the repository being assessed when running from a MonoX checkout.

  --root . \
  --redact-identifiers \
  --output .monox/migration-public.json

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.