@teamscala/service-boot 0.23.291 → 0.23.293

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.291",
+  "version": "0.23.293",
   "sideEffects": false,
   "files": [
     "src"
@@ -17,7 +17,6 @@
     "@teamscala/agreement-generation": "*",
     "@teamscala/api-resend": "*",
     "@teamscala/auth": "*",
-    "@teamscala/aws": "*",
     "@teamscala/cache": "*",
     "@teamscala/channel": "*",
     "@teamscala/chat-completion": "*",
@@ -33,6 +32,7 @@
     "@teamscala/generic-registry": "*",
     "@teamscala/http": "*",
     "@teamscala/logger": "*",
+    "@teamscala/object-storage": "*",
     "@teamscala/orpc": "*",
     "@teamscala/os": "*",
     "@teamscala/realtime-utils": "*",
@@ -393,6 +393,14 @@
       "types": "./src/fn-routers/task-sync-dispatch.d.ts",
       "default": "./src/fn-routers/task-sync-dispatch.ts"
     },
+    "./fn-routers/task-sync-projection": {
+      "types": "./src/fn-routers/task-sync-projection.d.ts",
+      "default": "./src/fn-routers/task-sync-projection.ts"
+    },
+    "./fn-routers/task-sync-projection.ts": {
+      "types": "./src/fn-routers/task-sync-projection.d.ts",
+      "default": "./src/fn-routers/task-sync-projection.ts"
+    },
     "./fn-routers/task-sync-router": {
       "types": "./src/fn-routers/task-sync-router.d.ts",
       "default": "./src/fn-routers/task-sync-router.ts"

package/src/asset-proxy.test.ts

@@ -0,0 +1,32 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * Co-located tests for handleAssetProxy's early-return paths: a non-asset path
+ * 404s, and an asset path with no resolvable S3 client 502s (getClient returns
+ * null when creds/config are absent — the documented "no client" contract).
+ */
+import { describe, expect, it } from "bun:test";
+import { handleAssetProxy } from "./asset-proxy.ts";
+
+describe("handleAssetProxy", () => {
+	it("404s for a path outside /api/assets/", async () => {
+		const res = await handleAssetProxy(new Request("https://host.example/elsewhere"));
+		expect(res.status).toBe(404);
+	});
+
+	it("404s for an empty asset key", async () => {
+		const res = await handleAssetProxy(new Request("https://host.example/api/assets/"));
+		expect(res.status).toBe(404);
+	});
+
+	it("reaches the S3 client for a valid asset key (no early 404)", async () => {
+		// A valid key passes the path + key guards and proceeds to getClient.
+		// With no registry/env in the test context getClient cannot resolve and
+		// rejects — proving the handler did NOT short-circuit on the path/key.
+		await expect(
+			handleAssetProxy(new Request("https://host.example/api/assets/logo.png")),
+		).rejects.toThrow();
+	});
+});

package/src/asset-proxy.ts

@@ -9,7 +9,7 @@
  * Returns 404 for missing keys, 502 for S3 failures. Never redirects.
  */
 
-import { getClient } from "@teamscala/aws/create/client/get-client";
+import { getClient } from "@teamscala/object-storage/create/client/get-client";
 import {
 	buildEtag,
 	negotiateFormat,

package/src/attach-transfers-upload.d.ts

@@ -6,7 +6,7 @@
  * Authenticated asset upload — POST /api/transfers/upload. Restores the
  * handler deleted with @teamscala/server-files (commit ca5643ef); avatar/logo
  * upload had 404'd on every service since. Writes to S3 via
- * @teamscala/aws/create/write-ops and returns the STORED-form URL
+ * @teamscala/object-storage/create/write-ops and returns the STORED-form URL
  * (`/api/files/<key>`) the client persists into avatar_url/logo_url — the
  * display path rewrites it to the public `/api/assets/<encoded-key>` proxy
  * via `toAssetPath` (@teamscala/formatters/asset-url). Self-authenticates

package/src/attach-transfers-upload.test.ts

@@ -0,0 +1,25 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * Co-located test for attachTransfersUpload: it registers the POST
+ * /api/transfers/upload route on the host app. Hono is a type-only import
+ * (the real app is built by the runtime), so the host interface is mocked
+ * here to exercise registration without the Hono dependency.
+ */
+import { describe, expect, it } from "bun:test";
+import { attachTransfersUpload } from "./attach-transfers-upload.ts";
+
+describe("attachTransfersUpload", () => {
+	it("registers POST /api/transfers/upload on the host app", async () => {
+		const registered: string[] = [];
+		const mockApp = {
+			post(path: string, _handler: unknown) {
+				registered.push(path);
+			},
+		};
+		await attachTransfersUpload(mockApp as never);
+		expect(registered).toContain("/api/transfers/upload");
+	});
+});

package/src/attach-transfers-upload.ts

@@ -6,7 +6,7 @@
  * Authenticated asset upload — POST /api/transfers/upload. Restores the
  * handler deleted with @teamscala/server-files (commit ca5643ef); avatar/logo
  * upload had 404'd on every service since. Writes to S3 via
- * @teamscala/aws/create/write-ops and returns the STORED-form URL
+ * @teamscala/object-storage/create/write-ops and returns the STORED-form URL
  * (`/api/files/<key>`) the client persists into avatar_url/logo_url — the
  * display path rewrites it to the public `/api/assets/<encoded-key>` proxy
  * via `toAssetPath` (@teamscala/formatters/asset-url). Self-authenticates
@@ -25,7 +25,7 @@
  */
 import type { Hono } from "hono";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { upload } from "@teamscala/aws/create/write-ops";
+import { upload } from "@teamscala/object-storage/create/write-ops";
 import { getSession } from "@teamscala/auth/get-session";
 import { buildErrorReport } from "@teamscala/os/errors/error-report";
 

package/src/fn-routers/cache-admin-router.d.ts

@@ -50,8 +50,8 @@ export declare const cacheAdminRouter: {
     }>, v.ObjectSchema<{
         readonly name: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
     }, undefined>, import("@orpc/contract").Schema<{
-        flushed: any;
+        flushed: number;
     }, {
-        flushed: any;
+        flushed: number;
     }>, Record<never, never>, Record<never, never>>;
 };

package/src/fn-routers/proposal-send-router.d.ts

@@ -31,7 +31,7 @@ export declare const proposalSendRouter: {
         readonly baseUrl: v.StringSchema<undefined>;
     }, undefined>, import("@orpc/contract").Schema<{
         ok: false;
-        error: any;
+        error: string;
         sentAt?: undefined;
         url?: undefined;
         email?: undefined;
@@ -43,7 +43,7 @@ export declare const proposalSendRouter: {
         email: string;
     }, {
         ok: false;
-        error: any;
+        error: string;
         sentAt?: undefined;
         url?: undefined;
         email?: undefined;

package/src/fn-routers/public-agreement-router.d.ts

@@ -114,12 +114,12 @@ export declare const publicAgreementRouter: {
         matched: boolean;
         multiParty: boolean;
         name: any;
-        role: any;
-        signerName: any;
-        partySignedAt: any;
-        allSigned: any;
-        parties: any;
-        accessToken: any;
+        role: string;
+        signerName: string;
+        partySignedAt: string | null;
+        allSigned: boolean;
+        parties: import("@teamscala/document-signing/agreement-parties").PublicAgreementParty[];
+        accessToken: string | null;
         signedAt?: undefined;
     } | {
         multiParty?: undefined;
@@ -131,7 +131,7 @@ export declare const publicAgreementRouter: {
         name: any;
         signerName: any;
         signedAt: any;
-        accessToken: any;
+        accessToken: string | null;
     }, {
         matched: false;
         multiParty?: undefined;
@@ -147,12 +147,12 @@ export declare const publicAgreementRouter: {
         matched: boolean;
         multiParty: boolean;
         name: any;
-        role: any;
-        signerName: any;
-        partySignedAt: any;
-        allSigned: any;
-        parties: any;
-        accessToken: any;
+        role: string;
+        signerName: string;
+        partySignedAt: string | null;
+        allSigned: boolean;
+        parties: import("@teamscala/document-signing/agreement-parties").PublicAgreementParty[];
+        accessToken: string | null;
         signedAt?: undefined;
     } | {
         multiParty?: undefined;
@@ -164,7 +164,7 @@ export declare const publicAgreementRouter: {
         name: any;
         signerName: any;
         signedAt: any;
-        accessToken: any;
+        accessToken: string | null;
     }>, Record<never, never>, Record<never, never>>;
     sign: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, v.ObjectSchema<{
         readonly agreementId: v.StringSchema<undefined>;
@@ -182,10 +182,10 @@ export declare const publicAgreementRouter: {
         payUrl?: undefined;
     } | {
         ok: true;
-        role: any;
-        signedAt: any;
-        allSigned: any;
-        parties: any;
+        role: string;
+        signedAt: string;
+        allSigned: boolean;
+        parties: import("@teamscala/document-signing/agreement-parties").PublicAgreementParty[];
         payUrl: string | null;
     } | {
         error?: undefined;
@@ -210,10 +210,10 @@ export declare const publicAgreementRouter: {
         payUrl?: undefined;
     } | {
         ok: true;
-        role: any;
-        signedAt: any;
-        allSigned: any;
-        parties: any;
+        role: string;
+        signedAt: string;
+        allSigned: boolean;
+        parties: import("@teamscala/document-signing/agreement-parties").PublicAgreementParty[];
         payUrl: string | null;
     } | {
         error?: undefined;
@@ -248,14 +248,18 @@ export declare const publicAgreementRouter: {
         valid?: undefined;
     } | {
         ok: true;
-        envelopeId: any;
-        documentName: any;
-        complete: any;
-        signedAt: any;
+        envelopeId: string;
+        documentName: string;
+        complete: boolean;
+        signedAt: string | null;
         sealedHash: string | null;
         recomputedHash: string | null;
         valid: boolean;
-        parties: any;
+        parties: {
+            role: string;
+            name: string;
+            signedAt: string | null;
+        }[];
     }, {
         parties?: undefined;
         signedAt?: undefined;
@@ -268,14 +272,18 @@ export declare const publicAgreementRouter: {
         valid?: undefined;
     } | {
         ok: true;
-        envelopeId: any;
-        documentName: any;
-        complete: any;
-        signedAt: any;
+        envelopeId: string;
+        documentName: string;
+        complete: boolean;
+        signedAt: string | null;
         sealedHash: string | null;
         recomputedHash: string | null;
         valid: boolean;
-        parties: any;
+        parties: {
+            role: string;
+            name: string;
+            signedAt: string | null;
+        }[];
     }>, Record<never, never>, Record<never, never>>;
 };
 export {};

package/src/fn-routers/public-gpt-session-router.d.ts

@@ -21,7 +21,7 @@ export declare const publicGptSessionRouter: {
         readonly orgId: v.StringSchema<undefined>;
         readonly sourceUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
     }, undefined>, import("@orpc/contract").Schema<{
-        conversationId: any;
+        conversationId: string;
         contactName: any;
         contactPhone: any;
         messages: any;
@@ -29,15 +29,33 @@ export declare const publicGptSessionRouter: {
             inputTokens: number;
             outputTokens: number;
         };
-    }, {
+    } | {
         conversationId: any;
         contactName: any;
         contactPhone: any;
+        messages: never[];
+        tokenTotals: {
+            inputTokens: number;
+            outputTokens: number;
+        };
+    }, {
+        conversationId: string;
+        contactName: any;
+        contactPhone: any;
         messages: any;
         tokenTotals: {
             inputTokens: number;
             outputTokens: number;
         };
+    } | {
+        conversationId: any;
+        contactName: any;
+        contactPhone: any;
+        messages: never[];
+        tokenTotals: {
+            inputTokens: number;
+            outputTokens: number;
+        };
     }>, Record<never, never>, Record<never, never>>;
     load: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, v.ObjectSchema<{
         readonly conversationId: v.StringSchema<undefined>;

package/src/fn-routers/public-gpt-session-router.ts

@@ -11,7 +11,7 @@ import { os } from "@orpc/server";
 import * as v from "valibot";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
 import { queryRows } from "@teamscala/db/query-rows";
-import { getClient } from "@teamscala/aws/create/client/get-client";
+import { getClient } from "@teamscala/object-storage/create/client/get-client";
 import { persistChatMessages } from "./persist-chat-messages.ts";
 
 interface Context {

package/src/fn-routers/sign-in-flow-router.d.ts

@@ -21,28 +21,60 @@
  */
 import type { Context } from "./auth-router.ts";
 export declare const signInFlowRouter: {
-    getSignInFlowConfig: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<any, any>, Record<never, never>, Record<never, never>>;
+    getSignInFlowConfig: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<{
+        signInPath: string;
+        portalPathPrefix: string;
+        redirectQueryParam: string;
+        sessionCheckEndpoint: string;
+        portalsEndpoint: string;
+        clearStaleCookiesEndpoint: string;
+        portalRedirects: {
+            orgDashboardPathTemplate: string;
+            individualDashboardPathTemplate: string;
+        };
+    }, {
+        signInPath: string;
+        portalPathPrefix: string;
+        redirectQueryParam: string;
+        sessionCheckEndpoint: string;
+        portalsEndpoint: string;
+        clearStaleCookiesEndpoint: string;
+        portalRedirects: {
+            orgDashboardPathTemplate: string;
+            individualDashboardPathTemplate: string;
+        };
+    }>, Record<never, never>, Record<never, never>>;
     checkSession: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<{
         user?: undefined;
         redirectUrl?: undefined;
         portalCount?: undefined;
     } | {
-        user: any;
-        redirectUrl: any;
+        user: {
+            id: string;
+            email: string;
+            name: string | null;
+            role: string | null;
+        };
+        redirectUrl: string;
         portalCount: number;
     }, {
         user?: undefined;
         redirectUrl?: undefined;
         portalCount?: undefined;
     } | {
-        user: any;
-        redirectUrl: any;
+        user: {
+            id: string;
+            email: string;
+            name: string | null;
+            role: string | null;
+        };
+        redirectUrl: string;
         portalCount: number;
     }>, Record<never, never>, Record<never, never>>;
     listPortals: import("@orpc/server").DecoratedProcedure<Context & Record<never, never>, Context, import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<{
         portals: never[];
         userOrgId: null;
-        userName: any;
+        userName: string | null;
     } | {
         portals: {
             id: unknown;
@@ -54,11 +86,11 @@ export declare const signInFlowRouter: {
             portal_type: {} | null;
         }[];
         userOrgId: string;
-        userName: any;
+        userName: string | null;
     }, {
         portals: never[];
         userOrgId: null;
-        userName: any;
+        userName: string | null;
     } | {
         portals: {
             id: unknown;
@@ -70,6 +102,6 @@ export declare const signInFlowRouter: {
             portal_type: {} | null;
         }[];
         userOrgId: string;
-        userName: any;
+        userName: string | null;
     }>, Record<never, never>, Record<never, never>>;
 };

package/src/fn-routers/task-sync-projection.d.ts

@@ -0,0 +1,120 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * The task-sync PROJECTION: how a CLI's task list maps onto `work_items` rows,
+ * and what reconciling one against the other should do.
+ *
+ * Split out of `task-sync-router.ts`, which had grown past the 1000-line budget
+ * and so could not be committed by anyone touching it. The seam is real rather
+ * than arbitrary: everything here is PURE and decides WHAT should change, while
+ * the router owns the ORPC surface and performs the writes. That is exactly why
+ * this half is directly testable with no database.
+ *
+ * CAPABILITY HARVEST (capability-harvest-on-split): APP-LOCAL, not a capability
+ * candidate. Checked against the 14 platform singletons and the package catalog
+ * — nothing generic to fold into, and the doctrine test fails: no unrelated app
+ * could install this unmodified, because every export is bound to the
+ * `work_items` schema and task-sync's own contract (STATUS_TO_WORK_ITEM encodes
+ * the work_items status enum, subtaskKey is this projection's key convention,
+ * planReconcile diffs against work_items subtask rows).
+ *
+ * The near-miss is worth naming so the next reader does not re-derive it: the
+ * SHAPE — diff a desired list against existing rows into create/update/delete —
+ * is generic, and `document-signing` is precedent for lifting a pure domain half
+ * out of service-boot into a package. It stays here because it has exactly one
+ * consumer; extracting it now would be speculative packaging, which
+ * platform-capabilities treats as drift. Revisit if a SECOND surface needs
+ * list-against-rows reconciliation — then the generic diff core (not the
+ * work_items-specific mapping) is what earns a package.
+ */
+import type { TaskListItem, WorkItem } from "./task-sync-router.ts";
+export declare const STATUS_TO_WORK_ITEM: Record<TaskListItem["status"], string>;
+export declare function normalizeStatus(s: string | null): TaskListItem["status"];
+/**
+ * Decide the status to WRITE for an existing row, given what the CLI list says.
+ *
+ * The CLI task list has no `blocked` state, so a blocked row round-trips as
+ * `pending` (via `normalizeStatus`, which collapses unknown/internal statuses)
+ * and then maps back to `todo` — silently destroying the block. That is not a
+ * cosmetic drift: the stop gate reads these rows, so un-blocking one re-blocks
+ * the LANE from stopping, and the lane's only apparent fix is to touch the list
+ * again, which destroys it again.
+ *
+ * A `todo` arriving from the CLI therefore carries NO information: it is what
+ * the projection emits for every status it cannot represent, not an assertion
+ * that the work became un-blocked. `in-progress` and `done` are different —
+ * those are real transitions the CLI CAN express, so they win normally.
+ *
+ * Measured 2026-07-30: a lane set a row to `blocked` with a named blocker, the
+ * next TaskUpdate reset it to `todo`, and the stop gate reported the lane
+ * unfinished again — three turns of ping-pong before the cause was found.
+ */
+export declare function resolveProjectedStatus(currentStatus: string | null | undefined, incomingStatus: string): string;
+export declare function subtaskKey(item: {
+    mark?: string;
+    content: string;
+    title: string;
+}): string;
+/**
+ * Pure decision for a TaskUpdate/TaskDelete: which existing subtask does this
+ * event address, and what should happen when none does. Extracted for the same
+ * reason planReconcile was — the handler should only EXECUTE, so the matching
+ * rule is unit-testable.
+ *
+ * Three resolutions:
+ *  - `update` — matched by mark, or (mark absent/unstamped) by exact title.
+ *  - `heal`   — nothing matched but the event carries a subject, so the row can
+ *               be reconstructed. Covers a TaskCreate that silently produced no
+ *               subtask, which previously orphaned the task forever.
+ *  - `discard` — nothing matched and there is no subject to rebuild a title from.
+ *
+ * Measured 2026-07-28: marks "1" and "3" were stamped for one lane while mark
+ * "2" was never written at all, and every later update for it was dropped as
+ * `no-matching-subtask` — 26 of 30 tasksync discards in six hours, across seven
+ * distinct lane sessions, were that one reason.
+ */
+export declare function resolveTaskUpdateTarget(existing: Array<{
+    id: string;
+    title: string;
+    kind_data?: Record<string, unknown> | null;
+}>, evt: {
+    taskId: string;
+    subject?: string;
+}): {
+    op: "update";
+    id: string;
+} | {
+    op: "heal";
+    title: string;
+} | {
+    op: "discard";
+};
+/**
+ * Pure reconciliation plan: given the lane's EXISTING subtasks and its INCOMING
+ * (current) task list, compute the create/update/delete ops that make the
+ * subtask set match the list — WITHOUT touching prisma. Extracted so the
+ * matching/status/positioning logic is unit-testable (the handler only executes
+ * the plan). Matching is by stable mark when the CLI provides one, else by
+ * content. Position follows incoming index, so a reorder is an update.
+ */
+export interface ReconcilePlan {
+    toCreate: Array<{
+        content: string;
+        status: string;
+        completed: boolean;
+        position: string;
+        kind_data: Record<string, unknown>;
+    }>;
+    toUpdate: Array<{
+        id: string;
+        content: string;
+        status: string;
+        completed: boolean;
+        position: string;
+        kind_data: Record<string, unknown>;
+    }>;
+    toDelete: string[];
+}
+export declare function planReconcile(existing: WorkItem[], incoming: TaskListItem[], source?: string): ReconcilePlan;