Files
openworker/tests
Devika VermaandClaude Fable 5.1 3ca3a6711f Sandbox: a provider change rebuilds live sessions built under the old rule (ISSUE 10)
Seen 2026-09-28 on WSL: the UI reconnected three sessions 12 s before the
user turned the sandbox on, so their engines were built direct; after the
switch the page said "sessions are refused" while those sessions kept
running commands on the host with the user's full access.

- `SessionManager.apply_sandbox_setting()`: every live engine whose
  workspace provider differs from the one a new engine would get is
  dropped (its sandbox closed) so the next connection rebuilds it under
  the new rule, and is refused if that rule cannot be met; a running turn
  is marked stale and rebuilt when it ends (`_refresh_session_tools`).
- `POST /v1/settings/sandbox` calls it when `provider` is in the body and
  returns `rebuilt_sessions`.
- The app: SettingsView reports them (`onSandboxProviderChanged`); App
  bumps `connectNonce` when the session on screen is among them, so its
  socket reconnects and the server rebuilds (or refuses) it at once.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-09-28 13:32:47 +05:30
..
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00
2026-07-21 11:09:41 -07:00