Neil ca73c6c8dc fix(cloud): confirm a provider 401 with one auth check before revoking an Orca account ...

A single 401 on an Orca-account request no longer revokes the person's Claude account everywhere. The hook only fires after the real credential was swapped in and sent. The control plane then makes one free auth check with the real token (Anthropic count_tokens, oauth beta) and revokes only on a definite authentication_error; anything else (passes, 429, 5xx, other 401 types, network) keeps the account. Checks are rate-limited to one per person and agent per minute (agent_credentials.checked_at), and every keep/revoke is audited (agent_credential_audit, migration 0047). Codex keeps its lease-refresh path.

2026-11-10 17:47:58 -08:00

..

agent-accounts.test.ts

fix(cloud): confirm a provider 401 with one auth check before revoking an Orca account

2026-11-10 17:47:58 -08:00

agent-credentials-more.test.ts

test: imports before the preset-name list

2026-11-10 05:57:40 -08:00

agent-providers.test.ts

test(sandbox-control): egress swap and plain injection resolve keys with the same precedence (team > repository > personal for agent keys)

2026-11-09 16:19:02 -08:00

agent-signout.test.ts

fix(cloud): find agent CLIs in /opt/orca/tools/bin; delete note only for running sandboxes; test retry skip

2026-11-10 05:27:41 -08:00

agent-sources.test.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

feat(cli): orca worktree create --on cloud[:<project>] [--env] creates an Orca Cloud workspace (private build); clear plan/at-cap/payment/sign-in errors; API accepts a team environment

2026-11-09 21:08:55 -08:00

api.test.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

build-runner.test.ts

fix(sandbox-control): unblock dev deploy (10061): apply the build-runner delete-class migration without the binding, step 1 of 2 (#237)

2026-11-10 04:17:03 -08:00

cloudflare-workers-stub.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234)

2026-11-10 04:08:45 -08:00

codex-broker.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

config.test.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

create-speed.test.ts

fix(cloud-start-gate): a sandbox going to sleep or an abandoned create no longer refuses a start

2026-11-10 17:02:49 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

dev-billing-enforce.test.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166)

2026-11-09 21:07:28 -08:00

device-sessions.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12)

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

environments.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

fake-vercel.ts

Merge remote-tracking branch 'private/cloud/integration' into cloud/w6-a9-recipe

2026-11-10 04:11:07 -08:00

github-app.test.ts

fix(sandbox-control): routine comments mint an issues:write token so plain issues get comments (falls back when the installation lacks it)

2026-11-09 23:05:42 -08:00

github-repo-access.test.ts

feat(sandbox-control): bind a GitHub install by the Orca sign-in's GitHub identity (N5/O3)

2026-11-10 06:14:02 -08:00

golden-images.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

harness.ts

fix(cloud-create): blobless repo clone, optional background clone with progress, bounded create failures

2026-11-10 15:51:46 -08:00

lifecycle-flow.test.ts

feat(billing): bill overage by the minute, put sandboxes to sleep at the cap (U22, U24)

2026-11-10 04:33:07 -08:00

mcp.test.ts

fix(mcp): grants are visible, revocable and bounded — tie to approving key, /v1/oauth-grants, 90-day family end, replay-safe mint, member removal, purge, per-IP token limit (migration 0028)

2026-11-09 05:04:16 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

orca-env.test.ts

feat(cloud): sign in once via your Orca account (contract D10/D11/D13/D14) — Claude setup-token store (Personal only, flag S1, kill switch), egress-time Source with one stable account placeholder per sandbox, never in shared workspaces; migration 0044

2026-11-10 04:22:16 -08:00

orca-sandbox-env.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

orcad-boot.test.ts

perf(cloud): start orcad from a full V8 code cache (~0.3 s off ready) (#173)

2026-11-09 21:52:21 -08:00

pool.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

project-setup.test.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168)

2026-11-09 21:16:28 -08:00

read-snapshots.test.ts

fix(cloud): read snapshot lists chats from orcad's session store (the local socket can't stream subscribeStatus)

2026-11-10 03:10:34 -08:00

redaction.test.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175)

2026-11-09 22:01:32 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

secrets.test.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

session-cpu.test.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

ssh-access.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

staging-auth.test.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-lifecycle.test.ts

feat(cloud): one overage constant (ORCA_CLOUD_OVERAGE_CENTS_PER_HOUR, $1) for billing and the control plane; workspaces show sandbox hours, not per-workspace dollars (desktop list, phone status)

2026-11-10 01:52:05 -08:00

workspaces.test.ts

fix(cloud): the registry edit can no longer label a workspace archived; tests for asleep archive (no wake) and creating/suspending refusals

2026-11-10 03:18:45 -08:00