mirror of
https://github.com/stablyai/orca.git
synced 2026-10-23 08:03:39 +00:00
Brennan Benson
8b34c88004
Orca parses OSC 9999 off the PTY master unconditionally, so any text a pane prints becomes an agent-status assertion for that pane — a fetched page, a cat'd log, a dependency's build output. Stamp a per-pane nonce into pane env next to ORCA_PANE_KEY and grade every payload against it inside the shared processor all four parser call sites already funnel through. Ships in observe mode: a wrong nonce is dropped everywhere, but an un-nonced payload is still accepted and tagged pane-unattested, because every OSC 9999 payload Orca receives today comes from an external process and the format has never been documented. ORCA_AGENT_STATUS_OSC_NONCE=enforce opts in early. The nonce proves possession of pane context, not agent identity — code already running in the pane can read the env like any descendant. Refs #14033 (STA-4003)