ryk v1.2.9

What's Changed

• feat: proxy daemon CLI and surface shell deny remediation by @christopherkarani in #48
• feat(cli): P0 one-product UX (start, deny, doctor, help) by @christopherkarani in #49
• feat(cli): P2a power baseline — packs productized + orca status by @christopherkarani in #50
• feat(cli): mode×severity shell matrix and day-2 policy loop (P2b) by @christopherkarani in #51
• fix: harden dashboard, redaction, and host integrations by @christopherkarani in #52
• feat(cli): readiness contracts, daemon hardening, and OpenClaw honesty by @christopherkarani in #53
• fix: close residual PR #53 security risks by @christopherkarani in #54
• feat(install): polish curl|sh installer UX with step receipt by @christopherkarani in #55
• feat(policy): effect-class semantic intent for host and MCP tools by @christopherkarani in #56
• feat(policy): Phase B structural args, network tags, and shell effect merge by @christopherkarani in #57
• feat(policy): Phase C user effect packs and tools discovery by @christopherkarani in #58
• fix(policy): address PR #57 review gaps on proxy and shell classifiers by @christopherkarani in #59
• feat(policy): Phase D local residual effect classifier by @christopherkarani in #61
• feat(security): OS filesystem sandbox for orca run (Landlock + Seatbelt) by @christopherkarani in #63
• feat(cli): viral Safe Launch surface for agent operators by @christopherkarani in #64
• feat: add Phase 2 network route forcing by @christopherkarani in #65
• refactor(orca-rs): remove orphan CLI surface and dead guard APIs by @christopherkarani in #66
• feat: Zig shell_engine sole Evaluate authority; static PCRE2 by @christopherkarani in #67
• chore(scripts): drop dead daemon stubs and orca-rs gate paths by @christopherkarani in #68
• feat(shell_engine): Phase 1 hard fence — pack order + structure smart checks by @christopherkarani in #69
• feat(policy): Phase 2 YOLO/Strict modes and session sticky trust by @christopherkarani in #70
• feat(fm-steward): Phase 3 Mac risk-card steward with timeout fallback by @christopherkarani in #71
• feat(fm-steward): wire real on-device SystemLanguageModel by @christopherkarani in #72
• feat(fm-steward): residual attach surface + soft-edge integrity by @christopherkarani in #73
• feat(hooks): Phase 4 wire FM steward into product shell paths by @christopherkarani in #74
• feat(brand): Phase 5a product identity cut Orca → ryk by @christopherkarani in #75
• feat(cli): P0 permanent allowlist, allow-once, and packs CLI by @christopherkarani in #77
• feat(cli): DCG-parity ryk explain + remove demo by @christopherkarani in #76

Full Changelog: v1.2.8...v1.2.9

Orca/Core v1.2.8

Orca/Core v1.2.8 release

Orca v1.2.7

What's Changed

• fix(release): attach dist/ assets (incl. checksums.txt) to the GitHub Release by @christopherkarani in #47

Full Changelog: v1.2.6...v1.2.7

Orca v1.2.6

What's Changed

• Machine-wide activity view in the dashboard
• Pi decision UI completion
• Plugin lockfile version sync
• Various fixes and improvements

See CHANGELOG.md for full details.

Orca/Core v1.2.5

Orca/Core v1.2.5

Changes

• feat(pi): polish Orca decision cards
• test(cli): isolate policy-dependent fixtures
• feat(branding): sharpen Orca guardrail states
• fix(tui): stabilize raw prompts and compact packs
• chore(release): version bumps across manifests, changelogs, and package metadata

Orca v1.2.4

Added

• --live / --tui alt-screen views for history and replay.
• Reduced-motion support across TUI spinners and animations.
• OSC 11 background detection for automatic light/dark theme wiring.
• Branded first-run celebration and improved onboarding moments.
• Pi slash commands /orca-start and /orca-stop for session-level protection control.

Changed

• --no-rich and ORCA_NO_RICH=1 now gate color without changing machine-readable output.
• --tui + --json is rejected at preflight to prevent mixed output modes.

Fixed

• CLI self-import support in the build.
• Replay/history live help and banner rejection edge cases.
• Phase 6 public contract freeze: exact bytes preserved for JSON, robot, export, and MCP proxy paths.

v1.2.3

Fixed

• OpenCode plugin — Restores command blocking on OpenCode 1.16+ by migrating to the current Plugin hook API (tool.execute.before, permission.ask, event).

Upgrade

After installing/upgrading Orca:

orca plugin install opencode --scope global --yes

If install refuses to overwrite an existing plugin file, remove ~/.config/opencode/plugins/orca.ts first, then re-run install.

Strongest protection

orca run -- opencode

macOS/Linux CLI + daemon archives follow once the release workflow artifacts are published.

v1.2.2

macOS/Linux release

v1.2.0

v1.2.0 - 2026-06-19

Added

• Rust daemon (orca-daemon) — UDS IPC between Zig CLI and Rust evaluator; shell hook evaluation routed through daemon with fail-closed behavior when unavailable.
• orca evaluate — Stable machine JSON API for shell command evaluation (--json --stdin).
• orca start — Guided onboarding flow with host detection and plugin install.
• Pi extension (@orca-guard/pi-orca) — Official Pi package for bash tool-call protection via orca evaluate.
• Bundled orca-daemon in all platform release archives and install layouts.

Changed

• Zig 0.16.0 toolchain migration.
• Guided onboarding — Interactive orca setup with multi-host selection.
• Unified versioning — Core and all agent plugins aligned to 1.2.0.
• Shell PreToolUse / tool evaluation defaults route through Rust daemon when available.

Removed

• Orca Edge — Drone/edge runtime removed from public core; agent guardrails focus only.

Fixed

• Hermes Agent — Orca discovery, degraded-mode handling, and version mismatch fixes.
• Pi integration — Honor deny decisions, timeouts, cwd, and auto unavailable mode.
• Install/DX hardening — quick-install presets, orca doctor activation exports, piped install robustness.

Platform note

This release ships macOS and Linux CLI archives (darwin-amd64, darwin-arm64, linux-amd64, linux-arm64). Windows amd64 is deferred until CI or a Windows builder is available.

Orca v1.1.5

What's New

New Commands

• orca disable [host|all] [--yes] — Removes Orca plugin registrations from host agents (OpenCode, OpenClaw, Hermes, Codex, Claude) without touching the binary or policy files.
• orca uninstall [--plugins-only] [--keep-config] [--yes] — Fully removes Orca: plugins, binary, and user config. Local workspace .orca/ directories are intentionally preserved.

Artifacts

CLI (cross-platform):

• orca-v1.1.5-darwin-amd64.tar.gz
• orca-v1.1.5-darwin-arm64.tar.gz
• orca-v1.1.5-linux-amd64.tar.gz
• orca-v1.1.5-linux-arm64.tar.gz
• orca-v1.1.5-windows-amd64.zip

Plugins:

• orca-codex-plugin-v1.1.5.zip
• orca-claude-code-plugin-v1.1.5.zip
• orca-opencode-plugin-v1.1.5.zip
• orca-claude-marketplace-v1.1.5.zip

Security

• Binary removal targets only known-safe locations (self-exe path + ~/.local/bin/orca). No arbitrary PATH traversal or execution of unknown binaries.
• Both commands require TTY confirmation or explicit --yes flag.