Neil f8e362259a fix(cloud): harden agent secret requests (review of #214) ...

- Agent and worktree come from the terminal orcad verifies from launch
  evidence (verifiedCallerTerminalHandle, shared with turn-sender); the
  terminalHandle param is gone and a worktree hint is kept only when the
  host knows it.
- secrets.* are accepted, and their events sent, only on cloud orcad
  (ORCA_IS_CLOUD=1 + ORCA_SANDBOX_ID); already-set never reads orcad's env.
- touchRequest emits secrets.requestUpdated; natural expiry emits
  secrets.requestSettled {status: expired}.
- orca-env skips the control plane's reserved names and prefixes, with a
  test that reads them from secrets.ts.
- reason drops bidi controls and turns C0/C1 controls into spaces.

2026-11-10 03:34:04 -08:00

..

browser

test: remove low-value browser, CLI and budget checks (#40459)

2026-11-09 11:44:48 -08:00

cloud

feat(cloud): one sandbox size (8 vCPU · 16 GB, 1×) — billing counts every size 1×, plans/usage/run-on/env/CLI/phone copy from ORCA_CLOUD_SANDBOX_SPEC, size pickers removed

2026-11-10 00:54:28 -08:00

handlers

fix(cloud): harden agent secret requests (review of #214)

2026-11-10 03:34:04 -08:00

plugin-authoring

test: remove low-value CLI, browser and E2E checks (#40466)

2026-11-09 11:58:10 -08:00

plugin-dev-watch

test: remove 282 low-value tests (#39632)

2026-11-07 16:51:15 -08:00

runtime

fix(cloud): harden agent secret requests (review of #214)

2026-11-10 03:34:04 -08:00

specs

feat(cloud): agent secret requests (secrets.request RPC, orca secret request, orca-env)

2026-11-10 02:55:15 -08:00

account-add-process.test.ts

fix(cli): forward OpenCode --method and --answer from account add (#37622)

2026-11-03 01:12:19 -08:00

agent-context.test.ts

test: remove low-value CLI, settings and shortcut suites (#40441)

2026-11-09 10:53:47 -08:00

agent-context.ts

[comment audit] Shorten CLI parsing and host-routing comments (#32265)

2026-10-23 07:49:36 -07:00

agent-launch-process.test.ts

refactor: group agent launch contracts under concrete owners (#37915)

2026-11-03 14:45:49 -08:00

agent-launch-recovery.ts

refactor: group agent launch contracts under concrete owners (#37915)

2026-11-03 14:45:49 -08:00

agent-launch-request.ts

refactor: group agent launch contracts under concrete owners (#37915)

2026-11-03 14:45:49 -08:00

agent-launch-test-fixtures.ts

refactor: group agent launch contracts under concrete owners (#37915)

2026-11-03 14:45:49 -08:00

agent-session-search-format.test.ts

refactor: group workspace and runtime contracts by defining owner (#38018)

2026-11-03 20:19:21 -08:00

agent-session-search-format.ts

refactor: group workspace and runtime contracts by defining owner (#38018)

2026-11-03 20:19:21 -08:00

args-repeatable-flags.test.ts

fix(cli): forward OpenCode --method and --answer from account add (#37622)

2026-11-03 01:12:19 -08:00

args.test.ts

test: remove 96 low-value test declarations (#37882)

2026-11-03 11:19:42 -08:00

args.ts

fix(cli): forward OpenCode --method and --answer from account add (#37622)

2026-11-03 01:12:19 -08:00

artifact-format.ts

refactor(shared): organize file operations and storage owners (#39746)

2026-11-07 22:58:35 -08:00

automation-destination.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

automation-format.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

automation-owner-conflict-recovery.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

automation-runs-paging.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

base64-payload-byte-count.ts

Harden computer use runtime and CLI (#4705)

2026-06-07 17:49:01 -07:00

bundled-skill-guides.ts

fix(skills): load Orca browser guidance for ordinary web tasks (#39916)

2026-11-09 23:27:58 +00:00

caller-cwd-containment.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

caller-folder-workspace.ts

Create a worktree per repository from an empty folder workspace (#39575)

2026-11-08 03:30:10 -08:00

caller-host-worktree-selection.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

cli-error.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

cli-exit-code.ts

cli: add orca plugin create, validate and inspect (#36280)

2026-10-30 01:00:15 -07:00

cli-screenshot-temp-file.ts

feat(browser): typed snapshot flags, screenshots saved as files, and a guide that keeps browser work in Orca (#36257)

2026-10-30 15:07:05 +00:00

cli-version.ts

Update Orca's skills with Orca's own installer instead of npx skills (#31688)

2026-10-22 22:35:14 -04:00

codex-command-classification.test.ts

test: remove 660 low-value tests (#39547)

2026-11-07 09:18:17 -08:00

codex-command-classification.ts

[comment audit] Shorten CLI parsing and host-routing comments (#32265)

2026-10-23 07:49:36 -07:00

command-body-input.ts

Add --spec-file and one keep-open name to orchestration worker commands (#36545)

2026-10-31 01:23:25 -04:00

command-scoped-flag-help.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

command-spec.ts

fix(cli): help lists only the flags each command actually takes (#34598)

2026-10-27 16:06:49 -07:00

command-suggestion-budget.test.ts

fix(cli): preserve alias recovery while guarding destructive suggestions (#26934)

2026-10-10 15:16:18 -07:00

command-suggestion-destructive-families.test.ts

test: remove low-value suites and redundant examples (#40457)

2026-11-09 11:31:20 -08:00

command-suggestion.test.ts

test: remove 1296 low-value mock and projection tests (#38837)

2026-11-05 21:39:35 -08:00

command-suggestion.ts

fix(cli): point positional terminal handles at --terminal (#38793)

2026-11-05 20:20:03 -08:00

computer-format.test.ts

test: remove low-value CLI and renderer inventories (#40445)

2026-11-09 11:14:08 -08:00

computer-format.ts

feat(browser): typed snapshot flags, screenshots saved as files, and a guide that keeps browser work in Orca (#36257)

2026-10-30 15:07:05 +00:00

computer-tree-query.test.ts

feat(computer): return tree diffs after actions and add get-app-state --query (#36023)

2026-10-29 23:05:41 +00:00

computer-tree-query.ts

feat(computer): return tree diffs after actions and add get-app-state --query (#36023)

2026-10-29 23:05:41 +00:00

dispatch.ts

[comment audit] Shorten CLI parsing and host-routing comments (#32265)

2026-10-23 07:49:36 -07:00

emulator-logcat-format.test.ts

feat(emulator): Android emulation via scrcpy (cross-platform, iOS parity) (#6434)

2026-06-28 21:01:09 -07:00

emulator-logcat-format.ts

feat(emulator): Android emulation via scrcpy (cross-platform, iOS parity) (#6434)

2026-06-28 21:01:09 -07:00

emulator-permissions-args.ts

feat(emulator): Android emulation via scrcpy (cross-platform, iOS parity) (#6434)

2026-06-28 21:01:09 -07:00

enclosing-workspace-catalog.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

enclosing-workspace-rule.test.ts

test: remove 712 low-value tests (#39829)

2026-11-08 03:51:04 -08:00

execution-host-flag.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

flag-help-text.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

flags.ts

fix(cli): let worktree set --comment "" clear the comment (#37515)

2026-11-02 20:49:15 +00:00

folder-workspace-selector.ts

feat(cli): match folder workspaces by path: and name:, keep same-id ps rows apart (#39637)

2026-11-07 23:35:33 -05:00

format-recovery.test.ts

test: remove 45 low-value suites and redundant cases (#40072)

2026-11-08 19:50:37 -08:00

format.test.ts

test: remove 21 low-value CLI and GitHub tests (#39963)

2026-11-08 12:59:35 -08:00

format.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

handler-group-manifest.test.ts

test: remove low-value suites and redundant examples (#40457)

2026-11-09 11:31:20 -08:00

handler-group-manifest.ts

feat(cloud): agent secret requests (secrets.request RPC, orca secret request, orca-env)

2026-11-10 02:55:15 -08:00

help.ts

feat(cli): select and remove any saved agent account from orca account (#38944)

2026-11-06 03:03:51 -08:00

host-handler-groups.ts

feat(cloud): SSH into Orca Cloud workspaces (orca ssh, ssh-proxy, VS Code/Cursor Remote-SSH) (#55)

2026-11-09 06:37:23 -08:00

host-selector-alternatives.test.ts

test: strengthen CLI, lifecycle, bundle and build coverage (audit 8) (#32777)

2026-10-23 11:06:37 -07:00

host-selector-alternatives.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

index-agent-launch.test.ts

test: remove 133 low-value workflow, mobile and CLI tests (#38725)

2026-11-05 15:52:52 -08:00

index-environment-commands.test.ts

test: remove 31 low-value interaction and state tests (#38629)

2026-11-05 11:21:57 -08:00

index-environment-local.test.ts

feat(orchestration): mail an agent on a paired server with send --on; its reply comes back by itself (#40106)

2026-11-09 17:00:11 -05:00

index-file-open-headless.test.ts

test: remove low-value CLI, browser and E2E checks (#40466)

2026-11-09 11:58:10 -08:00

index-orchestration.test.ts

test: remove 34 low-value suites and redundant cases (#40115)

2026-11-08 20:10:32 -08:00

index-terminal-commands.test.ts

test: remove 34 low-value suites and redundant cases (#40115)

2026-11-08 20:10:32 -08:00

index-test-harness.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

index-worktree-parent-environment.test.ts

test: remove 712 low-value tests (#39829)

2026-11-08 03:51:04 -08:00

index-worktree-wsl-selection.test.ts

test: remove low-value browser, CLI and budget checks (#40459)

2026-11-09 11:44:48 -08:00

index.test.ts

test: remove 34 low-value suites and redundant cases (#40115)

2026-11-08 20:10:32 -08:00

index.ts

feat(orchestration): mail an agent on a paired server with send --on; its reply comes back by itself (#40106)

2026-11-09 17:00:11 -05:00

jira-format.ts

refactor(jira): colocate shared contracts and capabilities (#32927)

2026-10-23 14:31:05 -07:00

jira-handler-group.ts

feat(cli): let agents read and update Jira tickets safely (#28592)

2026-10-14 03:03:50 -07:00

jira-target.ts

refactor(shared): colocate Jira rules and direct imports (#33164)

2026-10-24 06:46:07 -07:00

linear-format.test.ts

test: remove low-value CLI and renderer inventories (#40445)

2026-11-09 11:14:08 -08:00

linear-format.ts

refactor: organize terminal and runtime contract owners (#38011)

2026-11-03 19:56:34 -08:00

linear-handler-group.ts

feat(linear): edit and delete Linear comments from the CLI (#30003)

2026-10-17 13:14:48 -07:00

linear-request-builders.ts

perf(linear): load nested children with parent pages (#37667)

2026-11-02 22:26:34 -08:00

linear-save-issue-request.ts

refactor(shared): group worktree, github, and linear modules into folders (#14437)

2026-08-13 20:44:16 -07:00

local-environment-selector.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

omitted-host-scope-selectors.ts

refactor: group workspace and runtime contracts by defining owner (#38018)

2026-11-03 20:19:21 -08:00

orchestration-mutation-recovery.test.ts

test: remove 282 low-value tests (#39632)

2026-11-07 16:51:15 -08:00

orchestration-mutation-recovery.ts

refactor: place terminal and workspace contracts with concrete owners (#38061)

2026-11-03 22:49:34 -08:00

orchestration-session-caller-cli.test.ts

Print concise orchestration CLI output for agents, with --full for the full record (#36498)

2026-10-30 23:11:56 -04:00

orchestration-structured-session-no-identity.test.ts

test: remove low-value CLI, browser and E2E checks (#40466)

2026-11-09 11:58:10 -08:00

paired-terminal-desktop-reveal.ts

refactor: place terminal and workspace contracts with concrete owners (#38061)

2026-11-03 22:49:34 -08:00

plugin-handler-groups.ts

cli: add orca plugin install, update, uninstall and catalog list/add/rm (#36647)

2026-11-06 14:20:27 -08:00

ports-format.ts

feat(cli): add orca ports to list a workspace's detected ports (#33016)

2026-10-23 20:05:47 -07:00

profile-state-location.ts

Persist profile state in SQLite with background writes (#22612)

2026-09-25 22:47:33 -07:00

project-format.ts

refactor(shared): drop the shared/types barrel and import from the real modules (#14447)

2026-08-13 22:48:24 -07:00

project-selector.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

quote-stripped-json-flag.test.ts

test: remove 282 low-value tests (#39632)

2026-11-07 16:51:15 -08:00

quote-stripped-json-flag.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

reference-command-arguments.test.ts

test: remove low-value locale, automation and settings cases (#40437)

2026-11-09 09:49:58 -08:00

reference-handler-group.ts

feat(cli): let agents read and update Jira tickets safely (#28592)

2026-10-14 03:03:50 -07:00

reference-input.ts

refactor: group workspace and runtime contracts by defining owner (#38018)

2026-11-03 20:19:21 -08:00

remote-selection-flag-rejection.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

remote-selection-scope.ts

fix(cli): reconcile orca cloud with cloud env after rebase

2026-11-09 15:00:38 -08:00

repo-path-arguments.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

retry-request-flag.ts

refactor(shared): organize execution and automation defining owners (#39776)

2026-11-08 06:46:09 -08:00

root-help-text-primary.ts

feat(cloud): agent secret requests (secrets.request RPC, orca secret request, orca-env)

2026-11-10 02:55:15 -08:00

root-help-text-secondary.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

runtime-client.test.ts

test: remove 282 low-value tests (#39632)

2026-11-07 16:51:15 -08:00

runtime-client.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

search-command-arguments.test.ts

test: consolidate redundant checks and strengthen boundary coverage (#33082)

2026-10-24 00:57:20 -07:00

search-command-arguments.ts

refactor: group workspace and runtime contracts by defining owner (#38018)

2026-11-03 20:19:21 -08:00

selector-ambiguity-recovery.ts

feat(cli): match folder workspaces by path: and name:, keep same-id ps rows apart (#39637)

2026-11-07 23:35:33 -05:00

selectors.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

serve-electron-flag-parity.test.ts

fix(orcad): add --reclaim-stale-lock for a lock no start can judge after a reboot on a shared home (#32915)

2026-10-23 15:26:03 -07:00

serve-pairing-handler-groups.ts

feat(cloud): per-device sender attestation (orcad orchestration.turnSender, orca sender), root-only member identities + sudo helper, sender-aware git in VMs (default on); terminal-agent sender envelope; follow teammates into chats and chat links; name claim

2026-11-09 07:30:27 -08:00

session-caller-flags.ts

refactor(agent-session): group lifecycle records and direct owners (#36909)

2026-11-01 01:24:37 -08:00

shell-command-quote.ts

refactor: place terminal and workspace contracts with concrete owners (#38061)

2026-11-03 22:49:34 -08:00

skills-cli-agent-aliases.test.ts

Update Orca's skills with Orca's own installer instead of npx skills (#31688)

2026-10-22 22:35:14 -04:00

skills-cli-agent-aliases.ts

Update Orca's skills with Orca's own installer instead of npx skills (#31688)

2026-10-22 22:35:14 -04:00

skills-install.test.ts

test: remove 34 low-value suites and redundant cases (#40115)

2026-11-08 20:10:32 -08:00

skills-reference-selector.test.ts

test: remove low-value suites and redundant examples (#40457)

2026-11-09 11:31:20 -08:00

stdout-line.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

terminal-format.test.ts

test: remove 64 low-value test declarations (#37863)

2026-11-03 10:08:03 -08:00

terminal-format.ts

fix(terminal): see a prompt's turn start while child work keeps the agent busy (#38394)

2026-11-08 02:27:37 -05:00

terminal-read-screen.test.ts

test: remove 34 low-value suites and redundant cases (#40115)

2026-11-08 20:10:32 -08:00

test-fixtures.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

vocabulary-policy.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

workspace-address.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

workspace-catalog-row.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

workspace-format.ts

feat(cli): one enclosing-workspace rule, --environment local, copyable addresses, and --parent-environment (#39733)

2026-11-08 04:08:07 -05:00

worktree-handler-groups.ts

feat(cli): orca worktree create --on cloud[:<project>] [--env] creates an Orca Cloud workspace (private build); clear plan/at-cap/payment/sign-in errors; API accepts a team environment

2026-11-09 21:08:55 -08:00

worktree-project-target.ts

Attach existing worktrees to folder workspaces from the CLI (#39018)

2026-11-06 15:13:57 -08:00

worktree-ps-program-status.test.ts

test: remove low-value CLI, settings and shortcut suites (#40441)

2026-11-09 10:53:47 -08:00

worktree-ps-program-status.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

worktree-ps-terminal-verdict.test.ts

test: remove low-value CLI, settings and shortcut suites (#40441)

2026-11-09 10:53:47 -08:00

worktree-ps-terminal-verdict.ts

[comment audit] Shorten remaining CLI root comments (#32273)

2026-10-23 08:07:03 -07:00

worktree-selector-caller-host.test.ts

test: remove low-value browser, CLI and budget checks (#40459)

2026-11-09 11:44:48 -08:00

worktree-selector-recovery.ts

feat(cli): match folder workspaces by path: and name:, keep same-id ps rows apart (#39637)

2026-11-07 23:35:33 -05:00

worktree-selector-wsl-posix-path.test.ts

feat(cli): match folder workspaces by path: and name:, keep same-id ps rows apart (#39637)

2026-11-07 23:35:33 -05:00

wsl-caller-path-selector.ts

feat(cli): match folder workspaces by path: and name:, keep same-id ps rows apart (#39637)

2026-11-07 23:35:33 -05:00

wsl-distro-cli-refusal.ts

fix(wsl): name the stopped distro, not its raw hold code, wherever a held terminal is shown (#37380)

2026-11-01 23:17:46 -08:00