@blade-ai/orca 0.4.32 → 0.5.0-darwin-x64

package/README.md

@@ -50,51 +50,81 @@ re-parsing; legacy string commands use the resolved shell dialect.
 ```bash
 export DEEPSEEK_API_KEY=sk-...
 
-orca                                      # open the TUI
+orca                                      # open the terminal UI
 orca exec "fix the failing test"          # run headlessly
+printf '%s' "$INSTRUCTION" | orca exec   # keep arbitrary prompt text out of argv
 orca exec --verifier "cargo test" "fix it" # verify before finishing
 orca exec resume SESSION_ID "continue"    # resume a headless session
 orca exec resume --last "continue"        # resume the most recent session
 orca exec resume SID --resume-at MID "continue"  # resume up to a message boundary
-orca --mode=acp                           # connect an ACP client
 orca --resume [SESSION_ID]                # resume a saved conversation
 orca --fork SESSION_ID                    # fork a saved conversation
+orca --mode=acp                           # connect an ACP client
+orca doctor                               # check the key, trust, and sandbox locally
 ```
 
-Development builds also provide opt-in [shared ACP sessions](docs/acp-daemon.md)
-on Unix (`orca daemon`, `orca attach`, and `orca acp-bridge`),
+On Windows PowerShell, set the key with `$env:DEEPSEEK_API_KEY = "sk-..."`;
+the `orca` commands are the same. The positional prompt form remains
+supported. When the prompt may contain tokens that a task later searches for or
+kills in the process table, pipe it on stdin so it is not exposed in `orca`'s
+command line.
+
+Orca also offers opt-in [shared ACP sessions](docs/acp-daemon.md) on Unix
+(`orca daemon`, `orca attach`, and `orca acp-bridge`),
 [file-defined subagents](docs/subagents.md), and
 [persistent terminal output pages](docs/architecture/adr/0006-unified-exec-terminal-service.md).
-These additions are available in v0.4.27 and later.
 
-On Windows PowerShell, set the key with `$env:DEEPSEEK_API_KEY = "sk-..."`;
-the `orca` commands are the same.
-
-In the TUI, `@` searches files, skills, plugins, and MCP resources. Session
-commands are `/new`, `/resume`, `/fork [name]`, `/rename [name]`, `/status`,
-`/config`, and `/copy [N]`. `/config` opens an interactive session settings
-panel. Model and reasoning-effort choices from `/model` or `/config` are saved
-to the user `config.toml` and apply to new sessions; approval mode changes stay
-session-scoped and are never saved. Entering `full-auto` requires an explicit
-Full Access confirmation. Once the runtime commits it, the active task's next
-tool admission uses `TrustedHost` / `DangerFullAccess`; tools already running
-and delegated children already launched retain their original policy snapshot.
-`/status` reports the effective execution profile, shell sandbox, and active
-permission profile. The resume picker also supports fork, rename, archive,
-delete, and copying a session ID. `/history` is retired; `/clear` remains a hidden
-compatibility alias for `/new`. `Ctrl+L` clears only the displayed transcript
-and terminal scrollback, keeping the current conversation context. On exit,
-Orca prints the exact `orca --resume <SESSION_ID>` command for the session.
-
-Use `/plan` for read-only planning, `/goal` for a persistent objective, and
-`/tasks` for the unified workspace containing subagents, background commands,
-monitors, and workflow children. `/agents` is an alias for `/tasks`, while
-`/workflows` keeps the workflow-specific run tree. Use `/trust` to control
-whether Orca loads project-provided configuration and instructions; it does not
-enable or bypass OS sandbox enforcement. Automatic project memory is enabled
-for recorded sessions by default; use `/remember` for explicit user or project
-facts. See [Memory](docs/memory.md) for capture, recall, storage, privacy, and
-deletion.
+### The terminal UI
+
+Run `orca` in a project. The first run in a folder asks you to trust it or
+continue untrusted: trust lets Orca load the project's configuration,
+instructions, skills, agents, and workflows, and never enables or bypasses the
+OS sandbox. Then type a task and press `Enter`.
+
+- **Mention and command.** `@` mentions files, skills, plugins, and MCP
+  resources; `$` inserts a skill; `/` opens the command menu; `?` lists every
+  key. `Ctrl+V` attaches a clipboard image.
+- **Follow along.** Replies are marked `●`, reasoning collapses to one
+  `⋯ thinking` line, and each tool call shows its output under a `│` rail.
+  `e` expands the latest collapsed output and `Shift+E` all of them. The
+  status bar shows the approval mode, the model and reasoning effort, the
+  context left, and usage.
+- **Steer a running turn.** `Esc` interrupts. `Enter` queues a follow-up for
+  the next turn, `Ctrl+Enter` sends it into the running turn (in terminals
+  with the kitty keyboard protocol), and `Ctrl+B` moves the turn to the
+  background.
+- **Approve tool calls.** A call that needs approval turns the input into an
+  approval panel: allow once, allow this exact call, allow the tool for the
+  session, or deny (`Esc`). `Shift+Tab` cycles `suggest` → `auto-edit` →
+  `full-auto` → `plan`. Entering `full-auto` asks for an explicit Full Access
+  confirmation; the running task picks it up at its next tool call, while tools
+  already running and subagents already launched keep their original policy.
+  Mode changes last for the session and are never saved.
+- **Background work.** `/tasks` shows the tasks dock under the conversation,
+  where background turns, subagents, commands, monitors, and workflow children
+  appear. `/agents` opens the Agent Workspace with each task's live
+  conversation or transcript and the controls it can safely take: stop,
+  resume, retry, or a follow-up. When background agents finish while you are
+  idle, Orca continues with their results. `/workflows` keeps the workflow run
+  tree.
+- **Plan, goals, and recap.** `/plan` investigates read-only and ends with a
+  plan to approve; `/goal` sets a persistent objective; `/recap` summarizes the
+  session, and Orca writes one itself when you return after a quiet spell;
+  `/side` opens a side conversation for a quick question.
+- **Sessions.** `/new`, `/resume` (grouped by project, with fork, rename,
+  archive, delete, and copy ID), `/fork [name]`, `/rename [name]`, `/model`,
+  `/config`, and `/copy [N]`. Model and reasoning-effort choices are saved to
+  the user `config.toml`, so new sessions use them too. `/status` reports the effective execution profile,
+  shell sandbox, and permission profile. `Ctrl+L` clears the screen but keeps
+  the conversation, and on exit Orca prints the `orca --resume <SESSION_ID>`
+  command.
+
+The [Terminal UI guide](https://orcaagent.dev/docs/#terminal-ui) walks through
+the screen and every key.
+
+Automatic project memory is on for recorded sessions; use `/remember` for
+explicit user or project facts. See [Memory](docs/memory.md) for capture,
+recall, storage, privacy, and deletion.
 
 ### Use Orca from Pilion Browser
 
@@ -134,9 +164,9 @@ deletion.
   accepted overflow queues without creating a worker, and parents waiting for
   children yield their lease before re-entering the fair queue.
 - Keeps up to four active child summaries visible in the conversation and up to
-  eight durable activity entries per child. `/tasks` opens live transcripts and
-  exposes only controls the selected child can safely perform: stop, resume,
-  retry, or a revision-fenced follow-up.
+  eight durable activity entries per child. `/agents` opens live conversations
+  and transcripts and exposes only controls the selected child can safely
+  perform: stop, resume, retry, or a revision-fenced follow-up.
 - Learns a bounded set of durable project facts after successfully committed
   turns and retrieves only prompt-relevant facts on later turns.
 - Runs with no implicit turn ceiling; optional `[budget]` limits
@@ -157,37 +187,40 @@ then defaults. Run `orca --help` or `orca exec --help` for the full command
 surface. User configuration lives at `~/.orca/config.toml`; trusted projects
 can also provide `.orca/config.toml`, `AGENTS.md`, rules, skills, and workflows.
 
-DeepSeek thinking is enabled explicitly. Set `reasoning_effort` to `low`,
-`high`, or `max` (the default) in `config.toml`, or use
-`ORCA_REASONING_EFFORT`. `deepseek-flash` (DeepSeek-V4.1-Flash) and
-`deepseek-v4-pro` use a 1M-token context window and allow up to 384K output
-tokens. The retired `deepseek-v4-flash` and
-`deepseek-v4-flash-vision-exp` names remain accepted and normalize to
-`deepseek-flash`, including Flash pricing. JPEG, PNG, GIF, and WebP inputs are
-accepted from ACP clients and the TUI with every model selection. Explicit
-Flash selections consume images directly; `auto` and Pro use Flash for
-task-aware visual analysis before continuing with the selected coding model.
-In the TUI, use `Ctrl+V` to attach the current
-clipboard image (`Alt+V` is also available on Windows), drag or paste image
-paths and `file://` URLs, or select an image through `@file`. Each attachment
-appears as an atomic `[Image #N]` item that can be deleted, cleared, queued,
-edited, and restored after a rejected submission. `Cmd+V` works when the
-terminal forwards it as `Super+V`; terminals that consume `Cmd+V` should use
-`Ctrl+V`. Clipboard reads run in the background, and pressing Enter while one
-is pending waits for the image before submitting. Place the cursor on an image
-item and press Enter to open its preview; submitted images also render in the
-message area and can be clicked. The viewer supports `+`/`-` zoom, arrow-key
-panning, `0` to fit, and Esc to close. Kitty and Ghostty use the Kitty graphics
-protocol for native-pixel previews; iTerm2 and WezTerm use the inline-image
-protocol. Terminals without an image protocol, including Apple Terminal, fall
-back to low-resolution true-color cells. SSH sessions without a graphical
-clipboard should paste or mention a path on the remote host. Inline attachments
-share a 5 MiB total limit. Orca keeps the Chat Completions transport and fully
-replays any returned `reasoning_content` across tool turns as required by
-DeepSeek.
+An unset or `auto` model uses `deepseek-flash` (DeepSeek-V4.1-Flash). Choose
+`deepseek-v4-pro` with `/model`, `--model`, or `model = "deepseek-v4-pro"` in
+`config.toml`; releases before 0.5.0 routed `auto` to Pro. Both models use a
+1M-token context window and allow up to 384K output tokens. The retired
+`deepseek-v4-flash` and `deepseek-v4-flash-vision-exp` names remain accepted
+and normalize to `deepseek-flash`, including Flash pricing. DeepSeek thinking is
+enabled explicitly: set `reasoning_effort` to `low`, `high`, or `max` (the
+default) in `config.toml`, or use `ORCA_REASONING_EFFORT`.
+
+JPEG, PNG, GIF, and WebP inputs are accepted from ACP clients and the TUI with
+every model selection. Flash consumes images directly; Pro uses Flash for
+task-aware visual analysis before continuing with Pro. In the TUI, use `Ctrl+V`
+to attach the current clipboard image (`Alt+V` is also available on Windows),
+drag or paste image paths and `file://` URLs, or select an image through
+`@file`. Each attachment appears as an atomic `[Image #N]` item that can be
+deleted, cleared, queued, edited, and restored after a rejected submission.
+`Cmd+V` works when the terminal forwards it as `Super+V`; terminals that
+consume `Cmd+V` should use `Ctrl+V`. Clipboard reads run in the background, and
+pressing Enter while one is pending waits for the image before submitting.
+Place the cursor on an image item and press Enter to open its preview;
+submitted images also render in the message area and can be clicked. The viewer
+supports `+`/`-` zoom, arrow-key panning, `0` to fit, and Esc to close. Kitty
+and Ghostty use the Kitty graphics protocol for native-pixel previews; iTerm2
+and WezTerm use the inline-image protocol. Terminals without an image protocol,
+including Apple Terminal, fall back to low-resolution true-color cells. SSH
+sessions without a graphical clipboard should paste or mention a path on the
+remote host. Inline attachments share a 5 MiB total limit. Orca keeps the Chat
+Completions transport and fully replays any returned `reasoning_content` across
+tool turns as required by DeepSeek.
 
 More detail:
 
+- [Documentation](https://orcaagent.dev/docs/) and the
+  [Terminal UI guide](https://orcaagent.dev/docs/#terminal-ui)
 - [Persistent Goal Mode](docs/goal-mode.md)
 - [Memory](docs/memory.md)
 - [Harness and app-server contract](docs/harness-contract.md)
@@ -221,6 +254,8 @@ More detail:
   cleanup before the Goal mutation commits. Alt+Up queue editing commits a
   revision-checked runtime delete, failed queue admission restores the prompt,
   and queued previews remain bounded instead of copying the full body per frame.
+- Detached background workers never hold the terminal open, and they end once
+  their task is gone or their lease is lost.
 - Session switches start the replacement before closing the current runtime.
   Rename, fork, archive, and delete commit through revision-checked and durable
   paths, and stale events from a previous attachment are ignored.

package/package.json

@@ -1,32 +1,25 @@
 {
-  "name": "@blade-ai/orca",
-  "version": "0.4.32",
-  "description": "Orca CLI: a DeepSeek-native coding agent.",
-  "homepage": "https://orcaagent.dev/",
   "license": "MIT",
-  "bin": {
-    "orca": "bin/orca.js"
-  },
-  "type": "module",
-  "engines": {
-    "node": ">=16"
-  },
+  "homepage": "https://orcaagent.dev/",
   "files": [
-    "bin/orca.js",
+    "vendor",
     "README.md",
     "LICENSE"
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/echoVic/orca-agent.git",
-    "directory": "npm/orca"
+    "url": "git+https://github.com/echoVic/orca-agent.git"
+  },
+  "engines": {
+    "node": ">=16"
   },
-  "optionalDependencies": {
-    "@blade-ai/orca-darwin-arm64": "npm:@blade-ai/orca@0.4.32-darwin-arm64",
-    "@blade-ai/orca-darwin-x64": "npm:@blade-ai/orca@0.4.32-darwin-x64",
-    "@blade-ai/orca-linux-arm64": "npm:@blade-ai/orca@0.4.32-linux-arm64",
-    "@blade-ai/orca-linux-x64": "npm:@blade-ai/orca@0.4.32-linux-x64",
-    "@blade-ai/orca-win32-arm64": "npm:@blade-ai/orca@0.4.32-win32-arm64",
-    "@blade-ai/orca-win32-x64": "npm:@blade-ai/orca@0.4.32-win32-x64"
-  }
+  "name": "@blade-ai/orca",
+  "version": "0.5.0-darwin-x64",
+  "description": "Native Orca binary for darwin/x64.",
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "x64"
+  ]
 }

package/vendor/x86_64-apple-darwin/bin/orca

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/vendor/x86_64-apple-darwin/bin/orca
+size: 64535376 bytes
+sha256: 5389158a7ead14fea90373d645beef682059b77501ed705990182be3e2a4d241

package/bin/orca.js

@@ -1,118 +0,0 @@
-#!/usr/bin/env node
-
-import { spawn } from "node:child_process";
-import { existsSync, realpathSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const require = createRequire(import.meta.url);
-
-const TARGETS = {
-  "darwin:arm64": {
-    packageName: "@blade-ai/orca-darwin-arm64",
-    targetTriple: "aarch64-apple-darwin",
-    binaryName: "orca"
-  },
-  "darwin:x64": {
-    packageName: "@blade-ai/orca-darwin-x64",
-    targetTriple: "x86_64-apple-darwin",
-    binaryName: "orca"
-  },
-  "linux:arm64": {
-    packageName: "@blade-ai/orca-linux-arm64",
-    targetTriple: "aarch64-unknown-linux-gnu",
-    binaryName: "orca"
-  },
-  "linux:x64": {
-    packageName: "@blade-ai/orca-linux-x64",
-    targetTriple: "x86_64-unknown-linux-gnu",
-    binaryName: "orca"
-  },
-  "win32:arm64": {
-    packageName: "@blade-ai/orca-win32-arm64",
-    targetTriple: "aarch64-pc-windows-msvc",
-    binaryName: "orca.exe"
-  },
-  "win32:x64": {
-    packageName: "@blade-ai/orca-win32-x64",
-    targetTriple: "x86_64-pc-windows-msvc",
-    binaryName: "orca.exe"
-  }
-};
-
-const target = TARGETS[`${process.platform}:${process.arch}`];
-if (!target) {
-  throw new Error(`Unsupported platform: ${process.platform} (${process.arch})`);
-}
-
-function findExecutable() {
-  let vendorRoot;
-  try {
-    const packageJsonPath = require.resolve(`${target.packageName}/package.json`);
-    vendorRoot = path.join(path.dirname(packageJsonPath), "vendor");
-  } catch {
-    vendorRoot = path.join(__dirname, "..", "vendor");
-  }
-
-  const executable = path.join(vendorRoot, target.targetTriple, "bin", target.binaryName);
-  if (existsSync(executable)) {
-    return executable;
-  }
-
-  throw new Error(
-    `Missing optional dependency ${target.packageName}. Reinstall with: npm install -g @blade-ai/orca`
-  );
-}
-
-const binaryPath = findExecutable();
-const env = {
-  ...process.env,
-  ORCA_MANAGED_BY_NPM: "1",
-  ORCA_MANAGED_PACKAGE_ROOT: realpathSync(path.join(__dirname, "..")),
-  ORCA_NODE_PATH: process.env.ORCA_NODE_PATH || process.execPath
-};
-
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: "inherit",
-  env
-});
-
-child.on("error", (error) => {
-  console.error(error);
-  process.exit(1);
-});
-
-const handledSignals = process.platform === "win32"
-  ? ["SIGINT", "SIGTERM"]
-  : ["SIGINT", "SIGTERM", "SIGHUP"];
-const forwardSignal = (signal) => {
-  if (!child.killed) {
-    child.kill(signal);
-  }
-};
-
-for (const signal of handledSignals) {
-  process.on(signal, () => forwardSignal(signal));
-}
-
-const result = await new Promise((resolve) => {
-  child.on("exit", (code, signal) => {
-    if (signal) {
-      resolve({ type: "signal", signal });
-    } else {
-      resolve({ type: "code", exitCode: code ?? 1 });
-    }
-  });
-});
-
-if (result.type === "signal") {
-  for (const signal of handledSignals) {
-    process.removeAllListeners(signal);
-  }
-  process.kill(process.pid, result.signal);
-} else {
-  process.exit(result.exitCode);
-}