@teamscala/service-boot 0.23.372 → 0.23.374

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.372",
+  "version": "0.23.374",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",

package/src/handlers/platform-fault-escalation.test.ts

@@ -65,10 +65,10 @@ describe("decideSweep — thresholds", () => {
 	});
 
 	test("the 490-over-12h shape escalates (duration + recurrence)", () => {
-		const sustained = agg("host-command-bus.error", 490, 720, 0);
+		const sustained = agg("host-command-bus.command.failed", 490, 720, 0);
 		const decision = decideSweep([sustained], [], POLICY, NOW);
 		expect(decision.escalate).toHaveLength(1);
-		expect(decision.escalate[0]!.aggregate.kind).toBe("host-command-bus.error");
+		expect(decision.escalate[0]!.aggregate.kind).toBe("host-command-bus.command.failed");
 		expect(decision.escalate[0]!.episode).toBeNull();
 	});
 
@@ -85,9 +85,9 @@ describe("decideSweep — thresholds", () => {
 	});
 
 	test("override raises a floor too — bursty kinds can be tightened", () => {
-		const sustained = agg("llm.provider.error", 40, 60, 0); // passes default
+		const sustained = agg("llm.provider.call.failed", 40, 60, 0); // passes default
 		const decision = decideSweep([sustained], [], POLICY, NOW, {
-			"llm.provider.error": { minCount: 100 },
+			"llm.provider.call.failed": { minCount: 100 },
 		});
 		expect(decision.escalate).toHaveLength(0);
 	});
@@ -95,16 +95,16 @@ describe("decideSweep — thresholds", () => {
 
 describe("decideSweep — dedup (one escalation per fault, no re-fire)", () => {
 	test("already escalated and unresolved does NOT re-escalate", () => {
-		const sustained = agg("host-command-bus.error", 500, 720, 0);
-		const open = episode({ kind: "host-command-bus.error", escalatedAt: new Date(NOW.getTime() - 3_600_000) });
+		const sustained = agg("host-command-bus.command.failed", 500, 720, 0);
+		const open = episode({ kind: "host-command-bus.command.failed", escalatedAt: new Date(NOW.getTime() - 3_600_000) });
 		const decision = decideSweep([sustained], [open], POLICY, NOW);
 		expect(decision.escalate).toHaveLength(0);
 	});
 
 	test("open delivered episode past the update window gets an UPDATE, not a message", () => {
-		const sustained = agg("llm.provider.error", 300, 720, 0);
+		const sustained = agg("llm.provider.call.failed", 300, 720, 0);
 		const open = episode({
-			kind: "llm.provider.error",
+			kind: "llm.provider.call.failed",
 			escalatedAt: new Date(NOW.getTime() - 90 * 60_000), // last update long ago
 			lastUpdatedAt: new Date(NOW.getTime() - 90 * 60_000),
 		});
@@ -115,9 +115,9 @@ describe("decideSweep — dedup (one escalation per fault, no re-fire)", () => {
 	});
 
 	test("open episode inside the update window gets NOTHING (dedup window)", () => {
-		const sustained = agg("llm.provider.error", 300, 720, 0);
+		const sustained = agg("llm.provider.call.failed", 300, 720, 0);
 		const open = episode({
-			kind: "llm.provider.error",
+			kind: "llm.provider.call.failed",
 			escalatedAt: new Date(NOW.getTime() - 10 * 60_000),
 			lastUpdatedAt: new Date(NOW.getTime() - 10 * 60_000),
 		});
@@ -150,9 +150,9 @@ describe("decideSweep — resolution + re-arm", () => {
 	});
 
 	test("after resolution the same fault escalates again (new episode)", () => {
-		const recurring = agg("host-command-bus.error", 50, 40, 0);
+		const recurring = agg("host-command-bus.command.failed", 50, 40, 0);
 		const resolved = episode({
-			kind: "host-command-bus.error",
+			kind: "host-command-bus.command.failed",
 			resolvedAt: new Date(NOW.getTime() - 35 * 60_000),
 		});
 		const decision = decideSweep([recurring], [resolved], POLICY, NOW);
@@ -190,12 +190,12 @@ describe("extractGowaMessageId — delivery verification", () => {
 describe("composeEscalationMessage", () => {
 	test("carries the three escalation-routing fields and stays phone-sized", () => {
 		const message = composeEscalationMessage({
-			kind: "host-command-bus.error",
-			aggregate: agg("host-command-bus.error", 490, 720, 0),
+			kind: "host-command-bus.command.failed",
+			aggregate: agg("host-command-bus.command.failed", 490, 720, 0),
 			impact: "scala-tools verbs are failing host-wide",
 			recommendation: "check oxmgr logs for the bus consumer",
 		});
-		expect(message).toContain("Platform fault: host-command-bus.error");
+		expect(message).toContain("Platform fault: host-command-bus.command.failed");
 		expect(message).toContain("Observed: 490 errors over 12 h");
 		expect(message).toContain("Impact: scala-tools verbs are failing host-wide");
 		expect(message).toContain("Recommendation: check oxmgr logs for the bus consumer");

package/src/handlers/platform-fault-escalation.ts

@@ -5,9 +5,10 @@
  *
  * The `platform-fault-escalation` pg-boss handler — closes the "receiving is
  * decoupled from consequence" gap measured 2026-08-15 (760 error events over
- * 12 hours, zero escalations: host-command-bus.error 490, llm.provider.error
- * 231, guard.fail.open 16, scale-to-zero.wake_failed 12, listen.connect_failed
- * 11). Emission works and observability-is-passive is satisfied; nothing
+ * 12 hours, zero escalations: host-command-bus.command.failed (then spelled
+ * host-command-bus.error) 490, llm.provider.call.failed (then spelled
+ * llm.provider.error) 231, guard.fail.open 16, scale-to-zero.wake_failed 12,
+ * listen.connect_failed 11). Emission works and observability-is-passive is satisfied; nothing
  * acted. This sweep makes RECEIVING have CONSEQUENCE: sustained platform
  * faults escalate to the OPERATOR over the existing PA path (WhatsApp, the
  * scala PA operator-relay bot — escalation-routing's channel; no second

package/src/register-registry-page-route.ts

@@ -599,6 +599,73 @@ export async function registerRegistryPageRoute(
 					// Branding fetch failed — keep the default brand (no regression).
 				}
 			}
+			// BRAND FROM THE ORG THAT OWNS THE RESOURCE, not the website's owner.
+			// A public resource page (an assessment report, a shared document) is
+			// hosted on a shared website but BELONGS to a tenant. resolvePageBrand
+			// reads pageData.orgId, which is the WEBSITE's org, so every tenant's
+			// report rendered the host org's logo and palette.
+			//
+			// Measured 2026-08-17: the Launcha Authority Blueprint is owned by GMG
+			// APAC (#FF4500, launcha logo) and rendered with GBG Indo's navy and
+			// scala mark, because both pages live on the shared "Public Pages"
+			// site. The loader had already resolved the right org — nothing
+			// consumed it.
+			//
+			// `brand_org_path` names where the owning org id lives in the resolved
+			// loader data (e.g. "quiz.organisation_id"), so which resource owns the
+			// brand is a ROW, never a per-service branch
+			// (`business-logic-is-rows-plus-executors`). Absent or unresolvable,
+			// the website's org stands — this can only ever narrow the brand to a
+			// more specific owner, never blank it.
+			const brandOrgPath = (routeConfig as { brand_org_path?: string }).brand_org_path;
+			if (brandOrgPath) {
+				let cursor: unknown = resolved;
+				for (const key of brandOrgPath.split(".")) {
+					if (cursor == null || typeof cursor !== "object") {
+						cursor = undefined;
+						break;
+					}
+					cursor = (cursor as Record<string, unknown>)[key];
+				}
+				if (typeof cursor === "string" && cursor.length > 0) {
+					pageData.orgId = cursor;
+					// orgId alone is not enough. resolvePageBrand fills only the
+					// accent/secondary/muted gaps from the org; primaryColor, logo and
+					// companyName come from pageData.brand, which was built from the
+					// website's org. Replace those too, the same way the session
+					// override above does, or the page keeps the host's logo while
+					// claiming the tenant's org.
+					try {
+						const owner = await fetchOrganisationPageBranding(
+							getServerClient() as never,
+							cursor,
+						);
+						if (owner) {
+							const existing = (pageData.brand as Record<string, unknown>) ?? {};
+							const existingLogo = (existing.logo as Record<string, unknown>) ?? {};
+							pageData.brand = {
+								...existing,
+								companyName: owner.company_name,
+								companyFriendlyName: owner.company_name,
+								primaryColor: owner.brand_primary_color ?? existing.primaryColor,
+								headingFont: owner.brand_heading_font ?? existing.headingFont,
+								bodyFont: owner.brand_body_font ?? existing.bodyFont,
+								logo: {
+									light: owner.company_logo_for_light_theme,
+									dark: owner.company_logo_for_dark_theme,
+									brand: existingLogo.brand ?? null,
+								},
+							};
+						}
+					} catch {
+						// Branding fetch failed — keep the website brand (no regression).
+					}
+				} else {
+					log.warn(
+						`[scala-install:${serviceSlug}] brand_org_path "${brandOrgPath}" resolved no org id for ${params.path}; keeping the website org brand`,
+					);
+				}
+			}
 			warnUncoveredBlocks(pageData, components, serviceSlug, params.path, log);
 			// Fire the AI-chat conversation prefetch NOW (in parallel with the
 			// proposal/partner/client post-processors below) so its ~eager cost is