mirror of
https://github.com/stablyai/orca.git
synced 2026-11-15 18:37:24 +00:00
Neil
4851f6c4e2
Control plane (cloud/apps/sandbox-control): - Provider presets as secrets: AI_GATEWAY_API_KEY (Vercel AI Gateway) derives Claude Code + Codex env; custom ANTHROPIC_BASE_URL/OPENAI_BASE_URL (https, public host only) + *_MODEL. Provider hosts are allowlisted per workspace from its agent connection (migration 0026 egress_allow_hosts, additive). - Egress placeholder swap is host-scoped per credential (SECRET@host) incl. ai-gateway.vercel.sh and custom hosts; staged rollout SECRETS_EGRESS_PLACEHOLDERS=accounts:<ids> (or on/off). - GET /v1/secrets/effective, POST /v1/secrets/:scope/batch, POST /v1/sandboxes/:id/env/refresh; every secret write refreshes running sessions of that owner (no restart, no rebuild). - VM: orca-sandbox-env writes a tmpfs-only session env file re-read by every new shell (/etc/profile.d hook); Codex gets a managed provider block when OPENAI_BASE_URL is set; managed env ORCA_IS_CLOUD, ORCA_ROOT_PATH/WORKTREE_PATH/WORKSPACE_PATH/WORKSPACE_NAME/DEFAULT_BRANCH/PORT + CONDUCTOR_* aliases. image/patch-golden-image.ts re-images scripts in ~10s. - Redaction: pairing offer read via the files API (Vercel retains command stdout), log tails strip injected values/token shapes, runningOrcad no longer prints the offer, no GitHub placeholder for non-github.com repos. Desktop: token-pattern + injected-value redaction for logs, crash reports, daemon log, emulator probe, relayed worker spans. Live (Vercel, W6 worker, placeholders on): org-shared gateway key, real Claude Code 2.1.319 and Codex 0.166.0 fixed+committed code through the swap; SSE long stream 978 chunks/25s and streamed tool_use intact; real key absent from VM disk, tmpfs and every process env; secret edit visible in a new shell 0.6s after PUT.