v0.5.0

Highlights

• One-click agent update (#18): the web app shows a banner when an agent runs an older version and can update it with one click. The server version now appears in the footer.
• Hardened task sandbox (#23): the compose guard now accepts only allowlisted keys, uses a real YAML parser, and refuses provider, privileged hooks, use_api_socket, gpus, foreign networks, volume and network driver options, and local build caches. Every symlink in the committed tree is checked, and the whole compose project is paused before a commit. This supersedes #8 and #9, closes #14, and includes commits by @laupernoe.

Fixes

• #20: the env_file override now applies to every compose call (build/up). Compose files no longer set a fixed container_name. E2E runs are isolated with ORCH_E2E_PROJECT.
• #7: a connected agent loses access when its owner's access is removed. A GitHub outage gets a grace period, and suspension (4403) is not fatal. Thanks @laupernoe.
• #11: if orch done fails, the manual session keeps its .git. Thanks @laupernoe.
• #12: the avatar fallback on the admin Access page was blocked by the CSP. Thanks @laupernoe.
• #13: the OAuth consent page can no longer be submitted twice, and the server issues one authorization code per consent request. Thanks @laupernoe.

Known follow-up

• #30: limit resource use by task containers (item 8 of #14).

Many thanks to @laupernoe for the review and the fixes in this release.