Neil 12fe0c867f feat(cloud): sign agents out before sandbox delete, scrub env-build images, recipe env warning (A9, P-4) ...

- Worker: run orca-agent-signout (each agent's logout, then credential files) on a running sandbox
  before the provider delete; bounded (20 s) and best effort, never blocks the delete.
- Environment builds: scrub agent auth (--scrub-only) before the snapshot; fail closed.
- New VM script registered in VM_SCRIPTS + provision loop; vm-scripts regenerated.
- Main IPC ephemeralVm:forwardedEnvSummary returns names only, grouped by credential-looking.
- P-4 warning component (+ fixture) shown under Settings > recipes; delete dialog line for awake
  Orca Cloud sandboxes.

2026-11-10 04:07:13 -08:00

..

agent-credentials-more.test.ts

fix(cloud): security review of A6: offer and save only keys the proxy swaps; no desktop keys over SSH into a cloud workspace; orcad on a cloud VM drops carried keys

2026-11-10 02:37:29 -08:00

agent-providers.test.ts

test(sandbox-control): egress swap and plain injection resolve keys with the same precedence (team > repository > personal for agent keys)

2026-11-09 16:19:02 -08:00

agent-signout.test.ts

feat(cloud): sign agents out before sandbox delete, scrub env-build images, recipe env warning (A9, P-4)

2026-11-10 04:07:13 -08:00

agent-sources.test.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

feat(cli): orca worktree create --on cloud[:<project>] [--env] creates an Orca Cloud workspace (private build); clear plan/at-cap/payment/sign-in errors; API accepts a team environment

2026-11-09 21:08:55 -08:00

api.test.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

config.test.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

dev-billing-enforce.test.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166)

2026-11-09 21:07:28 -08:00

device-sessions.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12)

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

environments.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

fake-vercel.ts

feat(cloud): sign agents out before sandbox delete, scrub env-build images, recipe env warning (A9, P-4)

2026-11-10 04:07:13 -08:00

github-app.test.ts

fix(sandbox-control): routine comments mint an issues:write token so plain issues get comments (falls back when the installation lacks it)

2026-11-09 23:05:42 -08:00

golden-images.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

harness.ts

feat(sandbox-control): rebuild org environments on the new golden after every golden swap (#140)

2026-11-09 18:33:09 -08:00

lifecycle-flow.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

mcp.test.ts

fix(mcp): grants are visible, revocable and bounded — tie to approving key, /v1/oauth-grants, 90-day family end, replay-safe mint, member removal, purge, per-IP token limit (migration 0028)

2026-11-09 05:04:16 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

orcad-boot.test.ts

perf(cloud): start orcad from a full V8 code cache (~0.3 s off ready) (#173)

2026-11-09 21:52:21 -08:00

pool.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

project-setup.test.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168)

2026-11-09 21:16:28 -08:00

read-snapshots.test.ts

fix(cloud): read snapshot lists chats from orcad's session store (the local socket can't stream subscribeStatus)

2026-11-10 03:10:34 -08:00

redaction.test.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175)

2026-11-09 22:01:32 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

secrets.test.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

ssh-access.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

staging-auth.test.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-lifecycle.test.ts

feat(cloud): one overage constant (ORCA_CLOUD_OVERAGE_CENTS_PER_HOUR, $1) for billing and the control plane; workspaces show sandbox hours, not per-workspace dollars (desktop list, phone status)

2026-11-10 01:52:05 -08:00

workspaces.test.ts

Merge remote-tracking branch 'private/cloud/integration' into cloud/sleeping-read-snapshot

2026-11-10 02:21:17 -08:00