@neat.is/core 0.10.6-dev.20261007 → 0.10.6-dev.20261008

package/dist/index.d.cts

@@ -1,7 +1,8 @@
 import { MultiDirectedGraph } from 'graphology';
-import { GraphNode, GraphEdge, EdgeEvidence, ErrorEvent, SpanAttributes, EdgeTypeValue, StaleEvent, BlastRadiusResult, RootCauseResult, RegistryEntry, RegistryStatus, RegistryFile } from '@neat.is/types';
+import { GraphNode, GraphEdge, EdgeEvidence, ErrorEvent, SpanAttributes, EdgeTypeValue, StaleEvent, BlastRadiusResult, RootCauseResult, RegistryEntry } from '@neat.is/types';
 export { StaleEvent } from '@neat.is/types';
 import { FastifyInstance } from 'fastify';
+export { ProjectNameCollisionError, addProject, getProject, listProjects, normalizeProjectPath, readRegistry, registryLockPath, registryPath, removeProject, setStatus, touchLastSeen, writeAtomically } from './registry.cjs';
 
 type NeatGraph = MultiDirectedGraph<GraphNode, GraphEdge>;
 declare function getGraph(project?: string): NeatGraph;
@@ -726,101 +727,4 @@ interface DaemonHandle {
 declare function routeSpanToProject(serviceName: string | undefined, projects: ReadonlyArray<RegistryEntry>): string;
 declare function startDaemon(opts?: DaemonOptions): Promise<DaemonHandle>;
 
-/**
- * Machine-level project registry + machine-wide daemon discovery.
- *
- * This module owns two surfaces under `~/.neat/`:
- *
- *  1. The legacy project registry at `~/.neat/projects.json` (ADR-048). One
- *     file, per-user, machine-local, not synced. Under the project-daemon
- *     contract (ADR-096) it is no longer the coordination point — it is read
- *     once for migration and otherwise left to the additive writes the daemon
- *     and orchestrator still perform. The read-modify-write helpers below keep
- *     their atomic-write + exclusive-lock machinery for that legacy surface.
- *
- *  2. The machine-wide daemon discovery directory at `~/.neat/daemons/`
- *     (ADR-096 §6). One file per running daemon — `<project>.json` — each owned
- *     solely by the daemon that wrote it (on start) and removes it (on graceful
- *     stop). Discovery is **append-only and lock-free**: a reader scans the
- *     directory and reconciles liveness; it never acquires a shared lock, so it
- *     can never deadlock against a daemon (#506). Losing or rebuilding the
- *     directory costs discovery convenience, not correctness — each project's
- *     own `neat-out/daemon.json` stays authoritative.
- *
- * `neat ps` / `neat list` and the per-daemon `pause` / `resume` / `uninstall`
- * verbs read discovery, falling back to the legacy registry where no daemon
- * file is present yet (the migration window before every daemon self-describes).
- *
- * The legacy lock is a file we exclusively-create (`O_EXCL`), hold while we
- * mutate, and unlink on the way out. Crude but cross-platform; matches what
- * `proper-lockfile` does internally without pulling the dep in. It never sits
- * on the discovery path.
- */
-
-declare function registryPath(): string;
-declare function registryLockPath(): string;
-/**
- * Path normalisation per ADR-048 #7. Two `init` calls from different relative
- * paths to the same dir must collapse to one entry. `path.resolve` handles
- * relative-to-cwd; we pass it through `fs.realpath` when the dir exists so
- * symlinked paths land on the same canonical entry too.
- */
-declare function normalizeProjectPath(input: string): Promise<string>;
-/**
- * tmp + fsync + rename. The fsync on the data fd guarantees the bytes are on
- * disk before rename swaps the inode; rename itself is atomic on POSIX.
- *
- * Exported so the init flow and test harnesses can use the same helper.
- */
-declare function writeAtomically(target: string, contents: string): Promise<void>;
-/**
- * Read the registry from disk. Returns an empty registry if the file does
- * not exist yet — first run, never registered anything.
- *
- * Throws on parse / schema errors. The contract is single-source-of-truth;
- * a corrupt file is louder than a silent reset.
- */
-declare function readRegistry(): Promise<RegistryFile>;
-interface AddProjectOptions {
-    name: string;
-    path: string;
-    languages?: string[];
-    status?: RegistryStatus;
-}
-/**
- * Anything the registry refuses to do.
- *
- * The identity lives on the class, not in the message text. Every caller that
- * prints one already prefixes its own name — the CLI writes `neat: ` — so a
- * message carrying `neat registry:` came out as `neat: neat registry: …`
- * (#1240). A non-CLI caller that wants to know where an error came from reads
- * `err.name`, which is more reliable than a string prefix anyway.
- */
-declare class RegistryError extends Error {
-    constructor(message: string);
-}
-declare class ProjectNameCollisionError extends RegistryError {
-    readonly projectName: string;
-    constructor(name: string);
-}
-/**
- * Register a project, or update its `lastSeenAt` if the same path is already
- * registered under the same name (idempotent re-init).
- *
- * Hard error on name collision against a different path — ADR-046 #7. The
- * caller can recover by passing `--project <new-name>`.
- */
-declare function addProject(opts: AddProjectOptions): Promise<RegistryEntry>;
-declare function getProject(name: string): Promise<RegistryEntry | undefined>;
-declare function listProjects(): Promise<RegistryEntry[]>;
-declare function setStatus(name: string, status: RegistryStatus): Promise<RegistryEntry>;
-declare function touchLastSeen(name: string, at?: string): Promise<void>;
-/**
- * Remove the registry entry for `name`. Per ADR-048 #6: this only removes the
- * registry row. It does **not** touch `neat-out/`, `policy.json`, or any user
- * file in the project directory. SDK-install rollback is a separate flow
- * (`neat-rollback.patch`) that the caller opts in to.
- */
-declare function removeProject(name: string): Promise<RegistryEntry | undefined>;
-
-export { type BuildApiOptions, type BuildOtelGrpcReceiverOptions, type BuildOtelReceiverOptions, type CompatPair, type CompatibilityResult, type DaemonHandle, type DaemonOptions, type ExtractResult, type GraphDiff, type IngestContext, type MarkStaleOptions, type NeatGraph, type OtelGrpcReceiver, type OtlpTracesRequest, type ParsedSpan, type PersistedSnapshot, ProjectNameCollisionError, type ProjectSlot, type SpanHandler, type StalenessLoopOptions, addProject, buildApi, buildOtelReceiver, checkCompatibility, compatPairs, computeGraphDiff, confidenceForEdge, extractFromDirectory, getBlastRadius, getGraph, getProject, getRootCause, handleSpan, listProjects, loadGraphFromDisk, loadSnapshotForDiff, logSpanHandler, makeSpanHandler, markStaleEdges, normalizeProjectPath, parseOtlpRequest, readErrorEvents, readRegistry, readStaleEvents, registryLockPath, registryPath, removeProject, resetGraph, routeSpanToProject, saveGraphToDisk, setStatus, startDaemon, startOtelGrpcReceiver, startPersistLoop, startStalenessLoop, stitchTrace, thresholdForEdgeType, touchLastSeen, writeAtomically };
+export { type BuildApiOptions, type BuildOtelGrpcReceiverOptions, type BuildOtelReceiverOptions, type CompatPair, type CompatibilityResult, type DaemonHandle, type DaemonOptions, type ExtractResult, type GraphDiff, type IngestContext, type MarkStaleOptions, type NeatGraph, type OtelGrpcReceiver, type OtlpTracesRequest, type ParsedSpan, type PersistedSnapshot, type ProjectSlot, type SpanHandler, type StalenessLoopOptions, buildApi, buildOtelReceiver, checkCompatibility, compatPairs, computeGraphDiff, confidenceForEdge, extractFromDirectory, getBlastRadius, getGraph, getRootCause, handleSpan, loadGraphFromDisk, loadSnapshotForDiff, logSpanHandler, makeSpanHandler, markStaleEdges, parseOtlpRequest, readErrorEvents, readStaleEvents, resetGraph, routeSpanToProject, saveGraphToDisk, startDaemon, startOtelGrpcReceiver, startPersistLoop, startStalenessLoop, stitchTrace, thresholdForEdgeType };

package/dist/index.d.ts

@@ -1,7 +1,8 @@
 import { MultiDirectedGraph } from 'graphology';
-import { GraphNode, GraphEdge, EdgeEvidence, ErrorEvent, SpanAttributes, EdgeTypeValue, StaleEvent, BlastRadiusResult, RootCauseResult, RegistryEntry, RegistryStatus, RegistryFile } from '@neat.is/types';
+import { GraphNode, GraphEdge, EdgeEvidence, ErrorEvent, SpanAttributes, EdgeTypeValue, StaleEvent, BlastRadiusResult, RootCauseResult, RegistryEntry } from '@neat.is/types';
 export { StaleEvent } from '@neat.is/types';
 import { FastifyInstance } from 'fastify';
+export { ProjectNameCollisionError, addProject, getProject, listProjects, normalizeProjectPath, readRegistry, registryLockPath, registryPath, removeProject, setStatus, touchLastSeen, writeAtomically } from './registry.js';
 
 type NeatGraph = MultiDirectedGraph<GraphNode, GraphEdge>;
 declare function getGraph(project?: string): NeatGraph;
@@ -726,101 +727,4 @@ interface DaemonHandle {
 declare function routeSpanToProject(serviceName: string | undefined, projects: ReadonlyArray<RegistryEntry>): string;
 declare function startDaemon(opts?: DaemonOptions): Promise<DaemonHandle>;
 
-/**
- * Machine-level project registry + machine-wide daemon discovery.
- *
- * This module owns two surfaces under `~/.neat/`:
- *
- *  1. The legacy project registry at `~/.neat/projects.json` (ADR-048). One
- *     file, per-user, machine-local, not synced. Under the project-daemon
- *     contract (ADR-096) it is no longer the coordination point — it is read
- *     once for migration and otherwise left to the additive writes the daemon
- *     and orchestrator still perform. The read-modify-write helpers below keep
- *     their atomic-write + exclusive-lock machinery for that legacy surface.
- *
- *  2. The machine-wide daemon discovery directory at `~/.neat/daemons/`
- *     (ADR-096 §6). One file per running daemon — `<project>.json` — each owned
- *     solely by the daemon that wrote it (on start) and removes it (on graceful
- *     stop). Discovery is **append-only and lock-free**: a reader scans the
- *     directory and reconciles liveness; it never acquires a shared lock, so it
- *     can never deadlock against a daemon (#506). Losing or rebuilding the
- *     directory costs discovery convenience, not correctness — each project's
- *     own `neat-out/daemon.json` stays authoritative.
- *
- * `neat ps` / `neat list` and the per-daemon `pause` / `resume` / `uninstall`
- * verbs read discovery, falling back to the legacy registry where no daemon
- * file is present yet (the migration window before every daemon self-describes).
- *
- * The legacy lock is a file we exclusively-create (`O_EXCL`), hold while we
- * mutate, and unlink on the way out. Crude but cross-platform; matches what
- * `proper-lockfile` does internally without pulling the dep in. It never sits
- * on the discovery path.
- */
-
-declare function registryPath(): string;
-declare function registryLockPath(): string;
-/**
- * Path normalisation per ADR-048 #7. Two `init` calls from different relative
- * paths to the same dir must collapse to one entry. `path.resolve` handles
- * relative-to-cwd; we pass it through `fs.realpath` when the dir exists so
- * symlinked paths land on the same canonical entry too.
- */
-declare function normalizeProjectPath(input: string): Promise<string>;
-/**
- * tmp + fsync + rename. The fsync on the data fd guarantees the bytes are on
- * disk before rename swaps the inode; rename itself is atomic on POSIX.
- *
- * Exported so the init flow and test harnesses can use the same helper.
- */
-declare function writeAtomically(target: string, contents: string): Promise<void>;
-/**
- * Read the registry from disk. Returns an empty registry if the file does
- * not exist yet — first run, never registered anything.
- *
- * Throws on parse / schema errors. The contract is single-source-of-truth;
- * a corrupt file is louder than a silent reset.
- */
-declare function readRegistry(): Promise<RegistryFile>;
-interface AddProjectOptions {
-    name: string;
-    path: string;
-    languages?: string[];
-    status?: RegistryStatus;
-}
-/**
- * Anything the registry refuses to do.
- *
- * The identity lives on the class, not in the message text. Every caller that
- * prints one already prefixes its own name — the CLI writes `neat: ` — so a
- * message carrying `neat registry:` came out as `neat: neat registry: …`
- * (#1240). A non-CLI caller that wants to know where an error came from reads
- * `err.name`, which is more reliable than a string prefix anyway.
- */
-declare class RegistryError extends Error {
-    constructor(message: string);
-}
-declare class ProjectNameCollisionError extends RegistryError {
-    readonly projectName: string;
-    constructor(name: string);
-}
-/**
- * Register a project, or update its `lastSeenAt` if the same path is already
- * registered under the same name (idempotent re-init).
- *
- * Hard error on name collision against a different path — ADR-046 #7. The
- * caller can recover by passing `--project <new-name>`.
- */
-declare function addProject(opts: AddProjectOptions): Promise<RegistryEntry>;
-declare function getProject(name: string): Promise<RegistryEntry | undefined>;
-declare function listProjects(): Promise<RegistryEntry[]>;
-declare function setStatus(name: string, status: RegistryStatus): Promise<RegistryEntry>;
-declare function touchLastSeen(name: string, at?: string): Promise<void>;
-/**
- * Remove the registry entry for `name`. Per ADR-048 #6: this only removes the
- * registry row. It does **not** touch `neat-out/`, `policy.json`, or any user
- * file in the project directory. SDK-install rollback is a separate flow
- * (`neat-rollback.patch`) that the caller opts in to.
- */
-declare function removeProject(name: string): Promise<RegistryEntry | undefined>;
-
-export { type BuildApiOptions, type BuildOtelGrpcReceiverOptions, type BuildOtelReceiverOptions, type CompatPair, type CompatibilityResult, type DaemonHandle, type DaemonOptions, type ExtractResult, type GraphDiff, type IngestContext, type MarkStaleOptions, type NeatGraph, type OtelGrpcReceiver, type OtlpTracesRequest, type ParsedSpan, type PersistedSnapshot, ProjectNameCollisionError, type ProjectSlot, type SpanHandler, type StalenessLoopOptions, addProject, buildApi, buildOtelReceiver, checkCompatibility, compatPairs, computeGraphDiff, confidenceForEdge, extractFromDirectory, getBlastRadius, getGraph, getProject, getRootCause, handleSpan, listProjects, loadGraphFromDisk, loadSnapshotForDiff, logSpanHandler, makeSpanHandler, markStaleEdges, normalizeProjectPath, parseOtlpRequest, readErrorEvents, readRegistry, readStaleEvents, registryLockPath, registryPath, removeProject, resetGraph, routeSpanToProject, saveGraphToDisk, setStatus, startDaemon, startOtelGrpcReceiver, startPersistLoop, startStalenessLoop, stitchTrace, thresholdForEdgeType, touchLastSeen, writeAtomically };
+export { type BuildApiOptions, type BuildOtelGrpcReceiverOptions, type BuildOtelReceiverOptions, type CompatPair, type CompatibilityResult, type DaemonHandle, type DaemonOptions, type ExtractResult, type GraphDiff, type IngestContext, type MarkStaleOptions, type NeatGraph, type OtelGrpcReceiver, type OtlpTracesRequest, type ParsedSpan, type PersistedSnapshot, type ProjectSlot, type SpanHandler, type StalenessLoopOptions, buildApi, buildOtelReceiver, checkCompatibility, compatPairs, computeGraphDiff, confidenceForEdge, extractFromDirectory, getBlastRadius, getGraph, getRootCause, handleSpan, loadGraphFromDisk, loadSnapshotForDiff, logSpanHandler, makeSpanHandler, markStaleEdges, parseOtlpRequest, readErrorEvents, readStaleEvents, resetGraph, routeSpanToProject, saveGraphToDisk, startDaemon, startOtelGrpcReceiver, startPersistLoop, startStalenessLoop, stitchTrace, thresholdForEdgeType };

package/dist/index.js

@@ -1,10 +1,8 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-VL7ANDPI.js";
+} from "./chunk-EMFX3V77.js";
 import {
-  ProjectNameCollisionError,
-  addProject,
   buildApi,
   checkCompatibility,
   compatPairs,
@@ -13,39 +11,44 @@ import {
   extractFromDirectory,
   getBlastRadius,
   getGraph,
-  getProject,
   getRootCause,
   handleSpan,
-  listProjects,
   loadGraphFromDisk,
   loadSnapshotForDiff,
   makeSpanHandler,
   markStaleEdges,
-  normalizeProjectPath,
   readErrorEvents,
-  readRegistry,
   readStaleEvents,
-  registryLockPath,
-  registryPath,
-  removeProject,
   resetGraph,
   saveGraphToDisk,
-  setStatus,
   startPersistLoop,
   startStalenessLoop,
   stitchTrace,
-  thresholdForEdgeType,
+  thresholdForEdgeType
+} from "./chunk-6QMWJAWR.js";
+import {
+  ProjectNameCollisionError,
+  addProject,
+  getProject,
+  listProjects,
+  normalizeProjectPath,
+  readRegistry,
+  registryLockPath,
+  registryPath,
+  removeProject,
+  setStatus,
   touchLastSeen,
   writeAtomically
-} from "./chunk-KTJK2PAH.js";
+} from "./chunk-RGYC5U2Q.js";
 import {
   startOtelGrpcReceiver
-} from "./chunk-LXQCL4MP.js";
+} from "./chunk-TZXSWSHX.js";
 import {
   buildOtelReceiver,
   logSpanHandler,
   parseOtlpRequest
-} from "./chunk-EFBWQIKG.js";
+} from "./chunk-QPG2QXCW.js";
+import "./chunk-MR64ICXX.js";
 export {
   ProjectNameCollisionError,
   addProject,

package/dist/neatd.cjs

@@ -6550,7 +6550,29 @@ function ensureFrontierNode(graph, host, ts) {
   graph.addNode(id, node);
   return id;
 }
-function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence, durationMs) {
+var EDGE_ERROR_MESSAGE_MAX = 512;
+function buildEdgeErrorExemplar(detail, ts) {
+  return {
+    ...detail.exceptionType !== void 0 ? { exceptionType: detail.exceptionType } : {},
+    ...detail.message !== void 0 ? { message: detail.message.slice(0, EDGE_ERROR_MESSAGE_MAX) } : {},
+    ...detail.httpStatusCode !== void 0 ? { httpStatusCode: detail.httpStatusCode } : {},
+    at: ts
+  };
+}
+function edgeErrorDetailFromSpan(span) {
+  const exceptionType = span.exception?.type;
+  const message = span.exception?.message;
+  const httpStatusCode = httpResponseStatus(span);
+  if (exceptionType === void 0 && message === void 0 && httpStatusCode === void 0) {
+    return void 0;
+  }
+  return {
+    ...exceptionType !== void 0 ? { exceptionType } : {},
+    ...message !== void 0 ? { message } : {},
+    ...httpStatusCode !== void 0 ? { httpStatusCode } : {}
+  };
+}
+function upsertObservedEdge(graph, type, source, target, ts, isError = false, evidence, durationMs, errorDetail) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return null;
   const grain = source.startsWith("file:") || source.startsWith("symbol:") ? "file" : "service";
   const id = makeObservedEdgeId(type, source, target);
@@ -6560,13 +6582,15 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     const newErrorCount = (existing.signal?.errorCount ?? 0) + (isError ? 1 : 0);
     const latencyHist2 = durationMs !== void 0 ? recordLatency({ ...existing.signal?.latencyHist ?? {} }, durationMs) : existing.signal?.latencyHist;
     const latencyMs2 = latencyPercentiles(latencyHist2) ?? existing.signal?.latencyMs;
+    const lastError2 = isError && errorDetail ? buildEdgeErrorExemplar(errorDetail, ts) : existing.signal?.lastError;
     const newSignal = {
       spanCount: newSpanCount,
       errorCount: newErrorCount,
       lastObservedAgeMs: 0,
       ...latencyHist2 ? { latencyHist: latencyHist2 } : {},
       ...latencyMs2 ? { latencyMs: latencyMs2 } : {},
-      ...existing.signal?.anomalous !== void 0 ? { anomalous: existing.signal.anomalous } : {}
+      ...existing.signal?.anomalous !== void 0 ? { anomalous: existing.signal.anomalous } : {},
+      ...lastError2 ? { lastError: lastError2 } : {}
     };
     const updated = {
       ...existing,
@@ -6583,12 +6607,14 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
   }
   const latencyHist = durationMs !== void 0 ? recordLatency({}, durationMs) : void 0;
   const latencyMs = latencyHist ? latencyPercentiles(latencyHist) : void 0;
+  const lastError = isError && errorDetail ? buildEdgeErrorExemplar(errorDetail, ts) : void 0;
   const signal = {
     spanCount: 1,
     errorCount: isError ? 1 : 0,
     lastObservedAgeMs: 0,
     ...latencyHist ? { latencyHist } : {},
-    ...latencyMs ? { latencyMs } : {}
+    ...latencyMs ? { latencyMs } : {},
+    ...lastError ? { lastError } : {}
   };
   const edge = {
     id,
@@ -6929,6 +6955,7 @@ async function handleSpan(ctx, span) {
   const sourceId = ensureServiceNode(ctx.graph, span.service, env);
   const isError = spanRecordsError(span);
   const durationMs = span.durationNanos > 0n && !spanIsStreaming(span) ? Number(span.durationNanos) / 1e6 : void 0;
+  const errorDetail = isError ? edgeErrorDetailFromSpan(span) : void 0;
   const sourceServiceNode = ctx.graph.getNodeAttributes(sourceId);
   const callSite = callSiteFromSpan(span, sourceServiceNode, ctx.scanPath);
   cacheSpanService(span, nowMs, callSite);
@@ -6968,7 +6995,8 @@ async function handleSpan(ctx, span) {
         ts,
         isError,
         callSiteEvidence,
-        durationMs
+        durationMs,
+        errorDetail
       );
       if (result) affectedNode = targetId;
       if (span.dbSystem === "mongodb" && span.dbCollection) {
@@ -6981,7 +7009,8 @@ async function handleSpan(ctx, span) {
           ts,
           isError,
           callSiteEvidence,
-          durationMs
+          durationMs,
+          errorDetail
         );
       }
       if (span.dbTable) {
@@ -6994,7 +7023,8 @@ async function handleSpan(ctx, span) {
           ts,
           isError,
           callSiteEvidence,
-          durationMs
+          durationMs,
+          errorDetail
         );
         mergeObservedColumns(ctx.graph, tableId, span.dbColumns);
       }
@@ -7014,7 +7044,8 @@ async function handleSpan(ctx, span) {
       ts,
       isError,
       callSiteEvidence,
-      durationMs
+      durationMs,
+      errorDetail
     );
     if (result) affectedNode = targetId;
   } else if (span.graphqlOperationName && span.graphqlOperationType && spanServesGraphqlOperation(span.kind)) {
@@ -7032,7 +7063,8 @@ async function handleSpan(ctx, span) {
       ts,
       isError,
       callSiteEvidence,
-      durationMs
+      durationMs,
+      errorDetail
     );
     if (result) affectedNode = targetId;
   } else if (span.rpcSystem === "grpc" && span.rpcService && span.rpcMethod && spanServesGrpcMethod(span.kind)) {
@@ -7045,7 +7077,8 @@ async function handleSpan(ctx, span) {
       ts,
       isError,
       callSiteEvidence,
-      durationMs
+      durationMs,
+      errorDetail
     );
     if (result) affectedNode = targetId;
   } else if (span.websocketChannel && spanServesWebsocketChannel(span.kind)) {
@@ -7062,7 +7095,8 @@ async function handleSpan(ctx, span) {
       ts,
       isError,
       callSiteEvidence,
-      durationMs
+      durationMs,
+      errorDetail
     );
     if (result) affectedNode = targetId;
   } else {
@@ -7079,7 +7113,8 @@ async function handleSpan(ctx, span) {
           ts,
           isError,
           callSiteEvidence,
-          durationMs
+          durationMs,
+          errorDetail
         );
         affectedNode = targetId;
         resolvedViaAddress = true;
@@ -7093,7 +7128,8 @@ async function handleSpan(ctx, span) {
           ts,
           isError,
           callSiteEvidence,
-          durationMs
+          durationMs,
+          errorDetail
         );
         affectedNode = frontierNodeId;
         resolvedViaAddress = true;
@@ -7120,7 +7156,8 @@ async function handleSpan(ctx, span) {
           ts,
           isError,
           fallbackEvidence,
-          durationMs
+          durationMs,
+          errorDetail
         );
       }
     }
@@ -7135,7 +7172,7 @@ async function handleSpan(ctx, span) {
     );
     if (routeNodeId) {
       const routeSvc = ctx.graph.getNodeAttributes(routeNodeId).service;
-      upsertObservedEdge(ctx.graph, import_types8.EdgeType.CONTAINS, (0, import_types8.serviceId)(routeSvc), routeNodeId, ts, isError, void 0, durationMs);
+      upsertObservedEdge(ctx.graph, import_types8.EdgeType.CONTAINS, (0, import_types8.serviceId)(routeSvc), routeNodeId, ts, isError, void 0, durationMs, errorDetail);
     }
   }
   if (span.statusCode === 2) {
@@ -17637,6 +17674,11 @@ function detectObservedFailingEdge(graph, bucket) {
       spanCount,
       errorCount,
       errorRate: clampConfidence(errorRate),
+      // The bounded last-error exemplar rides the finding as evidence (ADR-236):
+      // the error rate says HOW MUCH is failing, the exemplar says WHAT failed —
+      // a timeout vs a deadlock vs a connection-refused, which `errorCount`
+      // alone cannot name. Present only when the observed edge carries one.
+      ...signal.lastError ? { lastError: signal.lastError } : {},
       confidence: OBSERVED_FAILING_CONFIDENCE,
       reason: `Code declares ${bucket.source} \u2192 ${bucket.target} (${bucket.type}) and production observes it, but ${errorCount}/${spanCount} observed calls fail (${pct}% error rate) \u2014 the declared dependency is predominantly failing. The declared intent (EXTRACTED) and the observed behaviour (OBSERVED) diverge.`,
       recommendation: "Treat this as a broken declared dependency, not a coverage gap: production runs the call the code declares and most calls error. Check the dependency\u2019s health, recent deploys, and the observed error responses on this edge."
@@ -19998,7 +20040,7 @@ async function computePrVerdict(req2, ctx, deps, deadline) {
       const found = observedBreakFrom(node, getObservedDependencies(ctx.liveGraph, node.id));
       if (found) observedBreaks.push(found);
     }
-    const { marker, body } = renderVerdict({
+    const { marker, body: rendered } = renderVerdict({
       graph: head,
       delta,
       changedFiles,
@@ -20006,6 +20048,7 @@ async function computePrVerdict(req2, ctx, deps, deadline) {
       observedBreaks,
       tone: req2.tone ?? "loud"
     });
+    const body = rendered.startsWith(marker) ? rendered.slice(marker.length).replace(/^(?:\r?\n)+/, "") : rendered;
     return {
       marker,
       body,