Troubleshooting

Common CDE issues — GitHub App setup, SSH gate errors, auth failures, and worktree recovery.

Connect GitHub

Git operations and worktree creation require the ORGN GitHub App installed on your repository.

Symptoms

Worktree creation fails with a GitHub token error
Git fetch/push fails inside a cloud worktree
Banner or notification suggests connecting GitHub

Fix

Open the ORGN projects page in your browser:

https://cde.orgn.com/projects

Install or refresh the GitHub App for the target organization or repository. Ensure the app has access to the repo your Studio project uses.

Return to CDE and retry — create the worktree again or run Connect GitHub from the command palette (opens the same projects page).

Connect GitHub opens cde.orgn.com/projects in your default browser. Complete GitHub App setup there, then retry in the IDE.

SSH gate errors

After selecting a worktree, CDE provisions the sandbox and probes SSH before attaching the editor. Failures surface here — often during the first 30–60 seconds on a new worktree.

Symptoms

"Could not establish remote SSH to the sandbox"
Long wait then attach failure
Sidebar shows connected but editor has no remote files

Common causes and fixes

Cause	What to do
Sandbox still starting	Wait — fresh worktrees often need 30–60s. CDE retries with backoff.
Orphaned runner	Error mentions orphaned runner or stale gateway. Run CDE: Re-provision active worktree's sandbox.
Stale worktree	Recent entry invalid. Use Open Cloud Project and pick a fresh worktree.
OpenSSH too old	Requires OpenSSH 8.0+ (macOS 11+, Ubuntu 20.04+). Upgrade system SSH.
Network/firewall	Ensure outbound SSH to the sandbox gateway is allowed.

Recovery commands

Command palette action	When to use
CDE: Re-provision active worktree's sandbox	Orphaned-runner or stale sandbox errors
CDE: Attach editor to active worktree (remote SSH)	Sidebar shows active worktree but editor is local
CDE: Switch worktree	Start over from the picker
CDE: Reveal worktree picker	Focus the Projects sidebar

Symptom	Fix
Welcome screen loops on sign-in	Clear id-orgn session; retry Continue with id-orgn
Origin Agent says key is missing	Sign out and sign in — team Gateway key fetch failed
`401` from `api.orgn.com`	Session expired — sign in again from the welcome screen
Projects sidebar empty	Confirm team membership; check network to `api.orgn.com`

CDE fetches your team's Gateway API key automatically after sign-in. Both the platform API (api.orgn.com) and inference API (api.gateway.orgn.com) require a valid id-orgn session.

Origin Agent and Gateway errors

Symptom	Fix
`429` from Gateway	Rate limit or edge policy — retry later
Model cannot run tools	Pick a tool-capable model (TEE or ZDR with tool calling)
No models listed	Verify team has Gateway access; re-sign-in to refresh team key
Browser shows auth error at `api.gateway.orgn.com`	Expected — that URL is an API endpoint, not a web page. Use Gateway quickstart with an API key.

Two different Gateway URLs:

URL	What it is
`https://api.gateway.orgn.com/v1`	Inference API — used by Origin Agent
`https://gateway.orgn.com`	Gateway console — manage API keys, view usage

CDE does not expose Gateway key management in settings. For direct API testing outside the IDE, see Gateway quickstart. Manage keys in the Gateway console.

Attestation errors

Symptom	Fix
"Only available inside a CDE remote worktree"	Open a cloud worktree first — see Attestation
"Could not resolve a Daytona sandbox"	Re-provision the worktree sandbox
Fetch failed	Confirm sandbox is running; retry Show TDX Sandbox Attestation

Local folder blocked

Some builds disable Open Project and require cloud worktrees:

Local folders aren't available in this build. Pick a worktree from the CDE sidebar to start coding.

Use Open Cloud Project or the Projects sidebar worktree picker. See Local vs confidential cloud.

Updates

Platform	Update path
macOS Apple Silicon	In-app updater — restart when prompted
Windows x64	In-app updater — restart when prompted
Linux	Download latest `.deb` from orgn.com/download

See Install for platform details.

Get help

Platform support — enterprise and team support channels
Quickstart — baseline setup verification
Platform trust — security review reference

On this page