Clears all 49 open Dependabot alerts except the two image-size ones, which have no patched upstream release. Direct bumps (root): pdfjs-dist 5.7.284 -> 6.2.108 (CVE-2026-16633), mermaid 11.16.0 -> 11.16.1, dompurify 3.4.12 -> 3.4.13. Direct bumps (mobile): mermaid 11.16.0 -> 11.16.1. In-range lockfile re-resolves: brace-expansion 1.1.18/2.1.4/5.0.9, fast-uri 3.1.5, hono 4.13.0, ip-address 10.4.0, js-yaml 4.3.1/3.15.1, nanoid, postcss, tar 7.5.22, undici 6.28.0/7.29.0. Drops the @modelcontextprotocol/sdk>@hono/node-server override: bumping shadcn's transitive SDK to 1.30.0 widens its range to ^1.19.9 || ^2.0.5, so @hono/node-server resolves to a patched 2.1.0 on its own. The remaining two overrides have to stay - monaco-editor hard-pins dompurify 3.2.7 (still 3.4.8 on latest monaco, both vulnerable to GHSA-55q2-fjhq-7xh7) and xcode wants uuid ^7.0.3 (GHSA-w5hq-g745-h8pq). pdf.js 6 removed PDFDocumentProxy.destroy(); PdfViewer now tears the document down via the loading task, which was already being destroyed alongside it. Co-authored-by: Orca <help@stably.ai> Co-authored-by: mondaychen <monday.chen@gmail.com> Co-authored-by: Claude <noreply@anthropic.com>
Orca
中文 · 日本語 · 한국어 · Español · Français · Português
The AI Orchestrator for 100x builders.
Run Codex, ClaudeCode, OpenCode or Pi side-by-side — each in its own worktree, tracked in one place.
Download Orca
Features
Also in the box:
- Quick open — Search across worktrees, files, agents, commands, and repo context without leaving your flow.
- Account switcher & usage tracking — See Claude and Codex usage and rate-limit resets, and hot-swap accounts without re-logging in.
- Rich repo previews — Preview Markdown, images, PDFs, and repo docs in the workspace.
- Computer Use — Let agents operate desktop apps and visible UI when a workflow needs real interaction.
- Notifications and unread state — Know when an agent finishes or needs attention, then mark threads unread to come back later.
- And many, many more — we ship daily, so this list is perpetually behind. The changelog is the real feature list.
Supported Agents
Works with any CLI agent — if it runs in a terminal, it runs in Orca.
Claude Code
Codex
Grok
Cursor
GitHub Copilot
OpenCode
MiMo Code
Amp
OpenClaude
Antigravity
Pi
oh-my-pi
Hermes Agent
Devin
Goose
Auggie
Autohand Code
Charm
Cline
Codebuff
Command Code
Continue
Droid
Kilocode
Kimi
Kiro
Mistral Vibe
Qwen Code
Rovo Dev
+ any CLI agent
Install
Desktop — macOS, Windows, Linux
- Download from onOrca.dev
- Or grab a build directly: macOS Apple Silicon · macOS Intel · Windows (.exe) · Linux AppImage · All builds
- Running
orca serveon a headless Linux server? See the headless Linux server guide.
Or via a package manager:
# macOS (Homebrew)
brew install --cask stablyai/orca/orca
# Arch Linux (AUR) — or stably-orca-git to build from source
yay -S stably-orca-bin
Mobile Companion — iOS, Android
Pair with your desktop app to monitor and steer your agents from your phone.
- iOS: Download on the App Store or join TestFlight
- Android: Download APK 0.0.37
Community & Support
-
Discord: Join the community on Discord.
-
Twitter / X: Follow @orca_build for updates and announcements.
-
WeChat: Scan to join the Orca community WeChat group 7.
-
Feedback & Ideas: We ship fast. Missing something? Request a new feature.
-
Privacy: See the privacy & telemetry docs for what anonymous usage data Orca collects and how to opt out.
-
Show Support: Star this repo to follow along with our daily ships.
Developing
Want to contribute or run locally? See our CONTRIBUTING.md guide.
Signed Builds
Windows code signing sponored/provided by SignPath.io, certificate by SignPath Foundation.
License
Orca is free and open source under the MIT License.










