Orange is a macOS voice-to-action agent with a native Swift desktop runtime and an embedded Python sidecar. This release track is BYOK Anthropic only: no login, no payments, no subscription gating.
apps/desktop: SwiftUI macOS app runtime, onboarding, execution, and sidecar bridge.agent: FastAPI sidecar for planning, verification, streaming events, and provider checks.vendor/macos-use: Vendored upstream planner primitives from browser-use.backend: out-of-path scaffolding (not required for BYOK desktop runtime).website: marketing + beta funnel.scripts: build, notarize, release tooling.
cd agent
python3.13 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txtcd ../apps/desktop
swift build
swift run- Enter your Anthropic API key in the app prompt.
- Grant Accessibility, Microphone, and Screen Recording permissions.
- Use the hotkey (
F8) to start speaking commands.
Notes:
- In dev mode, the app can launch the sidecar via local Python fallback.
- In packaged DMG builds, the sidecar is bundled and does not require Python on user machines.
POST /v1/plan: transcript + context ->ActionPlanPOST /v1/verify: action history + before/after context -> verification resultGET /v1/events/{session_id}: SSE planner progress streamGET /v1/provider/status: provider + key + model + health statusPOST /v1/provider/validate: validate Anthropic key
APPLE_DEVELOPER_ID_APPLICATION(Developer ID Application certificate name)APPLE_DEVELOPER_ID_INSTALLER(Developer ID Installer certificate name)APPLE_NOTARY_PROFILE(recommended) or:APPLE_IDAPPLE_TEAM_IDAPPLE_APP_SPECIFIC_PASSWORD
SPARKLE_BASE_URL(for appcast generation)
Optional:
ORANGE_VERSION(default:0.9.0-beta.1)APP_NAME(default:Orange)
./scripts/release.shThis performs:
- Sidecar bundle build (
PyInstaller) and app bundle assembly. - Code signing (app + nested sidecar + DMG + PKG).
- Notarization submit/wait + stapling for DMG and PKG.
- Sparkle appcast generation.
cd apps/desktop && swift buildcd agent && source .venv/bin/activate && pytest -q./scripts/release.sh- Verify DMG install on fresh macOS machine.
- Confirm first-run path: key entry -> permissions -> command execution.
vendor/macos-useis read-only. Integration lives inagent/macos_use_adapter/.- Unknown action kinds are rejected (fail-closed).
- API keys are stored in macOS Keychain and injected into sidecar environment at launch.

