orizu 0.5.4 → 0.5.6

package/dist/hosted-bootstrap.js

@@ -24,7 +24,7 @@
  */
 import { sweepForTokenResidue } from './daytona-slice.js';
 import { redactSecrets } from './secret-redaction.js';
-import { BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, PREBAKED_MARKER_PATH, REPO_CRED_CACHE_BASENAME, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
 function newEventId() {
     const cryptoObj = globalThis.crypto;
     if (cryptoObj?.randomUUID)
@@ -236,6 +236,11 @@ export async function bootstrapHostedSandbox(opts) {
         // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
         await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`);
         await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`);
+        // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+        // without this every agent `git commit` dies with "Author identity unknown"
+        // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+        await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`);
+        await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`);
         record('repo_cloned', true, `cloned ${opts.sessionBranch}`);
         await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir });
         // 4 — Provision the Orizu CLI (non-fatal, recorded — OpenInspect setup.sh

package/dist/hosted-harness-opencode.js

@@ -48,6 +48,7 @@
  *     `OPENCODE_PINNED_VERSION`; a bump that switches OpenCode to CRLF framing
  *     would break both ports and must be re-verified.
  */
+import { readFileSync } from 'fs';
 // OpenCode is HARD-PINNED to this version everywhere it is installed/launched.
 // AUDIT RISK #1 (SSE fragility): the entire event model rides OpenCode's
 // undocumented `/event` SSE part schema (`message.part.updated`, `session.idle`,
@@ -696,15 +697,34 @@ export function buildOpenCodeConfigContent(opts) {
         permission: opts.permission ?? { '*': { '*': 'allow' } },
     });
 }
+const OPENCODE_READY_TIMEOUT_MS = 180_000;
+const OPENCODE_READY_POLL_MS = 500;
+const OPENCODE_READY_PROBE_TIMEOUT_MS = 2_000;
+const OPENCODE_LOG_TAIL_BYTES = 2_000;
+function readLogTail(logPath) {
+    if (!logPath)
+        return null;
+    try {
+        const content = readFileSync(logPath, 'utf8');
+        if (!content.trim())
+            return null;
+        return content.slice(-OPENCODE_LOG_TAIL_BYTES).trim();
+    }
+    catch {
+        return null;
+    }
+}
 /**
- * Launch `opencode serve` locally. Process supervision is intentionally minimal
- * for this slice — P3.5 runs this INSIDE the Daytona sandbox via the CLI. The
- * pinned version (`OPENCODE_PINNED_VERSION`) is the one the sandbox image must
- * install (see the SSE-fragility note on that constant). Returns the localhost
- * base URL the driver connects to; callers still `start()`/`runPrompt()` the
- * harness against it.
+ * Launch `opencode serve` locally and WAIT until it answers HTTP. OpenCode's
+ * first boot performs a one-time sqlite migration before it listens; returning
+ * the baseUrl without waiting raced the harness's first `POST /session` into a
+ * connection-refused "fetch failed" (ALI-1034, found live in QA-3). Any HTTP
+ * status counts as ready — we only need the socket to be accepting. Process
+ * supervision is otherwise intentionally minimal for this slice; the pinned
+ * version (`OPENCODE_PINNED_VERSION`) is the one the sandbox image must install
+ * (see the SSE-fragility note on that constant).
  */
-export function spawnOpenCode(opts) {
+export async function spawnOpenCode(opts) {
     const port = opts.port ?? DEFAULT_OPENCODE_PORT;
     const env = {
         OPENCODE_CONFIG_CONTENT: buildOpenCodeConfigContent(opts),
@@ -724,6 +744,45 @@ export function spawnOpenCode(opts) {
                 stderr: 'ignore',
             });
         });
-    const child = spawnImpl(cmd, { cwd: opts.cwd, env });
-    return { baseUrl: `http://localhost:${port}`, port, stop: () => child.kill() };
+    const child = spawnImpl(cmd, { cwd: opts.cwd, env, logPath: opts.logPath });
+    const baseUrl = `http://localhost:${port}`;
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    const timeoutMs = opts.readyTimeoutMs ?? OPENCODE_READY_TIMEOUT_MS;
+    const pollMs = opts.readyPollMs ?? OPENCODE_READY_POLL_MS;
+    const startedAt = Date.now();
+    for (;;) {
+        if (opts.signal?.aborted) {
+            child.kill();
+            throw new Error('opencode serve readiness wait aborted');
+        }
+        try {
+            const probe = new AbortController();
+            const timer = setTimeout(() => probe.abort(), OPENCODE_READY_PROBE_TIMEOUT_MS);
+            // Link the run signal so an abort tears down an in-flight probe
+            // immediately instead of waiting out the per-probe timeout.
+            const probeSignal = opts.signal ? AbortSignal.any([opts.signal, probe.signal]) : probe.signal;
+            try {
+                // Any HTTP response (even 404) proves the server is accepting.
+                const res = await fetchImpl(`${baseUrl}/session`, { signal: probeSignal });
+                await cancelBody(res.body);
+                break;
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        catch {
+            // not listening yet — fall through to the timeout check + sleep
+        }
+        // Soft budget: checked between probes, so the total wait can overrun by up
+        // to one probe timeout + poll interval. Negligible against the default.
+        if (Date.now() - startedAt >= timeoutMs) {
+            child.kill();
+            const tail = readLogTail(opts.logPath);
+            throw new Error(`opencode serve did not become ready on ${baseUrl} within ${timeoutMs}ms` +
+                (tail ? ` — log tail: ${tail}` : ' (no log output captured)'));
+        }
+        await new Promise(resolve => setTimeout(resolve, pollMs));
+    }
+    return { baseUrl, port, stop: () => child.kill(), readyAfterMs: Date.now() - startedAt };
 }

package/dist/hosted-loop.js

@@ -33,7 +33,8 @@
  * against a fake broker + fake OpenCode server with no real binary.
  */
 import { spawnSync, spawn as nodeSpawn } from 'child_process';
-import { existsSync, readFileSync } from 'fs';
+import { closeSync, existsSync, openSync, readFileSync } from 'fs';
+import { tmpdir } from 'os';
 import { join } from 'path';
 import { PREBAKED_MARKER_PATH, SETUP_HOOK_RELATIVE_PATH, parsePrebakedMarker, } from './hosted-runtime-assets.js';
 import { OPENCODE_PINNED_VERSION, createOpenCodeHarness, spawnOpenCode, } from './hosted-harness-opencode.js';
@@ -218,13 +219,35 @@ function installOpenCodePinned(version) {
 }
 /** Node child_process spawner for `opencode serve` (the sandbox runtime is
  *  node24 — Bun.spawn is not guaranteed present, so spawnOpenCode is given this
- *  runtime-agnostic spawner). */
+ *  runtime-agnostic spawner). When a logPath is provided, opencode's
+ *  stdout/stderr land there so a readiness timeout can surface the real boot
+ *  failure instead of a bare "fetch failed" (ALI-1034). */
 function nodeChildSpawner(cmd, opts) {
+    let stdio = 'ignore';
+    let fd = null;
+    if (opts.logPath) {
+        try {
+            fd = openSync(opts.logPath, 'a');
+            stdio = ['ignore', fd, fd];
+        }
+        catch {
+            // log capture is best-effort — never block the spawn on it
+        }
+    }
     const child = nodeSpawn(cmd[0], cmd.slice(1), {
         cwd: opts.cwd,
         env: { ...process.env, ...opts.env },
-        stdio: 'ignore',
+        stdio,
     });
+    if (fd !== null) {
+        // The child holds its own copy of the descriptor.
+        try {
+            closeSync(fd);
+        }
+        catch {
+            // already closed
+        }
+    }
     return { kill: () => child.kill() };
 }
 export async function runHostedLoop(opts) {
@@ -386,13 +409,25 @@ export async function runHostedLoop(opts) {
                 });
             }
             const spawnImpl = opts.spawnOpenCode ?? spawnOpenCode;
-            spawned = spawnImpl({
+            // The default spawnOpenCode WAITS for the server to answer HTTP before
+            // returning — OpenCode's first boot runs a one-time sqlite migration, and
+            // starting the harness before the server listens raced straight into a
+            // connection-refused "fetch failed" (ALI-1034).
+            spawned = await spawnImpl({
                 model: context.model,
                 cwd: context.workspaceDir,
                 port: context.opencodePort,
                 env: context.anthropicDummyKey ? { ANTHROPIC_API_KEY: context.anthropicDummyKey } : undefined,
                 spawn: nodeChildSpawner,
+                logPath: join(tmpdir(), `opencode-serve-${context.runId}.log`),
+                signal,
             });
+            if (typeof spawned.readyAfterMs === 'number') {
+                await sink.append({
+                    kind: 'artifact',
+                    payload: { step: 'opencode_ready', ok: true, waitedMs: spawned.readyAfterMs },
+                });
+            }
             harness = (opts.createHarness ?? ((baseUrl) => createOpenCodeHarness({ baseUrl })))(spawned.baseUrl);
         }
         const started = await harness.start({

package/dist/hosted-runtime-assets.js

@@ -31,6 +31,14 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000;
 /** Customer setup hook path, relative to the repo root (mirrors OpenInspect's
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh';
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' };
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 /**
  * Absolute path of the marker the pre-baked hosted-runtime image writes at build

package/dist/hosted-session-cli.js

@@ -37,7 +37,7 @@
 import { createLocalSimProvider, } from './sandbox-provider.js';
 import { bootstrapHostedSandbox, createBootstrapRunEventSink, } from './hosted-bootstrap.js';
 import { resumeRunEventSink } from './hosted-run-event-sink.js';
-import { BEARER_BASENAME } from './hosted-runtime-assets.js';
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js';
 import { createVercelProvider } from './vercel-sandbox-provider.js';
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js';
 import { hostedLoopCommand } from './hosted-loop.js';
@@ -355,7 +355,7 @@ export async function startHostedSession(opts) {
         model,
         reasoningEffort: opts.reasoningEffort,
         messageId: `${runId}:task`,
-        author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+        author: AGENT_GIT_IDENTITY,
         anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
         // ALI-1017: skip the in-sandbox opencode install when the image ships it.
         prebaked: prebakedImage,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orizu",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "private": false,
   "type": "module",
   "bin": {

package/src/hosted-bootstrap.ts

@@ -27,6 +27,7 @@ import type { SandboxSession } from './sandbox-provider.js'
 import { sweepForTokenResidue, type HygieneFinding } from './daytona-slice.js'
 import { redactSecrets } from './secret-redaction.js'
 import {
+  AGENT_GIT_IDENTITY,
   BEARER_BASENAME,
   BOOT_CONTEXT_BASENAME,
   DEFAULT_CACHE_REFRESH_BUFFER_MS,
@@ -410,6 +411,11 @@ export async function bootstrapHostedSandbox(opts: HostedBootstrapOptions): Prom
     // Persist the helper repo-LOCAL (never --global) for subsequent fetch/push.
     await session.exec(`git -C ${workspaceDir} config credential.helper ${shellSingleQuote(helperValue)}`)
     await session.exec(`git -C ${workspaceDir} config credential.useHttpPath true`)
+    // Repo-LOCAL agent identity: the sandbox has no ambient git identity, so
+    // without this every agent `git commit` dies with "Author identity unknown"
+    // (ALI-1036, found live in QA-3). Same identity the loop stamps on events.
+    await session.exec(`git -C ${workspaceDir} config user.name ${shellSingleQuote(AGENT_GIT_IDENTITY.name)}`)
+    await session.exec(`git -C ${workspaceDir} config user.email ${shellSingleQuote(AGENT_GIT_IDENTITY.email)}`)
     record('repo_cloned', true, `cloned ${opts.sessionBranch}`)
     await sink.append('repo_cloned', { branch: opts.sessionBranch, workspaceDir })
 

package/src/hosted-harness-opencode.ts

@@ -49,6 +49,8 @@
  *     would break both ports and must be re-verified.
  */
 
+import { readFileSync } from 'fs'
+
 import type {
   AgentHarness,
   HarnessEvent,
@@ -781,24 +783,62 @@ export interface SpawnOpenCodeOptions extends OpenCodeConfigOptions {
   /** Extra env merged over the config-content injection. */
   env?: Record<string, string>
   /** Injectable spawner (defaults to Bun.spawn) so this stays unit-testable. */
-  spawn?: (cmd: string[], opts: { cwd?: string; env: Record<string, string> }) => { kill: () => void }
+  spawn?: (
+    cmd: string[],
+    opts: { cwd?: string; env: Record<string, string>; logPath?: string }
+  ) => { kill: () => void }
+  /** File the spawner should append opencode's stdout/stderr to. On readiness
+   *  timeout its tail is included in the thrown error — the bare "fetch failed"
+   *  this replaces was undiagnosable (ALI-1034). */
+  logPath?: string
+  /** Overall readiness budget. OpenCode's FIRST boot runs a one-time sqlite
+   *  migration ("may take a few minutes") before it listens, so this must
+   *  comfortably cover a cold snapshot. */
+  readyTimeoutMs?: number
+  /** Poll interval while waiting for the server to answer. */
+  readyPollMs?: number
+  /** Abort (e.g. run cancelled) while still waiting for readiness. */
+  signal?: AbortSignal
+  /** Injectable readiness probe (defaults to global fetch) for tests. */
+  fetchImpl?: typeof fetch
 }
 
 export interface SpawnedOpenCode {
   baseUrl: string
   port: number
   stop: () => void
+  /** How long the server took to answer its first request (set by the real
+   *  spawnOpenCode; injected test spawners may omit it). */
+  readyAfterMs?: number
+}
+
+const OPENCODE_READY_TIMEOUT_MS = 180_000
+const OPENCODE_READY_POLL_MS = 500
+const OPENCODE_READY_PROBE_TIMEOUT_MS = 2_000
+const OPENCODE_LOG_TAIL_BYTES = 2_000
+
+function readLogTail(logPath: string | undefined): string | null {
+  if (!logPath) return null
+  try {
+    const content = readFileSync(logPath, 'utf8')
+    if (!content.trim()) return null
+    return content.slice(-OPENCODE_LOG_TAIL_BYTES).trim()
+  } catch {
+    return null
+  }
 }
 
 /**
- * Launch `opencode serve` locally. Process supervision is intentionally minimal
- * for this slice — P3.5 runs this INSIDE the Daytona sandbox via the CLI. The
- * pinned version (`OPENCODE_PINNED_VERSION`) is the one the sandbox image must
- * install (see the SSE-fragility note on that constant). Returns the localhost
- * base URL the driver connects to; callers still `start()`/`runPrompt()` the
- * harness against it.
+ * Launch `opencode serve` locally and WAIT until it answers HTTP. OpenCode's
+ * first boot performs a one-time sqlite migration before it listens; returning
+ * the baseUrl without waiting raced the harness's first `POST /session` into a
+ * connection-refused "fetch failed" (ALI-1034, found live in QA-3). Any HTTP
+ * status counts as ready — we only need the socket to be accepting. Process
+ * supervision is otherwise intentionally minimal for this slice; the pinned
+ * version (`OPENCODE_PINNED_VERSION`) is the one the sandbox image must install
+ * (see the SSE-fragility note on that constant).
  */
-export function spawnOpenCode(opts: SpawnOpenCodeOptions): SpawnedOpenCode {
+export async function spawnOpenCode(opts: SpawnOpenCodeOptions): Promise<SpawnedOpenCode> {
   const port = opts.port ?? DEFAULT_OPENCODE_PORT
   const env: Record<string, string> = {
     OPENCODE_CONFIG_CONTENT: buildOpenCodeConfigContent(opts),
@@ -818,6 +858,47 @@ export function spawnOpenCode(opts: SpawnOpenCodeOptions): SpawnedOpenCode {
         stderr: 'ignore',
       })
     })
-  const child = spawnImpl(cmd, { cwd: opts.cwd, env })
-  return { baseUrl: `http://localhost:${port}`, port, stop: () => child.kill() }
+  const child = spawnImpl(cmd, { cwd: opts.cwd, env, logPath: opts.logPath })
+  const baseUrl = `http://localhost:${port}`
+
+  const fetchImpl = opts.fetchImpl ?? (globalThis.fetch as typeof fetch)
+  const timeoutMs = opts.readyTimeoutMs ?? OPENCODE_READY_TIMEOUT_MS
+  const pollMs = opts.readyPollMs ?? OPENCODE_READY_POLL_MS
+  const startedAt = Date.now()
+  for (;;) {
+    if (opts.signal?.aborted) {
+      child.kill()
+      throw new Error('opencode serve readiness wait aborted')
+    }
+    try {
+      const probe = new AbortController()
+      const timer = setTimeout(() => probe.abort(), OPENCODE_READY_PROBE_TIMEOUT_MS)
+      // Link the run signal so an abort tears down an in-flight probe
+      // immediately instead of waiting out the per-probe timeout.
+      const probeSignal = opts.signal ? AbortSignal.any([opts.signal, probe.signal]) : probe.signal
+      try {
+        // Any HTTP response (even 404) proves the server is accepting.
+        const res = await fetchImpl(`${baseUrl}/session`, { signal: probeSignal })
+        await cancelBody(res.body)
+        break
+      } finally {
+        clearTimeout(timer)
+      }
+    } catch {
+      // not listening yet — fall through to the timeout check + sleep
+    }
+    // Soft budget: checked between probes, so the total wait can overrun by up
+    // to one probe timeout + poll interval. Negligible against the default.
+    if (Date.now() - startedAt >= timeoutMs) {
+      child.kill()
+      const tail = readLogTail(opts.logPath)
+      throw new Error(
+        `opencode serve did not become ready on ${baseUrl} within ${timeoutMs}ms` +
+          (tail ? ` — log tail: ${tail}` : ' (no log output captured)')
+      )
+    }
+    await new Promise(resolve => setTimeout(resolve, pollMs))
+  }
+
+  return { baseUrl, port, stop: () => child.kill(), readyAfterMs: Date.now() - startedAt }
 }

package/src/hosted-loop.ts

@@ -34,7 +34,8 @@
  */
 
 import { spawnSync, spawn as nodeSpawn } from 'child_process'
-import { existsSync, readFileSync } from 'fs'
+import { closeSync, existsSync, openSync, readFileSync } from 'fs'
+import { tmpdir } from 'os'
 import { join } from 'path'
 
 import type { AgentHarness, HarnessEvent, HarnessPrompt } from './hosted-harness.js'
@@ -156,7 +157,7 @@ export interface RunHostedLoopOptions {
   /** Build the in-process Claude-Agent-SDK harness (default: real SDK loader).
    *  Injectable so the swap test drives a fake `query()` with no real SDK. */
   createClaudeHarness?: () => AgentHarness
-  spawnOpenCode?: (opts: SpawnOpenCodeOptions) => SpawnedOpenCode
+  spawnOpenCode?: (opts: SpawnOpenCodeOptions) => SpawnedOpenCode | Promise<SpawnedOpenCode>
   installOpenCode?: () => Promise<InstallResult>
   now?: () => number
   signal?: AbortSignal
@@ -402,16 +403,36 @@ function installOpenCodePinned(version: string): InstallResult {
 
 /** Node child_process spawner for `opencode serve` (the sandbox runtime is
  *  node24 — Bun.spawn is not guaranteed present, so spawnOpenCode is given this
- *  runtime-agnostic spawner). */
+ *  runtime-agnostic spawner). When a logPath is provided, opencode's
+ *  stdout/stderr land there so a readiness timeout can surface the real boot
+ *  failure instead of a bare "fetch failed" (ALI-1034). */
 function nodeChildSpawner(
   cmd: string[],
-  opts: { cwd?: string; env: Record<string, string> }
+  opts: { cwd?: string; env: Record<string, string>; logPath?: string }
 ): { kill: () => void } {
+  let stdio: 'ignore' | Array<'ignore' | number> = 'ignore'
+  let fd: number | null = null
+  if (opts.logPath) {
+    try {
+      fd = openSync(opts.logPath, 'a')
+      stdio = ['ignore', fd, fd]
+    } catch {
+      // log capture is best-effort — never block the spawn on it
+    }
+  }
   const child = nodeSpawn(cmd[0], cmd.slice(1), {
     cwd: opts.cwd,
     env: { ...process.env, ...opts.env },
-    stdio: 'ignore',
+    stdio,
   })
+  if (fd !== null) {
+    // The child holds its own copy of the descriptor.
+    try {
+      closeSync(fd)
+    } catch {
+      // already closed
+    }
+  }
   return { kill: () => child.kill() }
 }
 
@@ -575,13 +596,25 @@ export async function runHostedLoop(opts: RunHostedLoopOptions): Promise<HostedL
       }
 
       const spawnImpl = opts.spawnOpenCode ?? spawnOpenCode
-      spawned = spawnImpl({
+      // The default spawnOpenCode WAITS for the server to answer HTTP before
+      // returning — OpenCode's first boot runs a one-time sqlite migration, and
+      // starting the harness before the server listens raced straight into a
+      // connection-refused "fetch failed" (ALI-1034).
+      spawned = await spawnImpl({
         model: context.model,
         cwd: context.workspaceDir,
         port: context.opencodePort,
         env: context.anthropicDummyKey ? { ANTHROPIC_API_KEY: context.anthropicDummyKey } : undefined,
         spawn: nodeChildSpawner,
+        logPath: join(tmpdir(), `opencode-serve-${context.runId}.log`),
+        signal,
       })
+      if (typeof spawned.readyAfterMs === 'number') {
+        await sink.append({
+          kind: 'artifact',
+          payload: { step: 'opencode_ready', ok: true, waitedMs: spawned.readyAfterMs },
+        })
+      }
 
       harness = (opts.createHarness ?? ((baseUrl: string) => createOpenCodeHarness({ baseUrl })))(
         spawned.baseUrl

package/src/hosted-runtime-assets.ts

@@ -35,6 +35,15 @@ export const DEFAULT_CACHE_REFRESH_BUFFER_MS = 5 * 60 * 1000
  *  `.openinspect/setup.sh` — fresh-boot only, non-fatal, output captured). */
 export const SETUP_HOOK_RELATIVE_PATH = '.orizu/setup.sh'
 
+/**
+ * The git author identity for hosted-agent commits. Bootstrap configures it
+ * repo-LOCAL in the sandbox clone (never --global) so agent `git commit` works
+ * out of the box — the sandbox has no ambient identity and commits died with
+ * "Author identity unknown" (ALI-1036, found live in QA-3). The loop uses the
+ * same identity for run-event attribution; keep them identical.
+ */
+export const AGENT_GIT_IDENTITY = { name: 'Orizu Agent', email: 'agent@orizu.ai' } as const
+
 // -- Pre-baked runtime marker (ALI-1017) -------------------------------------
 
 /**

package/src/hosted-session-cli.ts

@@ -49,7 +49,7 @@ import {
   type HostedRuntimePaths,
 } from './hosted-bootstrap.js'
 import { resumeRunEventSink } from './hosted-run-event-sink.js'
-import { BEARER_BASENAME } from './hosted-runtime-assets.js'
+import { AGENT_GIT_IDENTITY, BEARER_BASENAME } from './hosted-runtime-assets.js'
 import { createVercelProvider } from './vercel-sandbox-provider.js'
 import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.js'
 import { hostedLoopCommand, type HostedLoopContext } from './hosted-loop.js'
@@ -534,7 +534,7 @@ export async function startHostedSession(
     model,
     reasoningEffort: opts.reasoningEffort,
     messageId: `${runId}:task`,
-    author: { name: 'Orizu Agent', email: 'agent@orizu.ai' },
+    author: AGENT_GIT_IDENTITY,
     anthropicDummyKey: opts.modelApiKey ? ANTHROPIC_DUMMY_KEY : undefined,
     // ALI-1017: skip the in-sandbox opencode install when the image ships it.
     prebaked: prebakedImage,