CI log reader stops at governance check while test logs remain available #9097

Fix unavailable CI logs hiding readable failures

heal-ci logs must retain available failure evidence when another selected context has no readable log, while clearly reporting that its evidence is incomplete. It currently stops the aggregate read and emits no log frames.

Verified cause and limits

Triage note: read at fresh origin/main commit ec425da. packages/fabrika-cli/src/heal-ci/logs-verb.ts matches workflow jobs by context name, buffers every frame, and returns immediately from the Expired branch before rendering those frames. packages/fabrika-cli/src/heal-ci/github.ts maps both HTTP 404 and HTTP 410 from a job-log endpoint to Expired.

The reported identifier is not merely a check absent from the Actions job list. GitHub's job endpoint identifies 103001620692 as governance floor at head, completed/success, attempt 1 of run 34515850336. That run has event dynamic, name PR #8934, and head fd967cf. Reading that job's log endpoint returned HTTP 404 during triage. The report independently records that the real integration logs in run 34515854007 remained readable without a rerun.

These reads establish the aggregate abort and an unsupported expiry claim. They do not establish that a retained log expired, that name matching selected the wrong job in this incident, or that the integration failures were transient. Preserve those distinctions in the repair.

Scope and home

This is a bug: the verb promises evidence for every failing context, and an unrelated unavailable log prevents it from serving available evidence. The delivery is one bounded CLI repair, with its tests and interface documentation. Home: axis:pipeline-hardening; priority p2.

Triage note: searched the exact observation and the wider aggregate-log owner. #9034 concerns governance re-fire detection; #8988 concerns review ordering. #7206 owns classification of a readable aggregator log, and #7208 owns setup-crash signatures. None owns unavailable-log retrieval, so folding this report into them would expand a different fix. Keep their classification and rerun rules intact.

Acceptance criteria

• A regression reproduces a selected dynamic governance job whose metadata is readable but log endpoint returns 404, alongside a failed integration context whose log is readable. Use the reported job/run/head relationships as evidence for the fixture; do not require access to aging live CI records for the test.
• The aggregate result retains each available selected context's log and explicitly identifies each unavailable context and its observed reason. Missing evidence cannot produce a complete-success claim, an empty-success result, or silent omission. Preserve complete enumeration and exact head binding.
• Log availability distinguishes a context without log bytes, an unknown read, and proven expiry using source-backed evidence. A readable job followed by this HTTP 404 alone must not claim that retained logs expired or recommend a rerun as though expiry or transience were established. Verify the selected check's job/attempt relationship; do not invent a wrong-job explanation for this incident.
• Tests cover mixed readable/unavailable results, actual expiry, transport or permission failure, and a context with no matching job, for both text and JSON outputs and their downstream reader. Preserve informational exclusions, truncation disclosure, and the classifier/rerun refusal to infer a transient failure from missing evidence.
• Update the owning command help and contract for the explicit result and exit behavior. Required package tests and configured checks pass. Do not broaden this repair into the aggregator signature policy from issue 7206, governance re-fire changes, or automatic reruns.

Evidence

• chore(deps): unify Effect rc112 and upgrade Alchemy #8934
• https://github.com/kamp-us/phoenix/actions/runs/34515854007
• https://github.com/kamp-us/phoenix/actions/runs/34515850336
• https://github.com/kamp-us/phoenix/runs/103001620692
• packages/fabrika-cli/src/heal-ci/logs-verb.ts
• packages/fabrika-cli/src/heal-ci/github.ts
• packages/fabrika-cli/src/heal-ci/logs-verb.unit.test.ts
• packages/fabrika-cli/src/heal-ci/frames.ts
• claude-plugins/fabrika/skills/heal-ci/contract.md