Neil 49d26b647c cloud: internal routes for deleting a team (TEAM-DELETE) ...

billing: GET /v1/internal/accounts/:accountId/subscription -> {status, open}
(MEMBERSHIP_SYNC_TOKEN), so auth refuses to delete a team with an open subscription.

sandbox-control (auth's MEMBER_REMOVED_TOKEN, never the operator routes):
- GET /v1/internal/accounts/:accountId/delete-check -> {workspaces}: the team's
  workspaces in any state but destroyed.
- POST /v1/internal/accounts/:accountId/secrets/purge -> {purged}: deletes the
  team's org- and repo-scoped cloud secrets; 409 workspaces_exist while any remain.

2026-11-12 06:42:04 -08:00

..

agent-accounts.test.ts

fix(cloud): signed-out Claude message matches the strip and glossary (design-squad)

2026-11-11 02:03:47 -08:00

agent-credentials-more.test.ts

test: imports before the preset-name list

2026-11-10 05:57:40 -08:00

agent-providers.test.ts

test(sandbox-control): egress swap and plain injection resolve keys with the same precedence (team > repository > personal for agent keys)

2026-11-09 16:19:02 -08:00

agent-signout.test.ts

fix(cloud): find agent CLIs in /opt/orca/tools/bin; delete note only for running sandboxes; test retry skip

2026-11-10 05:27:41 -08:00

agent-sources.test.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

feat(cli): orca worktree create --on cloud[:<project>] [--env] creates an Orca Cloud workspace (private build); clear plan/at-cap/payment/sign-in errors; API accepts a team environment

2026-11-09 21:08:55 -08:00

api-sessions.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

api.test.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

auto-environments.test.ts

fix(cloud-create): Idempotency-Key on create, named rows, and the repository step named once (PC-8 backstop, PC-4)

2026-11-10 19:59:50 -08:00

build-runner.test.ts

fix(sandbox-control): unblock dev deploy (10061): apply the build-runner delete-class migration without the binding, step 1 of 2 (#237)

2026-11-10 04:17:03 -08:00

cloudflare-workers-stub.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234)

2026-11-10 04:08:45 -08:00

codex-broker.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

config.test.ts

fix(cloud): one definition of an archive snapshot (until its kept-until date, then deleted; no sandbox hours), on every Archive control; /v1/config exposes archiveTtlDays

2026-11-11 14:13:19 -08:00

create-git-async.test.ts

fix(cloud): a boot whose member identity install fails records it too (VM git-setup.failed + gitSetup), so Restart can't hide a failure

2026-11-11 19:29:18 -08:00

create-speed.test.ts

fix(cloud): VM hostname is the workspace's name, not the provider's per-boot id (JA-27, hostname half)

2026-11-10 20:28:52 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

dev-billing-enforce.test.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166)

2026-11-09 21:07:28 -08:00

device-sessions.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12)

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

environments.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

fake-vercel.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

git-shim-identity-nudge.test.ts

feat(cloud): a commit under Orca Cloud's name says once per session how to use your own (Connect your GitHub in Account & billing; design-squad)

2026-11-12 02:02:59 -08:00

git-shim-member-setup.test.ts

fix(cloud): a boot whose member identity install fails records it too (VM git-setup.failed + gitSetup), so Restart can't hide a failure

2026-11-11 19:29:18 -08:00

github-app.test.ts

fix(cloud): binding the GitHub App through OAuth also connects the binder's GitHub identity (commits as you)

2026-11-12 00:59:44 -08:00

github-repo-access.test.ts

test(cloud): install redirect with an OAuth code (request-auth-on-install) stores the identity

2026-11-12 01:03:41 -08:00

golden-images.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

harness.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

lifecycle-flow.test.ts

feat(billing): bill overage by the minute, put sandboxes to sleep at the cap (U22, U24)

2026-11-10 04:33:07 -08:00

mcp.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

orca-env.test.ts

feat(cloud): sign in once via your Orca account (contract D10/D11/D13/D14) — Claude setup-token store (Personal only, flag S1, kill switch), egress-time Source with one stable account placeholder per sandbox, never in shared workspaces; migration 0044

2026-11-10 04:22:16 -08:00

orca-sandbox-env.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

orcad-boot.test.ts

perf(cloud): start orcad from a full V8 code cache (~0.3 s off ready) (#173)

2026-11-09 21:52:21 -08:00

pool.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

project-setup.test.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168)

2026-11-09 21:16:28 -08:00

read-snapshots.test.ts

fix(cloud): read snapshot reads the workspace's own checkout (branch worktree), not the base clone; profile-cloud-service under max-lines

2026-11-10 18:01:58 -08:00

redaction.test.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175)

2026-11-09 22:01:32 -08:00

resume-stuck.test.ts

fix(cloud): RESUME-STUCK a resume whose client quits mid-wake no longer leaves the workspace stuck resuming

2026-11-11 22:42:54 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

runtime-bundles.test.ts

test(cloud): runtime-bundles test uses a shasum-backed sha256sum (macOS now ships a BSD /sbin/sha256sum without -c --status)

2026-11-12 06:18:33 -08:00

secrets.test.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

session-cpu.test.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

ssh-access.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

staging-auth.test.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

team-delete.test.ts

cloud: internal routes for deleting a team (TEAM-DELETE)

2026-11-12 06:42:04 -08:00

team-presence.test.ts

feat(cloud): MEMBER_REMOVED_TOKEN, a bearer valid only for /v1/internal/org-members/removed

2026-11-10 21:08:10 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-lifecycle.test.ts

fix(cloud): ARCHIVE-REACH archive, unarchive and delete from this desktop re-read Home's archived count at once (no cached 0 for 5 min); server test: desktop archive is in archived=only

2026-11-11 17:42:21 -08:00

workspace-numbers-prefs.test.ts

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

workspaces.test.ts

Merge private/cloud/integration into cloud/multiplayer-gaps (team-presence, routines)

2026-11-10 20:37:56 -08:00