@teamscala/service-boot 0.23.512 → 0.23.514

package/package.json

@@ -5,14 +5,14 @@
     "edit": "edit src/ — dependencies and exports derive from imports; everything else preserved"
   },
   "dependencies": {
-    "@orpc/server": "1.15.0",
+    "@orpc/server": "1.15.1",
     "@teamscala/agreement-generation": "1.0.17",
-    "@teamscala/assessment": "0.0.19",
-    "@teamscala/auth": "1.102.6",
+    "@teamscala/assessment": "0.0.22",
+    "@teamscala/auth": "1.102.11",
     "@teamscala/cache": "1.0.79",
-    "@teamscala/chat-completion": "0.0.453",
-    "@teamscala/db": "1.21.43750",
-    "@teamscala/db-validation": "0.1.292",
+    "@teamscala/chat-completion": "0.0.469",
+    "@teamscala/db": "1.21.43752",
+    "@teamscala/db-validation": "0.1.344",
     "@teamscala/document-signing": "1.0.5",
     "@teamscala/email-client": "0.1.4",
     "@teamscala/encryption": "0.3.98",
@@ -21,25 +21,24 @@
     "@teamscala/formatters": "0.2.95",
     "@teamscala/generic-registry": "1.0.12",
     "@teamscala/hono-boundary": "0.0.1",
-    "@teamscala/host-command-bus": "0.1.1",
     "@teamscala/http": "2.1.105",
     "@teamscala/logger": "1.1.203",
     "@teamscala/mcp-multi-session": "1.3.147",
     "@teamscala/object-storage": "1.2.201",
     "@teamscala/orpc": "2.6.118",
-    "@teamscala/os": "1.15.263",
+    "@teamscala/os": "1.15.264",
     "@teamscala/publish-registry": "0.1.3",
-    "@teamscala/resolver-engine": "1.1.207",
+    "@teamscala/resolver-engine": "1.1.208",
     "@teamscala/timing": "1.0.51",
-    "@teamscala/tool-executor": "4.1.162",
+    "@teamscala/tool-executor": "4.1.166",
     "@teamscala/watchdog": "1.0.53",
-    "hono": "4.13.7",
-    "pg-boss": "12.30.0",
+    "hono": "4.13.8",
+    "pg-boss": "12.33.1",
     "tailwindcss": "4.3.3",
-    "valibot": "1.4.2"
+    "valibot": "1.5.0"
   },
   "devDependencies": {
-    "@happy-dom/global-registrator": "20.14.0",
+    "@happy-dom/global-registrator": "20.14.5",
     "@testing-library/react": "16.3.3",
     "bun-types": "1.4.2"
   },
@@ -1188,5 +1187,5 @@
   "repository": "https://github.com/teamgbg/service-boot",
   "sideEffects": false,
   "type": "module",
-  "version": "0.23.512"
+  "version": "0.23.514"
 }

package/src/capability-slug.test.ts

@@ -1,31 +1,30 @@
-// @system codegen
-// @status generated
-// @edit change the suite in the owned-suites band, then re-run codegen. Hand-edits are overwritten.
-//
-// This suite's assertions are OWNED by the codegen band: the band module
-// carries them verbatim, this file is the emission, and hand edits here are
-// overwritten on the next run. The rationale each assertion carries moved
-// with it into the band.
-
 import { describe, expect, test } from "bun:test";
 import { toCapabilitySlug } from "./capability-slug.ts";
 
 describe("toCapabilitySlug", () => {
 	test("strips the language+tier suffix from a dev deployable", () => {
-		expect(toCapabilitySlug("scala-projects-bun-dev")).toBe("scala-projects");
-		expect(toCapabilitySlug("scala-ai-bun-dev")).toBe("scala-ai");
+		expect(toCapabilitySlug("scala-projects-ts-dev")).toBe("scala-projects");
+		expect(toCapabilitySlug("scala-ai-ts-dev")).toBe("scala-ai");
 		expect(toCapabilitySlug("scala-image-optimizer-rust-dev")).toBe(
 			"scala-image-optimizer",
 		);
 	});
 
 	test("strips the language+tier suffix from a prod deployable", () => {
-		expect(toCapabilitySlug("scala-projects-bun-prod")).toBe("scala-projects");
+		expect(toCapabilitySlug("scala-projects-ts-prod")).toBe("scala-projects");
 		expect(toCapabilitySlug("scala-messaging-service-rust-prod")).toBe(
 			"scala-messaging-service",
 		);
 	});
 
+	test("strips the retired bun spelling to the same capability", () => {
+		// The fleet was renamed under -bun before the operator ruling of
+		// 2026-09-08 fixed the language segment at ts; rows or supervised
+		// names still carrying it converge rather than fail the join.
+		expect(toCapabilitySlug("scala-projects-bun-dev")).toBe("scala-projects");
+		expect(toCapabilitySlug("scala-ai-bun-prod")).toBe("scala-ai");
+	});
+
 	test("returns an already-capability slug unchanged", () => {
 		// The prod lane is still bare while the tier migration is in flight, so
 		// the SAME function must be correct before and after the rename lands.
@@ -35,11 +34,11 @@ describe("toCapabilitySlug", () => {
 
 	test("both lanes of one application normalize to the same identity", () => {
 		// This is the property the page_route join depends on.
-		expect(toCapabilitySlug("scala-projects-bun-dev")).toBe(
+		expect(toCapabilitySlug("scala-projects-ts-dev")).toBe(
 			toCapabilitySlug("scala-projects"),
 		);
-		expect(toCapabilitySlug("scala-quiz-bun-dev")).toBe(
-			toCapabilitySlug("scala-quiz-bun-prod"),
+		expect(toCapabilitySlug("scala-quiz-ts-dev")).toBe(
+			toCapabilitySlug("scala-quiz-ts-prod"),
 		);
 	});
 

package/src/capability-slug.ts

@@ -6,10 +6,12 @@
  * Deployable slug -> capability slug.
  *
  * A DEPLOYABLE is named `<capability>-<language>-<tier>`
- * (`deployables-carry-language-and-tier`): `scala-projects-bun-dev` and
- * `scala-projects-bun-prod` are two DEPLOYMENTS of one APPLICATION. The
- * ecosystem generator emits that name into `SERVICE_SLUG` per lane, so one
- * service arrives here under a DIFFERENT identity in each lane.
+ * (`deployables-carry-language-and-tier`, as amended by the operator ruling of
+ * 2026-09-08: "so actually the apps are ts, not bun" — the language segment
+ * spells the LANGUAGE, so Bun-launched services are `ts`): `scala-projects-ts-dev`
+ * and `scala-projects-ts-prod` are two DEPLOYMENTS of one APPLICATION. The
+ * ecosystem generator derives that name per lane, so one service arrives here
+ * under a DIFFERENT identity in each lane.
  *
  * A `page_route` row describes the APPLICATION url space, which is the same
  * in both lanes, so it carries the CAPABILITY name and there is exactly one
@@ -26,13 +28,17 @@
  * The suffix grammar is a CLOSED SET defined by doctrine and emitted by the
  * generator, so this is a parse of a documented contract rather than a
  * pattern heuristic. A slug that does not end in one is already a capability
- * name and is returned unchanged -- which is why this is correct both BEFORE
- * the tier migration completes (prod is still bare `scala-projects`) and
- * after it (prod becomes `scala-projects-bun-prod`).
+ * name and is returned unchanged.
+ *
+ * `bun` REMAINS IN THE SET AS RETIRED SPELLING TOLERANCE, mirroring the
+ * generator side (`ecosystem/deployable_identity.rs capability_of` strips
+ * `-ts`, `-bun` and `-rust`): the fleet was renamed under `-bun` and rows or
+ * supervised names still carrying it must converge to the same capability
+ * rather than fail the join during the migration window.
  */
 
-/** Language segment of a deployable name. */
-const LANGUAGES = ["bun", "rust"] as const;
+/** Language segment of a deployable name. `bun` is the retired spelling. */
+const LANGUAGES = ["ts", "bun", "rust"] as const;
 
 /** Tier segment of a deployable name. */
 const TIERS = ["dev", "prod"] as const;
@@ -43,8 +49,9 @@ type Tier = (typeof TIERS)[number];
 /**
  * The capability half of a deployable slug.
  *
- * `scala-projects-bun-dev`  -> `scala-projects`
- * `scala-projects-bun-prod` -> `scala-projects`
+ * `scala-projects-ts-dev`   -> `scala-projects`
+ * `scala-projects-ts-prod`  -> `scala-projects`
+ * `scala-projects-bun-dev`  -> `scala-projects` (retired spelling)
  * `scala-projects`          -> `scala-projects` (already a capability name)
  */
 export function toCapabilitySlug(slug: string): string {

package/src/mount-orpc-router.test.ts

@@ -43,11 +43,15 @@ describe("mountOrpcRouter generated-artifact seam", () => {
 		);
 	});
 
-	test("the generic mount no longer injects a gateway URL — the executor derives its host from the registry", async () => {
+	test("the mount injects only the live collaborators — the retired injections stay retired", async () => {
 		// The retired MCP_GATEWAY_URL env name and its injector are gone: the
 		// sdk-mcp-forwarder resolves the SDK execution host from the
 		// mcp_server/scala-mcp registry row via loadRegistryConfig. A missing
 		// row refuses at the boundary (assertSdkHostResolved), never via env.
+		// The @teamscala/host-command-bus invoker injection retired with the
+		// bus (2026-09-19): the mount passes caller identity + secret
+		// decryption only, and host_command tools execute through the native
+		// in-process coding path inside tool-executor.
 		const service = await mkdtemp(join(tmpdir(), "mount-orpc-router-test-"));
 		tempDirs.push(service);
 		await mkdir(join(service, "prisma/generated/orpc/routers"), {
@@ -64,8 +68,8 @@ describe("mountOrpcRouter generated-artifact seam", () => {
 		process.chdir(service);
 
 		// Stub the collaborators the mount reaches BEFORE configureToolExecutor
-		// — the point is to capture the opts object and assert the injector is
-		// absent.
+		// — the point is to capture the opts object and assert the retired
+		// injectors are absent.
 		let seenKeys: Array<string> = [];
 		mock.module("@teamscala/orpc/app-router", () => ({
 			getAppRouter: async () => ({
@@ -85,6 +89,9 @@ describe("mountOrpcRouter generated-artifact seam", () => {
 		await mountOrpcRouter(app as never, "scala-mcp");
 
 		expect(seenKeys).not.toContain("getMcpGatewayUrl");
+		expect(seenKeys).not.toContain("createHostCommandInvoker");
+		expect(seenKeys).toContain("getCallerContext");
+		expect(seenKeys).toContain("decryptSecretConfig");
 	});
 });
 

package/src/mount-orpc-router.ts

@@ -165,22 +165,21 @@ export async function mountOrpcRouter(
 		const { configure: configureToolExecutor } = await import(
 			"@teamscala/tool-executor/configure"
 		);
-		// The host-command-bus collaborators arrive here (the boot layer) —
-		// tool-executor cannot import its tier-2 siblings statically
+		// The caller-identity and secret collaborators arrive here (the boot
+		// layer) — tool-executor cannot import its tier-2 siblings statically
 		// (vertical-dependency-only: a same-tier edge). Resolved eagerly at
-		// mount so the injected factories stay synchronous; the modules are
-		// small and their postgres dependency is already loaded by the db
-		// primitive.
-		const [{ createHostCommandInvoker }, { getCallerContext }, { decryptSecretConfig }] =
+		// mount so the injected factories stay synchronous. The retired
+		// @teamscala/host-command-bus invoker injection no longer happens: the
+		// bus is retired, and host_command tools execute through the native
+		// in-process coding path inside tool-executor.
+		const [{ getCallerContext }, { decryptSecretConfig }] =
 			await Promise.all([
-				import("@teamscala/host-command-bus/invoker"),
 				import("@teamscala/mcp-multi-session/caller-context"),
 				import("@teamscala/encryption/crypto/secret-config"),
 			]);
 		configureToolExecutor({
 			getAppRouter: () => getAppRouter(),
 			getPrisma: () => getConfiguredPrisma(),
-			createHostCommandInvoker: (config) => createHostCommandInvoker(config as never),
 			getCallerContext: () => getCallerContext(),
 			decryptSecretConfig: (raw) => decryptSecretConfig(raw as never),
 		});