Monaco editor
Syntax highlighting, search, multi-file tabs, command palette, and light/dark themes. The editor is the product — not a sidecar chat box.
Features
A Tauri IDE, online and offline AI with AUTO routing, a sandboxed coding agent, stack adapters, and enterprise governance — described as implemented, including what is still partial.
Product
Dedicated pages for agents, Composer, CLI, models, and team licensing. Online + offline AI in one binary — Ready wizard online-first; your repo is never an ORQVION-hosted coding cloud.
ORQVION agents plan and execute multi-step work in a Rust ReAct loop on your hardware. They read, search, shell, and edi...
Composer (Cmd+I) is a dedicated workspace for tasks that span files: a checklist, unified diffs, chat tabs, and checkpoi...
`orqvion agent` runs the desktop ReAct orchestrator on the machine where you invoke it — same ONLINE · OFFLINE · AUTO ro...
ORQVION ships a master model registry (206 online metadata entries, 49 offline GGUF catalog) with routing modes ONLINE,...
ORQVION is a desktop IDE with online and offline AI on each seat — not a hosted coding cloud. Business teams get device-...
ORQVION is a desktop IDE with online and offline AI (AUTO routing by default). Teams can self-host a PostgreSQL license...
Environment
Tauri 2 + Rust + React. Monaco, explorer, command palette, and themes on macOS, Windows, and Linux.
Syntax highlighting, search, multi-file tabs, command palette, and light/dark themes. The editor is the product — not a sidecar chat box.
Autocomplete, hover, go-to-definition, and diagnostics for TypeScript, JavaScript, PHP (Intelephense), HTML, and CSS. Multi-LSP via the adapter registry.
Workspace explorer plus an in-app browser preview with live reload for web and Laravel apps. The agent can drive localhost preview over CDP.
Keyboard-first actions for files, commands, agent modes, and settings — the same muscle memory developers expect from a serious IDE.
Online & Offline AI
ORQVION ships ONLINE, OFFLINE, and AUTO routing. Online Beta defaults to online paths (entitlement on the license server + optional BYOK direct to providers). Offline uses ORQVION AI signed bundles and GGUF downloads via llama.cpp — not the Ollama application.
Task classifier + hardware + network score routes chat, Tab, Cmd+K, Composer, and agents. Manual model pick always wins. Fallback chain: managed/BYOK alternates → verified local GGUF → ORQVION AI bundle.
License server is control plane only — entitlements, not prompt proxy. Desktop calls provider APIs with BYOK keys in your keychain. OpenAI is not a required core provider.
Master registry metadata for routing and entitlements. Live execution depends on provider uptime, plan, and keys — not every id is a hosted endpoint.
Direct HTTPS downloads with pause/resume (`.part`), ORQVION AI Lite/Standard recommended. llama.cpp inference on your machine. No `ollama serve`, no `:11434`.
Editor-native ghost text and multi-line next-edit blocks. Routed by plan, mode, and catalog — online or offline per policy.
Bring-your-own provider keys when allowed. Stored in OS keychain / encrypted file — never in logs or telemetry. Org policy can forbid external models.
Agents
A Rust ReAct orchestrator plans and executes multi-step work. Writes are not silent. Docker isolation can be required by policy.
Read, write, search, shell, and Artisan tools. Multi-step tasks with recoverable checkpoints. Default mode has full tools; you still approve writes.
Ask is read-only. Plan produces a plan you approve before edits. Debug leans on logs, tests, and DAP. Agent is the full loop. Viewers can be locked to Ask.
A dedicated multi-file session (Cmd+I): task, file checklist, unified diff review, chat tabs, and checkpoints that survive restart in local SQLite.
Per-hunk accept or reject for agent and inline edits, plus accept-all. Pending edits use a unified Rust diff model — not a dump into the working tree.
Research, Shell, and Review children with isolated context. Custom agents in `.orqvion/agents/*.md`. Default cap of two parallel subagents offline.
File writes require approval. Agent commands can run inside Docker. Org policy can make the container sandbox mandatory. Secrets never belong in audit logs.
`orqvion agent "task"` runs the same engine headless — same ONLINE/OFFLINE/AUTO routing as the IDE — for scripts and power users.
Architect → Developer → QA mapping on the subagent model for longer builds, with clarification questions before the agent charges ahead.
Context
Mentions, project rules, skills, MCP, and hooks are local files. Org policy can restrict them. ORQVION rules can be imported read-only.
`@file`, `@folder`, `@symbol`, `@codebase`, and `@selection` from a searchable picker backed by the local index — not a cloud embedding upload.
`.orqvion/rules/*.md` with `alwaysApply`, globs, and description. Global user rules merge in. Org policy can disable or constrain them.
`.orqvion/skills/**/SKILL.md` discovered by the agent and invokable with slash commands. Sample skills ship in the repo.
Model Context Protocol client over stdio (offline) with optional SSE. Configure in `.orqvion/mcp.json`. Tools appear in the agent with policy gates and an MCP settings panel.
`.orqvion/hooks.json` for PreToolUse, PostToolUse, beforeSubmitPrompt, and stop. A hook can block `file_write` and the block is audited.
Tantivy BM25, Tree-sitter symbols, SQLite symbol store, and hybrid search. Desktop builds persist vectors in LanceDB (`semantic.lance/`). Online Beta does not require local embedding models to start working.
Workflow
The agent can run commands, but you keep a first-class IDE surface for the work you still want to do by hand.
Branch, status, diff, commit, and revert via subprocess git. Agent diffs can optionally sync into the Git panel. Attribution/blame tooling is present; GitLab bot parity is not claimed.
portable-pty + xterm.js. A real PTY, not a fake output pane. Agent shell tools can reuse the same workspace.
Run the project test suite from the IDE. Failures feed Debug mode and self-healing suggestions with guardrails.
Debug Adapter Protocol sessions for Node and PHP without leaving the workspace. Debug agent mode is wired to logs and DAP, not guesswork.
Studios (R4–R8)
Media, browser automation, app builder, game/XR, and Web3 each ship a Rust crate, desktop panel, and policy-aware agent tools. They orchestrate your repo; they do not replace Blender, Unity, or a custodial wallet.
Image/video job registry, router, and history in the desktop app. ffmpeg probe/transcode and local generation paths — files stay on disk unless you export them.
Policy-gated browser tools for verified navigation and actions. No silent exfiltration; org policy can disable the surface entirely.
Framework-agnostic scaffold flows and builder agents for greenfield apps — still subject to write approval and sandbox policy.
Per-engine capability matrix (Unity, Godot, Unreal, WebXR/OpenXR). Panels and `run_game` / `run_xr` assist the workspace; engine editors remain authoritative.
Hardhat/Foundry adapters, contract workflows, and security-oriented scans. Mainnet deploy is explicitly gated — testnets and local chains first.
Stacks
Each stack is a detector, a panel, and agent tools. Studios (above) add depth for media, game, and Web3; nothing here is vapour.
React, Next.js, Vue, Vite and friends: framework detection, LSP, live preview, and a dev-server workflow inside the desktop app.
Project detection, Intelephense, Artisan runner, scaffold wizard, and browser preview with live reload. First-class for Pakistani and PHP teams.
Flutter and Expo detection, Mobile panel, and an agent `run` tool for the mobile workspace.
PyTorch and TensorFlow project detection, AI/ML panel, and `run_ml` for local experiment loops — separate from chat LLM routing (online/offline AUTO).
Hardhat and Foundry detection, Web3 panel, and contract-oriented security scans — not a custodial wallet.
Unity, Godot, and Unreal hooks plus a Game panel and `run_game`. Engine editors stay the engines; ORQVION orchestrates the repo around them.
WebXR / OpenXR panel and `run_xr` for XR project workflows.
Stable Diffusion generate/convert, Media panel, ffmpeg transcode/probe, and Video panel. Local files stay local.
PM planning, clarification questions, Employee panel, and `run_pm` so a brief becomes a sequenced build instead of a single prompt dump.
Unified workspace (R10)
Unified workspace navigation groups Studios, collaboration, and core IDE sections without duplicating Private Team Mesh. Collaboration metadata syncs; project source stays local by default.
Desktop `UnifiedWorkspaceNav` highlights the active section only — Agents are not falsely “always on” when you are in the IDE.
Teams, activity feeds, and enterprise controls on the collaboration crate — mesh chat/share preserved alongside governed org features.
No server-side file storage for your tree by default. Audit covers security-relevant actions, not prompts or file contents.
Operations
Self-healing is guarded. Marketplace packages are signed. License keys are device-bound.
Health diagnostics and safe repairs for the app and, with guardrails, the project. GPU/LSP heal metrics exist on the enterprise path. The agent cannot silently rewrite your tree.
Extension catalog with signed packages, a WASM sandbox runtime, and a model CDN. Unsigned or policy-blocked packages do not run.
Desktop updater with Ed25519-signed entitlements. You choose when to apply. Offline allowances exist per plan.
Free / Pro / Business / Enterprise. Device-bound seats. PostgreSQL license server for orgs. JazzCash, Easypaisa, Alpha, and bank transfer on the same catalog as desktop.
Enterprise
SSO, RBAC, org policy, central audit, and a self-hosted license server. Source code is not the payload we store.
OIDC, SAML 2.0, and LDAP / Active Directory. Org roles: Owner, Admin, Developer, Viewer. Desktop sessions refresh against your IdP.
Disable external models, require containers, scope tools, restrict rules/skills/MCP, and lock viewers to Ask mode.
Structured JSON events, sync-ready for the enterprise server. Security-relevant actions only — not file contents, prompts, or secrets.
Hooks on the enterprise path to catch credentials before they land in a diff you were about to apply.
PostgreSQL-backed server, Docker Compose, and Kubernetes HA options. Private cloud and air-gapped designs are in the enterprise conversation — not a public SaaS tenant you must join.
Desktop peer mesh for encrypted team chat, channels, file share, and relay (M0–M9). Works alongside R10 collaboration controls — not a replacement for org SSO or audit. Mobile protocol validation (M10) is next — not claimed as a polished mobile mesh yet.
PKR packages via JazzCash, Easypaisa, Alpha, and bank transfer. International plans exist; you are not forced through a US-only card processor.
Honesty
These limits are documented in the engineering roadmap. We would rather say them on the Features page than overclaim in a hero.
Why not a cloud AI IDE
| Topic | Typical cloud AI IDE | ORQVION |
|---|---|---|
| Source code default | Sent to a vendor cloud for the assistant to work | Stays on your machine. No permanent ORQVION storage of prompts or code. |
| Default AI path | Vendor-hosted assistant that requires their cloud | Online + Offline AI (AUTO). Default online; ORQVION AI + GGUF offline — no Ollama app. |
| Agent execution | Often unsandboxed shell on the laptop | Write approval plus optional Docker container sandbox. |
| Enterprise control | You join their SaaS tenant | SSO, RBAC, org policy, and a self-hosted license server. |
| Pakistan billing | International cards, USD pricing | JazzCash, Easypaisa, Alpha, and bank transfer — same catalog as desktop. |
ORQVION uses the network for licenses, entitlements, updates, and payment. Online inference goes to providers you enable (BYOK); offline stays on-device (ORQVION AI + GGUF). Never a silent dump of your repository.
Docs cover online/offline setup, AUTO routing, and org rollout. Legal pages cover privacy, AI/data processing, acceptable use, terms, refunds, and returns.