Neil 134fc24436 feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE) ...

Golden source builds publish their orcad + in-VM CLI as a commit-pinned bundle (R2, uploaded by the build VM over a signed PUT; the Worker computes the stored sha256). On every boot and wake, before orcad starts and inside the existing orcad phase, a sandbox whose /opt/orca/runtime/orcad/SOURCE_COMMIT differs from its region's active golden fetches that bundle from the control plane's own host (already on the egress allowlist) with a 10-minute signed URL, verifies the sha256 the control plane passes in, checks the commit and node runtime, and swaps orcad + orca-cli atomically. Any failure keeps the old orcad and boot continues; every outcome is logged (runtime_refresh: outcome, from, to, ms). RUNTIME_REFRESH=off is the kill switch. Dev R2 bucket orca-sandbox-runtime-dev.

2026-11-11 03:21:01 -08:00

..

api

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

mcp

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

routines

feat(sandbox-control): GitHub repo access, preselected install URLs, install requests, repository list (NP-4 N2/N3/N12, D2)

2026-11-10 05:19:44 -08:00

account-providers.ts

fix(cloud): signed-out Claude message matches the strip and glossary (design-squad)

2026-11-11 02:03:47 -08:00

agent-credential-checks.ts

feat(cloud): POST /v1/agent-credentials/claude/verify for the desktop's pre-launch check

2026-11-10 18:10:43 -08:00

agent-credential-names.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

agent-credentials.ts

feat(cloud): POST /v1/agent-credentials/claude/verify for the desktop's pre-launch check

2026-11-10 18:10:43 -08:00

agent-signout.ts

refactor(cloud): drop env-build scrub-on-clone (spec v4 D14); keep sign-out before delete

2026-11-10 04:33:45 -08:00

agent-sources.ts

fix(cloud): account review — owner bound into account routes + env rebuilt on owner/visibility change, 401 revokes the account, explicit deny reasons, unreadable token never holds account mode, 10s account cache, bounded heal map, credentialBinding/extraHeaders for the Codex provider

2026-11-10 04:27:49 -08:00

auth.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

auto-environments.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

build-runner.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234)

2026-11-10 04:08:45 -08:00

clone-status.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

codex-broker.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

codex-credentials.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

create-timing.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

device-sessions.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.ts

feat(sandbox-control): per-workspace tool egress hosts for synced remote MCP servers (PUT/GET /v1/sandboxes/:id/egress/hosts, migration 0032)

2026-11-09 07:46:04 -08:00

egress-proxy.ts

fix(cloud): a signed-out account answers like the provider, not 403 host_not_proxied (W-106)

2026-11-11 01:43:46 -08:00

entitlements.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166)

2026-11-09 21:07:28 -08:00

env-refresh.ts

fix(cloud): compare the boot env inline; refresh in the background only when it changed

2026-11-10 07:29:12 -08:00

env.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

environment-builds.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

environment-golden-refresh.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

environment-routes.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

environment-staleness.ts

## What (#49)

2026-11-09 05:45:23 -08:00

environments.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

github-app.ts

feat(sandbox-control): bind a GitHub install by the Orca sign-in's GitHub identity (N5/O3)

2026-11-10 06:14:02 -08:00

github-connect.ts

feat(sandbox-control): bind a GitHub install by the Orca sign-in's GitHub identity (N5/O3)

2026-11-10 06:14:02 -08:00

github-repo-access.ts

feat(sandbox-control): bind a GitHub install by the Orca sign-in's GitHub identity (N5/O3)

2026-11-10 06:14:02 -08:00

github-user-tokens.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

golden-image-provider.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

golden-images.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

golden-source.ts

fix(cloud): name the VM project after its repo (orca repo add --display-name); golden builder uses wait=true exit probe; image-only merges rebuild (#133)

2026-11-09 17:56:20 -08:00

grant-revokes.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

grants.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

guardrails.ts

fix(cloud-start-gate): a sandbox going to sleep or an abandoned create no longer refuses a start

2026-11-10 17:02:49 -08:00

index.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

lifecycle.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

machine-size.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

member-changes.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

member-git.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

member-names.ts

feat(cloud): label teammates from the token name claim (member_names, migration 0034)

2026-11-09 15:03:14 -08:00

member-removal.ts

feat(cloud): teammate profiles with a usage heatmap, and opt-in Pokes

2026-11-10 19:24:26 -08:00

member-usage.ts

feat(cloud): teammate profiles with a usage heatmap, and opt-in Pokes

2026-11-10 19:24:26 -08:00

network-policy.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

operator.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

orcad-ready.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175)

2026-11-09 22:01:32 -08:00

org-prompts.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

org-slugs.ts

feat(cloud): W-numbers, org slug links, and pins/order/sections that sync across desktops and the phone (G13, G14)

2026-11-10 19:50:22 -08:00

pool.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

preview-wake.ts

feat(cloud): move a cloud workspace to this computer, wake on SSH (sshd over a wss bridge + desktop ProxyCommand), preview wake helper

2026-11-09 06:11:42 -08:00

project-setup.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168)

2026-11-09 21:16:28 -08:00

provider-env.ts

fix(cloud): Copilot's token stand-in looks like a GitHub token (Copilot ignored orca-ph-…)

2026-11-10 03:40:24 -08:00

read-snapshots.ts

feat(cloud): VM-signed read snapshots (Ed25519 per workspace), signer in sealed grants, shared pin policy

2026-11-10 03:36:27 -08:00

reconcile.ts

fix(cloud-start-gate): a sandbox going to sleep or an abandoned create no longer refuses a start

2026-11-10 17:02:49 -08:00

regions.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

retention.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

runtime-bundles.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

sandbox-provider.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

sandbox-vm-commands.ts

fix(cloud): VM hostname is the workspace's name, not the provider's per-boot id (JA-27, hostname half)

2026-11-10 20:28:52 -08:00

sandbox-vm-inspect.ts

fix(cloud): archive capture keeps porcelain's leading status column; OOM victim reports node, not MainThread

2026-11-09 05:56:07 -08:00

secret-egress.ts

Merge pull request #242 from nwparker/cloud/w6-agent-accounts

2026-11-10 04:48:11 -08:00

secrets-crypto.ts

feat(cloud): org/personal/repo secret store with envelope encryption and session-start injection (#23)

2026-11-09 02:19:24 -08:00

secrets.ts

fix(cloud): security review: Copilot token limited to Copilot's GitHub endpoints; routine summaries are final messages with session secrets redacted; untrusted context capped

2026-11-10 02:13:11 -08:00

session-cpu.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

session-env.ts

fix(cloud): account review — owner bound into account routes + env rebuilt on owner/visibility change, 401 revokes the account, explicit deny reasons, unreadable token never holds account mode, 10s account cache, bounded heal map, credentialBinding/extraHeaders for the Codex provider

2026-11-10 04:27:49 -08:00

share-crypto.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

share-gateway.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

share-links.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

share-pages.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

ssh-access.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

store.ts

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

tar-gzip.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

team-presence.ts

feat(cloud): TEAMMATE_ACTIVITY_SHARING config (opt_in default | team) for the activity heatmap

2026-11-10 19:49:09 -08:00

usage.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

vercel-sandbox-api.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

vm-activity.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

wire.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

workspace-lifecycle.ts

fix(cloud-start-gate): a sandbox going to sleep or an abandoned create no longer refuses a start

2026-11-10 17:02:49 -08:00

workspace-prefs.ts

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

workspaces.ts

Merge private/cloud/integration into cloud/multiplayer-gaps (team-presence, routines)

2026-11-10 20:37:56 -08:00