Troubleshooting
Common CDE issues, GitHub App setup, SSH gate errors, auth failures, and worktree recovery.
Connect GitHub
Git operations and worktree creation require the ORGN GitHub App installed on your repository.
Symptoms
- Worktree creation fails with a GitHub token error
- Git fetch/push fails inside a cloud worktree
- Banner or notification suggests connecting GitHub
Fix
Open Settings → Account → GitHub in CDE, or the ORGN projects page in your browser: https://cde.orgn.com/projects
Install or refresh the GitHub App for the target organization or repository: Configure on an existing installation, or Connect a GitHub account or organization for a new one. Ensure the app has access to the repo your Studio project uses.
Return to CDE and retry: create the worktree again or run Connect GitHub from the command palette (opens the same projects page).
Settings → Account → GitHub (see GitHub settings) manages the same team-scoped installations as cde.orgn.com/projects. Use whichever is faster to reach: an in-app Configure/Remove, or the browser flow via Connect GitHub in the command palette.
SSH gate errors
After selecting a worktree, CDE provisions the sandbox and probes SSH before attaching the editor. Failures surface here, often during the first 30–60 seconds on a new worktree.
Symptoms
- "Could not establish remote SSH to the sandbox"
- Long wait then attach failure
- Sidebar shows connected but editor has no remote files
Common causes and fixes
| Cause | What to do |
|---|---|
| Sandbox still starting | Wait, fresh worktrees often need 30 to 60s. CDE retries with backoff. |
| Orphaned runner | Error mentions orphaned runner or stale gateway. Run CDE: Re-provision active worktree's sandbox. |
| Stale worktree | Recent entry invalid. Use Open Cloud Project and pick a fresh worktree. |
| OpenSSH too old | Requires OpenSSH 8.0+ (macOS 11+, Ubuntu 20.04+). Upgrade system SSH. |
| Network/firewall | Ensure outbound SSH to the sandbox gateway is allowed. |
Recovery commands
| Command palette action | When to use |
|---|---|
| CDE: Re-provision active worktree's sandbox | Orphaned-runner or stale sandbox errors |
| CDE: Attach editor to active worktree (remote SSH) | Sidebar shows active worktree but editor is local |
| CDE: Switch worktree | Start over from the picker |
| CDE: Reveal worktree picker | Focus the Projects sidebar |
Sign-in and session errors
| Symptom | Fix |
|---|---|
| Welcome screen loops on sign-in | Clear id-orgn session; retry Continue with id-orgn |
| Origin Agent says key is missing | Sign out and sign in, team Gateway key fetch failed |
401 from api.orgn.com | Session expired, sign in again from the welcome screen |
| Projects sidebar empty | Confirm team membership; check network to api.orgn.com |
CDE fetches your team's Gateway API key automatically after sign-in. Both the platform API (api.orgn.com) and inference API (api.gateway.orgn.com) require a valid id-orgn session.
Origin Agent and Gateway errors
| Symptom | Fix |
|---|---|
429 from Gateway | Rate limit or edge policy, retry later |
| Model cannot run tools | Pick a tool-capable model (TEE or ZDR with tool calling) |
| No models listed | Verify team has Gateway access; re-sign-in to refresh team key |
Browser shows auth error at api.gateway.orgn.com | Expected, that URL is an API endpoint, not a web page. Use Gateway quickstart with an API key. |
Two different Gateway URLs:
| URL | What it is |
|---|---|
https://api.gateway.orgn.com/v1 | Inference API, used by Origin Agent |
https://gateway.orgn.com | Gateway console, manage API keys, view usage |
CDE does not expose Gateway key management in settings. For direct API testing outside the IDE, see Gateway quickstart. Manage keys in the Gateway console.
Attestation errors
| Symptom | Fix |
|---|---|
| "Only available inside a CDE remote worktree" | Open a cloud worktree first, see Attestation |
| "Could not resolve a Daytona sandbox" | Re-provision the worktree sandbox |
| Fetch failed | Confirm sandbox is running; retry Show TDX Sandbox Attestation |
Local folder blocked
Some builds disable Open Project and require cloud worktrees:
Local folders aren't available in this build. Pick a worktree from the CDE sidebar to start coding.
Use Open Cloud Project or the Projects sidebar worktree picker. See Local vs confidential cloud.
Updates
| Platform | Update path |
|---|---|
| macOS Apple Silicon | In-app updater, restart when prompted |
| Windows x64 | In-app updater, restart when prompted |
| Linux | Download latest .deb from orgn.com/download |
See Install for platform details.
Get help
- Platform support: enterprise and team support channels
- Quickstart: baseline setup verification
- Platform trust: security review reference