Neil 766e0b23b6 Merge remote-tracking branch 'private/cloud/integration' into cloud/read-snapshot-signed ...

# Conflicts:
#	cloud/apps/sandbox-control/image/vm-scripts.generated.ts
#	src/main/ipc/cloud-workspaces.ts

2026-11-10 23:20:55 -08:00

..

0001_init.sql

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

0002_github_repo.sql

feat(cloud): GitHub App repo tokens + billing dev wiring for the sandbox control plane (#20)

2026-11-09 02:19:24 -08:00

0003_secrets.sql

feat(cloud): org/personal/repo secret store with envelope encryption and session-start injection (#23)

2026-11-09 02:19:24 -08:00

0004_github_bindings_guardrails.sql

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

0005_golden_images.sql

feat(cloud): self-rotating golden images (refresh before expiry, release builds, smoke-gated atomic swap); Orca Cloud gated on the sandbox capability (#28)

2026-11-09 03:28:58 -08:00

0006_lifecycle_w2.sql

feat(cloud): wake (single-flight, long-poll), restart, status metrics, archive/unarchive on the sandbox control plane

2026-11-09 05:02:20 -08:00

0007_sandbox_pool.sql

feat(sandbox-control): warm VM pool (SANDBOX_POOL_SIZE); idempotent resume of a running sandbox; github_not_connected before provisioning (#36)

2026-11-09 04:45:39 -08:00

0008_environments.sql

## What (#49)

2026-11-09 05:45:23 -08:00

0020_api_routines.sql

wip(cloud): public API foundation (keys, audit, workspaces, messages, openapi)

2026-11-09 04:51:10 -08:00

0021_routines_runs.sql

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

0022_mcp_oauth.sql

feat(sandbox-control): hosted MCP server (Streamable HTTP) over the public API, with OAuth 2.1 (DCR, PKCE S256, refresh rotation, RFC 8707/9728/8414/7009) and desktop approval codes

2026-11-09 04:53:56 -08:00

0024_workspace_registry.sql

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

0025_share_links.sql

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51)

2026-11-09 06:30:40 -08:00

0026_egress_allow_hosts.sql

feat(cloud): agents just work in Orca Cloud — provider presets, host-scoped model-key egress swap, live secret refresh, managed env, redaction

2026-11-09 04:49:15 -08:00

0027_device_sessions.sql

feat(cloud): per-device Orca Cloud access for phones (W8) (#42)

2026-11-09 05:22:51 -08:00

0028_mcp_grants.sql

fix(mcp): grants are visible, revocable and bounded — tie to approving key, /v1/oauth-grants, 90-day family end, replay-safe mint, member removal, purge, per-IP token limit (migration 0028)

2026-11-09 05:04:16 -08:00

0030_sandboxes_environment_index.sql

perf(cloud): warm pool per hot environment build; smoke-boot builds; clearer GitHub failures (#54)

2026-11-09 06:08:11 -08:00

0031_member_sends.sql

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

0032_egress_user_hosts.sql

feat(sandbox-control): per-workspace tool egress hosts for synced remote MCP servers (PUT/GET /v1/sandboxes/:id/egress/hosts, migration 0032)

2026-11-09 07:46:04 -08:00

0033_environment_build_usage.sql

feat(cloud): meter environment build time; no setup-script nudge for env-build workspaces (#94)

2026-11-09 08:11:06 -08:00

0034_member_names.sql

feat(cloud): label teammates from the token name claim (member_names, migration 0034)

2026-11-09 15:03:14 -08:00

0035_start_timings.sql

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

0036_api_idempotency.sql

feat(sandbox-control): role changes re-cap keys and MCP grants; Idempotency-Key on workspace create; teammate names in API views and the sender envelope

2026-11-09 16:12:43 -08:00

0037_member_changes.sql

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

0038_user_slept_at.sql

fix(cloud): predictive wake gaps: a drag never wakes (press waits for release, drag cancels pending), the sleep cooldown reads the server's last chosen sleep from any client, and a wake is skipped with the owner's seat or team at or one below its running cap

2026-11-09 20:41:25 -08:00

0039_read_snapshots.sql

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

0040_golden_regions_single_size.sql

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

0041_agent_sources.sql

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

0042_session_cpu.sql

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

0043_read_snapshot_signature.sql

feat(cloud): VM-signed read snapshots (Ed25519 per workspace), signer in sealed grants, shared pin policy

2026-11-10 03:36:27 -08:00

0044_agent_credentials.sql

feat(cloud): sign in once via your Orca account (contract D10/D11/D13/D14) — Claude setup-token store (Personal only, flag S1, kill switch), egress-time Source with one stable account placeholder per sandbox, never in shared workspaces; migration 0044

2026-11-10 04:22:16 -08:00

0045_codex_broker.sql

feat(sandbox-control): Codex account broker (contract D11, flag S2)

2026-11-10 05:03:50 -08:00

0046_github_install_requests.sql

feat(sandbox-control): GitHub repo access, preselected install URLs, install requests, repository list (NP-4 N2/N3/N12, D2)

2026-11-10 05:19:44 -08:00

0047_agent_credential_checks.sql

fix(cloud): confirm a provider 401 with one auth check before revoking an Orca account

2026-11-10 17:47:58 -08:00

0048_agent_credential_verified.sql

feat(cloud): POST /v1/agent-credentials/claude/verify for the desktop's pre-launch check

2026-11-10 18:10:43 -08:00

0049_auto_environments.sql

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

0050_team_presence.sql

feat(cloud): teammate profiles with a usage heatmap, and opt-in Pokes

2026-11-10 19:24:26 -08:00

0051_workspace_numbers_prefs.sql

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

0052_workspace_attachments.sql

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00