Neil 6bc1fffc67 W8: teammates wake a team workspace from the phone (team-route wake; owner route not widened) (#155) ...

* feat(w8): teammates wake a team workspace from the phone (team route long-poll wake, same access/billing/cap; owner route stays the fallback)

* test(w8): team wake refuses an admin on a private row, never returns the endpoint; phone never falls back on 401/403

2026-11-09 19:59:10 -08:00

..

agent-providers.test.ts

test(sandbox-control): egress swap and plain injection resolve keys with the same precedence (team > repository > personal for agent keys)

2026-11-09 16:19:02 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

api.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

config.test.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

device-sessions.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12)

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

environments.test.ts

feat(sandbox-control): rebuild org environments on the new golden after every golden swap (#140)

2026-11-09 18:33:09 -08:00

fake-vercel.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

github-app.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

golden-images.test.ts

fix(cloud): name the VM project after its repo (orca repo add --display-name); golden builder uses wait=true exit probe; image-only merges rebuild (#133)

2026-11-09 17:56:20 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

harness.ts

feat(sandbox-control): rebuild org environments on the new golden after every golden swap (#140)

2026-11-09 18:33:09 -08:00

lifecycle-flow.test.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

mcp.test.ts

fix(mcp): grants are visible, revocable and bounded — tie to approving key, /v1/oauth-grants, 90-day family end, replay-safe mint, member removal, purge, per-IP token limit (migration 0028)

2026-11-09 05:04:16 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

pool.test.ts

perf(cloud): warm pool per hot environment build; smoke-boot builds; clearer GitHub failures (#54)

2026-11-09 06:08:11 -08:00

redaction.test.ts

fix(sandbox-control): review fixes — proxy rechecks a key's host at send time, refresh claims the row before the policy and writes are generation-ordered, bounded refresh fan-out, URL/model values without control chars, exact Codex host match

2026-11-09 04:56:41 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

fix(routines): security review — creator-only edits/runs (admins disable/delete), trusted author_association for GitHub triggers, disable departed members' routines, fair + atomic start caps and queue limit, validated PR URLs, private run detail; drop pool workaround (fixed in #44)

2026-11-09 05:37:30 -08:00

secrets.test.ts

feat(sandbox-control): egress key swap on by default for every team, per-team kill switch SECRETS_EGRESS_PLACEHOLDERS_OFF

2026-11-09 15:13:19 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

ssh-access.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-lifecycle.test.ts

Merge cloud/integration into cloud/w2-final; Move to this computer review fixes (archive afterwards, counts, step-aware failure, hide and timeout, focus and announcements, concurrency guard); idle minutes behind a features header

2026-11-09 15:32:07 -08:00

workspaces.test.ts

W8: teammates wake a team workspace from the phone (team-route wake; owner route not widened) (#155)

2026-11-09 19:59:10 -08:00