promote: test → main (POST sessions + sandbox cleanup)

[sweetmantech]

Summary

Promotes the following recently-merged test changes into main:

• feat(sessions): port POST /api/sessions from open-agents #515 — feat(sessions): port POST /api/sessions from open-agents — new endpoint creating session + initial chat with rollback, full TDD coverage
• chore(sandbox): delete dead Claude Code helpers (Phase 2.3) #512 — chore(sandbox): delete dead Claude Code helpers (Phase 2.3)
• refactor(sandbox): callers use open-agents abstraction (Phase 2.2) #509 — refactor(sandbox): callers use open-agents abstraction (Phase 2.2)

Test plan

• All checks green on test (verified before opening this promote-PR)
• POST /api/sessions verified end-to-end on the test preview deployment

---

Summary by cubic

Promotes the new POST /api/sessions endpoint and sandbox cleanup from test to main. Adds session creation with an initial chat and migrates sandbox callers to the open-agents abstraction while removing dead helpers.

• New Features

  • POST /api/sessions: creates a session and its first chat; rolls back the session if chat insert fails; returns { session, chat }; includes OPTIONS for CORS and no-cache directives.
  • Validation and defaults: Privy/x-api-key auth, Zod body parsing, random city title fallback when no title is provided, and sensible defaults (status=running, sandbox_state.type=vercel) with a response shape matching open-agents.

• Refactors

  • Sandbox: callers now use the open-agents abstraction; removed unused helpers installClaudeCode, runClaudeCode, getOrCreateSandbox, and getActiveSandbox.
  • Types/DB: regenerated types/database.types.ts for sessions, chats, and related tables; added Supabase helpers for inserts/selects/deletes.

^{Written for commit 4c17ee7. Summary will update on new commits.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
api	Ready	Preview	May 4, 2026 11:26pm

[coderabbitai]

Warning

Rate limit exceeded

@sweetmantech has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 32 minutes and 49 seconds before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 34f19136-1041-462f-8aa9-fb69cf0816b1

📥 Commits

Reviewing files that changed from the base of the PR and between e3ca74c and 4c17ee7.

⛔ Files ignored due to path filters (11)

• app/api/sessions/__tests__/route.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by app/**
• lib/sessions/__tests__/baseChatRow.ts is excluded by !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/baseSessionRow.ts is excluded by !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/buildSessionInsertRow.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/createSessionHandler.persistence.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/createSessionHandler.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/getRandomCityName.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/makeCreateSessionReq.ts is excluded by !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/resolveSessionTitle.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• lib/sessions/__tests__/validateCreateSessionBody.test.ts is excluded by !**/*.test.*, !**/__tests__/** and included by lib/**
• types/database.types.ts is excluded by none and included by none

📒 Files selected for processing (14)

• app/api/sessions/route.ts
• lib/sessions/buildSessionInsertRow.ts
• lib/sessions/cityNames.ts
• lib/sessions/createSessionHandler.ts
• lib/sessions/failedToCreateSession.ts
• lib/sessions/getRandomCityName.ts
• lib/sessions/resolveSessionTitle.ts
• lib/sessions/toChatResponse.ts
• lib/sessions/toSessionResponse.ts
• lib/sessions/validateCreateSessionBody.ts
• lib/supabase/chats/insertChat.ts
• lib/supabase/sessions/deleteSessionById.ts
• lib/supabase/sessions/insertSession.ts
• lib/supabase/sessions/selectSessions.ts

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch test

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

4 issues found across 25 files

Confidence score: 4/5

• This PR is likely safe to merge: the reported findings are maintainability and module-structure convention issues, with no concrete runtime bug, security, or data-loss risk called out.
• The highest-severity item is in lib/sessions/cityNames.ts (5/10): exceeding the 100-line style limit mainly increases maintenance burden and review complexity rather than causing immediate user-facing regressions.
• There is moderate convention drift in app/api/sessions/route.ts and lib/sessions/cityNames.ts around single-primary-export rules, which can reduce consistency and discoverability but appears non-blocking for functionality.
• Pay close attention to lib/sessions/cityNames.ts, app/api/sessions/route.ts, lib/sessions/__tests__/createSessionHandler.persistence.test.ts - style and export-pattern deviations may compound maintenance overhead if left as-is.

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="lib/sessions/__tests__/createSessionHandler.persistence.test.ts">

<violation number="1" location="lib/sessions/__tests__/createSessionHandler.persistence.test.ts:1">
P3: Custom agent: **Enforce Clear Code Style and Maintainability Practices**

Test file exceeds the repository’s 100-line maintainability limit.</violation>
</file>

<file name="app/api/sessions/route.ts">

<violation number="1" location="app/api/sessions/route.ts:10">
P2: Custom agent: **Module should export a single primary function whose name matches the filename**

Module exports multiple top-level functions instead of a single primary export matching the file basename.</violation>
</file>

<file name="lib/sessions/cityNames.ts">

<violation number="1" location="lib/sessions/cityNames.ts:7">
P2: Custom agent: **Module should export a single primary function whose name matches the filename**

Module does not export a single primary function matching the filename; it exports a constant array instead.</violation>

<violation number="2" location="lib/sessions/cityNames.ts:7">
P2: Custom agent: **Enforce Clear Code Style and Maintainability Practices**

File exceeds the 100-line limit required by the style rule.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[cubic-dev-ai]

P2: Custom agent: Module should export a single primary function whose name matches the filename

Module exports multiple top-level functions instead of a single primary export matching the file basename.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At app/api/sessions/route.ts, line 10:

<comment>Module exports multiple top-level functions instead of a single primary export matching the file basename.</comment>

<file context>
@@ -0,0 +1,29 @@
+ *
+ * @returns A NextResponse with CORS headers.
+ */
+export async function OPTIONS() {
+  return new NextResponse(null, {
+    status: 200,
</file context>

[cubic-dev-ai]

P2: Custom agent: Module should export a single primary function whose name matches the filename

Module does not export a single primary function matching the filename; it exports a constant array instead.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At lib/sessions/cityNames.ts, line 7:

<comment>Module does not export a single primary function matching the filename; it exports a constant array instead.</comment>

<file context>
@@ -0,0 +1,198 @@
+ * Ported verbatim from open-agents so generated titles look familiar
+ * to the existing frontend.
+ */
+export const cityNames: readonly string[] = [
+  // Africa
+  "Abidjan",
</file context>

[cubic-dev-ai]

P2: Custom agent: Enforce Clear Code Style and Maintainability Practices

File exceeds the 100-line limit required by the style rule.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At lib/sessions/cityNames.ts, line 7:

<comment>File exceeds the 100-line limit required by the style rule.</comment>

<file context>
@@ -0,0 +1,198 @@
+ * Ported verbatim from open-agents so generated titles look familiar
+ * to the existing frontend.
+ */
+export const cityNames: readonly string[] = [
+  // Africa
+  "Abidjan",
</file context>

[cubic-dev-ai]

P3: Custom agent: Enforce Clear Code Style and Maintainability Practices

Test file exceeds the repository’s 100-line maintainability limit.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At lib/sessions/__tests__/createSessionHandler.persistence.test.ts, line 1:

<comment>Test file exceeds the repository’s 100-line maintainability limit.</comment>

<file context>
@@ -0,0 +1,110 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+
+import { validateCreateSessionBody } from "@/lib/sessions/validateCreateSessionBody";
</file context>