macOS · single machine · docker compose (deploy/compose.yaml)

temporalcontainer · 127.0.0.1:7233 / 8233
data in myorch-data/temporal.db

gatewayofficial OpenShell image · 127.0.0.1:17671
credentials, policies, sandbox records

workercontainer · runs all steps
starts sandboxes and helper containers via docker.sock

ui (myorch serve)container · 127.0.0.1:8800
console + channel layer + Watchdog + Slack adapter

Docker Desktopa pair of sandbox containers per step
helper containers · volume myorch-artifacts

One-shot servicesgateway-init · init · providers
run and exit on every up

Events are pushed to Claude Code. It connects to ui's HTTP API to read events and call tools (the session starts it)

Claude Code channelchannels/claude_code.py · pushes notifications, provides tools · cannot approve

The Slack adapter connects out to Slack (Socket Mode), so the machine opens no ports. Single machine only. Team use (server-side event store, login, per-project permissions) is not built yet.