terminalhire 0.42.38 → 0.42.39

package/dist/bin/jpi-claim.js

@@ -29349,7 +29349,7 @@ function resolvePublishedImage(image, runtime, version, variant) {
   if (shape && shape.declaredIsFloor && atLeast(shape.defaultVersion, version)) {
     return unversionedImage(shape);
   }
-  throw new RunRefusalError(`the repo declares ${runtime} ${version}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.");
+  throw new RunRefusalError(`the repo declares ${runtime} ${version}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.", { origin: "repository" });
 }
 function resolveImageForSpec(spec, override) {
   const variant = imageVariantFor(spec);
@@ -29588,6 +29588,17 @@ var init_execute = __esm({
     EnvRunError = class extends Error {
     };
     RunRefusalError = class extends EnvRunError {
+      /**
+       * Whose side refused (TERM-1313), set at the throw and never read back out of the message.
+       * A baseline intake labels a posting not-runnable on `repository`, so that value is passed
+       * only where envrun can show the repository asked for something we cannot supply. Every
+       * other refusal, including one nobody has classified yet, is `ours` by default.
+       */
+      origin;
+      constructor(message2, options) {
+        super(message2, options);
+        this.origin = options?.origin ?? "ours";
+      }
     };
     MAX_CAUSE_FRAMES = 16;
     CHAIN_UNREADABLE = "<the cause chain stopped: a value refused to be read>";
@@ -30509,7 +30520,8 @@ var init_result = __esm({
       "imageSource",
       "leaksClean",
       "leakState",
-      "venue"
+      "venue",
+      "refusalOrigin"
     ];
     RENDER_NONE = null;
     FIELD_VIEWS = {
@@ -30569,7 +30581,10 @@ var init_result = __esm({
       // Absent on most runs, so it prints only when there is something to say. Silence
       // here is the honest rendering of "no venue answered": a placeholder line would
       // invite a reader to treat an unanswered probe as a described venue.
-      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue)
+      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue),
+      // For the worker and the baseline intake, not the terminal: `reason` already says which
+      // side refused in words a developer reads.
+      refusalOrigin: RENDER_NONE
     };
   }
 });
@@ -37047,6 +37062,18 @@ function applyPatch(repoDir, patch, what) {
     throw new ThRunError(`the ${what} did not apply cleanly to the target checkout: ${(res.stderr ?? "").trim()}. The diff was built against a different commit than the one being verified.`);
   }
 }
+function imageInputsAt(repoDir) {
+  try {
+    const pinned = deriveEnvironmentSpec(repoDir);
+    return {
+      runtime: pinned.runtime,
+      runtimeVersion: pinned.runtimeVersion,
+      variant: imageVariantFor(pinned)
+    };
+  } catch {
+    return null;
+  }
+}
 function tail(text, bytes = OUTPUT_TAIL_BYTES) {
   return text.length <= bytes ? text : text.slice(-bytes);
 }
@@ -37102,9 +37129,17 @@ function refusedRun(fields) {
     // A refused run never held a lease, so there is no venue to describe. Same
     // reasoning as `leaksClean` above: null because nothing happened, and it must
     // not read as a venue we looked at and could not name.
-    venue: null
+    venue: null,
+    refusalOrigin: fields.origin
   };
 }
+function refusalOriginOf(refusal2) {
+  try {
+    return refusal2.origin === "repository" ? "repository" : "ours";
+  } catch {
+    return "ours";
+  }
+}
 function unacceptableTarget(req) {
   try {
     assertSafeTargetUrl(req.targetRepo);
@@ -37185,7 +37220,8 @@ async function verifyWorkingDiff(req) {
   const ctx = {
     startedAt: Date.now(),
     runId: req.runId ?? `run-${randomUUID3().slice(0, 8)}`,
-    touchedPaths: []
+    touchedPaths: [],
+    imageChosenByRepository: false
   };
   const target = {
     claimId: req.claimId,
@@ -37200,6 +37236,10 @@ async function verifyWorkingDiff(req) {
       throw err;
     return {
       result: refusedRun({
+        // `repository` survives only when the repository's files alone chose the image.
+        // `resolvePublishedImage` knows the version came from the repo, but not whether an
+        // override picked the image variant the missing tag belongs to (Codex, TERM-1313).
+        origin: refusalOriginOf(refusal2) === "repository" && ctx.imageChosenByRepository ? "repository" : "ours",
         runId: ctx.runId,
         claimId: target.claimId,
         // `describeThrown`, not `refusal.message`. Classifying a value does not make
@@ -37267,6 +37307,7 @@ async function runVerification(req, ctx) {
   if (badTarget !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: badTarget,
@@ -37290,6 +37331,7 @@ async function runVerification(req, ctx) {
   if (placement.refusal !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: placement.refusal,
@@ -37333,6 +37375,7 @@ async function runVerification(req, ctx) {
     const first = pre.refusals[0];
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: first?.detail ?? "the diff was refused by the local slice pre-flight, but no reason was recorded",
@@ -37367,6 +37410,7 @@ async function runVerification(req, ctx) {
     // there and passing it unconditionally keeps one code path instead of two.
     ...req.targetAuth ? { auth: req.targetAuth } : {}
   });
+  const pinnedImageInputs = imageInputsAt(cloneDir);
   const baselinePatch = source.kind === "working-diff" ? source.baselinePatch : void 0;
   const hasBaselinePatch = baselinePatch !== void 0 && baselinePatch.trim() !== "";
   if (hasBaselinePatch) {
@@ -37387,6 +37431,9 @@ async function runVerification(req, ctx) {
   if (lockfileRefusals.length > 0) {
     return {
       result: refusedRun({
+        // The developer's diff, not the repository's environment, so never `repository`
+        // (TERM-1313). Only a working diff is judged here; a dispatched baseline has none.
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: lockfileRefusals[0]?.detail ?? "a lockfile in the diff was refused",
@@ -37408,6 +37455,7 @@ async function runVerification(req, ctx) {
   const baselinePatchSha256 = hasBaselinePatch ? sha256Hex(baselinePatch ?? "") : null;
   const derived = deriveEnvironmentSpec(cloneDir);
   const { spec, imageSource } = resolveRunEnvironment(derived, req);
+  ctx.imageChosenByRepository = imageSource === "detected" && imageVariantFor(spec) === imageVariantFor(derived) && pinnedImageInputs !== null && pinnedImageInputs.runtime === spec.runtime && pinnedImageInputs.runtimeVersion === spec.runtimeVersion && pinnedImageInputs.variant === imageVariantFor(spec);
   progress("derive", `runtime=${spec.runtime} install=${String(spec.installCommand)} test=${String(spec.testCommand)}`);
   const unfrozenNote = installUnfrozenNote(spec);
   if (unfrozenNote !== null)
@@ -37418,6 +37466,7 @@ async function runVerification(req, ctx) {
   if (!resolved.ok) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: resolved.refusal,
@@ -37529,7 +37578,9 @@ async function runVerification(req, ctx) {
       // Built from the LEASE, over the client that ran the steps — never from
       // `req.placement`, which is a request. `venueDescriptor.ts` carries the
       // reasoning and the #735 failure that makes the distinction load-bearing.
-      venue: describeVenue(lease)
+      venue: describeVenue(lease),
+      // A run that reached a verdict was not refused, so neither side refused it.
+      refusalOrigin: null
     };
     let later = null;
     if (req.screenshots !== void 0) {

package/dist/bin/jpi-dispatch.js

@@ -35124,7 +35124,7 @@ function resolvePublishedImage(image, runtime, version2, variant) {
   if (shape && shape.declaredIsFloor && atLeast(shape.defaultVersion, version2)) {
     return unversionedImage(shape);
   }
-  throw new RunRefusalError(`the repo declares ${runtime} ${version2}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.");
+  throw new RunRefusalError(`the repo declares ${runtime} ${version2}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.", { origin: "repository" });
 }
 function resolveImageForSpec(spec, override) {
   const variant = imageVariantFor(spec);
@@ -35363,6 +35363,17 @@ var init_execute = __esm({
     EnvRunError = class extends Error {
     };
     RunRefusalError = class extends EnvRunError {
+      /**
+       * Whose side refused (TERM-1313), set at the throw and never read back out of the message.
+       * A baseline intake labels a posting not-runnable on `repository`, so that value is passed
+       * only where envrun can show the repository asked for something we cannot supply. Every
+       * other refusal, including one nobody has classified yet, is `ours` by default.
+       */
+      origin;
+      constructor(message2, options) {
+        super(message2, options);
+        this.origin = options?.origin ?? "ours";
+      }
     };
     MAX_CAUSE_FRAMES = 16;
     CHAIN_UNREADABLE = "<the cause chain stopped: a value refused to be read>";
@@ -36284,7 +36295,8 @@ var init_result = __esm({
       "imageSource",
       "leaksClean",
       "leakState",
-      "venue"
+      "venue",
+      "refusalOrigin"
     ];
     RENDER_NONE = null;
     FIELD_VIEWS = {
@@ -36344,7 +36356,10 @@ var init_result = __esm({
       // Absent on most runs, so it prints only when there is something to say. Silence
       // here is the honest rendering of "no venue answered": a placeholder line would
       // invite a reader to treat an unanswered probe as a described venue.
-      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue)
+      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue),
+      // For the worker and the baseline intake, not the terminal: `reason` already says which
+      // side refused in words a developer reads.
+      refusalOrigin: RENDER_NONE
     };
   }
 });
@@ -42822,6 +42837,18 @@ function applyPatch(repoDir, patch, what) {
     throw new ThRunError(`the ${what} did not apply cleanly to the target checkout: ${(res.stderr ?? "").trim()}. The diff was built against a different commit than the one being verified.`);
   }
 }
+function imageInputsAt(repoDir) {
+  try {
+    const pinned = deriveEnvironmentSpec(repoDir);
+    return {
+      runtime: pinned.runtime,
+      runtimeVersion: pinned.runtimeVersion,
+      variant: imageVariantFor(pinned)
+    };
+  } catch {
+    return null;
+  }
+}
 function tail(text, bytes = OUTPUT_TAIL_BYTES) {
   return text.length <= bytes ? text : text.slice(-bytes);
 }
@@ -42877,9 +42904,17 @@ function refusedRun(fields) {
     // A refused run never held a lease, so there is no venue to describe. Same
     // reasoning as `leaksClean` above: null because nothing happened, and it must
     // not read as a venue we looked at and could not name.
-    venue: null
+    venue: null,
+    refusalOrigin: fields.origin
   };
 }
+function refusalOriginOf(refusal2) {
+  try {
+    return refusal2.origin === "repository" ? "repository" : "ours";
+  } catch {
+    return "ours";
+  }
+}
 function unacceptableTarget(req) {
   try {
     assertSafeTargetUrl(req.targetRepo);
@@ -42960,7 +42995,8 @@ async function verifyWorkingDiff(req) {
   const ctx = {
     startedAt: Date.now(),
     runId: req.runId ?? `run-${randomUUID3().slice(0, 8)}`,
-    touchedPaths: []
+    touchedPaths: [],
+    imageChosenByRepository: false
   };
   const target = {
     claimId: req.claimId,
@@ -42975,6 +43011,10 @@ async function verifyWorkingDiff(req) {
       throw err;
     return {
       result: refusedRun({
+        // `repository` survives only when the repository's files alone chose the image.
+        // `resolvePublishedImage` knows the version came from the repo, but not whether an
+        // override picked the image variant the missing tag belongs to (Codex, TERM-1313).
+        origin: refusalOriginOf(refusal2) === "repository" && ctx.imageChosenByRepository ? "repository" : "ours",
         runId: ctx.runId,
         claimId: target.claimId,
         // `describeThrown`, not `refusal.message`. Classifying a value does not make
@@ -43042,6 +43082,7 @@ async function runVerification(req, ctx) {
   if (badTarget !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: badTarget,
@@ -43065,6 +43106,7 @@ async function runVerification(req, ctx) {
   if (placement.refusal !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: placement.refusal,
@@ -43108,6 +43150,7 @@ async function runVerification(req, ctx) {
     const first = pre.refusals[0];
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: first?.detail ?? "the diff was refused by the local slice pre-flight, but no reason was recorded",
@@ -43142,6 +43185,7 @@ async function runVerification(req, ctx) {
     // there and passing it unconditionally keeps one code path instead of two.
     ...req.targetAuth ? { auth: req.targetAuth } : {}
   });
+  const pinnedImageInputs = imageInputsAt(cloneDir);
   const baselinePatch = source.kind === "working-diff" ? source.baselinePatch : void 0;
   const hasBaselinePatch = baselinePatch !== void 0 && baselinePatch.trim() !== "";
   if (hasBaselinePatch) {
@@ -43162,6 +43206,9 @@ async function runVerification(req, ctx) {
   if (lockfileRefusals.length > 0) {
     return {
       result: refusedRun({
+        // The developer's diff, not the repository's environment, so never `repository`
+        // (TERM-1313). Only a working diff is judged here; a dispatched baseline has none.
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: lockfileRefusals[0]?.detail ?? "a lockfile in the diff was refused",
@@ -43183,6 +43230,7 @@ async function runVerification(req, ctx) {
   const baselinePatchSha256 = hasBaselinePatch ? sha256Hex(baselinePatch ?? "") : null;
   const derived = deriveEnvironmentSpec(cloneDir);
   const { spec, imageSource } = resolveRunEnvironment(derived, req);
+  ctx.imageChosenByRepository = imageSource === "detected" && imageVariantFor(spec) === imageVariantFor(derived) && pinnedImageInputs !== null && pinnedImageInputs.runtime === spec.runtime && pinnedImageInputs.runtimeVersion === spec.runtimeVersion && pinnedImageInputs.variant === imageVariantFor(spec);
   progress("derive", `runtime=${spec.runtime} install=${String(spec.installCommand)} test=${String(spec.testCommand)}`);
   const unfrozenNote = installUnfrozenNote(spec);
   if (unfrozenNote !== null)
@@ -43193,6 +43241,7 @@ async function runVerification(req, ctx) {
   if (!resolved.ok) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: resolved.refusal,
@@ -43304,7 +43353,9 @@ async function runVerification(req, ctx) {
       // Built from the LEASE, over the client that ran the steps — never from
       // `req.placement`, which is a request. `venueDescriptor.ts` carries the
       // reasoning and the #735 failure that makes the distinction load-bearing.
-      venue: describeVenue(lease)
+      venue: describeVenue(lease),
+      // A run that reached a verdict was not refused, so neither side refused it.
+      refusalOrigin: null
     };
     let later = null;
     if (req.screenshots !== void 0) {

package/dist/bin/jpi-mcp.js

@@ -29890,7 +29890,7 @@ function resolvePublishedImage(image, runtime, version2, variant) {
   if (shape && shape.declaredIsFloor && atLeast(shape.defaultVersion, version2)) {
     return unversionedImage(shape);
   }
-  throw new RunRefusalError(`the repo declares ${runtime} ${version2}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.");
+  throw new RunRefusalError(`the repo declares ${runtime} ${version2}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.", { origin: "repository" });
 }
 function resolveImageForSpec(spec, override) {
   const variant = imageVariantFor(spec);
@@ -30129,6 +30129,17 @@ var init_execute = __esm({
     EnvRunError = class extends Error {
     };
     RunRefusalError = class extends EnvRunError {
+      /**
+       * Whose side refused (TERM-1313), set at the throw and never read back out of the message.
+       * A baseline intake labels a posting not-runnable on `repository`, so that value is passed
+       * only where envrun can show the repository asked for something we cannot supply. Every
+       * other refusal, including one nobody has classified yet, is `ours` by default.
+       */
+      origin;
+      constructor(message2, options) {
+        super(message2, options);
+        this.origin = options?.origin ?? "ours";
+      }
     };
     MAX_CAUSE_FRAMES = 16;
     CHAIN_UNREADABLE = "<the cause chain stopped: a value refused to be read>";
@@ -31050,7 +31061,8 @@ var init_result = __esm({
       "imageSource",
       "leaksClean",
       "leakState",
-      "venue"
+      "venue",
+      "refusalOrigin"
     ];
     RENDER_NONE = null;
     FIELD_VIEWS = {
@@ -31110,7 +31122,10 @@ var init_result = __esm({
       // Absent on most runs, so it prints only when there is something to say. Silence
       // here is the honest rendering of "no venue answered": a placeholder line would
       // invite a reader to treat an unanswered probe as a described venue.
-      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue)
+      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue),
+      // For the worker and the baseline intake, not the terminal: `reason` already says which
+      // side refused in words a developer reads.
+      refusalOrigin: RENDER_NONE
     };
   }
 });
@@ -37588,6 +37603,18 @@ function applyPatch(repoDir, patch, what) {
     throw new ThRunError(`the ${what} did not apply cleanly to the target checkout: ${(res.stderr ?? "").trim()}. The diff was built against a different commit than the one being verified.`);
   }
 }
+function imageInputsAt(repoDir) {
+  try {
+    const pinned = deriveEnvironmentSpec(repoDir);
+    return {
+      runtime: pinned.runtime,
+      runtimeVersion: pinned.runtimeVersion,
+      variant: imageVariantFor(pinned)
+    };
+  } catch {
+    return null;
+  }
+}
 function tail(text, bytes = OUTPUT_TAIL_BYTES) {
   return text.length <= bytes ? text : text.slice(-bytes);
 }
@@ -37643,9 +37670,17 @@ function refusedRun(fields) {
     // A refused run never held a lease, so there is no venue to describe. Same
     // reasoning as `leaksClean` above: null because nothing happened, and it must
     // not read as a venue we looked at and could not name.
-    venue: null
+    venue: null,
+    refusalOrigin: fields.origin
   };
 }
+function refusalOriginOf(refusal2) {
+  try {
+    return refusal2.origin === "repository" ? "repository" : "ours";
+  } catch {
+    return "ours";
+  }
+}
 function unacceptableTarget(req) {
   try {
     assertSafeTargetUrl(req.targetRepo);
@@ -37726,7 +37761,8 @@ async function verifyWorkingDiff(req) {
   const ctx = {
     startedAt: Date.now(),
     runId: req.runId ?? `run-${randomUUID3().slice(0, 8)}`,
-    touchedPaths: []
+    touchedPaths: [],
+    imageChosenByRepository: false
   };
   const target = {
     claimId: req.claimId,
@@ -37741,6 +37777,10 @@ async function verifyWorkingDiff(req) {
       throw err;
     return {
       result: refusedRun({
+        // `repository` survives only when the repository's files alone chose the image.
+        // `resolvePublishedImage` knows the version came from the repo, but not whether an
+        // override picked the image variant the missing tag belongs to (Codex, TERM-1313).
+        origin: refusalOriginOf(refusal2) === "repository" && ctx.imageChosenByRepository ? "repository" : "ours",
         runId: ctx.runId,
         claimId: target.claimId,
         // `describeThrown`, not `refusal.message`. Classifying a value does not make
@@ -37808,6 +37848,7 @@ async function runVerification(req, ctx) {
   if (badTarget !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: badTarget,
@@ -37831,6 +37872,7 @@ async function runVerification(req, ctx) {
   if (placement.refusal !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: placement.refusal,
@@ -37874,6 +37916,7 @@ async function runVerification(req, ctx) {
     const first = pre.refusals[0];
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: first?.detail ?? "the diff was refused by the local slice pre-flight, but no reason was recorded",
@@ -37908,6 +37951,7 @@ async function runVerification(req, ctx) {
     // there and passing it unconditionally keeps one code path instead of two.
     ...req.targetAuth ? { auth: req.targetAuth } : {}
   });
+  const pinnedImageInputs = imageInputsAt(cloneDir);
   const baselinePatch = source.kind === "working-diff" ? source.baselinePatch : void 0;
   const hasBaselinePatch = baselinePatch !== void 0 && baselinePatch.trim() !== "";
   if (hasBaselinePatch) {
@@ -37928,6 +37972,9 @@ async function runVerification(req, ctx) {
   if (lockfileRefusals.length > 0) {
     return {
       result: refusedRun({
+        // The developer's diff, not the repository's environment, so never `repository`
+        // (TERM-1313). Only a working diff is judged here; a dispatched baseline has none.
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: lockfileRefusals[0]?.detail ?? "a lockfile in the diff was refused",
@@ -37949,6 +37996,7 @@ async function runVerification(req, ctx) {
   const baselinePatchSha256 = hasBaselinePatch ? sha256Hex(baselinePatch ?? "") : null;
   const derived = deriveEnvironmentSpec(cloneDir);
   const { spec, imageSource } = resolveRunEnvironment(derived, req);
+  ctx.imageChosenByRepository = imageSource === "detected" && imageVariantFor(spec) === imageVariantFor(derived) && pinnedImageInputs !== null && pinnedImageInputs.runtime === spec.runtime && pinnedImageInputs.runtimeVersion === spec.runtimeVersion && pinnedImageInputs.variant === imageVariantFor(spec);
   progress("derive", `runtime=${spec.runtime} install=${String(spec.installCommand)} test=${String(spec.testCommand)}`);
   const unfrozenNote = installUnfrozenNote(spec);
   if (unfrozenNote !== null)
@@ -37959,6 +38007,7 @@ async function runVerification(req, ctx) {
   if (!resolved.ok) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: resolved.refusal,
@@ -38070,7 +38119,9 @@ async function runVerification(req, ctx) {
       // Built from the LEASE, over the client that ran the steps — never from
       // `req.placement`, which is a request. `venueDescriptor.ts` carries the
       // reasoning and the #735 failure that makes the distinction load-bearing.
-      venue: describeVenue(lease)
+      venue: describeVenue(lease),
+      // A run that reached a verdict was not refused, so neither side refused it.
+      refusalOrigin: null
     };
     let later = null;
     if (req.screenshots !== void 0) {

package/dist/bin/jpi-run.js

@@ -3724,7 +3724,7 @@ function resolvePublishedImage(image, runtime, version, variant) {
   if (shape && shape.declaredIsFloor && atLeast(shape.defaultVersion, version)) {
     return unversionedImage(shape);
   }
-  throw new RunRefusalError(`the repo declares ${runtime} ${version}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.");
+  throw new RunRefusalError(`the repo declares ${runtime} ${version}, and no image is published at ${image}` + (shape && shape.declaredIsFloor ? `. Our default is ${shape.defaultVersion}, which is OLDER than that, so falling back would run the repo under a toolchain it says it cannot use` : `. ${runtime} treats a declared version as an exact pin, not a minimum, so a different one is a different environment`) + ". Refusing rather than booting a version the repo did not ask for \u2014 that substitution is what made this class of failure unattributable (TERM-643). Pass an explicit image to override.", { origin: "repository" });
 }
 function resolveImageForSpec(spec, override) {
   const variant = imageVariantFor(spec);
@@ -3963,6 +3963,17 @@ var init_execute = __esm({
     EnvRunError = class extends Error {
     };
     RunRefusalError = class extends EnvRunError {
+      /**
+       * Whose side refused (TERM-1313), set at the throw and never read back out of the message.
+       * A baseline intake labels a posting not-runnable on `repository`, so that value is passed
+       * only where envrun can show the repository asked for something we cannot supply. Every
+       * other refusal, including one nobody has classified yet, is `ours` by default.
+       */
+      origin;
+      constructor(message2, options) {
+        super(message2, options);
+        this.origin = options?.origin ?? "ours";
+      }
     };
     MAX_CAUSE_FRAMES = 16;
     CHAIN_UNREADABLE = "<the cause chain stopped: a value refused to be read>";
@@ -4884,7 +4895,8 @@ var init_result = __esm({
       "imageSource",
       "leaksClean",
       "leakState",
-      "venue"
+      "venue",
+      "refusalOrigin"
     ];
     RENDER_NONE = null;
     FIELD_VIEWS = {
@@ -4944,7 +4956,10 @@ var init_result = __esm({
       // Absent on most runs, so it prints only when there is something to say. Silence
       // here is the honest rendering of "no venue answered": a placeholder line would
       // invite a reader to treat an unanswered probe as a described venue.
-      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue)
+      venue: (r) => r.venue === null ? null : renderVenueLine(r.venue),
+      // For the worker and the baseline intake, not the terminal: `reason` already says which
+      // side refused in words a developer reads.
+      refusalOrigin: RENDER_NONE
     };
   }
 });
@@ -11597,6 +11612,18 @@ function applyPatch(repoDir, patch, what) {
     throw new ThRunError(`the ${what} did not apply cleanly to the target checkout: ${(res.stderr ?? "").trim()}. The diff was built against a different commit than the one being verified.`);
   }
 }
+function imageInputsAt(repoDir) {
+  try {
+    const pinned = deriveEnvironmentSpec(repoDir);
+    return {
+      runtime: pinned.runtime,
+      runtimeVersion: pinned.runtimeVersion,
+      variant: imageVariantFor(pinned)
+    };
+  } catch {
+    return null;
+  }
+}
 function tail(text, bytes = OUTPUT_TAIL_BYTES) {
   return text.length <= bytes ? text : text.slice(-bytes);
 }
@@ -11652,9 +11679,17 @@ function refusedRun(fields) {
     // A refused run never held a lease, so there is no venue to describe. Same
     // reasoning as `leaksClean` above: null because nothing happened, and it must
     // not read as a venue we looked at and could not name.
-    venue: null
+    venue: null,
+    refusalOrigin: fields.origin
   };
 }
+function refusalOriginOf(refusal2) {
+  try {
+    return refusal2.origin === "repository" ? "repository" : "ours";
+  } catch {
+    return "ours";
+  }
+}
 function unacceptableTarget(req) {
   try {
     assertSafeTargetUrl(req.targetRepo);
@@ -11735,7 +11770,8 @@ async function verifyWorkingDiff(req) {
   const ctx = {
     startedAt: Date.now(),
     runId: req.runId ?? `run-${randomUUID().slice(0, 8)}`,
-    touchedPaths: []
+    touchedPaths: [],
+    imageChosenByRepository: false
   };
   const target = {
     claimId: req.claimId,
@@ -11750,6 +11786,10 @@ async function verifyWorkingDiff(req) {
       throw err;
     return {
       result: refusedRun({
+        // `repository` survives only when the repository's files alone chose the image.
+        // `resolvePublishedImage` knows the version came from the repo, but not whether an
+        // override picked the image variant the missing tag belongs to (Codex, TERM-1313).
+        origin: refusalOriginOf(refusal2) === "repository" && ctx.imageChosenByRepository ? "repository" : "ours",
         runId: ctx.runId,
         claimId: target.claimId,
         // `describeThrown`, not `refusal.message`. Classifying a value does not make
@@ -11817,6 +11857,7 @@ async function runVerification(req, ctx) {
   if (badTarget !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: badTarget,
@@ -11840,6 +11881,7 @@ async function runVerification(req, ctx) {
   if (placement.refusal !== null) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: placement.refusal,
@@ -11883,6 +11925,7 @@ async function runVerification(req, ctx) {
     const first = pre.refusals[0];
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: first?.detail ?? "the diff was refused by the local slice pre-flight, but no reason was recorded",
@@ -11917,6 +11960,7 @@ async function runVerification(req, ctx) {
     // there and passing it unconditionally keeps one code path instead of two.
     ...req.targetAuth ? { auth: req.targetAuth } : {}
   });
+  const pinnedImageInputs = imageInputsAt(cloneDir);
   const baselinePatch = source.kind === "working-diff" ? source.baselinePatch : void 0;
   const hasBaselinePatch = baselinePatch !== void 0 && baselinePatch.trim() !== "";
   if (hasBaselinePatch) {
@@ -11937,6 +11981,9 @@ async function runVerification(req, ctx) {
   if (lockfileRefusals.length > 0) {
     return {
       result: refusedRun({
+        // The developer's diff, not the repository's environment, so never `repository`
+        // (TERM-1313). Only a working diff is judged here; a dispatched baseline has none.
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: lockfileRefusals[0]?.detail ?? "a lockfile in the diff was refused",
@@ -11958,6 +12005,7 @@ async function runVerification(req, ctx) {
   const baselinePatchSha256 = hasBaselinePatch ? sha256Hex(baselinePatch ?? "") : null;
   const derived = deriveEnvironmentSpec(cloneDir);
   const { spec, imageSource } = resolveRunEnvironment(derived, req);
+  ctx.imageChosenByRepository = imageSource === "detected" && imageVariantFor(spec) === imageVariantFor(derived) && pinnedImageInputs !== null && pinnedImageInputs.runtime === spec.runtime && pinnedImageInputs.runtimeVersion === spec.runtimeVersion && pinnedImageInputs.variant === imageVariantFor(spec);
   progress("derive", `runtime=${spec.runtime} install=${String(spec.installCommand)} test=${String(spec.testCommand)}`);
   const unfrozenNote = installUnfrozenNote(spec);
   if (unfrozenNote !== null)
@@ -11968,6 +12016,7 @@ async function runVerification(req, ctx) {
   if (!resolved.ok) {
     return {
       result: refusedRun({
+        origin: "ours",
         runId,
         claimId: req.claimId,
         reason: resolved.refusal,
@@ -12079,7 +12128,9 @@ async function runVerification(req, ctx) {
       // Built from the LEASE, over the client that ran the steps — never from
       // `req.placement`, which is a request. `venueDescriptor.ts` carries the
       // reasoning and the #735 failure that makes the distinction load-bearing.
-      venue: describeVenue(lease)
+      venue: describeVenue(lease),
+      // A run that reached a verdict was not refused, so neither side refused it.
+      refusalOrigin: null
     };
     let later = null;
     if (req.screenshots !== void 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "terminalhire",
-  "version": "0.42.38",
+  "version": "0.42.39",
   "description": "Developer jobs and paid bounties, matched in the terminal — ambient matches in the Claude Code spinner. Claim a scoped bounty and get paid when the poster accepts it.",
   "repository": {
     "type": "git",