@descryy/mcp 0.11.8 → 0.12.1

package/dist/browser/fault-attribution.d.ts

@@ -15,6 +15,22 @@
  * like its neighbours — a small closed vocabulary, one function that decides,
  * and an explicit value for "do not know".
  *
+ * ## The vocabulary is `@descryy/ir`'s, not this module's own — `DEC-NEXT-fault-layer-vocabulary-merge.md`
+ *
+ * This module used to carry its own five-value `FaultOwner` type, spelled
+ * `application`/`automation`/`environment`/`dependency`/`undetermined`, that
+ * disagreed with `@descryy/ir`'s independent `FaultLayer`
+ * (`product`/`automation`/`environment`/`dependency`/`unknown`) on the one
+ * value that mattered most to get right: the same fact was `application` here
+ * and `unknown` there whenever ir's own classifier had no marker for it, and
+ * a desktop finding and a browser-drive disclosure could never be compared or
+ * merged. `FaultOwner`/`FAULT_OWNERS` are gone; this module now imports
+ * `@descryy/ir`'s `FaultLayer` directly, `application` is spelled `product`
+ * everywhere below, and `FAULT_OWNER_DISPLAY_LABELS`/`faultOwnerDisplayLabel`
+ * are gone too — `@descryy/ir`'s `FAULT_LAYER_DISPLAY_LABELS`/
+ * `faultLayerDisplayLabel` are the one copy now, re-exported here for callers
+ * that already imported the display helpers from this module.
+ *
  * ## The one rule everything else serves
  *
  * **A timeout with nothing corroborating it is never the application's fault.**
@@ -23,13 +39,23 @@
  * consistent with a broken button, a slow one, an overlay, and an animation.
  * Reporting it as the user's bug is the single fastest way to make a testing
  * tool untrusted, and the cost of being wrong is asymmetric — an
- * `undetermined` that was really a bug costs one missed finding, and an
- * `application` that was really our timeout costs the tool's credibility.
+ * `undetermined` that was really a bug costs one missed finding, and a
+ * `product` that was really our timeout costs the tool's credibility.
  * That is rule 2 (precision over recall) applied to blame rather than to edges.
  *
- * So `application` is only ever named with a **first-party corroborating
- * signal** in the same window: the page threw, or a request to the
- * application's own origin failed. Never on the timeout alone.
+ * So `product` is only ever named with a **first-party corroborating
+ * signal** in the same window. **The corroboration rule itself moved to
+ * `@descryy/ir`** (`hasFirstPartyCorroboration`, `DEC-NEXT-fault-layer-vocabulary-merge.md`)
+ * so the desktop's own findings can apply the identical three-form test
+ * rather than a second, independently-drifting heuristic. Here, the two forms
+ * a browser action failure can actually produce are: a console error whose
+ * stack resolved (via `rewriteScriptUrls`) into a file inside the repository
+ * under test (`stackFrameInRepo`), or a 5xx response from a request to the
+ * application's own origin (`spawnedServiceFiveHundred`). A merely third-party
+ * console error, an unmapped stack, or a 4xx/unanswered request is never
+ * enough on its own — that tightening (this module used to treat *any*
+ * console error in the window as sufficient) is the corroboration rule's own
+ * substance, not a side effect of the move.
  *
  * ## Where the corroborating signal comes from (C3)
  *
@@ -45,17 +71,17 @@
  * `observeAndCorrelate` for every evidence-bearing tool call, and the
  * registry's `reap` for the tail no tool call ever returns.
  */
+import { FAULT_LAYER_DISPLAY_LABELS, faultLayerDisplayLabel } from "@descryy/ir";
+import type { FaultLayer } from "@descryy/ir";
 import { type BrowserObservation } from "./driver.ts";
-/**
- * The four fault domains, plus the fifth value that keeps the other four
- * honest. `undetermined` is not a failure to classify — it is the correct
- * answer whenever the evidence does not reach one of the four, and a
- * vocabulary without it would force every case into a guess.
- */
-export declare const FAULT_OWNERS: readonly ["application", "automation", "environment", "dependency", "undetermined"];
-export type FaultOwner = (typeof FAULT_OWNERS)[number];
+/** Re-exported so a caller that already imports the vocabulary from this
+ *  module (rather than from `@descryy/ir` directly) keeps working. The values
+ *  themselves live in `@descryy/ir`'s `FaultLayer`/`FAULT_LAYER_DISPLAY_LABELS`/
+ *  `faultLayerDisplayLabel` now — see the module doc. */
+export { FAULT_LAYER_DISPLAY_LABELS, faultLayerDisplayLabel };
+export type { FaultLayer };
 export interface FaultAttribution {
-    readonly owner: FaultOwner;
+    readonly owner: FaultLayer;
     /** What happened, in the report's voice. Never an accusation. */
     readonly reason: string;
     /** What was observed that led here. Deliberately distinct from `reason`: a
@@ -75,6 +101,17 @@ export interface ActionFailure {
     readonly failedRequests: number;
     /** How many of those were to an origin other than the application's own. */
     readonly thirdPartyFailedRequests: number;
+    /** Of `pageErrors`, how many carried at least one stack frame that
+     *  `rewriteScriptUrls` mapped into a file inside the repository under test
+     *  — `@descryy/ir`'s `hasFirstPartyCorroboration`'s `stackFrameInRepo` form.
+     *  A console error with no mapped frame (third-party script, or a bundle
+     *  nothing could rewrite) is not counted here even though it still counts
+     *  toward `pageErrors`. */
+    readonly firstPartyPageErrors: number;
+    /** Of `failedRequests`, how many were a 5xx response — never a bare 4xx or
+     *  an unanswered request — to the application's own origin.
+     *  `spawnedServiceFiveHundred`'s form. */
+    readonly firstPartyFiveHundreds: number;
 }
 export declare function attributeActionFailure(failure: ActionFailure): FaultAttribution;
 /** The bounds of one failed action, in epoch milliseconds: when the verb was
@@ -83,12 +120,14 @@ export interface ActionWindow {
     readonly from: number;
     readonly to: number;
 }
-/** What `evidenceInWindow` found — the three counts `ActionFailure` could not
+/** What `evidenceInWindow` found — the five counts `ActionFailure` could not
  *  carry at the moment of failure. */
 export interface LaterEvidence {
     readonly pageErrors: number;
     readonly failedRequests: number;
     readonly thirdPartyFailedRequests: number;
+    readonly firstPartyPageErrors: number;
+    readonly firstPartyFiveHundreds: number;
 }
 /**
  * Counts, out of one drained observation, only what happened **inside a failed
@@ -107,15 +146,20 @@ export interface LaterEvidence {
  * ## What is excluded, and why each exclusion goes the same way
  *
  * A timestamp that will not parse, a request URL that will not parse, and an
- * `unattributed` request all resolve *away* from `application`. That is not
+ * `unattributed` request all resolve *away* from `product`. That is not
  * symmetry for its own sake: the asymmetric cost this module was built around
- * says an `undetermined` that was really a bug costs one finding, and an
- * `application` that was really Descry's own timeout costs the tool. So an
+ * says an `undetermined` that was really a bug costs one finding, and a
+ * `product` that was really Descry's own timeout costs the tool. So an
  * unreadable URL is counted as third-party (it cannot name the application), an
  * unreadable timestamp is counted as outside the window, and a request whose
  * terminal event could not be assigned to it is not counted as a failure at
  * all — otherwise C3's own refusal to guess a join would come straight back as
  * a guess about blame.
+ *
+ * `firstPartyPageErrors`/`firstPartyFiveHundreds` are the two forms of
+ * `@descryy/ir`'s corroboration rule this evidence shape can actually produce
+ * — see `attributeActionFailure`'s own doc for why a merely-present console
+ * error or a bare 4xx no longer qualifies on its own.
  */
 export declare function evidenceInWindow(observation: Pick<BrowserObservation, "consoleErrors" | "requests">, window: ActionWindow, applicationOrigin: string): LaterEvidence;
 /**
@@ -130,8 +174,9 @@ export declare function faultNote(attribution: FaultAttribution): string;
 /**
  * RG-12(b): the vocabulary reconciliation. The site names three layers to a
  * user — "your product", "your environment", "a dependency" — and this
- * module's own five values are `application`, `automation`, `environment`,
- * `dependency`, `undetermined`. Two real gaps, not one:
+ * module's five values (now `@descryy/ir`'s `FaultLayer`) are `product`,
+ * `automation`, `environment`, `dependency`, `undetermined`. Two real gaps,
+ * not one:
  *
  * 1. `automation` (Descry's *own* fault — a bad ref, a stale handle, a
  *    harness bug) has nowhere to go in the site's three layers, and it is
@@ -141,26 +186,17 @@ export declare function faultNote(attribution: FaultAttribution): string;
  * 2. `undetermined` has nowhere to go either, and collapsing it into any of
  *    the three would state a layer the evidence did not actually reach.
  *
- * **Recommendation (implemented here, not on the site — that copy is a
- * different lane's to change): the site gains a fourth and fifth category
- * rather than losing this module's granularity.** "Descry itself" for
- * `automation` (visible, not hidden — this is the layer that most needs to
- * be named when the tool is the one that got it wrong) and "not
- * determined" for `undetermined` (an honest refusal is not a hidden
- * failure). No code value is deleted to fit the narrower copy; this
- * function is the one place that maps the closed five-value set onto
- * display text, so a copy change only ever touches this map.
- */
-export declare const FAULT_OWNER_DISPLAY_LABELS: Readonly<Record<FaultOwner, string>>;
-/**
- * RG-12(c): the type-level half of "every failure carries a layer, by
- * construction, not by convention." A `switch` with no `default` fails to
- * compile the moment `FAULT_OWNERS` gains or loses a value without this
- * function being updated to match — the same guarantee `ActionRecord`'s
- * discriminated union (`reachability.ts`) gives the *presence* of an
- * attribution; this is what gives the *display* side the same guarantee.
+ * **Recommendation (implemented in `@descryy/ir`'s `FAULT_LAYER_DISPLAY_LABELS`,
+ * not on the site — that copy is a different lane's to change): the site
+ * gains a fourth and fifth category rather than losing this module's
+ * granularity.** "Descry itself" for `automation` (visible, not hidden —
+ * this is the layer that most needs to be named when the tool is the one
+ * that got it wrong) and "not determined" for `undetermined` (an honest
+ * refusal is not a hidden failure). No value is deleted to fit the narrower
+ * copy; `faultLayerDisplayLabel` (re-exported above) is the one place that
+ * maps the closed five-value set onto display text, so a copy change only
+ * ever touches that map — one copy now, not this module's own second one.
  */
-export declare function faultOwnerDisplayLabel(owner: FaultOwner): string;
 /**
  * RG-12(c): the run-level half. Not a convention check — `ActionRecord`'s
  * discriminated union already makes `{ succeeded: false, attribution: null }`

package/dist/browser/fault-attribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fault-attribution.d.ts","sourceRoot":"","sources":["../../src/browser/fault-attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAuE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE3H;;;;;GAKG;AACH,eAAO,MAAM,YAAY,qFAAsF,CAAC;AAEhH,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;wDAEoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAWD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CA4D/E;AAED;+EAC+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;sCACsC;AACtC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,eAAe,GAAG,UAAU,CAAC,EACnE,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,MAAM,GACxB,aAAa,CAsBf;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,aAAa,GACnB,gBAAgB,CAUlB;AAED,wBAAgB,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAM3E,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAoBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAAE,EAAE,GAAG,IAAI,CAStJ"}
+{"version":3,"file":"fault-attribution.d.ts","sourceRoot":"","sources":["../../src/browser/fault-attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAEH,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EAEvB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAuE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE3H;;;yDAGyD;AACzD,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;wDAEoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C;;;;;+BAK2B;IAC3B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC;;8CAE0C;IAC1C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAWD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAoE/E;AAED;+EAC+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;sCACsC;AACtC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,eAAe,GAAG,UAAU,CAAC,EACnE,MAAM,EAAE,YAAY,EACpB,iBAAiB,EAAE,MAAM,GACxB,aAAa,CAiCf;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,aAAa,GACnB,gBAAgB,CAYlB;AAED,wBAAgB,SAAS,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,SAAS;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAAE,EAAE,GAAG,IAAI,CAStJ"}

package/dist/browser/fault-attribution.js

@@ -15,6 +15,22 @@
  * like its neighbours — a small closed vocabulary, one function that decides,
  * and an explicit value for "do not know".
  *
+ * ## The vocabulary is `@descryy/ir`'s, not this module's own — `DEC-NEXT-fault-layer-vocabulary-merge.md`
+ *
+ * This module used to carry its own five-value `FaultOwner` type, spelled
+ * `application`/`automation`/`environment`/`dependency`/`undetermined`, that
+ * disagreed with `@descryy/ir`'s independent `FaultLayer`
+ * (`product`/`automation`/`environment`/`dependency`/`unknown`) on the one
+ * value that mattered most to get right: the same fact was `application` here
+ * and `unknown` there whenever ir's own classifier had no marker for it, and
+ * a desktop finding and a browser-drive disclosure could never be compared or
+ * merged. `FaultOwner`/`FAULT_OWNERS` are gone; this module now imports
+ * `@descryy/ir`'s `FaultLayer` directly, `application` is spelled `product`
+ * everywhere below, and `FAULT_OWNER_DISPLAY_LABELS`/`faultOwnerDisplayLabel`
+ * are gone too — `@descryy/ir`'s `FAULT_LAYER_DISPLAY_LABELS`/
+ * `faultLayerDisplayLabel` are the one copy now, re-exported here for callers
+ * that already imported the display helpers from this module.
+ *
  * ## The one rule everything else serves
  *
  * **A timeout with nothing corroborating it is never the application's fault.**
@@ -23,13 +39,23 @@
  * consistent with a broken button, a slow one, an overlay, and an animation.
  * Reporting it as the user's bug is the single fastest way to make a testing
  * tool untrusted, and the cost of being wrong is asymmetric — an
- * `undetermined` that was really a bug costs one missed finding, and an
- * `application` that was really our timeout costs the tool's credibility.
+ * `undetermined` that was really a bug costs one missed finding, and a
+ * `product` that was really our timeout costs the tool's credibility.
  * That is rule 2 (precision over recall) applied to blame rather than to edges.
  *
- * So `application` is only ever named with a **first-party corroborating
- * signal** in the same window: the page threw, or a request to the
- * application's own origin failed. Never on the timeout alone.
+ * So `product` is only ever named with a **first-party corroborating
+ * signal** in the same window. **The corroboration rule itself moved to
+ * `@descryy/ir`** (`hasFirstPartyCorroboration`, `DEC-NEXT-fault-layer-vocabulary-merge.md`)
+ * so the desktop's own findings can apply the identical three-form test
+ * rather than a second, independently-drifting heuristic. Here, the two forms
+ * a browser action failure can actually produce are: a console error whose
+ * stack resolved (via `rewriteScriptUrls`) into a file inside the repository
+ * under test (`stackFrameInRepo`), or a 5xx response from a request to the
+ * application's own origin (`spawnedServiceFiveHundred`). A merely third-party
+ * console error, an unmapped stack, or a 4xx/unanswered request is never
+ * enough on its own — that tightening (this module used to treat *any*
+ * console error in the window as sufficient) is the corroboration rule's own
+ * substance, not a side effect of the move.
  *
  * ## Where the corroborating signal comes from (C3)
  *
@@ -45,14 +71,13 @@
  * `observeAndCorrelate` for every evidence-bearing tool call, and the
  * registry's `reap` for the tail no tool call ever returns.
  */
+import { FAULT_LAYER_DISPLAY_LABELS, faultLayerDisplayLabel, hasFirstPartyCorroboration, } from "@descryy/ir";
 import { BrowserSessionCrashedError, isFailedRequest, UnknownElementRefError } from "./driver.js";
-/**
- * The four fault domains, plus the fifth value that keeps the other four
- * honest. `undetermined` is not a failure to classify — it is the correct
- * answer whenever the evidence does not reach one of the four, and a
- * vocabulary without it would force every case into a guess.
- */
-export const FAULT_OWNERS = ["application", "automation", "environment", "dependency", "undetermined"];
+/** Re-exported so a caller that already imports the vocabulary from this
+ *  module (rather than from `@descryy/ir` directly) keeps working. The values
+ *  themselves live in `@descryy/ir`'s `FaultLayer`/`FAULT_LAYER_DISPLAY_LABELS`/
+ *  `faultLayerDisplayLabel` now — see the module doc. */
+export { FAULT_LAYER_DISPLAY_LABELS, faultLayerDisplayLabel };
 /** Playwright's expiry reads as a message, not a type, on the far side of the
  *  port. Matching it is a heuristic and is treated as one: a false positive
  *  only ever routes to `undetermined`, which is where an unrecognised error
@@ -62,7 +87,7 @@ function looksLikeExpiry(error) {
     return /timeout|timed out|exceeded/i.test(text);
 }
 export function attributeActionFailure(failure) {
-    const { error, verb, pageErrors, failedRequests, thirdPartyFailedRequests } = failure;
+    const { error, verb, pageErrors, failedRequests, thirdPartyFailedRequests, firstPartyPageErrors, firstPartyFiveHundreds } = failure;
     if (error instanceof UnknownElementRefError) {
         return {
             owner: "automation",
@@ -77,28 +102,30 @@ export function attributeActionFailure(failure) {
             evidence: "The session reported itself unusable before the action could complete.",
         };
     }
-    // Corroboration first, expiry second. A page that threw while Descry waited
-    // is a first-party signal and outranks the wait; the wait alone never does.
-    if (pageErrors > 0) {
+    // Corroboration first, expiry second. `@descryy/ir`'s `hasFirstPartyCorroboration`
+    // is the one rule now — a page error only counts here when its own stack
+    // resolved into the application's own source, and a failed request only
+    // counts when it was a 5xx to the application's own origin. A third-party
+    // console error or a bare 4xx is never sufficient on its own.
+    if (hasFirstPartyCorroboration({ stackFrameInRepo: firstPartyPageErrors > 0 })) {
         return {
-            owner: "application",
-            reason: `The page raised errors of its own while Descry was waiting to ${verb}.`,
-            evidence: `${pageErrors} console error${pageErrors === 1 ? "" : "s"} in the same window as the failed action.`,
+            owner: "product",
+            reason: `The page raised errors of its own, from its own source, while Descry was waiting to ${verb}.`,
+            evidence: `${firstPartyPageErrors} of ${pageErrors} console error${pageErrors === 1 ? "" : "s"} in the same window carried a stack frame inside the application's own source.`,
         };
     }
-    if (failedRequests > 0) {
-        if (thirdPartyFailedRequests >= failedRequests) {
-            return {
-                owner: "dependency",
-                reason: `Every request that failed while Descry was waiting to ${verb} went to a third-party origin.`,
-                evidence: `${failedRequests} failed request${failedRequests === 1 ? "" : "s"}, all of them off the application's own origin.`,
-            };
-        }
-        const firstParty = failedRequests - thirdPartyFailedRequests;
+    if (hasFirstPartyCorroboration({ spawnedServiceFiveHundred: firstPartyFiveHundreds > 0 })) {
+        return {
+            owner: "product",
+            reason: `A request to the application's own origin returned a server error while Descry was waiting to ${verb}.`,
+            evidence: `${firstPartyFiveHundreds} of ${failedRequests} failed request${failedRequests === 1 ? "" : "s"} were a 5xx response from the application's own origin.`,
+        };
+    }
+    if (failedRequests > 0 && thirdPartyFailedRequests >= failedRequests) {
         return {
-            owner: "application",
-            reason: `Requests to the application's own origin failed while Descry was waiting to ${verb}.`,
-            evidence: `${firstParty} of ${failedRequests} failed request${failedRequests === 1 ? "" : "s"} were first-party.`,
+            owner: "dependency",
+            reason: `Every request that failed while Descry was waiting to ${verb} went to a third-party origin.`,
+            evidence: `${failedRequests} failed request${failedRequests === 1 ? "" : "s"}, all of them off the application's own origin.`,
         };
     }
     if (looksLikeExpiry(error)) {
@@ -106,13 +133,18 @@ export function attributeActionFailure(failure) {
             owner: "undetermined",
             reason: `The element did not become actionable within the time Descry waited, and nothing else was observed ` +
                 `that would say why. A slow page, a covering overlay and a broken ${verb} target all look like this.`,
-            evidence: `The ${verb} expired after ${failure.elapsedMs} ms with no console error and no failed request alongside it.`,
+            evidence: `The ${verb} expired after ${failure.elapsedMs} ms with no corroborating console error or failed request alongside it.`,
         };
     }
+    // Reached with pageErrors/failedRequests > 0 but none of them first-party
+    // corroboration (a third-party console error, an unmapped stack, a 4xx or
+    // unanswered request to the application's own origin) — real signal, but
+    // not enough to place a layer. Falling here rather than to a fault-domain
+    // count keeps the message honest about which case this is.
     return {
         owner: "undetermined",
-        reason: `The ${verb} failed for a reason Descry could not place in any of the four fault domains.`,
-        evidence: `${error instanceof Error ? `${error.name}: ${error.message}` : String(error)} after ${failure.elapsedMs} ms, with nothing else observed.`,
+        reason: `The ${verb} failed for a reason Descry could not place in any fault layer.`,
+        evidence: `${error instanceof Error ? `${error.name}: ${error.message}` : String(error)} after ${failure.elapsedMs} ms, with nothing first-party observed.`,
     };
 }
 /**
@@ -132,34 +164,45 @@ export function attributeActionFailure(failure) {
  * ## What is excluded, and why each exclusion goes the same way
  *
  * A timestamp that will not parse, a request URL that will not parse, and an
- * `unattributed` request all resolve *away* from `application`. That is not
+ * `unattributed` request all resolve *away* from `product`. That is not
  * symmetry for its own sake: the asymmetric cost this module was built around
- * says an `undetermined` that was really a bug costs one finding, and an
- * `application` that was really Descry's own timeout costs the tool. So an
+ * says an `undetermined` that was really a bug costs one finding, and a
+ * `product` that was really Descry's own timeout costs the tool. So an
  * unreadable URL is counted as third-party (it cannot name the application), an
  * unreadable timestamp is counted as outside the window, and a request whose
  * terminal event could not be assigned to it is not counted as a failure at
  * all — otherwise C3's own refusal to guess a join would come straight back as
  * a guess about blame.
+ *
+ * `firstPartyPageErrors`/`firstPartyFiveHundreds` are the two forms of
+ * `@descryy/ir`'s corroboration rule this evidence shape can actually produce
+ * — see `attributeActionFailure`'s own doc for why a merely-present console
+ * error or a bare 4xx no longer qualifies on its own.
  */
 export function evidenceInWindow(observation, window, applicationOrigin) {
     const inside = (at) => {
         const ms = Date.parse(at);
         return Number.isFinite(ms) && ms >= window.from && ms <= window.to;
     };
+    const consoleErrorsInWindow = observation.consoleErrors.filter((error) => inside(error.at));
+    const firstPartyPageErrors = consoleErrorsInWindow.filter((error) => error.scriptUrlMapping.some((outcome) => outcome.mapped !== null)).length;
     const failed = observation.requests.filter((request) => request.outcome !== "unattributed" && isFailedRequest(request) && inside(request.at));
-    const thirdParty = failed.filter((request) => {
+    const sameOrigin = (request) => {
         try {
-            return new URL(request.url).origin !== applicationOrigin;
+            return new URL(request.url).origin === applicationOrigin;
         }
         catch {
-            return true;
+            return false;
         }
-    });
+    };
+    const thirdParty = failed.filter((request) => !sameOrigin(request));
+    const firstPartyFiveHundreds = failed.filter((request) => request.status !== null && request.status >= 500 && sameOrigin(request)).length;
     return {
-        pageErrors: observation.consoleErrors.filter((error) => inside(error.at)).length,
+        pageErrors: consoleErrorsInWindow.length,
         failedRequests: failed.length,
         thirdPartyFailedRequests: thirdParty.length,
+        firstPartyPageErrors,
+        firstPartyFiveHundreds,
     };
 }
 /**
@@ -177,6 +220,8 @@ export function refineAttribution(attribution, failure, later) {
         pageErrors: failure.pageErrors + later.pageErrors,
         failedRequests: failure.failedRequests + later.failedRequests,
         thirdPartyFailedRequests: failure.thirdPartyFailedRequests + later.thirdPartyFailedRequests,
+        firstPartyPageErrors: failure.firstPartyPageErrors + later.firstPartyPageErrors,
+        firstPartyFiveHundreds: failure.firstPartyFiveHundreds + later.firstPartyFiveHundreds,
     });
     if (refined.owner === "undetermined")
         return attribution;
@@ -188,8 +233,9 @@ export function faultNote(attribution) {
 /**
  * RG-12(b): the vocabulary reconciliation. The site names three layers to a
  * user — "your product", "your environment", "a dependency" — and this
- * module's own five values are `application`, `automation`, `environment`,
- * `dependency`, `undetermined`. Two real gaps, not one:
+ * module's five values (now `@descryy/ir`'s `FaultLayer`) are `product`,
+ * `automation`, `environment`, `dependency`, `undetermined`. Two real gaps,
+ * not one:
  *
  * 1. `automation` (Descry's *own* fault — a bad ref, a stale handle, a
  *    harness bug) has nowhere to go in the site's three layers, and it is
@@ -199,52 +245,17 @@ export function faultNote(attribution) {
  * 2. `undetermined` has nowhere to go either, and collapsing it into any of
  *    the three would state a layer the evidence did not actually reach.
  *
- * **Recommendation (implemented here, not on the site — that copy is a
- * different lane's to change): the site gains a fourth and fifth category
- * rather than losing this module's granularity.** "Descry itself" for
- * `automation` (visible, not hidden — this is the layer that most needs to
- * be named when the tool is the one that got it wrong) and "not
- * determined" for `undetermined` (an honest refusal is not a hidden
- * failure). No code value is deleted to fit the narrower copy; this
- * function is the one place that maps the closed five-value set onto
- * display text, so a copy change only ever touches this map.
- */
-export const FAULT_OWNER_DISPLAY_LABELS = {
-    application: "your product",
-    automation: "Descry itself",
-    environment: "your environment",
-    dependency: "a dependency",
-    undetermined: "not determined",
-};
-/**
- * RG-12(c): the type-level half of "every failure carries a layer, by
- * construction, not by convention." A `switch` with no `default` fails to
- * compile the moment `FAULT_OWNERS` gains or loses a value without this
- * function being updated to match — the same guarantee `ActionRecord`'s
- * discriminated union (`reachability.ts`) gives the *presence* of an
- * attribution; this is what gives the *display* side the same guarantee.
+ * **Recommendation (implemented in `@descryy/ir`'s `FAULT_LAYER_DISPLAY_LABELS`,
+ * not on the site — that copy is a different lane's to change): the site
+ * gains a fourth and fifth category rather than losing this module's
+ * granularity.** "Descry itself" for `automation` (visible, not hidden —
+ * this is the layer that most needs to be named when the tool is the one
+ * that got it wrong) and "not determined" for `undetermined` (an honest
+ * refusal is not a hidden failure). No value is deleted to fit the narrower
+ * copy; `faultLayerDisplayLabel` (re-exported above) is the one place that
+ * maps the closed five-value set onto display text, so a copy change only
+ * ever touches that map — one copy now, not this module's own second one.
  */
-export function faultOwnerDisplayLabel(owner) {
-    switch (owner) {
-        case "application":
-            return FAULT_OWNER_DISPLAY_LABELS.application;
-        case "automation":
-            return FAULT_OWNER_DISPLAY_LABELS.automation;
-        case "environment":
-            return FAULT_OWNER_DISPLAY_LABELS.environment;
-        case "dependency":
-            return FAULT_OWNER_DISPLAY_LABELS.dependency;
-        case "undetermined":
-            return FAULT_OWNER_DISPLAY_LABELS.undetermined;
-        default: {
-            // Exhaustiveness check: if FAULT_OWNERS ever gains a member, `owner`
-            // stops being `never` here and this file fails to compile — the
-            // enforcement is at build time, not at review time.
-            const exhaustive = owner;
-            throw new Error(`faultOwnerDisplayLabel: unhandled FaultOwner ${String(exhaustive)}`);
-        }
-    }
-}
 /**
  * RG-12(c): the run-level half. Not a convention check — `ActionRecord`'s
  * discriminated union already makes `{ succeeded: false, attribution: null }`

package/dist/browser/fault-attribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"fault-attribution.js","sourceRoot":"","sources":["../../src/browser/fault-attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,sBAAsB,EAA2B,MAAM,aAAa,CAAC;AAE3H;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,CAAU,CAAC;AA4BhH;;;mBAGmB;AACnB,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,wBAAwB,EAAE,GAAG,OAAO,CAAC;IAEtF,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,mBAAmB,IAAI,kDAAkD;YACjF,QAAQ,EAAE,oGAAoG;SAC/G,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,sFAAsF;YAC9F,QAAQ,EAAE,wEAAwE;SACnF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,iEAAiE,IAAI,GAAG;YAChF,QAAQ,EAAE,GAAG,UAAU,iBAAiB,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,2CAA2C;SAC/G,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,wBAAwB,IAAI,cAAc,EAAE,CAAC;YAC/C,OAAO;gBACL,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,yDAAyD,IAAI,gCAAgC;gBACrG,QAAQ,EAAE,GAAG,cAAc,kBAAkB,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iDAAiD;aAC9H,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,cAAc,GAAG,wBAAwB,CAAC;QAC7D,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,+EAA+E,IAAI,GAAG;YAC9F,QAAQ,EAAE,GAAG,UAAU,OAAO,cAAc,kBAAkB,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB;SAClH,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,MAAM,EACJ,qGAAqG;gBACrG,oEAAoE,IAAI,6BAA6B;YACvG,QAAQ,EAAE,OAAO,IAAI,kBAAkB,OAAO,CAAC,SAAS,+DAA+D;SACxH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,OAAO,IAAI,+EAA+E;QAClG,QAAQ,EAAE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,SAAS,kCAAkC;KACrJ,CAAC;AACJ,CAAC;AAiBD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmE,EACnE,MAAoB,EACpB,iBAAyB;IAEzB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAW,EAAE;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAClG,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;QAChF,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,wBAAwB,EAAE,UAAU,CAAC,MAAM;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAA6B,EAC7B,OAAsB,EACtB,KAAoB;IAEpB,IAAI,WAAW,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC;IAC7D,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,GAAG,OAAO;QACV,UAAU,EAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc;QAC7D,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB;KAC5F,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC;IACzD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,yEAAyE,EAAE,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAA6B;IACrD,OAAO,UAAU,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAyC;IAC9E,WAAW,EAAE,cAAc;IAC3B,UAAU,EAAE,eAAe;IAC3B,WAAW,EAAE,kBAAkB;IAC/B,UAAU,EAAE,cAAc;IAC1B,YAAY,EAAE,gBAAgB;CAC/B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,0BAA0B,CAAC,WAAW,CAAC;QAChD,KAAK,YAAY;YACf,OAAO,0BAA0B,CAAC,UAAU,CAAC;QAC/C,KAAK,aAAa;YAChB,OAAO,0BAA0B,CAAC,WAAW,CAAC;QAChD,KAAK,YAAY;YACf,OAAO,0BAA0B,CAAC,UAAU,CAAC;QAC/C,KAAK,cAAc;YACjB,OAAO,0BAA0B,CAAC,YAAY,CAAC;QACjD,OAAO,CAAC,CAAC,CAAC;YACR,qEAAqE;YACrE,gEAAgE;YAChE,oDAAoD;YACpD,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,gDAAgD,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAmG;IAC9I,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CACb,sGAAsG;gBACpG,0EAA0E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"fault-attribution.js","sourceRoot":"","sources":["../../src/browser/fault-attribution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAEH,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,sBAAsB,EAA2B,MAAM,aAAa,CAAC;AAE3H;;;yDAGyD;AACzD,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,CAAC;AAsC9D;;;mBAGmB;AACnB,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAsB;IAC3D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC;IAEpI,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,mBAAmB,IAAI,kDAAkD;YACjF,QAAQ,EAAE,oGAAoG;SAC/G,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,sFAAsF;YAC9F,QAAQ,EAAE,wEAAwE;SACnF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,8DAA8D;IAC9D,IAAI,0BAA0B,CAAC,EAAE,gBAAgB,EAAE,oBAAoB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,uFAAuF,IAAI,GAAG;YACtG,QAAQ,EAAE,GAAG,oBAAoB,OAAO,UAAU,iBAAiB,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,gFAAgF;SAC/K,CAAC;IACJ,CAAC;IAED,IAAI,0BAA0B,CAAC,EAAE,yBAAyB,EAAE,sBAAsB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1F,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,iGAAiG,IAAI,GAAG;YAChH,QAAQ,EAAE,GAAG,sBAAsB,OAAO,cAAc,kBAAkB,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yDAAyD;SACnK,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,GAAG,CAAC,IAAI,wBAAwB,IAAI,cAAc,EAAE,CAAC;QACrE,OAAO;YACL,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,yDAAyD,IAAI,gCAAgC;YACrG,QAAQ,EAAE,GAAG,cAAc,kBAAkB,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,iDAAiD;SAC9H,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,MAAM,EACJ,qGAAqG;gBACrG,oEAAoE,IAAI,6BAA6B;YACvG,QAAQ,EAAE,OAAO,IAAI,kBAAkB,OAAO,CAAC,SAAS,yEAAyE;SAClI,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,2DAA2D;IAC3D,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,OAAO,IAAI,iEAAiE;QACpF,QAAQ,EAAE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,SAAS,yCAAyC;KAC5J,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmE,EACnE,MAAoB,EACpB,iBAAyB;IAEzB,MAAM,MAAM,GAAG,CAAC,EAAU,EAAW,EAAE;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAClE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAClE,CAAC,MAAM,CAAC;IAET,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CACxC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAClG,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,OAAgC,EAAW,EAAE;QAC/D,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,iBAAiB,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CACrF,CAAC,MAAM,CAAC;IAET,OAAO;QACL,UAAU,EAAE,qBAAqB,CAAC,MAAM;QACxC,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,wBAAwB,EAAE,UAAU,CAAC,MAAM;QAC3C,oBAAoB;QACpB,sBAAsB;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAA6B,EAC7B,OAAsB,EACtB,KAAoB;IAEpB,IAAI,WAAW,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC;IAC7D,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,GAAG,OAAO;QACV,UAAU,EAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc;QAC7D,wBAAwB,EAAE,OAAO,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB;QAC3F,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB;QAC/E,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB;KACtF,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,WAAW,CAAC;IACzD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,yEAAyE,EAAE,CAAC;AAChI,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAA6B;IACrD,OAAO,UAAU,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAmG;IAC9I,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CACb,sGAAsG;gBACpG,0EAA0E,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/browser/graph-write.d.ts

@@ -3,8 +3,8 @@
  * R1 string-match `impact`/`propagation` already do. Precision over recall:
  * anything unresolvable (no stack, no endpoint, ambiguous) drops the observation entirely rather than writing a weak edge. Never mints a denial.
  */
-import type { SqlDriver } from "@descryy/core";
-import { type ObservedRequest } from "./driver.ts";
+import { type ObservedInteractionAction, type SqlDriver } from "@descryy/core";
+import { type ObservedAction, type ObservedRequest } from "./driver.ts";
 /** A graph node this browser evidence actually reached — §5.3's "any graph node reached, surfaced in the same reply". */
 export interface ReachedNode {
     readonly nodeId: string;
@@ -17,6 +17,19 @@ export interface ReachedNode {
         readonly status: number | null;
     };
 }
+/** A `FUNCTION`/`CLASS`/`COMPONENT` node a real click or input actually reached — B1's graph
+ *  half. Distinct from `ReachedNode`: that one names an endpoint a *request* hit; this one
+ *  names the element identity grounding resolved a *DOM action* to. Both are "real evidence
+ *  reached this graph node", reported the same way for the same reason. */
+export interface WitnessedInteractionNode {
+    readonly nodeId: string;
+    readonly name: string;
+    readonly type: string;
+    readonly via: {
+        readonly action: ObservedInteractionAction;
+        readonly ref: string | null;
+    };
+}
 export interface BrowserGraphWrite {
     /** Endpoints the page's own requests resolved to, whether or not an edge was written. */
     readonly reached: readonly ReachedNode[];
@@ -28,6 +41,9 @@ export interface BrowserGraphWrite {
     readonly refused: readonly string[];
     /** R4-vs-R4 disagreements, passed through untouched — this module does not adjudicate them. */
     readonly contradictions: readonly string[];
+    /** Nodes a real click or input reached and witnessed (`observed_interactions`), B1's graph
+     *  half. Empty when no action carried a grounded identity, or the identity did not join. */
+    readonly interactions: readonly WitnessedInteractionNode[];
 }
 export declare const NO_GRAPH_WRITE: BrowserGraphWrite;
 export interface BrowserGraphWriteInput {
@@ -37,6 +53,10 @@ export interface BrowserGraphWriteInput {
     readonly commitSha: string;
     readonly repoRoot: string;
     readonly requests: readonly ObservedRequest[];
+    /** Actions this observation drained, so a grounded one can be joined to the graph too —
+     *  additive to `requests`, and independently non-empty: a page can be clicked with no
+     *  network effect at all. Defaults to empty for callers that only ever pass requests. */
+    readonly actions?: readonly ObservedAction[];
 }
 /** Correlates what the page did against the graph, recording only what was genuinely witnessed. Runs over every request, not just failures — a successful call is what proves the arrow. */
 export declare function writeBrowserObservations(input: BrowserGraphWriteInput): BrowserGraphWrite;

package/dist/browser/graph-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-write.d.ts","sourceRoot":"","sources":["../../src/browser/graph-write.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG/C,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAEpE,yHAAyH;AACzH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACjG;AAED,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0HAA0H;IAC1H,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,eAAO,MAAM,cAAc,EAAE,iBAA+F,CAAC;AAE7H,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CAC/C;AAED,4LAA4L;AAC5L,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CA6DzF;AAED,uHAAuH;AACvH,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CA8CxG"}
+{"version":3,"file":"graph-write.d.ts","sourceRoot":"","sources":["../../src/browser/graph-write.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAA6B,KAAK,yBAAyB,EAAE,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1G,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAGzF,yHAAyH;AACzH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACjG;AAED;;;2EAG2E;AAC3E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC3F;AAED,MAAM,WAAW,iBAAiB;IAChC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;IACzC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,0HAA0H;IAC1H,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;gGAC4F;IAC5F,QAAQ,CAAC,YAAY,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC5D;AAED,eAAO,MAAM,cAAc,EAAE,iBAO5B,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C;;6FAEyF;IACzF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CAC9C;AAoBD,4LAA4L;AAC5L,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CA4FzF;AAED,uHAAuH;AACvH,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,EAAE,CAqDxG"}