orca/cloud/apps/sandbox-control/test at 79c04c5c19bddfc8efb7d0bf89fd4ebf7d53b629 - orca

agent-accounts.test.ts

fix(cloud): RS-2 a failed auth check never revokes an Orca-account sign-in: it needs a check (shown as expired); a later real 401 revokes, a real success clears it

2026-11-13 01:40:50 -08:00

agent-credentials-more.test.ts

test: imports before the preset-name list

2026-11-10 05:57:40 -08:00

agent-providers.test.ts

test(cloud): member effective view hides team hints

2026-11-12 17:50:38 -08:00

agent-signout.test.ts

fix(cloud): find agent CLIs in /opt/orca/tools/bin; delete note only for running sandboxes; test retry skip

2026-11-10 05:27:41 -08:00

agent-sources.test.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

fix(cloud): ENTERPRISE-AUDIT the older GET /v1/audit is behind the same plan gate for a team

2026-11-12 20:37:50 -08:00

api-sessions.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

api.test.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

audit-log.test.ts

feat(cloud): AUDIT-AUTH-EVENTS billing changes reach the team audit log; per-sender event families; wording for auth and billing events

2026-11-12 23:01:00 -08:00

auto-environments.test.ts

feat(cloud): automatic environments install the repo's lockfile dependencies, softly (PARITY-AUTO-ENV-DEPS)

2026-11-13 02:14:03 -08:00

build-runner.test.ts

fix(sandbox-control): unblock dev deploy (10061): apply the build-runner delete-class migration without the binding, step 1 of 2 (#237 )

2026-11-10 04:17:03 -08:00

cloudflare-workers-stub.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234 )

2026-11-10 04:08:45 -08:00

codex-broker.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

config.test.ts

fix(cloud): one definition of an archive snapshot (until its kept-until date, then deleted; no sandbox hours), on every Archive control; /v1/config exposes archiveTtlDays

2026-11-11 14:13:19 -08:00

create-git-async.test.ts

fix(cloud): a boot whose member identity install fails records it too (VM git-setup.failed + gitSetup), so Restart can't hide a failure

2026-11-11 19:29:18 -08:00

create-speed.test.ts

fix(cloud): VM hostname is the workspace's name, not the provider's per-boot id (JA-27, hostname half)

2026-11-10 20:28:52 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11 )

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122 )

2026-11-09 17:36:19 -08:00

dev-billing-enforce.test.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166 )

2026-11-09 21:07:28 -08:00

device-sessions.test.ts

fix(cloud): ENTERPRISE-AUDIT the older GET /v1/audit is behind the same plan gate for a team

2026-11-12 20:37:50 -08:00

effective-shared.test.ts

feat(cloud): effective secrets view answers for shared workspaces (no personal values), with a note

2026-11-12 22:56:54 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12 )

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26 )

2026-11-09 02:59:02 -08:00

environment-build-auto-install.test.ts

feat(cloud): automatic environments install the repo's lockfile dependencies, softly (PARITY-AUTO-ENV-DEPS)

2026-11-13 02:14:03 -08:00

environment-build-secrets.test.ts

fix(cloud): SEC-2 builds never get model keys, and fail if a team secret is left on disk

2026-11-12 21:37:25 -08:00

environments.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

fake-vercel.ts

fix(sandbox-control): never install older VM scripts over a newer golden (VM-SCRIPTS-DOWNGRADE)

2026-11-12 16:52:50 -08:00

git-shim-github-no-prompt.test.ts

fix(cloud): VM git lines say Settings → Account (glossary path arrow; design-squad)

2026-11-12 17:17:33 -08:00

git-shim-identity-nudge.test.ts

fix(cloud): VM git lines say Settings → Account (glossary path arrow; design-squad)

2026-11-12 17:17:33 -08:00

git-shim-member-setup.test.ts

fix(cloud): a boot whose member identity install fails records it too (VM git-setup.failed + gitSetup), so Restart can't hide a failure

2026-11-11 19:29:18 -08:00

github-app.test.ts

fix(cloud): binding the GitHub App through OAuth also connects the binder's GitHub identity (commits as you)

2026-11-12 00:59:44 -08:00

github-repo-access.test.ts

fix(sandbox-control): canInstall never says false for an unreadable org membership

2026-11-13 00:09:05 -08:00

golden-images.test.ts

fix(sandbox-control): never install older VM scripts over a newer golden (VM-SCRIPTS-DOWNGRADE)

2026-11-12 16:52:50 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24 )

2026-11-09 02:19:25 -08:00

harness.ts

feat(cloud): ENTERPRISE-AUDIT unified team audit log API (GET /v1/audit-log), Enterprise feature entitlements, audit ingest route

2026-11-12 20:09:12 -08:00

lifecycle-flow.test.ts

feat(billing): bill overage by the minute, put sandboxes to sleep at the cap (U22, U24)

2026-11-10 04:33:07 -08:00

mcp.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55 )

2026-11-09 06:37:23 -08:00

orca-env.test.ts

feat(cloud): sign in once via your Orca account (contract D10/D11/D13/D14) — Claude setup-token store (Personal only, flag S1, kill switch), egress-time Source with one stable account placeholder per sandbox, never in shared workspaces; migration 0044

2026-11-10 04:22:16 -08:00

orca-sandbox-env.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

orcad-boot.test.ts

perf(cloud): start orcad from a full V8 code cache (~0.3 s off ready) (#173 )

2026-11-09 21:52:21 -08:00

org-token-stale.test.ts

fix(cloud): IAT-BACKDATE-GAP member-change and removal checks compare the mint time (auth backdates iat 30 s); harness mints like auth

2026-11-12 16:59:25 -08:00

pool.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

project-setup.test.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168 )

2026-11-09 21:16:28 -08:00

read-snapshots.test.ts

fix(cloud): read snapshot reads the workspace's own checkout (branch worktree), not the base clone; profile-cloud-service under max-lines

2026-11-10 18:01:58 -08:00

redaction.test.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175 )

2026-11-09 22:01:32 -08:00

resume-stuck.test.ts

test(cloud): resume-stuck waits for the resuming claim instead of a fixed 10 ms (flaked under load)

2026-11-12 16:09:57 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

runtime-bundles.test.ts

test(cloud): runtime-bundles test uses a shasum-backed sha256sum (macOS now ships a BSD /sbin/sha256sum without -c --status)

2026-11-12 06:18:33 -08:00

secret-events.test.ts

test(cloud): malformed cursor test reads the personal route

2026-11-12 20:39:33 -08:00

secrets-hardening.test.ts

Merge cloud/integration into SEC-6 (secret_events from #597 + secretLog)

2026-11-12 22:09:16 -08:00

secrets-kms.test.ts

feat(cloud): hold the secrets KEK behind Cloud KMS, off by default (SEC-3)

2026-11-12 21:41:36 -08:00

secrets-rewrap.test.ts

feat(cloud): KEK rotation re-wraps stored secrets (SEC-3)

2026-11-12 19:06:23 -08:00

secrets.test.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

session-cpu.test.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61 )

2026-11-09 06:43:19 -08:00

shared-workspace-secrets.test.ts

fix(cloud): SEC-5 a shared workspace gets none of its owner's personal secrets

2026-11-12 22:04:05 -08:00

ssh-access.test.ts

feat(cloud): ENTERPRISE-AUDIT unified team audit log API (GET /v1/audit-log), Enterprise feature entitlements, audit ingest route

2026-11-12 20:09:12 -08:00

staging-auth.test.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

team-delete.test.ts

cloud: internal routes for deleting a team (TEAM-DELETE)

2026-11-12 06:42:04 -08:00

team-presence.test.ts

feat(cloud): auth's token may push role changes (SSO-ROLE-PUSH) (#615 )

2026-11-12 21:05:35 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123 )

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-follows.test.ts

feat(cloud): PARITY-FOLLOW follow endpoint: workspace_follows (0055), PUT/DELETE /v1/team/workspaces/:id/follow, followers in workspace views (#654 )

2026-11-13 02:17:45 -08:00

workspace-lifecycle.test.ts

fix(cloud): ARCHIVE-REACH archive, unarchive and delete from this desktop re-read Home's archived count at once (no cached 0 for 5 min); server test: desktop archive is in archived=only

2026-11-11 17:42:21 -08:00

workspace-numbers-prefs.test.ts

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

workspaces.test.ts

Merge private/cloud/integration into cloud/multiplayer-gaps (team-presence, routines)

2026-11-10 20:37:56 -08:00