ORTHANC CLI / PALANTIR FOUNDRY

A Foundry CLI
built for agents.

One binary. Every command can return a single structured JSON envelope. Credentials never appear in arguments, logs, or output. Installs in one line.

Stable
v0.2.0
Nightly
tracks main
Platforms
macOS arm64 · macOS x86_64 · Linux x86_64
Native paths
299
Runtime deps
None
License
Proprietary, binary use granted
curl -fsSL https://github.com/zaycruz/orthanc/releases/latest/download/install.sh | sh

SHA-256 verified. Installs to ~/.local/bin. No GitHub account required.

One envelope

Add --agent and any command, including a parse error, returns one foundry-agent-v1 object: data, errors, warnings, pagination, always in the same place.

Credentials out of band

Tokens are stored once per profile in the macOS Keychain and read from stdin or the environment. They never enter argv, logs, or output.

Native coverage

Datasets, ontology, projects, SQL, orchestration, functions, streams, models, connectivity, and more. No Python runtime.

Plan first

Mutations dry-run and print a plan before --apply. Add --non-interactive to disable prompts and fail closed.

01Demo

The same command for a human and for an agent.

STDOUTorthanc 0.2.0
$ orthanc search "flight delays" --page-size 2
RID                                              NAME                  TYPE
ri.foundry.main.dataset.3f1c…9a2e                flight_delays_2025    dataset
ri.foundry.main.dataset.b71d…04c8                flight_delays_raw     dataset

$ orthanc --agent search "flight delays" --page-size 2
{
  "schema_version": "foundry-agent-v1",
  "meta": { "operation": "search" },
  "data": [
    { "rid": "ri.foundry.main.dataset.3f1c…9a2e", "name": "flight_delays_2025", "type": "dataset" },
    { "rid": "ri.foundry.main.dataset.b71d…04c8", "name": "flight_delays_raw",  "type": "dataset" }
  ],
  "pagination": { "next_page_token": "eyJvZmZzZXQiOjJ9" },
  "errors": [], "warnings": [], "artifacts": []
}

$ orthanc --agent dataset schema apply ri.foundry.main.dataset.3f1c…9a2e --schema ./schema.json
{
  "schema_version": "foundry-agent-v1",
  "meta": { "operation": "dataset schema apply", "mode": "plan" },
  "data": { "changes": [ { "add_column": "arrival_delay_minutes", "type": "INTEGER" } ] },
  "warnings": [ "Dry run. Re-run with --apply to write the schema." ],
  "errors": [], "pagination": null, "artifacts": []
}

Identifiers are illustrative. orthanc capabilities lists every command with its mutation risk. orthanc agent-manifest hands the full surface to an agent.

02Install

Two channels, one installer.

Stable

Latest tagged release.

curl -fsSL https://github.com/zaycruz/orthanc/releases/latest/download/install.sh | sh
export PATH="$HOME/.local/bin:$PATH"
orthanc --version

Nightly

Rebuilt after every merge to main. Published as a prerelease. Installs beside stable.

curl -fsSL https://github.com/zaycruz/orthanc/releases/download/nightly/install.sh | \
  ORTHANC_CHANNEL=nightly ORTHANC_INSTALL_DIR="$HOME/.local/orthanc-nightly/bin" sh
"$HOME/.local/orthanc-nightly/bin/orthanc" --version

Pinned

Any stable tag via ORTHANC_VERSION.

curl -fsSL https://github.com/zaycruz/orthanc/releases/latest/download/install.sh | \
  ORTHANC_VERSION=v0.2.0 sh

First run

On macOS the installer starts onboarding in an interactive terminal: it creates a profile and stores the token once in the Keychain. Set ORTHANC_SKIP_ONBOARDING=1 to defer. On Linux export FOUNDRY_HOST and FOUNDRY_TOKEN.

orthanc onboarding
orthanc configure set-active PROFILE
Manual download and verification
TargetArchiveChecksum
macOS, Apple Siliconorthanc-aarch64-apple-darwin.tar.gz.sha256
macOS, Intelorthanc-x86_64-apple-darwin.tar.gz.sha256
Linux x86_64, glibc ≥ 2.35orthanc-x86_64-unknown-linux-gnu.tar.gz.sha256
 
shasum -a 256 -c orthanc-aarch64-apple-darwin.tar.gz.sha256
tar -xzf orthanc-aarch64-apple-darwin.tar.gz
install -m 755 orthanc ~/.local/bin/orthanc

03Changelog

Assets and checksums for each release are on GitHub.

v0.2.0CURRENT
  • The foundry-agent-v1 envelope is universal. Every command, including argument parse failures, returns one object under --agent.
  • New ai-fde command group with session orchestration and the full captured tool surface.
  • Built-in smoke suite on a daily schedule. A failing smoke exits non-zero with a typed envelope error.
  • Captured container, preview, evals create, and solution-design contracts. evals create and compute create verified with real applies.
  • Onboarding skips when a profile exists. Onboarded profiles become active immediately.
  • Single native Keychain backend. No double prompts. Foundry host URLs are validated.
  • Foundry project roots are detected on disk within size gates.
  • CLI extension tools renamed to the orthanc_ prefix.
  • Installer terminal detection fixed. Nightly stays available while it rebuilds.
  • Search contract drift and the solution-design URL repaired.
v0.1.2
  • Public one-line installer ships with every release.
  • Releases are drafted and published only once all three archives and checksums are attached.
v0.1.0
  • First compiled release for macOS arm64, macOS x86_64, and Linux x86_64 with SHA-256 checksums.
  • Native command groups for datasets, ontology, projects, folders, resources, SQL, orchestration, functions, streams, media sets, models, AIP agents, language models, lineage, and connectivity.
  • Agent mode, Keychain profiles, aliases, shell completion, interactive shell.