API reference

Orchestra's desktop app exposes a Tauri command surface — the React renderer invokes it via invoke("name", args). The relay additionally exposes a small HTTP API for status, presence, and the exec bridge.

Relay HTTP

GET /health

Plain 200 OK if the service is up. Used by load balancers and the status page.

GET /status

JSON snapshot of relay health: connected agents, connected desktops, DB latency, uptime. Public — no auth.

curl https://command.orchhq.com/status

GET /presence/agents

List of currently-connected agent installs with last-seen timestamps. Used by the desktop's presence poller to flip server state.

POST /exec

v1 HTTP bridge for the desktop to send a shell command to an agent. Body: {agent_install_id, cmd, timeout_s}. Returns {cmd_id, exit_code, stdout, stderr}. v2 will move this onto the E2EE envelope path.

Desktop Tauri commands

All commands are async, take a typed argument object, return Result<T, String>. Listed grouped by area.

Lifecycle

`get_install_id`	Hex ID of this install.
`get_install_status`	Tenant count, unlocked count, install age.

Tenants

`list_tenants`	Array of {id, name, unlocked, accent}.
`create_tenant`	Create + return id.
`unlock_tenant`	Decrypt with passphrase (+ optional remember).
`lock_tenant`	Drop engine + zero passphrase.
`delete_tenant`	Permanent. Drops DB file.

Workflows

`list_workflows`	Workflows for the active tenant.
`create_workflow`	Insert + version 1 + validate DAG.
`run_workflow`	Start a run; returns run_id immediately, runs async.
`list_workflow_runs`	Recent 200 runs.
`approve_node`	Resolve a paused ApprovalGate (approve\|deny).
`list_pending_approvals`	Currently-paused approval keys.
`list_workflow_templates`	Built-in template library.
`clone_template`	Materialize a template for a chosen server.

Claude

`chat_to_dag`	User intent → structured DAG JSON.
`diagnose_failure`	Returns the persisted diagnosis blob or runs a live diagnosis.
`server_chat`	Per-server Claude conversation with telemetry + run context.
`estimate_cost`	Quick estimate before running.

Audit + compliance

`list_audit`	Recent audit rows.
`export_audit_jsonl`	SIEM-shaped JSONL to a file path.
`validate_audit_chain`	Hash-chain integrity walk.
`ship_audit_to_siem`	POST JSONL to an HTTP endpoint with optional bearer.
`compliance_snapshot`	Single-screen posture snapshot.

Knowledge

`add_knowledge`	Insert a scoped operator fact.
`list_knowledge`	Filter by scope_kind + scope_id.
`delete_knowledge`	Remove by id.

Integrations

`slack_post`	Post a message via incoming webhook.
`github_create_issue`	Create an issue in a repo.
`aws_ssm_send_command`	SSM RunShellScript with stashed creds.
`datadog_post_metric`	Single-point Datadog series.
`pagerduty_trigger`	Events v2 trigger.
`linear_create_issue`	GraphQL issueCreate mutation.
`gitlab_create_issue`	GitLab REST issues.
`cloudflare_purge_cache`	Zone-scoped purge.
`set_integration_secret` / `has_integration_secret`	Stash + check.