orca/cloud/apps/sandbox-control/src at f45bb50f147aeb3aaa7751a8a342c97eae6d2876 - orca

feat(cli): orca cloud glossary copy, workspace delete, routine list/run (DS-25, DS-36 CLI)

2026-11-10 02:26:14 -08:00

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

fix(cloud): security review: Copilot token limited to Copilot's GitHub endpoints; routine summaries are final messages with session secrets redacted; untrusted context capped

2026-11-10 02:13:11 -08:00

agent-credential-names.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

agent-sources.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

auth.ts

feat(sandbox-control): dev control plane also trusts staging auth sandbox tokens

2026-11-10 00:46:50 -08:00

build-runner.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234 )

2026-11-10 04:08:45 -08:00

create-timing.ts

fix(sandbox-control): honest create timing (create_ms/wake_ms, migration 0035); operator golden rotation script (#102 )

2026-11-09 15:08:16 -08:00

device-sessions.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135 )

2026-11-09 18:02:56 -08:00

egress-hosts.ts

feat(sandbox-control): per-workspace tool egress hosts for synced remote MCP servers (PUT/GET /v1/sandboxes/:id/egress/hosts, migration 0032)

2026-11-09 07:46:04 -08:00

egress-proxy.ts

fix(cloud): no swappable key reaches the VM unrouted; Cursor's exchange reply passes only the access token

2026-11-10 00:24:34 -08:00

entitlements.ts

feat(sandbox-control): dev-only SANDBOX_DEV_BILLING_ENFORCE_PREFIX sends one dev account prefix through the real billing gate (#166 )

2026-11-09 21:07:28 -08:00

env-refresh.ts

fix(sandbox-control): review fixes — proxy rechecks a key's host at send time, refresh claims the row before the policy and writes are generation-ordered, bounded refresh fan-out, URL/model values without control chars, exact Codex host match

2026-11-09 04:56:41 -08:00

env.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234 )

2026-11-10 04:08:45 -08:00

environment-builds.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

environment-golden-refresh.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

environment-routes.ts

## What (#49 )

2026-11-09 05:45:23 -08:00

environment-staleness.ts

## What (#49 )

2026-11-09 05:45:23 -08:00

environments.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

github-app.ts

fix(sandbox-control): routine comments mint an issues:write token so plain issues get comments (falls back when the installation lacks it)

2026-11-09 23:05:42 -08:00

github-connect.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

github-user-tokens.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

golden-image-provider.ts

fix(cloud): env builds finish without a reader: bounded wait=true exit probe (#123 )

2026-11-09 17:33:04 -08:00

golden-images.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

golden-source.ts

fix(cloud): name the VM project after its repo (orca repo add --display-name); golden builder uses wait=true exit probe; image-only merges rebuild (#133 )

2026-11-09 17:56:20 -08:00

grant-revokes.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

grants.ts

W8 follow-ups: removal and role loss reach phones; role-aware plan-denial copy (#135 )

2026-11-09 18:02:56 -08:00

guardrails.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26 )

2026-11-09 02:59:02 -08:00

index.ts

fix(sandbox-control): host EnvironmentBuildRunner in its own Worker so control-plane preview URLs work (#234 )

2026-11-10 04:08:45 -08:00

lifecycle.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

machine-size.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

member-changes.ts

fix(cloud): address review - asleep delete needs Force delete and runs ownership checks, destroyed sandboxes forget their row, removed members get no cross-team delete, destroy errors always surface

2026-11-09 19:27:29 -08:00

member-git.ts

feat(cloud): member git identity only within a window after the member's own client reports a send (0031); entry points kept current per boot

2026-11-09 07:30:39 -08:00

member-names.ts

feat(cloud): label teammates from the token name claim (member_names, migration 0034)

2026-11-09 15:03:14 -08:00

member-removal.ts

feat(cloud): seal a read snapshot at drain; reader keys, read endpoint, revocation pruning

2026-11-10 00:13:19 -08:00

network-policy.ts

feat(cloud): COPILOT_GITHUB_TOKEN and GOOGLE_API_KEY swapped at egress; routines run all six image agents; AWS keys marked stored on workspace

2026-11-10 02:08:00 -08:00

operator.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

orcad-ready.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175 )

2026-11-09 22:01:32 -08:00

org-prompts.ts

feat(cloud): W4 team collaboration on cloud workspaces

2026-11-09 06:53:24 -08:00

pool.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

preview-wake.ts

feat(cloud): move a cloud workspace to this computer, wake on SSH (sshd over a wss bridge + desktop ProxyCommand), preview wake helper

2026-11-09 06:11:42 -08:00

project-setup.ts

feat(cloud): run orca.yaml setup once for API/CLI/phone/routine workspaces (#168 )

2026-11-09 21:16:28 -08:00

provider-env.ts

fix(cloud): Copilot's token stand-in looks like a GitHub token (Copilot ignored orca-ph-…)

2026-11-10 03:40:24 -08:00

read-snapshots.ts

fix(cloud): read snapshot security review follow-ups (trust wording, timing-only stats, live phone keys, races)

2026-11-10 00:17:45 -08:00

reconcile.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

regions.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

retention.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

sandbox-provider.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

sandbox-vm-commands.ts

perf(cloud): seal the ready offer into the start line; poll ready every 10 ms (#175 )

2026-11-09 22:01:32 -08:00

sandbox-vm-inspect.ts

fix(cloud): archive capture keeps porcelain's leading status column; OOM victim reports node, not MainThread

2026-11-09 05:56:07 -08:00

secret-egress.ts

fix(cloud): Copilot's token stand-in looks like a GitHub token (Copilot ignored orca-ph-…)

2026-11-10 03:40:24 -08:00

secrets-crypto.ts

feat(cloud): org/personal/repo secret store with envelope encryption and session-start injection (#23 )

2026-11-09 02:19:24 -08:00

secrets.ts

fix(cloud): security review: Copilot token limited to Copilot's GitHub endpoints; routine summaries are final messages with session secrets redacted; untrusted context capped

2026-11-10 02:13:11 -08:00

session-cpu.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

session-env.ts

feat(cloud): agent Source per person (GET/PUT /v1/agent-sources, offer answers, owner block) — 'Your sign-in' keeps that agent's credentials out of the sandbox session live; shared credential-names module + Worker mirror (migration 0041)

2026-11-10 03:21:22 -08:00

share-crypto.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51 )

2026-11-09 06:30:40 -08:00

share-gateway.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51 )

2026-11-09 06:30:40 -08:00

share-links.ts

feat(w3): remote desktop for Orca Cloud workspaces (Xvnc + noVNC over the port forward) (#61 )

2026-11-09 06:43:19 -08:00

share-pages.ts

feat(cloud): share links for Orca Cloud workspace ports (W3) (#51 )

2026-11-09 06:30:40 -08:00

ssh-access.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55 )

2026-11-09 06:37:23 -08:00

store.ts

fix(cloud): predictive wake gaps: a drag never wakes (press waits for release, drag cancels pending), the sleep cooldown reads the server's last chosen sleep from any client, and a wake is skipped with the owner's seat or team at or one below its running cap

2026-11-09 20:41:25 -08:00

usage.ts

feat(cloud): Orca Cloud in the desktop end to end (provider, lease scheduler, upsell, dogfood) (#26 )

2026-11-09 02:59:02 -08:00

vercel-sandbox-api.ts

feat(sandbox-control): internal per-session CPU tracking and fair-use report (U22)

2026-11-10 03:34:00 -08:00

vm-activity.ts

feat(cloud): VM activity keeps a sandbox alive without a desktop - orcad publishes its work verdict, the cron renews busy leases and sleeps idle ones

2026-11-09 19:41:36 -08:00

wire.ts

feat(cloud): pdx1 default region, iad1 fallback, golden per region; Standard = 8 vCPU / 16 GB (U17, U18) (#194 )

2026-11-10 01:07:56 -08:00

workspace-lifecycle.ts

Merge remote-tracking branch 'private/cloud/integration' into cloud/w2-squad-archive

2026-11-10 03:09:00 -08:00

workspaces.ts

fix(cloud): the registry edit can no longer label a workspace archived; tests for asleep archive (no wake) and creating/suspending refusals

2026-11-10 03:18:45 -08:00