@opengeni/api-router 3.0.2-canary.38894290271001 → 3.1.2

package/dist/app.js

@@ -28,7 +28,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-GBUJ2DYZ.js";
+} from "./chunk-OT56OY4V.js";
 import "./chunk-OGQDXVXY.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,

package/dist/{chunk-GBUJ2DYZ.js → chunk-OT56OY4V.js}

@@ -16036,9 +16036,6 @@ async function withChannelAOperation(services, ctx, readOnly, fn) {
   const onSandboxOperation = services.observability ? sandboxOperationMetricObserver(services.observability) : void 0;
   const onSandboxCaptureWait = services.observability ? sandboxCaptureWaitMetricObserver(services.observability) : void 0;
   const { accountId, workspaceId, session } = ctx;
-  if (session.sandboxBackend === "none") {
-    throw new HTTPException21(409, { message: "sandbox not available" });
-  }
   const sandboxGroupId = session.sandboxGroupId;
   const requestId = crypto.randomUUID();
   const holderId = `direct:${requestId}`;
@@ -16047,7 +16044,12 @@ async function withChannelAOperation(services, ctx, readOnly, fn) {
   const leaseTtlMs = settings.sandboxLeaseTtlMs;
   let machineAuthorityResult;
   const machineAuthority = () => machineAuthorityResult ??= channelAMachineAuthority(db, ctx);
-  const settingsForSession = session.sandboxBackend !== settings.sandboxBackend ? { ...settings, sandboxBackend: session.sandboxBackend } : settings;
+  const machineOnlyHome = session.sandboxBackend === "none";
+  if (machineOnlyHome && !(await readActiveSandbox(db, workspaceId, session.id))?.activeSandboxId) {
+    throw new HTTPException21(409, { message: "sandbox not available" });
+  }
+  const effectiveBackend = machineOnlyHome ? "selfhosted" : session.sandboxBackend;
+  const settingsForSession = effectiveBackend !== settings.sandboxBackend ? { ...settings, sandboxBackend: effectiveBackend } : settings;
   const environment = stableSandboxEnvironmentForRun(settingsForSession, { workspaceId });
   if (hasGitCredentialRepositorySelection(session.resources)) {
     applyGitAuthPointerEnvironment(
@@ -16091,12 +16093,15 @@ async function withChannelAOperation(services, ctx, readOnly, fn) {
     await routingSession.finalizeOpStreamOps().catch(() => void 0);
     return result2;
   };
-  if (session.sandboxBackend === "selfhosted") {
+  if (effectiveBackend === "selfhosted") {
     let established2;
     try {
       ctx.waitSignal?.throwIfAborted();
       const pointer = await readActiveSandbox(db, workspaceId, session.id);
       if (!pointer?.activeSandboxId) {
+        if (machineOnlyHome) {
+          throw new HTTPException21(409, { message: "sandbox not available" });
+        }
         const groupBackend = managedSessionGroupBackend(
           settings.sandboxBackend,
           session.sandboxBackend
@@ -146324,4 +146329,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-GBUJ2DYZ.js.map
+//# sourceMappingURL=chunk-OT56OY4V.js.map