Neil e998a5ce96 W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135) ...

* fix(w8): removing a member revokes their phones; role changes move phones too; a phone's stored role never re-syncs keys

* fix(w8): one removal path revokes keys, phones, grants and routines; stale desktop tokens can't re-sync roles or vouch phones; a grant revoked mid-issue stays revoked

* fix(w8): a removed member's unexpired desktop tokens stop working; changes count from auth's time; desktop re-mints and retries enroll on stale_token

* feat(w8): role-aware plan-denial copy on the phone (owners and admins get the fix, members who to ask)

* fix(w8): W10 copy (per-seat team limit, choose a plan) and FE review (3 s abortable role read, Android live region, more copy cases); no casts

2026-11-09 18:02:56 -08:00

..

0001_init.sql

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

0002_github_repo.sql

feat(cloud): GitHub App repo tokens + billing dev wiring for the sandbox control plane (#20)

2026-11-09 02:19:24 -08:00

0003_secrets.sql

feat(cloud): org/personal/repo secret store with envelope encryption and session-start injection (#23)

2026-11-09 02:19:24 -08:00

0004_github_bindings_guardrails.sql

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

0005_golden_images.sql

feat(cloud): self-rotating golden images (refresh before expiry, release builds, smoke-gated atomic swap); Orca Cloud gated on the sandbox capability (#28)

2026-11-09 03:28:58 -08:00

0006_lifecycle_w2.sql

feat(cloud): wake (single-flight, long-poll), restart, status metrics, archive/unarchive on the sandbox control plane

2026-11-09 05:02:20 -08:00

0007_sandbox_pool.sql

feat(sandbox-control): warm VM pool (SANDBOX_POOL_SIZE); idempotent resume of a running sandbox; github_not_connected before provisioning (#36)

2026-11-09 04:45:39 -08:00

0008_environments.sql

## What (#49)

2026-11-09 05:45:23 -08:00

0020_api_routines.sql

wip(cloud): public API foundation (keys, audit, workspaces, messages, openapi)

2026-11-09 04:51:10 -08:00

0021_routines_runs.sql

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

0022_mcp_oauth.sql

feat(sandbox-control): hosted MCP server (Streamable HTTP) over the public API, with OAuth 2.1 (DCR, PKCE S256, refresh rotation, RFC 8707/9728/8414/7009) and desktop approval codes

2026-11-09 04:53:56 -08:00

0024_workspace_registry.sql

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

0025_share_links.sql

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

0026_egress_allow_hosts.sql

feat(cloud): agents just work in Orca Cloud — provider presets, host-scoped model-key egress swap, live secret refresh, managed env, redaction

2026-11-09 04:49:15 -08:00

0027_device_sessions.sql

feat(cloud): per-device Orca Cloud access for phones (W8) (#42)

2026-11-09 05:22:51 -08:00

0028_mcp_grants.sql

fix(mcp): grants are visible, revocable and bounded — tie to approving key, /v1/oauth-grants, 90-day family end, replay-safe mint, member removal, purge, per-IP token limit (migration 0028)

2026-11-09 05:04:16 -08:00

0030_sandboxes_environment_index.sql

perf(cloud): warm pool per hot environment build; smoke-boot builds; clearer GitHub failures (#54)

2026-11-09 06:08:11 -08:00

0031_member_sends.sql

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

0032_egress_user_hosts.sql

feat(sandbox-control): per-workspace tool egress hosts for synced remote MCP servers (PUT/GET /v1/sandboxes/:id/egress/hosts, migration 0032)

2026-11-09 07:46:04 -08:00

0033_environment_build_usage.sql

feat(cloud): meter environment build time; no setup-script nudge for env-build workspaces (#94)

2026-11-09 08:11:06 -08:00

0034_member_names.sql

feat(cloud): label teammates from the token name claim (member_names, migration 0034)

2026-11-09 15:03:14 -08:00

0035_start_timings.sql

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

0036_api_idempotency.sql

feat(sandbox-control): role changes re-cap keys and MCP grants; Idempotency-Key on workspace create; teammate names in API views and the sender envelope

2026-11-09 16:12:43 -08:00

0037_member_changes.sql

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00