v0.19.0

What's Changed

• [code-review] Make log-follow tests synchronize readiness and terminate their workers by @danieljhkim in #1295
• [code-review] Replace dashboard behavioral source-string assertions with executable tests by @danieljhkim in #1296
• [code-review] Consolidate duplicated CLI and web job-run JSON projections by @danieljhkim in #1297
• [code-review] Bound initial log-tail buffering by the requested matching window by @danieljhkim in #1298
• [code-review] Apply the scoreboard time window to retries and duration metrics by @danieljhkim in #1299
• [auto-task] Doc duties — validate the least-recently-validated docs by @danieljhkim in #1300
• Onboard gpt-6-astra and gemini-3.8-flash in Orbit by @danieljhkim in #1301
• Prevent Dependabot and CI sweeps from filing duplicate tasks by @danieljhkim in #1302
• [code-review] Distinguish unavailable scoreboard side metrics from real zero counts by @danieljhkim in #1303
• Add orbit host show for local host identity by @danieljhkim in #1304
• Add opt-in completion policy to orbit run ship and run auto by @danieljhkim in #1305
• [code-review] orbit task flow counts a done-then-archived task as two outflow events by @danieljhkim in #1306
• Prevent task_trimmed_surface tests from writing fixtures to the live Orbit workspace by @danieljhkim in #1307
• [code-review] Epic PR-mode --complete fails on an empty-delivery epic because pr_complete demands the no-diff-expected tag by @danieljhkim in #1310
• [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @danieljhkim in #1309
• [code-review] Dashboard scoreboard renders unavailable failure-incident metrics as a measured zero by @danieljhkim in #1308
• Bound task-list bundle hydration and eliminate repeated dashboard reads by @danieljhkim in #1311
• Remove retired ADR authority from task-pilot instructions while preserving compatibility by @danieljhkim in #1312
• Explain why auto-drain leaves backlog tasks waiting by @danieljhkim in #1313
• Correct non-runnable Orbit skill examples for pilot inputs and activity inspection by @danieljhkim in #1314
• Extract CI checkout identity before truncating human log excerpts by @danieljhkim in #1315
• Make targeted run cancellation race safely with worker terminalization by @danieljhkim in #1316
• Show actual activity model selection alongside the requested workflow crew by @danieljhkim in #1317
• Pilot and revalidate CI-sweep findings before exposing them to auto-drain by @danieljhkim in #1318
• Show workspace-attributed runs in the dashboard All workspaces view by @danieljhkim in #1319
• Refresh CLI tool-list goldens for streaming GitHub log evidence by @danieljhkim in #1320
• Respect repository merge methods in --complete and preserve completion failure semantics by @danieljhkim in #1321
• Synchronize escaped-pipe-holder test before the parent exits by @danieljhkim in #1322
• Add a website guide for preparing and operating continuous delivery by @danieljhkim in #1323
• Keep overlapping pilot preparation from discarding unrelated valid partitions by @danieljhkim in #1324
• Isolate output golden tests from inherited live workspace authority by @danieljhkim in #1325
• Continue --complete polling when repository auto-merge is disabled by @danieljhkim in #1326
• [code-review] CI-failure sweep files nothing when checkout-evidence hits any bound, including display caps by @danieljhkim in #1327
• Make dashboard shutdown finish promptly during a live service restart by @danieljhkim in #1328
• Include required complexity in auto-task finding examples by @danieljhkim in #1329
• Prepare pilot context against a consistent current landing-branch snapshot by @danieljhkim in #1330
• Update completion pipeline fixture for required auto-merge capability by @danieljhkim in #1332
• Start a bounded auto-delivery window from the Orbit dashboard by @danieljhkim in #1333
• Select recent dashboard runs before applying per-workspace limits by @danieljhkim in #1334
• Allow an auto-drain to exclude unavailable crews for its run window by @danieljhkim in #1335
• Start the dashboard drain timeout only after shutdown is requested by @danieljhkim in #1336
• Bound task-pilot discovery evidence as workspace history grows by @danieljhkim in #1337
• Run failed-task triage with an enforceable Linux filesystem policy by @danieljhkim in #1338
• Ship orbit-orchestrate skill for continuous task preparation, delivery, and recovery by @danieljhkim in #1339
• Restore dashboard compilation after auto-drain crew allowlist API change by @danieljhkim in #1340
• Make task-pilot advisory field types explicit in its response schema by @danieljhkim in #1341
• Regenerate the skill-list golden after orbit-orchestrate registration by @danieljhkim in #1342
• Reduce repeated Rust dependency compilation across Orbit worker worktrees by @danieljhkim in #1343
• [BLOCKED] Adjust an active auto-drain worker limit without replacing its coordinator by @danieljhkim in #1344
• docs: clarify Orbit orchestration completion and recovery guidance by @danieljhkim in #1345
• Make crew selection on run job discoverable and correct invalid-flag guidance by @danieljhkim in #1346
• [code-review] sync-plugin-skills.sh --check does not detect orphaned plugin/skills directories after a skill is removed or renamed by @danieljhkim in #1347
• [code-review] task_auto_pipeline's list_backlog step does not forward allowed_crews, so crew-excluded tasks pass discovery and only fail at the final gate by @danieljhkim in #1348
• [code-review] task_pilot's align_clean_primary fast-forwards the shared primary checkout without serialization, racing under the job's own concurrency limit by @danieljhkim in #1349
• [auto-task] Doc duties — validate the least-recently-validated docs by @danieljhkim in #1350
• Pilot from an immutable source snapshot while preserving a dirty primary checkout by @danieljhkim in #1351
• [ci-failure-sweep] Fix red CI: CI / Coverage (informational) / Collect workspace coverage by @danieljhkim in #1352
• [ci-failure-sweep] Fix red CI: macOS Platform / macOS Sandbox / Run orbit-core sandbox tests by @danieljhkim in #1353
• [code-review] Compiler-cache guardrail test uses shared /tmp stable mounts and flakes under concurrent runs by @danieljhkim in #1354
• [code-review] Readiness ignores string concurrency submitted through run job by @danieljhkim in #1355
• Ship Linux sandbox prerequisites in the installed Orbit setup skill by @danieljhkim in #1356
• Refresh CLI tool-list goldens for the live worker-control tool surface by @danieljhkim in #1357
• Add validated per-crew effort levels to config.toml and executor dispatch by @danieljhkim in #1358
• Detect actionable CI failures while newer workflows or sibling checks are still running by @danieljhkim in #1359
• Correlate parallel provider completion events by invocation identity by @danieljhkim in #1360
• Honor crew effort for supported Claude and Grok executors by @danieljhkim in #1361
• Automatically recover delivery merge conflicts with the system crew before review by @danieljhkim in #1362
• Make the source-inspection dispatch regression independent of ripgrep installation by @danieljhkim in #1363
• Fix CI capability-map expectations for the worker-control MCP tool by @danieljhkim in #1364
• Add orbit update with version selection, compatibility migrations, and managed asset sync by @danieljhkim in #1365
• Remove model_pair_override from shipped executors while preserving legacy compatibility by @danieljhkim in #1366
• Prevent integration tests from inheriting live managed workspace authority by @danieljhkim in #1367
• Add a workspace-scoped command to stop auto admissions cleanly by @danieljhkim in #1368
• Add Pi as a first-class headless Orbit executor by @danieljhkim in #1369
• Revamp website documentation for current Orbit workflows and remove metrics and architecture sections by @danieljhkim in #1370
• Restore local-shell as a supported v2 executor by @danieljhkim in #1371
• Remove retired website sync commands from CI workflow by @danieljhkim in #1372
• Replace the default Gemini CLI executor with Antigravity CLI and migrate legacy configurations by @danieljhkim in #1373
• Fix macOS sandbox test initializers after Pi environment support by @danieljhkim in #1374
• Document a reproducible runbook for onboarding a new executor by @danieljhkim in #1375
• Isolate global-init unit tests from inherited managed-run authority by @danieljhkim in #1376
• Revalidate task eligibility after gate waits to prevent archived work from starting by @danieljhkim in #1377
• Make CI sweep file complete findings despite bounded investigation gaps by @danieljhkim in #1378
• Invalidate Pi completion when a later assistant terminal frame fails by @danieljhkim in #1379
• Keep compiler-cache environment rewriting compatible with macOS Bash 3.2 by @danieljhkim in #1380
• Make auto stop acknowledgement atomic with child admission by @danieljhkim in #1381
• Add OpenCode as a first-class headless Orbit executor by @danieljhkim in #1382
• Design operation-mode presets for automated preparation and delivery by @danieljhkim in #1383
• Extend operation-mode design with review timing and repair policy by @danieljhkim in #1384
• Design shared state-driven triggers for auto-tasks and routines by @danieljhkim in #1385
• Default task orchestrator attribution from MCP session configuration by @danieljhkim in #1386
• [code-review] Use the canonical Antigravity identity when validating crew effort by @danieljhkim in #1387
• [code-review] Keep incomplete mixed-state CI evidence retryable through filing by @danieljhkim in #1388
• [code-review] Fix prerelease ordering so orbit update cannot bypass downgrade safety by @danieljhkim in #1389
• [friction-curation] Stop the task-authoring skill from recommending source_task_id on task.add by @danieljhkim in #1390
• [friction-curation] Surface orchestrator task comments in the executor's injected task context by @danieljhkim in #1391
• [ci-failure-sweep] Fix red CI: CI / Coverage (informational) / Collect workspace coverage by @danieljhkim in #1392
• [friction-curation] Correct the compiler-cache runbook's SCCACHE_BASEDIRS claim and the wrapper's dead export by @danieljhkim in #1393
• [friction-curation] Serialize the workspace-init env capture and restore assertions under EnvGuard by @danieljhkim in #1394
• [friction-curation] Guard the shipped-vs-workspace activity asset mirror in ci-fast by @danieljhkim in #1395
• [friction-curation] Add a runbook for validating website changes inside a job-run sandbox by @danieljhkim in #1396
• [friction-curation] Isolate the orbit-tools policy-deny tracing fixture from inherited managed-run authority by @danieljhkim in #1397
• [code-review] Enforce the task-comment byte budget in executor envelopes by @danieljhkim in #1398
• [friction-curation] Document that a step output read by a job condition must belong to an always-run step by @danieljhkim in #1399
• Align Antigravity print timeout with Orbit activity budget and surface terminal errors by @danieljhkim in #1400
• [ci-failure-sweep] Fix red CI: CI / Coverage (informational) / Collect workspace coverage by @danieljhkim in #1401
• Restore failed Orbit updates with atomic executable replacement by @danieljhkim in #1402
• [code-review] Propagate ancestor guards in job output-readiness validation by @danieljhkim in #1403
• Revalidate installed version under the update lock before replacement by @danieljhkim in #1404
• Restrict Codex and Copilot answer projection to assistant answer content by @danieljhkim in #1405
• Preserve explicit Orbit root through update migration and synchronization by @danieljhkim in #1406
• [code-review] Reject a parent guard that reads its own nested output by @danieljhkim in #1408
• Keep nested repository workspace initialization from inheriting the parent registration by @danieljhkim in #1407
• Clarify local ship review side effects and authoritative completion routing by @danieljhkim in #1409
• Select the terminal Codex answer without concatenating progress messages by @danieljhkim in #1410
• Establish orbit-automation crate, shared triggers, delivery sweeps, and artifact-based coverage by @danieljhkim in #1411
• Add an interactive executor and crew setup explorer to the website by @danieljhkim in #1412
• Upgrade the website homepage for current Orbit workflows by @danieljhkim in #1413
• Resolve task-pilot base branch from the owning workspace instead of agent-main by @danieljhkim in #1414
• Recognize checkout SHA command output when CI step labels are unknown by @danieljhkim in #1415
• Exclude passing test names from CI failure deduplication signatures by @danieljhkim in #1416
• [code-review] Copilot answer projection concatenates commentary, dropping a declared failed/timeout status by @danieljhkim in #1417
• Defer CI refs whose current relevance was not established within probe bounds by @danieljhkim in #1418
• Read complete task bundles consistently during concurrent lifecycle writes by @danieljhkim in #1419
• Diagnose empty workspace identity after resumed local delivery and support safe recovery by @danieljhkim in #1420
• Format the CI relevance repair so the repository guardrail passes by @danieljhkim in #1421
• Reconcile the broken runner-local CI task reporter with host-owned failure filing by @danieljhkim in #1422
• Fix Clippy needless borrow in checkout evidence command handling by @danieljhkim in #1423
• Refresh MCP tools snapshots for automation coverage artifact guidance by @danieljhkim in #1424
• Restore a verifiable publication path for the stale public Orbit website by @danieljhkim in #1425
• Add an operator-only agent invocation job for exploration and debugging by @danieljhkim in #1426
• [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @danieljhkim in #1427
• [qa-sweep] mcp_roundtrip Linux security regression hard-fails instead of skipping in restricted sandboxes by @danieljhkim in #1428
• [qa-sweep] Dashboard refuses to start when any one registered workspace is missing .orbit/config.yaml by @danieljhkim in #1429
• Catch initialized dirty landing checkouts before expensive local implementation by @danieljhkim in #1430
• [qa-sweep] Delivery inspection reports not_due while admission is actually halted by definition_changed or open_instance by @danieljhkim in #1431
• Enforce an optional crew allowlist for explicit ship admission and child dispatch by @danieljhkim in #1433
• [BLOCKED] [qa-sweep] orbit web serve ignores an explicit --root and reads the global workspace registry by @danieljhkim in #1432
• Implement state-driven task preparation and failure triage by @danieljhkim in #1434
• [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @danieljhkim in #1435
• [code-review] Trusted-host refusal messages contain runs of literal whitespace from mangled string continuations by @danieljhkim in #1436
• Improve agent implementation guidance and multi-language tooling [ORB-11409] by @danieljhkim in #1437
• feat: implement image support for task artifacts [ORB-11413] by @danieljhkim in #1438
• docs: add RCA for recursive test-worker fork storm by @danieljhkim in #1439
• Fix zero-input task-pilot template failure after base_branch default removal by @danieljhkim in #1440
• Remove fork-storm test cases and prevent recursive test-worker spawning by @danieljhkim in #1441
• [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @danieljhkim in #1442
• Sweep Orbit source for readable spacing, logical grouping, and consistent organization by @danieljhkim in #1443
• Support explicit workspace source-remote rebinding for repository transfers by @danieljhkim in #1444
• Prepare constellation-works Orbit URLs and distribution metadata for cutover by @danieljhkim in #1445
• Treat omitted optional base_branch input as empty during job template binding by @danieljhkim in #1446
• [BLOCKED] Preserve Codex WebSocket CA trust under macOS sandbox keychain restrictions by @danieljhkim in #1447
• Survey post-v0.18.0 changes for the constellation-works release by @danieljhkim in #1448
• Prepare v0.19.0 release by @danieljhkim in #1449

Full Changelog: v0.18.0...v0.19.0