@crvouga/mockingbird-service-junction 3.6.0 → 3.6.1

package/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog — @crvouga/mockingbird-service-junction
 
-## 3.6.0 (2026-10-17)
+## 3.6.1 (2026-10-18)
+
+### Fixes and improvements
+
+- sandbox-observed omission controls place orders on the platform account ([c9146ea](https://github.com/crvouga/mockingbird/commit/c9146eae3c867dcfee1ef00053288cd5407b5e9c))
+
+## 3.6.0 (2026-10-16)
 
 ### Features
 

package/README.md

@@ -948,6 +948,14 @@ namespace's policy; changes survive its reset and never affect another namespace
 Unknown profile names are rejected. CLI/server equivalents are `--lab-account-profile`
 and `--lab-account-sandbox-policies <json-file>` (the account-policy object).
 
+`sandbox-observed` also encodes the owner-recorded October 2026 sandbox omission controls
+(#439), which are recorded observations, not a live repository probe: an order whose
+**root** `lab_account_id` is omitted, nested only in `order_set`, or an unknown UUID is
+placed on the lab's platform account (`lab_account_id: null` on POST and GET, no listed
+`allowed_billing` check), while a root ID naming a listed account keeps its identity and
+policy. `expected-contract` keeps the strict behavior (unknown ID → 400, omission → the
+house account).
+
 The explicit profiles also accept `order_set.add_on` with `provider_ids` or `marker_ids`
 from one lab's configured marker catalog. The selected markers determine the synthetic
 custom panel; unresolved or cross-lab combinations refuse without placing an order.

package/dist/{chunk-WMJJYHRV.js → chunk-HJJCEIVH.js}

@@ -12,7 +12,7 @@ import {
   pullCorpus,
   resolveAdminPrefix,
   restoreClock
-} from "./chunk-ZRF3DDJ4.js";
+} from "./chunk-VHVGQ3WX.js";
 import {
   defaultCorpus
 } from "./chunk-2FZJPMTR.js";
@@ -3026,7 +3026,7 @@ async function preflightFleet(config, options) {
             break;
         }
       }
-      targets.set(name, { ...target, packageVersion: packageVersion ?? "3.6.0" });
+      targets.set(name, { ...target, packageVersion: packageVersion ?? "3.6.1" });
     } catch (error) {
       throw new Error(`service ${name}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
@@ -5135,4 +5135,4 @@ export {
   createServer2 as createServer,
   serveTarget
 };
-//# sourceMappingURL=chunk-WMJJYHRV.js.map
+//# sourceMappingURL=chunk-HJJCEIVH.js.map

package/dist/{chunk-ZRF3DDJ4.js → chunk-VHVGQ3WX.js}

@@ -3692,7 +3692,7 @@ var stateAdminRoutes = (routes) => {
 };
 
 // ../core/dist/version.js
-var PACKAGE_VERSION = true ? "3.6.0" : UNRELEASED_VERSION;
+var PACKAGE_VERSION = true ? "3.6.1" : UNRELEASED_VERSION;
 
 // ../core/dist/webhooks.js
 var json4 = (status, body) => new Response(JSON.stringify(body), {
@@ -9477,9 +9477,11 @@ var orderHandlers = (state) => ({
     const stateError2 = labStateSupportError(labTest, address.state);
     if (stateError2) throw new HttpError(400, { detail: stateError2 });
     const labSlug = typeof labTest.lab?.slug === "string" ? labTest.lab.slug.toLowerCase() : "";
-    const labAccount = selectLabAccount(
+    const requestedAccountId = typeof body.lab_account_id === "string" ? body.lab_account_id : null;
+    const sandboxPlatformFallback = state.labAccountBehavior.profile === "sandbox-observed" && PLATFORM_ACCOUNT_LABS.includes(labSlug) && (requestedAccountId === null || !state.listLabAccounts().some((a) => a.id === requestedAccountId));
+    const labAccount = sandboxPlatformFallback ? "platform" : selectLabAccount(
       labSlug,
-      typeof body.lab_account_id === "string" ? body.lab_account_id : null,
+      requestedAccountId,
       state.teamId,
       state.listLabAccounts(),
       state.labAccountOmissionPolicies
@@ -13116,4 +13118,4 @@ export {
   JunctionAPI,
   LabAccountConflict
 };
-//# sourceMappingURL=chunk-ZRF3DDJ4.js.map
+//# sourceMappingURL=chunk-VHVGQ3WX.js.map