Merge Sim
9ea2afa365
The file-explorer mutation RPCs accepted `.git` as an ordinary worktree-relative path and destroyed it. `normalizeRuntimeRelativePath` rejects only `..`, absolute paths and empty segments — `.git` is an ordinary segment — and `resolveAuthorizedPath` only asserts the target is inside an allowed root, which a repository's own `.git` is. No protected-path policy existed anywhere in the runtime or relay. Reproduced on unfixed main before fixing: the real `deleteFileExplorerPath` removes a real `.git` directory while every working-tree file survives — the signature of the 2026-08-30 incident, on demand, with no source changes. The client-version check is not a protection: `assertRuntimeFileMutationExpectation` requires `expectedExecutionHostId`, but passing `'local'` is exactly what an ordinary client request produces, so it gates client version, not what may be deleted. New `src/shared/repository-admin-path.ts` classifies a path as repository admin state by whole path SEGMENT, so `.github`, `.gitignore`, `.gitattributes`, `.gitmodules`, `.gitkeep`, a file named `git` and a directory named `mygit` all stay mutable. It catches `.git` as a directory, `.git` as the `gitdir:` pointer file used by linked worktrees and submodules, anything inside `.git`, both separators, case variants, and the Win32 trailing-dot spelling. It fails closed: a path it cannot classify is treated as admin state. Enforced at the RPC boundary for source AND destination, so a rename or copy cannot substitute a `.git` either. Deliberately NOT in scope: the shared relay primitive (repo creation legitimately deletes a remote `.git` through it) and the direct Electron IPC lane, which the renderer falls back to for local targets and which is a real second hole needing its own ticket. 82 tests. Mutation-tested: neutering the guard turns 27 of them red.
Orca
中文 · 日本語 · 한국어 · Español · Français · Português
The AI Orchestrator for 100x builders.
Run Codex, ClaudeCode, OpenCode or Pi side-by-side — each in its own worktree, tracked in one place.
Download Orca
Features
Mobile CompanionMonitor and steer your agents from your phone — get notified when an agent finishes and send follow-ups from anywhere. |
 |
Parallel WorktreesFan one prompt across five agents, each in its own isolated git worktree — compare the results and merge the winner. |
 |
Terminal SplitsGhostty-class terminals with WebGL rendering, infinite splits, and scrollback that survives restarts. |
 |
Design ModeClick any UI element in a real Chromium window to send its HTML, CSS, and a cropped screenshot straight into your agent's prompt. |
 |
GitHub & Linear, NativeBrowse PRs, issues, and project boards in-app — open a worktree from any task and review without a context switch. |
 |
SSH WorktreesRun agents on a beefy remote box with full file editing, git, and terminals — auto-reconnect and port forwarding included. |
 |
Annotate AI DiffsDrop comments on any diff line and ship them back to the agent — review, edit, and commit without leaving Orca. |
 |
Drag Files to AgentsVS Code's editor with autosave everywhere — drag files or images straight into an agent prompt. |
 |
Orca CLIAgents drive Orca too — script every workflow with |
 |
Also in the box:
- Quick open — Search across worktrees, files, agents, commands, and repo context without leaving your flow.
- Account switcher & usage tracking — See Claude and Codex usage and rate-limit resets, and hot-swap accounts without re-logging in.
- Rich repo previews — Preview Markdown, images, PDFs, and repo docs in the workspace.
- Computer Use — Let agents operate desktop apps and visible UI when a workflow needs real interaction.
- Notifications and unread state — Know when an agent finishes or needs attention, then mark threads unread to come back later.
- And many, many more — we ship daily, so this list is perpetually behind. The changelog is the real feature list.
Supported Agents
Works with any CLI agent — if it runs in a terminal, it runs in Orca.
Claude Code
Codex
Grok
Cursor
GitHub Copilot
OpenCode
MiMo Code
Amp
OpenClaude
Antigravity
Pi
oh-my-pi
Hermes Agent
Devin
Goose
Auggie
Autohand Code
Charm
Cline
Codebuff
Command Code
Continue
Droid
Kilocode
Kimi
Kiro
Mistral Vibe
Qwen Code
Rovo Dev
+ any CLI agent
Install
Desktop — macOS, Windows, Linux
- Download from onOrca.dev
- Or grab a build directly: macOS Apple Silicon · macOS Intel · Windows (.exe) · Linux AppImage · All builds
- Running
orca serveon a headless Linux server? See the headless Linux server guide.
Or via a package manager:
# macOS (Homebrew)
brew install --cask stablyai/orca/orca
# Arch Linux (AUR) — or stably-orca-git to build from source
yay -S stably-orca-bin
Mobile Companion — iOS, Android
Pair with your desktop app to monitor and steer your agents from your phone.
- iOS: Download on the App Store or join TestFlight
- Android: Download APK 0.0.47 · Install guide
Community & Support
-
Discord: Join the community on Discord.
-
Twitter / X: Follow @orca_build for updates and announcements.
-
WeChat: Scan to join the Orca community WeChat group 7. If it is full, use group 8.
-
Feedback & Ideas: We ship fast. Missing something? Request a new feature.
-
Privacy: See the privacy & telemetry docs for what anonymous usage data Orca collects and how to opt out.
-
Show Support: Star this repo to follow along with our daily ships.
Developing
Want to contribute or run locally? See our CONTRIBUTING.md guide.
Signed Builds
Windows code signing sponored/provided by SignPath.io, certificate by SignPath Foundation.
License
Orca is free and open source under the MIT License.