@blade-ai/orca 0.2.44 → 0.2.45-darwin-arm64

package/README.md

@@ -228,6 +228,16 @@ Options:
   Mention input creates a binding; plain `@...` text stays literal. See
   [the harness contract](docs/harness-contract.md)
 
+Approval modes also select the default execution boundary:
+
+- `suggest` asks before mutating or external actions.
+- `auto-edit` runs actions without interruption while keeping the workspace
+  sandbox; requests to write outside it, use blocked network access, or retry
+  without a sandbox still require a permission response.
+- `full-auto` enables full access (`danger-full-access`) and does not fall back
+  to a post-failure permission prompt for sandbox escape.
+- `plan` keeps the shell read-only and denies mutations.
+
 ## Workflows
 
 `orca workflow run <script-or-name>` runs an Orca dynamic workflow.
@@ -332,7 +342,7 @@ MCP tools and custom external tools can be added at startup. External tools live
 - **Context Window**: DeepSeek V4 1M-token context, 80% threshold compaction with response reserve (preserves system + recent messages)
 - **Conversation History**: Local JSONL transcripts support listing, inspection, resume/fork, full-text search, archive/delete/rename, and zstd compression
 - **HTTP Client**: Singleton with 30s connect / 120s request / 300s streaming timeouts, exponential backoff retry (3 attempts, handles 429/5xx)
-- **Approval Policy**: Tool capabilities drive approval; read operations are allowed, `suggest` asks for write/network/agent/shell, `auto-edit` allows writes but asks for network/agent/shell, and `full-auto` allows all
+- **Approval Policy**: Tool capabilities drive approval; `suggest` prompts for mutating or external actions, `auto-edit` allows actions inside its workspace sandbox, `full-auto` combines automatic approval with `danger-full-access`, and `plan` denies mutations
 - **Verification**: Optional post-completion verifier command with pass/fail status
 - **Release Gate**: `scripts/release/verify-published.mjs` checks the GitHub Release, npm registry, and `npm exec` smoke path after publishing
 

package/package.json

@@ -1,30 +1,25 @@
 {
-  "name": "@blade-ai/orca",
-  "version": "0.2.44",
-  "description": "Orca CLI: a DeepSeek-native coding agent.",
-  "homepage": "https://orcaagent.dev/",
   "license": "MIT",
-  "bin": {
-    "orca": "bin/orca.js"
-  },
-  "type": "module",
-  "engines": {
-    "node": ">=16"
-  },
+  "homepage": "https://orcaagent.dev/",
   "files": [
-    "bin/orca.js",
+    "vendor",
     "README.md",
     "LICENSE"
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/echoVic/blade-deepseek.git",
-    "directory": "npm/orca"
+    "url": "git+https://github.com/echoVic/blade-deepseek.git"
+  },
+  "engines": {
+    "node": ">=16"
   },
-  "optionalDependencies": {
-    "@blade-ai/orca-darwin-arm64": "npm:@blade-ai/orca@0.2.44-darwin-arm64",
-    "@blade-ai/orca-darwin-x64": "npm:@blade-ai/orca@0.2.44-darwin-x64",
-    "@blade-ai/orca-linux-arm64": "npm:@blade-ai/orca@0.2.44-linux-arm64",
-    "@blade-ai/orca-linux-x64": "npm:@blade-ai/orca@0.2.44-linux-x64"
-  }
+  "name": "@blade-ai/orca",
+  "version": "0.2.45-darwin-arm64",
+  "description": "Native Orca binary for darwin/arm64.",
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ]
 }

package/bin/orca.js

@@ -1,102 +0,0 @@
-#!/usr/bin/env node
-
-import { spawn } from "node:child_process";
-import { existsSync, realpathSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const require = createRequire(import.meta.url);
-
-const TARGETS = {
-  "darwin:arm64": {
-    packageName: "@blade-ai/orca-darwin-arm64",
-    targetTriple: "aarch64-apple-darwin"
-  },
-  "darwin:x64": {
-    packageName: "@blade-ai/orca-darwin-x64",
-    targetTriple: "x86_64-apple-darwin"
-  },
-  "linux:arm64": {
-    packageName: "@blade-ai/orca-linux-arm64",
-    targetTriple: "aarch64-unknown-linux-gnu"
-  },
-  "linux:x64": {
-    packageName: "@blade-ai/orca-linux-x64",
-    targetTriple: "x86_64-unknown-linux-gnu"
-  }
-};
-
-const target = TARGETS[`${process.platform}:${process.arch}`];
-if (!target) {
-  throw new Error(`Unsupported platform: ${process.platform} (${process.arch})`);
-}
-
-function findExecutable() {
-  let vendorRoot;
-  try {
-    const packageJsonPath = require.resolve(`${target.packageName}/package.json`);
-    vendorRoot = path.join(path.dirname(packageJsonPath), "vendor");
-  } catch {
-    vendorRoot = path.join(__dirname, "..", "vendor");
-  }
-
-  const executable = path.join(vendorRoot, target.targetTriple, "bin", "orca");
-  if (existsSync(executable)) {
-    return executable;
-  }
-
-  throw new Error(
-    `Missing optional dependency ${target.packageName}. Reinstall with: npm install -g @blade-ai/orca`
-  );
-}
-
-const binaryPath = findExecutable();
-const env = {
-  ...process.env,
-  ORCA_MANAGED_BY_NPM: "1",
-  ORCA_MANAGED_PACKAGE_ROOT: realpathSync(path.join(__dirname, "..")),
-  ORCA_NODE_PATH: process.env.ORCA_NODE_PATH || process.execPath
-};
-
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: "inherit",
-  env
-});
-
-child.on("error", (error) => {
-  console.error(error);
-  process.exit(1);
-});
-
-const handledSignals = ["SIGINT", "SIGTERM", "SIGHUP"];
-const forwardSignal = (signal) => {
-  if (!child.killed) {
-    child.kill(signal);
-  }
-};
-
-for (const signal of handledSignals) {
-  process.on(signal, () => forwardSignal(signal));
-}
-
-const result = await new Promise((resolve) => {
-  child.on("exit", (code, signal) => {
-    if (signal) {
-      resolve({ type: "signal", signal });
-    } else {
-      resolve({ type: "code", exitCode: code ?? 1 });
-    }
-  });
-});
-
-if (result.type === "signal") {
-  for (const signal of handledSignals) {
-    process.removeAllListeners(signal);
-  }
-  process.kill(process.pid, result.signal);
-} else {
-  process.exit(result.exitCode);
-}