@blade-ai/orca 0.2.36 → 0.2.43-darwin-x64

package/README.md

@@ -33,7 +33,7 @@ Set `INSTALL_DIR` to choose a destination and `ORCA_VERSION` to pin a version:
 
 ```bash
 curl -fsSL https://orcaagent.dev/install.sh | \
-  INSTALL_DIR=/usr/local/bin ORCA_VERSION=0.2.36 sh
+  INSTALL_DIR=/usr/local/bin ORCA_VERSION=0.2.43 sh
 ```
 
 ### GitHub Releases
@@ -45,6 +45,15 @@ Download the archive for your platform from the latest GitHub Release, extract i
 - QQ group: `472309526`
 - Telegram: https://t.me/+11No1w5ZbTMyZTQ1
 
+## Contributing and Support
+
+- Read [CONTRIBUTING.md](CONTRIBUTING.md) before contributing. Open an issue first for large or compatibility-sensitive changes.
+- Report bugs with the [bug report form](https://github.com/echoVic/blade-deepseek/issues/new?template=bug_report.yml).
+- Propose features with the [feature request form](https://github.com/echoVic/blade-deepseek/issues/new?template=feature_request.yml).
+- Suggest documentation improvements with the [documentation form](https://github.com/echoVic/blade-deepseek/issues/new?template=documentation.yml).
+- Use [SUPPORT.md](SUPPORT.md) for questions and help.
+- Report vulnerabilities privately as described in [SECURITY.md](SECURITY.md).
+
 ## Quick Start
 
 ```sh
@@ -118,6 +127,19 @@ api_key = "sk-..."
 base_url = "https://api.deepseek.com"
 ```
 
+Project-local `.orca/config.toml`, `AGENTS.md`, `.orca/rules`, project skills,
+and named project workflows are loaded only after the folder is trusted. New
+folders use a strict read-only, no-network default sandbox. Manage trust with:
+
+```sh
+orca trust show --cwd /path/to/project
+orca trust add --cwd /path/to/project
+orca trust remove --cwd /path/to/project
+```
+
+The TUI exposes the same state through `/trust`, `/trust add`, and
+`/trust remove`.
+
 ### Updates
 
 When `update_check` is enabled, Orca checks for a newer release before opening the interactive TUI. If a newer release is available, Orca shows a startup prompt with `Update now`, `Skip`, and `Skip until next version`. Choosing `Update now` updates the currently running install: npm-managed launches run the npm upgrade command, while direct binary launches rerun the curl installer into the current executable's directory. Choosing either skip option continues into the TUI.
@@ -167,6 +189,7 @@ output_truncation = { mode = "tokens", limit = 2000 }
 ```sh
 orca exec [options] <prompt>
 orca --mode=server
+orca trust [show|add|remove] --cwd <path>
 ```
 
 For headless harnesses, `orca exec` also accepts prompt input from stdin:

package/package.json

@@ -1,30 +1,25 @@
 {
-  "name": "@blade-ai/orca",
-  "version": "0.2.36",
-  "description": "Orca CLI: a DeepSeek-native coding agent.",
-  "homepage": "https://orcaagent.dev/",
   "license": "MIT",
-  "bin": {
-    "orca": "bin/orca.js"
-  },
-  "type": "module",
-  "engines": {
-    "node": ">=16"
-  },
+  "homepage": "https://orcaagent.dev/",
   "files": [
-    "bin/orca.js",
+    "vendor",
     "README.md",
     "LICENSE"
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/echoVic/blade-deepseek.git",
-    "directory": "npm/orca"
+    "url": "git+https://github.com/echoVic/blade-deepseek.git"
+  },
+  "engines": {
+    "node": ">=16"
   },
-  "optionalDependencies": {
-    "@blade-ai/orca-darwin-arm64": "npm:@blade-ai/orca@0.2.36-darwin-arm64",
-    "@blade-ai/orca-darwin-x64": "npm:@blade-ai/orca@0.2.36-darwin-x64",
-    "@blade-ai/orca-linux-arm64": "npm:@blade-ai/orca@0.2.36-linux-arm64",
-    "@blade-ai/orca-linux-x64": "npm:@blade-ai/orca@0.2.36-linux-x64"
-  }
+  "name": "@blade-ai/orca",
+  "version": "0.2.43-darwin-x64",
+  "description": "Native Orca binary for darwin/x64.",
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "x64"
+  ]
 }

package/bin/orca.js

@@ -1,102 +0,0 @@
-#!/usr/bin/env node
-
-import { spawn } from "node:child_process";
-import { existsSync, realpathSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const require = createRequire(import.meta.url);
-
-const TARGETS = {
-  "darwin:arm64": {
-    packageName: "@blade-ai/orca-darwin-arm64",
-    targetTriple: "aarch64-apple-darwin"
-  },
-  "darwin:x64": {
-    packageName: "@blade-ai/orca-darwin-x64",
-    targetTriple: "x86_64-apple-darwin"
-  },
-  "linux:arm64": {
-    packageName: "@blade-ai/orca-linux-arm64",
-    targetTriple: "aarch64-unknown-linux-gnu"
-  },
-  "linux:x64": {
-    packageName: "@blade-ai/orca-linux-x64",
-    targetTriple: "x86_64-unknown-linux-gnu"
-  }
-};
-
-const target = TARGETS[`${process.platform}:${process.arch}`];
-if (!target) {
-  throw new Error(`Unsupported platform: ${process.platform} (${process.arch})`);
-}
-
-function findExecutable() {
-  let vendorRoot;
-  try {
-    const packageJsonPath = require.resolve(`${target.packageName}/package.json`);
-    vendorRoot = path.join(path.dirname(packageJsonPath), "vendor");
-  } catch {
-    vendorRoot = path.join(__dirname, "..", "vendor");
-  }
-
-  const executable = path.join(vendorRoot, target.targetTriple, "bin", "orca");
-  if (existsSync(executable)) {
-    return executable;
-  }
-
-  throw new Error(
-    `Missing optional dependency ${target.packageName}. Reinstall with: npm install -g @blade-ai/orca`
-  );
-}
-
-const binaryPath = findExecutable();
-const env = {
-  ...process.env,
-  ORCA_MANAGED_BY_NPM: "1",
-  ORCA_MANAGED_PACKAGE_ROOT: realpathSync(path.join(__dirname, "..")),
-  ORCA_NODE_PATH: process.env.ORCA_NODE_PATH || process.execPath
-};
-
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: "inherit",
-  env
-});
-
-child.on("error", (error) => {
-  console.error(error);
-  process.exit(1);
-});
-
-const handledSignals = ["SIGINT", "SIGTERM", "SIGHUP"];
-const forwardSignal = (signal) => {
-  if (!child.killed) {
-    child.kill(signal);
-  }
-};
-
-for (const signal of handledSignals) {
-  process.on(signal, () => forwardSignal(signal));
-}
-
-const result = await new Promise((resolve) => {
-  child.on("exit", (code, signal) => {
-    if (signal) {
-      resolve({ type: "signal", signal });
-    } else {
-      resolve({ type: "code", exitCode: code ?? 1 });
-    }
-  });
-});
-
-if (result.type === "signal") {
-  for (const signal of handledSignals) {
-    process.removeAllListeners(signal);
-  }
-  process.kill(process.pid, result.signal);
-} else {
-  process.exit(result.exitCode);
-}