Orbit is a self-hosted AI agent for your repositories. It runs in your own GitHub Actions, with your own model key. Pull request review is the first job it does: Orbit posts findings, answers replies in its threads, and sets a merge gate.

Orbit is at 0.x. The configuration format and the CLI can change before 1.0.

How it works

• The model returns data. It reads the change with read-only tools and returns schema-valid JSON findings. Only Orbit's own code writes to GitHub.
• PR code never runs. The engine has no execution or write tool, and file reads stay inside the supplied snapshots.
• Orbit prices each model call and stops at your budget.
• The relay holds only a key that can start a review, so a leaked relay cannot merge. The key that posts comments and sets the gate stays in your runner repository.

How Orbit runs traces one event end to end.

Quick start

Install on your repositories. You need Node.js 24, the GitHub CLI, a Cloudflare account, and a model provider key.

npx orbithq init --owner acme --repos acme/shop,acme/api

Or review a local branch first. --plan prints the cost estimate with no model call.

npx orbithq review --repo ../your-repo --base main --head your-branch --plan

On 9 public PRs that shipped a bug, Orbit found all 9, and 10 of its 11 findings were valid, at $0.09 per PR. The benchmark has the method and its limits.

Documentation

| Read | For | |---|---| | Install | orbit init, upgrades, orbit doctor, and providers | | CLI | Local review, coding-agent mode, and configuration edits | | Configuration | Every .orbit/config.yml key, presets, and access | | PR review | Comments, threads, commands, and the merge gate | | Support | What works today and what is planned | | All documentation | Design documents and decisions |

Contributing

Read CONTRIBUTING.md. Report security problems privately, as described in SECURITY.md. Orbit is MIT licensed.