@@ -0,0 +1,13 @@
+---
+'@objectstack/cloud-connection': patch
+---
+
+feat(cloud-connection): install-local's reseed and sample-data count reach an unmanaged copy, and retry a failed first load (#31425)
+
+Clause-②: yes (widening) — `POST /api/v1/marketplace/install-local/:id/reseed-sample-data` and `GET …/:id/sample-data` now serve the base of an unmanaged copy this door made with `seedSampleData: true`, which they answered `404` before. Nothing is narrowed.
+Metadata-protocol: none
+
+- **Reseed.** For a copy, the reseed loads the sample data again from the copy's seed receipt, through the same read of it the purge uses: the rows it creates are owned by the caller, it answers the same four counts, and a run over an intact baseline succeeds with `inserted: 0`. A copy made without the sample data answers `400 RESEED_SKIPPED`, and a receipt that could not be read answers `503 SERVICE_UNAVAILABLE`, never "no sample data".
+- **Retry.** A copy whose first load failed at install (`seeded.mode: 'skipped'` with `seed-receipt-unread` or `seed-error`) is loaded by the reseed from the stored receipt, instead of a re-run of the install that the import refuses `409`.
+- **Count.** For a copy, the count is the rows a purge of the copy would delete now; `count: 0` for a copy made without the sample data.
+- **Unchanged.** Any other base, a Studio-authored one with published seed items included, still answers `404` on all three doors. Uninstalling a copy is `DELETE /api/v1/packages/:baseId`, which drops its tables with their rows unless `keepData: true` keeps them all; this door does not purge on uninstall.
@@ -226,7 +226,13 @@ the detail.
    offers **Add sample data**, then **Re-seed sample data**, and **Purge sample
    data**, which deletes only the records your seed created. Behind them are
    `POST /api/v1/marketplace/install-local/:manifestId/reseed-sample-data` and
-   `…/purge-sample-data`, both requiring `manage_metadata`.
+   `…/purge-sample-data`, both requiring `manage_metadata`. For an unmanaged
+   copy installed with its sample data, call them with the copy's base id: they
+   act on the sample data the copy holds, and the reseed also loads it again
+   after a first load that failed. Uninstalling the copy
+   (`DELETE /api/v1/packages/:baseId`) drops its tables with every row in them;
+   with `?keepData=true` every row stays, sample rows included, and no door
+   tells them apart any more, so purge first if you want them gone.
 7. **Enable and disable.** **Setup → Installed Apps** lists the apps installed
    from the marketplace, each package of a suite as its own row. An admin with
    `manage_metadata` may disable a writable package, and a **module of an
 
@@ -780,6 +780,8 @@ describe('install-local — an unmanaged copy\'s sample data, asked for with `se
             }
             return { sourcePackageId: source.id, targetPackageId, namespace: source.namespace, copiedCount: copied.length, copied, strippedLocks: [] };
         });
+        // [#31425] The metadata service's object read the seed run's dependency graph asks; a spy, so a case can make one load throw.
+        const metadataGetObject = vi.fn(async (name: string) => objects.get(name));
         const cleanups = new Map<string, (args: { packageId: string }) => Promise<{ success: boolean; removed: number; error?: string }>>();
         // [#30964] The `audit` slot's package lifecycle writer, as the door reaches it.
         const auditEvents: any[] = [];
@@ -812,7 +814,7 @@ describe('install-local — an unmanaged copy\'s sample data, asked for with `se
                 manifest: { register },
                 auth: installerAuthService(INSTALLER),
                 objectql: grantsOf(withInstallerGrants(engine, INSTALLER)),
-                metadata: { getObject: async (name: string) => objects.get(name) },
+                metadata: { getObject: metadataGetObject },
                 protocol: {
                     importUnmanagedPackage, getMetaItem,
                     registerUninstallCleanup: (name: string, cleanup: any) => { cleanups.set(name, cleanup); },
@@ -841,13 +843,15 @@ describe('install-local — an unmanaged copy\'s sample data, asked for with `se
             return {
                 install: (body: unknown) => routes.get(`POST ${ROUTE}`)!(makeC(body)),
                 purge: (manifestId: string) => routes.get(`POST ${ROUTE}/:manifestId/purge-sample-data`)!(purgeC(manifestId)),
+                reseed: (manifestId: string) => routes.get(`POST ${ROUTE}/:manifestId/reseed-sample-data`)!(purgeC(manifestId)),
+                count: (manifestId: string) => routes.get(`GET ${ROUTE}/:manifestId/sample-data`)!(purgeC(manifestId)),
                 register,
                 logger,
                 /** [#30964] The in-process door init() registered. */
                 door: services['marketplace-install-local'] as { install(r: Request): Promise<Response> } | undefined,
             };
         }
-        return { tables, writes, seedRows, packages, packageRows, packageGet, storeFault, auditEvents, importUnmanagedPackage, getMetaItem, cleanups, boot };
+        return { tables, writes, seedRows, packages, packageRows, packageGet, storeFault, auditEvents, importUnmanagedPackage, getMetaItem, metadataGetObject, cleanups, boot };
     }
 
     it('off by default: the import is not asked for the sample data, no row lands, and the answer says it was skipped', async () => {
@@ -1156,6 +1160,126 @@ describe('install-local — an unmanaged copy\'s sample data, asked for with `se
         expect((await h.purge('com.example.crm-copy')).status).toBe(404);
     });
 
+    // ── [#31425] Reseed and the count reach a recorded copy through the purge's receipt; a failed first load is retried there ──
+
+    it('the reseed of a recorded copy puts the purged sample rows back from the receipt, owned by the reseeder; nothing is ledgered', async () => {
+        const w = world();
+        const h = await w.boot();
+        await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        await h.purge('com.example.crm-copy');
+        expect(w.tables.crm_account).toEqual([]);
+
+        const res = await h.reseed('com.example.crm-copy');
+
+        expect(res.status, JSON.stringify(res.payload)).toBe(200);
+        expect(res.payload).toEqual({
+            success: true,
+            data: { manifestId: 'com.example.crm-copy', inserted: 3, updated: 0, skipped: 0, errors: 0, withSampleData: true },
+        });
+        const acme = w.tables.crm_account!.find((r) => r.name === 'Acme')!;
+        expect(w.tables.crm_account!.map((r) => r.name).sort()).toEqual(['Acme', 'Globex']);
+        expect(w.tables.crm_contact).toEqual([expect.objectContaining({ email: 'ada@acme.test', account: acme.id })]);
+        for (const row of [...w.tables.crm_account!, ...w.tables.crm_contact!]) {
+            expect({ owner_id: row.owner_id, created_by: row.created_by }).toEqual({ owner_id: INSTALLER, created_by: INSTALLER });
+        }
+        // Idempotent: a second reseed over the intact baseline writes nothing and succeeds.
+        const again = await h.reseed('com.example.crm-copy');
+        expect(again.status, JSON.stringify(again.payload)).toBe(200);
+        expect(again.payload.data).toMatchObject({ inserted: 0, skipped: 3, errors: 0 });
+        expect(new LocalManifestSource(dir).list().entries).toEqual([]);
+    });
+
+    it('the count of a recorded copy is the purge\'s match: every sample row after the install, none after the purge', async () => {
+        const w = world();
+        const h = await w.boot();
+        await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        w.tables.crm_account!.push({ id: 'u1', name: 'Initech', owner_id: INSTALLER });
+
+        const counted = await h.count('com.example.crm-copy');
+
+        expect(counted.status, JSON.stringify(counted.payload)).toBe(200);
+        expect(counted.payload).toEqual({ success: true, data: { manifestId: 'com.example.crm-copy', count: 3, unidentified: 0 } });
+        await h.purge('com.example.crm-copy');
+        expect((await h.count('com.example.crm-copy')).payload.data).toEqual({ manifestId: 'com.example.crm-copy', count: 0, unidentified: 0 });
+    });
+
+    it('a first load whose receipt could not be read (`seed-receipt-unread`) is retried by the reseed, from the stored receipt', async () => {
+        const w = world();
+        const h = await w.boot();
+        w.getMetaItem.mockRejectedValueOnce(new Error('sys_metadata is unreachable'));
+        const installed = await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        expect(installed.payload.data.seeded).toMatchObject({ mode: 'skipped', reason: expect.stringContaining('seed-receipt-unread') });
+        expect(w.tables.crm_account ?? []).toEqual([]);
+
+        const res = await h.reseed('com.example.crm-copy');
+
+        expect(res.status, JSON.stringify(res.payload)).toBe(200);
+        expect(res.payload.data).toMatchObject({ inserted: 3, errors: 0 });
+        expect(w.tables.crm_account!.map((r) => r.name).sort()).toEqual(['Acme', 'Globex']);
+    });
+
+    it('a first load that threw (`seed-error`) is retried by the reseed, from the stored receipt', async () => {
+        const w = world();
+        const h = await w.boot();
+        w.metadataGetObject.mockRejectedValueOnce(new Error('the metadata service is restarting'));
+        const installed = await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        expect(installed.payload.data.seeded).toMatchObject({ mode: 'skipped', reason: expect.stringContaining('seed-error') });
+        expect(w.tables.crm_account ?? []).toEqual([]);
+
+        const res = await h.reseed('com.example.crm-copy');
+
+        expect(res.status, JSON.stringify(res.payload)).toBe(200);
+        expect(res.payload.data).toMatchObject({ inserted: 3, errors: 0 });
+    });
+
+    it('reseed and count reach no other base: a Studio base with published seed items, and an id that is no base, answer 404 and write nothing', async () => {
+        const w = world();
+        const h = await w.boot();
+        await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        await h.purge('com.example.crm-copy');
+        w.packages.set('com.example.studio', { manifest: { id: 'com.example.studio', namespace: 'studio' } });
+        w.tables.sys_metadata!.push({
+            id: 'studio-seed', type: 'seed', name: 'crm_account_seed', package_id: 'com.example.studio', state: 'active',
+            metadata: { object: 'crm_account', externalId: 'name', records: [{ name: 'Acme' }] },
+        } as Row);
+        const before = w.writes.length;
+        for (const id of ['com.example.studio', 'com.example.nothing']) {
+            for (const res of [await h.reseed(id), await h.count(id)]) {
+                expect(res.status, `${id}: ${JSON.stringify(res.payload)}`).toBe(404);
+                expect(res.payload.error.code).toBe('RESOURCE_NOT_FOUND');
+            }
+        }
+        expect(w.writes.length).toBe(before);
+    });
+
+    it('a copy made without the sample data: the reseed says no sample data was copied (400), and the count is 0', async () => {
+        const w = world();
+        const h = await w.boot();
+        await h.install({ manifest: seededCrm(), installMode: 'unmanaged' });
+        const res = await h.reseed('com.example.crm-copy');
+        expect(res.status, JSON.stringify(res.payload)).toBe(400);
+        expect(res.payload.error.code).toBe('RESEED_SKIPPED');
+        expect(res.payload.error.message).toContain('No sample data was copied into \'com.example.crm-copy\'');
+        expect(w.writes).toEqual([]);
+        expect((await h.count('com.example.crm-copy')).payload.data).toEqual({ manifestId: 'com.example.crm-copy', count: 0, unidentified: 0 });
+    });
+
+    it('an unreadable receipt is never read as "no sample data": the reseed and the count answer 503 and write nothing', async () => {
+        const w = world();
+        const h = await w.boot();
+        await h.install({ manifest: seededCrm(), installMode: 'unmanaged', seedSampleData: true });
+        await h.purge('com.example.crm-copy');
+        const before = w.writes.length;
+        for (const ask of [h.reseed, h.count]) {
+            w.getMetaItem.mockRejectedValueOnce(new Error('sys_metadata is unreachable'));
+            const res = await ask('com.example.crm-copy');
+            expect(res.status, JSON.stringify(res.payload)).toBe(503);
+            expect(res.payload.error.code).toBe('SERVICE_UNAVAILABLE');
+            expect(res.payload.error.message).not.toContain('sys_metadata is unreachable');
+        }
+        expect(w.writes.length).toBe(before);
+    });
+
     // ── [#30964, cloud#3624 ruling A「两边审计」] the environment's audit row of each copy, and the in-process door ──
 
     it('a copy that lands hands the audit slot one package_unmanaged_import event: the new base, its namespace, the count, success', async () => {