@teamscala/service-boot 0.23.468 → 0.23.470

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.468",
+  "version": "0.23.470",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",

package/src/fn-routers/public-agreement-router.ts

@@ -35,6 +35,7 @@ import { os } from "@orpc/server";
 import * as v from "valibot";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
 import { queryRows } from "@teamscala/db/query-rows";
+import { recordEvent } from "@teamscala/event-log/record-event";
 import type { PrismaClient } from "@teamscala/db/client";
 import { signAgreementAccessToken } from "@teamscala/document-signing/agreement-access-token";
 import {
@@ -316,9 +317,32 @@ export const publicAgreementRouter = {
 				error: "This agreement has no signers recorded and cannot be signed.",
 			};
 		} catch (err) {
-			log.error(
-				`[publicAgreement.sign] failed: ${err instanceof Error ? err.message : String(err)}`,
-			);
+			const detail = err instanceof Error ? err.message : String(err);
+			log.error(`[publicAgreement.sign] failed: ${detail}`);
+			// A LOG LINE IS NOT A RECORD. Measured 2026-09-03: signing was broken
+			// for every signer for hours -- first a 404 on the procedure, then a
+			// Prisma 8 codec rejecting the timestamp write -- and error_logs held
+			// ZERO rows the whole time. The page returned 200, the service was
+			// running, the deploy was green, and the signer saw only "Could not
+			// submit your signature.", which reads as transient and invites a
+			// retry that fails identically. The failure was discovered by a human
+			// being unable to sign, which is the same shape as
+			// page-server.render.failed above and takes the same cure: emit a
+			// durable event so a surface can answer "is signing failing" without
+			// somebody attempting a signature.
+			//
+			// Fire-and-forget and last: telemetry may never change what the signer
+			// is served, and this path is already handling a failure
+			// (observability-is-passive). The agreement id and the signer role
+			// make a recorded event lead to the specific failure.
+			recordEvent({
+				kind: "agreement.sign.failed",
+				payload: {
+					agreementId,
+					error: detail.slice(0, 500),
+					errorName: err instanceof Error ? err.name : "unknown",
+				},
+			});
 			return { ok: false as const, error: "Could not submit your signature." };
 		}
 	}),

package/src/mount-orpc-router.ts

@@ -11,7 +11,6 @@
 
 import { join } from "node:path";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { registerFnRouters } from "./fn-routers/index.ts";
 import type { InjectedDb8 } from "@teamscala/db/db8-registry";
 import type { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
@@ -30,7 +29,11 @@ export async function mountOrpcRouter(
 	serviceSlug: string,
 ): Promise<OrpcMountResult | null> {
 	const log = getAppLogger();
-	registerFnRouters();
+	// registerFnRouters() is retired: the row-composed bundle (orpc-bundle from
+	// api_route rows) is the sole fn source. The handwritten registration is
+	// fully shadowed by generated.fn (all families have rows) — keeping it
+	// would block generated-only procedures (auth, cacheAdmin, regions,
+	// realtime) from serving.
 	const routerPath = join(
 		process.cwd(),
 		"prisma/generated/orpc/routers/index.ts",