diff --git a/CHANGELOG.md b/CHANGELOG.md
index b324593cb..13adb8fac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,58 @@
 # Changelog
 
+## [0.20.0] - 2026-10-25
+
+### Highlights
+
+- **Live command I/O and async output sinks.** Rust, Python, JavaScript, C and browser WASM consumers can stream command input/output while preserving shell routing and execution budgets ([#2741](https://github.com/everruns/bashkit/pull/2741), [#2749](https://github.com/everruns/bashkit/pull/2749)).
+- **Host functions for embedded runtimes.** Python and TypeScript scripts can call application-provided functions across native and browser bindings ([#2739](https://github.com/everruns/bashkit/pull/2739), [#2740](https://github.com/everruns/bashkit/pull/2740), [#2742](https://github.com/everruns/bashkit/pull/2742), [#2743](https://github.com/everruns/bashkit/pull/2743)).
+- **Security updates across runtime graphs.** Wasmtime 48.0.7, patched TLS validation/root bundles, Tokio 1.53.3 in the standalone Hyperlight guest, constant-time crypto fixes and supported Node security patches are included in the release source/build recipes. Unsoundness findings now fail every Cargo lockfile audit ([#2767](https://github.com/everruns/bashkit/pull/2767), [#2768](https://github.com/everruns/bashkit/pull/2768), [#2772](https://github.com/everruns/bashkit/pull/2772), [#2773](https://github.com/everruns/bashkit/pull/2773), [#2774](https://github.com/everruns/bashkit/pull/2774)).
+- **Optional runtime warm-up.** Embedders can initialize feature-enabled runtimes before serving requests with `warm_up()` ([#2750](https://github.com/everruns/bashkit/pull/2750)).
+
+**Breaking Rust API change:** the static-analysis enum `analysis::CommandContext` is now `analysis::CommandPlacement`. Before: `use bashkit::analysis::CommandContext;` and `CommandContext::Direct`. After: `use bashkit::analysis::CommandPlacement;` and `CommandPlacement::Direct`. Update annotations for `AnalyzedCommand.context` accordingly. The root `bashkit::CommandContext` now describes a live host-command invocation; it is not the analysis enum. Serialized `context` field names and values remain unchanged. See the [streaming guide](https://github.com/everruns/bashkit/blob/v0.20.0/docs/streaming.md) ([#2741](https://github.com/everruns/bashkit/pull/2741)).
+
+**Remaining dependency caveats:** optional SSH still uses RSA affected by Marvin (RUSTSEC-2023-0071); upstream has no published fix. Prefer Ed25519 to avoid RSA private-key operations. `atomic-polyfill` remains an unmaintained transitive dependency. Node is supplied by the embedding application: Node 18/20 compatibility does not imply security support; use a patched supported runtime. Downstream Rust applications should refresh their own lockfiles and rebuild. This release does not claim every dependency is vulnerability-free ([#2774](https://github.com/everruns/bashkit/pull/2774)).
+
+### What's Changed
+
+* fix(release): recover publication from immutable tags by @chaliy
+* fix(builtins): track uucore quoting-style rename in printf shim ([#2738](https://github.com/everruns/bashkit/pull/2738)) by @chaliy
+* feat(python): expose embedded runtime host functions to agent tools ([#2739](https://github.com/everruns/bashkit/pull/2739)) by @chaliy
+* feat(js): add Python and TypeScript runtime host functions ([#2740](https://github.com/everruns/bashkit/pull/2740)) by @chaliy
+* feat(capi): add Python and TypeScript runtime host functions ([#2742](https://github.com/everruns/bashkit/pull/2742)) by @chaliy
+* feat(streaming): add live command I/O and async output sinks ([#2741](https://github.com/everruns/bashkit/pull/2741)) by @chaliy
+* fix(capi): export runtime callbacks in Windows import libraries ([#2744](https://github.com/everruns/bashkit/pull/2744)) by @chaliy
+* feat(wasm): add Python and TypeScript runtime host functions ([#2743](https://github.com/everruns/bashkit/pull/2743)) by @chaliy
+* fix(ci): open a new coreutils drift PR when the previous one was closed ([#2745](https://github.com/everruns/bashkit/pull/2745)) by @chaliy
+* chore(builtins): sync uutils/coreutils argument surfaces and vendored modules ([#2746](https://github.com/everruns/bashkit/pull/2746)) by @chaliy
+* fix(testing): attribute fuzz canary echoes to the script that caused them ([#2747](https://github.com/everruns/bashkit/pull/2747)) by @chaliy
+* fix(testing): keep killed CLI children out of tarpaulin's coverage merge ([#2748](https://github.com/everruns/bashkit/pull/2748)) by @chaliy
+* fix(streaming): enforce budgets and preserve routed byte output ([#2749](https://github.com/everruns/bashkit/pull/2749)) by @chaliy
+* feat(bashkit): add feature-gated warm_up() entry point ([#2750](https://github.com/everruns/bashkit/pull/2750)) by @chaliy
+* fix(builtins): read od's generated args under either clap value type ([#2754](https://github.com/everruns/bashkit/pull/2754)) by @chaliy
+* chore(ci): bump taiki-e/install-action from 2.87.28 to 2.87.29 in the github-actions group ([#2756](https://github.com/everruns/bashkit/pull/2756)) by @app/dependabot
+* chore(deps): bump the site-npm group in /site with 3 updates ([#2751](https://github.com/everruns/bashkit/pull/2751)) by @app/dependabot
+* chore(deps): bump the docs-grep-agent-uv group in /examples/docs-grep-agent with 4 updates ([#2757](https://github.com/everruns/bashkit/pull/2757)) by @app/dependabot
+* chore(deps): bump the js-npm group in /crates/bashkit-js with 4 updates ([#2752](https://github.com/everruns/bashkit/pull/2752)) by @app/dependabot
+* chore(deps): bump the examples-npm group across 1 directory with 6 updates ([#2753](https://github.com/everruns/bashkit/pull/2753)) by @app/dependabot
+* chore(deps): bump the fuzz-dependencies group in /crates/bashkit/fuzz with 2 updates ([#2755](https://github.com/everruns/bashkit/pull/2755)) by @app/dependabot
+* chore(builtins): sync uutils/coreutils argument surfaces and vendored modules ([#2759](https://github.com/everruns/bashkit/pull/2759)) by @chaliy
+* fix(ci): open coreutils drift PRs with a token permitted to create them ([#2760](https://github.com/everruns/bashkit/pull/2760)) by @chaliy
+* chore(deps): land the safe rust-dependencies bumps and hold oxc at 0.117.x ([#2761](https://github.com/everruns/bashkit/pull/2761)) by @chaliy
+* chore(deps): bump wrangler from 4.151.0 to 4.151.1 in /site in the site-npm group ([#2762](https://github.com/everruns/bashkit/pull/2762)) by @app/dependabot
+* chore(deps): bump the docs-grep-agent-uv group in /examples/docs-grep-agent with 2 updates ([#2763](https://github.com/everruns/bashkit/pull/2763)) by @app/dependabot
+* chore(deps): bump the examples-npm group across 1 directory with 4 updates ([#2764](https://github.com/everruns/bashkit/pull/2764)) by @app/dependabot
+* fix(deps): bump wasmtime to 48.0.7 for RUSTSEC-2026-0379 and -0378 ([#2767](https://github.com/everruns/bashkit/pull/2767)) by @chaliy
+* fix(ci): unbreak main after the ubuntu-26.04 roll and the October advisories ([#2768](https://github.com/everruns/bashkit/pull/2768)) by @chaliy
+* chore(deps): bump rustyline from 18.0.1 to 19.0.0 ([#2765](https://github.com/everruns/bashkit/pull/2765)) by @app/dependabot
+* fix(builtins): read shuf's input range under either generated value type ([#2770](https://github.com/everruns/bashkit/pull/2770)) by @chaliy
+* chore(builtins): sync uutils/coreutils argument surfaces and vendored modules ([#2771](https://github.com/everruns/bashkit/pull/2771)) by @chaliy
+* fix(deps): clear the 2026-10-23 constant-time and npm advisories ([#2773](https://github.com/everruns/bashkit/pull/2773)) by @chaliy
+* fix(ci): pin supported Node security patch versions ([#2772](https://github.com/everruns/bashkit/pull/2772)) by @chaliy
+* fix(security): complete standalone runtime audits ([#2774](https://github.com/everruns/bashkit/pull/2774)) by @chaliy
+
+**Full Changelog**: https://github.com/everruns/bashkit/compare/v0.19.0...v0.20.0
+
 ## [0.19.0] - 2026-10-15
 
 ### Highlights
diff --git a/Cargo.lock b/Cargo.lock
index 3d8f5ad5f..b734e217d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -357,7 +357,7 @@ checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
 
 [[package]]
 name = "bashkit"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -438,7 +438,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-bench"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -453,7 +453,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-capi"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "bashkit",
  "serde",
@@ -463,7 +463,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cli"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "bashkit",
@@ -477,7 +477,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-coreutils-port"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "prettyplease",
@@ -491,7 +491,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cpython-wasm"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "lzma-rs",
  "wasmtime",
@@ -499,7 +499,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-eval"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -517,7 +517,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-js"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "bashkit",
  "bashkit-scripted-tool",
@@ -531,7 +531,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-python"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "bashkit",
  "bashkit-scripted-tool",
@@ -544,7 +544,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-scripted-tool"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -560,7 +560,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-wasm"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "bashkit",
  "console_error_panic_hook",
diff --git a/Cargo.toml b/Cargo.toml
index dd43c7087..f95017697 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -7,7 +7,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.19.0"
+version = "0.20.0"
 edition = "2024"
 license = "MIT"
 authors = ["Mykhailo Chalyi <mike@chaliy.name>", "Everruns"]
diff --git a/README.md b/README.md
index 494a0b2c9..1e088ba7f 100644
--- a/README.md
+++ b/README.md
@@ -442,7 +442,7 @@ Enable the `sqlite` feature to embed [Turso](https://github.com/tursodatabase/tu
 
 ```toml
 [dependencies]
-bashkit = { version = "0.19.0", features = ["sqlite"] }
+bashkit = { version = "0.20.0", features = ["sqlite"] }
 ```
 
 ```rust
diff --git a/crates/bashkit-cli/Cargo.toml b/crates/bashkit-cli/Cargo.toml
index a8967167a..b71a55e70 100644
--- a/crates/bashkit-cli/Cargo.toml
+++ b/crates/bashkit-cli/Cargo.toml
@@ -39,7 +39,7 @@ interactive = ["dep:rustyline", "dep:terminal_size", "dep:signal-hook"]
 # `tzdata` is listed explicitly: an interactive shell must keep honouring
 # named `TZ=` zones in `date`, which stopped being implied when chrono-tz
 # moved behind a feature.
-bashkit = { path = "../bashkit", version = "0.19.0", default-features = false, features = ["http_client", "ring", "git", "jq", "tzdata"] }
+bashkit = { path = "../bashkit", version = "0.20.0", default-features = false, features = ["http_client", "ring", "git", "jq", "tzdata"] }
 tokio = { workspace = true, features = ["macros", "net", "rt", "rt-multi-thread", "time", "io-std"] }
 clap.workspace = true
 anyhow.workspace = true
diff --git a/crates/bashkit-js/package.json b/crates/bashkit-js/package.json
index 3e2de177e..c7855951f 100644
--- a/crates/bashkit-js/package.json
+++ b/crates/bashkit-js/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@everruns/bashkit",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Sandboxed bash interpreter for JavaScript/TypeScript",
   "packageManager": "pnpm@10.33.0",
   "main": "wrapper.js",
diff --git a/crates/bashkit-scripted-tool/Cargo.toml b/crates/bashkit-scripted-tool/Cargo.toml
index eb1d3adfe..887c1a7a8 100644
--- a/crates/bashkit-scripted-tool/Cargo.toml
+++ b/crates/bashkit-scripted-tool/Cargo.toml
@@ -30,7 +30,7 @@ jq = ["bashkit/jq"]
 tracing = ["dep:tracing"]
 
 [dependencies]
-bashkit = { path = "../bashkit", version = "0.19.0", default-features = false, features = ["bash_tool"] }
+bashkit = { path = "../bashkit", version = "0.20.0", default-features = false, features = ["bash_tool"] }
 tokio = { workspace = true }
 async-trait = { workspace = true }
 tower = { workspace = true }
diff --git a/crates/bashkit-scripted-tool/README.md b/crates/bashkit-scripted-tool/README.md
index d21d1c751..0347edb1a 100644
--- a/crates/bashkit-scripted-tool/README.md
+++ b/crates/bashkit-scripted-tool/README.md
@@ -8,8 +8,8 @@ with pipes, variables, loops and `jq`.
 
 ```toml
 [dependencies]
-bashkit = "0.19"
-bashkit-scripted-tool = { version = "0.19", features = ["jq"] }
+bashkit = "0.20"
+bashkit-scripted-tool = { version = "0.20", features = ["jq"] }
 ```
 
 ```rust,ignore
diff --git a/crates/bashkit-wasm/package.json b/crates/bashkit-wasm/package.json
index 96df5b988..6a19cf377 100644
--- a/crates/bashkit-wasm/package.json
+++ b/crates/bashkit-wasm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@everruns/bashkit-wasm",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Sandboxed bash interpreter for the browser (WebAssembly). Single-threaded \u2014 no SharedArrayBuffer, no COOP/COEP headers.",
   "type": "module",
   "main": "index.js",
diff --git a/crates/bashkit/Cargo.toml b/crates/bashkit/Cargo.toml
index 340d91a85..5634b2218 100644
--- a/crates/bashkit/Cargo.toml
+++ b/crates/bashkit/Cargo.toml
@@ -143,7 +143,7 @@ monty = { version = "=0.0.19", optional = true }
 
 # Real CPython 3.14 as a WASI guest, precompiled to Pulley (cpython feature).
 # See knowledge/runtimes/cpython-wasm.md.
-bashkit-cpython-wasm = { path = "../bashkit-cpython-wasm", version = "0.19.0", optional = true }
+bashkit-cpython-wasm = { path = "../bashkit-cpython-wasm", version = "0.20.0", optional = true }
 wasmtime = { workspace = true, optional = true, features = ["pooling-allocator"] }
 monty-types = { version = "=0.0.19", optional = true }
 # Monty's ruff AST uses compact_str 0.9; get-size2 >=0.10.2 only implements
diff --git a/crates/bashkit/docs/cpython.md b/crates/bashkit/docs/cpython.md
index 9750b8538..f13931f07 100644
--- a/crates/bashkit/docs/cpython.md
+++ b/crates/bashkit/docs/cpython.md
@@ -19,7 +19,7 @@ Enable the `cpython` cargo feature and register the builtins:
 
 ```toml
 [dependencies]
-bashkit = { version = "0.19.0", features = ["cpython"] }
+bashkit = { version = "0.20.0", features = ["cpython"] }
 ```
 
 ```rust
@@ -242,7 +242,7 @@ executable memory. Enable `cpython-native` instead of `cpython` to compile it
 to machine code for your target at build time:
 
 ```toml
-bashkit = { version = "0.19.0", features = ["cpython-native"] }
+bashkit = { version = "0.20.0", features = ["cpython-native"] }
 ```
 
 Calls get 4-10x faster (`print(1)` ~1 ms instead of ~4 ms; CPU-bound code
diff --git a/crates/bashkit/docs/logging.md b/crates/bashkit/docs/logging.md
index 07e568823..51923b94c 100644
--- a/crates/bashkit/docs/logging.md
+++ b/crates/bashkit/docs/logging.md
@@ -14,7 +14,7 @@ Add the `logging` feature to your `Cargo.toml`:
 
 ```toml
 [dependencies]
-bashkit = { version = "0.19.0", features = ["logging"] }
+bashkit = { version = "0.20.0", features = ["logging"] }
 tracing-subscriber = "0.3"  # or your preferred subscriber
 ```
 
diff --git a/crates/bashkit/docs/sqlite.md b/crates/bashkit/docs/sqlite.md
index 3e195d3c9..e3c0a3be8 100644
--- a/crates/bashkit/docs/sqlite.md
+++ b/crates/bashkit/docs/sqlite.md
@@ -13,7 +13,7 @@ the `sqlite` feature. The engine is [Turso](https://github.com/tursodatabase/tur
 
 ```toml
 # Cargo.toml
-bashkit = { version = "0.19.0", features = ["sqlite"] }
+bashkit = { version = "0.20.0", features = ["sqlite"] }
 ```
 
 ```rust,ignore
diff --git a/crates/bashkit/fuzz/Cargo.lock b/crates/bashkit/fuzz/Cargo.lock
index ea23b035d..2a77566da 100644
--- a/crates/bashkit/fuzz/Cargo.lock
+++ b/crates/bashkit/fuzz/Cargo.lock
@@ -90,7 +90,7 @@ checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
 [[package]]
 name = "bashkit"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "async-trait",
@@ -140,7 +140,7 @@ dependencies = [
 
 [[package]]
 name = "bashkit-cpython-wasm"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "lzma-rs",
  "wasmtime",
diff --git a/crates/bashkit/src/lib.rs b/crates/bashkit/src/lib.rs
index efbcc41e6..d669a8a6b 100644
--- a/crates/bashkit/src/lib.rs
+++ b/crates/bashkit/src/lib.rs
@@ -323,7 +323,7 @@
 //!
 //! ```toml
 //! [dependencies]
-//! bashkit = { version = "0.19.0", features = ["git"] }
+//! bashkit = { version = "0.20.0", features = ["git"] }
 //! ```
 //!
 //! ```rust,ignore
@@ -354,7 +354,7 @@
 //!
 //! ```toml
 //! [dependencies]
-//! bashkit = { version = "0.19.0", features = ["python"] }
+//! bashkit = { version = "0.20.0", features = ["python"] }
 //! ```
 //!
 //! ```rust,ignore
diff --git a/docs/builtin_typescript.md b/docs/builtin_typescript.md
index e00070909..77c9304a0 100644
--- a/docs/builtin_typescript.md
+++ b/docs/builtin_typescript.md
@@ -12,7 +12,7 @@ Add the `typescript` feature to your `Cargo.toml`:
 
 ```toml
 [dependencies]
-bashkit = { version = "0.19.0", features = ["typescript"] }
+bashkit = { version = "0.20.0", features = ["typescript"] }
 ```
 
 Enable TypeScript in the builder:
diff --git a/docs/migrating-scripted-tool.md b/docs/migrating-scripted-tool.md
index 82fbd16e2..13f20ccfd 100644
--- a/docs/migrating-scripted-tool.md
+++ b/docs/migrating-scripted-tool.md
@@ -23,8 +23,8 @@ features = ["scripted_tool", "python", "typescript", "jq"]
 After:
 
 ```toml
-bashkit = { version = "0.19.0", features = ["python", "typescript", "jq"] }
-bashkit-scripted-tool = { version = "0.19.0", features = ["python", "typescript", "jq"] }
+bashkit = { version = "0.20.0", features = ["python", "typescript", "jq"] }
+bashkit-scripted-tool = { version = "0.20.0", features = ["python", "typescript", "jq"] }
 ```
 
 Keep `bashkit` only if you use it directly (`Bash`, `BashTool`, the `Tool`
diff --git a/examples/hyperlight/Cargo.lock b/examples/hyperlight/Cargo.lock
index 77ab496a0..3875d6804 100644
--- a/examples/hyperlight/Cargo.lock
+++ b/examples/hyperlight/Cargo.lock
@@ -69,7 +69,7 @@ checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
 [[package]]
 name = "bashkit"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/knowledge/log.md b/knowledge/log.md
index 71aa5a707..5db87c4c8 100644
--- a/knowledge/log.md
+++ b/knowledge/log.md
@@ -2,6 +2,8 @@
 
 ## 2026-10-24
 
+* **0.20.0 release preparation**: Synchronize workspace, native/browser package versions, internal release dependencies and standalone lockfiles; refresh self-hosted Python/TypeScript API references. The minor release documents the Rust analysis enum migration from `CommandContext` to `CommandPlacement`, live command I/O, runtime callbacks, and the security fixes since 0.19.0. Keep the opt-in SSH RSA Marvin and unmaintained atomic-polyfill caveats explicit. Exact multi-crate packaging validation and registry/platform verification follow the [Release Process](operations/release-process.md).
+
 * **Runtime security completion**: Pin CI/release Node lanes to patched 22.23.4/24.22.1; document legacy Node20 as compatibility-only. Align standalone Hyperlight Tokio with patched root/fuzz 1.53.3 for RUSTSEC-2026-0386. Cargo lockfile audits now fail on unsound warnings, with a regression preserving coverage of other ecosystems.
 * **Windows dependency**: Replace yanked clipboard-win5.4.1 with 5.4.3 via Rustyline; reviewed the HTML range/copy safety delta and recorded a precise cargo-vet delta audit without new exemptions or publisher trust. Rustyline calls Unicode reads, so exploitation through the changed HTML API is not established.
 * **Advisory retirement**: Remove the npm braces suppression after GitHub withdrew GHSA-vfj7-8cjw-p6xm on 2026-10-23; braces3.0.3 remains in AVA's dev-only graph, not patched code. RSA Marvin remains accepted only for opt-in SSH: the latest published RSA prerelease still warns of exposure, and russh pins rc.18. See [Threat Model](security/threat-model.md).