fix(submissions): surface each linked build's outcome to the submitter

/me/submissions (and the admin queue) now attach build_status/build_error by
a read-only Builder.Get — until now a failed build was visible only on the
admin-tier /images/build routes, so the person who submitted the modpack
never learned the build died. A missing build row renders as "no outcome";
any other lookup failure surfaces instead of being swallowed. The panel's
My Submissions page renders the outcome in the expanded row, localised.

docs/openapi.yaml

@@ -337,6 +337,19 @@ components:
         build_id:
           type: string
           description: image_builds.id, set only after the build hand-off succeeds.
+        build_status:
+          type: string
+          enum: [pending, building, succeeded, failed, cancelled]
+          description: >-
+            The linked build's outcome, attached by the LIST routes
+            (/me/submissions, /submissions) — for a submitter this is the only
+            visible outlet for a failed build. Omitted until a build is linked
+            and its row is readable.
+        build_error:
+          type: string
+          description: >-
+            The build's recorded failure text (e.g. a CRITICAL CVE scan
+            failure), attached alongside build_status.
         reviewed_by: { type: string }
         reject_reason: { type: string }
         created_at: { type: string, format: date-time }
@@ -4231,13 +4244,16 @@ paths:
     get:
       tags: [submissions]
       operationId: mySubmissions
-      summary: List the caller's own modpack submissions (user-directed lane over §16).
+      summary: List the caller's own modpack submissions with each linked build's outcome (user-directed lane over §16).
       x-felis-face: [external]
       x-felis-tier: app
       security: [{ accessJWT: [] }]
       responses:
         '200':
-          description: The caller's submissions, newest first.
+          description: >-
+            The caller's submissions, newest first; rows with a linked build
+            additionally carry build_status/build_error so the submitter can see
+            whether their build succeeded or failed (and why).
           content:
             application/json:
               schema:

internal/api/images.go

@@ -15,6 +15,11 @@ import (
 // admin-tier (Zero Trust), enforced by adminOnly before these handlers run.
 type ImageBuilder interface {
 	Submit(ctx context.Context, req build.Request) (*build.Build, error)
+	// Get reads one build row without reconciling it — the read-only lookup the
+	// submission views use to surface a build's outcome to its submitter (the
+	// /images/build routes are admin-tier). State advance belongs to the
+	// reconcile loop (Sync/SyncAll), so a list render never touches the cluster.
+	Get(ctx context.Context, id string) (*build.Build, error)
 	// Sync reconciles a build against its Job and returns the current view, so a
 	// GET doubles as the reconcile tick (idempotent on terminal builds).
 	Sync(ctx context.Context, id string) (*build.Build, error)

internal/api/images_test.go

@@ -16,6 +16,8 @@ import (
 type fakeBuilder struct {
 	submitted   *build.Request
 	submitErr   error
+	getBuilds   map[string]*build.Build
+	getErr      error
 	syncErr     error
 	cancelErr   error
 	addedRef    string
@@ -40,6 +42,17 @@ func (f *fakeBuilder) Submit(_ context.Context, req build.Request) (*build.Build
 		RequestedBy: req.RequestedBy}, nil
 }
 
+func (f *fakeBuilder) Get(_ context.Context, id string) (*build.Build, error) {
+	f.lastBuildID = id
+	if f.getErr != nil {
+		return nil, f.getErr
+	}
+	if b, ok := f.getBuilds[id]; ok {
+		return b, nil
+	}
+	return nil, build.ErrNotFound
+}
+
 func (f *fakeBuilder) Sync(_ context.Context, id string) (*build.Build, error) {
 	f.lastBuildID = id
 	if f.syncErr != nil {

internal/api/submissions.go

@@ -6,6 +6,7 @@ import (
 	"io"
 	"net/http"
 
+	"felis.lolicon.best/internal/build"
 	"felis.lolicon.best/internal/submit"
 )
 
@@ -118,7 +119,9 @@ func (a *API) handleUploadSubmissionContext(w http.ResponseWriter, r *http.Reque
 
 // handleMySubmissions lists the caller's own submissions (app-tier). It scopes
 // strictly to the principal's id; there is no parameter that could widen the
-// query to another user's uploads.
+// query to another user's uploads. Each row is enriched with its linked build's
+// outcome — this list is the only player-visible outlet for a build result, so
+// a failed build is not invisible to the person who submitted it.
 func (a *API) handleMySubmissions(w http.ResponseWriter, r *http.Request) {
 	if a.Submissions == nil {
 		writeError(w, r, errSubmissionsUnavailable)
@@ -130,12 +133,18 @@ func (a *API) handleMySubmissions(w http.ResponseWriter, r *http.Request) {
 		writeSubmitError(w, r, err)
 		return
 	}
-	writeJSON(w, http.StatusOK, map[string]any{"submissions": subs})
+	views, err := a.submissionViews(r.Context(), subs)
+	if err != nil {
+		writeSubmitError(w, r, err)
+		return
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"submissions": views})
 }
 
 // handleListSubmissions is the admin review queue: every submission across all
 // users, newest first (admin-tier — it reads other users' uploads, so it gates
-// on the admin Zero-Trust path via adminOnly).
+// on the admin Zero-Trust path via adminOnly). Rows carry the same build
+// outcome enrichment as /me/submissions.
 func (a *API) handleListSubmissions(w http.ResponseWriter, r *http.Request) {
 	if a.Submissions == nil {
 		writeError(w, r, errSubmissionsUnavailable)
@@ -146,7 +155,49 @@ func (a *API) handleListSubmissions(w http.ResponseWriter, r *http.Request) {
 		writeSubmitError(w, r, err)
 		return
 	}
-	writeJSON(w, http.StatusOK, map[string]any{"submissions": subs})
+	views, err := a.submissionViews(r.Context(), subs)
+	if err != nil {
+		writeSubmitError(w, r, err)
+		return
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"submissions": views})
+}
+
+// submissionView is one submission row enriched with its linked build's
+// outcome. The row itself is embedded unchanged, so the wire shape only gains
+// the two optional fields; they appear solely once a build has been linked
+// (BuildID set) and its record is still readable.
+type submissionView struct {
+	submit.Submission
+	BuildStatus string `json:"build_status,omitempty"`
+	BuildError  string `json:"build_error,omitempty"`
+}
+
+// submissionViews enriches each submission with its linked build's status via a
+// read-only Builder.Get — deliberately never Sync, because the 15s reconcile
+// loop owns state advance and rendering a list must not touch the cluster. A
+// submission with no linked build (never approved, or approved before the
+// hand-off could record the id), no Builder wired, or a build row that is gone
+// (ErrNotFound) renders without the extra fields; any other store failure is
+// returned so the handler reports it rather than silently dropping the outcome.
+func (a *API) submissionViews(ctx context.Context, subs []submit.Submission) ([]submissionView, error) {
+	views := make([]submissionView, len(subs))
+	for i, s := range subs {
+		views[i] = submissionView{Submission: s}
+		if a.Builder == nil || s.BuildID == "" {
+			continue
+		}
+		bld, err := a.Builder.Get(ctx, s.BuildID)
+		if errors.Is(err, build.ErrNotFound) {
+			continue
+		}
+		if err != nil {
+			return nil, err
+		}
+		views[i].BuildStatus = string(bld.Status)
+		views[i].BuildError = bld.Error
+	}
+	return views, nil
 }
 
 // handleApproveSubmission is the admin approve gate (admin-tier). The reviewer is

internal/api/submissions_test.go

@@ -10,6 +10,7 @@ import (
 	"strings"
 	"testing"
 
+	"felis.lolicon.best/internal/build"
 	"felis.lolicon.best/internal/submit"
 )
 
@@ -270,6 +271,68 @@ func TestMySubmissionsScopesToPrincipal(t *testing.T) {
 	}
 }
 
+// The "my uploads" list carries the linked build's outcome — for a submitter it
+// is the only visible outlet for a failed build (the /images/build routes are
+// admin-tier). A row with no linked build gains no build fields.
+func TestMySubmissionsCarriesBuildOutcome(t *testing.T) {
+	fs := &fakeSubmissions{byResult: []submit.Submission{
+		{ID: "sub-1", SubmittedBy: "user-7", Status: submit.StatusApproved, BuildID: "bld-9"},
+		{ID: "sub-2", SubmittedBy: "user-7", Status: submit.StatusPendingReview},
+	}}
+	api := appSubAPI(fs)
+	api.Builder = &fakeBuilder{getBuilds: map[string]*build.Build{
+		"bld-9": {ID: "bld-9", Status: build.StatusFailed, Error: "build job failed or scan found a CRITICAL CVE"},
+	}}
+	w := do(api.ExternalHandler(), "GET", "/api/v1/me/submissions", "", nil)
+	if w.Code != http.StatusOK {
+		t.Fatalf("code = %d, want 200 (%s)", w.Code, w.Body.String())
+	}
+	var got struct {
+		Submissions []struct {
+			ID          string `json:"id"`
+			BuildStatus string `json:"build_status"`
+			BuildError  string `json:"build_error"`
+		} `json:"submissions"`
+	}
+	if err := json.Unmarshal(w.Body.Bytes(), &got); err != nil {
+		t.Fatalf("body not JSON: %v", err)
+	}
+	if len(got.Submissions) != 2 {
+		t.Fatalf("submissions = %d, want 2", len(got.Submissions))
+	}
+	if got.Submissions[0].BuildStatus != "failed" || got.Submissions[0].BuildError == "" {
+		t.Errorf("sub-1 outcome = %+v, want failed with the error text", got.Submissions[0])
+	}
+	if got.Submissions[1].BuildStatus != "" || got.Submissions[1].BuildError != "" {
+		t.Errorf("sub-2 outcome = %+v, want no build fields without a linked build", got.Submissions[1])
+	}
+}
+
+// A linked build whose row is gone renders as "no outcome" rather than failing
+// the whole list; any other lookup failure must surface, never be swallowed.
+func TestMySubmissionsBuildLookupSemantics(t *testing.T) {
+	// Missing row (ErrNotFound): 200 with no build fields.
+	fs := &fakeSubmissions{byResult: []submit.Submission{{ID: "sub-1", BuildID: "bld-gone"}}}
+	api := appSubAPI(fs)
+	api.Builder = &fakeBuilder{}
+	w := do(api.ExternalHandler(), "GET", "/api/v1/me/submissions", "", nil)
+	if w.Code != http.StatusOK {
+		t.Fatalf("missing build row: code = %d, want 200 (%s)", w.Code, w.Body.String())
+	}
+	if strings.Contains(w.Body.String(), "build_status") {
+		t.Errorf("missing build row: body carries build fields: %s", w.Body.String())
+	}
+
+	// Store fault: the failure is reported, not hidden behind a 200.
+	fs = &fakeSubmissions{byResult: []submit.Submission{{ID: "sub-1", BuildID: "bld-1"}}}
+	api = appSubAPI(fs)
+	api.Builder = &fakeBuilder{getErr: errors.New("db down")}
+	w = do(api.ExternalHandler(), "GET", "/api/v1/me/submissions", "", nil)
+	if w.Code != http.StatusInternalServerError {
+		t.Fatalf("store fault: code = %d, want 500 (%s)", w.Code, w.Body.String())
+	}
+}
+
 // Every /submissions route is admin-tier: a plain user is rejected before the
 // handler runs.
 func TestSubmissionAdminRoutesAreAdminOnly(t *testing.T) {
@@ -294,9 +357,12 @@ func TestSubmissionAdminRoutesAreAdminOnly(t *testing.T) {
 func TestListSubmissionsAdmin(t *testing.T) {
 	fs := &fakeSubmissions{listed: []submit.Submission{
 		{ID: "sub-1", SubmittedBy: "user-7", Status: submit.StatusPendingReview},
-		{ID: "sub-2", SubmittedBy: "user-9", Status: submit.StatusApproved},
+		{ID: "sub-2", SubmittedBy: "user-9", Status: submit.StatusApproved, BuildID: "bld-2"},
 	}}
 	api := adminSubAPI(fs)
+	api.Builder = &fakeBuilder{getBuilds: map[string]*build.Build{
+		"bld-2": {ID: "bld-2", Status: build.StatusSucceeded},
+	}}
 	w := do(api.ExternalHandler(), "GET", "/api/v1/submissions", "", nil)
 	if w.Code != http.StatusOK {
 		t.Fatalf("code = %d, want 200 (%s)", w.Code, w.Body.String())
@@ -308,6 +374,10 @@ func TestListSubmissionsAdmin(t *testing.T) {
 	if len(got["submissions"]) != 2 {
 		t.Fatalf("submissions = %d, want 2", len(got["submissions"]))
 	}
+	// The admin queue carries the same build outcome enrichment.
+	if !strings.Contains(w.Body.String(), `"build_status":"succeeded"`) {
+		t.Errorf("admin queue lacks the linked build outcome: %s", w.Body.String())
+	}
 }
 
 // The reviewer is the admin principal's email, never client input.

panel/src/i18n/resources/en-US/submissions.json

@@ -19,6 +19,13 @@
   "table_created_at": "Submitted At",
   "table_reviewed_by": "Reviewed By",
   "table_reject_reason": "Reject Reason",
+  "table_build_status": "Build Status",
+  "table_build_error": "Build Error",
+  "build_status_pending": "Queued",
+  "build_status_building": "Building",
+  "build_status_succeeded": "Succeeded",
+  "build_status_failed": "Failed",
+  "build_status_cancelled": "Cancelled",
   "no_submissions_title": "No Submissions Found",
   "no_submissions_hint": "You haven't submitted any modpacks yet.",
   "search_placeholder": "Search submissions...",

panel/src/i18n/resources/zh-CN/submissions.json

@@ -19,6 +19,13 @@
   "table_created_at": "提交时间",
   "table_reviewed_by": "审核人",
   "table_reject_reason": "拒绝原因",
+  "table_build_status": "构建状态",
+  "table_build_error": "构建失败原因",
+  "build_status_pending": "排队中",
+  "build_status_building": "构建中",
+  "build_status_succeeded": "构建成功",
+  "build_status_failed": "构建失败",
+  "build_status_cancelled": "已取消",
   "no_submissions_title": "暂无提交记录",
   "no_submissions_hint": "您还没有提交过任何模组包。",
   "search_placeholder": "搜索提交记录...",

panel/src/lib/types.ts

@@ -263,6 +263,8 @@ export interface Submission {
   status: SubmissionStatus;
   image_ref?: string;
   build_id?: string;
+  build_status?: BuildStatus;
+  build_error?: string;
   reviewed_by?: string;
   reject_reason?: string;
   created_at: string;

panel/src/pages/MySubmissionsPage.tsx

@@ -20,6 +20,7 @@ import {
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Label } from "@/components/ui/label";
+import { Badge } from "@/components/ui/badge";
 import {
   Dialog,
   DialogContent,
@@ -37,10 +38,29 @@ import { SubmissionStatusBadge } from "@/components/SubmissionStatusBadge";
 import { api, humanizeError } from "@/lib/api";
 import { useAsync } from "@/lib/hooks";
 import { formatRelative, formatAbsolute } from "@/lib/format";
-import type { Submission, SubmissionStatus } from "@/lib/types";
+import type { BuildStatus, Submission, SubmissionStatus } from "@/lib/types";
 
 const PAGE_SIZE = 10;
 
+// The linked build's outcome as shown in a row's expanded details. Colors mirror
+// the admin build page; the labels are player-facing, so they come from this
+// page's namespace instead of the raw status string.
+const BUILD_STATUS_STYLE: Record<BuildStatus, string> = {
+  pending: "bg-amber-500/10 text-amber-500 border-amber-500/20 animate-pulse",
+  building: "bg-blue-500/10 text-blue-500 border-blue-500/20 animate-pulse",
+  succeeded: "bg-emerald-500/10 text-emerald-500 border-emerald-500/20",
+  failed: "bg-rose-500/10 text-rose-500 border-rose-500/20",
+  cancelled: "bg-zinc-500/10 text-zinc-400 border-zinc-500/20",
+};
+
+const BUILD_STATUS_I18N: Record<BuildStatus, string> = {
+  pending: "build_status_pending",
+  building: "build_status_building",
+  succeeded: "build_status_succeeded",
+  failed: "build_status_failed",
+  cancelled: "build_status_cancelled",
+};
+
 function formatBytes(bytes: number, decimals = 2) {
   if (bytes === 0) return "0 Bytes";
   const k = 1024;
@@ -411,6 +431,32 @@ export function MySubmissionsPage() {
                               )}
                             </div>
                           )}
+
+                          {/* Linked build outcome — a submitter's only view of a
+                              failed build (the build pages are admin-tier). */}
+                          {sub.build_id && sub.build_status && (
+                            <div className="pt-1 border-t border-border/20 mt-2 flex flex-col gap-1.5">
+                              <div className="flex items-center gap-2 flex-wrap">
+                                <span className="font-semibold text-foreground">{t("table_build_status")}:</span>
+                                <Badge
+                                  variant="outline"
+                                  className={cn(
+                                    "font-medium select-none pointer-events-none",
+                                    BUILD_STATUS_STYLE[sub.build_status],
+                                  )}
+                                >
+                                  {t(BUILD_STATUS_I18N[sub.build_status])}
+                                </Badge>
+                                <code className="font-mono text-[10px] text-muted-foreground/75">{sub.build_id}</code>
+                              </div>
+                              {sub.build_status === "failed" && sub.build_error && (
+                                <div className="text-rose-500 font-medium break-all whitespace-pre-wrap">
+                                  <span className="font-semibold text-foreground mr-1.5">{t("table_build_error")}:</span>
+                                  {sub.build_error}
+                                </div>
+                              )}
+                            </div>
+                          )}
                         </div>
                       )}
                     </div>