@cat-factory/contracts 0.223.0 → 0.225.0

package/dist/pr-report.d.ts

@@ -4,7 +4,18 @@ import * as v from 'valibot';
  * external consumer must notice. Backwards compatibility is a non-goal (see CLAUDE.md), so
  * a bump means "re-read the schema", not "a compatibility shim exists".
  */
-export declare const PR_VERIFICATION_REPORT_VERSION = 4;
+export declare const PR_VERIFICATION_REPORT_VERSION = 5;
+/**
+ * How much of one captured command log the report carries, per command.
+ *
+ * Bounded here rather than left to the producer: the harness already trims each tail to what a
+ * REPAIR PROMPT needs, and a pull-request body has a far tighter budget than a model's context
+ * window — ten checks at the harness's own ceiling would blow {@link
+ * hostMarkdown.MAX_SECTION_CHARS} on their own and cost the reader the whole machine-readable
+ * block. The cut keeps the END of the log (where a failure is reported) and is recorded in the
+ * report's `truncations`, so a shortened log never reads as a whole one.
+ */
+export declare const PR_REPORT_MAX_OUTPUT_CHARS = 2000;
 /**
  * Whether a section has evidence to show.
  *  - `reported` — the producing step ran and its evidence is below.
@@ -151,6 +162,187 @@ export declare const prReportTestsSchema: v.ObjectSchema<{
     readonly maxFixerAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
 }, undefined>;
 export type PrReportTests = v.InferOutput<typeof prReportTestsSchema>;
+/** One command's outcome in the run's pre-PR validation attempt. */
+export declare const prReportValidationCommandSchema: v.ObjectSchema<{
+    /** The check's configured label (`lint`, `test`, `build`, …). */
+    readonly label: v.StringSchema<undefined>;
+    /** The command line the harness ran in the checkout. */
+    readonly command: v.StringSchema<undefined>;
+    /** Exit code (0 = pass); 124 on watchdog timeout, 127 on spawn failure. */
+    readonly exitCode: v.NumberSchema<undefined>;
+    readonly passed: v.BooleanSchema<undefined>;
+    /** Set when the command was killed by the per-command watchdog rather than exiting. */
+    readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+    readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    /**
+     * The END of the command's combined stdout+stderr, secret-scrubbed and bounded to {@link
+     * PR_REPORT_MAX_OUTPUT_CHARS}.
+     *
+     * Carried for a FAILING command only, and that is a stated rule rather than a silent one: a
+     * green check's log is the one thing in this report a reviewer never acts on, and ten of them
+     * would cost the body budget that makes the failing one readable. `null` on a passing row
+     * therefore means "not retained", never "the command printed nothing" — the section says so in
+     * as many words, because those two readings are exactly the kind of collapse this report exists
+     * to remove.
+     */
+    readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+}, undefined>;
+export type PrReportValidationCommand = v.InferOutput<typeof prReportValidationCommandSchema>;
+/**
+ * The PRE-PR VALIDATION section: the service's own check commands, run by the executor-harness
+ * against the final checkout before the pull request was allowed to open, with their exit codes
+ * and the captured output of whatever failed.
+ *
+ * This is the report's strongest single claim, because it is the one the platform ENFORCED: only
+ * a green checkout opens a PR, so a `reported` + `passed` section says the commands in the table
+ * below actually ran and actually exited 0 on this tree. It is deliberately distinct from the
+ * `ci` section: CI is the host's verdict on the pushed branch (a different machine, later, and
+ * for a red run possibly never), while this is the platform's own captured run of the service's
+ * commands on the exact tree that was pushed.
+ *
+ * `absent` splits the causes that need different reactions, per the report's governing rule: a
+ * service that configured no checks is a deployment gap, a step that never got that far is a run
+ * outcome, and an older runner image that reports nothing is neither.
+ */
+export declare const prReportValidationSchema: v.ObjectSchema<{
+    readonly status: v.PicklistSchema<["reported", "absent"], undefined>;
+    /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+    readonly note: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** Whether every command in the recorded attempt exited 0 (⇒ the PR was allowed to open). */
+    readonly passed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+    /** The agent kind of the step that ran the checks, so a reader knows which dispatch this is. */
+    readonly stepKind: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** How many agent+check rounds ran, and the budget they ran under. */
+    readonly attempts: v.NumberSchema<undefined>;
+    readonly maxAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    /** Epoch ms the recorded attempt finished. */
+    readonly at: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    /** Per-command outcomes of the recorded attempt (capped like every list; see `truncations`). */
+    readonly commands: v.ArraySchema<v.ObjectSchema<{
+        /** The check's configured label (`lint`, `test`, `build`, …). */
+        readonly label: v.StringSchema<undefined>;
+        /** The command line the harness ran in the checkout. */
+        readonly command: v.StringSchema<undefined>;
+        /** Exit code (0 = pass); 124 on watchdog timeout, 127 on spawn failure. */
+        readonly exitCode: v.NumberSchema<undefined>;
+        readonly passed: v.BooleanSchema<undefined>;
+        /** Set when the command was killed by the per-command watchdog rather than exiting. */
+        readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        /**
+         * The END of the command's combined stdout+stderr, secret-scrubbed and bounded to {@link
+         * PR_REPORT_MAX_OUTPUT_CHARS}.
+         *
+         * Carried for a FAILING command only, and that is a stated rule rather than a silent one: a
+         * green check's log is the one thing in this report a reviewer never acts on, and ten of them
+         * would cost the body budget that makes the failing one readable. `null` on a passing row
+         * therefore means "not retained", never "the command printed nothing" — the section says so in
+         * as many words, because those two readings are exactly the kind of collapse this report exists
+         * to remove.
+         */
+        readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type PrReportValidation = v.InferOutput<typeof prReportValidationSchema>;
+/** One tree's run of the declared reproduction command (the pre-fix tree, or the final one). */
+export declare const prReportReproductionPhaseSchema: v.ObjectSchema<{
+    readonly exitCode: v.NumberSchema<undefined>;
+    readonly passed: v.BooleanSchema<undefined>;
+    readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+    /**
+     * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+     * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+     * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+     * design exists to prevent.
+     */
+    readonly setupFailed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+    /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+    readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+}, undefined>;
+export type PrReportReproductionPhase = v.InferOutput<typeof prReportReproductionPhaseSchema>;
+/**
+ * The BUGFIX REPRODUCTION PROOF section: evidence that the declared reproducing check was RED on
+ * the pre-fix tree and GREEN on the final one, which is the entire content of the claim "this
+ * change fixes the bug" and the last big agent ASSERTION on a bugfix PR still taken on trust.
+ *
+ * `verdict` is computed by the harness from two exit codes, never self-reported by a model — the
+ * `repro-test` kind's own `outcome` field has always been the model's claim, and this section is
+ * what checks it. Three shapes reach a reviewer:
+ *
+ *  - `reproduced` — red at base, green at final, with both captured logs below.
+ *  - `inconclusive` — anything else, stated plainly rather than dressed up. An ABSENT `final` is
+ *    normal here: a green base already settles the verdict, so the second tree is not run.
+ *  - `declared_infeasible` — the agent structurally declared reproduction impossible, with its
+ *    reason and the alternative verification it performed. Nothing ran, so there are no phases.
+ *
+ * `observation` is the harness's own one-line diagnosis of an inconclusive shape and is rendered
+ * VERBATIM. It is not interchangeable with re-deriving a cause from `base.passed`: a green base
+ * can mean the test does not capture the defect, or that a resumed run's pre-fix tree already
+ * carried this step's own interrupted work, and only the side that ran can tell those apart.
+ */
+export declare const prReportReproductionSchema: v.ObjectSchema<{
+    readonly status: v.PicklistSchema<["reported", "absent"], undefined>;
+    /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+    readonly note: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** The computed verdict. Null only when `status` is `absent`. */
+    readonly verdict: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["reproduced", "inconclusive", "declared_infeasible"], undefined>, undefined>, undefined>;
+    /** The command run identically against both trees (empty for `declared_infeasible`). */
+    readonly command: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** The declared test files that constitute the reproduction. */
+    readonly testPaths: v.ArraySchema<v.StringSchema<undefined>, undefined>;
+    /**
+     * How many declared paths were DROPPED before the proof ran (unsafe, over-long, or over the
+     * cap). Non-zero means the pre-fix tree was rebuilt from an incomplete reproduction, which can
+     * green it and read as "the test does not capture the defect" — so it is stated rather than
+     * implied.
+     */
+    readonly omittedTestPaths: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    /** The pre-fix tree's run. Absent for `declared_infeasible`. */
+    readonly base: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+        readonly exitCode: v.NumberSchema<undefined>;
+        readonly passed: v.BooleanSchema<undefined>;
+        readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        /**
+         * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+         * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+         * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+         * design exists to prevent.
+         */
+        readonly setupFailed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+        readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    }, undefined>, undefined>, undefined>;
+    /** The final tree's run. Absent for `declared_infeasible`, or when the base run settled it. */
+    readonly final: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+        readonly exitCode: v.NumberSchema<undefined>;
+        readonly passed: v.BooleanSchema<undefined>;
+        readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        /**
+         * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+         * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+         * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+         * design exists to prevent.
+         */
+        readonly setupFailed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+        readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    }, undefined>, undefined>, undefined>;
+    /** How many agent+verify rounds ran, and the budget they ran under. */
+    readonly attempts: v.NumberSchema<undefined>;
+    readonly maxAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    /** For `declared_infeasible`: WHY the bug could not be reproduced, verbatim from the agent. */
+    readonly reason: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** For `declared_infeasible`: what the agent verified INSTEAD, verbatim. */
+    readonly alternativeVerification: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** The producer's own one-line diagnosis of the observed shape. Rendered verbatim. */
+    readonly observation: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** Epoch ms the proof settled. */
+    readonly at: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+}, undefined>;
+export type PrReportReproduction = v.InferOutput<typeof prReportReproductionSchema>;
 /** One ephemeral environment the `deployer` step stood up (per service frame). */
 export declare const prReportEnvironmentSchema: v.ObjectSchema<{
     /** The service frame the environment was provisioned for. */
@@ -236,6 +428,20 @@ export declare const prReportEvidenceArtifactSchema: v.ObjectSchema<{
     readonly artifactId: v.StringSchema<undefined>;
     /** Whether a reference design image was paired with it for visual confirmation. */
     readonly hasReference: v.BooleanSchema<undefined>;
+    /**
+     * Direct link to the artifact's BYTES, on the deployment's own authenticated blob endpoint —
+     * the thing a reviewer (or a downstream tool holding an API key) actually wants from a row that
+     * used to carry an opaque id and nothing else.
+     *
+     * Deliberately the API URL rather than the app deep link beside it on the section: the deep link
+     * lands a human in the run's evidence panel, which is the right place to BROWSE, and is useless
+     * to anything that is not a browser with a session. Both are emitted because they answer
+     * different questions, and neither substitutes for the other.
+     *
+     * Null when the deployment configured no public backend URL, so the report never emits a link to
+     * nowhere; the `artifactId` is still there, which is what an operator greps the store for.
+     */
+    readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
 }, undefined>;
 export type PrReportEvidenceArtifact = v.InferOutput<typeof prReportEvidenceArtifactSchema>;
 /**
@@ -278,6 +484,20 @@ export declare const prReportEnvironmentEvidenceSchema: v.ObjectSchema<{
         readonly artifactId: v.StringSchema<undefined>;
         /** Whether a reference design image was paired with it for visual confirmation. */
         readonly hasReference: v.BooleanSchema<undefined>;
+        /**
+         * Direct link to the artifact's BYTES, on the deployment's own authenticated blob endpoint —
+         * the thing a reviewer (or a downstream tool holding an API key) actually wants from a row that
+         * used to carry an opaque id and nothing else.
+         *
+         * Deliberately the API URL rather than the app deep link beside it on the section: the deep link
+         * lands a human in the run's evidence panel, which is the right place to BROWSE, and is useless
+         * to anything that is not a browser with a session. Both are emitted because they answer
+         * different questions, and neither substitutes for the other.
+         *
+         * Null when the deployment configured no public backend URL, so the report never emits a link to
+         * nowhere; the `artifactId` is still there, which is what an operator greps the store for.
+         */
+        readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
     }, undefined>, undefined>;
     /**
      * Deep link into the run's captured evidence in the app. Null when the deployment configured
@@ -367,6 +587,20 @@ export declare const prReportEnvironmentsSchema: v.ObjectSchema<{
             readonly artifactId: v.StringSchema<undefined>;
             /** Whether a reference design image was paired with it for visual confirmation. */
             readonly hasReference: v.BooleanSchema<undefined>;
+            /**
+             * Direct link to the artifact's BYTES, on the deployment's own authenticated blob endpoint —
+             * the thing a reviewer (or a downstream tool holding an API key) actually wants from a row that
+             * used to carry an opaque id and nothing else.
+             *
+             * Deliberately the API URL rather than the app deep link beside it on the section: the deep link
+             * lands a human in the run's evidence panel, which is the right place to BROWSE, and is useless
+             * to anything that is not a browser with a session. Both are emitted because they answer
+             * different questions, and neither substitutes for the other.
+             *
+             * Null when the deployment configured no public backend URL, so the report never emits a link to
+             * nowhere; the `artifactId` is still there, which is what an operator greps the store for.
+             */
+            readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
         }, undefined>, undefined>;
         /**
          * Deep link into the run's captured evidence in the app. Null when the deployment configured
@@ -660,6 +894,108 @@ export declare const prVerificationReportSchema: v.ObjectSchema<{
         readonly fixerAttempts: v.NumberSchema<undefined>;
         readonly maxFixerAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
     }, undefined>;
+    /** The platform's OWN run of the service's check commands against the pushed tree. */
+    readonly validation: v.ObjectSchema<{
+        readonly status: v.PicklistSchema<["reported", "absent"], undefined>;
+        /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+        readonly note: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** Whether every command in the recorded attempt exited 0 (⇒ the PR was allowed to open). */
+        readonly passed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+        /** The agent kind of the step that ran the checks, so a reader knows which dispatch this is. */
+        readonly stepKind: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** How many agent+check rounds ran, and the budget they ran under. */
+        readonly attempts: v.NumberSchema<undefined>;
+        readonly maxAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        /** Epoch ms the recorded attempt finished. */
+        readonly at: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        /** Per-command outcomes of the recorded attempt (capped like every list; see `truncations`). */
+        readonly commands: v.ArraySchema<v.ObjectSchema<{
+            /** The check's configured label (`lint`, `test`, `build`, …). */
+            readonly label: v.StringSchema<undefined>;
+            /** The command line the harness ran in the checkout. */
+            readonly command: v.StringSchema<undefined>;
+            /** Exit code (0 = pass); 124 on watchdog timeout, 127 on spawn failure. */
+            readonly exitCode: v.NumberSchema<undefined>;
+            readonly passed: v.BooleanSchema<undefined>;
+            /** Set when the command was killed by the per-command watchdog rather than exiting. */
+            readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+            readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+            /**
+             * The END of the command's combined stdout+stderr, secret-scrubbed and bounded to {@link
+             * PR_REPORT_MAX_OUTPUT_CHARS}.
+             *
+             * Carried for a FAILING command only, and that is a stated rule rather than a silent one: a
+             * green check's log is the one thing in this report a reviewer never acts on, and ten of them
+             * would cost the body budget that makes the failing one readable. `null` on a passing row
+             * therefore means "not retained", never "the command printed nothing" — the section says so in
+             * as many words, because those two readings are exactly the kind of collapse this report exists
+             * to remove.
+             */
+            readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        }, undefined>, undefined>;
+    }, undefined>;
+    /** Red-on-the-pre-fix-tree, green-on-the-final-tree evidence for a bugfix run. */
+    readonly reproduction: v.ObjectSchema<{
+        readonly status: v.PicklistSchema<["reported", "absent"], undefined>;
+        /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+        readonly note: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** The computed verdict. Null only when `status` is `absent`. */
+        readonly verdict: v.OptionalSchema<v.NullableSchema<v.PicklistSchema<["reproduced", "inconclusive", "declared_infeasible"], undefined>, undefined>, undefined>;
+        /** The command run identically against both trees (empty for `declared_infeasible`). */
+        readonly command: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** The declared test files that constitute the reproduction. */
+        readonly testPaths: v.ArraySchema<v.StringSchema<undefined>, undefined>;
+        /**
+         * How many declared paths were DROPPED before the proof ran (unsafe, over-long, or over the
+         * cap). Non-zero means the pre-fix tree was rebuilt from an incomplete reproduction, which can
+         * green it and read as "the test does not capture the defect" — so it is stated rather than
+         * implied.
+         */
+        readonly omittedTestPaths: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        /** The pre-fix tree's run. Absent for `declared_infeasible`. */
+        readonly base: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+            readonly exitCode: v.NumberSchema<undefined>;
+            readonly passed: v.BooleanSchema<undefined>;
+            readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+            readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+            /**
+             * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+             * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+             * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+             * design exists to prevent.
+             */
+            readonly setupFailed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+            /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+            readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        }, undefined>, undefined>, undefined>;
+        /** The final tree's run. Absent for `declared_infeasible`, or when the base run settled it. */
+        readonly final: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+            readonly exitCode: v.NumberSchema<undefined>;
+            readonly passed: v.BooleanSchema<undefined>;
+            readonly durationMs: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+            readonly timedOut: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+            /**
+             * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+             * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+             * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+             * design exists to prevent.
+             */
+            readonly setupFailed: v.OptionalSchema<v.NullableSchema<v.BooleanSchema<undefined>, undefined>, undefined>;
+            /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+            readonly outputTail: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        }, undefined>, undefined>, undefined>;
+        /** How many agent+verify rounds ran, and the budget they ran under. */
+        readonly attempts: v.NumberSchema<undefined>;
+        readonly maxAttempts: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+        /** For `declared_infeasible`: WHY the bug could not be reproduced, verbatim from the agent. */
+        readonly reason: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** For `declared_infeasible`: what the agent verified INSTEAD, verbatim. */
+        readonly alternativeVerification: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** The producer's own one-line diagnosis of the observed shape. Rendered verbatim. */
+        readonly observation: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+        /** Epoch ms the proof settled. */
+        readonly at: v.OptionalSchema<v.NullableSchema<v.NumberSchema<undefined>, undefined>, undefined>;
+    }, undefined>;
     readonly tests: v.ObjectSchema<{
         readonly status: v.PicklistSchema<["reported", "absent"], undefined>;
         readonly note: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
@@ -802,6 +1138,20 @@ export declare const prVerificationReportSchema: v.ObjectSchema<{
                 readonly artifactId: v.StringSchema<undefined>;
                 /** Whether a reference design image was paired with it for visual confirmation. */
                 readonly hasReference: v.BooleanSchema<undefined>;
+                /**
+                 * Direct link to the artifact's BYTES, on the deployment's own authenticated blob endpoint —
+                 * the thing a reviewer (or a downstream tool holding an API key) actually wants from a row that
+                 * used to carry an opaque id and nothing else.
+                 *
+                 * Deliberately the API URL rather than the app deep link beside it on the section: the deep link
+                 * lands a human in the run's evidence panel, which is the right place to BROWSE, and is useless
+                 * to anything that is not a browser with a session. Both are emitted because they answer
+                 * different questions, and neither substitutes for the other.
+                 *
+                 * Null when the deployment configured no public backend URL, so the report never emits a link to
+                 * nowhere; the `artifactId` is still there, which is what an operator greps the store for.
+                 */
+                readonly url: v.NullableSchema<v.StringSchema<undefined>, undefined>;
             }, undefined>, undefined>;
             /**
              * Deep link into the run's captured evidence in the app. Null when the deployment configured

package/dist/pr-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-report.d.ts","sourceRoot":"","sources":["../src/pr-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAyB5B;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAA;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,qDAAqC,CAAA;AAC7E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,gEAAgE;AAChE,eAAO,MAAM,kBAAkB;IAC7B,wCAAwC;;IAExC,uFAAuF;;IAEvF,kFAAkF;;IAElF,8DAA8D;;aAE9D,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB;IAC9B,8EAA8E;;IAE9E,iEAAiE;;;;aAIjE,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB;IAC5B,iFAAiF;;IAEjF,iDAAiD;;;;;IAKjD,8DAA8D;;IAE9D,2FAA2F;;IAE3F,mDAAmD;;IAEnD,4CAA4C;;QArC5C,wCAAwC;;QAExC,uFAAuF;;QAEvF,kFAAkF;;QAElF,8DAA8D;;;IAiC9D,+DAA+D;;QA1B/D,8EAA8E;;QAE9E,iEAAiE;;;;;aA0BjE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB;;IAE9B,4FAA4F;;;IAG5F,2DAA2D;;aAE3D,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;IAE3B,+DAA+D;;IAE/D,wCAAwC;;IAExC,2DAA2D;;IAE3D;;;OAGG;;;QAxBH,4FAA4F;;;QAG5F,2DAA2D;;;IAuB3D,uEAAuE;;;aAGvE,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D,sDAAsD;AACtD,eAAO,MAAM,yBAAyB;;;;aAIpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,mFAAmF;AACnF,eAAO,MAAM,yBAAyB;;;aAGpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,wEAAwE;AACxE,eAAO,MAAM,mBAAmB;;;IAG9B,kEAAkE;;;IAGlE,wFAAwF;;IAExF,yCAAyC;;;;;;;;;;;IAIzC,0EAA0E;;;aAG1E,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,kFAAkF;AAClF,eAAO,MAAM,yBAAyB;IACpC,6DAA6D;;IAE7D,wFAAwF;;;;aAIxF,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,yBAAyB,wFAKpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC;IAC5C;;;;OAIG;;IAEH,wDAAwD;;IAExD,2FAA2F;;IAE3F;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;aAEH,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAEjG,iFAAiF;AACjF,eAAO,MAAM,8BAA8B;IACzC,oDAAoD;;IAEpD,yEAAyE;;IAEzE,mFAAmF;;aAEnF,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAE3F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iCAAiC;;IAE5C,+EAA+E;;IAE/E,2EAA2E;;IAE3E,uFAAuF;;IAEvF,yDAAyD;;IAEzD,2DAA2D;;IAE3D,qFAAqF;;QAzCrF,oDAAoD;;QAEpD,yEAAyE;;QAEzE,mFAAmF;;;IAuCnF;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAEjG;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B;;;;QAvJrC,6DAA6D;;QAE7D,wFAAwF;;;;;;;QA8CxF;;;;WAIG;;QAEH,wDAAwD;;QAExD,2FAA2F;;QAE3F;;;;;WAKG;;QAEH;;;;;WAKG;;QAEH;;;;;;WAMG;;;;;QAsCH,+EAA+E;;QAE/E,2EAA2E;;QAE3E,uFAAuF;;QAEvF,yDAAyD;;QAEzD,2DAA2D;;QAE3D,qFAAqF;;YAzCrF,oDAAoD;;YAEpD,yEAAyE;;YAEzE,mFAAmF;;;QAuCnF;;;;WAIG;;;IA0BH;;;;;;;;;OASG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;aAO9B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;aAEtC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;IAC9B,6EAA6E;;;IAG7E,8FAA8F;;IAE9F,+EAA+E;;;IAG/E,uFAAuF;;IAEvF,uCAAuC;;IAEvC,iFAAiF;;;;;;;IAEjF,yEAAyE;;;IAGzE,2CAA2C;;aAE3C,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,mGAAmG;AACnG,eAAO,MAAM,oBAAoB;;IAE/B,+DAA+D;;;QAzB/D,6EAA6E;;;QAG7E,8FAA8F;;QAE9F,+EAA+E;;;QAG/E,uFAAuF;;QAEvF,uCAAuC;;QAEvC,iFAAiF;;;;;;;QAEjF,yEAAyE;;;QAGzE,2CAA2C;;;aAW3C,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB;IACpC,4FAA4F;;;IAG5F,oEAAoE;;;;IAIpE;;;;OAIG;;IAEH,4EAA4E;;IAE5E,+DAA+D;;IAE/D,uEAAuE;;aAEvE,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B;;IAErC,oFAAoF;;IAEpF,8EAA8E;;QAvC9E,4FAA4F;;;QAG5F,oEAAoE;;;;QAIpE;;;;WAIG;;QAEH,4EAA4E;;QAE5E,+DAA+D;;QAE/D,uEAAuE;;;IAwBvE,+FAA+F;;;;IAI/F;;;;;;;;;;;;;;;;;;OAkBG;;IAEH,oEAAoE;;aAEpE,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF,eAAO,MAAM,0BAA0B;IACrC,kDAAkD;;IAElD,qEAAqE;;;QAzarE,iFAAiF;;QAEjF,iDAAiD;;;;;QAKjD,8DAA8D;;QAE9D,2FAA2F;;QAE3F,mDAAmD;;QAEnD,4CAA4C;;YArC5C,wCAAwC;;YAExC,uFAAuF;;YAEvF,kFAAkF;;YAElF,8DAA8D;;;QAiC9D,+DAA+D;;YA1B/D,8EAA8E;;YAE9E,iEAAiE;;;;;;;;QA+CjE,+DAA+D;;QAE/D,wCAAwC;;QAExC,2DAA2D;;QAE3D;;;WAGG;;;YAxBH,4FAA4F;;;YAG5F,2DAA2D;;;QAuB3D,uEAAuE;;;;;;;QAyBvE,kEAAkE;;;QAGlE,wFAAwF;;QAExF,yCAAyC;;;;;;;;;;;QAIzC,0EAA0E;;;;;;QAkT1E,oFAAoF;;QAEpF,8EAA8E;;YAvC9E,4FAA4F;;;YAG5F,oEAAoE;;;;YAIpE;;;;eAIG;;YAEH,4EAA4E;;YAE5E,+DAA+D;;YAE/D,uEAAuE;;;QAwBvE,+FAA+F;;;;QAI/F;;;;;;;;;;;;;;;;;;WAkBG;;QAEH,oEAAoE;;;;;;;YAtUpE,6DAA6D;;YAE7D,wFAAwF;;;;;;;YA8CxF;;;;eAIG;;YAEH,wDAAwD;;YAExD,2FAA2F;;YAE3F;;;;;eAKG;;YAEH;;;;;eAKG;;YAEH;;;;;;eAMG;;;;;YAsCH,+EAA+E;;YAE/E,2EAA2E;;YAE3E,uFAAuF;;YAEvF,yDAAyD;;YAEzD,2DAA2D;;YAE3D,qFAAqF;;gBAzCrF,oDAAoD;;gBAEpD,yEAAyE;;gBAEzE,mFAAmF;;;YAuCnF;;;;eAIG;;;QA0BH;;;;;;;;;WASG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;QAmEH,+DAA+D;;;YAzB/D,6EAA6E;;;YAG7E,8FAA8F;;YAE9F,+EAA+E;;;YAG/E,uFAAuF;;YAEvF,uCAAuC;;YAEvC,iFAAiF;;;;;;;YAEjF,yEAAyE;;;YAGzE,2CAA2C;;;;;;;IAgH3C;;;;;;;;;OASG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAE9E"}
+{"version":3,"file":"pr-report.d.ts","sourceRoot":"","sources":["../src/pr-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AA0B5B;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,IAAI,CAAA;AAE/C;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,OAAQ,CAAA;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,qDAAqC,CAAA;AAC7E,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF,gEAAgE;AAChE,eAAO,MAAM,kBAAkB;IAC7B,wCAAwC;;IAExC,uFAAuF;;IAEvF,kFAAkF;;IAElF,8DAA8D;;aAE9D,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB;IAC9B,8EAA8E;;IAE9E,iEAAiE;;;;aAIjE,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB;IAC5B,iFAAiF;;IAEjF,iDAAiD;;;;;IAKjD,8DAA8D;;IAE9D,2FAA2F;;IAE3F,mDAAmD;;IAEnD,4CAA4C;;QArC5C,wCAAwC;;QAExC,uFAAuF;;QAEvF,kFAAkF;;QAElF,8DAA8D;;;IAiC9D,+DAA+D;;QA1B/D,8EAA8E;;QAE9E,iEAAiE;;;;;aA0BjE,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAEjE,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB;;IAE9B,4FAA4F;;;IAG5F,2DAA2D;;aAE3D,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;IAE3B,+DAA+D;;IAE/D,wCAAwC;;IAExC,2DAA2D;;IAE3D;;;OAGG;;;QAxBH,4FAA4F;;;QAG5F,2DAA2D;;;IAuB3D,uEAAuE;;;aAGvE,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D,sDAAsD;AACtD,eAAO,MAAM,yBAAyB;;;;aAIpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,mFAAmF;AACnF,eAAO,MAAM,yBAAyB;;;aAGpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF,wEAAwE;AACxE,eAAO,MAAM,mBAAmB;;;IAG9B,kEAAkE;;;IAGlE,wFAAwF;;IAExF,yCAAyC;;;;;;;;;;;IAIzC,0EAA0E;;;aAG1E,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAUrE,oEAAoE;AACpE,eAAO,MAAM,+BAA+B;IAC1C,iEAAiE;;IAEjE,wDAAwD;;IAExD,2EAA2E;;;IAG3E,uFAAuF;;;IAGvF;;;;;;;;;;OAUG;;aAEH,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,wBAAwB;;IAEnC,oFAAoF;;IAEpF,6FAA6F;;IAE7F,gGAAgG;;IAEhG,sEAAsE;;;IAGtE,8CAA8C;;IAE9C,gGAAgG;;QAtDhG,iEAAiE;;QAEjE,wDAAwD;;QAExD,2EAA2E;;;QAG3E,uFAAuF;;;QAGvF;;;;;;;;;;WAUG;;;aAoCH,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,gGAAgG;AAChG,eAAO,MAAM,+BAA+B;;;;;IAK1C;;;;;OAKG;;IAEH,0FAA0F;;aAE1F,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,0BAA0B;;IAErC,oFAAoF;;IAEpF,iEAAiE;;IAEjE,wFAAwF;;IAExF,gEAAgE;;IAEhE;;;;;OAKG;;IAEH,gEAAgE;;;;;;QAjDhE;;;;;WAKG;;QAEH,0FAA0F;;;IA4C1F,+FAA+F;;;;;;QAnD/F;;;;;WAKG;;QAEH,0FAA0F;;;IA8C1F,uEAAuE;;;IAGvE,+FAA+F;;IAE/F,4EAA4E;;IAE5E,sFAAsF;;IAEtF,kCAAkC;;aAElC,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF,kFAAkF;AAClF,eAAO,MAAM,yBAAyB;IACpC,6DAA6D;;IAE7D,wFAAwF;;;;aAIxF,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,yBAAyB,wFAKpC,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iCAAiC;IAC5C;;;;OAIG;;IAEH,wDAAwD;;IAExD,2FAA2F;;IAE3F;;;;;OAKG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;aAEH,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAEjG,iFAAiF;AACjF,eAAO,MAAM,8BAA8B;IACzC,oDAAoD;;IAEpD,yEAAyE;;IAEzE,mFAAmF;;IAEnF;;;;;;;;;;;;OAYG;;aAEH,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAE3F;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iCAAiC;;IAE5C,+EAA+E;;IAE/E,2EAA2E;;IAE3E,uFAAuF;;IAEvF,yDAAyD;;IAEzD,2DAA2D;;IAE3D,qFAAqF;;QAvDrF,oDAAoD;;QAEpD,yEAAyE;;QAEzE,mFAAmF;;QAEnF;;;;;;;;;;;;WAYG;;;IAuCH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,iCAAiC,CAAC,CAAA;AAEjG;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B;;;;QArKrC,6DAA6D;;QAE7D,wFAAwF;;;;;;;QA8CxF;;;;WAIG;;QAEH,wDAAwD;;QAExD,2FAA2F;;QAE3F;;;;;WAKG;;QAEH;;;;;WAKG;;QAEH;;;;;;WAMG;;;;;QAoDH,+EAA+E;;QAE/E,2EAA2E;;QAE3E,uFAAuF;;QAEvF,yDAAyD;;QAEzD,2DAA2D;;QAE3D,qFAAqF;;YAvDrF,oDAAoD;;YAEpD,yEAAyE;;YAEzE,mFAAmF;;YAEnF;;;;;;;;;;;;eAYG;;;QAuCH;;;;WAIG;;;IA0BH;;;;;;;;;OASG;;IAEH;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;aAO9B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;aAEtC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA;AAErF;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;IAC9B,6EAA6E;;;IAG7E,8FAA8F;;IAE9F,+EAA+E;;;IAG/E,uFAAuF;;IAEvF,uCAAuC;;IAEvC,iFAAiF;;;;;;;IAEjF,yEAAyE;;;IAGzE,2CAA2C;;aAE3C,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAErE,mGAAmG;AACnG,eAAO,MAAM,oBAAoB;;IAE/B,+DAA+D;;;QAzB/D,6EAA6E;;;QAG7E,8FAA8F;;QAE9F,+EAA+E;;;QAG/E,uFAAuF;;QAEvF,uCAAuC;;QAEvC,iFAAiF;;;;;;;QAEjF,yEAAyE;;;QAGzE,2CAA2C;;;aAW3C,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB;IACpC,4FAA4F;;;IAG5F,oEAAoE;;;;IAIpE;;;;OAIG;;IAEH,4EAA4E;;IAE5E,+DAA+D;;IAE/D,uEAAuE;;aAEvE,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEjF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B;;IAErC,oFAAoF;;IAEpF,8EAA8E;;QAvC9E,4FAA4F;;;QAG5F,oEAAoE;;;;QAIpE;;;;WAIG;;QAEH,4EAA4E;;QAE5E,+DAA+D;;QAE/D,uEAAuE;;;IAwBvE,+FAA+F;;;;IAI/F;;;;;;;;;;;;;;;;;;OAkBG;;IAEH,oEAAoE;;aAEpE,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF,eAAO,MAAM,0BAA0B;IACrC,kDAAkD;;IAElD,qEAAqE;;;QArkBrE,iFAAiF;;QAEjF,iDAAiD;;;;;QAKjD,8DAA8D;;QAE9D,2FAA2F;;QAE3F,mDAAmD;;QAEnD,4CAA4C;;YArC5C,wCAAwC;;YAExC,uFAAuF;;YAEvF,kFAAkF;;YAElF,8DAA8D;;;QAiC9D,+DAA+D;;YA1B/D,8EAA8E;;YAE9E,iEAAiE;;;;;;;;QA+CjE,+DAA+D;;QAE/D,wCAAwC;;QAExC,2DAA2D;;QAE3D;;;WAGG;;;YAxBH,4FAA4F;;;YAG5F,2DAA2D;;;QAuB3D,uEAAuE;;;;IAwhBvE,sFAAsF;;;QA3btF,oFAAoF;;QAEpF,6FAA6F;;QAE7F,gGAAgG;;QAEhG,sEAAsE;;;QAGtE,8CAA8C;;QAE9C,gGAAgG;;YAtDhG,iEAAiE;;YAEjE,wDAAwD;;YAExD,2EAA2E;;;YAG3E,uFAAuF;;;YAGvF;;;;;;;;;;eAUG;;;;IAodH,kFAAkF;;;QArYlF,oFAAoF;;QAEpF,iEAAiE;;QAEjE,wFAAwF;;QAExF,gEAAgE;;QAEhE;;;;;WAKG;;QAEH,gEAAgE;;;;;;YAjDhE;;;;;eAKG;;YAEH,0FAA0F;;;QA4C1F,+FAA+F;;;;;;YAnD/F;;;;;eAKG;;YAEH,0FAA0F;;;QA8C1F,uEAAuE;;;QAGvE,+FAA+F;;QAE/F,4EAA4E;;QAE5E,sFAAsF;;QAEtF,kCAAkC;;;;;;QAxJlC,kEAAkE;;;QAGlE,wFAAwF;;QAExF,yCAAyC;;;;;;;;;;;QAIzC,0EAA0E;;;;;;QA8c1E,oFAAoF;;QAEpF,8EAA8E;;YAvC9E,4FAA4F;;;YAG5F,oEAAoE;;;;YAIpE;;;;eAIG;;YAEH,4EAA4E;;YAE5E,+DAA+D;;YAE/D,uEAAuE;;;QAwBvE,+FAA+F;;;;QAI/F;;;;;;;;;;;;;;;;;;WAkBG;;QAEH,oEAAoE;;;;;;;YApVpE,6DAA6D;;YAE7D,wFAAwF;;;;;;;YA8CxF;;;;eAIG;;YAEH,wDAAwD;;YAExD,2FAA2F;;YAE3F;;;;;eAKG;;YAEH;;;;;eAKG;;YAEH;;;;;;eAMG;;;;;YAoDH,+EAA+E;;YAE/E,2EAA2E;;YAE3E,uFAAuF;;YAEvF,yDAAyD;;YAEzD,2DAA2D;;YAE3D,qFAAqF;;gBAvDrF,oDAAoD;;gBAEpD,yEAAyE;;gBAEzE,mFAAmF;;gBAEnF;;;;;;;;;;;;mBAYG;;;YAuCH;;;;eAIG;;;QA0BH;;;;;;;;;WASG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;QAmEH,+DAA+D;;;YAzB/D,6EAA6E;;;YAG7E,8FAA8F;;YAE9F,+EAA+E;;;YAG/E,uFAAuF;;YAEvF,uCAAuC;;YAEvC,iFAAiF;;;;;;;YAEjF,yEAAyE;;;YAGzE,2CAA2C;;;;;;;IAoH3C;;;;;;;;;OASG;;aAEH,CAAA;AACF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAA;AAEnF;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAE9E"}

package/dist/pr-report.js

@@ -2,6 +2,7 @@ import * as v from 'valibot';
 import { mergeAssessmentSchema } from './merge.js';
 import { judgeDispositionSchema, judgeFindingSchema } from './judge.js';
 import { requirementPrioritySchema, requirementStateSchema } from './spec.js';
+import { reproductionStatusSchema } from './reproduction.js';
 import { requirementVerdictStatusSchema, testEnvironmentSchema } from './testing.js';
 import { vcsProviderSchema } from './routes/auth.js';
 // ---------------------------------------------------------------------------
@@ -26,7 +27,18 @@ import { vcsProviderSchema } from './routes/auth.js';
  * external consumer must notice. Backwards compatibility is a non-goal (see CLAUDE.md), so
  * a bump means "re-read the schema", not "a compatibility shim exists".
  */
-export const PR_VERIFICATION_REPORT_VERSION = 4;
+export const PR_VERIFICATION_REPORT_VERSION = 5;
+/**
+ * How much of one captured command log the report carries, per command.
+ *
+ * Bounded here rather than left to the producer: the harness already trims each tail to what a
+ * REPAIR PROMPT needs, and a pull-request body has a far tighter budget than a model's context
+ * window — ten checks at the harness's own ceiling would blow {@link
+ * hostMarkdown.MAX_SECTION_CHARS} on their own and cost the reader the whole machine-readable
+ * block. The cut keeps the END of the log (where a failure is reported) and is recorded in the
+ * report's `truncations`, so a shortened log never reads as a whole one.
+ */
+export const PR_REPORT_MAX_OUTPUT_CHARS = 2_000;
 /**
  * Whether a section has evidence to show.
  *  - `reported` — the producing step ran and its evidence is below.
@@ -134,6 +146,139 @@ export const prReportTestsSchema = v.object({
     fixerAttempts: v.number(),
     maxFixerAttempts: v.optional(v.nullable(v.number())),
 });
+// ---- Captured command output ----------------------------------------------
+//
+// The two sections below are the report's only CAPTURED-OUTPUT evidence: a command ran, and here
+// is what it printed. Everything else in the report is a structured verdict somebody (a gate, a
+// judge, an agent) produced; these two are the raw thing itself, which is why they are worth the
+// body budget they cost. Both come off the step the harness wrote them onto — `step.validation`
+// and `step.reproduction` — so neither re-runs anything at compose time.
+/** One command's outcome in the run's pre-PR validation attempt. */
+export const prReportValidationCommandSchema = v.object({
+    /** The check's configured label (`lint`, `test`, `build`, …). */
+    label: v.string(),
+    /** The command line the harness ran in the checkout. */
+    command: v.string(),
+    /** Exit code (0 = pass); 124 on watchdog timeout, 127 on spawn failure. */
+    exitCode: v.number(),
+    passed: v.boolean(),
+    /** Set when the command was killed by the per-command watchdog rather than exiting. */
+    timedOut: v.optional(v.nullable(v.boolean())),
+    durationMs: v.optional(v.nullable(v.number())),
+    /**
+     * The END of the command's combined stdout+stderr, secret-scrubbed and bounded to {@link
+     * PR_REPORT_MAX_OUTPUT_CHARS}.
+     *
+     * Carried for a FAILING command only, and that is a stated rule rather than a silent one: a
+     * green check's log is the one thing in this report a reviewer never acts on, and ten of them
+     * would cost the body budget that makes the failing one readable. `null` on a passing row
+     * therefore means "not retained", never "the command printed nothing" — the section says so in
+     * as many words, because those two readings are exactly the kind of collapse this report exists
+     * to remove.
+     */
+    outputTail: v.optional(v.nullable(v.string())),
+});
+/**
+ * The PRE-PR VALIDATION section: the service's own check commands, run by the executor-harness
+ * against the final checkout before the pull request was allowed to open, with their exit codes
+ * and the captured output of whatever failed.
+ *
+ * This is the report's strongest single claim, because it is the one the platform ENFORCED: only
+ * a green checkout opens a PR, so a `reported` + `passed` section says the commands in the table
+ * below actually ran and actually exited 0 on this tree. It is deliberately distinct from the
+ * `ci` section: CI is the host's verdict on the pushed branch (a different machine, later, and
+ * for a red run possibly never), while this is the platform's own captured run of the service's
+ * commands on the exact tree that was pushed.
+ *
+ * `absent` splits the causes that need different reactions, per the report's governing rule: a
+ * service that configured no checks is a deployment gap, a step that never got that far is a run
+ * outcome, and an older runner image that reports nothing is neither.
+ */
+export const prReportValidationSchema = v.object({
+    status: prReportSectionStatusSchema,
+    /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+    note: v.optional(v.nullable(v.string())),
+    /** Whether every command in the recorded attempt exited 0 (⇒ the PR was allowed to open). */
+    passed: v.optional(v.nullable(v.boolean())),
+    /** The agent kind of the step that ran the checks, so a reader knows which dispatch this is. */
+    stepKind: v.optional(v.nullable(v.string())),
+    /** How many agent+check rounds ran, and the budget they ran under. */
+    attempts: v.number(),
+    maxAttempts: v.optional(v.nullable(v.number())),
+    /** Epoch ms the recorded attempt finished. */
+    at: v.optional(v.nullable(v.number())),
+    /** Per-command outcomes of the recorded attempt (capped like every list; see `truncations`). */
+    commands: v.array(prReportValidationCommandSchema),
+});
+/** One tree's run of the declared reproduction command (the pre-fix tree, or the final one). */
+export const prReportReproductionPhaseSchema = v.object({
+    exitCode: v.number(),
+    passed: v.boolean(),
+    durationMs: v.optional(v.nullable(v.number())),
+    timedOut: v.optional(v.nullable(v.boolean())),
+    /**
+     * Set when this tree's SETUP command failed, so the check never ran meaningfully. Reported
+     * rather than folded into a plain failure: a tree that could not be prepared says nothing about
+     * the defect, and reading it as "red" is precisely the false `reproduced` the symmetric-worktree
+     * design exists to prevent.
+     */
+    setupFailed: v.optional(v.nullable(v.boolean())),
+    /** The END of the run's output, secret-scrubbed and bounded (see the validation twin). */
+    outputTail: v.optional(v.nullable(v.string())),
+});
+/**
+ * The BUGFIX REPRODUCTION PROOF section: evidence that the declared reproducing check was RED on
+ * the pre-fix tree and GREEN on the final one, which is the entire content of the claim "this
+ * change fixes the bug" and the last big agent ASSERTION on a bugfix PR still taken on trust.
+ *
+ * `verdict` is computed by the harness from two exit codes, never self-reported by a model — the
+ * `repro-test` kind's own `outcome` field has always been the model's claim, and this section is
+ * what checks it. Three shapes reach a reviewer:
+ *
+ *  - `reproduced` — red at base, green at final, with both captured logs below.
+ *  - `inconclusive` — anything else, stated plainly rather than dressed up. An ABSENT `final` is
+ *    normal here: a green base already settles the verdict, so the second tree is not run.
+ *  - `declared_infeasible` — the agent structurally declared reproduction impossible, with its
+ *    reason and the alternative verification it performed. Nothing ran, so there are no phases.
+ *
+ * `observation` is the harness's own one-line diagnosis of an inconclusive shape and is rendered
+ * VERBATIM. It is not interchangeable with re-deriving a cause from `base.passed`: a green base
+ * can mean the test does not capture the defect, or that a resumed run's pre-fix tree already
+ * carried this step's own interrupted work, and only the side that ran can tell those apart.
+ */
+export const prReportReproductionSchema = v.object({
+    status: prReportSectionStatusSchema,
+    /** Says WHY the section is empty when `status` is `absent` — never a bare blank. */
+    note: v.optional(v.nullable(v.string())),
+    /** The computed verdict. Null only when `status` is `absent`. */
+    verdict: v.optional(v.nullable(reproductionStatusSchema)),
+    /** The command run identically against both trees (empty for `declared_infeasible`). */
+    command: v.optional(v.nullable(v.string())),
+    /** The declared test files that constitute the reproduction. */
+    testPaths: v.array(v.string()),
+    /**
+     * How many declared paths were DROPPED before the proof ran (unsafe, over-long, or over the
+     * cap). Non-zero means the pre-fix tree was rebuilt from an incomplete reproduction, which can
+     * green it and read as "the test does not capture the defect" — so it is stated rather than
+     * implied.
+     */
+    omittedTestPaths: v.optional(v.nullable(v.number())),
+    /** The pre-fix tree's run. Absent for `declared_infeasible`. */
+    base: v.optional(v.nullable(prReportReproductionPhaseSchema)),
+    /** The final tree's run. Absent for `declared_infeasible`, or when the base run settled it. */
+    final: v.optional(v.nullable(prReportReproductionPhaseSchema)),
+    /** How many agent+verify rounds ran, and the budget they ran under. */
+    attempts: v.number(),
+    maxAttempts: v.optional(v.nullable(v.number())),
+    /** For `declared_infeasible`: WHY the bug could not be reproduced, verbatim from the agent. */
+    reason: v.optional(v.nullable(v.string())),
+    /** For `declared_infeasible`: what the agent verified INSTEAD, verbatim. */
+    alternativeVerification: v.optional(v.nullable(v.string())),
+    /** The producer's own one-line diagnosis of the observed shape. Rendered verbatim. */
+    observation: v.optional(v.nullable(v.string())),
+    /** Epoch ms the proof settled. */
+    at: v.optional(v.nullable(v.number())),
+});
 /** One ephemeral environment the `deployer` step stood up (per service frame). */
 export const prReportEnvironmentSchema = v.object({
     /** The service frame the environment was provisioned for. */
@@ -221,6 +366,20 @@ export const prReportEvidenceArtifactSchema = v.object({
     artifactId: v.string(),
     /** Whether a reference design image was paired with it for visual confirmation. */
     hasReference: v.boolean(),
+    /**
+     * Direct link to the artifact's BYTES, on the deployment's own authenticated blob endpoint —
+     * the thing a reviewer (or a downstream tool holding an API key) actually wants from a row that
+     * used to carry an opaque id and nothing else.
+     *
+     * Deliberately the API URL rather than the app deep link beside it on the section: the deep link
+     * lands a human in the run's evidence panel, which is the right place to BROWSE, and is useless
+     * to anything that is not a browser with a session. Both are emitted because they answer
+     * different questions, and neither substitutes for the other.
+     *
+     * Null when the deployment configured no public backend URL, so the report never emits a link to
+     * nowhere; the `artifactId` is still there, which is what an operator greps the store for.
+     */
+    url: v.nullable(v.string()),
 });
 /**
  * The MIDDLE leg of the lifecycle proof: what was actually observed against the environment
@@ -450,6 +609,10 @@ export const prVerificationReportSchema = v.object({
     generatedAt: v.number(),
     run: prReportRunSchema,
     ci: prReportCiSchema,
+    /** The platform's OWN run of the service's check commands against the pushed tree. */
+    validation: prReportValidationSchema,
+    /** Red-on-the-pre-fix-tree, green-on-the-final-tree evidence for a bugfix run. */
+    reproduction: prReportReproductionSchema,
     tests: prReportTestsSchema,
     requirements: prReportRequirementsSchema,
     environments: prReportEnvironmentsSchema,