orizu 0.5.48 → 0.5.50

package/dist/hosted-boot.js

@@ -35,7 +35,7 @@ import { closeSync, existsSync, mkdirSync, openSync, readdirSync, readFileSync,
 import { isValidCloudflareArtifactsGitRemote } from './cloudflare-artifacts-git-remote.js';
 import { cloneTeamIntoWorkTree, seedSessionCopy } from './hosted-session-seed.js';
 import { AGENT_GIT_IDENTITY, BEARER_BASENAME, BOOT_CONTEXT_BASENAME, DEFAULT_CACHE_REFRESH_BUFFER_MS, HELPER_SCRIPT_BASENAME, REPO_CRED_CACHE_BASENAME, renderCredentialHelperScript, serializeBootContext, } from './hosted-runtime-assets.js';
-import { INJECTED_ENV_VARS_ENV, closeHostedLoopSession, runHostedLoop, runHostedLoopTurn, startHostedLoopSession, } from './hosted-loop.js';
+import { INJECTED_ENV_VARS_ENV, closeHostedLoopSession, hostedSessionOpenCodeLogPath, prestartHostedOpenCode, runHostedLoop, runHostedLoopTurn, startHostedLoopSession, } from './hosted-loop.js';
 import { DEFAULT_EGRESS_CANARY_HOST, DEFAULT_HOSTED_MODEL } from './hosted-loop-lifecycle.js';
 import { composeHostedAnswerPrompt } from './hosted-question.js';
 import { resumeRunEventSink } from './hosted-run-event-sink.js';
@@ -675,16 +675,20 @@ export async function runHostedBoot(opts) {
     // work and closed however the boot ends.
     const liveChannels = [];
     const idleWait = new AbortController();
+    // ORI-2512: stops anything the boot started in the background.
+    const bootCleanups = [];
     try {
-        return await runHostedBootWithLive(opts, liveChannels, idleWait.signal);
+        return await runHostedBootWithLive(opts, liveChannels, idleWait.signal, bootCleanups);
     }
     finally {
         idleWait.abort();
         for (const channel of liveChannels)
             channel.close();
+        for (const cleanup of bootCleanups)
+            cleanup();
     }
 }
-async function runHostedBootWithLive(opts, liveChannels, idleWaitSignal) {
+async function runHostedBootWithLive(opts, liveChannels, idleWaitSignal, bootCleanups) {
     const env = opts.env;
     const processEnv = opts.processEnv ?? process.env;
     const root = opts.root ?? process.cwd();
@@ -913,6 +917,43 @@ async function runHostedBootWithLive(opts, liveChannels, idleWaitSignal) {
     };
     writeFile(bootContextAbs, serializeBootContext(bootContext));
     const helperValue = `!node ${helperScriptAbs} ${bootContextAbs}`;
+    // The loop's context (step 6), built before the clone so the background
+    // start below uses the same settings. The bearer PROVIDER keeps the event
+    // sink's bearer fresh from the same pull-mode source; the DO-provisioned
+    // sandbox always runs the pre-baked image under an enforced egress policy, so
+    // the loop's startup egress canary + deferred setup hook are both armed.
+    const model = session.model ?? DEFAULT_HOSTED_MODEL;
+    const configuredOpenCodePort = resolveTestPositiveInteger(processEnv, 'ORIZU_HOSTED_TEST_OPENCODE_PORT', 65_535) ?? (processEnv.ORIZU_OPENCODE_PORT
+        ? Number(processEnv.ORIZU_OPENCODE_PORT)
+        : undefined);
+    if (configuredOpenCodePort !== undefined && (!Number.isInteger(configuredOpenCodePort) || configuredOpenCodePort < 1 || configuredOpenCodePort > 65_535)) {
+        throw new Error('ORIZU_OPENCODE_PORT must be a valid TCP port');
+    }
+    const loopContext = {
+        apiBaseUrl: env.baseUrl,
+        runId,
+        bearerFile: bearerFileAbs,
+        taskFile: taskFileAbs,
+        workspaceDir,
+        sessionBranch: session.repoBranch,
+        repositoryRemote: repo.cloneUrl,
+        repositoryCredentialHelper: helperValue,
+        model,
+        reasoningEffort: session.reasoningEffort ?? undefined,
+        sessionOrigin: session.surface === 'hosted-web' ? 'hosted-web' : 'cli',
+        messageId: `${runId}:task`,
+        resumeAgentSessionId: session.agentSessionId ?? undefined,
+        author: AGENT_GIT_IDENTITY,
+        anthropicDummyKey: env.anthropicDummyKey ?? ANTHROPIC_DUMMY_KEY,
+        // Derive the per-prompt max-duration cap from the session duration so a long
+        // run is not killed at the hard-coded 90-min prompt cap (ALI-1061). Unset →
+        // the harness default (5400s) floor holds.
+        sandboxBudgetMs: session.durationMinutes != null ? session.durationMinutes * 60 * 1000 : undefined,
+        prebaked: true,
+        egressCanaryHost: (processEnv.NODE_ENV === 'test' ? processEnv.ORIZU_HOSTED_TEST_EGRESS_CANARY_HOST : undefined) ?? DEFAULT_EGRESS_CANARY_HOST,
+        runSetupHook: true,
+        opencodePort: configuredOpenCodePort,
+    };
     // 4b — ORI-2118: a hosted session's Artifacts copy is created empty (forks
     // of a busy team copy cannot be cloned). Fill it from the server-selected
     // origin before cloning. Selected saved history is checked on retries too.
@@ -921,6 +962,18 @@ async function runHostedBootWithLive(opts, liveChannels, idleWaitSignal) {
     }
     // ORI-2520: a woken sandbox boots on the disk it slept with (see step 5).
     const wokenDisk = existsSync(workspaceDir) && readdirSync(workspaceDir).length > 0;
+    // ORI-2512 cut 3: start the egress canary and then OpenCode while the
+    // repository clones. OpenCode runs in the (empty) working folder, which the
+    // clone fills in place, and is asked nothing until after the clone. The
+    // one-shot test seam (opts.runLoop) starts nothing early, but makes the
+    // folder the same way, so it takes production's fill.
+    mkdirp(workspaceDir);
+    const prestart = opts.runLoop
+        ? null
+        : prestartHostedOpenCode({ ...loopContext, projectId: session.projectId }, { logPath: hostedSessionOpenCodeLogPath({ sessionDir: sessionDirAbs, sessionId: env.sessionId }) });
+    // However the boot ends, nothing it started outlives it.
+    if (prestart)
+        bootCleanups.push(prestart.stop);
     // Set when the working folder came from the team copy (ORI-2512); settles
     // when the background fill of the session copy ends, and never rejects.
     let sessionCopyFilled = null;
@@ -1053,7 +1106,8 @@ const c = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
         log(`woken disk: reusing the repo (checked out: ${checkedOut})`);
     }
     else {
-        const clone = exec('git', [
+        // Not blocking, so the background start above keeps running (ORI-2512).
+        const clone = await execAsync('git', [
             'clone',
             '--depth',
             '1',
@@ -1126,42 +1180,6 @@ const c = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
         fetchImpl,
         log,
     });
-    // 6 — Launch the hosted loop, reused in-process. The bearer PROVIDER keeps the
-    // event sink's bearer fresh from the same pull-mode source; the DO-provisioned
-    // sandbox always runs the pre-baked image under an enforced egress policy, so
-    // the loop's startup egress canary + deferred setup hook are both armed.
-    const model = session.model ?? DEFAULT_HOSTED_MODEL;
-    const configuredOpenCodePort = resolveTestPositiveInteger(processEnv, 'ORIZU_HOSTED_TEST_OPENCODE_PORT', 65_535) ?? (processEnv.ORIZU_OPENCODE_PORT
-        ? Number(processEnv.ORIZU_OPENCODE_PORT)
-        : undefined);
-    if (configuredOpenCodePort !== undefined && (!Number.isInteger(configuredOpenCodePort) || configuredOpenCodePort < 1 || configuredOpenCodePort > 65_535)) {
-        throw new Error('ORIZU_OPENCODE_PORT must be a valid TCP port');
-    }
-    const loopContext = {
-        apiBaseUrl: env.baseUrl,
-        runId,
-        bearerFile: bearerFileAbs,
-        taskFile: taskFileAbs,
-        workspaceDir,
-        sessionBranch: session.repoBranch,
-        repositoryRemote: repo.cloneUrl,
-        repositoryCredentialHelper: helperValue,
-        model,
-        reasoningEffort: session.reasoningEffort ?? undefined,
-        sessionOrigin: session.surface === 'hosted-web' ? 'hosted-web' : 'cli',
-        messageId: `${runId}:task`,
-        resumeAgentSessionId: session.agentSessionId ?? undefined,
-        author: AGENT_GIT_IDENTITY,
-        anthropicDummyKey: env.anthropicDummyKey ?? ANTHROPIC_DUMMY_KEY,
-        // Derive the per-prompt max-duration cap from the session duration so a long
-        // run is not killed at the hard-coded 90-min prompt cap (ALI-1061). Unset →
-        // the harness default (5400s) floor holds.
-        sandboxBudgetMs: session.durationMinutes != null ? session.durationMinutes * 60 * 1000 : undefined,
-        prebaked: true,
-        egressCanaryHost: DEFAULT_EGRESS_CANARY_HOST,
-        runSetupHook: true,
-        opencodePort: configuredOpenCodePort,
-    };
     const runLoop = opts.runLoop ??
         ((input) => runHostedLoop({
             context: input.context,
@@ -1207,7 +1225,7 @@ const c = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
         projectId: session.projectId,
         sessionDir: sessionDirAbs,
     };
-    const hostedLoopSession = await startHostedLoopSession(sessionContext);
+    const hostedLoopSession = await startHostedLoopSession(sessionContext, { prestart });
     let current = session.pendingTurn?.runId === runId
         ? { runId, ordinal: session.pendingTurn.ordinal, body: promptForPendingHostedTurn(session.pendingTurn) }
         : { runId, ordinal: 1, body: session.task };

package/dist/hosted-harness-opencode.d.ts

@@ -195,6 +195,8 @@ export interface SpawnOpenCodeOptions extends OpenCodeConfigOptions {
         logPath?: string;
     }) => {
         kill: () => void;
+        hasExited?: () => boolean;
+        exitReason?: () => string | null;
     };
     /** File the spawner should append opencode's stdout/stderr to. On readiness
      *  timeout its tail is included in the thrown error — the bare "fetch failed"
@@ -230,4 +232,33 @@ export interface SpawnedOpenCode {
  * (see the SSE-fragility note on that constant).
  */
 export declare function spawnOpenCode(opts: SpawnOpenCodeOptions): Promise<SpawnedOpenCode>;
+/** A started `opencode serve` that has not been asked anything yet. */
+export interface StartedOpenCode {
+    baseUrl: string;
+    port: number;
+    stop: () => void;
+    /** True once the process has exited (when the spawner can tell). */
+    hasExited: () => boolean;
+    /** Why it could not be started (for example ENOENT), when known. */
+    exitReason: () => string | null;
+    startedAt: number;
+}
+/** `waitOpenCodeReady` found the process already gone; nothing answered. */
+export declare class OpenCodeExitedError extends Error {
+}
+/**
+ * The first half of `spawnOpenCode`: refresh the model catalog and start the
+ * process, without asking it anything. ORI-2512: the hosted boot calls this
+ * while the repository is still cloning. OpenCode ties its folder to a project
+ * on the first request it gets, so nothing may ask it anything until the
+ * folder holds the repository (measured on 1.18.35: a request into an empty
+ * folder binds it to the `global` project for good).
+ */
+export declare function startOpenCodeProcess(opts: SpawnOpenCodeOptions): Promise<StartedOpenCode>;
+/**
+ * The second half of `spawnOpenCode`: poll until the started server answers.
+ * The budget counts from this call, not from the start, so a long clone
+ * before it cannot use the budget up. `readyAfterMs` is from the start.
+ */
+export declare function waitOpenCodeReady(started: StartedOpenCode, opts: Pick<SpawnOpenCodeOptions, 'readyTimeoutMs' | 'readyPollMs' | 'signal' | 'fetchImpl' | 'logPath'>): Promise<SpawnedOpenCode>;
 //# sourceMappingURL=hosted-harness-opencode.d.ts.map

package/dist/hosted-harness-opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-harness-opencode.d.ts","sourceRoot":"","sources":["../src/hosted-harness-opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAUH,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,qBAAqB,CAAA;AAS5B,eAAO,MAAM,uBAAuB,YAAY,CAAA;AAUhD,eAAO,MAAM,8BAA8B,UAAY,CAAA;AAQvD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEjF,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;wEACwE;AACxE,eAAO,MAAM,yBAAyB,iCAAiC,CAAA;AAkCvE,wBAAgB,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE,KAAK,GAAE,MAAmB,GAAG,MAAM,CAW7F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAGzF;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBzB;AA2GD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,YAAY,CA8kBnF;AAuBD,yEAAyE;AACzE,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAA;AAIzE;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,YAA+C,EAC1D,SAAS,GAAE,MAAyC,GACnD,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAuBtC;AASD;;;oEAGoE;AACpE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,KAAK,SAAI,GACR,MAAM,EAAE,CAOV;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxC;IACE,IAAI,EAAE,cAAc,CAAA;IACpB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,gEAAgE;IAChE,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;CACjB,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,MAAM,WAAW,2BAA2B;IAC1C,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAqDjC;AAID,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAA;IACb;qEACiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,uBAAwB,CAAA;AAE1D;iDACiD;AACjD,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAInE;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG1F;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAO9E;AAED,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CACN,GAAG,EAAE,MAAM,EAAE,EACb,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAClE;QAAE,IAAI,EAAE,MAAM,IAAI,CAAA;KAAE,CAAA;IACzB;;sDAEkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;6CAEyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB;8DAC0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAkBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmExF"}
+{"version":3,"file":"hosted-harness-opencode.d.ts","sourceRoot":"","sources":["../src/hosted-harness-opencode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAUH,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,qBAAqB,CAAA;AAS5B,eAAO,MAAM,uBAAuB,YAAY,CAAA;AAUhD,eAAO,MAAM,8BAA8B,UAAY,CAAA;AAQvD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEjF,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB,uEAAuE;IACvE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;wEACwE;AACxE,eAAO,MAAM,yBAAyB,iCAAiC,CAAA;AAkCvE,wBAAgB,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE,KAAK,GAAE,MAAmB,GAAG,MAAM,CAW7F;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAGzF;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmBzB;AA2GD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,YAAY,CA8kBnF;AAuBD,yEAAyE;AACzE,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAA;AAIzE;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,YAA+C,EAC1D,SAAS,GAAE,MAAyC,GACnD,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAuBtC;AASD;;;oEAGoE;AACpE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,KAAK,SAAI,GACR,MAAM,EAAE,CAOV;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxC;IACE,IAAI,EAAE,cAAc,CAAA;IACpB,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,gEAAgE;IAChE,aAAa,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;CACjB,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,MAAM,WAAW,2BAA2B;IAC1C,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,YAAY,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,sBAAsB,CAAC,CAqDjC;AAID,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAA;IACb;qEACiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,uBAAwB,CAAA;AAE1D;iDACiD;AACjD,wBAAgB,yBAAyB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAInE;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG1F;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAO9E;AAED,MAAM,WAAW,oBAAqB,SAAQ,qBAAqB;IACjE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,CACN,GAAG,EAAE,MAAM,EAAE,EACb,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAClE;QAAE,IAAI,EAAE,MAAM,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IACtF;;sDAEkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;6CAEyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB;8DAC0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAkBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAExF;AAED,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,IAAI,CAAA;IAChB,oEAAoE;IACpE,SAAS,EAAE,MAAM,OAAO,CAAA;IACxB,oEAAoE;IACpE,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,4EAA4E;AAC5E,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAEjD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiC/F;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC,GACtG,OAAO,CAAC,eAAe,CAAC,CAqD1B"}

package/dist/hosted-harness-opencode.js

@@ -1035,6 +1035,20 @@ function readLogTail(logPath) {
  * (see the SSE-fragility note on that constant).
  */
 export async function spawnOpenCode(opts) {
+    return waitOpenCodeReady(await startOpenCodeProcess(opts), opts);
+}
+/** `waitOpenCodeReady` found the process already gone; nothing answered. */
+export class OpenCodeExitedError extends Error {
+}
+/**
+ * The first half of `spawnOpenCode`: refresh the model catalog and start the
+ * process, without asking it anything. ORI-2512: the hosted boot calls this
+ * while the repository is still cloning. OpenCode ties its folder to a project
+ * on the first request it gets, so nothing may ask it anything until the
+ * folder holds the repository (measured on 1.18.35: a request into an empty
+ * folder binds it to the `global` project for good).
+ */
+export async function startOpenCodeProcess(opts) {
     const port = opts.port ?? DEFAULT_OPENCODE_PORT;
     const env = {
         OPENCODE_CONFIG_CONTENT: buildOpenCodeConfigContent(opts),
@@ -1059,14 +1073,29 @@ export async function spawnOpenCode(opts) {
             });
         });
     const child = spawnImpl(cmd, { cwd: opts.cwd, env, logPath: opts.logPath });
-    const baseUrl = `http://localhost:${port}`;
+    return {
+        baseUrl: `http://localhost:${port}`,
+        port,
+        stop: () => child.kill(),
+        hasExited: () => child.hasExited?.() ?? false,
+        exitReason: () => child.exitReason?.() ?? null,
+        startedAt: Date.now(),
+    };
+}
+/**
+ * The second half of `spawnOpenCode`: poll until the started server answers.
+ * The budget counts from this call, not from the start, so a long clone
+ * before it cannot use the budget up. `readyAfterMs` is from the start.
+ */
+export async function waitOpenCodeReady(started, opts) {
+    const { baseUrl, port } = started;
     const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
     const timeoutMs = opts.readyTimeoutMs ?? OPENCODE_READY_TIMEOUT_MS;
     const pollMs = opts.readyPollMs ?? OPENCODE_READY_POLL_MS;
-    const startedAt = Date.now();
+    const waitStartedAt = Date.now();
     for (;;) {
         if (opts.signal?.aborted) {
-            child.kill();
+            started.stop();
             throw new Error('opencode serve readiness wait aborted');
         }
         try {
@@ -1086,17 +1115,26 @@ export async function spawnOpenCode(opts) {
             }
         }
         catch {
-            // not listening yet — fall through to the timeout check + sleep
+            // not listening yet — fall through to the exit and timeout checks + sleep
+        }
+        // A process that already exited will never answer: say so now rather
+        // than at the end of the budget.
+        if (started.hasExited()) {
+            const tail = readLogTail(opts.logPath);
+            const reason = started.exitReason();
+            throw new OpenCodeExitedError(`opencode serve exited before it answered on ${baseUrl}` +
+                (reason ? `: ${reason}` : '') +
+                (tail ? ` — log tail: ${tail}` : ' (no log output captured)'));
         }
         // Soft budget: checked between probes, so the total wait can overrun by up
         // to one probe timeout + poll interval. Negligible against the default.
-        if (Date.now() - startedAt >= timeoutMs) {
-            child.kill();
+        if (Date.now() - waitStartedAt >= timeoutMs) {
+            started.stop();
             const tail = readLogTail(opts.logPath);
             throw new Error(`opencode serve did not become ready on ${baseUrl} within ${timeoutMs}ms` +
                 (tail ? ` — log tail: ${tail}` : ' (no log output captured)'));
         }
         await new Promise(resolve => setTimeout(resolve, pollMs));
     }
-    return { baseUrl, port, stop: () => child.kill(), readyAfterMs: Date.now() - startedAt };
+    return { baseUrl, port, stop: started.stop, readyAfterMs: Date.now() - started.startedAt };
 }

package/dist/hosted-loop.d.ts

@@ -36,7 +36,7 @@
  */
 import { type AgentHarness } from './hosted-harness.js';
 import { type HarvestExec } from './hosted-harvest.js';
-import { type ModelValidationOutcome, type SpawnOpenCodeOptions, type SpawnedOpenCode } from './hosted-harness-opencode.js';
+import { type ModelValidationOutcome, type SpawnOpenCodeOptions, type SpawnedOpenCode, type StartedOpenCode } from './hosted-harness-opencode.js';
 import { type HostedFetch, type LiveTextSnapshot, type TerminalStatus } from './hosted-run-event-sink.js';
 import { type EgressProbeResult, type HostedLoopContext, type SetupHookOutcome } from './hosted-loop-lifecycle.js';
 export { DEFAULT_EGRESS_CANARY_HOST, DEFAULT_HOSTED_MODEL, buildOpenCodeSpawnEnv, egressCanaryAllowedHost, runEgressCanary, } from './hosted-loop-lifecycle.js';
@@ -61,6 +61,28 @@ interface HostedLoopSharedRuntime {
     startupComplete: boolean;
     spawnLogPath: string;
     closed: boolean;
+    /** ORI-2512: the boot's background start, until the first turn takes it. */
+    prestart?: HostedPrestart | null;
+}
+/**
+ * ORI-2512 cut 3: the egress canary's probes and the OpenCode start, begun by
+ * the boot while the repository clones. The first turn records the canary's
+ * events from the stored answers (same decision, same events) and waits for
+ * the started server, which is asked nothing before then.
+ */
+export interface HostedPrestart {
+    /** The probes' answers by host, and the canary's verdict. Null when a
+     *  probe threw: the turn then runs the canary itself. Never rejects. */
+    canary: Promise<{
+        results: Map<string, EgressProbeResult>;
+        checkedAt: number;
+        proceed: boolean;
+    } | null>;
+    /** The started process; null when the canary said no or the start was
+     *  stopped. Rejects when the background start failed. */
+    opencode: Promise<StartedOpenCode | null>;
+    /** Stop the process, now or as soon as it starts. */
+    stop: () => void;
 }
 export interface HostedLoopSessionContext extends Omit<HostedLoopContext, 'runId' | 'bearerFile' | 'taskFile' | 'messageId'> {
     sessionId: string;
@@ -206,8 +228,23 @@ export { INJECTED_ENV_VARS_ENV } from './hosted-environment.js';
  *  allows that one script and the result must print the pinned version
  *  (ORI-2523). `env` exists for tests. */
 export declare function installOpenCodePinned(version: string, env?: NodeJS.ProcessEnv): InstallResult;
+/**
+ * ORI-2512 cut 3: start the egress canary and then OpenCode in the
+ * background, for the boot to call before it clones. The order is the
+ * loop's: the canary first, fail-closed, before the models.dev refresh or
+ * OpenCode. Nothing here records events; the first turn does. Only for the
+ * pre-baked OpenCode runtime under an enforced egress policy; otherwise null
+ * and the turn starts everything in order.
+ */
+export declare function prestartHostedOpenCode(context: HostedLoopContext, opts: {
+    logPath: string;
+}): HostedPrestart | null;
 export declare function runHostedLoop(opts: RunHostedLoopOptions): Promise<HostedLoopResult>;
-export declare function startHostedLoopSession(context: HostedLoopSessionContext): Promise<HostedLoopSessionHandle>;
+export declare function startHostedLoopSession(context: HostedLoopSessionContext, options?: {
+    prestart?: HostedPrestart | null;
+}): Promise<HostedLoopSessionHandle>;
+/** Where a hosted session's `opencode serve` writes its output. */
+export declare function hostedSessionOpenCodeLogPath(context: Pick<HostedLoopSessionContext, 'sessionDir' | 'sessionId'>): string;
 export declare function runHostedLoopTurn(session: HostedLoopSessionHandle, turn: HostedLoopTurnContext, options: Omit<RunHostedLoopOptions, 'context' | 'taskPrompt' | 'sharedRuntime'> & {
     taskPrompt: string;
 }): Promise<HostedLoopResult>;

package/dist/hosted-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-loop.d.ts","sourceRoot":"","sources":["../src/hosted-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAOH,OAAO,EAAyB,KAAK,YAAY,EAAyC,MAAM,qBAAqB,CAAA;AAQrH,OAAO,EAAoB,KAAK,WAAW,EAAuB,MAAM,qBAAqB,CAAA;AAE7F,OAAO,EAOL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAA;AAIrC,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAOL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AAKnC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,GAChB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAA;AAOnC,eAAO,MAAM,wBAAwB,QAAgB,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAKrF;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,uBAAuB;IAC/B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,wBAAwB,CAAA;IACjC,OAAO,EAAE,uBAAuB,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;2FACuF;IACvF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAA;IAC7F;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,YAAY,CAAA;IACxC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1F,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9C;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC9F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;sDACkD;IAClD,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,wGAAwG;IACxG,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,GAAG,IAAI,CAAA;IAC3D;;kFAE8E;IAC9E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC1D;;oDAEgD;IAChD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAChG;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;iCAG6B;IAC7B,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;+DAC2D;IAC3D,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;iFAC6E;IAC7E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAeD;;;;;iDAKiD;AACjD,eAAO,MAAM,6BAA6B,QAAiB,CAAA;AAa3D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAAmB,CAAA;AAKlF;;;;;;GAMG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAiC/D;;;;;0CAK0C;AAC1C,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,aAAa,CAW7F;AAwDD,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwjBzF;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAalC;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,YAAY,GAAG,eAAe,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACvG,OAAO,CAAC,gBAAgB,CAAC,CAe3B;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5F;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AA0CD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,mBAAmB,GACtB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}
+{"version":3,"file":"hosted-loop.d.ts","sourceRoot":"","sources":["../src/hosted-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAOH,OAAO,EAAyB,KAAK,YAAY,EAAyC,MAAM,qBAAqB,CAAA;AAQrH,OAAO,EAAoB,KAAK,WAAW,EAAuB,MAAM,qBAAqB,CAAA;AAE7F,OAAO,EAUL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAA;AAIrC,OAAO,EAML,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAOL,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,4BAA4B,CAAA;AAKnC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,GAChB,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,4BAA4B,CAAA;AAOnC,eAAO,MAAM,wBAAwB,QAAgB,CAAA;AAErD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAKrF;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;CACf;AAED,UAAU,uBAAuB;IAC/B,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAC5B,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,OAAO,CAAA;IACf,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;CACjC;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B;4EACwE;IACxE,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxG;6DACyD;IACzD,QAAQ,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAA;IACzC,qDAAqD;IACrD,IAAI,EAAE,MAAM,IAAI,CAAA;CACjB;AAED,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,iBAAiB,EAAE,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,wBAAwB,CAAA;IACjC,OAAO,EAAE,uBAAuB,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAA;IAC1B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,uBAAuB,CAAA;IACvC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;yEACqE;IACrE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB;2FACuF;IACvF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,YAAY,CAAA;IAC7F;gFAC4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,YAAY,CAAA;IACxC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1F,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9C;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC9F,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;sDACkD;IAClD,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,wGAAwG;IACxG,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,GAAG,IAAI,CAAA;IAC3D;;kFAE8E;IAC9E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC1D;;oDAEgD;IAChD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAAA;IAChG;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB;;;iCAG6B;IAC7B,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;+DAC2D;IAC3D,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC;iFAC6E;IAC7E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,cAAc,CAAA;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAeD;;;;;iDAKiD;AACjD,eAAO,MAAM,6BAA6B,QAAiB,CAAA;AAa3D;;;;;;;GAOG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAAS,MAAM,EAAmB,CAAA;AAKlF;;;;;;GAMG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAiC/D;;;;;0CAK0C;AAC1C,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,aAAa,CAW7F;AA6DD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,cAAc,GAAG,IAAI,CAqCvB;AAqBD,wBAAsB,aAAa,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAslBzF;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,wBAAwB,EACjC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;CAAO,GACjD,OAAO,CAAC,uBAAuB,CAAC,CAclC;AAED,mEAAmE;AACnE,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG,MAAM,CAExH;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,YAAY,GAAG,eAAe,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACvG,OAAO,CAAC,gBAAgB,CAAC,CAe3B;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5F;AAID,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AA0CD;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,mBAAmB,GACtB,OAAO,CAAC,MAAM,CAAC,CA8BjB"}

package/dist/hosted-loop.js

@@ -42,7 +42,7 @@ import { isHarnessTerminalKind } from './hosted-harness.js';
 import { SETUP_HOOK_RELATIVE_PATH, composeHostedTaskPrompt, parsePrebakedMarker, resolveHostedTaskPreamble, resolvePrebakedMarkerPath, } from './hosted-runtime-assets.js';
 import { harvestWorkspace } from './hosted-harvest.js';
 import { annotateHeadlessQuestions, withIdleWatchdog } from './hosted-headless.js';
-import { DEFAULT_PROMPT_MAX_DURATION_MS, OPENCODE_PINNED_VERSION, awaitOpenCodeModelResolvable, createOpenCodeHarness, permissionForOrigin, spawnOpenCode, } from './hosted-harness-opencode.js';
+import { DEFAULT_PROMPT_MAX_DURATION_MS, OPENCODE_PINNED_VERSION, OpenCodeExitedError, awaitOpenCodeModelResolvable, createOpenCodeHarness, permissionForOrigin, spawnOpenCode, startOpenCodeProcess, waitOpenCodeReady, } from './hosted-harness-opencode.js';
 import { createClaudeAgentHarness } from './hosted-harness-claude.js';
 import { INJECTED_ENV_VARS_ENV } from './hosted-environment.js';
 import { interceptHostedQuestions } from './hosted-question.js';
@@ -199,7 +199,78 @@ function nodeChildSpawner(cmd, opts) {
             // already closed
         }
     }
-    return { kill: () => child.kill() };
+    // ORI-2512: lets the readiness wait stop at once for a process that has
+    // gone. The error listener also keeps a failed spawn from crashing the boot.
+    let exited = false;
+    let spawnError = null;
+    child.once('exit', () => { exited = true; });
+    child.once('error', error => {
+        exited = true;
+        spawnError = error instanceof Error ? error.message : String(error);
+    });
+    return { kill: () => child.kill(), hasExited: () => exited, exitReason: () => spawnError };
+}
+/** The one place the hosted `opencode serve` options come from, for both the
+ *  boot's background start and the turn's start in order. */
+function openCodeSpawnOptions(context, logPath) {
+    return {
+        model: context.model,
+        permission: permissionForOrigin(context.sessionOrigin),
+        projectId: context.projectId,
+        cwd: context.workspaceDir,
+        port: context.opencodePort,
+        env: buildOpenCodeSpawnEnv(context),
+        spawn: nodeChildSpawner,
+        logPath,
+    };
+}
+/**
+ * ORI-2512 cut 3: start the egress canary and then OpenCode in the
+ * background, for the boot to call before it clones. The order is the
+ * loop's: the canary first, fail-closed, before the models.dev refresh or
+ * OpenCode. Nothing here records events; the first turn does. Only for the
+ * pre-baked OpenCode runtime under an enforced egress policy; otherwise null
+ * and the turn starts everything in order.
+ */
+export function prestartHostedOpenCode(context, opts) {
+    if ((context.harness ?? 'opencode') !== 'opencode' || !context.egressCanaryHost || context.prebaked !== true)
+        return null;
+    const targets = {
+        allowedHost: egressCanaryAllowedHost(context.apiBaseUrl),
+        deniedHost: context.egressCanaryHost,
+    };
+    const results = new Map();
+    let stopped = false;
+    const canary = (async () => {
+        let checkedAt = Date.now();
+        // The loop's own decision, with nothing recorded yet.
+        const decision = await runEgressCanary(targets, { append: async () => { } }, async (host) => {
+            const result = await defaultProbeEgress(host);
+            results.set(host, result);
+            return result;
+        }, () => (checkedAt = Date.now()));
+        return { results, checkedAt, proceed: decision.proceed };
+    })().catch(() => null);
+    const opencode = canary.then(async (stored) => {
+        if (!stored?.proceed || stopped)
+            return null;
+        const started = await startOpenCodeProcess(openCodeSpawnOptions(context, opts.logPath));
+        if (stopped) {
+            started.stop();
+            return null;
+        }
+        return started;
+    });
+    // The turn reads a failure; until then it must not count as unhandled.
+    opencode.catch(() => { });
+    return {
+        canary,
+        opencode,
+        stop: () => {
+            stopped = true;
+            void opencode.then(started => started?.stop(), () => { });
+        },
+    };
 }
 /** ORI-2512: the longest the end-of-turn save waits for the boot's
  *  background fill of the session copy before saving anyway. */
@@ -260,15 +331,22 @@ export async function runHostedLoop(opts) {
     // unreachable → network broken / indistinguishable from a block) emits
     // `egress_allowed` and finishes the run FAILED rather than touch real customer
     // data. A canary whose own event append fails is likewise fail-closed.
+    // ORI-2512: on the first turn, the boot may already have probed in the
+    // background; the same decision is then made from its stored answers.
+    const prestart = opts.sharedRuntime && !opts.sharedRuntime.startupComplete ? opts.sharedRuntime.prestart : null;
     if (context.egressCanaryHost && !opts.sharedRuntime?.startupComplete) {
-        const probe = opts.probeEgress ?? defaultProbeEgress;
+        const liveProbe = opts.probeEgress ?? defaultProbeEgress;
+        const stored = prestart ? await prestart.canary : null;
+        const probe = stored
+            ? async (host) => stored.results.get(host) ?? liveProbe(host)
+            : liveProbe;
         const targets = {
             allowedHost: egressCanaryAllowedHost(context.apiBaseUrl),
             deniedHost: context.egressCanaryHost,
         };
         let canary;
         try {
-            canary = await runEgressCanary(targets, sink, probe, opts.now);
+            canary = await runEgressCanary(targets, sink, probe, stored ? () => stored.checkedAt : opts.now);
         }
         catch (error) {
             // The canary's own event append failed — treat as fail-closed: we cannot
@@ -490,26 +568,52 @@ export async function runHostedLoop(opts) {
                     payload: { step: 'opencode_install', ok: install.ok, detail: install.detail },
                 });
             }
+            const logPath = opts.sharedRuntime?.spawnLogPath ?? join(tmpdir(), `opencode-serve-${context.runId}.log`);
+            // ORI-2512: the first turn takes the server the boot started during the
+            // clone and asks it something only now, after the clone. A background
+            // start that failed, or a process that already exited, is started again
+            // here in order.
+            const waitStartedAt = Date.now();
+            let prestarted = null;
+            if (prestart && opts.sharedRuntime) {
+                opts.sharedRuntime.prestart = null;
+                let started = null;
+                try {
+                    started = await prestart.opencode;
+                }
+                catch {
+                    diagnose('hosted OpenCode background start failed; starting it in order');
+                }
+                if (started) {
+                    try {
+                        prestarted = await waitOpenCodeReady(started, { logPath, signal });
+                    }
+                    catch (error) {
+                        if (!(error instanceof OpenCodeExitedError))
+                            throw error;
+                        diagnose('hosted OpenCode background start exited; starting it in order');
+                    }
+                }
+            }
             const spawnImpl = opts.spawnOpenCode ?? spawnOpenCode;
             // The default spawnOpenCode WAITS for the server to answer HTTP before
             // returning — OpenCode's first boot runs a one-time sqlite migration, and
             // starting the harness before the server listens raced straight into a
             // connection-refused "fetch failed" (ALI-1034).
-            spawned = await spawnImpl({
-                model: context.model,
-                permission: permissionForOrigin(context.sessionOrigin),
-                projectId: context.projectId,
-                cwd: context.workspaceDir,
-                port: context.opencodePort,
-                env: buildOpenCodeSpawnEnv(context),
-                spawn: nodeChildSpawner,
-                logPath: opts.sharedRuntime?.spawnLogPath ?? join(tmpdir(), `opencode-serve-${context.runId}.log`),
-                signal,
-            });
+            spawned = prestarted ?? await spawnImpl({ ...openCodeSpawnOptions(context, logPath), signal });
             if (typeof spawned.readyAfterMs === 'number') {
                 await sink.append({
                     kind: 'artifact',
-                    payload: { step: 'opencode_ready', ok: true, waitedMs: spawned.readyAfterMs },
+                    payload: {
+                        step: 'opencode_ready',
+                        ok: true,
+                        // How long this turn waited for OpenCode. When the boot started it
+                        // during the clone, that is the wait after the clone; the time
+                        // since it was started (clone included) is kept apart.
+                        ...(prestarted
+                            ? { waitedMs: Date.now() - waitStartedAt, prestarted: true, sinceStartMs: spawned.readyAfterMs }
+                            : { waitedMs: spawned.readyAfterMs }),
+                    },
                 });
             }
             // Fail-fast model validation (ALI-1086): ask the RUNNING opencode whether
@@ -804,7 +908,7 @@ export async function runHostedLoop(opts) {
         }
     }
 }
-export async function startHostedLoopSession(context) {
+export async function startHostedLoopSession(context, options = {}) {
     return {
         context,
         runtime: {
@@ -813,11 +917,16 @@ export async function startHostedLoopSession(context) {
             agentSessionId: null,
             installOk: false,
             startupComplete: false,
-            spawnLogPath: join(context.sessionDir, `opencode-serve-${context.sessionId}.log`),
+            spawnLogPath: hostedSessionOpenCodeLogPath(context),
             closed: false,
+            prestart: options.prestart ?? null,
         },
     };
 }
+/** Where a hosted session's `opencode serve` writes its output. */
+export function hostedSessionOpenCodeLogPath(context) {
+    return join(context.sessionDir, `opencode-serve-${context.sessionId}.log`);
+}
 export async function runHostedLoopTurn(session, turn, options) {
     if (session.runtime.closed)
         throw new Error('hosted loop session is closed');

package/dist/hosted-optimization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-optimization.d.ts","sourceRoot":"","sources":["../src/hosted-optimization.ts"],"names":[],"mappings":"AAeA,UAAU,oBAAoB;IAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAsZrF,wBAAsB,yBAAyB,CAAC,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2FzF"}
+{"version":3,"file":"hosted-optimization.d.ts","sourceRoot":"","sources":["../src/hosted-optimization.ts"],"names":[],"mappings":"AAcA,UAAU,oBAAoB;IAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAgZrF,wBAAsB,yBAAyB,CAAC,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoHzF"}