Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/HigorAlves/orcWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/higoralves/orc/ci)<a href="https://agentmods.dev/commands/higoralves/orc/ci"><img src="https://agentmods.dev/badge/commands/higoralves/orc/ci/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/higoralves/orc/ci"><img src="https://agentmods.dev/badge/commands/higoralves/orc/ci.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.01411 |
| Opus 5.5 | $0.00019 | $0.00564 |
| Sonnet 5.5 | $0.00010 | $0.00282 |
| Haiku 4.5 | $0.00005 | $0.00141 |
Grade A, and why
ci scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/orc:ci
CI is red and you want to know why — and, when it's the code's fault, get it fixed without hand-reading 4,000 lines of logs. /orc:ci dispatches orc-ci-investigator for an evidence-cited diagnosis, then routes on the verdict: fix, re-run, escalate, or hand off to /orc:debug.
Arguments
-
--auto[=guided|full]— autopilot level for this run (overridesinteraction_policy); ladder and hard-outward exemption inorc:gates§6. -
<pr-number>or<branch>— optional ref. Omitted → the current branch (and its PR, if one exists). -
--run <id>— pin the investigation to an explicit run ID instead of resolving the newest run for the ref. -
--watch— after a push: pollgh run watch <id>(orgh pr checks <pr> --watch) until the run concludes, then run the normal flow if red. Green → report and exit.
Workflow
Phase 0 — Detect context
!orc-workspace-detect --banner
Context is injected above (ORC_* vars are exported for any Bash you run — do not re-run detection). loose context → surface and stop (no repo, no CI to inspect).
In workspace mode, read ${ORC_STATE_DIR}/orc.json for the in-progress session's linkedPRs. With 2+ linked PRs and no explicit ref, AskUserQuestion: investigate all N / pick one / cancel. Iron rule: no silent broadcast. Each targeted PR gets its own investigator dispatch in Phase 2 (parallel, single response, multiple Task calls).
Phase 1 — Resolve the ref + run
- Resolution order:
--run <id>wins; else the explicit<pr-number>/<branch>argument; else the current branch (git branch --show-current) and its PR viagh pr list --head <branch>. --watch: startgh run watch <id> --exit-statusfor the newest run on the ref (orgh pr checks <pr> --watchwhen the ref is a PR) in the background — Bash withrun_in_background: true, or theMonitortool when available — so the session stays responsive; say so in one line and end the turn. You're re-invoked when it exits. Success → echo the green summary and stop. Failure → continue with that run pinned.- Without
--watch:gh run list --branch <branch> --limit 5/gh pr checks <pr>for a quick read. Everything green → say so and stop — never manufacture work. - Register state:
orc-state init --command ci --total-phases 4, then record the resolved ref + run ID viaorc-state digest write -. Defer toorc:state-protocolfor schema and rules. (If an in-progress session already exists for this branch — e.g. a flow — do NOT re-init asci; append aci_statusline to that session's checkpoint body instead.)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +1 lines · -19 tokens per session eacb3c0498d6
- 15d ago Changed 4a397f8c147b
- 1mo ago First seen · 85 lines · 67 tokens per session scan A e81fcb8b88ca
ci is a command published in the GitHub repository HigorAlves/orc (6 stars, last pushed today), licensed MIT. It adds 48 tokens to every session and 1,411 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
pr-ci-fix
Diagnose and fix failing CI checks on a pull request.
parallax-status
Summarize the current session and run package/native lifecycle diagnostics.
ccc-makeover
Score project health with X-Ray, apply the top recommendations in impact order with your OK for each, and show the before and after score. Use when you want the highest-impact project health fixes applied and measured.
ccc-debug-session
Run a structured debug session: gather context, rank hypotheses, test them without editing code, then fix with a regression test and record the lesson. Use when a bug's cause is unclear.
diagnose
Trace a failed or stalled pipeline run — identify which FORGE annotation is missing or malformed, diagnose the failure point, and suggest specific remediation steps.
incident-response
Coordinate P0 incident response — hotfix validation, timeline reconstruction, and post-incident analysis.