Neil 134fc24436 feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE) ...

Golden source builds publish their orcad + in-VM CLI as a commit-pinned bundle (R2, uploaded by the build VM over a signed PUT; the Worker computes the stored sha256). On every boot and wake, before orcad starts and inside the existing orcad phase, a sandbox whose /opt/orca/runtime/orcad/SOURCE_COMMIT differs from its region's active golden fetches that bundle from the control plane's own host (already on the egress allowlist) with a 10-minute signed URL, verifies the sha256 the control plane passes in, checks the commit and node runtime, and swaps orcad + orca-cli atomically. Any failure keeps the old orcad and boot continues; every outcome is logged (runtime_refresh: outcome, from, to, ms). RUNTIME_REFRESH=off is the kill switch. Dev R2 bucket orca-sandbox-runtime-dev.

2026-11-11 03:21:01 -08:00

..

agent-accounts.test.ts

fix(cloud): signed-out Claude message matches the strip and glossary (design-squad)

2026-11-11 02:03:47 -08:00

agent-credentials-more.test.ts

test: imports before the preset-name list

2026-11-10 05:57:40 -08:00

agent-providers.test.ts

test(sandbox-control): egress swap and plain injection resolve keys with the same precedence (team > repository > personal for agent keys)

2026-11-09 16:19:02 -08:00

agent-signout.test.ts

fix(cloud): find agent CLIs in /opt/orca/tools/bin; delete note only for running sandboxes; test retry skip

2026-11-10 05:27:41 -08:00

agent-sources.test.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

api-access.test.ts

refactor(sandbox-control): API access uses W4's canSee/canOpen; teammate messages carry the sender envelope (spoofed envelopes stripped)

2026-11-09 06:56:04 -08:00

api-followups.test.ts

feat(cli): orca worktree create --on cloud[:<project>] [--env] creates an Orca Cloud workspace (private build); clear plan/at-cap/payment/sign-in errors; API accepts a team environment

2026-11-09 21:08:55 -08:00

api-sessions.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

api.test.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

auto-environments.test.ts

fix(cloud-create): Idempotency-Key on create, named rows, and the repository step named once (PC-8 backstop, PC-4)

2026-11-10 19:59:50 -08:00

build-runner.test.ts

fix(sandbox-control): unblock dev deploy (10061): apply the build-runner delete-class migration without the binding, step 1 of 2 (#237)

2026-11-10 04:17:03 -08:00

cloudflare-workers-stub.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234)

2026-11-10 04:08:45 -08:00

codex-broker.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

config.test.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102)

2026-11-09 15:08:16 -08:00

create-speed.test.ts

fix(cloud): VM hostname is the workspace's name, not the provider's per-boot id (JA-27, hostname half)

2026-11-10 20:28:52 -08:00

cross-team-delete.test.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

d1-fake.ts

feat(cloud): sandbox control-plane Worker (white-label Vercel) (#11)

2026-11-09 02:19:22 -08:00

desktop-route.test.ts

feat(cloud): remote desktop Beta — single-use tickets, fit, clipboard, keyboard release (W10 RD-1..6) (#122)

2026-11-09 17:36:19 -08:00

dev-billing-enforce.test.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166)

2026-11-09 21:07:28 -08:00

device-sessions.test.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135)

2026-11-09 18:02:56 -08:00

egress-hosts.test.ts

fix(sandbox-control): let VMs reach the control plane their workspace token names

2026-11-09 15:20:42 -08:00

egress-proxy.test.ts

feat(cloud): golden image build (orcad + agent CLIs, identity wipe, kept snapshot) (#12)

2026-11-09 02:19:22 -08:00

entitlements-client.test.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26)

2026-11-09 02:59:02 -08:00

environments.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

fake-vercel.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

github-app.test.ts

fix(sandbox-control): routine comments mint an issues:write token so plain issues get comments (falls back when the installation lacks it)

2026-11-09 23:05:42 -08:00

github-repo-access.test.ts

feat(sandbox-control): bind a GitHub install by the Orca sign-in's GitHub identity (N5/O3)

2026-11-10 06:14:02 -08:00

golden-images.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

guardrails.test.ts

fix(cloud): bind GitHub App installations to Orca accounts; kill switch, caps, rate limit; orphan sweep and retention (#24)

2026-11-09 02:19:25 -08:00

harness.ts

feat(cloud-create): automatic environments — repos come prebuilt after the first create

2026-11-10 19:10:29 -08:00

lifecycle-flow.test.ts

feat(billing): bill overage by the minute, put sandboxes to sleep at the cap (U22, U24)

2026-11-10 04:33:07 -08:00

mcp.test.ts

feat(cloud-api): sessions, cancel, rename, unarchive, attachments and models in REST + MCP (G10)

2026-11-10 19:26:25 -08:00

member-git.test.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

network-policy.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

orca-env.test.ts

feat(cloud): sign in once via your Orca account (contract D10/D11/D13/D14) — Claude setup-token store (Personal only, flag S1, kill switch), egress-time Source with one stable account placeholder per sandbox, never in shared workspaces; migration 0044

2026-11-10 04:22:16 -08:00

orca-sandbox-env.test.ts

fix(sandbox-control): Codex broker review fixes (M1-M4, L5-L8)

2026-11-10 05:22:43 -08:00

orcad-boot.test.ts

perf(cloud): start orcad from a full V8 code cache (~0.3 s off ready) (#173)

2026-11-09 21:52:21 -08:00

pool.test.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194)

2026-11-10 01:07:56 -08:00

project-setup.test.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168)

2026-11-09 21:16:28 -08:00

read-snapshots.test.ts

fix(cloud): read snapshot reads the workspace's own checkout (branch worktree), not the base clone; profile-cloud-service under max-lines

2026-11-10 18:01:58 -08:00

redaction.test.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175)

2026-11-09 22:01:32 -08:00

retention.test.ts

fix(sandbox-control): the orphan sweep no longer stops warm-pool VMs (their record is the pool row)

2026-11-09 19:49:24 -08:00

routines-schedule.test.ts

feat(sandbox-control): routines — schedule/GitHub/webhook triggers, hidden run VMs as the creator, detached headless agent runner, PR/comment posting, per-minute tick with caps, dedupe and crash recovery

2026-11-09 05:37:29 -08:00

routines.test.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

runtime-bundles.test.ts

feat(cloud): boot-time orcad refresh so environment and older-image workspaces get VM fixes (ENV-STALE)

2026-11-11 03:21:01 -08:00

secrets.test.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

session-cpu.test.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

share-links.test.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61)

2026-11-09 06:43:19 -08:00

ssh-access.test.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

staging-auth.test.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

team-presence.test.ts

feat(cloud): MEMBER_REMOVED_TOKEN, a bearer valid only for /v1/internal/org-members/removed

2026-11-10 21:08:10 -08:00

vercel-sandbox-api.test.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123)

2026-11-09 17:33:04 -08:00

vm-activity.test.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

workspace-lifecycle.test.ts

feat(cloud): one overage constant (ORCA_CLOUD_OVERAGE_CENTS_PER_HOUR, $1) for billing and the control plane; workspaces show sandbox hours, not per-workspace dollars (desktop list, phone status)

2026-11-10 01:52:05 -08:00

workspace-numbers-prefs.test.ts

feat(cloud): workspace numbers (W-123), org slug links and synced sidebar prefs on the control plane (G13, G14)

2026-11-10 19:22:39 -08:00

workspaces.test.ts

Merge private/cloud/integration into cloud/multiplayer-gaps (team-presence, routines)

2026-11-10 20:37:56 -08:00