Neil 1bca45b536 fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8) ...

- M1: a permanent refresh failure revokes only the login it refreshed (CAS on updated_at).
- M2: dead logins (refresh_token_expired/reused/invalidated) are never retried; a new login clears it.
- M3: the Codex account route only carries the token to /backend-api/codex/*, the plugin catalog and
  wham/usage (GET), seen live; plain segments only.
- M4: one atomic INSERT enforces one live broker per person (409 broker_in_progress) and 6 starts/hour;
  broker sandboxes use 2 vCPUs.
- L5: auth.json is read only after Codex exited 0.
- L6: the 401 hook respects the refresher's backoff and dead logins.
- L7: a cancel while the broker is starting wins: the sandbox goes and POST answers 409 cancelled.
- L8: orca-sandbox-env writes the marker before the swap, recognises any Orca placeholder, and never
  overwrites a login already set aside.

2026-11-10 05:22:43 -08:00

..

acceptance

feat(cloud): cloud run.ports passes on the #233 golden (3000 + second worktree block, stable across sleep)

2026-11-10 04:29:04 -08:00

billing

feat(billing): bill overage by the minute, put sandboxes to sleep at the cap (U22, U24)

2026-11-10 04:33:07 -08:00

push

test: remove 10 low-value push durability tests (#40053)

2026-11-08 17:03:42 -08:00

relay

test: remove 154 low-value tests and redundant relay checkpoints (#39814)

2026-11-08 03:06:41 -08:00

relay-edge

relay edge: host-sent keepalive answered without waking the object (#40010)

2026-11-08 15:03:20 -08:00

relay-fence-broker

test: remove 395 low-value tests (#39568)

2026-11-07 11:20:25 -08:00

sandbox-control

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00