@karowanorg/orc-ops 0.1.0 → 0.1.2

package/dist/guide.d.ts

@@ -3,4 +3,4 @@
  *  - CLI:  `orc guide`
  *  - MCP:  the `orc_guide` tool
  */
-export declare const GUIDE = "# orc \u2014 how to write and run a program\n\norc runs a \"program\": a script that fans out AI-agent subtasks (\"leaves\") and\nrecords each one, so a run is reproducible, resumable, and observable. You write\na program, launch it, then watch it and collect the result.\n\n## 1. Write a program\n\nA program is a `.orc.ts` file with a single default-exported async function.\nIt receives an api object and returns the run's result:\n\n    import type { Program } from \"@karowanorg/orc-sdk/program\"; // optional, type-only\n\n    const program: Program = async ({ agent, parallel, phase }) => {\n      const inventory = await agent(\"List the modules in this repo.\", {\n        schema: { type: \"object\",\n                  properties: { modules: { type: \"array\", items: { type: \"string\" } } },\n                  required: [\"modules\"] },\n      });\n\n      // Ordinary async/await controls the flow. Awaiting a result before the\n      // next call makes it a dependency; independent calls run concurrently.\n      const plans = await Promise.all((inventory.modules as string[]).map(async (m) => {\n        const findings = await agent(`Audit module ${m}`, { id: `audit-${m}` });\n        return agent(`Plan a fix for ${m}: ${JSON.stringify(findings)}`, { id: `plan-${m}` });\n      }));\n\n      return phase(\"synthesis\", () => agent(`Merge these plans: ${JSON.stringify(plans)}`, { id: \"merge\" }));\n    };\n    export default program;\n\n## The api\n\nIMPORTANT \u2014 leaves are isolated. Each agent() runs a FRESH subagent that shares\nNONE of your context: it cannot see this program, your conversation, other\nleaves' prompts or results, or anything you know that you haven't written into\nits prompt (plus the shared `--brief`).\n\n- agent(prompt, opts?) => Promise<result>\n    Dispatch one agent. Returns its result (matching `schema` if you pass one).\n    A failed leaf rejects the promise, so wrap it in try/catch if you want to\n    handle failure. Options:\n      id               a label shown in the monitor\n      schema           JSON Schema; the result is structured output matching it\n      harness          \"claude\" | \"codex\" | a configured harness (default: auto)\n      model            e.g. \"claude-fable-5\", \"gpt-5.6-sol\"\n      reasoningEffort  \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\"\n      readOnly         default true; set false for a leaf that edits files\n      cwd              working directory for this leaf (defaults to the run's)\n      host             SSH destination to run this leaf on a remote machine\n      idleTimeout      ms with no output before the leaf is killed (false = off)\n      phase            group this call under a phase label\n    To see valid `harness`, `model`, and `reasoningEffort` values for your\n    machine, run `orc capabilities` (or `orc capabilities --json`) \u2014 it lists\n    each installed harness with its available models and reasoning levels.\n    Omit any of them to use the default; an unknown value is rejected up front\n    by `orc validate`.\n\n- parallel(specs[]) => Promise<outcomes[]>\n    Run several agents at once from an array of option objects (each with a\n    `prompt`). Every lane runs to completion INDEPENDENTLY \u2014 one lane failing\n    never cancels the others. Outcomes come back in order as\n    `{ status: \"ok\", value } | { status: \"error\", error }`, so you decide how to\n    handle partial failure. (For fail-fast, use `Promise.all` over `agent()`,\n    which rejects on the first failure.)\n\n- phase(name, fn) => Promise<result>\n    Group every agent() call made inside `fn` under a phase, for a readable\n    run timeline.\n\n- settle(promise) => { status: \"ok\", value } | { status: \"error\", error }\n    Run a lane and capture its outcome instead of letting a failure stop the run\n    \u2014 useful for \"do all of these, some may fail\" fan-outs.\n\n- log(message)  \u2014 write a line to the run's live event feed.\n- ext.<name>(payload) \u2014 call a custom step you registered in orc.config.\n\nBecause leaves can't see each other, pass data between them as plain values:\nput a previous result into the next prompt with JSON.stringify so the receiving\nleaf actually has it. Use normal try/catch, Promise.all/allSettled, and bounded\nloops for control flow.\n\n## What a program may and may not do\n\n- No wall clock or randomness. `Date`, `Math.random`, timers, network, file\n  access, and imports (beyond type-only) are unavailable \u2014 a program only\n  decides which agents to run and how to combine their results.\n- Loops must be finite; an unbounded loop is stopped by a step limit.\n- These constraints let orc replay a program exactly when you resume it, so the\n  same inputs always produce the same run.\n\n## Writing files\n\nBy default leaves are read-only. To let a leaf directly modify files or run\nmutating commands, set `readOnly: false` and launch the run with\n`--allow-writes`. Configured hooks and MCP tools are not disabled for read-only\nleaves; their side effects are outside this guarantee. A write leaf runs with\nwhatever permissions your own agent has; add `--sandbox` to confine its writes\nto the working directory. If a run stops on a write leaf, `orc resume` picks it\nback up (it re-checks the working-tree state first, never blindly redoing work).\n\n## 2. Validate and launch\n\n    orc validate --program-path ./my.orc.ts       # compile + preview, no run\n    orc launch   --program-path ./my.orc.ts --brief \"what this run is for\"\n\n`--brief` (required) is shared context added to every leaf. Common launch flags:\n`--allow-writes`, `--host <ssh>`, `--approval-mode manual|accept-edits|auto|bypass`,\n`--sandbox`, `--harness claude|codex`, `--budget <usd>` (fail the run after\nobserved estimated cost exceeds this; concurrent work may overshoot), `--wait`\n(block for the result instead of running in the background).\n\n## 3. Watch and collect\n\n    orc status     --run-id <id>       # summary\n    orc wait       --run-id <id>       # block until it finishes\n    orc get-result --run-id <id>       # the final result (or --seq N for one leaf)\n    orc trace      --run-id <id>       # per-leaf and per-tool detail\n    orc open       --run-id <id>       # open the live monitor, print its URL\n    orc list                           # recent runs\n\n## 4. Approvals\n\nIn `manual` or `accept-edits` mode a leaf can pause to ask permission for a\ntool. Answer it from anywhere:\n\n    orc approvals --run-id <id>\n    orc respond   --run-id <id> --approval-id <aid> --behavior allow|deny\n\n## Discover more\n\n    orc --help                 # every command\n    orc <command> --help       # a command's flags\n    orc commands               # JSON catalog of all operations\n    orc capabilities           # available harnesses, models, and reasoning levels\n    orc doctor --host <ssh>    # check a local or remote machine is ready\n\nEvery command supports `--json`. Run state lives in `$ORC_HOME` (default\n`~/.orc`). Real runs need `claude` and/or `codex` installed and logged in.\n";
+export declare const GUIDE = "# orc \u2014 how to write and run a program\n\norc runs a \"program\": a script that fans out AI-agent subtasks (\"leaves\") and\nrecords each one, so a run is reproducible, resumable, and observable. You write\na program, launch it, then watch it and collect the result.\n\n## 1. Write a program\n\nA program is a `.orc.ts` file with a single default-exported async function.\nIt receives an api object and returns the run's result:\n\n    import type { Program } from \"@karowanorg/orc-sdk/program\"; // optional, type-only\n\n    const program: Program = async ({ agent, parallel, phase }) => {\n      const inventory = await agent(\"List the modules in this repo.\", {\n        schema: { type: \"object\",\n                  properties: { modules: { type: \"array\", items: { type: \"string\" } } },\n                  required: [\"modules\"] },\n      });\n\n      // Ordinary async/await controls the flow. Awaiting a result before the\n      // next call makes it a dependency; independent calls run concurrently.\n      const plans = await Promise.all((inventory.modules as string[]).map(async (m) => {\n        const findings = await agent(`Audit module ${m}`, { id: `audit-${m}` });\n        return agent(`Plan a fix for ${m}: ${JSON.stringify(findings)}`, { id: `plan-${m}` });\n      }));\n\n      return phase(\"synthesis\", () => agent(`Merge these plans: ${JSON.stringify(plans)}`, { id: \"merge\" }));\n    };\n    export default program;\n\n## The api\n\nIMPORTANT \u2014 leaves are isolated. Each agent() runs a FRESH subagent that shares\nNONE of your context: it cannot see this program, your conversation, other\nleaves' prompts or results, or anything you know that you haven't written into\nits prompt (plus the shared `--brief`).\n\n- agent(prompt, opts?) => Promise<result>\n    Dispatch one agent. Returns its result (matching `schema` if you pass one).\n    A failed leaf rejects the promise, so wrap it in try/catch if you want to\n    handle failure. Options:\n      id               a label shown in the monitor\n      schema           JSON Schema; the result is structured output matching it\n      harness          \"claude\" | \"codex\" | a configured harness (default: auto)\n      model            e.g. \"claude-fable-5\", \"gpt-5.6-sol\"\n      reasoningEffort  \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\"\n      readOnly         default true; set false for a leaf that edits files\n      cwd              working directory for this leaf (defaults to the run's)\n      idleTimeout      ms with no output before the leaf is killed (false = off)\n      phase            group this call under a phase label\n    To see valid `harness`, `model`, and `reasoningEffort` values for your\n    machine, run `orc capabilities` (or `orc capabilities --json`) \u2014 it lists\n    each installed harness with its available models and reasoning levels.\n    Omit any of them to use the default; an unknown value is rejected up front\n    by `orc validate`.\n\n- parallel(specs[]) => Promise<outcomes[]>\n    Run several agents at once from an array of option objects (each with a\n    `prompt`). Every lane runs to completion INDEPENDENTLY \u2014 one lane failing\n    never cancels the others. Outcomes come back in order as\n    `{ status: \"ok\", value } | { status: \"error\", error }`, so you decide how to\n    handle partial failure. (For fail-fast, use `Promise.all` over `agent()`,\n    which rejects on the first failure.)\n\n- phase(name, fn) => Promise<result>\n    Group every agent() call made inside `fn` under a phase, for a readable\n    run timeline.\n\n- settle(promise) => { status: \"ok\", value } | { status: \"error\", error }\n    Run a lane and capture its outcome instead of letting a failure stop the run\n    \u2014 useful for \"do all of these, some may fail\" fan-outs.\n\n- log(message)  \u2014 write a line to the run's live event feed.\n- ext.<name>(payload) \u2014 call a custom step you registered in orc.config.\n\nBecause leaves can't see each other, pass data between them as plain values:\nput a previous result into the next prompt with JSON.stringify so the receiving\nleaf actually has it. Use normal try/catch, Promise.all/allSettled, and bounded\nloops for control flow.\n\n## What a program may and may not do\n\n- No wall clock or randomness. `Date`, `Math.random`, timers, network, file\n  access, and imports (beyond type-only) are unavailable \u2014 a program only\n  decides which agents to run and how to combine their results.\n- Loops must be finite; an unbounded loop is stopped by a step limit.\n- These constraints let orc replay a program exactly when you resume it, so the\n  same inputs always produce the same run.\n\n## Writing files\n\nBy default leaves are read-only. To let a leaf directly modify files or run\nmutating commands, set `readOnly: false` and launch the run with\n`--allow-writes`. Configured hooks and MCP tools are not disabled for read-only\nleaves; their side effects are outside this guarantee. A write leaf runs with\nwhatever permissions your own agent has; add `--sandbox` to confine its writes\nto the working directory. If a run stops on a write leaf, `orc resume` picks it\nback up (it re-checks the working-tree state first, never blindly redoing work).\n\n## 2. Validate and launch\n\n    orc validate --program-path ./my.orc.ts       # compile + preview, no run\n    orc launch   --program-path ./my.orc.ts --brief \"what this run is for\"\n\n`--brief` (required) is shared context added to every leaf. Common launch flags:\n`--allow-writes`, `--approval-mode manual|accept-edits|auto|bypass`,\n`--sandbox`, `--harness claude|codex`, `--budget <usd>` (fail the run after\nobserved estimated cost exceeds this; concurrent work may overshoot), `--wait`\n(block for the result instead of running in the background).\n\n## 3. Watch and collect\n\n    orc status     --run-id <id>       # summary\n    orc wait       --run-id <id>       # block until it finishes\n    orc get-result --run-id <id>       # the final result (or --seq N for one leaf)\n    orc trace      --run-id <id>       # per-leaf and per-tool detail\n    orc open       --run-id <id>       # open the live monitor, print its URL\n    orc list                           # recent runs\n\n## 4. Approvals\n\nIn `manual` or `accept-edits` mode a leaf can pause to ask permission for a\ntool. Answer it from anywhere:\n\n    orc approvals --run-id <id>\n    orc respond   --run-id <id> --approval-id <aid> --behavior allow|deny\n\n## Discover more\n\n    orc --help                 # every command\n    orc <command> --help       # a command's flags\n    orc commands               # JSON catalog of all operations\n    orc capabilities           # available harnesses, models, and reasoning levels\n    orc doctor                 # check this machine is ready\n\nEvery command supports `--json`. Run state lives in `$ORC_HOME` (default\n`~/.orc`). Real runs need `claude` and/or `codex` installed and logged in.\n";

package/dist/guide.js

@@ -52,7 +52,6 @@ its prompt (plus the shared \`--brief\`).
       reasoningEffort  "low" | "medium" | "high" | "xhigh" | "max"
       readOnly         default true; set false for a leaf that edits files
       cwd              working directory for this leaf (defaults to the run's)
-      host             SSH destination to run this leaf on a remote machine
       idleTimeout      ms with no output before the leaf is killed (false = off)
       phase            group this call under a phase label
     To see valid \`harness\`, \`model\`, and \`reasoningEffort\` values for your
@@ -110,7 +109,7 @@ back up (it re-checks the working-tree state first, never blindly redoing work).
     orc launch   --program-path ./my.orc.ts --brief "what this run is for"
 
 \`--brief\` (required) is shared context added to every leaf. Common launch flags:
-\`--allow-writes\`, \`--host <ssh>\`, \`--approval-mode manual|accept-edits|auto|bypass\`,
+\`--allow-writes\`, \`--approval-mode manual|accept-edits|auto|bypass\`,
 \`--sandbox\`, \`--harness claude|codex\`, \`--budget <usd>\` (fail the run after
 observed estimated cost exceeds this; concurrent work may overshoot), \`--wait\`
 (block for the result instead of running in the background).
@@ -138,7 +137,7 @@ tool. Answer it from anywhere:
     orc <command> --help       # a command's flags
     orc commands               # JSON catalog of all operations
     orc capabilities           # available harnesses, models, and reasoning levels
-    orc doctor --host <ssh>    # check a local or remote machine is ready
+    orc doctor                 # check this machine is ready
 
 Every command supports \`--json\`. Run state lives in \`$ORC_HOME\` (default
 \`~/.orc\`). Real runs need \`claude\` and/or \`codex\` installed and logged in.

package/dist/ops.d.ts

@@ -18,7 +18,6 @@ interface FirstFrontierCall {
     id?: string;
     readOnly: boolean;
     harness?: string;
-    host?: string;
     model?: string;
     reasoningEffort?: string;
     schema?: Json;
@@ -27,7 +26,6 @@ interface FirstFrontierCall {
 export declare const launch: OpDef<z.ZodObject<{
     programPath: z.ZodString;
     cwd: z.ZodOptional<z.ZodString>;
-    host: z.ZodOptional<z.ZodString>;
     brief: z.ZodString;
     allowWrites: z.ZodDefault<z.ZodBoolean>;
     approvalMode: z.ZodDefault<z.ZodEnum<{
@@ -38,6 +36,7 @@ export declare const launch: OpDef<z.ZodObject<{
     }>>;
     sandbox: z.ZodDefault<z.ZodBoolean>;
     sandboxDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    networkAccess: z.ZodDefault<z.ZodBoolean>;
     maxParallel: z.ZodOptional<z.ZodNumber>;
     idleTimeoutSeconds: z.ZodOptional<z.ZodNumber>;
     budget: z.ZodOptional<z.ZodNumber>;
@@ -79,7 +78,6 @@ export declare const validate: OpDef<z.ZodObject<{
         bypass: "bypass";
     }>>;
     harness: z.ZodOptional<z.ZodString>;
-    host: z.ZodOptional<z.ZodString>;
     checkCapabilities: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>, {
     ok: boolean;
@@ -137,7 +135,6 @@ export declare const getTrace: OpDef<z.ZodObject<{
         harness?: string;
         model?: string;
         reasoningEffort?: string;
-        host?: string;
         cwd?: string;
         readOnly: boolean;
         startMs: number;
@@ -159,7 +156,6 @@ export declare const list: OpDef<z.ZodObject<{
     name: string | undefined;
     state: string;
     createdAtMs: number;
-    host: string | undefined;
     cwd: string;
 }[]>;
 export declare const cancel: OpDef<z.ZodObject<{
@@ -194,10 +190,8 @@ export declare const respondApproval: OpDef<z.ZodObject<{
     enqueued: boolean;
 }>;
 export declare const capabilities: OpDef<z.ZodObject<{
-    host: z.ZodOptional<z.ZodString>;
     refresh: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>, {
-    host: string;
     defaultHarness: string;
     harnesses: Record<string, unknown>;
     extensions: string[];
@@ -214,16 +208,13 @@ export declare const report: OpDef<z.ZodObject<{
     path: string;
 }>;
 export declare const guide: OpDef<z.ZodObject<{
-    host: z.ZodOptional<z.ZodString>;
     probe: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strip>, {
     guide: string;
 }>;
 export declare const doctor: OpDef<z.ZodObject<{
-    host: z.ZodOptional<z.ZodString>;
     cwd: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, {
-    host: string;
     checks: Record<string, unknown>;
 }>;
 export declare const ALL_OPS: OpDef[];

package/dist/ops.js

@@ -25,12 +25,12 @@ export const launch = defineOp({
     input: z.object({
         programPath: z.string().describe("path to the program (.orc.ts/.ts/.js)"),
         cwd: z.string().optional().describe("working directory (plain path); defaults to the caller's cwd"),
-        host: z.string().optional().describe("SSH destination (separate field; e.g. 'build@ci-box' or an ssh-config alias)"),
         brief: z.string().describe("shared context injected into every leaf"),
         allowWrites: z.boolean().default(false).describe("grant write-declared leaves permission to mutate files"),
         approvalMode: ApprovalMode.default("auto").describe("manual | accept-edits | auto | bypass"),
         sandbox: z.boolean().default(false).describe("confine write leaves to cwd + sandboxDirs (default: unconfined, like the caller)"),
         sandboxDirs: z.array(z.string()).optional().describe("extra writable roots when sandboxed (e.g. cache dirs outside the workspace)"),
+        networkAccess: z.boolean().default(false).describe("permit outbound network while retaining filesystem sandboxing"),
         maxParallel: z.number().int().min(1).max(64).optional(),
         idleTimeoutSeconds: z.number().int().optional().describe("run default for the per-call output-idle watchdog; 0 disables"),
         budget: z.number().positive().optional().describe("reactive USD cap: fail the run once observed estimated cost exceeds this (may overshoot)"),
@@ -42,12 +42,12 @@ export const launch = defineOp({
         const manifest = await prepareRun({
             programPath: input.programPath,
             cwd: input.cwd,
-            host: input.host,
             brief: input.brief,
             allowWrites: input.allowWrites,
             approvalMode: input.approvalMode,
             sandbox: input.sandbox,
             sandboxDirs: input.sandboxDirs,
+            networkAccess: input.networkAccess,
             maxParallel: input.maxParallel,
             idleTimeout: input.idleTimeoutSeconds === undefined
                 ? undefined
@@ -87,7 +87,6 @@ export const validate = defineOp({
         allowWrites: z.boolean().default(false),
         approvalMode: ApprovalMode.default("auto").describe("check the first-frontier harnesses can honor this mode"),
         harness: z.string().optional().describe("default harness override (same precedence as launch)"),
-        host: z.string().optional().describe("check capabilities on this remote host"),
         checkCapabilities: z.boolean().default(true).describe("probe referenced harnesses for model/effort/mode support (slower)"),
     }),
     async handler(input, ctx) {
@@ -105,7 +104,6 @@ export const validate = defineOp({
                         id: spec.id,
                         readOnly: spec.readOnly,
                         harness: spec.harness,
-                        host: spec.host,
                         model: spec.model,
                         reasoningEffort: spec.reasoningEffort,
                         schema: spec.schema,
@@ -127,19 +125,16 @@ export const validate = defineOp({
         finally {
             vm?.dispose();
         }
-        // Host can change per leaf, so only share probes with the same effective
-        // harness and executor destination.
         const capsCache = new Map();
-        const capsFor = (harnessName, host) => {
-            const key = JSON.stringify([harnessName, host]);
-            const cached = capsCache.get(key);
+        const capsFor = (harnessName) => {
+            const cached = capsCache.get(harnessName);
             if (cached)
                 return cached;
             const harness = ctx.registry.harnesses.get(harnessName);
             if (!harness)
                 return Promise.reject(new Error(`unknown harness "${harnessName}"`));
-            const pending = Promise.resolve().then(() => harness.discover({ executor: ctx.registry.executorFor(host) }));
-            capsCache.set(key, pending);
+            const pending = Promise.resolve().then(() => harness.discover({ executor: ctx.registry.executor }));
+            capsCache.set(harnessName, pending);
             return pending;
         };
         for (const call of firstCalls) {
@@ -159,7 +154,6 @@ export const validate = defineOp({
             }
             if (call.kind === "agent") {
                 const harnessName = call.harness ?? input.harness ?? ctx.registry.defaultHarness;
-                const host = call.host ?? input.host;
                 const harness = ctx.registry.harnesses.get(harnessName);
                 if (!harness) {
                     problems.push(`call ${call.seq} uses unknown harness "${harnessName}" (available: ${[...ctx.registry.harnesses.keys()].join(", ")})`);
@@ -177,10 +171,10 @@ export const validate = defineOp({
                 if (harness && input.checkCapabilities) {
                     let caps;
                     try {
-                        caps = await capsFor(harnessName, host);
+                        caps = await capsFor(harnessName);
                     }
                     catch (err) {
-                        problems.push(`call ${call.seq}: could not discover harness "${harnessName}"${host ? ` on ${host}` : ""} (${String(err instanceof Error ? err.message : err)})`);
+                        problems.push(`call ${call.seq}: could not discover harness "${harnessName}" (${String(err instanceof Error ? err.message : err)})`);
                         continue;
                     }
                     if (!caps.available) {
@@ -218,7 +212,7 @@ export const validate = defineOp({
                         }
                         const approvalMode = input.approvalMode ?? "auto";
                         if (caps.approvalModes.length > 0 && !caps.approvalModes.includes(approvalMode)) {
-                            problems.push(`call ${call.seq}: harness "${harnessName}" cannot honor approval mode "${approvalMode}"${host ? " over ssh" : ""} (supports: ${caps.approvalModes.join(", ")})`);
+                            problems.push(`call ${call.seq}: harness "${harnessName}" cannot honor approval mode "${approvalMode}" (supports: ${caps.approvalModes.join(", ")})`);
                         }
                     }
                 }
@@ -322,13 +316,13 @@ export const list = defineOp({
             catch {
                 /* partial run dir */
             }
-            return { runId: m.runId, name: m.name, state, createdAtMs: m.createdAtMs, host: m.host, cwd: m.cwd };
+            return { runId: m.runId, name: m.name, state, createdAtMs: m.createdAtMs, cwd: m.cwd };
         });
     },
 });
 export const cancel = defineOp({
     name: "cancel",
-    doc: "Queue cancellation. Local leaves get TERM→KILL; plain SSH only confirms channel teardown, so remote process state may be unknown.",
+    doc: "Queue cancellation. Leaves get TERM→KILL on their whole process group.",
     readOnly: false,
     input: z.object({ runId: RunId }),
     async handler(input) {
@@ -401,11 +395,10 @@ export const capabilities = defineOp({
     doc: "List harnesses, models, and reasoning levels — each discovered through the harness's native mechanism.",
     readOnly: true,
     input: z.object({
-        host: z.string().optional().describe("probe a remote host instead of local"),
         refresh: z.boolean().default(false),
     }),
     async handler(input, ctx) {
-        const executor = ctx.registry.executorFor(input.host);
+        const executor = ctx.registry.executor;
         const out = {};
         for (const [name, harness] of ctx.registry.harnesses) {
             out[name] = await harness.discover({ executor }).catch((err) => ({
@@ -414,7 +407,6 @@ export const capabilities = defineOp({
             }));
         }
         return {
-            host: input.host ?? "(local)",
             defaultHarness: ctx.registry.defaultHarness,
             harnesses: out,
             extensions: [...ctx.registry.extensions.keys()],
@@ -450,7 +442,6 @@ export const guide = defineOp({
     doc: "How to write and run an orc program — the authoring + usage guide, with this machine's live harness/model catalog appended.",
     readOnly: true,
     input: z.object({
-        host: z.string().optional().describe("probe this remote host's harnesses instead of local"),
         probe: z.boolean().default(true).describe("append the live capability catalog (set false for the static doc only)"),
     }),
     async handler(input, ctx) {
@@ -461,7 +452,7 @@ export const guide = defineOp({
         // values in hand instead of guessing. Never let a slow or missing harness
         // break the guide — degrade to the static doc, which already points at
         // `orc capabilities`.
-        const caps = await withDeadline(capabilities.handler({ host: input.host, refresh: false }, ctx), 15_000).catch(() => null);
+        const caps = await withDeadline(capabilities.handler({ refresh: false }, ctx), 15_000).catch(() => null);
         return { guide: GUIDE + (caps ? renderCapabilitiesForGuide(caps) : "") };
     },
 });
@@ -483,7 +474,7 @@ function renderCapabilitiesForGuide(caps) {
         "",
         "## Available on this machine",
         "",
-        `Discovered live${c.host && c.host !== "(local)" ? ` on ${c.host}` : ""} — these are the valid \`harness\`, \`model\`, and`,
+        "Discovered live — these are the valid \`harness\`, \`model\`, and",
         `\`reasoningEffort\` values right now, so you don't have to guess. Default harness: **${c.defaultHarness}**.`,
         "Omit any of them to take the default.",
     ];
@@ -502,19 +493,18 @@ function renderCapabilitiesForGuide(caps) {
         if (h.approvalModes?.length)
             lines.push(`    - approval modes: ${h.approvalModes.join(", ")}`);
     }
-    lines.push("", "Re-run `orc capabilities` any time, or `orc capabilities --host <ssh>` for another machine.");
+    lines.push("", "Re-run `orc capabilities` any time.");
     return lines.join("\n");
 }
 export const doctor = defineOp({
     name: "doctor",
-    doc: "Preflight an executor: harness binaries, versions, cwd existence.",
+    doc: "Preflight this machine: harness binaries, versions, cwd existence.",
     readOnly: true,
     input: z.object({
-        host: z.string().optional(),
         cwd: z.string().optional(),
     }),
     async handler(input, ctx) {
-        const executor = ctx.registry.executorFor(input.host);
+        const executor = ctx.registry.executor;
         const checks = {};
         for (const [name, harness] of ctx.registry.harnesses) {
             const caps = await harness.discover({ executor }).catch(() => null);
@@ -523,7 +513,7 @@ export const doctor = defineOp({
         if (input.cwd) {
             checks.cwd = { path: input.cwd, exists: await executor.exists(input.cwd) };
         }
-        return { host: input.host ?? "(local)", checks };
+        return { checks };
     },
 });
 // ---------------------------------------------------------------------------

package/dist/registry.js

@@ -5,7 +5,7 @@
  * come only from an explicit orc.config.(js|json).
  */
 import { callerAffinity, loadConfig } from "@karowanorg/orc-core";
-import { executorFor } from "@karowanorg/orc-executors";
+import { LocalExecutor } from "@karowanorg/orc-executors";
 import { claudeHarness } from "@karowanorg/orc-harness-claude";
 import { codexHarness, createCodexHarness } from "@karowanorg/orc-harness-codex";
 import { makeExecHarness } from "./exec-harness.js";
@@ -31,5 +31,5 @@ export async function buildRegistry(opts = {}) {
         config.defaultHarness ??
         callerAffinity(opts.mcpClientName) ??
         "codex";
-    return { harnesses, extensions, defaultHarness, executorFor };
+    return { harnesses, extensions, defaultHarness, executor: new LocalExecutor() };
 }

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@karowanorg/orc-ops",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "license": "0BSD",
   "type": "module",
   "main": "dist/index.js",
   "dependencies": {
-    "@karowanorg/orc-core": "^0.1.0",
-    "@karowanorg/orc-executors": "^0.1.0",
-    "@karowanorg/orc-harness-claude": "^0.1.0",
-    "@karowanorg/orc-harness-codex": "^0.1.0",
-    "@karowanorg/orc-ui": "^0.1.0",
+    "@karowanorg/orc-core": "^0.1.2",
+    "@karowanorg/orc-executors": "^0.1.1",
+    "@karowanorg/orc-harness-claude": "^0.1.3",
+    "@karowanorg/orc-harness-codex": "^0.1.3",
+    "@karowanorg/orc-ui": "^0.1.1",
     "zod": "^4.1.0"
   },
   "description": "The zod-first operation registry orc's CLI, MCP server, and SDK all interpret.",