v0.22.1

What's Changed

• feat(auto-tasks): attribute review and CI findings with regression_from by @orbit-agent-01 in #2090
• fix(make): install to ~/.orbit/bin, matching install.sh by @orbit-agent-01 in #2091
• [friction-curation] Name doc-duty template eligibility and generated INDEX.md in the auto-task prompt by @orbit-agent-01 in #2092
• doctor_check_stalled_automation was inserted inside doctor_check_task_relations's doc comment, splitting both rustdocs by @orbit-agent-01 in #2093
• [BLOCKED] [auto-task] Doc duties — validate the least-recently-validated docs by @orbit-agent-01 in #2094
• [BLOCKED] Repo-local delivery-code-review.yaml never received the regression_from rules, so minted tasks still use the old template by @orbit-agent-01 in #2095
• Stop hard-failing on newer store schema/layout: forward-compatible open or auto-migrate by @orbit-agent-01 in #2097
• [BLOCKED] Add orbit run task-pilot entrypoint for task_pilot_pipeline by @orbit-agent-01 in #2096
• Require agent_implement final file-scope reconciliation and cleanup before success by @orbit-agent-01 in #2098
• Allow delivery despite primary source dirt when remote integration is clean by @orbit-agent-01 in #2099
• Preserve managed worktree context when dispatching step_failure_recovery by @orbit-agent-01 in #2100
• Dashboard: let a human force any task status from any status (parity with CLI --force) by @orbit-agent-01 in #2101
• Recover failed-job CI evidence when parent workflow logs are unavailable in progress by @orbit-agent-01 in #2102
• User-facing docs still omit orbit run task-pilot after PR #2096 by @orbit-agent-01 in #2103
• [security-review] Website checks gate is inert: setup-node is pinned to a nonexistent commit, so every run fails at job setup by @orbit-agent-01 in #2104
• [security-review] MCP callers authorization ceiling is seeded and loaded without ownership or permission validation by @orbit-agent-01 in #2105
• [security-review] Orbit state directories are created with the ambient umask, so 0600 stores inside them stay group-replaceable by @orbit-agent-01 in #2107
• [BLOCKED] [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @orbit-agent-01 in #2106
• Align positioning with current provider execution by @orbit-agent-01 in #2110
• Document dashboard inline task editing by @orbit-agent-01 in #2109
• Clarify the README first-task and review workflow by @orbit-agent-01 in #2108
• agent_implement: make the cleanup contract language-neutral; drop cargo clean and stop failing handoff on ignored build output by @orbit-agent-01 in #2111
• Assign explicit default complexity to shipped auto-task templates by @orbit-agent-01 in #2113
• Verify Linux step failure recovery with a real sandboxed subprocess by @orbit-agent-01 in #2115
• [code-scanning-sweep] Fix rust/cleartext-logging at 2 locations in crates/orbit-cli/src/command/mcp/callers.rs by @orbit-agent-01 in #2112
• Make doc-duty placeholder date selection deterministic by @orbit-agent-01 in #2114
• Expose auto-task definition provenance when inspecting linked worktrees by @orbit-agent-01 in #2116
• QA sign-off harness asserts stale succeeded run state, failing legacy-logs-compatibility on a healthy candidate by @orbit-agent-01 in #2117
• macOS sandbox denies writes under $CARGO_HOME/registry, so any worker whose build needs an uncached crate fails cargo test with exit 101 (failed to open …/registry/cache/…/chunked_transfer-1.5.0.crate: Operation not permitted) by @orbit-agent-01 in #2118
• step_failure_recovery never starts when the original error is large: unbounded error_message (2.5 MB primary_checkout_drift diagnostic) makes the codex prompt exceed 1,048,576 chars → input_too_large, exit 1 in 416 ms by @orbit-agent-01 in #2120
• macOS sandbox denies PTY allocation (openpty returns -1), so any repository whose test suite opens a pseudo-terminal cannot pass its full validation inside a worker and lands in blocked by @orbit-agent-01 in #2121
• feat(website): redesign the landing page around the CLI walkthrough by @danieljhkim in #2119
• [code-review] CI investigation treats a failed job-log fallback as a completed recovery, skipping the checkout-evidence read and mislabelling its scope by @orbit-agent-01 in #2122
• [qa-sweep] Add unit test coverage for orbit mcp callers check redaction by @orbit-agent-01 in #2123
• [code-review] Start-transition writes through orbit.task.update skip every field validation update_task_locked owns by @orbit-agent-01 in #2124
• [ci-failure-sweep] Fix red CI: macOS Platform / macOS Sandbox / Run orbit-exec sandbox tests (real sandbox-exec) by @orbit-agent-01 in #2125
• [qa-sweep] orbit-core transitions.rs test hook (TRANSITION_READ_HOOK_STATUS) races across unrelated tests under cargo test by @orbit-agent-01 in #2126
• Prepare v0.22.1 release by @orbit-agent-01 in #2127

Full Changelog: v0.22.0...v0.22.1