mirror of
https://github.com/stablyai/orca.git
synced 2026-11-06 03:57:35 +00:00
Neil
fa0bd69099
* refactor(ssh): derive a host-key policy from the target owner The verifier and decision took an isEphemeralRuntimeTarget boolean. They now take a HostKeyPolicy derived from the owner by one function, and the owner shape gets a named SshTargetOwner type. No behavior change: on-demand runtime VMs map to the ephemeral policy, everything else to standard, and every existing decision test passes unchanged in substance. * docs(ssh): separate owned-target hiding from the recipe-VM id prefix Hidden-ness is decided by owner in main; the runtime-ssh- prefix also carries per-provision semantics (fresh filesystem, VM cleanup), so only on-demand-runtime owners may use it. Comments only. * refactor(ssh): one id predicate for every Orca-owned SSH target Surfaces that hide owned targets or must never dial them from the renderer (startup re-dial, reconnect hints, automation host catalog, status bar, host registry, state broadcast) now ask isOwnedSshTargetId, which also covers the machine- prefix. isRuntimeOwnedSshTargetId keeps its narrower recipe-VM meaning (address and filesystem replaced every provision), so name retirement and VM cleanup are unchanged. No target uses machine- on main yet, so behavior is identical; tests pin both.