fix(sandbox): avoid sandboxing main DM sessions

src/gateway/server.auth.test.ts

@@ -131,6 +131,13 @@ describe("gateway server auth/connect", () => {
     { timeout: 15000 },
     async () => {
       const { server, ws } = await startServerWithClient();
+      const closeInfoPromise = new Promise<{ code: number; reason: string }>(
+        (resolve) => {
+          ws.once("close", (code, reason) =>
+            resolve({ code, reason: reason.toString() }),
+          );
+        },
+      );
 
       ws.send(
         JSON.stringify({
@@ -164,18 +171,7 @@ describe("gateway server auth/connect", () => {
         "invalid connect params",
       );
 
-      const closeInfo = await new Promise<{ code: number; reason: string }>(
-        (resolve, reject) => {
-          const timer = setTimeout(
-            () => reject(new Error("close timeout")),
-            3000,
-          );
-          ws.once("close", (code, reason) => {
-            clearTimeout(timer);
-            resolve({ code, reason: reason.toString() });
-          });
-        },
-      );
+      const closeInfo = await closeInfoPromise;
       expect(closeInfo.code).toBe(1008);
       expect(closeInfo.reason).toContain("invalid connect params");
 

src/gateway/server.ts

@@ -1480,6 +1480,13 @@ export async function startGatewayServer(
                 ? `invalid connect params: ${formatValidationErrors(validateConnectParams.errors)}`
                 : "invalid handshake: first request must be connect"
               : "invalid request frame";
+            handshakeState = "failed";
+            setCloseCause("invalid-handshake", {
+              frameType,
+              frameMethod,
+              frameId,
+              handshakeError,
+            });
             if (isRequestFrame) {
               const req = parsed as RequestFrame;
               send({
@@ -1493,13 +1500,6 @@ export async function startGatewayServer(
                 `invalid handshake conn=${connId} remote=${remoteAddr ?? "?"}`,
               );
             }
-            handshakeState = "failed";
-            setCloseCause("invalid-handshake", {
-              frameType,
-              frameMethod,
-              frameId,
-              handshakeError,
-            });
             const closeReason = truncateCloseReason(
               handshakeError || "invalid handshake",
             );