Files
orca/src/shared
Neil 23c4fa300c fix(cloud): scope Orca Cloud workspaces to the active team; never list sandbox clones
Bug 6: a team switch left the previous team's cloud workspace in the
sidebar (as its own project header) and kept its lease scheduler, wake
and orcad calls running under the new team's token.

- Orca Cloud runtime records carry the owning control-plane account
  (cloudAccountId, sandbox-control's org:<id> / user:<id> form), read
  once at the create write-ahead from the active profile.
- Backfill: on the 30 s beat and on every auth change, list the active
  team's sandboxes (GET /v1/sandboxes is scoped to the caller's account)
  and file the listed records under that team; it re-lists only when the
  team or the unfiled set changes, and drops a list that answered for a
  team the user has since left.
- The session registry, OOM polling and the window's cloud workspace ids
  skip every record outside the active team, so the old team's sandboxes
  get no keep-alive or orcad calls after a switch.
- Sidebar rows, the jump palette and project headers hide another team's
  sandbox hosts and any whose team is unknown (or when signed out).

Bug 7 (per coordinator): every Orca Cloud sandbox's primary clone stays
hidden; each cloud workspace row appears once.
2026-11-10 16:26:48 -08:00
..
…