OrcaWinandm4air dc08ffeba9 feat(relay): fence and drain file and git response streams on shutdown (#24185)
* feat(relay): fence and drain file and git response streams on shutdown

Third T1 slice of the #16741 port: the relay's two detached stream
producers can now be fenced and awaited, not just flagged.

RelayStreamRegistry (fs.readFileStream):
- disposeAll permanently fences register/beginOperation
  (relay_file_stream_shutdown_fenced), waits for every close and for every
  admitted operation, and rejects with relay_file_stream_shutdown_incomplete
  while any handle is still unclosed, so a later disposeAll retries only the
  failed handles.
- release coalesces concurrent callers onto one close, tolerates only EBADF
  as already-closed, and keeps a failed-close entry (aborted) for retry.
- beginOperation / releaseUnregisteredHandle let work that opens a handle
  before registration be drained too (wired in the next commit).

GitResponseStreamRegistry: disposeAll fences startStream
(relay_response_stream_shutdown_fenced); disposeAllAndWait also awaits
every scheduled or in-flight pump, and an aborted pump no longer publishes
git.responseEnd after its final chunk write settles.

reserveTerminalFrameSlot moves unchanged into fs-stream-terminal-frame-slots
and now holds a registry operation per slot, so shutdown also waits for
undelivered fs.streamEnd/fs.streamError frames.

No wire change: no new methods, fields, or opcodes. Mixed versions are
unaffected; a fenced relay answers with an ordinary request error.

Porting note (source: #16741 head a68b6f3531, merge-base 277c289bd4; T1 per
the track manifest):
- Taken verbatim: fs-stream-registry delta, git-response-stream delta,
  fs-stream-registry-shutdown.test, git-response-stream-shutdown.test.
- Adapted: Promise.withResolvers replaced with plain promises (the relay
  bundle targets node18). fs-stream-terminal-frame-slots is extracted from
  the reserveTerminalFrameSlot that main already has inline in
  fs-handler-file-read (keeping its rationale comment) rather than added as
  a second copy. The EBADF check uses a type guard instead of a cast, and the
  tests' stub casts carry SAFETY rationales.
- Dropped: nothing.

* feat(relay): drain detached file and git response streams with owned processes

Wires the stream registries into relay shutdown. The dispatcher's
RelayWorkAdmission drain (#24181) ends once fs.readFileStream answers its
metadata or a handler answers a git response-stream sentinel; the pumps and
file descriptors behind those answers are detached producers it does not
see. RelayRuntimeServices.disposeOwnedProcesses now also awaits
GitResponseStreamRegistry.disposeAllAndWait and FsHandler.disposeFileStreams,
and rejects with relay_owned_process_shutdown_incomplete if either fails, so
the grace lifecycle defers shutdown (its existing catch path) instead of
exiting with an unclosed fd; the next attempt retries only failed handles.

fs.readFileStream now holds a registry operation across metadata
preparation (including the binary-prefix probe handle) and across each pump,
closes pre-registration handles through releaseUnregisteredHandle, releases
its terminal-frame slot even when the handle close fails, and publishes no
terminal frame for a stream that was aborted or went stale while its last
read was in flight.

Behavior today: the grace/SIGTERM shutdown path already calls
disposeOwnedProcesses after PTY disposal, so a shutdown now also waits for
in-flight stream pumps and queued terminal frames (which settle on client
close or dispatcher disposal). After disposal, stream requests are refused
with a fenced error; if shutdown is deferred by a failed close, the relay
stays up with streams fenced, matching #16741's one-way drain. No wire
change.

Porting note (source: #16741 head a68b6f3531, merge-base 277c289bd4; these
files are T2 in the track manifest, taken here only as far as the stream
drain needs them):
- Taken verbatim: fs-handler-file-read delta, fs-handler-utils
  isBinaryFilePrefix releaseHandle parameter, fs-handler disposeFileStreams.
- Adapted: relay-runtime-services takes only the responseStreams field and
  the response/file-stream drains in disposeOwnedProcesses. Skill-upload and
  AI Vault cleanup stay log-and-continue rather than joining the aggregate
  failure. Added a fs-handler-stream test proving disposeFileStreams waits
  for an undelivered terminal frame and fences new reads.
- Dropped (left for T2): agentExecHandler disposal, disposeWatchers, the
  ownership-transfer adapter/capture wiring, and the relay-grace-lifecycle
  beginWorkDrain -> disposeOwnedProcesses -> beginWorkDrain sequence.

* test(relay): cover the stream drains in disposeOwnedProcesses

disposeOwnedProcesses now waits for the git response-stream and file-stream
drains and rejects with relay_owned_process_shutdown_incomplete when either
fails, but nothing exercised that path: relay-daemon tests stub the whole
runtime. These tests pin that shutdown is not acknowledged before either
drain settles, that both drain failures are aggregated after every owner
was attempted (and a retry succeeds), and that skill/AI Vault failures stay
log-and-continue in this slice.

Porting note (source: #16741 head a68b6f3531,
src/relay/relay-runtime-owned-process-shutdown.test.ts, T2 in the track
manifest):
- Taken: the prototype-stub fixture, the "does not acknowledge cleanup
  before %s have settled" case (responses, fileStreams), and the
  no-vault-service case.
- Adapted: Promise.withResolvers replaced with a plain promise; the fixture
  cast carries a SAFETY rationale; the retry case targets the stream drains
  instead of skill/vault, and a new case pins skill/vault as
  log-and-continue to match this slice's adaptation.
- Dropped (left for T2): agentExecHandler and disposeWatchers cases, and
  skill/vault aggregate-failure cases.

---------

Co-authored-by: m4air <m4air@m4airs-Air.localdomain>
2026-10-01 07:55:26 -07:00
2026-09-26 20:50:46 +00:00
2026-05-04 20:42:03 -07:00
2026-03-16 22:27:51 -07:00
2026-03-28 10:19:14 -07:00

Orca Orca

GitHub stars Total downloads across all releases License: MIT Join the Orca Discord Follow Orca on X Supported platforms: macOS, Windows, and Linux

中文 · 日本語 · 한국어 · Español · Français · Português

The AI Orchestrator for 100x builders.
Run Codex, ClaudeCode, OpenCode or Pi side-by-side — each in its own worktree, tracked in one place.

Download Orca

Orca desktop app running agents in parallel worktrees, with the Orca mobile companion app in the corner

Features

Mobile Companion

Monitor and steer your agents from your phone — get notified when an agent finishes and send follow-ups from anywhere.

iOS App Store · Android APK 0.0.50 · Docs →

Orca desktop with the mobile companion app

Parallel Worktrees

Fan one prompt across five agents, each in its own isolated git worktree — compare the results and merge the winner.

Docs →

Parallel worktree orchestration

Terminal Splits

Ghostty-class terminals with WebGL rendering, infinite splits, and scrollback that survives restarts.

Docs →

Terminal splits

Design Mode

Click any UI element in a real Chromium window to send its HTML, CSS, and a cropped screenshot straight into your agent's prompt.

Docs →

Embedded browser and Design Mode

GitHub & Linear, Native

Browse PRs, issues, and project boards in-app — open a worktree from any task and review without a context switch.

Docs →

GitHub and Linear task workflows in Orca

SSH Worktrees

Run agents on a beefy remote box with full file editing, git, and terminals — auto-reconnect and port forwarding included.

Docs →

Remote worktrees over SSH

Annotate AI Diffs

Drop comments on any diff line and ship them back to the agent — review, edit, and commit without leaving Orca.

Docs →

Annotate AI-generated diffs

Drag Files to Agents

VS Code's editor with autosave everywhere — drag files or images straight into an agent prompt.

Docs →

Drag files and images into an agent prompt

Orca CLI

Agents drive Orca too — script every workflow with orca worktree create, snapshot, click, and fill.

Docs →

Script Orca from the CLI

Also in the box:

  • Quick open — Search across worktrees, files, agents, commands, and repo context without leaving your flow.
  • Account switcher & usage tracking — See Claude and Codex usage and rate-limit resets, and hot-swap accounts without re-logging in.
  • Rich repo previews — Preview Markdown, images, PDFs, and repo docs in the workspace.
  • Computer Use — Let agents operate desktop apps and visible UI when a workflow needs real interaction.
  • Notifications and unread state — Know when an agent finishes or needs attention, then mark threads unread to come back later.
  • And many, many more — we ship daily, so this list is perpetually behind. The changelog is the real feature list.

Supported Agents

Works with any CLI agent — if it runs in a terminal, it runs in Orca.

Claude Code logo Claude Code   Codex logo Codex   Grok logo Grok   Cursor logo Cursor   GitHub Copilot logo GitHub Copilot   Muse logo Muse   DeepSeek Harness logo DeepSeek Harness   ZCode logo ZCode   OpenCode logo OpenCode   MiMo Code logo MiMo Code   Amp logo Amp   OpenClaude logo OpenClaude   Antigravity logo Antigravity   Pi logo Pi   oh-my-pi logo oh-my-pi   Hermes Agent logo Hermes Agent   Devin logo Devin   Goose logo Goose   Auggie logo Auggie   Autohand Code logo Autohand Code   Charm logo Charm   Cline logo Cline   CodeBuddy logo CodeBuddy   Codebuff logo Codebuff   Freebuff logo Freebuff   Command Code logo Command Code   Continue logo Continue   Droid logo Droid   Kilocode logo Kilocode   Kimi logo Kimi   Kiro logo Kiro   Mistral Vibe logo Mistral Vibe   Qwen Code logo Qwen Code   Rovo Dev logo Rovo Dev   + any CLI agent


Install

Desktop — macOS, Windows, Linux

Or via a package manager:

# macOS (Homebrew)
brew install --cask stablyai/orca/orca

# Arch Linux (AUR) — or stably-orca-git to build from source
yay -S stably-orca-bin

Mobile Companion — iOS, Android

Pair with your desktop app to monitor and steer your agents from your phone.


Community & Support

  • Discord: Join the community on Discord.

  • Twitter / X: Follow @orca_build for updates and announcements.

  • WeChat: Scan to join the Orca community WeChat group 11.

    WeChat group 11 QR code for the Orca community
  • Feedback & Ideas: We ship fast. Missing something? Request a new feature.

  • Privacy: See the privacy & telemetry docs for what anonymous usage data Orca collects and how to opt out.

  • Show Support: Star this repo to follow along with our daily ships.


Developing

Want to contribute or run locally? See our CONTRIBUTING.md guide.

The relay that pairs the mobile app with a desktop host is also in this repository under cloud/, with a separate pnpm workspace and setup guide.

Orca contributors

GitHub star history chart for stablyai/orca

Signed Builds

Windows code signing sponored/provided by SignPath.io, certificate by SignPath Foundation.

License

Orca is free and open source under the MIT License.

S
Description
Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and remote runtime.
Readme MIT
1.5 GiB
Languages
TypeScript 95.1%
JavaScript 4.2%
Swift 0.2%
HCL 0.1%
CSS 0.1%