ScriptedAlchemy
diff --git a/‎packages/agent-bundle/src/test/contract.ts‎
Lines changed: 6 additions & 1 deletion b/‎packages/agent-bundle/src/test/contract.ts‎
Lines changed: 6 additions & 1 deletion
diff --git a/‎packages/agent-bundle/tests/projection/contract-matrix.test.ts‎
Lines changed: 24 additions & 1 deletion b/‎packages/agent-bundle/tests/projection/contract-matrix.test.ts‎
Lines changed: 24 additions & 1 deletion
@@ -918,7 +918,12 @@ const runSweep = async (
       if (uri === undefined) {
         return failed(`${descriptor.kind} route config exports no uri to read`);
       }
-      const read = await client.readResource({ uri }) as { contents?: unknown };
+      let read: { contents?: unknown };
+      try {
+        read = await client.readResource({ uri }) as { contents?: unknown };
+      } catch (error) {
+        return failed(`readResource threw for ${JSON.stringify(uri)}: ${error instanceof Error ? error.message : captured(error)}`);
+      }
       const contents = Array.isArray(read.contents) ? read.contents : [];
       return contents.length === 0
         ? failed(`readResource returned no contents for ${JSON.stringify(uri)}`)
 
@@ -72,7 +72,11 @@ const PANEL_MIME = 'text/html;profile=mcp-app';
  * call, and the progress-handler map the lifecycle replay composes, delegates
  * to the real client.
  */
-const withAppSurface = (client: Client): Client => {
+const withAppSurface = (client: Client): Client => appSurface(client, 'serves');
+
+const withRejectingAppSurface = (client: Client): Client => appSurface(client, 'rejects');
+
+const appSurface = (client: Client, read: 'rejects' | 'serves'): Client => {
   const panelListing = { mimeType: PANEL_MIME, name: 'panel', uri: PANEL_URI };
   const wrapper = {
     _notificationHandlers: (client as unknown as { readonly _notificationHandlers: unknown })
@@ -88,6 +92,7 @@ const withAppSurface = (client: Client): Client => {
     readResource: async (...arguments_: Parameters<Client['readResource']>) => {
       const [params] = arguments_;
       if (params.uri !== PANEL_URI) return client.readResource(...arguments_);
+      if (read === 'rejects') throw new Error('panel resource handler exploded');
       return { contents: [{ mimeType: PANEL_MIME, text: '<!doctype html><span>route-harness panel</span>', uri: PANEL_URI }] };
     },
   };
@@ -635,6 +640,24 @@ describe('the generated-plugin contract matrix', () => {
     });
   }, 30_000);
 
+  it('records a rejected auto-covered app read as a sweep failure inside the aggregated violation', async () => {
+    const error = await withPackedShapedSession(
+      { decorate: withRejectingAppSurface, entry: 'in-memory rejecting app read fixture', includeApps: true },
+      (session, manifest) => runPackedContractMatrix({
+        fixtures: routeHarnessContractFixtures(),
+        manifest,
+        server: 'harness',
+        session,
+      }).catch((thrown: unknown) => thrown),
+    );
+
+    expect(error).toBeInstanceOf(AgentTestError);
+    expect((error as AgentTestError).code).toBe('contract-violation');
+    expect((error as AgentTestError).message).toContain('app:harness/panel / sweep');
+    expect((error as AgentTestError).message).toContain('readResource threw for "ui://harness/panel"');
+    expect((error as AgentTestError).message).toContain('panel resource handler exploded');
+  }, 30_000);
+
   it('requires an app fixture entry only when apps: "explicit" is requested', async () => {
     const error = await withPackedShapedSession(
       { decorate: withAppSurface, entry: 'in-memory explicit app coverage fixture', includeApps: true },