fix(mothership): own sandbox profile at the code tool boundary

Author: Sg312

apps/sim/lib/mothership/agent-cli/saved-run-read.postgres.test.ts

@@ -2307,7 +2307,6 @@ describe.skipIf(!process.env.MSHIP_TEST_DATABASE_URL)(
           toolCallId: generateId(),
           copilotToolExecution: true,
           copilotInteractionMode: 'interactive',
-          sandboxProfile: 'mothership',
           userPermission: 'write',
           resolvedSecretTraceRegistry: new ResolvedSecretTraceRegistry([], {
             userId: 'run-reader',
@@ -2682,7 +2681,6 @@ describe.skipIf(!process.env.MSHIP_TEST_DATABASE_URL)(
               chatId,
               toolCallId: generateId(),
               copilotToolExecution: true,
-              sandboxProfile: 'mothership',
             }
             const mediaReference = await resolveCopilotWorkspaceFileReference(
               context,

apps/sim/lib/mothership/request/lifecycle/run.test.ts

@@ -574,46 +574,6 @@ describe('runCopilotLifecycle', () => {
     expect(sentBody).not.toHaveProperty('systemPromptOverride')
   })
 
-  it.each([
-    { goRoute: undefined, expected: 'mothership' },
-    { goRoute: '/api/copilot', expected: 'mothership' },
-    { goRoute: '/api/mothership-unknown', expected: undefined },
-    { goRoute: '/api/mothership', expected: 'mothership' },
-    { goRoute: '/api/mothership/execute', expected: 'mothership' },
-  ])(
-    'derives the sandbox profile from the trusted Go route ($goRoute)',
-    async ({ goRoute, expected }) => {
-      let sandboxProfile: ExecutionContext['sandboxProfile']
-      mockRunStreamLoop.mockImplementationOnce(
-        async (
-          _url: string,
-          _request: RequestInit,
-          _streamingContext: StreamingContext,
-          context: ExecutionContext
-        ) => {
-          sandboxProfile = context.sandboxProfile
-        }
-      )
-
-      await runCopilotLifecycle(
-        { message: 'hello', messageId: `sandbox-profile-${goRoute ?? 'default'}` },
-        {
-          userId: 'user-1',
-          workspaceId: 'ws-1',
-          ...(goRoute ? { goRoute } : {}),
-          executionContext: {
-            userId: 'user-1',
-            workflowId: '',
-            workspaceId: 'ws-1',
-            sandboxProfile: 'mothership',
-          },
-        }
-      )
-
-      expect(sandboxProfile).toBe(expected)
-    }
-  )
-
   it('does not infer model provenance from a dormant environment catalog', async () => {
     const registry = new ResolvedSecretTraceRegistry([
       {

apps/sim/lib/mothership/request/lifecycle/run.ts

@@ -82,12 +82,6 @@ import type { ResolvedSecretTraceRegistry } from '@/executor/utils/resolved-secr
 
 const logger = createLogger('CopilotLifecycle')
 
-const MOTHERSHIP_CODE_TOOL_ROUTES = new Set([
-  '/api/copilot',
-  '/api/mothership',
-  '/api/mothership/execute',
-])
-
 const COPILOT_MODEL_CONTENT_PROJECTION_ERROR = 'Copilot model input could not be safely projected'
 
 class CopilotModelContentProjectionError extends Error {
@@ -370,11 +364,6 @@ export async function runCopilotLifecycle(
     }
     execContext.copilotInteractionMode =
       lifecycleOptions.interactive === true ? 'interactive' : 'headless'
-    if (goRoute && MOTHERSHIP_CODE_TOOL_ROUTES.has(goRoute)) {
-      execContext.sandboxProfile = 'mothership'
-    } else {
-      execContext.sandboxProfile = undefined
-    }
     if (
       isHosted &&
       (!(execContext.workspaceId || execContext.organizationId) || !execContext.billingAttribution)

apps/sim/lib/mothership/request/tools/executor.test.ts

@@ -290,7 +290,6 @@ describe('buildToolExecutionContext', () => {
       userId: 'user-1',
       workflowId: 'workflow-1',
       runId: 'run-1',
-      sandboxProfile: 'mothership',
     }
 
     expect(
@@ -303,7 +302,6 @@ describe('buildToolExecutionContext', () => {
       )
     ).toMatchObject({
       runId: 'run-1',
-      sandboxProfile: 'mothership',
       toolCallId: 'call-1',
       parentToolCallId: 'parent-1',
     })

apps/sim/lib/mothership/tool-executor/types.ts

@@ -1,5 +1,5 @@
 import type { BillingAttributionSnapshot } from '@/lib/billing/core/billing-attribution'
-import type { MothershipResource, MothershipResourceUpdate } from '@/lib/mothership/resources/types'
+import type { MothershipResourceUpdate } from '@/lib/mothership/resources/types'
 import type { SecretMountPolicy } from '@/lib/mothership/secret-mount-policy'
 import type { WorkspaceSearchFilters } from '@/lib/knowledge/search/filters'
 import type { ExecutorDelegationOrigin } from '@/executor/types'
@@ -32,8 +32,6 @@ export interface ToolExecutionContext {
   copilotToolExecution?: boolean
   /** Trusted lifecycle classification stamped by the server, never from model parameters. */
   copilotInteractionMode?: 'interactive' | 'headless'
-  /** Server-owned base image selected from the fixed Go route for this turn. */
-  sandboxProfile?: 'mothership'
   requestMode?: string
   assistantSearch?: WorkspaceSearchFilters
   currentAgentId?: string

apps/sim/lib/mothership/tools/handlers/function-execute-file-mounts.test.ts

@@ -69,7 +69,6 @@ const context: ToolExecutionContext = {
   chatId: 'chat',
   toolCallId: 'mount',
   copilotToolExecution: true,
-  sandboxProfile: 'mothership',
 }
 
 function queueProvenance(status: 'exact' | 'unknown', currentRevision = revision, secret = false) {

apps/sim/lib/mothership/tools/handlers/function-execute-session.test.ts

@@ -49,7 +49,6 @@ const BASE_CONTEXT: ToolExecutionContext = {
   userId: 'user-1',
   workflowId: '',
   workspaceId: 'ws-1',
-  sandboxProfile: 'mothership',
 }
 
 describe('executeFunctionExecute session plumbing', () => {
@@ -159,6 +158,26 @@ describe.each([
   })
   afterEach(clearHandlers)
 
+  it('owns the Mothership profile for direct callback and checkpoint dispatch', async () => {
+    const params = {
+      code: "return { template: '{{API_KEY}}' }",
+      language: 'javascript',
+      sandboxProfile: 'model-supplied',
+      internalSandboxProfile: 'model-supplied',
+    }
+    const result = await executeTool(toolId, params, {
+      ...BASE_CONTEXT,
+      copilotToolExecution: true,
+      userPermission: 'write',
+    })
+    expect(result.success).toBe(true)
+    const [, input, options] = mockExecuteTool.mock.calls[0]
+    expect(input.code).toBe(params.code)
+    expect(input).not.toHaveProperty('sandboxProfile')
+    expect(input).not.toHaveProperty('internalSandboxProfile')
+    expect(options.internalSandboxProfile).toBe('mothership')
+  })
+
   it.each([
     { timeout: undefined, expected: 60_000 },
     { timeout: 0.5, expected: 500 },

apps/sim/lib/mothership/tools/handlers/function-execute-table-mounts.test.ts

@@ -71,7 +71,6 @@ const context: ToolExecutionContext = {
   chatId: 'chat',
   toolCallId: 'mount-call',
   copilotToolExecution: true,
-  sandboxProfile: 'mothership',
 }
 const table: TableDefinition = {
   id: 'table-orders',

apps/sim/lib/mothership/tools/handlers/function-execute.ts

@@ -572,7 +572,7 @@ export async function executeFunctionExecute(
           resolvedSecretTraceRegistry: mountedRegistry,
         },
         ...(context.abortSignal ? { signal: context.abortSignal } : {}),
-        ...(context.sandboxProfile ? { internalSandboxProfile: context.sandboxProfile } : {}),
+        internalSandboxProfile: 'mothership',
       })
       crossingValue = result
       return result