@teamscala/service-boot 0.23.387 → 0.23.389

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.387",
+  "version": "0.23.389",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",

package/src/agreement-gate.ts

@@ -1,6 +1,6 @@
 /**
  * @system service-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * The AGREEMENT content gate, expressed as config for the content-gate primitive

package/src/auth-gate.ts

@@ -1,6 +1,6 @@
 /**
  * @system server-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * Auth middleware factory. Three modes, same BetterAuth email-OTP mechanism:

package/src/fn-routers/chat-session-router.ts

@@ -1,6 +1,6 @@
 /**
  * @system service-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * ORPC procedures for the AUTHENTICATED AI-chat conversation lifecycle —

package/src/fn-routers/public-assessment-router.ts

@@ -1,6 +1,6 @@
 /**
  * @system service-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * Public ORPC procedure for submitting a public assessment (quiz) response.

package/src/handlers/platform-fault-escalation.ts

@@ -1,6 +1,6 @@
 /**
  * @system server-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * The `platform-fault-escalation` pg-boss handler — closes the "receiving is

package/src/handlers/singleton-tools-currency-watch.ts

@@ -37,9 +37,9 @@ import { pgBossHandlerRegistry } from "../pg-boss-handler-registry.ts";
  * hanging off one shape: an unhandled variant then fails to compile instead of
  * silently taking the npm branch. The previous single-member form
  * (`type: "npm_package"`) made a GitHub-released binary UNREPRESENTABLE, not
- * merely unregistered — which is why codex and zerostack are absent from
- * `config/scala-singleton-tools` entirely. Both are standalone ELF binaries in
- * ~/.local/bin and neither is npm-managed, so neither could be described at all.
+ * merely unregistered — which is why standalone-ELF CLIs were absent from
+ * `config/scala-singleton-tools` entirely. They live in ~/.local/bin and are
+ * not npm-managed, so they could not be described at all.
  *
  * Their LOCATION is correct and must not be "fixed": `bun-bin-is-unstable`
  * designates ${HOME}/.local/bin as the home for operator CLIs precisely so they
@@ -53,7 +53,7 @@ type VersionSource =
 			dist_tag: string;
 	  }
 	| {
-			/** A GitHub release asset — the shape codex and zerostack ship as. */
+			/** A GitHub release asset — the shape standalone-ELF CLIs ship as. */
 			type: "github_release";
 			/** "owner/repo". */
 			repo: string;

package/src/module-not-found.test.ts

@@ -0,0 +1,84 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * Locks the mount candidate-chain regression (2026-08-24): scala-agents-ui
+ * crash-looped at boot because @teamscala/cli-session exports ./boot/mount.ts
+ * and not ./mount.ts. The chain already listed boot/mount.ts as a fallback,
+ * but Bun names an unexported subpath by its BARE package, so the first
+ * candidate's miss was classified as a real error and boot died before the
+ * fallback ran. The whole value of the chain is that candidate 1 may be absent.
+ */
+
+import { describe, expect, it } from "bun:test";
+import { barePackageOf, isModuleNotFound } from "./module-not-found";
+
+describe("barePackageOf", () => {
+	it("keeps the scope for scoped packages", () => {
+		expect(barePackageOf("@teamscala/cli-session/mount.ts")).toBe(
+			"@teamscala/cli-session",
+		);
+		expect(barePackageOf("@teamscala/cli-session")).toBe(
+			"@teamscala/cli-session",
+		);
+	});
+
+	it("takes the first segment for unscoped packages", () => {
+		expect(barePackageOf("hono/mount.ts")).toBe("hono");
+		expect(barePackageOf("hono")).toBe("hono");
+	});
+});
+
+describe("isModuleNotFound", () => {
+	// The exact shape Bun emits for an unexported subpath: it names the
+	// PACKAGE, never the subpath that was asked for.
+	const bunSubpathMiss = {
+		message:
+			"Cannot find package '@teamscala/cli-session' imported from /srv/node_modules/@teamscala/service-boot/src/mount-server-packages.ts",
+	};
+
+	it("treats an unexported subpath as not-found so the chain falls through", () => {
+		expect(
+			isModuleNotFound(bunSubpathMiss, "@teamscala/cli-session/mount.ts"),
+		).toBe(true);
+	});
+
+	it("still matches when the error names the full specifier", () => {
+		expect(
+			isModuleNotFound(
+				{ message: "Cannot find module '@teamscala/x/mount.ts'" },
+				"@teamscala/x/mount.ts",
+			),
+		).toBe(true);
+	});
+
+	it("does NOT swallow a transitive miss of a DIFFERENT module", () => {
+		// A file inside the candidate failing to resolve something else must
+		// surface as a real error, or the true cause hides behind "not found".
+		expect(
+			isModuleNotFound(
+				{ message: "Cannot find package '@teamscala/some-other-dep'" },
+				"@teamscala/cli-session/mount.ts",
+			),
+		).toBe(false);
+	});
+
+	it("does NOT swallow a syntax or runtime error", () => {
+		expect(
+			isModuleNotFound(
+				new SyntaxError("Unexpected token"),
+				"@teamscala/cli-session/mount.ts",
+			),
+		).toBe(false);
+	});
+
+	it("reads non-Error throwables defensively (Bun ResolveMessage is not an Error)", () => {
+		expect(
+			isModuleNotFound(
+				"Cannot find package '@teamscala/cli-session'",
+				"@teamscala/cli-session/mount.ts",
+			),
+		).toBe(true);
+	});
+});

package/src/module-not-found.ts

@@ -0,0 +1,39 @@
+/**
+ * @system service-boot
+ * @status handwritten
+ * @edit edit directly
+ *
+ * Classifies a failed dynamic import as "this candidate is absent" vs a real
+ * error, for the server_package mount candidate chain. Extracted from
+ * mount-server-packages so the classification is testable: as a closure it
+ * could not be exercised, and it shipped wrong.
+ */
+
+/** `@scope/name/sub/path.ts` -> `@scope/name`; `name/sub` -> `name`. */
+export function barePackageOf(specifier: string): string {
+	const parts = specifier.split("/");
+	return specifier.startsWith("@") ? parts.slice(0, 2).join("/") : parts[0];
+}
+
+/**
+ * True when the import failed because `requestedPath` itself is absent.
+ *
+ * Bun reports an unexported SUBPATH as `Cannot find package '<bare>'`, naming
+ * the package rather than the subpath, so the bare name of THIS candidate
+ * counts as not-found. Without that the first candidate's miss is
+ * misclassified as fatal and the fallbacks never run (measured 2026-08-24:
+ * scala-agents-ui crash-looped because cli-session exports ./boot/mount.ts and
+ * not ./mount.ts). A transitive miss naming a DIFFERENT module still surfaces.
+ */
+export function isModuleNotFound(err: unknown, requestedPath: string): boolean {
+	const msg =
+		(err as { message?: string })?.message ??
+		(typeof err === "string" ? err : String(err));
+	const bare = barePackageOf(requestedPath);
+	return (
+		msg.includes(`Cannot find module '${requestedPath}'`) ||
+		msg.includes(`Cannot find package '${requestedPath}'`) ||
+		msg.includes(`Cannot find module '${bare}'`) ||
+		msg.includes(`Cannot find package '${bare}'`)
+	);
+}

package/src/mount-server-packages.ts

@@ -20,6 +20,7 @@ import {
 	type MountRegistry,
 } from "@teamscala/os/runtime-contracts/mount-context";
 import type { Hono } from "hono";
+import { isModuleNotFound } from "./module-not-found";
 
 type ServerPackageMount = (ctx: MountContext) => Promise<void> | void;
 
@@ -68,19 +69,7 @@ export async function mountServerPackages(
 		return mountRegistry;
 	}
 
-	const isModuleNotFound = (err: unknown, requestedPath: string): boolean => {
-		// Bun's ResolveMessage is not an Error subclass — read message defensively.
-		// Match ONLY when the missing module is the candidate path itself; transitive
-		// not-found errors (e.g. a file inside the candidate fails to resolve a
-		// different module) must surface, not be swallowed as "not found here".
-		const msg =
-			(err as { message?: string })?.message ??
-			(typeof err === "string" ? err : String(err));
-		return (
-			msg.includes(`Cannot find module '${requestedPath}'`) ||
-			msg.includes(`Cannot find package '${requestedPath}'`)
-		);
-	};
+
 
 	for (const pkg of serverPackages) {
 		try {

package/src/register-registry-page-route/resolve-page-data.ts

@@ -1,6 +1,6 @@
 /**
  * @system ui-service-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * Converts the resolved loader-graph into the pageData shape the renderer

package/src/register-registry-page-route.ts

@@ -1,6 +1,6 @@
 /**
  * @system ui-service-boot
- * @status handwritten
+ * @status handwritten @indivisible-unit
  * @edit edit directly
  *
  * Reads `page_route` registry rows for the current service slug and registers