orizu 0.5.40 → 0.5.41

package/dist/dataset-clone-workflow.d.ts

@@ -0,0 +1,11 @@
+import { Schema } from 'effect';
+declare const ClonedDataset: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+    readonly rowCount: Schema.Number;
+    readonly parentDatasetId: Schema.String;
+}>;
+export type ClonedDataset = typeof ClonedDataset.Type;
+export declare function cloneDataset(datasetId: string, name: string | null): Promise<ClonedDataset>;
+export {};
+//# sourceMappingURL=dataset-clone-workflow.d.ts.map

package/dist/dataset-clone-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset-clone-workflow.d.ts","sourceRoot":"","sources":["../src/dataset-clone-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,MAAM,EAAE,MAAM,QAAQ,CAAA;AAU5D,QAAA,MAAM,aAAa;;;;;EAKjB,CAAA;AAGF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AA6ErD,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAIjG"}

package/dist/dataset-clone-workflow.js

@@ -0,0 +1,100 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { authedFetch } from './http.js';
+import { parseJsonResponse } from './json-response.js';
+// Loaded only through `await import(...)` from dataset-commands, like lock.
+const SERVER_MAY_BE_CREATED = 'Dataset clone may already be created';
+const ClonedDataset = Schema.Struct({
+    id: Schema.String,
+    name: Schema.String,
+    rowCount: Schema.Number,
+    parentDatasetId: Schema.String,
+});
+const CloneReply = Schema.Struct({ dataset: ClonedDataset });
+const ErrorReply = Schema.Struct({ error: Schema.String });
+// A refusal means nothing was cloned. After any other failure once the request
+// was sent, the clone may exist. Unlike lock, cloning again is not harmless: it
+// makes another copy, so the clone is never retried and the user is told to look.
+class CloneFailure extends Error {
+    mayBeCreated;
+    constructor(message, mayBeCreated) {
+        super(message);
+        this.mayBeCreated = mayBeCreated;
+    }
+}
+function mayBeCreatedGuidance(name) {
+    const target = name ? `a dataset named ${JSON.stringify(name)}` : 'a new dataset named after the source with " Copy" at the end';
+    return `The clone may already have been created. Run \`orizu datasets list\` and look for ${target} before cloning again: running clone again makes another copy.`;
+}
+// authedFetch raises this code only when it sent nothing, or when the server
+// answered 401 and the changed credentials stopped a replay. Nothing was cloned.
+function isAuthContextChange(cause) {
+    return cause instanceof Error && cause.message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:');
+}
+function serverError(text) {
+    try {
+        const decoded = Schema.decodeUnknownResult(ErrorReply)(JSON.parse(text));
+        return Result.isSuccess(decoded) ? decoded.success.error : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cloneRequest(datasetId, name, timeoutMs) {
+    return Effect.suspend(() => {
+        let sent = false;
+        let timedOut = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const request = new AbortController();
+                const abort = () => request.abort();
+                const timer = setTimeout(() => { timedOut = true; request.abort(); }, timeoutMs);
+                if (signal.aborted)
+                    abort();
+                else
+                    signal.addEventListener('abort', abort, { once: true });
+                try {
+                    const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/clone`, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify(name ? { name } : {}),
+                        signal: request.signal,
+                    }, () => { sent = true; });
+                    if (!response.ok) {
+                        const text = await response.text();
+                        const error = serverError(text);
+                        // The app's own 5xx bodies name what happened; anything else at 5xx
+                        // (a gateway page, an empty body) says nothing about the clone.
+                        const mayBeCreated = response.status < 400 || error === SERVER_MAY_BE_CREATED || (response.status >= 500 && error === null);
+                        throw new CloneFailure(`Clone failed: ${text}`, mayBeCreated);
+                    }
+                    const data = await parseJsonResponse(response, 'Dataset clone');
+                    const decoded = Schema.decodeUnknownResult(CloneReply)(data);
+                    if (Result.isFailure(decoded)) {
+                        throw new CloneFailure(`Dataset clone returned an unexpected response (status ${response.status}).`, true);
+                    }
+                    return decoded.success.dataset;
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal.removeEventListener('abort', abort);
+                    request.abort();
+                }
+            },
+            catch: cause => {
+                if (timedOut)
+                    return new CloneFailure('DATASET_TRANSFER_TIMEOUT: Dataset clone exceeded its deadline', true);
+                if (cause instanceof CloneFailure)
+                    return cause;
+                return new CloneFailure(cause instanceof Error ? cause.message : String(cause), sent && !isAuthContextChange(cause));
+            },
+        });
+    }).pipe(Effect.mapError(failure => new Error(failure.mayBeCreated ? `${failure.message}\n${mayBeCreatedGuidance(name)}` : failure.message)));
+}
+// Nothing to clean up, so signals keep Node's default handling.
+export async function cloneDataset(datasetId, name) {
+    const exit = await Effect.runPromiseExit(cloneRequest(datasetId, name, datasetTransferTimeoutMs()));
+    if (Exit.isSuccess(exit))
+        return exit.value;
+    throw Cause.squash(exit.cause);
+}

package/dist/dataset-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dataset-commands.d.ts","sourceRoot":"","sources":["../src/dataset-commands.ts"],"names":[],"mappings":"AAuJA,iBAAe,oBAAoB,kBAiClC;AAED,iBAAe,oBAAoB,kBAYlC;AAED,iBAAe,mBAAmB,kBAcjC;AAED,iBAAe,qBAAqB,kBAkDnC;AAED,iBAAe,YAAY,kBAW1B;AAsBD,iBAAe,aAAa,kBAiC3B;AAED,iBAAe,WAAW,kBAwCzB;AAED,iBAAe,gBAAgB,kBA+B9B;AAgBD,iBAAe,eAAe,kBA6C7B;AAED,iBAAe,iBAAiB,kBAU/B;AAED,iBAAe,eAAe,kBA2B7B;AAED,iBAAe,iBAAiB,kBA2B/B;AA0BD,iBAAe,aAAa,kBAuB3B;AAED,iBAAe,WAAW,kBAuBzB;AAED,iBAAe,YAAY,kBAuC1B;AAED,iBAAe,mBAAmB,kBA0BjC;AAED,OAAO,EACL,aAAa,EACb,YAAY,EACZ,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,mBAAmB,GACpB,CAAA"}
+{"version":3,"file":"dataset-commands.d.ts","sourceRoot":"","sources":["../src/dataset-commands.ts"],"names":[],"mappings":"AAuHA,iBAAe,oBAAoB,kBAkClC;AAED,iBAAe,oBAAoB,kBAYlC;AAED,iBAAe,mBAAmB,kBAcjC;AAED,iBAAe,qBAAqB,kBAkDnC;AAED,iBAAe,YAAY,kBAW1B;AAsBD,iBAAe,aAAa,kBAiC3B;AAED,iBAAe,WAAW,kBAwCzB;AAED,iBAAe,gBAAgB,kBA+B9B;AAgBD,iBAAe,eAAe,kBA6C7B;AAED,iBAAe,iBAAiB,kBAU/B;AAED,iBAAe,eAAe,kBA2B7B;AAED,iBAAe,iBAAiB,kBA2B/B;AA0BD,iBAAe,aAAa,kBAuB3B;AAED,iBAAe,WAAW,kBAuBzB;AAED,iBAAe,YAAY,kBAuB1B;AAED,iBAAe,mBAAmB,kBA0BjC;AAED,OAAO,EACL,aAAa,EACb,YAAY,EACZ,WAAW,EACX,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,YAAY,EACZ,mBAAmB,GACpB,CAAA"}

package/dist/dataset-commands.js

@@ -7,7 +7,6 @@ import { getArg, hasArg, expandHomePath, getPositionalArg, hasJsonFlag, getArchi
 import { resolveProjectSlug, fetchDatasets, selectDatasetInteractively, selectTaskIdInteractively, } from './account-directory.js';
 import { sanitizeTerminalText, parseJsonResponse } from './json-response.js';
 import { authedFetch } from './http.js';
-import { extractErrorMessage } from './error-response.js';
 import { printJson, printLine } from './cli-console-output.js';
 import { readJsonFile } from './app-commands.js';
 import { printDatasetSummaries } from './archive-artifacts-cli.js';
@@ -81,22 +80,6 @@ async function resolveDatasetIdForProject(datasetRef, projectArg) {
     }
     return matches[0].id;
 }
-async function requestDatasetVersionSnapshot(datasetId, options = {}) {
-    const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/versions`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({
-            ...(options.versionLabel ? { versionLabel: options.versionLabel } : {}),
-            ...(options.readmeMarkdown !== undefined && options.readmeMarkdown !== null
-                ? { readmeMarkdown: options.readmeMarkdown }
-                : {}),
-        }),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to create dataset version: ${await extractErrorMessage(response)}`);
-    }
-    return parseJsonResponse(response, 'Dataset version create');
-}
 async function createDatasetVersion() {
     const datasetId = getPositionalArg(3) || getArg('--dataset');
     const versionLabel = getArg('--label') || getArg('--version-label') || null;
@@ -107,7 +90,8 @@ async function createDatasetVersion() {
     }
     const readmeMarkdown = readReadmeMarkdownFromArgs(usage);
     const resolvedDatasetId = await resolveDatasetIdForProject(datasetId, project);
-    const data = await requestDatasetVersionSnapshot(resolvedDatasetId, {
+    const { createDatasetVersionSnapshot } = await import('./dataset-version-workflow.js');
+    const data = await createDatasetVersionSnapshot(resolvedDatasetId, {
         versionLabel,
         readmeMarkdown,
     });
@@ -514,20 +498,13 @@ async function cloneDataset() {
         const selected = await selectDatasetInteractively(projectArg);
         datasetId = selected.datasetId;
     }
-    const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/clone`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(name ? { name } : {}),
-    });
-    if (!response.ok) {
-        throw new Error(`Clone failed: ${await response.text()}`);
-    }
-    const data = await parseJsonResponse(response, 'Dataset clone');
+    const { cloneDataset: requestClone } = await import('./dataset-clone-workflow.js');
+    const dataset = await requestClone(datasetId, name ?? null);
     if (hasJsonFlag()) {
-        printJson({ dataset: data.dataset });
+        printJson({ dataset });
         return;
     }
-    printLine(`Cloned dataset ${sanitizeTerminalText(data.dataset.parentDatasetId)} -> ${sanitizeTerminalText(data.dataset.name)} (${sanitizeTerminalText(data.dataset.id)}). Row count: ${data.dataset.rowCount}`);
+    printLine(`Cloned dataset ${sanitizeTerminalText(dataset.parentDatasetId)} -> ${sanitizeTerminalText(dataset.name)} (${sanitizeTerminalText(dataset.id)}). Row count: ${dataset.rowCount}`);
 }
 async function downloadAnnotations() {
     let taskId = getArg('--task');

package/dist/dataset-transfer-upload.d.ts

@@ -1,3 +1,4 @@
+import { type DatasetVersionResponse } from './dataset-version-workflow.js';
 export interface DatasetUploadResponse {
     dataset: {
         id: string;
@@ -12,11 +13,6 @@ export interface DatasetUploadResponse {
         created_at: string;
     } | null;
 }
-interface DatasetSnapshot {
-    datasetVersion: {
-        id: string;
-    };
-}
 type UploadRows = Array<Record<string, unknown>>;
 type UploadSource = {
     kind: 'jsonl';
@@ -36,7 +32,7 @@ export interface DatasetUploadOptions {
 }
 export declare function transferDatasetUpload(options: DatasetUploadOptions): Promise<{
     data: DatasetUploadResponse;
-    version: DatasetSnapshot;
+    version: DatasetVersionResponse;
 }>;
 export {};
 //# sourceMappingURL=dataset-transfer-upload.d.ts.map

package/dist/dataset-transfer-upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dataset-transfer-upload.d.ts","sourceRoot":"","sources":["../src/dataset-transfer-upload.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACzF,aAAa,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAC/E;AAED,UAAU,eAAe;IAAG,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AAE5D,KAAK,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAChD,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;CAAE,CAAA;AAE9H,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CACnD;AAoHD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,CAEvI"}
+{"version":3,"file":"dataset-transfer-upload.d.ts","sourceRoot":"","sources":["../src/dataset-transfer-upload.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsD,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAM/H,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACzF,aAAa,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAC/E;AAGD,KAAK,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAChD,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;CAAE,CAAA;AAE9H,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CACnD;AA2HD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAE9I"}

package/dist/dataset-transfer-upload.js

@@ -1,6 +1,7 @@
 import { Context, Effect, Layer, Result } from 'effect';
 import { ensureDatasetUploadSnapshot } from './dataset-upload-snapshot.js';
 import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { datasetVersionSnapshot } from './dataset-version-workflow.js';
 import { extractErrorMessage } from './error-response.js';
 import { authedFetch } from './http.js';
 import { parseJsonResponse, sanitizeTerminalText } from './json-response.js';
@@ -18,6 +19,12 @@ class DatasetInputFailure extends Error {
     constructor(cause) { super(cause instanceof Error ? cause.message : String(cause), { cause }); }
 }
 const DatasetUploadApi = Context.Service('orizu/DatasetUploadApi');
+// authedFetch raises this code only when it sent nothing, or after the server
+// answered 401 (it writes nothing) and the stored credentials changed, so it
+// refused to replay. Either way nothing was written (ORI-2431).
+function isAuthContextChange(cause) {
+    return cause instanceof Error && cause.message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:');
+}
 // Only the existing authentication client's rejected-token refresh may replay a
 // request. No transient/transport retries belong around these non-idempotent writes.
 function post(path, body, context, prefix, timeoutMs) {
@@ -34,7 +41,7 @@ function post(path, body, context, prefix, timeoutMs) {
                 }
                 return await parseJsonResponse(response, context);
             },
-            catch: cause => cause instanceof DatasetWriteFailure ? cause : new DatasetWriteFailure(cause instanceof Error ? cause.message : String(cause), requestStarted ? 'unknown' : 'rejected', { cause }),
+            catch: cause => cause instanceof DatasetWriteFailure ? cause : new DatasetWriteFailure(cause instanceof Error ? cause.message : String(cause), requestStarted && !isAuthContextChange(cause) ? 'unknown' : 'rejected', { cause }),
         }).pipe(Effect.timeoutOrElse({
             duration: timeoutMs,
             orElse: () => Effect.fail(new DatasetWriteFailure(`DATASET_TRANSFER_TIMEOUT: ${context} exceeded its deadline`, requestStarted ? 'unknown' : 'rejected')),
@@ -49,7 +56,7 @@ function liveUploadApi(options) {
             ...(options.readmeMarkdown !== null ? { readmeMarkdown: options.readmeMarkdown } : {}),
         }, 'Dataset upload', 'Upload failed', timeoutMs),
         append: (id, rows) => post(`/api/cli/datasets/${encodeURIComponent(id)}/rows`, { rows }, 'Dataset append', 'Append failed', timeoutMs),
-        snapshot: id => post(`/api/cli/datasets/${encodeURIComponent(id)}/versions`, {}, 'Dataset version create', 'Failed to create dataset version', timeoutMs),
+        snapshot: id => datasetVersionSnapshot(id, {}, timeoutMs),
     });
 }
 async function expectedPromise(program) {

package/dist/dataset-upload-snapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dataset-upload-snapshot.d.ts","sourceRoot":"","sources":["../src/dataset-upload-snapshot.ts"],"names":[],"mappings":"AAAA,UAAU,uBAAuB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,UAAU,sBAAsB;IAC9B,cAAc,EAAE;QACd,EAAE,EAAE,MAAM,CAAA;KACX,CAAA;CACF;AAED,wBAAsB,2BAA2B,CAAC,CAAC,SAAS,sBAAsB,EAChF,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,OAAO,EACnB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,CAAC,CAAC,CAwBZ"}
+{"version":3,"file":"dataset-upload-snapshot.d.ts","sourceRoot":"","sources":["../src/dataset-upload-snapshot.ts"],"names":[],"mappings":"AAEA,UAAU,uBAAuB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,UAAU,sBAAsB;IAC9B,cAAc,EAAE;QACd,EAAE,EAAE,MAAM,CAAA;KACX,CAAA;CACF;AAED,wBAAsB,2BAA2B,CAAC,CAAC,SAAS,sBAAsB,EAChF,OAAO,EAAE,uBAAuB,EAChC,UAAU,EAAE,OAAO,EACnB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAChD,OAAO,CAAC,CAAC,CAAC,CA6BZ"}

package/dist/dataset-upload-snapshot.js

@@ -1,3 +1,4 @@
+import { DatasetVersionFailure, VERSION_MAY_BE_CREATED } from './dataset-version-workflow.js';
 export async function ensureDatasetUploadSnapshot(dataset, jsonOutput, createSnapshot) {
     try {
         return await createSnapshot(dataset.id);
@@ -5,6 +6,8 @@ export async function ensureDatasetUploadSnapshot(dataset, jsonOutput, createSna
     catch (error) {
         const detail = error instanceof Error ? error.message : String(error);
         const retryCommand = `orizu datasets versions create --dataset ${dataset.id}`;
+        // After an unclear outcome the version may exist; check before retrying.
+        const mayBeCreated = error instanceof DatasetVersionFailure && error.mayBeCreated;
         if (jsonOutput) {
             throw new Error(JSON.stringify({
                 error: 'Dataset upload completed but dataset version creation failed',
@@ -13,10 +16,13 @@ export async function ensureDatasetUploadSnapshot(dataset, jsonOutput, createSna
                 dataset_id: dataset.id,
                 dataset_version_id: null,
                 retry_command: retryCommand,
+                ...(mayBeCreated ? { may_be_created: true } : {}),
             }));
         }
         throw new Error(`Dataset upload completed but dataset version creation failed: ${detail}\n` +
             `Dataset ${dataset.name} (${dataset.id}) was created with ${dataset.rowCount} rows. ` +
-            `Retry only the snapshot step with: ${retryCommand}`);
+            (mayBeCreated
+                ? `${VERSION_MAY_BE_CREATED} If it is not there, create it with: ${retryCommand}`
+                : `Retry only the snapshot step with: ${retryCommand}`));
     }
 }

package/dist/dataset-version-workflow.d.ts

@@ -0,0 +1,24 @@
+import { Effect, Schema } from 'effect';
+export declare const VERSION_MAY_BE_CREATED = "The version may already be created: check the dataset's versions in the web app before creating it again.";
+declare const CreateReply: Schema.Struct<{
+    readonly datasetVersion: Schema.Struct<{
+        readonly id: Schema.NonEmptyString;
+        readonly rowCount: Schema.Number;
+        readonly artifactFormat: Schema.optional<Schema.String>;
+        readonly artifactStoragePath: Schema.optional<Schema.String>;
+    }>;
+}>;
+export type DatasetVersionResponse = typeof CreateReply.Type;
+export interface DatasetVersionRequest {
+    versionLabel?: string | null;
+    readmeMarkdown?: string | null;
+}
+export declare class DatasetVersionFailure extends Error {
+    readonly mayBeCreated: boolean;
+    readonly _tag = "DatasetVersionFailure";
+    constructor(message: string, mayBeCreated: boolean);
+}
+export declare function datasetVersionSnapshot(datasetId: string, options: DatasetVersionRequest, timeoutMs: number): Effect.Effect<DatasetVersionResponse, DatasetVersionFailure>;
+export declare function createDatasetVersionSnapshot(datasetId: string, options: DatasetVersionRequest): Promise<DatasetVersionResponse>;
+export {};
+//# sourceMappingURL=dataset-version-workflow.d.ts.map

package/dist/dataset-version-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset-version-workflow.d.ts","sourceRoot":"","sources":["../src/dataset-version-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,MAAM,EAAgB,MAAM,EAAE,MAAM,QAAQ,CAAA;AAS5D,eAAO,MAAM,sBAAsB,8GAA8G,CAAA;AAIjJ,QAAA,MAAM,WAAW;;;;;;;EAOf,CAAA;AAEF,MAAM,MAAM,sBAAsB,GAAG,OAAO,WAAW,CAAC,IAAI,CAAA;AAE5D,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC/B;AAMD,qBAAa,qBAAsB,SAAQ,KAAK;IAEjB,QAAQ,CAAC,YAAY,EAAE,OAAO;IAD3D,QAAQ,CAAC,IAAI,2BAA0B;gBAC3B,OAAO,EAAE,MAAM,EAAW,YAAY,EAAE,OAAO;CAC5D;AAaD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CA+CzK;AAED,wBAAsB,4BAA4B,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAMrI"}

package/dist/dataset-version-workflow.js

@@ -0,0 +1,99 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { extractErrorMessage, isJsonErrorResponsePayload } from './error-response.js';
+import { authedFetch } from './http.js';
+import { parseJsonResponse } from './json-response.js';
+// Loaded only through `await import(...)`, like the README and delete workflows.
+export const VERSION_MAY_BE_CREATED = "The version may already be created: check the dataset's versions in the web app before creating it again.";
+// What the server says when it cannot tell whether the version was saved.
+const SERVER_MAY_BE_CREATED = 'Dataset version may already be created';
+const CreateReply = Schema.Struct({
+    datasetVersion: Schema.Struct({
+        id: Schema.NonEmptyString,
+        rowCount: Schema.Number,
+        artifactFormat: Schema.optional(Schema.String),
+        artifactStoragePath: Schema.optional(Schema.String),
+    }),
+});
+// The version may exist when the server says so, when the reply was lost or
+// unreadable after the request was sent, or when a 5xx did not come from the
+// app (a gateway giving up while the app kept working). Any other error reply
+// is a clear refusal.
+export class DatasetVersionFailure extends Error {
+    mayBeCreated;
+    _tag = 'DatasetVersionFailure';
+    constructor(message, mayBeCreated) {
+        super(message);
+        this.mayBeCreated = mayBeCreated;
+    }
+}
+async function appErrorOf(response) {
+    try {
+        const payload = await response.json();
+        return isJsonErrorResponsePayload(response, payload) ? payload.error : null;
+    }
+    catch {
+        return null;
+    }
+}
+// One request, never retried: a retry after an unknown outcome could add a
+// second version.
+export function datasetVersionSnapshot(datasetId, options, timeoutMs) {
+    return Effect.suspend(() => {
+        let sent = false;
+        let timedOut = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const request = new AbortController();
+                const abort = () => request.abort();
+                const timer = setTimeout(() => { timedOut = true; request.abort(); }, timeoutMs);
+                if (signal.aborted)
+                    abort();
+                else
+                    signal.addEventListener('abort', abort, { once: true });
+                try {
+                    const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/versions`, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({
+                            ...(options.versionLabel ? { versionLabel: options.versionLabel } : {}),
+                            ...(options.readmeMarkdown !== undefined && options.readmeMarkdown !== null
+                                ? { readmeMarkdown: options.readmeMarkdown }
+                                : {}),
+                        }),
+                        signal: request.signal,
+                    }, () => { sent = true; });
+                    if (!response.ok) {
+                        const serverError = await appErrorOf(response.clone());
+                        const message = `Failed to create dataset version: ${await extractErrorMessage(response)}`;
+                        throw new DatasetVersionFailure(message, response.status < 400 || serverError === SERVER_MAY_BE_CREATED || (response.status >= 500 && serverError === null));
+                    }
+                    const data = await parseJsonResponse(response, 'Dataset version create');
+                    const decoded = Schema.decodeUnknownResult(CreateReply)(data);
+                    if (Result.isFailure(decoded)) {
+                        throw new DatasetVersionFailure(`Dataset version create returned an unexpected response (status ${response.status}).`, true);
+                    }
+                    return decoded.success;
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal.removeEventListener('abort', abort);
+                    request.abort();
+                }
+            },
+            catch: cause => {
+                if (timedOut)
+                    return new DatasetVersionFailure('DATASET_TRANSFER_TIMEOUT: Dataset version create exceeded its deadline', sent);
+                if (cause instanceof DatasetVersionFailure)
+                    return cause;
+                return new DatasetVersionFailure(cause instanceof Error ? cause.message : String(cause), sent);
+            },
+        });
+    });
+}
+export async function createDatasetVersionSnapshot(datasetId, options) {
+    const exit = await Effect.runPromiseExit(datasetVersionSnapshot(datasetId, options, datasetTransferTimeoutMs()).pipe(Effect.mapError(failure => new Error(failure.mayBeCreated ? `${failure.message}\n${VERSION_MAY_BE_CREATED}` : failure.message))));
+    if (Exit.isSuccess(exit))
+        return exit.value;
+    throw Cause.squash(exit.cause);
+}

package/dist/feedback-cli.js

@@ -307,8 +307,8 @@ function resolveProjectContext(explicitProject, workspaceRoot) {
         : existingWorkspaceTeamSlug(workspaceRoot);
     return { teamSlug: workspaceTeam, projectSlug: null };
 }
-function lastErrorForContext(configDirectory, serverBaseUrl, teamSlug, now, printErr, scrubNotice) {
-    const record = readLastErrorRecord(configDirectory);
+async function lastErrorForContext(configDirectory, serverBaseUrl, teamSlug, now, printErr, scrubNotice) {
+    const record = await readLastErrorRecord(configDirectory);
     if (!record || !isLastErrorRecordShape(record))
         return null;
     if (teamSlug === null) {
@@ -482,7 +482,7 @@ export async function feedbackCommand(args, io) {
         const values = { ...fromFile, ...parsed.values };
         const lastError = parsed.suppressLastError
             ? null
-            : lastErrorForContext(configDirectory, baseUrl, projectContext.teamSlug, now(), io.printErr, scrubNotice);
+            : await lastErrorForContext(configDirectory, baseUrl, projectContext.teamSlug, now(), io.printErr, scrubNotice);
         const scrubOptions = { reporterEmail: null, homeDir: homeDirectory, secrets };
         const scrubbedFields = scrubFeedbackValue({
             category: values.category,

package/dist/hosted-harness-opencode.d.ts

@@ -49,7 +49,7 @@
  *     would break both ports and must be re-verified.
  */
 import type { AgentHarness } from './hosted-harness.js';
-export declare const OPENCODE_PINNED_VERSION = "1.14.41";
+export declare const OPENCODE_PINNED_VERSION = "1.18.35";
 export declare const DEFAULT_PROMPT_MAX_DURATION_MS = 5400000;
 export type HarnessFetch = (url: string, init?: RequestInit) => Promise<Response>;
 export interface OpenCodeHarnessOptions {

package/dist/hosted-harness-opencode.js

@@ -54,13 +54,13 @@ import { HOSTED_AGENT_NAME, HOSTED_AGENT_PROMPT } from './hosted-agent-prompt.js
 import { parseModelIdentity } from './provider-registry.js';
 import { HARNESS_NAMES } from './hosted-harness.js';
 // OpenCode is HARD-PINNED to this version everywhere it is installed/launched.
-// AUDIT RISK #1 (SSE fragility): the entire event model rides OpenCode's
-// undocumented `/event` SSE part schema (`message.part.updated`, `session.idle`,
-// `session.error`, `session.updated`, ...). Versions newer than 1.14.41 broke
-// that stream upstream, so the pin is load-bearing and must be re-verified
-// before any bump. The AgentHarness seam is the mitigation of last resort: swap
-// to a Claude-Agent-SDK loop (ALI-929) rather than chase OpenCode's SSE.
-export const OPENCODE_PINNED_VERSION = '1.14.41';
+// The event model rides OpenCode's undocumented `/event` SSE part schema
+// (`message.part.updated`, `session.idle`, `session.error`, `session.updated`,
+// ...), so every bump must pass test/cli/hosted-opencode-contract-real.test.ts
+// against the real binary (the path-gated `opencode-real` CI job runs it when
+// this pin changes). 1.14.41 → 1.18.35 was measured and checked that way
+// (ORI-2523). The AgentHarness seam remains the mitigation of last resort.
+export const OPENCODE_PINNED_VERSION = '1.18.35';
 const DEFAULT_OPENCODE_PORT = 4096;
 const DEFAULT_SSE_INACTIVITY_MS = 120_000;
 const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;

package/dist/hosted-loop-lifecycle.d.ts

@@ -30,8 +30,9 @@ import type { HostedSessionOrigin } from './hosted-runtime-assets.js';
  * re-inline it.
  *
  * PIN CONSTRAINT: the hosted OpenCode runtime is HARD-PINNED to
- * `opencode-ai@1.14.41` (`OPENCODE_PINNED_VERSION`, SSE-fragile — do not bump)
- * whose bundled catalog predates this model. Images bake a validated models.dev
+ * `OPENCODE_PINNED_VERSION` (opencode-ai@1.18.35, whose bundled catalog
+ * includes this model; bumps are checked by the real-binary contract test,
+ * ORI-2523). Images also bake a validated models.dev
  * list into the runtime user's cache. Orizu refreshes that cache before spawning
  * OpenCode, preserving baked models on failure; the native unchecked writer is
  * disabled (ORI-2513). Pre-prompt validation still checks the running server.

package/dist/hosted-loop-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-loop-lifecycle.d.ts","sourceRoot":"","sources":["../src/hosted-loop-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAErE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,8BAA8B,CAAA;AAE/D;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAA;IACpB,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAA;IACxB,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAAA;IACzC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,kDAAkD;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAYpG;AAED,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,gBAAgB,CAAA;AAKvD,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,SAAS,EAAE,OAAO,CAAA;IAClB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgBjF;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC;qFACiF;IACjF,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,iBAAiB,CAAA;IAC1B,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE;IAAE,MAAM,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,EACxD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,EACnD,GAAG,GAAE,MAAM,MAAyB,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAkE/B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAOlE;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,GAAG,EAAE,OAAO,CAAA;IACZ,wEAAwE;IACxE,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf"}
+{"version":3,"file":"hosted-loop-lifecycle.d.ts","sourceRoot":"","sources":["../src/hosted-loop-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAErE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,8BAA8B,CAAA;AAE/D;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,YAAY,EAAE,MAAM,CAAA;IACpB,sEAAsE;IACtE,aAAa,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAA;IACxB,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAA;IACjB,6DAA6D;IAC7D,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAAA;IACzC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,kDAAkD;IAClD,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;;;;;;;OAaG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAYpG;AAED,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,gBAAgB,CAAA;AAKvD,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,SAAS,EAAE,OAAO,CAAA;IAClB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgBjF;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC;qFACiF;IACjF,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAA;IAChB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,iBAAiB,CAAA;IAC1B,MAAM,EAAE,iBAAiB,CAAA;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE;IAAE,MAAM,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,EACxD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,EACnD,GAAG,GAAE,MAAM,MAAyB,GACnC,OAAO,CAAC,oBAAoB,CAAC,CAkE/B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAOlE;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,GAAG,EAAE,OAAO,CAAA;IACZ,wEAAwE;IACxE,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf"}

package/dist/hosted-loop-lifecycle.js

@@ -28,8 +28,9 @@
  * re-inline it.
  *
  * PIN CONSTRAINT: the hosted OpenCode runtime is HARD-PINNED to
- * `opencode-ai@1.14.41` (`OPENCODE_PINNED_VERSION`, SSE-fragile — do not bump)
- * whose bundled catalog predates this model. Images bake a validated models.dev
+ * `OPENCODE_PINNED_VERSION` (opencode-ai@1.18.35, whose bundled catalog
+ * includes this model; bumps are checked by the real-binary contract test,
+ * ORI-2523). Images also bake a validated models.dev
  * list into the runtime user's cache. Orizu refreshes that cache before spawning
  * OpenCode, preserving baked models on failure; the native unchecked writer is
  * disabled (ORI-2513). Pre-prompt validation still checks the running server.

package/dist/hosted-loop.d.ts

@@ -192,6 +192,13 @@ export declare const TERMINAL_DELIVERY_RETRY_DELAYS_MS: readonly number[];
  * (model key + connector credentials) lands on the run-event redaction list.
  */
 export { INJECTED_ENV_VARS_ENV } from './hosted-environment.js';
+/** Best-effort global install of the pinned opencode. Non-fatal: a failure is
+ *  recorded and the run finishes cleanly when the subsequent connect fails.
+ *  From 1.18 opencode's postinstall script writes the `opencode` command, and
+ *  npm 12 blocks it unless allowed, leaving a placeholder that exits 1; so npm
+ *  allows that one script and the result must print the pinned version
+ *  (ORI-2523). `env` exists for tests. */
+export declare function installOpenCodePinned(version: string, env?: NodeJS.ProcessEnv): InstallResult;
 export declare function runHostedLoop(opts: RunHostedLoopOptions): Promise<HostedLoopResult>;
 export declare function startHostedLoopSession(context: HostedLoopSessionContext): Promise<HostedLoopSessionHandle>;
 export declare function runHostedLoopTurn(session: HostedLoopSessionHandle, turn: HostedLoopTurnContext, options: Omit<RunHostedLoopOptions, 'context' | 'taskPrompt' | 'sharedRuntime'> & {

package/dist/hosted-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-loop.d.ts","sourceRoot":"","sources":["../src/hosted-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAOH,OAAO,EAAyB,KAAK,YAAY,EAAyC,MAAM,qBAAqB,CAAA;AAQrH,OAAO,EAAoB,KAAK,WAAW,EAAuB,MAAM,qBAAqB,CAAA;AAE7F,OAAO,EAOL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAA;AAIrC,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAOL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AAKnC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,GAChB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAA;AAOnC,eAAO,MAAM,wBAAwB,QAAgB,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAKrF;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,uBAAuB;IAC/B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,wBAAwB,CAAA;IACjC,OAAO,EAAE,uBAAuB,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;2FACuF;IACvF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAA;IAC7F;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,YAAY,CAAA;IACxC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1F,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9C;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC9F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;sDACkD;IAClD,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC;;kFAE8E;IAC9E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC1D;;oDAEgD;IAChD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAChG;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;+DAC2D;IAC3D,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;iFAC6E;IAC7E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAeD;;;;;iDAKiD;AACjD,eAAO,MAAM,6BAA6B,QAAiB,CAAA;AAa3D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAAmB,CAAA;AAKlF;;;;;;GAMG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AA+E/D,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgiBzF;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAalC;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,YAAY,GAAG,eAAe,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACvG,OAAO,CAAC,gBAAgB,CAAC,CAe3B;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5F;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAyCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,mBAAmB,GACtB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}
+{"version":3,"file":"hosted-loop.d.ts","sourceRoot":"","sources":["../src/hosted-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAOH,OAAO,EAAyB,KAAK,YAAY,EAAyC,MAAM,qBAAqB,CAAA;AAQrH,OAAO,EAAoB,KAAK,WAAW,EAAuB,MAAM,qBAAqB,CAAA;AAE7F,OAAO,EAOL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAA;AAIrC,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAOL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AAKnC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,GAChB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAA;AAOnC,eAAO,MAAM,wBAAwB,QAAgB,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAKrF;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,uBAAuB;IAC/B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,wBAAwB,CAAA;IACjC,OAAO,EAAE,uBAAuB,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;2FACuF;IACvF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAA;IAC7F;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,YAAY,CAAA;IACxC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1F,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9C;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC9F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;sDACkD;IAClD,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC;;kFAE8E;IAC9E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC1D;;oDAEgD;IAChD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAChG;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;+DAC2D;IAC3D,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;iFAC6E;IAC7E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAeD;;;;;iDAKiD;AACjD,eAAO,MAAM,6BAA6B,QAAiB,CAAA;AAa3D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAAmB,CAAA;AAKlF;;;;;;GAMG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAiC/D;;;;;0CAK0C;AAC1C,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,aAAa,CAW7F;AAqCD,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgiBzF;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAalC;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,YAAY,GAAG,eAAe,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACvG,OAAO,CAAC,gBAAgB,CAAC,CAe3B;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5F;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAyCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,mBAAmB,GACtB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}

package/dist/hosted-loop.js

@@ -152,13 +152,21 @@ function detectLoopPrebaked(flag, markerPath) {
     return flag === true || hasValidPrebakedMarker(markerPath);
 }
 /** Best-effort global install of the pinned opencode. Non-fatal: a failure is
- *  recorded and the run finishes cleanly when the subsequent connect fails. */
-function installOpenCodePinned(version) {
-    const command = `bun add -g opencode-ai@${version} >/dev/null 2>&1 || ` +
-        `npm install -g opencode-ai@${version} >/dev/null 2>&1`;
-    const res = spawnSync('bash', ['-c', command], { encoding: 'utf8' });
+ *  recorded and the run finishes cleanly when the subsequent connect fails.
+ *  From 1.18 opencode's postinstall script writes the `opencode` command, and
+ *  npm 12 blocks it unless allowed, leaving a placeholder that exits 1; so npm
+ *  allows that one script and the result must print the pinned version
+ *  (ORI-2523). `env` exists for tests. */
+export function installOpenCodePinned(version, env) {
+    const command = `{ bun add -g opencode-ai@${version} >/dev/null 2>&1 || ` +
+        `npm install -g --allow-scripts=opencode-ai opencode-ai@${version} >/dev/null 2>&1; } && ` +
+        `v="$(opencode --version 2>/dev/null)" && [ "$v" = '${version}' ]`;
+    const res = spawnSync('bash', ['-c', command], { encoding: 'utf8', ...(env ? { env } : {}) });
     const ok = (res.status ?? 1) === 0;
-    return { ok, detail: ok ? `installed opencode-ai@${version}` : `install exit ${res.status ?? 'unknown'}` };
+    return {
+        ok,
+        detail: ok ? `installed opencode-ai@${version}` : `install exit ${res.status ?? 'unknown'}, or opencode --version is not ${version}`,
+    };
 }
 /** Node child_process spawner for `opencode serve` (the sandbox runtime is
  *  node24 — Bun.spawn is not guaranteed present, so spawnOpenCode is given this

package/dist/index.js

@@ -1794,10 +1794,10 @@ function isCliEntrypoint() {
 }
 if (isCliEntrypoint()) {
     const rawArgs = process.argv.slice(2);
-    withPassiveUpdateNotice(rawArgs, getCliVersion, printError, args => main(args).catch(error => {
+    withPassiveUpdateNotice(rawArgs, getCliVersion, printError, args => main(args).catch(async (error) => {
         const message = error instanceof Error ? error.message : 'Unknown error';
         // The reporter email is unknown on the failure path, so the record masks every address.
-        writeLastErrorRecord({
+        await writeLastErrorRecord({
             argv: args,
             message,
             code: extractLastErrorCode(error),

package/dist/last-error-record.d.ts

@@ -30,8 +30,10 @@ export interface WriteLastErrorRecordOptions {
     configDir?: string;
 }
 export declare function extractLastErrorCode(error: unknown): string | null;
+export declare function isStringWithinCap(value: unknown, maximumCharacters: number, wasTruncated: boolean): value is string;
+export declare function boundedServerBaseUrl(value: string | null | undefined): string | null;
 export declare function buildLastErrorRecord(input: LastErrorRecordInput): LastErrorRecord;
 export declare function getLastErrorRecordPath(configDir?: string): string;
-export declare function writeLastErrorRecord(input: LastErrorRecordInput, options?: WriteLastErrorRecordOptions): void;
-export declare function readLastErrorRecord(configDir?: string): LastErrorRecord | null;
+export declare function writeLastErrorRecord(input: LastErrorRecordInput, options?: WriteLastErrorRecordOptions): Promise<void>;
+export declare function readLastErrorRecord(configDir?: string): Promise<LastErrorRecord | null>;
 //# sourceMappingURL=last-error-record.d.ts.map