v1.4.214-np.39

Orca NP 1.4.214-np.39 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from b094309766 on 2026-10-22.

What changed since v1.4.214-np.38

281 commits changed since the last release, including 0 fork patches (local(...)) and 268
commits merged in from upstream/main (57b5082404, 268 commits) into the release line. Changes are
grouped by type below, newest first; a group that is capped says how many commits it left out.

All 281 commits in the comparison →

Features

• connectors: connector start and conversation links behind the off-by-default experimentalConnectors flag (B2b-1)
• agent-write: opt-in launch cancel, approval wait and process fence on the shared agent writer
• telemetry: daily aggregate WSL usage snapshot on Windows
• sidebar: add a project or workspace to another host
• ssh: open a plain SSH terminal to a host whose move to its Orca server is blocked
• connectors: add an off-by-default experimentalConnectors setting (no behaviour change)
• mobile: Home's New Workspace opens the desktop's create drawer over Home (native part ships with the next app build)
• browser: new tab page with a workspace card and suggested sites
• mobile: load earlier chat messages on scroll-up, keeping the reader's place
• browser: per-site appearance and zoom, from the page menu and Cmd/Ctrl +/-/0
• browser: show every page load, link clicks included, as a line along the address bar on desktop and mobile
• browser: Chrome-style new tab and address bar suggestions

…and 5 more commits in this group.

Fixes

• three merge breaks the full gate found, and the red set it needed
• restore the project-folder watch rule the SSH deletion took with it
• workspaces: release a VM whose guest is unreachable instead of stranding the delete
• jira: collect the fields a transition needs instead of refusing the move
• native-chat: a missing claude or codex cli no longer stalls the model picker on every open
• mobile: keep a keyboard closed with Back from reopening on terminal touches
• agent-status: a nested claude -p no longer takes over its parent pane's status
• chat: send pi and acp messages after a model-only change
• acp: OMP chats send images; an ACP agent's own startup answer decides
• task-page: show Jira multi-select option labels, not ids
• runtime: release remote streams when the renderer reloads
• worktree-create: a workspace created on a paired server shows one set of default tabs when the same path exists on another host

…and 97 more commits in this group.

Performance

• terminal: keep forward cursors for PR URL schemes
• ai-vault: bound scope cache write batch enumeration
• mobile: index diff review notes by file path
• ai-vault: reuse parsed Qoder transcript records
• chat: avoid repeated skill catalog scans while building the picker
• layout: index records once while patching session lists
• markdown: scan wiki-link delimiters without revisiting the document tail
• orcad: keep the server bundle ASCII so V8 stores it at half the size
• wsl-host: open the stdio bridge without re-probing the distro's platform

Refactors

• colocate Jira favourite-filter contracts
• colocate Jira issue summary generation
• colocate Jira query construction
• colocate Jira image and stream contracts
• colocate the stored-agent contract
• pty: one commit step for both terminal start lanes
• colocate browser cookie validation
• colocate native-chat command envelopes
• colocate native-chat command language rules
• colocate provider retry transcript rules
• colocate mobile web route and bundle tooling
• tooling: group mobile web preview and evidence tools

…and 38 more commits in this group.

Documentation

• readme: update star history chart to 2026-10-21
• track sequential module organization cleanup
• ssh: describe the orcad connect path without the removed relay
• mobile: clarify buffered terminal autocomplete scope

Tests

• complete the mocks and assertions this sync's merges need
• isolate Windows tree-kill load fixture startup and cleanup
• drop obsolete streamparser dependency
• daemon: keep socket backpressure accounting pending through assertion

Other changes

• Layout groundwork (switched off): every question about which pane holds a terminal asks main's layout
• Revert HTML preview by default for the release
• Gate draft image ownership checks on relevant local attachments
• A chat started in a server workspace drawn from the server's layout stays where you opened it (switch-on builds only)
• A paired desktop hands its editor tabs to the server before drawing a server workspace from the server's layout (switch-on builds only)
• Set minimum width for native chat table cells
• Stabilize remote host status bar during retries
• Install shared skills for 11 more agents and stop Qoder listing skills twice
• Add Resource Manager PTY inventory and checked terminal termination
• Offer Resolve with AI for paused merge, rebase, and cherry-pick
• A server-hosted browser tab opened in a server workspace drawn from frames survives other changes to that workspace (switch-on builds only)
• Attach a long paste as a text file, and say a message is too large before it is sent

…and 52 more commits in this group.

Maintenance

23 commits of maintenance and fork bookkeeping (ci 14, chore 7, docs 2), counted rather than
listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.39-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.39-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway
Linux, x86_64	orca-linux.AppImage	chmod +x, run it; updates itself
Linux, x86_64 (.deb)	orca-np_1.4.214-np.39_amd64.deb	sudo apt install ./<file>; updates are manual
Linux, x86_64 (.rpm)	orca-np-1.4.214-np.39.x86_64.rpm	sudo dnf install ./<file>; updates are manual

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal. The
  .deb and .rpm already do this at install time (/usr/bin/orca-np); the AppImage does not.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.
• On Linux only the AppImage updates itself. The .deb and .rpm are installable packages, so a
  newer release has to be installed the same way — the app says so instead of pretending to update.
• The AppImage needs FUSE 2 (libfuse2t64 on Ubuntu 24.04) to run. Package installs do not.

v1.4.214-np.38: fix(reclaim): a non-list answer to listRuntimes reconciles nothing

Orca NP 1.4.214-np.38 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 2368ed38da on 2026-10-21.

What changed since v1.4.214-np.37

432 commits changed since the last release, including 3 fork patches (local(...)) and 418
commits merged in from upstream/main (bbc8303b47, 418 commits) into the release line. Changes are
grouped by type below, newest first; a group that is capped says how many commits it left out.

All 432 commits in the comparison →

Features

• tasks: right-click a Jira task row or board card for its actions
• ai-vault: name the host each search hit came from when hits span several hosts
• native-chat: Codex chats list and run the skills Codex loaded
• speech: set the OpenAI dictation key on a headless host
• ci: ratchet raw repo connectionId host checks; migrate the cheap ones
• native-chat: edit a queued message's images on desktop: remove, paste, drop or attach
• layout-owner: main opens CLI and phone files itself, in the window's live group (dark)
• ssh: one-click Node.js mirror when neither machine can download Node
• orcad-migration: unsaved drafts stay on this desktop and are renamed to the server on commit
• ssh: let a nodejs.org mirror serve the pinned Node on this computer and the host
• accounts: save MiniMax and GLM Coding Plan keys on the Settings host
• native-chat: apply per-agent Auto permission defaults

…and 11 more commits in this group.

Fixes

• reclaim: a non-list answer to listRuntimes reconciles nothing
• cli: import the shared layout contract from its real path
• agent-status: a Copilot dialog on screen reads Needs You, not Working
• i18n: clarify Japanese phone control and connection wording
• i18n: correct Korean sleep with descendants wording
• mobile: apply desktop WebGL atlas fixes to current engine
• mobile: keep a Codex chat addressable under Codex's own idle title on headless hosts
• terminal: repaint desktop after phone fit ends
• mobile: render offline Nerd Font symbols on first terminal display
• mobile: keep terminal scroll gestures from becoming taps
• mobile: mount sessions with saved preferences
• mobile: load folder workspace agent presets on the correct host

…and 225 more commits in this group.

Performance

• serve: clone the supervisor's code copy in one step on macOS
• ci: accelerate adhoc release builds and runner scheduling
• ci: reuse verified Windows builds and trim release history transfer
• persistence: persist a matching terminal binding without re-applying it
• cmd-j: preload the workspace jump palette before first use
• mobile: prepare the worktree checkout while the new-workspace form is open
• editor: watch only active, recent and at-risk workspaces
• build: check CLI with Bun before TypeScript emission
• checks: use Bun for end-to-end typechecking
• release: overlap Windows builds and gate signing on Mac success
• release: overlap server checks and share the mobile bundle
• mobile: shorten output batching during terminal scroll gestures

…and 7 more commits in this group.

Refactors

• wsl-hosts: add flow in wsl-host-registration; liveness split into state, evidence and monitor
• protocol: each area owns its published runtime capability list
• orcad-migration: drop the host-side editor-drafts transfer; keep the durable-commit gate
• editor: keep tab buffer state in a per-tab store record mirrored onto OpenFile
• pane-layout: retire the unread intent tag; renamedLeafIds is the one layout delta
• orcad: every snapshot state op fits the gateway exec budget in shell; the state lock sends its script once
• pty: every PTY retirement names its exit proof; ratchet the unproven ones
• plugins: extract the shared content-pack registry and list store
• de-barrel remote-runtime-client, runtime-terminal-stream and runtime-terminal-inspection (D2, D3)
• round-3 pass-1 follow-ups
• renderer: one FileTypeIcon component for file icons
• composer: split run-target rows and worktree-creation steps into named pieces

…and 1 more commit in this group.

Fork patches (local(...)) — what makes this build different

• test: a unit gate that turns the known-red set into a verdict
• ci: release Linux x64 packages from the fork
• ci: record which workflows stay live on this fork

Documentation

• orca-cli: teach agents cross-project parents and re-parenting
• add test anti-pattern reference
• format AGENTS.md so the formatting check passes on main
• clarify first-class platform, remote, and mobile priorities
• remove redundant max-lines agent instructions [skip ci]
• slim test agent instructions
• load Git guidance on demand [skip ci]
• update WeChat QR code for group 13
• editor: design for one editor buffer per file

Tests

• complete the ephemeral-VM SSH registry mock
• repair the four merge regressions the full suite found
• vitest: derive the Node SQLite test list from imports
• claude: isolate real CLI fixtures and cover chat option requests
• layout: pin the layout-owner save format for downgrade, and keep main's touched-records save with an exhaustive guard (dark, layout-owner build only)
• terminal-surfaces: pin why main's pane republish is deferred to a microtask
• daemon: run the stalled-reader backpressure test over a Unix socket, not TCP loopback
• skills: synchronize Windows rename contention
• claude: accept dispatch metadata after stopping a turn
• runtime: SSH health probes keep answering while the SSH layer is stuck
• orcad: stop Windows daemon teardown from counting processes that reused a parent pid
• e2e: follow intentional product changes in stale full-suite specs

…and 19 more commits in this group.

Other changes

• A running agent's resume note is not a sleep, so switch-on builds report it connected (dark, layout-owner build only)
• Reuse Windows server native prebuilds across app version bumps
• Prepare server template assembly alongside qualification
• Layout-owner build: main shows live terminals that lost their tab, at the same moments the window did (dark)
• Refuse a workspace parent that would close a loop, even when the worktree cache is cold
• Custom tab shortcuts work right after a keyboard worktree switch
• Mobile chat: remove the Tools toggle and its open-everything mode
• A slept native-chat workspace reads asleep and hides
• Open new Markdown changes in the rich editor
• Build adhoc Mac architectures in parallel
• Discard pauses autosave of the file in every workspace; read-only Markdown/CSV tabs can't overwrite unsaved edits (phase 1b-3)
• Reuse qualified templates and batched signing for production releases

…and 62 more commits in this group.

Maintenance

22 commits of maintenance and fork bookkeeping (chore 7, ci 7, style 5, build 2, docs 1),
counted rather than listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.38-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.38-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway
Linux, x86_64	orca-linux.AppImage	chmod +x, run it; updates itself
Linux, x86_64 (.deb)	orca-np_1.4.214-np.38_amd64.deb	sudo apt install ./<file>; updates are manual
Linux, x86_64 (.rpm)	orca-np-1.4.214-np.38.x86_64.rpm	sudo dnf install ./<file>; updates are manual

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal. The
  .deb and .rpm already do this at install time (/usr/bin/orca-np); the AppImage does not.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installe...

v1.4.214-np.37

Orca NP 1.4.214-np.37 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 3fcad40316 on 2026-10-19.

What changed since v1.4.214-np.36

180 commits changed since the last release, including 0 fork patches (local(...)) and 170
commits merged in from upstream/main (83c768d1b4, 170 commits) into the release line. Changes are
grouped by type below, newest first; a group that is capped says how many commits it left out.

All 180 commits in the comparison →

Features

• relay: add the per-cell phonePath switch, effective only in reserve mode
• files: guarded file writes that refuse to overwrite a changed file
• native-chat: + menu shows chat, disabled chat and CLI rows
• agent-status: show OSC 7501 program status in rows and tabs
• agent-status: read OSC 7501 program status beside hooks
• native-chat: /resume in a structured chat opens Agent Session History
• settings: sign Antigravity chats in from Accounts
• sidebar: the phone reads its workspace list from the sidebar inputs (dark)
• sidebar: the desktop window lists main's sidebar inputs behind the build switch (dark)
• cli: set the title of one terminal pane
• sidebar: the owning host raises the workspace unread flag (dark)
• cleanup: the owning host records last terminal use for cleanup's last active (dark)

…and 6 more commits in this group.

Fixes

• tab-bar: launch the split new-tab button's agent without the menu rows
• crash-reporting: Windows native crash reports say what the fault touched and which code ran
• diagnostics: crash bundles always keep the terminal daemon's newest log lines
• crash-reporting: renderer crash reports say whether the window was hung or blank
• agent-status: a restarted Orca learns again that a Pi pane is still working
• managed-server: repair main typecheck after the byte-budget and snapshot-room PRs crossed
• sidebar: the window raises the unread flag exactly when its host does not (dark switch)
• relay-ops: judge a reserve cell's connections against its configured hard cap
• session-history: cached results keep every session the scan found for a workspace
• ssh: closing a bridged relay tab stops its shell, even across a restart
• agent-status: keep a claude CLI child on its pi parent's row
• projects: a project added from the CLI, web or a paired desktop through a symlink or subfolder shows its workspaces

…and 64 more commits in this group.

Refactors

• process-host: let runProcess callers observe stderr as it arrives
• ssh: derive a host-key policy from the target owner
• terminal: one PTY attribution for teardown, close and identity; delete the deprecated owner resolver
• plugins: name shared catalog and manifest schema parts
• renderer: one twin check, one worktree-copy scan, drop stale resolver mocks
• orchestration: delete the unreachable pre-mailbox terminal delivery path
• shell: one shell-argument-quoting module for the duplicated quote copies
• renderer: fold browser creation, file actions and file preview off the deprecated owner resolver
• agent-status: one live agent transition detector in main, read by the sort stamps
• shared: move orcad-migration-* into src/shared/orcad-migration/
• renderer: fold launch, paste and terminal-create callers off the deprecated owner resolver; spawn refuses folder twins
• ssh: split ssh-connection-utils into concretely named modules

…and 21 more commits in this group.

Documentation

• readme: bring the fork-differences list up to date, in all seven READMEs

Tests

• e2e: reveal specs create workspaces through main so they pass with the sidebar switch on
• managed-server: 6 KB wire-size budget for every POSIX host-op command
• browser: document blocked popup compatibility gates
• floating-terminal: mock the bulk-close confirmation the panel suite cannot render
• wsl: exercise native chat on real WSL2 hosts
• e2e: seed the gone-pane resume record on disk so the CLI retention control holds in both layout builds
• layout-owner: pin that a paired server's workspace never gets layout.apply
• sidebar: the desktop window and a phone reading the feed draw the same list (dark)
• e2e: align title-strip drops with pane selection rules

Other changes

• A CLI split that times out leaves no pane (dark, layout-owner build only)
• Session History: the Workspace tab stops re-reading every transcript to find its sessions
• Refuse chat resume until terminal writers have exited
• Align root Node types with the supported Node 24 runtime
• Sleep stops a workspace's native chat agents
• The host raises the shared unread dot whatever each client's Filters say (dark)
• Editor files that share a path across two hosts: the tab lookup, the load report and the phone close match the right file (dark, layout-owner build only)
• An e2e test cuts the window's layout feed mid-session and checks it recovers and survives a restart (dark, layout-owner build only)
• Revert "fix(native-chat): Claude, Pi and ACP chats are Working only while the agent holds the send (stablyai#30134)"
• One background-process read of "Notify About Hidden Workspaces" for phone pushes and the host unread flag
• Native chat: rewind works at any chat length
• Confirm before bulk-closing tabs

…and 19 more commits in this group.

Maintenance

11 commits of maintenance and fork bookkeeping (build 5, chore 3, docs 1, style 1, ci 1),
counted rather than listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.37-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.37-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.36: fix(jira): keep the priority pill's fill now that its colour is shared

Orca NP 1.4.214-np.36 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from f1cda22ad2 on 2026-10-18.

What changed since v1.4.214-np.35

7 commits changed since the last release, including 0 fork patches (local(...)). Changes are
grouped by type below, newest first; a group that is capped says how many commits it left out.

All 7 commits in the comparison →

Fixes

• jira: keep the priority pill's fill now that its colour is shared
• jira: one priority palette for the chip and the list cell
• checks: a missing Jenkins namespace is "not Jenkins", not a failed load
• fork: two findings from the Opus review of the np.35 merge

Refactors

• fork: pay down divergence debt the np.35 merge exposed

Maintenance

2 commits of maintenance and fork bookkeeping (docs 2), counted rather than listed; the commit
list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.36-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.36-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.35

Orca NP 1.4.214-np.35 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 75ab5be8b6 on 2026-10-18.

What changed since v1.4.214-np.33

641 commits changed since the last release, including 0 fork patches (local(...)) and 628
commits merged in from upstream/main. Changes are grouped by type below, newest first; a group
that is capped says how many commits it left out.

All 641 commits in the comparison →

Features

• runtime: remove an agent's downloaded runtime only once nothing on the host can still run it
• sidebar: after a restart, the host clears sort tiers nothing backs any more (dark)
• skills: target the Orca NP CLI in the skill rail and stubs
• antigravity: sign Antigravity chats in with the server's own Google sign-in
• sidebar: the host that owns a workspace stamps its Recent and Smart keys (dark)
• telemetry: report a legacy relay host active once a day while it bridges terminals
• sidebar: main produces this host's workspace rows, checked against the window (dark)
• sidebar: dark phone feed of the sidebar inputs (sidebarInputs.read)
• native-chat: mark each attached image as [Image #N] where it sits in the prompt
• terminal: tell users once that the diff panel in a Claude pane is Claude's own
• mobile: draw chat tool runs the way desktop does
• sidebar: main keeps the list's time rules on one clock, checked against the window (dark)

…and 38 more commits in this group.

Fixes

• build: drop the popout renderer entry the fork's tree does not carry
• i18n: regenerate the runtime-required English catalog after the merge
• focus: keep keyboard focus in the agent tab after chrome clicks
• daemon: OMP's prompt-bubble markers no longer trip the dead-app repair check
• terminal: avoid duplicate snapshot replays after reveal
• runtime: show "Re-pair required" for revoked servers and re-pair in place
• terminal: an app's own OSC 133 zone close no longer ends the agent's turn
• ssh: two overlapping update checks never both try a host the first one just failed on
• checks: keep an open Checks panel on a live loop and in step with the icon
• ssh: refuse a migration request too large for the host's sealed frame before sending it
• ssh: a connection never redials a host the user disconnected before its teardown runs
• terminal: send pi's copy to the client watching the pane

…and 282 more commits in this group.

Performance

• typecheck: pin Bun as a devDependency and typecheck with it
• native-chat: flush send transactions without flushing every streamed revision
• dev: avoid pairing web rebuilds after test file changes
• reduce redundant sidebar agent status subscriptions
• palette: avoid filtering qualities for identifier tokens
• isolate browser eviction veto from pure retention selectors
• import onboarding notification function directly
• build: skip unnecessary work and reclaim Vite caches
• ci: skip unused main source maps in PR build fixtures
• add an opt-in to skip main source maps during development
• session-tabs: keep warm session streams for every worktree whose terminals stay mounted
• sidebar: stop re-inspecting the setup-script prompt on every worktree revisit

…and 14 more commits in this group.

Refactors

• ssh: import the system-ssh and ssh -G modules directly, not through re-export shims
• runtime: import mobile-cloud-relay and browser-host helpers from their owning modules
• runtime: move runtime/browser-host-* into runtime/browser-host/
• compatibility folders name their entry modules instead of an index barrel
• runtime: move runtime/relay to runtime/mobile-cloud-relay
• orcad: import orcad helpers from their owning modules, not re-export shims
• drop the runtimeWorktreeIdsEqual alias and name the WSL hook relay gate for what it gates
• terminal: drop remote-pty checks isRemoteExecutionHostPtyId already covers
• git: the common-dir check uses areWorktreePathsEqual
• name the vm transcript and mobile pending-write caps for what they count
• execution-host: one isLocalExecutionHost in shared
• agent-status: the renderer's hydration cutoffs read main's status retention window

…and 21 more commits in this group.

Documentation

• agent-hooks: ORCA_FEATURE_REMOTE_AGENT_HOOKS now only gates the WSL hook relay
• remove obsolete automated setup tab plans

Tests

• tighten the round-2 parity, serve and watcher tests
• runtime: compare macOS tmpdir paths by realpath in create-intent and clone tests
• remote-runtime: pin the 12 hand-kept error-code lists to their callers' policy
• e2e: the Windows CLI matrix convert cell calls the convert helper that exists
• files: the native-ignore watcher test waits on delivered events, not a fixed sleep
• orcad: orca serve's argv makes orcad serve the web client and 404 other paths
• preflight: freeze the clock in the explicit-binary timeout test
• runtime: record Electron vs orcad composition wiring and fail on undeclared differences
• layout-owner: an older session's moved editor tab gets its workspace's id on save and from the first frame
• e2e: wait for git status to show the seeded file before the discard confirmation test acts
• e2e: hidden split-pane exit tests end the shell with exit 0
• pty: the launch race join test no longer waits on real disk I/O

…and 114 more commits in this group.

Other changes

• Window saves stop carrying tab and pane layout; main keeps its own (dark, layout-owner build only)
• SSH pane terminals and local-to-SSH tab moves reach main directly (dark, layout-owner build only)
• Main routes a project registered on two machines to the same owner the window saves to (dark, layout-owner build only)
• Session History: find every agent's older sessions in Workspace and Project views
• Scope tab-group shortcuts and pane actions to the focused split
• Session History: the scan line under the search box no longer jumps during a refresh
• Antigravity install: one clear message in the chat, with the message box staying in place
• Fix mobile Source Control rendering for large branches
• Phone and old-client tab lists keep editor tabs under owned ids (dark, layout-owner build only)
• restore pinned npx skills installer
• Main keeps editor tabs under owned ids and in-place re-owns in step (dark, layout-owner build only)
• Main records when a workspace's default tabs were applied (dark, layout-owner build only)

…and 63 more commits in this group.

Maintenance

34 commits of maintenance and fork bookkeeping (ci 20, chore 11, docs 2, build 1), counted
rather than listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.35-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.35-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.33

Orca NP 1.4.214-np.33 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 5e4dd48d6a on 2026-10-16.

What changed since v1.4.214-np.32

79 commits changed since the last release, including 0 fork patches (local(...)) and 60
commits merged in from upstream/main. Changes are grouped by type below, newest first; a group
that is capped says how many commits it left out.

All 79 commits in the comparison →

Features

• jira: show and edit story points on the issue detail
• task-page: match the Jira board's Me filter on any role field
• vm-recipes: let a recipe inject workspace context-menu items
• native-chat: one queue header that becomes the pause row; drop the composer Resume and the send dialog
• layout: draw local and SSH layouts from main's layout stream behind the layout-owner build switch
• acp: chat agents can declare a managed runtime that a start runs but never installs
• native-chat: show Claude's /goal in the goal banner

Fixes

• sync: apply the third review's findings
• sync: apply the second review's findings
• sync: apply the Opus review's findings
• sync: make the merged tree pass the full lint chain
• sync: repair the breaks the merged tree's typecheck found
• tasks: reload the board when the open issue's sprint changes
• codex: keep a Linux-side home logical instead of opening macOS autofs
• native-chat: paste clipboard images into a chat on a managed SSH host or paired server
• orcad: hand macOS opens from the browser sidecar to the desktop app
• serve: ship the paired web client outside app.asar so a /tmp sweep cannot break it
• browser: managed SSH terminal links open in the Orca Browser again
• session-tabs: keep recent worktree streams warm and stop resubscribing live ones

…and 27 more commits in this group.

Refactors

• pty: one spawn preflight step for both launch lanes
• layout: build today's store slices from layout frames (inert)

Documentation

• sync: correct the counts and cross-references the final review found
• sync: record the 2026-10-16 upstream sync
• sync: date the ratchet annotations to the sync day

Tests

• ai-vault: pin the index-first scan answer's shape
• rate-limits: mock the host HTTP port instead of Electron's net
• deflake GC expiry and cold-highlight CI waits
• ci: reuse setup across PTY connection suites
• ci: reuse costly fixtures and quiet passing logs
• ci: remove repeated fixtures and deadline waits

Other changes

• Fix terminal daemon restart leaving older Codex conversations locked
• Support arrow-key answers in chat question cards
• Close, rename and equalize panes through main (dark, build switch off by default)
• Session History: show the scan's progress in a strip under the search box
• Allow worktree parents across projects on the same machine
• [CI] Reuse costly test setup and report an explicit full result
• Open a native chat copy in the CLI without waiting for History
• [CI] Reuse web preload imports across local-field tests
• Session History: the scanner reports its progress to windows (no visible change)
• Add the dark layout.apply channel and route pane splits through main (build switch, off by default)
• [CI] Group skill update checks by operating system
• Install shared skills for 20 more agents and read every agent home in WSL

…and 2 more commits in this group.

Maintenance

7 commits of maintenance and fork bookkeeping (ci 5, chore 1, docs 1), counted rather than
listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.33-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.33-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.32: docs(jira): correct the row's keyboard-route comment

Orca NP 1.4.214-np.32 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 4221e9b627 on 2026-10-15.

What changed since v1.4.214-np.30

332 commits changed since the last release, including 1 fork patch (local(...)) and 311
commits merged in from upstream/main. Changes are grouped by type below, newest first; a group
that is capped says how many commits it left out.

All 332 commits in the comparison →

Features

• tasks: assign Jira issues to sprints
• jira: search the assignee list and pin me and my team
• task-page: reliable Jira lane drops and custom-field editing
• mobile: the phone filters and sorts with the desktop's shared Workspace options rules
• jira: use favourite filters within their source site
• jira: add bounded site-specific favourite filter catalogue
• persistence: one-time profile backup before startup rewrites saved data
• layout: publish each pane's live terminal title on the layout stream
• native-chat: chat scratch folders expire after 30 days unused
• native-chat: copy chat selections when Copy on Select is on
• wsl-mover: shell history moves with the project to the WSL host (D1b-6c-1)
• relay: log where the sticky lane's slot time goes, per pooled connection

…and 37 more commits in this group.

Fixes

• jira: exclude macOS Ctrl+click from the split button's press-and-hold
• jira: clear the changed-lines gate findings this sync introduced
• jira: one split button for the row's linked workspace, per the owner's decision
• jira: union the list row's affordances instead of swapping them
• jira: restore the list's attached-workspace chip and agree every resolver call site
• jira: close the second review round — a silent failure and a label/action split
• jira: close the five findings from the sync's Opus review
• remote: push host-side project and workspace changes to paired clients
• pairing: a paired workspace's GitHub panels and agent status follow its host
• native-chat: focus the composer after a keyboard switch between chats
• mobile: show skill commands you ran and draw warnings, errors and status lines as notices
• ssh: stop stale saved state from blocking an SSH host's move to a managed server

…and 97 more commits in this group.

Performance

• load structured agent adapters when the host starts
• ci: cut redundant tests and reuse expensive setup
• layout: re-project only the written partition in the layout stream
• ai-vault: share concurrent Codex title-index reads
• worktrees: fetch the base while the host's create picks a name
• ci: reuse import analysis and run localization coverage with Bun
• session-history: keep a timed-out scan's finished transcripts
• lint: avoid unnecessary anti-slop scope construction
• session-history: end a scan only when it stops making progress

Refactors

• sidebar: the Workspace options menu renders from one shared option list
• sidebar: one shared Workspace options filter and sort evaluator
• ssh: keep SSH terminal bindings on disconnect, reconnect and wake (one rule, main's)
• agent-launch: launching into a paired-server workspace stops closing local agent tabs
• runtime: check session host queries and terminal focus
• runtime: check workspace host, file and persistence boundaries
• check terminal queries and preserve early view operations
• check PTY inventory and lifecycle dispatch
• runtime: check terminal stop and workspace admission
• tabs: create split tabs in the same update as their split
• runtime: check workspace startup on original prototypes
• runtime: check terminal input and mail delivery

…and 31 more commits in this group.

Fork patches (local(...)) — what makes this build different

• agents: pass timeouts in each harness's unit, and mktemp the PR body

Documentation

• jira: correct the row's keyboard-route comment
• update WeChat group 12 QR code [skip ci]
• build: correct which build shape reaches the upstream team fallback

Tests

• remove low-value coverage and shorten expensive fixtures
• tabs: pin three refactor behaviours
• allow Windows large recovery fixture to finish before cleanup
• avoid unused imports while preserving export contracts
• layout: list the window-parity differences that are not bugs separately
• guard remote input model from default RPC manifest
• consolidate orchestration mailbox suites
• consolidate contract suites and trim duplicate cases
• consolidate structured session close suites
• defer runtime setup for skipped CLI probes
• restore terminal stop routing coverage
• share setup across related leaf suites

…and 13 more commits in this group.

Other changes

• a11y(jira): reach the row's copy menu by keyboard again
• Check runtime construction and remaining service owners
• Check Linear command construction types
• Fix terminal daemon restart leaving macOS service registered
• Check mobile session membership and publication types
• Detect stalled terminal daemon I/O and offer restart review
• Check terminal orphan adoption types
• Unify lineage child indentation across worktree card styles
• Check automation and persisted terminal surface types
• Increase chat transcript bottom padding so reply controls clear the comp
• Check terminal pane recovery types
• Check orchestration terminal authority types

…and 57 more commits in this group.

Maintenance

23 commits of maintenance and fork bookkeeping (ci 13, chore 6, docs 4), counted rather than
listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.32-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.32-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.30: fix(build): expect this fork's signing team, not upstream's

Orca NP 1.4.214-np.30 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 419cdb689e on 2026-10-14.

What changed since v1.4.214-np.26

403 commits changed since the last release, including 0 fork patches (local(...)) and 389
commits merged in from upstream/main. Changes are grouped by type below, newest first; a group
that is capped says how many commits it left out.

All 403 commits in the comparison →

Features

• browser: collapse the annotation panel to one row
• ephemeral-vm: give ephemeral hosts a lifetime contract and an extend hook
• wsl: Windows path actions for WSL hosts through one owner-routed capability (WSL-via-orcad C8)
• native-chat: expand mermaid diagrams into a pan and zoom viewer
• wsl: Add WSL distro host UI and status (WSL-via-orcad C7b, experimental)
• wsl: WSL distro hosts, main-process wiring and persistence (WSL-via-orcad C7a, experimental)
• wsl: account env for agent tabs on a WSL orcad host (WSL-via-orcad C9b)
• wsl: accounts shim for agents on a WSL orcad host (WSL-via-orcad C9)
• wsl: liveness, failure classification and recovery for WSL orcad (WSL-via-orcad C6)
• wsl: connect to a WSL distro's orcad over wsl.exe stdio only (WSL-via-orcad C5)
• linux: run the AppImage terminal daemon off the mount, on the extracted copy's bundled Node
• wsl: deploy and launch orcad inside a WSL distro (WSL-via-orcad C4)

…and 39 more commits in this group.

Fixes

• build: expect this fork's signing team, not upstream's
• ci: give the cross-arch terminal-host boot a measured deadline
• sync: restore the local half of the runtime name filter, guard automations
• sync: give the two new ratchets the fork's own counts
• sync: reconcile the tests this sync's behavior changes moved under
• sync: re-home the callers the 2026-10-13 merge left without their module
• copilot: read Copilot's blocking prompts from the screen
• notifications: remove read macOS notifications from Notification Center by pane thread
• usage: show "Network issue" for any provider whose usage request fails on the network
• native-chat: Stop is saved before it acts, and a late or repeated Stop does nothing
• orchestration: stop retried failed worker starts from piling up live agents
• terminal: send only the text a Linux IME commits, not the candidate key

…and 138 more commits in this group.

Performance

• native-chat: read the composer's text and caret straight from the editor
• session-history: stop a cancelled scan inside the file it is reading
• wsl: skip re-hashing unchanged orcad artifacts and guest Node runtime on the WSL wake path (C4c)
• wsl: pooled wsl.exe command loops and orcad compile cache on the WSL wake path (C4 follow-up)
• reuse verified Node and run the layout check with Bun
• runtime: stop re-sending the worktree list to mobile pollers on every terminal chunk
• mobile: skip re-rendering unchanged worktree rows
• claude: run the Windows Claude hook as a signed native claude-hook.exe
• pty: check WSL working directories off the main thread
• copilot: run the Windows status hook as a direct .cmd, faster and UTF-8 safe
• agent-hooks: drop the extra PowerShell per hook event for Gemini, dsh, Kiro, Droid and Command Code
• notifications: stop every Windows notification from freezing Orca

…and 4 more commits in this group.

Refactors

• main: share one caller-signal + timeout composition
• orcad-migration: migration source abstraction, capability-gated source.kind, path-rewrite stage (WSL-via-orcad D0)
• runtime: main alone starts setup and default tabs for an activated create
• automations: main creates an automation workspace's setup and default tabs
• chat: give the start-refusal resumable table its own module
• renderer: name target converters by meaning; drop re-export shims
• renderer: remove the keyboard-handlers barrel and partial re-exports
• renderer: remove the web-terminal-surface-id re-export
• renderer: remove the runtime-git-client barrel
• renderer: remove the runtime-file-client barrel
• renderer: remove the web-session-tabs-sync barrel
• renderer: remove the web-runtime-session barrel

…and 53 more commits in this group.

Documentation

• readme: point the Android APK links at 0.0.55
• native-chat: say why /clear is refused while the agent works instead of queued
• relay: director Cloud SQL sidecar enablement and rollback

Tests

• sync: assert every field the local name filter forwards
• sync: restore the runtime name-filter suite the merge deleted
• e2e: sample the delete dialog until it has enough frames
• e2e: wait for the paired-reveal decoy to settle at its new size
• e2e: probe the delete dialog's confirm button, not the force-delete menu chevron
• daemon: a Node-hosted launcher keeps a busy Electron-hosted daemon and its terminals
• orcad: retry launcher-isolation teardown on Windows EBUSY
• daemon: pin clock for stable-launch budget assertion
• renderer: one runtime-environment bridge fixture
• launch: pin what the "+" launchers produce on main today
• e2e: mixed-version, two-client and phone layout baselines recorded on main
• run a structured chat against the packaged headless server

…and 11 more commits in this group.

Other changes

• Host plans agent launches with the window's runtime rule and one runtime fact (C1)
• Resume in New Native Chat for Grok and OMP terminal conversations
• Start a startup terminal while Orca's window is hidden instead of waiting for it to be shown
• Auto-hide the menu bar in web popups and re-layout when it appears
• Show folder workspaces in the Cmd+J jump palette
• [CI] Avoid native jobs for isolated policy self-test edits
• [CI] Reuse Windows resolver imports and retire unused helper tests
• Update README downloads badge (x4)
• Cache mobile typechecks and overlap CI setup
• Show Codex model capacity failures as red agent status
• Fix delayed agent launches such as sleep 30 && claude
• Close worktree ready notification when its workspace opens

…and 52 more commits in this group.

Maintenance

27 commits of maintenance and fork bookkeeping (chore 15, ci 9, docs 2, build 1), counted
rather than listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.30-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.30-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.26

Orca NP 1.4.214-np.26 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from 4052d76868 on 2026-10-11.

What changed since v1.4.214-np.25

391 commits changed since the last release, including 0 fork patches (local(...)) and 386
commits merged in from upstream/main. Changes are grouped by type below, newest first; a group
that is capped says how many commits it left out.

All 391 commits in the comparison →

Features

• mobile: relay a paired phone's server-workspace requests through the desktop (hidden)
• runtime: let a paired desktop register its phones as phone devices
• mobile: show SSH host health on the workspace row badge
• push: carry a notification's workspace server to the phone
• ssh: a paired client can manage the server's own SSH hosts (ssh.target-management.v1)
• relay: a free-form staging load mode on Prove Relay Asia Staging
• relay: a staging cell-flags workflow, trusted by the staging relay deploy identity
• native-chat: read ZCode session transcripts through the OpenCode SQLite reader
• relay: alert when a reserve-mode cell trips its dead-man
• relay: log metric and console alert for unreadable cell switch files (evidence code)
• relay: the director that booked a join writes its row about a second later (off)
• accounts: isolate ZCode sign-in terminal setup

…and 32 more commits in this group.

Fixes

• sync: re-measure the mobile web bundle script sweep
• packaging: unpack the orcad serve-selection entry so orca serve can run it
• doc-preview: serve authorized web fonts as binary bytes
• relay-load: reuse an Asia load principal set for shards past the fourth
• browser: double-click in the address bar selects a word, like other browsers
• remote: move tabs into a split-off group on the server too
• e2ee: stop dropping terminal output on a backed-up legacy connection
• persistence: save editor-only host sessions during quit
• zsh: keep deferred line-init defined for plugins that call it by name
• runtime: refuse headless tab split/move into an unknown group
• agent-status: keep nested models off parent panes
• ssh: a restore racing a disconnect never leaves a forward behind

…and 131 more commits in this group.

Performance

• ci: overlap Bun typechecking and skip redundant alias scans
• worktrees: skip unchanged lineage after sidebar order saves
• worktrees: preserve Git scans when saving sidebar order
• main: release startup allocations held by journal sentinel
• runtime: reduce terminal ANSI scanning work
• ai-vault: pipeline fresh transcript discovery with bounded I/O
• mac: name terminals in Orca instead of ps tty=
• usage: keep per-source usage caches off the main thread
• daemon: send PTY output to main as raw bytes, not NDJSON

Refactors

• runtime: compose typed file search and listing ownership
• relay: delete the SSH relay server, its build assets and tests
• ssh: connect fails for hosts orcad can't serve; remove the relay client path
• worktrees: worktree create, listing, removal and repo hook/ref reads route by their owner
• git: git calls route by the worktree's owner
• projects: repo, project group and folder catalog calls route by their owner
• sources: row-less sources and host-less surfaces name their host
• github: PR and work-item calls carry the repo owner's host
• agents: agent, session and port calls route by their workspace owner
• terminals: terminal input and inspection route by the PTY's owner
• files: file reads and edits route by the file's owner
• forge: forge reads and edits route by the repo's owner or the task source

…and 31 more commits in this group.

Documentation

• readme: lead with what this fork changes, and point links at the fork
• rpc: a paired client runs commands as you; say so when pairing

Tests

• relay: load generator can reopen a closed phone splice instead of failing the run
• ci: point server-scope qualification fixtures at SSH after relay deletion
• e2e: reusable phone-mirror test setup and baseline specs
• runtime: enforce ANSI preview-final pre-filter invariant
• main: guard against a shared journal no-row sentinel returning
• native-chat: unmount the cut-turn notice hooks after each test
• e2e: cover SSH user journeys on an orcad-managed host
• e2e: pass the catalog owner to the remaining catalog fetches and creates
• relay: load generator can send two concurrent assigns per host (--duplicate-assign-probes)
• native-chat: seed large transcript fixtures in one transaction
• native-chat: verify ZCode readers on every desktop platform
• native-chat: seed ZCode through the execution host

…and 13 more commits in this group.

Other changes

• Avoid downloading unchanged paired-runtime session history
• [CI] Reduce test teardown and scope server qualification
• Require pointer rest before opening activity hover cards
• [CI] Fix test fixtures and reduce unnecessary test setup
• Record a display-only snapshot of each paired server's tabs (inert)
• relay: pin staging c4 to the step-5 image again after the reserve guard drill
• relay: point the staging deploy at the pre-step-5 image for the reserve guard drill
• List the cold-relaunch tab-order swap as known on main
• relay: pin staging c4 to the step-5 image again after the director identity bootstrap
• relay: keep staging c4 on the serving director image until the director identity bootstrap
• Save runtime-started tabs in the tab bar before their terminal starts
• Update README downloads badge (x4)

…and 95 more commits in this group.

Maintenance

14 commits of maintenance and fork bookkeeping (ci 8, chore 4, docs 2), counted rather than
listed; the commit list for this release has the details.

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.26-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.26-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.

v1.4.214-np.25

Orca NP 1.4.214-np.25 — Orca built from nplez1/orca, on this
fork's own update feed.

Built from cce80247fb on 2026-10-11.

What changed since v1.4.214-np.24

9 commits changed since the last release, including 0 fork patches (local(...)). Changes are
grouped by type below, newest first; a group that is capped says how many commits it left out.

All 9 commits in the comparison →

Features

• tasks: show an attached-workspace chip on Jira rows and open it
• checks-panel: show PR review verdicts with reviewer names
• host-sync: replicate settings and credentials to a paired host
• worktree-layout: one folder per project, and migrate checkouts into it

Fixes

• credentials: depend on the SecretStore port instead of Electron's safeStorage
• sidebar: use the GitHub mark for GitHub tasks on workspace cards
• issue-pane: keep a task's link when the name is changed, and render comment formatting
• pi: stop a sub-agent session from completing its pane
• github: send a confirmed admin bypass when a repo has no local git options

---

Install

Platform	Artifact	How
macOS, Apple silicon	Orca-NP-1.4.214-np.25-arm64-mac.zip	unzip, drag Orca NP into Applications
macOS, Intel	Orca-NP-1.4.214-np.25-mac.zip	same app, x64 build
Windows	orca-windows-setup.exe	run it; SmartScreen warns once — More info → Run anyway

The .dmg and the .zip contain the same app; either works.

Signed and notarized. This build carries a Developer ID signature and a stapled Apple notarization ticket, so it opens with no Gatekeeper override and macOS keeps its permission grants across updates.

What this build is

• Ships as Orca NP, so it installs beside an official Orca rather than replacing it: its own app
  bundle, its own data (Application Support/orca-np), its own settings (~/.orca-np), and its own
  command (orca-np).
• Updates from this repository's releases, never from stablyai's.
• Sends no diagnostics or usage data.

First run

• It starts with a fresh profile. It cannot read an official Orca install's repos, worktrees,
  credentials or paired devices — that separation is deliberate, not a migration failure.
• macOS asks for folder permissions again (Documents, Desktop, Downloads, and any folder you
  grant). Permissions are anchored to the app's identity, so this happens once and then survives
  later updates.
• Add the orca-np command to your PATH from Settings → CLI if you want it in a terminal.

Worth knowing

• orca:// is intentionally shared with official Orca, so pairing links and skill-share links work
  in both. On a machine with both installed, macOS routes orca:// to only one of them.
• The Windows build is unsigned by choice: one SmartScreen warning per installer, after which
  self-updates work. If Smart App Control is enabled it refuses unsigned apps outright.