@teamscala/service-boot 0.23.522 → 0.23.523

package/package.json

@@ -302,5 +302,5 @@
   "repository": "https://github.com/teamgbg/service-boot",
   "sideEffects": false,
   "type": "module",
-  "version": "0.23.522"
+  "version": "0.23.523"
 }

package/src/asset-proxy.ts

@@ -7,8 +7,12 @@
  * Streams objects from the configured S3 bucket, converting PNG/JPEG
  * to WebP/AVIF when the browser declares support via Accept header.
  * Returns 404 for missing keys, 502 for S3 failures. Never redirects.
+ * Every non-2xx exit records which stage failed through the app logger:
+ * a 404 and a 502 are indistinguishable at the socket, so the fault plane
+ * (credential resolution vs store side) is only observable in the log.
  */
 
+import { getAppLogger } from "@teamscala/logger/app-loggers";
 import { getClient } from "@teamscala/object-storage/create/client/get-client";
 import {
 	buildEtag,
@@ -37,6 +41,9 @@ export async function handleAssetProxy(req: Request): Promise<Response> {
 
 	const s3 = await getClient();
 	if (!s3) {
+		getAppLogger().error("[asset-proxy] no storage client — credential resolution returned no client", {
+			key,
+		});
 		return new Response("", { status: 502 });
 	}
 
@@ -45,7 +52,11 @@ export async function handleAssetProxy(req: Request): Promise<Response> {
 	let stats: Awaited<ReturnType<typeof file.stat>>;
 	try {
 		stats = await file.stat();
-	} catch {
+	} catch (err) {
+		getAppLogger().error("[asset-proxy] store stat failed", {
+			error: err,
+			key,
+		});
 		return new Response("Not Found", { status: 404 });
 	}
 
@@ -117,7 +128,11 @@ export async function handleAssetProxy(req: Request): Promise<Response> {
 	let body: ReadableStream<Uint8Array<ArrayBuffer>>;
 	try {
 		body = file.stream();
-	} catch {
+	} catch (err) {
+		getAppLogger().error("[asset-proxy] store stream failed", {
+			error: err,
+			key,
+		});
 		return new Response("", { status: 502 });
 	}