npm - @teamscala/service-boot - Versions diffs - 0.23.525 → 0.23.527 - Mend

@teamscala/service-boot 0.23.525 → 0.23.527

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (14) hide show

package/package.json +2 -6
package/src/agreement-gate/signing-session.ts +21 -36
package/src/agreement-gate.ts +2 -2
package/src/expand-roster.ts +17 -27
package/src/orpc-contract-rows.json +3871 -119
package/src/pg-boss-mount.ts +6 -6
package/src/register-registry-page-route/live-loader-config.ts +0 -16
package/src/register-registry-page-route/resolve-request-graph.ts +2 -98
package/src/register-registry-page-route/warn-uncovered-blocks.ts +3 -20
package/src/register-registry-page-route.ts +0 -10
package/src/two-phase-full-app.ts +1 -0
package/src/pg-boss-handler-registry.ts +0 -15
package/src/register-registry-page-route/graph-cache.test.ts +0 -81
package/src/register-registry-page-route/graph-cache.ts +0 -54

package/src/orpc-contract-rows.json CHANGED Viewed

@@ -1,126 +1,11 @@
 {
   "suite": {
-    "target": "src/orpc-contract-rows.json"
+    "target": "src/orpc-contract-rows.test.ts",
+    "package": "@teamscala/service-boot",
+    "rows_module": "./orpc-contract-rows.json",
+    "describe_label": "@teamscala/service-boot function_call contracts"
   },
   "rows": [
-    {
-      "args": [
-        {
-          "key": "row-fixture-key",
-          "authorization": "Bearer row-fixture-key"
-        },
-        ""
-      ],
-      "note": "THE ONE CALLER THAT GETS THROUGH. The internal service-to-service fetch the MCP gateway makes at boot: the configured key presented as a Bearer token, on a request carrying no forwarding header. The second arg position is a placeholder the one-parameter subject ignores, because the registry writer collapses an argument array shorter than two elements (measured 2026-09-30 while filing the @teamscala/orpc rows) so a one-argument row cannot be spelled. The key value is a fixture, not a credential: no secret row holds it and the production key arrives from the SCALA_DEV_KEY environment.",
-      "expect": true,
-      "export": "openApiContractAuthorised",
-      "module": "src/orpc-openapi-gate.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-authorises-the-internal-key-holder"
-    },
-    {
-      "args": [
-        "scala-quiz",
-        "",
-        ""
-      ],
-      "note": "THE FALLBACKS, PINNED SO A MISSING HEADER CANNOT PRODUCE A MALFORMED URL. A request that names no Host and carries no forwarding header still gets a well-formed server entry (localhost, http) rather than an undefined host interpolated into the document as the string null. The title comes from the slug regardless - the service always names itself. The empty-string arg positions stand for absent headers: a JSON argument cannot spell undefined, and the subject reads absence through the same falsy branch an empty string takes.",
-      "expect": {
-        "member_equals": {
-          "title": "scala-quiz oRPC procedures",
-          "servers.0.url": "http://localhost/api/rpc"
-        }
-      },
-      "export": "openApiContractOptions",
-      "module": "src/orpc-openapi-document.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-falls-back-when-the-request-names-no-host"
-    },
-    {
-      "args": [
-        "scala-portal",
-        "scala-portal.internal:5200",
-        "http"
-      ],
-      "note": "THE DOCUMENT NAMES ITS SERVICE AND THE PREFIX IT SERVES. The title is the slug the mount was handed and the server URL is the host this request arrived on, with the /api/rpc prefix appended because that is the prefix the POST handler serves under - a client that reads the document can therefore call what the document describes. Deriving both rather than configuring them is what makes ONE document correct for the internal address the MCP gateway fetches and for a public host at the same time; the values are asserted exactly, so a change in either is a visible diff rather than a silently wrong server URL.",
-      "expect": {
-        "member_equals": {
-          "title": "scala-portal oRPC procedures",
-          "servers.0.url": "http://scala-portal.internal:5200/api/rpc"
-        }
-      },
-      "export": "openApiContractOptions",
-      "module": "src/orpc-openapi-document.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-names-the-service-and-the-prefix-it-serves"
-    },
-    {
-      "args": [
-        {
-          "key": "row-fixture-key",
-          "forwardedFor": "203.0.113.7",
-          "authorization": "Bearer row-fixture-key",
-          "forwardedProto": "https"
-        },
-        ""
-      ],
-      "note": "THE STATIC KEY IS NEVER A PUBLIC SOLE-GATE. Guard auth-helpers-fail-closed holds that a shared key is internal-only and names the remedy for a legitimate internal bearer check: also reject on proxy-header presence. This row is that remedy. The caller holds the right key and is still refused, because x-forwarded-proto and x-forwarded-for prove the request crossed a proxy, and on this platform only public ingress puts them there - an internal fetch, which is what the MCP gateway makes at boot, carries neither. Without this refusal the key alone would open the procedure surface to the public internet.",
-      "expect": false,
-      "export": "openApiContractAuthorised",
-      "module": "src/orpc-openapi-gate.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-refuses-a-proxied-request"
-    },
-    {
-      "args": [
-        {
-          "key": "row-fixture-key"
-        },
-        ""
-      ],
-      "note": "NO CREDENTIAL, NO DOCUMENT. A caller presenting no Authorization header is refused even though the service HAS a key configured, so the gate is not merely comparing a header to a value. The trailing empty-string arg position is a placeholder the one-parameter subject ignores: the registry writer collapses an argument array shorter than two elements (measured 2026-09-30 while filing the @teamscala/orpc rows), so a one-argument row cannot be spelled.",
-      "expect": false,
-      "export": "openApiContractAuthorised",
-      "module": "src/orpc-openapi-gate.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-refuses-a-request-with-no-authorization"
-    },
-    {
-      "args": [
-        {
-          "key": "row-fixture-key",
-          "authorization": "Bearer not-the-configured-key"
-        },
-        ""
-      ],
-      "note": "THE NEAR-MISS. A Bearer token of the right shape carrying the wrong value is refused, which is the case a prefix check alone would wave through. Trailing arg position is a placeholder (see the no-authorization row for why).",
-      "expect": false,
-      "export": "openApiContractAuthorised",
-      "module": "src/orpc-openapi-gate.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-refuses-a-wrong-key"
-    },
-    {
-      "args": [
-        {
-          "authorization": "Bearer anything-at-all"
-        },
-        ""
-      ],
-      "note": "FAIL CLOSED WHEN THE SERVICE CANNOT GATE. No SCALA_DEV_KEY configured means there is no key to match, and a missing signal must DENY rather than admit every caller: a service that cannot authenticate must not serve the internal procedure surface. The key member is absent from the argument, which is exactly how an unconfigured environment reaches this subject. Trailing arg position is a placeholder.",
-      "expect": false,
-      "export": "openApiContractAuthorised",
-      "module": "src/orpc-openapi-gate.ts",
-      "package": "@teamscala/service-boot",
-      "suite_type": "function_call",
-      "slug": "boot:openapi-contract-refuses-when-no-key-is-configured"
-    },
     {
       "args": [
         {},
@@ -409,6 +294,3873 @@
       "package": "@teamscala/service-boot",
       "suite_type": "function_call",
       "slug": "quiz-gate:gate-declares-the-one-view-entry-marker"
+    },
+    {
+      "args": [
+        "@teamscala/cli-session"
+      ],
+      "label": "keeps the scope for scoped packages",
+      "expect": "@teamscala/cli-session",
+      "export": "barePackageOf",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:bare-package-of-keeps-the-scope-for-scoped-packages-bare"
+    },
+    {
+      "args": [
+        "@teamscala/cli-session/mount.ts"
+      ],
+      "label": "keeps the scope for scoped packages",
+      "expect": "@teamscala/cli-session",
+      "export": "barePackageOf",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:bare-package-of-keeps-the-scope-for-scoped-packages-with-subpath"
+    },
+    {
+      "args": [
+        "hono"
+      ],
+      "label": "takes the first segment for unscoped packages",
+      "expect": "hono",
+      "export": "barePackageOf",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:bare-package-of-takes-the-first-segment-for-unscoped-packages-bare"
+    },
+    {
+      "args": [
+        "hono/mount.ts"
+      ],
+      "label": "takes the first segment for unscoped packages",
+      "expect": "hono",
+      "export": "barePackageOf",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:bare-package-of-takes-the-first-segment-for-unscoped-packages-with-subpath"
+    },
+    {
+      "args": [
+        "u",
+        "",
+        {
+          "title": "DB title",
+          "subtitle": "Sign to continue",
+          "requireOtp": true,
+          "submitLabel": "Sign now"
+        }
+      ],
+      "label": "a blank per-agreement title falls back to the DB-driven default",
+      "expect": {
+        "type": "SignIn",
+        "props": {
+          "id": "agreement-gate-u",
+          "mode": "gate",
+          "title": "DB title",
+          "subtitle": "Sign to continue",
+          "gateAction": "/api/agreement-access",
+          "gateRequireOtp": "true",
+          "showBackToHome": true,
+          "gateSubmitLabel": "Sign now",
+          "gateContextField": "agreementId",
+          "gateContextValue": "u"
+        }
+      },
+      "export": "buildGateBlock",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-gate-block-a-blank-per-agreement-title-falls-back-to-the-db-driven-default"
+    },
+    {
+      "args": [
+        "agreement-uuid-1",
+        "Custom title",
+        {
+          "title": "DB title",
+          "subtitle": "Sign to continue",
+          "requireOtp": true,
+          "submitLabel": "Sign now"
+        }
+      ],
+      "note": "gateRequireOtp is the STRING the renderer validates, never a boolean: a boolean is stripped before reaching the component (the same coercion that bit the pre-placed gate block).",
+      "label": "carries the agreement uuid as the gate context (and the requireOtp string form true)",
+      "expect": {
+        "type": "SignIn",
+        "props": {
+          "id": "agreement-gate-agreement-uuid-1",
+          "mode": "gate",
+          "title": "Custom title",
+          "subtitle": "Sign to continue",
+          "gateAction": "/api/agreement-access",
+          "gateRequireOtp": "true",
+          "showBackToHome": true,
+          "gateSubmitLabel": "Sign now",
+          "gateContextField": "agreementId",
+          "gateContextValue": "agreement-uuid-1"
+        }
+      },
+      "export": "buildGateBlock",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-gate-block-carries-the-agreement-uuid-as-the-gate-context"
+    },
+    {
+      "args": [
+        "u",
+        "t",
+        {
+          "title": "DB title",
+          "subtitle": "Sign to continue",
+          "requireOtp": false,
+          "submitLabel": "Sign now"
+        }
+      ],
+      "label": "requireOtp is the STRING the renderer validates, never a boolean (false spelling)",
+      "expect": {
+        "type": "SignIn",
+        "props": {
+          "id": "agreement-gate-u",
+          "mode": "gate",
+          "title": "t",
+          "subtitle": "Sign to continue",
+          "gateAction": "/api/agreement-access",
+          "gateRequireOtp": "false",
+          "showBackToHome": true,
+          "gateSubmitLabel": "Sign now",
+          "gateContextField": "agreementId",
+          "gateContextValue": "u"
+        }
+      },
+      "export": "buildGateBlock",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-gate-block-require-otp-false-spells-the-string-false"
+    },
+    {
+      "args": [
+        "page",
+        null,
+        200
+      ],
+      "note": "The html text claims (absent Take me home, present no-page-at-this-link) stay hand-written: then-step expects carry structural verbs only.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "floor render: bare-root landing → no Take-me-home (it IS home)",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 200
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-bare-root-landing-renders-200-without-take-me-home"
+    },
+    {
+      "args": [
+        "page",
+        null,
+        404,
+        {
+          "homeUrl": "/"
+        }
+      ],
+      "note": "The html text claims (Take me home, doesn't exist, href, noindex) stay hand-written: the text lives behind the async Response.text() member call, and then-step expects carry the structural verbs only, so no row can read the body. The then step here proves text() resolves.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "floor render: dead link → 404 with Take-me-home copy",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 404
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-dead-link-renders-404"
+    },
+    {
+      "args": [
+        "page",
+        null,
+        200,
+        {
+          "empty": true,
+          "homeUrl": "/"
+        }
+      ],
+      "note": "The html text claims stay hand-written: then-step expects carry structural verbs only (no contains_text), so no row can read the async body.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "floor render: empty page → 200 with This-page-is-empty copy",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 200
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-empty-page-renders-200"
+    },
+    {
+      "args": [
+        "project",
+        null,
+        200,
+        {
+          "empty": true
+        }
+      ],
+      "note": "The html copy claims stay hand-written: async body, structural then-steps only.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "renders the empty-page surface when opts.empty",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 200
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-renders-the-empty-page-surface-when-opts-empty"
+    },
+    {
+      "args": [
+        "project",
+        null,
+        200
+      ],
+      "note": "The html copy claims stay hand-written: async body, structural then-steps only.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "returns a 200 Response for the bare root (no resource selected)",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 200
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-returns-a-200-response-for-the-bare-root"
+    },
+    {
+      "args": [
+        "project"
+      ],
+      "note": "The html copy claims stay hand-written: async body, structural then-steps only.",
+      "then": [
+        {
+          "call": "text"
+        }
+      ],
+      "label": "returns a 404 Response for a dead link",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 404
+        }
+      },
+      "export": "buildResourceNotFoundResponse",
+      "module": "src/resource-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-resource-not-found-response-returns-a-404-response-for-a-dead-link-project"
+    },
+    {
+      "args": [
+        {
+          "code": "UNKNOWN",
+          "http": {
+            "body": {},
+            "status": 500,
+            "headers": {}
+          },
+          "name": "TypeError",
+          "errorId": "xyz-789",
+          "message": "cannot read properties of undefined",
+          "stackHead": "",
+          "transient": false
+        }
+      ],
+      "note": "The html text claims (load-this-page wording, the real message shown so the operator has an explanation, errorId) stay hand-written: async body, structural then-steps only.",
+      "then": [
+        {
+          "args": [
+            "retry-after"
+          ],
+          "call": "headers.get",
+          "expect": null
+        },
+        {
+          "call": "text"
+        }
+      ],
+      "label": "hard error report → 500 HTML page, no Retry-After, error heading",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 500
+        }
+      },
+      "export": "buildServerErrorPageResponse",
+      "module": "src/server-error-page.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-server-error-page-response-hard-error-report-renders-500-without-retry-after"
+    },
+    {
+      "args": [
+        {
+          "code": "RENDER_TIMEOUT",
+          "http": {
+            "body": {},
+            "status": 503,
+            "headers": {}
+          },
+          "name": "SafeFallbackTimeoutError",
+          "reason": "render timed out under load",
+          "errorId": "abc-123",
+          "message": "safe-fallback exceeded 45000ms",
+          "stackHead": "",
+          "transient": true,
+          "retryAfter": 5
+        }
+      ],
+      "note": "The html text claims (taking-longer wording, absent load-this-page wording, errorId present) stay hand-written: the body lives behind the async Response.text() call and then-step expects carry the structural verbs only. errorId is present for browser-GlitchTip correlation.",
+      "then": [
+        {
+          "args": [
+            "content-type"
+          ],
+          "call": "headers.get",
+          "expect": "text/html; charset=utf-8"
+        },
+        {
+          "args": [
+            "retry-after"
+          ],
+          "call": "headers.get",
+          "expect": "5"
+        },
+        {
+          "args": [
+            "cache-control"
+          ],
+          "call": "headers.get",
+          "expect": "no-store, no-transform"
+        },
+        {
+          "call": "text"
+        }
+      ],
+      "label": "transient report → 503 HTML page with Retry-After + transient heading + errorId",
+      "expect": {
+        "instance_of": "Response",
+        "member_equals": {
+          "status": 503
+        }
+      },
+      "export": "buildServerErrorPageResponse",
+      "module": "src/server-error-page.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:build-server-error-page-response-transient-report-renders-503-with-retry-after"
+    },
+    {
+      "args": [],
+      "label": "an EMPTY registry block list falls back to the default shell",
+      "expect": [
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-title",
+            "size": "xl",
+            "text": "{{agreement.name}}",
+            "align": "left",
+            "weight": "bold",
+            "element": "h1"
+          }
+        },
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-execution",
+            "size": "sm",
+            "text": "IN WITNESS WHEREOF, the parties have executed this Agreement as of the date(s) of signature below.",
+            "align": "left",
+            "weight": "normal",
+            "element": "p"
+          }
+        },
+        {
+          "type": "Container",
+          "props": {
+            "id": "agreement-signature-panel",
+            "gap": "md",
+            "layout": "grid",
+            "columns": 2,
+            "content": [
+              {
+                "type": "SignatureField",
+                "props": {
+                  "id": "agreement-signature-field",
+                  "label": ""
+                }
+              }
+            ],
+            "padding": "md",
+            "direction": "column",
+            "mobileBehavior": "stack"
+          }
+        },
+        {
+          "type": "Button",
+          "props": {
+            "id": "agreement-print",
+            "href": "",
+            "icon": "lucide:printer",
+            "size": "default",
+            "label": "Print",
+            "preset": "action-primary",
+            "target": "_self",
+            "fullWidth": false,
+            "pushRight": false,
+            "actionType": "print",
+            "borderColor": "var(--border-color-default)",
+            "borderWidth": "var(--border-width-default)",
+            "borderRadius": "var(--radius-md)"
+          }
+        },
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-audit",
+            "size": "xs",
+            "text": "Secured electronic signature · {{agreement.org}}",
+            "align": "center",
+            "element": "p"
+          }
+        }
+      ],
+      "export": "buildSigningShellBlocks",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "export": "loadRegistryConfig",
+            "module": "@teamscala/db/registry/load-config",
+            "returns": {
+              "blocks": []
+            }
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:build-signing-shell-blocks-an-empty-registry-block-list-falls-back-to-the-default-shell"
+    },
+    {
+      "args": [],
+      "label": "an unreadable registry row still renders — the hardcoded shell is the fallback",
+      "expect": [
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-title",
+            "size": "xl",
+            "text": "{{agreement.name}}",
+            "align": "left",
+            "weight": "bold",
+            "element": "h1"
+          }
+        },
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-execution",
+            "size": "sm",
+            "text": "IN WITNESS WHEREOF, the parties have executed this Agreement as of the date(s) of signature below.",
+            "align": "left",
+            "weight": "normal",
+            "element": "p"
+          }
+        },
+        {
+          "type": "Container",
+          "props": {
+            "id": "agreement-signature-panel",
+            "gap": "md",
+            "layout": "grid",
+            "columns": 2,
+            "content": [
+              {
+                "type": "SignatureField",
+                "props": {
+                  "id": "agreement-signature-field",
+                  "label": ""
+                }
+              }
+            ],
+            "padding": "md",
+            "direction": "column",
+            "mobileBehavior": "stack"
+          }
+        },
+        {
+          "type": "Button",
+          "props": {
+            "id": "agreement-print",
+            "href": "",
+            "icon": "lucide:printer",
+            "size": "default",
+            "label": "Print",
+            "preset": "action-primary",
+            "target": "_self",
+            "fullWidth": false,
+            "pushRight": false,
+            "actionType": "print",
+            "borderColor": "var(--border-color-default)",
+            "borderWidth": "var(--border-width-default)",
+            "borderRadius": "var(--radius-md)"
+          }
+        },
+        {
+          "type": "Text",
+          "props": {
+            "id": "agreement-audit",
+            "size": "xs",
+            "text": "Secured electronic signature · {{agreement.org}}",
+            "align": "center",
+            "element": "p"
+          }
+        }
+      ],
+      "export": "buildSigningShellBlocks",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "error": {
+              "$error": {
+                "args": [
+                  "missing"
+                ],
+                "class": "Error"
+              }
+            },
+            "export": "loadRegistryConfig",
+            "module": "@teamscala/db/registry/load-config"
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:build-signing-shell-blocks-an-unreadable-registry-row-still-renders-the-default-shell"
+    },
+    {
+      "args": [],
+      "note": "The mutation-isolation half (the band mutates the first call's tree and reads the second) stays hand-written: it needs an in-test mutation between two calls, which no row expresses.",
+      "label": "registry-configured blocks replace the default, deep-cloned per call",
+      "expect": [
+        {
+          "type": "Text",
+          "props": {
+            "id": "custom-clause",
+            "text": "Custom clause"
+          }
+        }
+      ],
+      "export": "buildSigningShellBlocks",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "export": "loadRegistryConfig",
+            "module": "@teamscala/db/registry/load-config",
+            "returns": {
+              "blocks": [
+                {
+                  "type": "Text",
+                  "props": {
+                    "id": "custom-clause",
+                    "text": "Custom clause"
+                  }
+                }
+              ]
+            }
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:build-signing-shell-blocks-registry-configured-blocks-replace-the-default"
+    },
+    {
+      "args": [
+        {
+          "websiteName": "scala Roadmap"
+        }
+      ],
+      "label": "app root with no subject renders the website name alone",
+      "expect": "scala Roadmap",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-app-root-with-no-subject-renders-the-website-name-alone"
+    },
+    {
+      "args": [
+        {
+          "pageName": "chat",
+          "websiteName": "scala GPT",
+          "templateTitle": "Sales Agent — GBG Indo"
+        }
+      ],
+      "label": "curated resource template beats the default derivation",
+      "expect": "Sales Agent — GBG Indo",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-curated-resource-template-beats-the-default-derivation"
+    },
+    {
+      "args": [
+        {
+          "pageName": "P",
+          "templateTitle": "T",
+          "organisationName": "GBG Indo"
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "label": "per-page override and curated template still win over the org prefix",
+      "expect": "T",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-curated-template-still-wins-over-the-org-prefix"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard",
+          "websiteName": "creata Portal"
+        }
+      ],
+      "label": "default derivation: '<website>: <subject>' (portal spec)",
+      "expect": "creata Portal: Dashboard",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-default-derivation-website-colon-subject"
+    },
+    {
+      "args": [
+        {
+          "pageName": "view",
+          "entityTitle": "Q3 Proposal",
+          "websiteName": "scala Portal"
+        }
+      ],
+      "label": "entity title is the preferred subject over page name",
+      "expect": "scala Portal: Q3 Proposal",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-entity-title-is-the-preferred-subject-over-page-name"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard",
+          "websiteName": "Public Pages",
+          "organisationName": "GBG Indo"
+        }
+      ],
+      "label": "flag off keeps the legacy website-name derivation",
+      "expect": "Public Pages: Dashboard",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-flag-absent-keeps-the-legacy-website-name-derivation"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard",
+          "websiteName": "Public Pages",
+          "organisationName": "GBG Indo"
+        },
+        {
+          "orgPrefix": false
+        }
+      ],
+      "label": "flag off keeps the legacy website-name derivation",
+      "expect": "Public Pages: Dashboard",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-flag-off-keeps-the-legacy-website-name-derivation"
+    },
+    {
+      "args": [
+        {
+          "organisationName": "GBG Indo"
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "label": "no subject renders the org name alone; nothing at all is 'Untitled'",
+      "expect": "GBG Indo",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-no-subject-renders-the-org-name-alone"
+    },
+    {
+      "args": [
+        {
+          "websiteName": ""
+        }
+      ],
+      "note": "The regression: a default titleTemplate of {org.name} produced GBG Indo with no context. The composer structurally cannot.",
+      "label": "never degrades to a bare org name — no website + no subject is 'Untitled'",
+      "expect": "Untitled",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-no-website-and-no-subject-is-untitled-blank-website-name"
+    },
+    {
+      "args": [
+        {}
+      ],
+      "note": "The regression: a default titleTemplate of {org.name} produced GBG Indo with no context. The composer structurally cannot.",
+      "label": "never degrades to a bare org name — no website + no subject is 'Untitled'",
+      "expect": "Untitled",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-no-website-and-no-subject-is-untitled-empty-context"
+    },
+    {
+      "args": [
+        {}
+      ],
+      "label": "no subject renders the org name alone; nothing at all is 'Untitled'",
+      "expect": "Untitled",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-nothing-at-all-with-org-prefix-is-untitled"
+    },
+    {
+      "args": [
+        {
+          "entityTitle": "Launcha Blueprint",
+          "websiteName": "Public Pages",
+          "organisationName": "GBG Indo"
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "note": "The defect: client-facing document tabs read Public Pages: <subject>. The orgPrefix flag exists to remove it.",
+      "label": "prefix is the owning org's name, never the internal website label",
+      "expect": "GBG Indo: Launcha Blueprint",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-org-prefix-is-the-owning-orgs-name-never-the-internal-website-label"
+    },
+    {
+      "args": [
+        {
+          "entityTitle": "Launcha Blueprint",
+          "websiteName": "Public Pages",
+          "organisationName": ""
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "label": "org with no display name gets NO prefix — never the website name",
+      "expect": "Launcha Blueprint",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-org-with-no-display-name-gets-no-prefix-blank-organisation-name"
+    },
+    {
+      "args": [
+        {
+          "entityTitle": "Launcha Blueprint",
+          "websiteName": "Public Pages"
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "label": "org with no display name gets NO prefix — never the website name",
+      "expect": "Launcha Blueprint",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-org-with-no-display-name-gets-no-prefix-organisation-name-absent"
+    },
+    {
+      "args": [
+        {
+          "pageName": "P",
+          "websiteName": "W",
+          "pageMetaTitle": "Override",
+          "templateTitle": "Template"
+        }
+      ],
+      "label": "override beats template",
+      "expect": "Override",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-override-beats-template"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard",
+          "websiteName": "creata Portal",
+          "pageMetaTitle": "Custom SEO Title"
+        }
+      ],
+      "label": "per-page meta_title override wins outright",
+      "expect": "Custom SEO Title",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-per-page-meta-title-override-wins-outright"
+    },
+    {
+      "args": [
+        {
+          "pageName": "P",
+          "pageMetaTitle": "Override",
+          "organisationName": "GBG Indo"
+        },
+        {
+          "orgPrefix": true
+        }
+      ],
+      "label": "per-page override and curated template still win over the org prefix",
+      "expect": "Override",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-per-page-override-still-wins-over-the-org-prefix"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard"
+        }
+      ],
+      "label": "subject without a website name renders the subject alone",
+      "expect": "Dashboard",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-subject-without-a-website-name-renders-the-subject-alone"
+    },
+    {
+      "args": [
+        {
+          "pageName": "Dashboard",
+          "websiteName": "creata Portal",
+          "pageMetaTitle": "   "
+        }
+      ],
+      "label": "whitespace-only meta_title is not treated as an override",
+      "expect": "creata Portal: Dashboard",
+      "export": "composePageTitle",
+      "module": "src/compose-page-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:compose-page-title-whitespace-only-meta-title-is-not-treated-as-an-override"
+    },
+    {
+      "args": [],
+      "note": "Carries the band's order test (proposals evaluate before agreements), the open-capture test (gpt withholds nothing, so it is absent from this list) and the allow-list test (proposal and agreement withhold). The slug-uniqueness and access-cookie-pairing invariants over the catalog stay hand-written: they are call-free claims over module state, not a call's return.",
+      "label": "exposes only the withholding gates as the assistant's authority",
+      "expect": {
+        "member_equals": {
+          "0.slug": "proposal",
+          "1.slug": "agreement",
+          "length": 2
+        }
+      },
+      "export": "contentWithholdingGates",
+      "module": "src/content-gate/catalog.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:content-withholding-gates-resolves-the-withholding-gates-in-order"
+    },
+    {
+      "args": [
+        {
+          "page": null,
+          "hasResourceType": false,
+          "hasPageContentSource": true
+        }
+      ],
+      "note": "The call returns a PrimaryResourceMissingError; the class identity is carried by its own member triple (resourceType/httpStatus/empty) because instance_of names globalThis constructors only.",
+      "label": "decideContentPageFloor: no page row → dead-link 404 floor (the /roadmap case)",
+      "expect": {
+        "member_equals": {
+          "empty": false,
+          "httpStatus": 404,
+          "resourceType": "page"
+        }
+      },
+      "export": "decideContentPageFloor",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:decide-content-page-floor-no-page-row-is-the-dead-link-404-floor"
+    },
+    {
+      "args": [
+        {
+          "page": null,
+          "hasResourceType": false,
+          "hasPageContentSource": false
+        }
+      ],
+      "label": "decideContentPageFloor: no page source (region-slot shell) → null (untouched)",
+      "expect": null,
+      "export": "decideContentPageFloor",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:decide-content-page-floor-no-page-source-region-slot-shell-is-null"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "p1",
+            "puck_data": {
+              "content": [
+                {
+                  "type": "Text",
+                  "props": {}
+                }
+              ]
+            }
+          },
+          "hasResourceType": false,
+          "hasPageContentSource": true
+        }
+      ],
+      "label": "decideContentPageFloor: page row with blocks → null (renders normally)",
+      "expect": null,
+      "export": "decideContentPageFloor",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:decide-content-page-floor-page-row-with-blocks-renders-normally"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "p1",
+            "puck_data": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            }
+          },
+          "hasResourceType": false,
+          "hasPageContentSource": true
+        }
+      ],
+      "label": "decideContentPageFloor: page row with zero blocks → empty-page 200 floor",
+      "expect": {
+        "member_equals": {
+          "empty": true,
+          "httpStatus": 200,
+          "resourceType": "page"
+        }
+      },
+      "export": "decideContentPageFloor",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:decide-content-page-floor-page-row-with-zero-blocks-is-the-empty-page-200-floor"
+    },
+    {
+      "args": [
+        {
+          "page": null,
+          "hasResourceType": true,
+          "hasPageContentSource": true
+        }
+      ],
+      "label": "decideContentPageFloor: resource_type route → null (handled by the resource-type check)",
+      "expect": null,
+      "export": "decideContentPageFloor",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:decide-content-page-floor-resource-type-route-is-null"
+    },
+    {
+      "args": [
+        {
+          "sources": [
+            {
+              "key": "page"
+            }
+          ]
+        }
+      ],
+      "label": "an absent list renders as none, never an empty bracket pair",
+      "expect": "captured at boot: sources [page], region_slots [none] — resource_loader edits reach this service only after a restart",
+      "export": "describeCapturedLoaderConfig",
+      "module": "src/register-registry-page-route/captured-loader-config.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:describe-captured-loader-config-an-absent-list-renders-as-none"
+    },
+    {
+      "args": [
+        {
+          "sources": [
+            {
+              "key": "brand"
+            },
+            {
+              "key": "website"
+            },
+            {
+              "key": "footer"
+            }
+          ],
+          "region_slots": [
+            "header",
+            "center",
+            "footer"
+          ]
+        }
+      ],
+      "label": "names every captured source key and region slot, and states the restart contract",
+      "expect": "captured at boot: sources [brand, website, footer], region_slots [header, center, footer] — resource_loader edits reach this service only after a restart",
+      "export": "describeCapturedLoaderConfig",
+      "module": "src/register-registry-page-route/captured-loader-config.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:describe-captured-loader-config-names-every-source-key-and-region-slot-and-states-the-restart-contract"
+    },
+    {
+      "args": [
+        "/"
+      ],
+      "label": "empty / malformed → undefined",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-bare-slash-is-undefined"
+    },
+    {
+      "args": [
+        "/a9a28515-4ad5-405c-a74d-bb83fed079d0/5b742740-0f37-494c-a059-d8399ae4b350/dashboard"
+      ],
+      "note": "The violating behaviour this locks out returned the WEBSITE id (segment 0) → brand resolved no org → fell back to super-admin.",
+      "label": "canonical portal shape /<websiteId>/<orgId>/<path> → ORG at segment 1 (not the website id at segment 0)",
+      "expect": "5b742740-0f37-494c-a059-d8399ae4b350",
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-canonical-portal-shape-resolves-the-org-at-segment-1"
+    },
+    {
+      "args": [
+        ""
+      ],
+      "label": "empty / malformed → undefined",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-empty-string-is-undefined"
+    },
+    {
+      "args": [
+        "/dashboard"
+      ],
+      "label": "non-UUID path → undefined (no brand override, falls back as before)",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-non-uuid-path-dashboard-is-undefined"
+    },
+    {
+      "args": [
+        "/sign-in"
+      ],
+      "label": "non-UUID path → undefined (no brand override, falls back as before)",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-non-uuid-path-sign-in-is-undefined"
+    },
+    {
+      "args": [
+        "/a9a28515-4ad5-405c-a74d-bb83fed079d0/5b742740-0f37-494c-a059-d8399ae4b350/dashboard?right=chat"
+      ],
+      "label": "query string is ignored",
+      "expect": "5b742740-0f37-494c-a059-d8399ae4b350",
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-query-string-is-ignored"
+    },
+    {
+      "args": [
+        "/019e9124-af4c-7000-bfaf-2ae97fb64772"
+      ],
+      "label": "proposal/form/quiz resource host /<resourceId> → segment 0 (non-org, resolves no brand, falls back)",
+      "expect": "019e9124-af4c-7000-bfaf-2ae97fb64772",
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-resource-host-single-uuid-segment-0"
+    },
+    {
+      "args": [
+        "/5b742740-0f37-494c-a059-d8399ae4b350/projects"
+      ],
+      "label": "scala-projects single-UUID shape /<orgId>/<path> → segment 0 (unchanged)",
+      "expect": "5b742740-0f37-494c-a059-d8399ae4b350",
+      "export": "extractOrgIdFromCallbackPath",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:extract-org-id-from-callback-path-scala-projects-single-uuid-shape-segment-0"
+    },
+    {
+      "note": "The generated router shape is what matters, not mere key presence.",
+      "hoist": [
+        {
+          "args": [
+            {
+              "assessments": {}
+            }
+          ],
+          "export": "setServerClient"
+        },
+        {
+          "args": [
+            [
+              "assessments"
+            ]
+          ],
+          "export": "recordServerClientCapability"
+        }
+      ],
+      "label": "a model present without findFirst still counts as missing",
+      "expect": {
+        "contains_text": [
+          "assessments"
+        ]
+      },
+      "export": "getServerClientCapabilityFault",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-capability-fault-a-model-present-without-findfirst-still-counts-as-missing"
+    },
+    {
+      "note": "Daemon/portal shells own no DB schema and are healthy with an empty client.",
+      "hoist": [
+        {
+          "args": [
+            {
+              "puckPages": {}
+            }
+          ],
+          "export": "setServerClient"
+        },
+        {
+          "args": [
+            []
+          ],
+          "export": "recordServerClientCapability"
+        }
+      ],
+      "label": "a service declaring no models is never faulted",
+      "expect": null,
+      "export": "getServerClientCapabilityFault",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-capability-fault-a-service-declaring-no-models-is-never-faulted"
+    },
+    {
+      "hoist": [
+        {
+          "args": [
+            null
+          ],
+          "export": "setServerClient"
+        },
+        {
+          "args": [
+            [
+              "assessments"
+            ]
+          ],
+          "export": "recordServerClientCapability"
+        }
+      ],
+      "label": "an unregistered client is itself the fault",
+      "expect": {
+        "contains_text": [
+          "no ORPC server client registered"
+        ]
+      },
+      "export": "getServerClientCapabilityFault",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-capability-fault-an-unregistered-client-is-itself-the-fault"
+    },
+    {
+      "note": "THE OUTAGE, AS A HEALTH ANSWER. A client was registered and carried only the platform routers, so every process-existence signal was green while every data-backed page 500d. /health must be able to say this.",
+      "hoist": [
+        {
+          "args": [
+            {
+              "puckPages": {},
+              "userPreferences": {}
+            }
+          ],
+          "export": "setServerClient"
+        },
+        {
+          "args": [
+            [
+              "assessments",
+              "assessment_responses"
+            ]
+          ],
+          "export": "recordServerClientCapability"
+        }
+      ],
+      "label": "names the models the client cannot serve",
+      "expect": {
+        "contains_text": [
+          "assessments",
+          "assessment_responses"
+        ]
+      },
+      "export": "getServerClientCapabilityFault",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-capability-fault-names-the-models-the-client-cannot-serve"
+    },
+    {
+      "hoist": [
+        {
+          "args": [
+            {
+              "assessments": {
+                "findFirst": {
+                  "$fn": {
+                    "returns": null
+                  }
+                }
+              },
+              "assessment_responses": {
+                "findFirst": {
+                  "$fn": {
+                    "returns": null
+                  }
+                }
+              }
+            }
+          ],
+          "export": "setServerClient"
+        },
+        {
+          "args": [
+            [
+              "assessments",
+              "assessment_responses"
+            ]
+          ],
+          "export": "recordServerClientCapability"
+        }
+      ],
+      "label": "no fault when every declared model is servable",
+      "expect": null,
+      "export": "getServerClientCapabilityFault",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-capability-fault-no-fault-when-every-declared-model-is-servable"
+    },
+    {
+      "note": "The band asserts reference identity (toBe) across two calls; the row spells the shape that comes back, since the runner names no cross-call reference. The single module slot is the mechanism that makes them the same object.",
+      "hoist": [
+        {
+          "args": [
+            {
+              "assessments": {
+                "findFirst": {
+                  "$fn": {
+                    "returns": null
+                  }
+                }
+              }
+            }
+          ],
+          "export": "setServerClient"
+        }
+      ],
+      "label": "returns the registered client once boot sets one",
+      "expect": {
+        "member_is": {
+          "assessments.findFirst": "function"
+        }
+      },
+      "export": "getServerClient",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:get-server-client-returns-the-registered-client-once-boot-sets-one"
+    },
+    {
+      "note": "The old fallback returned a truthy client, so callers could not tell registration had never happened. Both band spellings (the no-registration message and the registerPageServerClient naming) are declared as the substrings the rejection must carry.",
+      "hoist": [
+        {
+          "args": [
+            null
+          ],
+          "export": "setServerClient"
+        }
+      ],
+      "label": "throws rather than substituting an empty router when unregistered, and names the boot step responsible",
+      "export": "getServerClient",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "expect_error": [
+        "no ORPC server client registered",
+        "registerPageServerClient"
+      ],
+      "slug": "service-boot:get-server-client-throws-rather-than-substituting-an-empty-router-when-unregistered"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "puck_data": {
+              "content": [
+                {
+                  "type": "Text",
+                  "props": {
+                    "id": "t1"
+                  }
+                }
+              ]
+            }
+          }
+        }
+      ],
+      "label": "a page with no gate block reads as new-flow (no pre-placed gate)",
+      "expect": false,
+      "export": "hasPrePlacedGate",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:has-pre-placed-gate-a-page-with-no-gate-block-reads-as-new-flow"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "puck_data": {
+              "content": [
+                {
+                  "type": "SignIn",
+                  "props": {
+                    "mode": "gate",
+                    "gateContextField": "agreementId",
+                    "gateContextValue": "uuid-77"
+                  }
+                }
+              ]
+            }
+          }
+        }
+      ],
+      "label": "a pre-placed SignIn gate block reads as an agreement gate",
+      "expect": true,
+      "export": "hasPrePlacedGate",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:has-pre-placed-gate-a-pre-placed-sign-in-gate-block-reads-as-an-agreement-gate"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "puck_data": {
+              "content": [
+                {
+                  "type": "SignIn",
+                  "props": {
+                    "mode": "gate",
+                    "gateContextField": "proposalId",
+                    "gateContextValue": "p1"
+                  }
+                }
+              ]
+            }
+          }
+        }
+      ],
+      "label": "a PROPOSAL gate (proposalId context) is not an agreement gate",
+      "expect": false,
+      "export": "hasPrePlacedGate",
+      "module": "src/agreement-gate/signing-shell.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:has-pre-placed-gate-a-proposal-gate-is-not-an-agreement-gate"
+    },
+    {
+      "args": [
+        {
+          "$error": {
+            "args": [
+              "Unexpected token"
+            ],
+            "class": "SyntaxError"
+          }
+        },
+        "@teamscala/cli-session/mount.ts"
+      ],
+      "label": "does NOT swallow a syntax or runtime error",
+      "expect": false,
+      "export": "isModuleNotFound",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-module-not-found-does-not-swallow-a-syntax-or-runtime-error"
+    },
+    {
+      "args": [
+        {
+          "message": "Cannot find package '@teamscala/some-other-dep'"
+        },
+        "@teamscala/cli-session/mount.ts"
+      ],
+      "note": "A file inside the candidate failing to resolve something else must surface as a real error, or the true cause hides behind not-found.",
+      "label": "does NOT swallow a transitive miss of a DIFFERENT module",
+      "expect": false,
+      "export": "isModuleNotFound",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-module-not-found-does-not-swallow-a-transitive-miss-of-a-different-module"
+    },
+    {
+      "args": [
+        "Cannot find package '@teamscala/cli-session'",
+        "@teamscala/cli-session/mount.ts"
+      ],
+      "label": "reads non-Error throwables defensively (Bun ResolveMessage is not an Error)",
+      "expect": true,
+      "export": "isModuleNotFound",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-module-not-found-reads-non-error-throwables-defensively"
+    },
+    {
+      "args": [
+        {
+          "message": "Cannot find module '@teamscala/x/mount.ts'"
+        },
+        "@teamscala/x/mount.ts"
+      ],
+      "label": "still matches when the error names the full specifier",
+      "expect": true,
+      "export": "isModuleNotFound",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-module-not-found-still-matches-when-the-error-names-the-full-specifier"
+    },
+    {
+      "args": [
+        {
+          "message": "Cannot find package '@teamscala/cli-session' imported from /srv/node_modules/@teamscala/service-boot/src/mount-server-packages.ts"
+        },
+        "@teamscala/cli-session/mount.ts"
+      ],
+      "note": "The exact shape Bun emits for an unexported subpath: it names the PACKAGE, never the subpath that was asked for.",
+      "label": "treats an unexported subpath as not-found so the chain falls through",
+      "expect": true,
+      "export": "isModuleNotFound",
+      "module": "src/module-not-found.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-module-not-found-treats-an-unexported-subpath-as-not-found"
+    },
+    {
+      "hoist": [
+        {
+          "args": [
+            null
+          ],
+          "export": "setServerClient"
+        }
+      ],
+      "label": "isServerClientRegistered tracks registration state (unregistered)",
+      "expect": false,
+      "export": "isServerClientRegistered",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-server-client-registered-is-false-before-boot-registers"
+    },
+    {
+      "hoist": [
+        {
+          "args": [
+            {
+              "x": 1
+            }
+          ],
+          "export": "setServerClient"
+        }
+      ],
+      "label": "isServerClientRegistered tracks registration state (registered)",
+      "expect": true,
+      "export": "isServerClientRegistered",
+      "module": "src/page-server-orpc/server-client.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-server-client-registered-is-true-after-a-client-is-set"
+    },
+    {
+      "args": [
+        "/assets/chunk-4efmn1eh.js"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-chunk-js"
+    },
+    {
+      "args": [
+        "/logos/dark.svg"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-dark-svg"
+    },
+    {
+      "args": [
+        "/favicon.ico"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-favicon-ico"
+    },
+    {
+      "args": [
+        "/img/hero.webp"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-hero-webp"
+    },
+    {
+      "args": [
+        "/fonts/inter.woff2"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-inter-woff2"
+    },
+    {
+      "args": [
+        "/styles/main.css"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-main-css"
+    },
+    {
+      "args": [
+        "/brand/mark.avif"
+      ],
+      "label": "every asset kind a browser fetches without a session is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-asset-kinds-a-browser-fetches-mark-avif"
+    },
+    {
+      "args": [
+        "/logos/Company.PNG"
+      ],
+      "label": "case does not decide whether an image is reachable",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-case-does-not-decide-reachability-png"
+    },
+    {
+      "args": [
+        "/logos/Mark.SVG"
+      ],
+      "label": "case does not decide whether an image is reachable",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-case-does-not-decide-reachability-svg"
+    },
+    {
+      "args": [
+        "/dashboard"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-dashboard"
+    },
+    {
+      "args": [
+        "/logos"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-logos"
+    },
+    {
+      "args": [
+        "/png"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-png"
+    },
+    {
+      "args": [
+        "/reports/quarterly.pdf"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-quarterly-pdf"
+    },
+    {
+      "args": [
+        "/"
+      ],
+      "note": "The predicate widens what is PUBLIC, so its limit is the security-relevant half: pages and APIs must keep failing closed. A path is an asset because of its EXTENSION, never because it merely contains an asset-looking word.",
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-root"
+    },
+    {
+      "args": [
+        "/api/rpc/fn/workItems/list"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-rpc-workitems"
+    },
+    {
+      "args": [
+        "/settings/logos"
+      ],
+      "label": "pages and APIs are still gated",
+      "expect": false,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-pages-and-apis-are-still-gated-settings-logos"
+    },
+    {
+      "args": [
+        "/logos/companyLogo.png"
+      ],
+      "label": "the logo that broke the signed-out screen is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-the-logo-that-broke-the-signed-out-screen-companylogo-png"
+    },
+    {
+      "args": [
+        "/logos/cropped.png"
+      ],
+      "note": "Public paths were an ENUMERATED allowlist: /assets/ was on it, /logos/ never was, so /logos/cropped.png fell through to the session gate and answered 302 to /sign-in. A browser cannot act on a redirect it received for an <img>, so it painted nothing. Enumerating what is public makes every new asset private by default; a predicate makes that unrepresentable.",
+      "label": "the logo that broke the signed-out screen is public",
+      "expect": true,
+      "export": "isStaticAssetPath",
+      "module": "src/auth-gate/public-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:is-static-asset-path-the-logo-that-broke-the-signed-out-screen-cropped-png"
+    },
+    {
+      "args": [
+        {
+          "key": "row-fixture-key",
+          "authorization": "Bearer row-fixture-key"
+        },
+        ""
+      ],
+      "note": "THE ONE CALLER THAT GETS THROUGH. The internal service-to-service fetch the MCP gateway makes at boot: the configured key presented as a Bearer token, on a request carrying no forwarding header. The second arg position is a placeholder the one-parameter subject ignores, because the registry writer collapses an argument array shorter than two elements (measured 2026-09-30 while filing the @teamscala/orpc rows) so a one-argument row cannot be spelled. The key value is a fixture, not a credential: no secret row holds it and the production key arrives from the SCALA_DEV_KEY environment.",
+      "expect": true,
+      "export": "openApiContractAuthorised",
+      "module": "src/orpc-openapi-gate.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-authorises-the-internal-key-holder"
+    },
+    {
+      "args": [
+        "scala-quiz",
+        "",
+        ""
+      ],
+      "note": "THE FALLBACKS, PINNED SO A MISSING HEADER CANNOT PRODUCE A MALFORMED URL. A request that names no Host and carries no forwarding header still gets a well-formed server entry (localhost, http) rather than an undefined host interpolated into the document as the string null. The title comes from the slug regardless - the service always names itself. The empty-string arg positions stand for absent headers: a JSON argument cannot spell undefined, and the subject reads absence through the same falsy branch an empty string takes.",
+      "expect": {
+        "member_equals": {
+          "title": "scala-quiz oRPC procedures",
+          "servers.0.url": "http://localhost/api/rpc"
+        }
+      },
+      "export": "openApiContractOptions",
+      "module": "src/orpc-openapi-document.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-falls-back-when-the-request-names-no-host"
+    },
+    {
+      "args": [
+        "scala-portal",
+        "scala-portal.internal:5200",
+        "http"
+      ],
+      "note": "THE DOCUMENT NAMES ITS SERVICE AND THE PREFIX IT SERVES. The title is the slug the mount was handed and the server URL is the host this request arrived on, with the /api/rpc prefix appended because that is the prefix the POST handler serves under - a client that reads the document can therefore call what the document describes. Deriving both rather than configuring them is what makes ONE document correct for the internal address the MCP gateway fetches and for a public host at the same time; the values are asserted exactly, so a change in either is a visible diff rather than a silently wrong server URL.",
+      "expect": {
+        "member_equals": {
+          "title": "scala-portal oRPC procedures",
+          "servers.0.url": "http://scala-portal.internal:5200/api/rpc"
+        }
+      },
+      "export": "openApiContractOptions",
+      "module": "src/orpc-openapi-document.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-names-the-service-and-the-prefix-it-serves"
+    },
+    {
+      "args": [
+        {
+          "key": "row-fixture-key",
+          "forwardedFor": "203.0.113.7",
+          "authorization": "Bearer row-fixture-key",
+          "forwardedProto": "https"
+        },
+        ""
+      ],
+      "note": "THE STATIC KEY IS NEVER A PUBLIC SOLE-GATE. Guard auth-helpers-fail-closed holds that a shared key is internal-only and names the remedy for a legitimate internal bearer check: also reject on proxy-header presence. This row is that remedy. The caller holds the right key and is still refused, because x-forwarded-proto and x-forwarded-for prove the request crossed a proxy, and on this platform only public ingress puts them there - an internal fetch, which is what the MCP gateway makes at boot, carries neither. Without this refusal the key alone would open the procedure surface to the public internet.",
+      "expect": false,
+      "export": "openApiContractAuthorised",
+      "module": "src/orpc-openapi-gate.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-refuses-a-proxied-request"
+    },
+    {
+      "args": [
+        {
+          "key": "row-fixture-key"
+        },
+        ""
+      ],
+      "note": "NO CREDENTIAL, NO DOCUMENT. A caller presenting no Authorization header is refused even though the service HAS a key configured, so the gate is not merely comparing a header to a value. The trailing empty-string arg position is a placeholder the one-parameter subject ignores: the registry writer collapses an argument array shorter than two elements (measured 2026-09-30 while filing the @teamscala/orpc rows), so a one-argument row cannot be spelled.",
+      "expect": false,
+      "export": "openApiContractAuthorised",
+      "module": "src/orpc-openapi-gate.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-refuses-a-request-with-no-authorization"
+    },
+    {
+      "args": [
+        {
+          "key": "row-fixture-key",
+          "authorization": "Bearer not-the-configured-key"
+        },
+        ""
+      ],
+      "note": "THE NEAR-MISS. A Bearer token of the right shape carrying the wrong value is refused, which is the case a prefix check alone would wave through. Trailing arg position is a placeholder (see the no-authorization row for why).",
+      "expect": false,
+      "export": "openApiContractAuthorised",
+      "module": "src/orpc-openapi-gate.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-refuses-a-wrong-key"
+    },
+    {
+      "args": [
+        {
+          "authorization": "Bearer anything-at-all"
+        },
+        ""
+      ],
+      "note": "FAIL CLOSED WHEN THE SERVICE CANNOT GATE. No SCALA_DEV_KEY configured means there is no key to match, and a missing signal must DENY rather than admit every caller: a service that cannot authenticate must not serve the internal procedure surface. The key member is absent from the argument, which is exactly how an unconfigured environment reaches this subject. Trailing arg position is a placeholder.",
+      "expect": false,
+      "export": "openApiContractAuthorised",
+      "module": "src/orpc-openapi-gate.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:openapi-contract-refuses-when-no-key-is-configured"
+    },
+    {
+      "args": [
+        null
+      ],
+      "note": "The band calls pageBodyIsEmpty(null) and pageBodyIsEmpty(undefined); the runner spells an absent argument as null, which decodes to undefined, and the function treats both alike (!page).",
+      "label": "pageBodyIsEmpty: absent page → false (not the empty-page case)",
+      "expect": false,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-absent-page-is-false"
+    },
+    {
+      "args": [
+        {
+          "id": "p1",
+          "puck_data": "{\"content\":[]}"
+        }
+      ],
+      "label": "pageBodyIsEmpty: row with string puck_data (raw) — empty",
+      "expect": true,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-raw-string-puck-data-empty-content-is-empty"
+    },
+    {
+      "args": [
+        {
+          "id": "p1",
+          "puck_data": "{\"content\":[{\"type\":\"Text\"}]}"
+        }
+      ],
+      "label": "pageBodyIsEmpty: row with string puck_data (raw) — non-empty",
+      "expect": false,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-raw-string-puck-data-with-blocks-is-not-empty"
+    },
+    {
+      "args": [
+        {
+          "id": "p1",
+          "puck_data": {
+            "content": [
+              {
+                "type": "Hero"
+              }
+            ]
+          }
+        }
+      ],
+      "label": "pageBodyIsEmpty: row with content blocks → not empty",
+      "expect": false,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-row-with-content-blocks-is-not-empty"
+    },
+    {
+      "args": [
+        {
+          "id": "p1",
+          "puck_data": {
+            "content": []
+          }
+        }
+      ],
+      "label": "pageBodyIsEmpty: row with empty content array → empty",
+      "expect": true,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-row-with-empty-content-array-is-empty"
+    },
+    {
+      "args": [
+        {
+          "id": "p1"
+        }
+      ],
+      "label": "pageBodyIsEmpty: row with no puck_data → empty",
+      "expect": true,
+      "export": "pageBodyIsEmpty",
+      "module": "src/content-page-floor.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:page-body-is-empty-row-with-no-puck-data-is-empty"
+    },
+    {
+      "args": [
+        [
+          {
+            "slot": "a",
+            "pageId": "a-page",
+            "puckData": {
+              "root": {
+                "props": {
+                  "title": ""
+                }
+              },
+              "content": []
+            }
+          },
+          {
+            "slot": "b",
+            "pageId": "b-page",
+            "puckData": {
+              "root": {
+                "props": {
+                  "title": "winner"
+                }
+              },
+              "content": []
+            }
+          },
+          {
+            "slot": "c",
+            "pageId": "c-page",
+            "puckData": {
+              "root": {
+                "props": {
+                  "title": "loser"
+                }
+              },
+              "content": []
+            }
+          }
+        ],
+        "title"
+      ],
+      "label": "returns the FIRST region carrying a non-empty value",
+      "expect": "winner",
+      "export": "pickRootProp",
+      "module": "src/register-registry-page-route/page-data-shared.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:pick-root-prop-returns-the-first-region-carrying-a-non-empty-value"
+    },
+    {
+      "args": [
+        [
+          {
+            "slot": "a",
+            "pageId": "a-page",
+            "puckData": {}
+          },
+          {
+            "slot": "b",
+            "pageId": "b-page",
+            "puckData": {
+              "content": []
+            }
+          },
+          {
+            "slot": "c",
+            "pageId": "c-page",
+            "puckData": {
+              "root": {
+                "props": {
+                  "other": 1
+                }
+              },
+              "content": []
+            }
+          }
+        ],
+        "title"
+      ],
+      "label": "skips regions without root props and returns undefined when nothing carries the key",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "pickRootProp",
+      "module": "src/register-registry-page-route/page-data-shared.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:pick-root-prop-skips-regions-without-root-props-and-resolves-undefined"
+    },
+    {
+      "args": [
+        "Inter, sans-serif"
+      ],
+      "label": "primaryFontFamily takes the first family of a stack",
+      "expect": "Inter",
+      "export": "primaryFontFamily",
+      "module": "src/theme-fonts-link.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:primary-font-family-takes-the-first-family-of-a-stack-inter"
+    },
+    {
+      "args": [
+        "'Playfair Display'"
+      ],
+      "label": "primaryFontFamily takes the first family of a stack (quotes stripped)",
+      "expect": "Playfair Display",
+      "export": "primaryFontFamily",
+      "module": "src/theme-fonts-link.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:primary-font-family-takes-the-first-family-of-a-stack-quoted-playfair"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {
+                  "screenMode": "contained"
+                }
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": null
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        },
+        {},
+        null,
+        null
+      ],
+      "label": "a page declaring a non-full-screen mode emits fullScreen false",
+      "expect": {
+        "member_equals": {
+          "theme": "light",
+          "fullScreen": false,
+          "meta.title": "launcha Website: The Launcha Authority Index"
+        }
+      },
+      "export": "publicShellPageData",
+      "module": "src/register-registry-page-route/public-shell-page-data.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:public-shell-page-data-a-page-declaring-a-non-full-screen-mode-emits-fullscreen-false"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {
+                  "screenMode": "full-screen"
+                }
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": null
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        },
+        {},
+        null,
+        null
+      ],
+      "note": "The renderer branches on this exact flag. Absent, build-page-tree wraps the body in a centred card and the header goes inside it.",
+      "label": "a page declaring full-screen emits fullScreen true",
+      "expect": {
+        "member_equals": {
+          "theme": "light",
+          "fullScreen": true,
+          "meta.title": "launcha Website: The Launcha Authority Index",
+          "brand.primaryColor": "#FF4500",
+          "brand.companyFriendlyName": null
+        }
+      },
+      "export": "publicShellPageData",
+      "module": "src/register-registry-page-route/public-shell-page-data.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:public-shell-page-data-a-page-declaring-full-screen-emits-fullscreen-true"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": null
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        },
+        {},
+        null,
+        null
+      ],
+      "note": "Deliberately absent rather than false: an explicit false would override the public/gpts default and regress every page that never set the prop. The whole-value compare carries the absence: fullScreen:false would fail it, and toEqual treats an undefined member and an absent member alike.",
+      "label": "a page declaring nothing omits the flag so the render-mode default still applies",
+      "expect": {
+        "meta": {
+          "title": "launcha Website: The Launcha Authority Index"
+        },
+        "brand": {
+          "logo": {
+            "dark": null,
+            "brand": null,
+            "light": null
+          },
+          "favicon": null,
+          "bodyFont": null,
+          "mutedColor": null,
+          "accentColor": null,
+          "companyName": "GMG APAC",
+          "darkSurface": null,
+          "headingFont": null,
+          "contactEmail": null,
+          "lightSurface": null,
+          "primaryColor": "#FF4500",
+          "secondaryColor": null,
+          "backgroundColor": null,
+          "companyFriendlyName": null
+        },
+        "orgId": null,
+        "theme": "light",
+        "regions": [
+          {
+            "slot": "body",
+            "pageId": "page-1",
+            "puckData": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            },
+            "metaTitle": null,
+            "metaDescription": null
+          }
+        ],
+        "website": {
+          "name": "launcha Website",
+          "slug": "launcha-website",
+          "header_settings": null,
+          "organisation_id": null
+        },
+        "puckData": {
+          "root": {
+            "props": {}
+          },
+          "content": []
+        },
+        "loaderData": {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": null
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        }
+      },
+      "export": "publicShellPageData",
+      "module": "src/register-registry-page-route/public-shell-page-data.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:public-shell-page-data-a-page-declaring-nothing-omits-the-fullscreen-flag"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": "launcha"
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        },
+        {},
+        null,
+        true
+      ],
+      "note": "orgPrefix on: the prefix is the owning org's trading name; the legal entity name must not appear in the tab title.",
+      "label": "the friendly name wins over the legal entity name",
+      "expect": {
+        "member_equals": {
+          "meta.title": "launcha: The Launcha Authority Index"
+        }
+      },
+      "export": "publicShellPageData",
+      "module": "src/register-registry-page-route/public-shell-page-data.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:public-shell-page-data-the-friendly-name-wins-over-the-legal-entity-name"
+    },
+    {
+      "args": [
+        {
+          "page": {
+            "id": "page-1",
+            "name": "The Launcha Authority Index",
+            "puck_data": {
+              "root": {
+                "props": {}
+              },
+              "content": []
+            }
+          },
+          "brand": {
+            "companyName": "GMG APAC",
+            "primaryColor": "#FF4500",
+            "companyFriendlyName": null
+          },
+          "website": {
+            "name": "launcha Website",
+            "slug": "launcha-website"
+          }
+        },
+        {},
+        null,
+        true
+      ],
+      "label": "the legal name is still used when no friendly name is set",
+      "expect": {
+        "member_equals": {
+          "meta.title": "GMG APAC: The Launcha Authority Index"
+        }
+      },
+      "export": "publicShellPageData",
+      "module": "src/register-registry-page-route/public-shell-page-data.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:public-shell-page-data-the-legal-name-is-still-used-when-no-friendly-name-is-set"
+    },
+    {
+      "args": [
+        {}
+      ],
+      "note": "brandTheme is absent from the expect because the row leaves it undefined, and a toEqual compare treats absent and undefined alike.",
+      "label": "a missing brand row degrades to nulls instead of throwing",
+      "expect": {
+        "logo": {
+          "dark": null,
+          "brand": null,
+          "light": null
+        },
+        "brand": {},
+        "bodyFont": null,
+        "headingFont": null,
+        "primaryColor": ""
+      },
+      "export": "readBrandTokens",
+      "module": "src/register-registry-page-route/page-data-shared.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:read-brand-tokens-a-missing-brand-row-degrades-to-nulls-instead-of-throwing"
+    },
+    {
+      "args": [
+        {
+          "brand": {
+            "theme": 7
+          }
+        }
+      ],
+      "note": "brandTheme stays undefined (absent from the expect under toEqual).",
+      "label": "a non-string theme is ignored rather than passed through",
+      "expect": {
+        "logo": {
+          "dark": null,
+          "brand": null,
+          "light": null
+        },
+        "brand": {
+          "theme": 7
+        },
+        "bodyFont": null,
+        "headingFont": null,
+        "primaryColor": ""
+      },
+      "export": "readBrandTokens",
+      "module": "src/register-registry-page-route/page-data-shared.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:read-brand-tokens-a-non-string-theme-is-ignored-rather-than-passed-through"
+    },
+    {
+      "args": [
+        {
+          "brand": {
+            "logo": {
+              "dark": "/d.svg",
+              "brand": "/b.svg",
+              "light": "/l.svg"
+            },
+            "theme": "dark",
+            "bodyFont": "Sans B",
+            "headingFont": "Serif A",
+            "primaryColor": "#0055ff"
+          }
+        }
+      ],
+      "label": "maps a full brand row to every token the render branches read",
+      "expect": {
+        "logo": {
+          "dark": "/d.svg",
+          "brand": "/b.svg",
+          "light": "/l.svg"
+        },
+        "brand": {
+          "logo": {
+            "dark": "/d.svg",
+            "brand": "/b.svg",
+            "light": "/l.svg"
+          },
+          "theme": "dark",
+          "bodyFont": "Sans B",
+          "headingFont": "Serif A",
+          "primaryColor": "#0055ff"
+        },
+        "bodyFont": "Sans B",
+        "brandTheme": "dark",
+        "headingFont": "Serif A",
+        "primaryColor": "#0055ff"
+      },
+      "export": "readBrandTokens",
+      "module": "src/register-registry-page-route/page-data-shared.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:read-brand-tokens-maps-a-full-brand-row-to-every-token-the-render-branches-read"
+    },
+    {
+      "args": [
+        "/assets/hydrate-9df3aab732.js"
+      ],
+      "label": "extracts the bare content hash from a manifest hydratePath",
+      "expect": "9df3aab732",
+      "export": "releaseFromHydratePath",
+      "module": "src/build-client-assets/sourcemaps-upload.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:release-from-hydrate-path-extracts-the-bare-content-hash-from-a-manifest-hydrate-path"
+    },
+    {
+      "args": [
+        "/assets/hydrate.js"
+      ],
+      "label": "non-hydrate paths yield null (no proximity guess)",
+      "expect": null,
+      "export": "releaseFromHydratePath",
+      "module": "src/build-client-assets/sourcemaps-upload.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:release-from-hydrate-path-non-hydrate-path-yields-null-hydrate-js"
+    },
+    {
+      "args": [
+        "/assets/styles-abc.css"
+      ],
+      "label": "non-hydrate paths yield null (no proximity guess)",
+      "expect": null,
+      "export": "releaseFromHydratePath",
+      "module": "src/build-client-assets/sourcemaps-upload.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:release-from-hydrate-path-non-hydrate-path-yields-null-styles-css"
+    },
+    {
+      "args": [
+        "/assets/hydrate-9df3aab73 2.js"
+      ],
+      "note": "A hash with uppercase chars, spaces, or non-hash content does not match.",
+      "label": "rejects paths that look like hashes but are not served hydrate bundles",
+      "expect": null,
+      "export": "releaseFromHydratePath",
+      "module": "src/build-client-assets/sourcemaps-upload.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:release-from-hydrate-path-rejects-space-broken-hash-lookalike"
+    },
+    {
+      "args": [
+        "/assets/hydrate-9DF3AAB732.js"
+      ],
+      "note": "A hash with uppercase chars, spaces, or non-hash content does not match.",
+      "label": "rejects paths that look like hashes but are not served hydrate bundles",
+      "expect": null,
+      "export": "releaseFromHydratePath",
+      "module": "src/build-client-assets/sourcemaps-upload.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:release-from-hydrate-path-rejects-uppercase-hash-lookalike"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "title": "Report",
+            "row3Value": {
+              "$date": "2026-08-25T15:46:58.698Z"
+            }
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "coerces Prisma Date values to ISO strings",
+      "expect": {
+        "title": "Report",
+        "row1Label": null,
+        "row1Value": null,
+        "row2Label": null,
+        "row2Value": null,
+        "row3Label": null,
+        "row3Value": "2026-08-25T15:46:58.698Z"
+      },
+      "export": "resolveAppHeader",
+      "module": "src/resolvers/app-header.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-app-header-coerces-prisma-date-values-to-iso-strings"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "row3Value": "today"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "note": "The noon-UTC suffix is the invariant half. The band's other half (the ISO date equals today's AEST calendar date) needs the live clock and stays hand-written: a row pins no date.",
+      "label": "expands the today directive to a noon-UTC instant of the AEST date",
+      "expect": {
+        "contains_in": {
+          "path": "row3Value",
+          "needles": [
+            "T12:00:00.000Z"
+          ]
+        }
+      },
+      "export": "resolveAppHeader",
+      "module": "src/resolvers/app-header.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-app-header-expands-the-today-directive-to-a-noon-utc-instant"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "title": "Only a title"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "maps absent fields to null (the resource-not-blank contract: null, never a stale value)",
+      "expect": {
+        "title": "Only a title",
+        "row1Label": null,
+        "row1Value": null,
+        "row2Label": null,
+        "row2Value": null,
+        "row3Label": null,
+        "row3Value": null
+      },
+      "export": "resolveAppHeader",
+      "module": "src/resolvers/app-header.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-app-header-maps-absent-fields-to-null"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "title": "Anna's Proposal",
+            "row1Label": "Prepared for",
+            "row1Value": "Joe Bellissimo",
+            "row2Label": "Organisation",
+            "row2Value": "GMG APAC",
+            "row3Label": "Date",
+            "row3Value": "2026-09-03T00:00:00.000Z"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "passes interpolated values through as strings",
+      "expect": {
+        "title": "Anna's Proposal",
+        "row1Label": "Prepared for",
+        "row1Value": "Joe Bellissimo",
+        "row2Label": "Organisation",
+        "row2Value": "GMG APAC",
+        "row3Label": "Date",
+        "row3Value": "2026-09-03T00:00:00.000Z"
+      },
+      "export": "resolveAppHeader",
+      "module": "src/resolvers/app-header.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-app-header-passes-interpolated-values-through-as-strings"
+    },
+    {
+      "args": [
+        {
+          "quiz": {
+            "title": "The Launcha Authority Index"
+          }
+        }
+      ],
+      "label": "a quiz with no report name falls through to its title",
+      "expect": "The Launcha Authority Index",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-a-quiz-with-no-report-name-falls-through-to-its-title"
+    },
+    {
+      "args": [
+        {
+          "quiz": {
+            "title": "The Launcha Authority Index",
+            "report_title": "Personalised Authority Blueprint"
+          }
+        }
+      ],
+      "note": "title names the QUIZ, report_title names the DOCUMENT the client receives. The tab must carry the document.",
+      "label": "a report is named by its own document name, not the diagnostic",
+      "expect": "Personalised Authority Blueprint",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-a-report-is-named-by-its-own-document-name-not-the-diagnostic"
+    },
+    {
+      "args": [
+        {
+          "form": {
+            "name": "   "
+          },
+          "agent": {
+            "name": "Agent"
+          }
+        }
+      ],
+      "label": "blank and whitespace-only names do not win",
+      "expect": "Agent",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-blank-and-whitespace-only-names-do-not-win"
+    },
+    {
+      "args": [
+        {
+          "form": {
+            "name": "Form"
+          },
+          "quiz": {
+            "report_title": "Report"
+          },
+          "agent": {
+            "name": "Agent"
+          },
+          "proposal": {
+            "name": "Proposal"
+          }
+        }
+      ],
+      "note": "The three former copies disagreed: two put form first, one put proposal first, so the subject depended on which render branch ran. One order now.",
+      "label": "precedence is single and fixed across every caller (form first)",
+      "expect": "Form",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-precedence-form-first"
+    },
+    {
+      "args": [
+        {
+          "form": null,
+          "quiz": {
+            "report_title": "Report"
+          },
+          "agent": {
+            "name": "Agent"
+          },
+          "proposal": {
+            "name": "Proposal"
+          }
+        }
+      ],
+      "label": "precedence is single and fixed across every caller (form absent → proposal)",
+      "expect": "Proposal",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-precedence-proposal-second"
+    },
+    {
+      "args": [
+        {
+          "form": null,
+          "quiz": {
+            "report_title": "Report"
+          },
+          "agent": {
+            "name": "Agent"
+          },
+          "proposal": null
+        }
+      ],
+      "label": "precedence is single and fixed across every caller (form and proposal absent → report)",
+      "expect": "Report",
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-precedence-report-third"
+    },
+    {
+      "args": [
+        {}
+      ],
+      "label": "undefined when nothing names the page",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-undefined-when-nothing-names-the-page-empty"
+    },
+    {
+      "args": [
+        {
+          "quiz": {}
+        }
+      ],
+      "label": "undefined when nothing names the page (quiz present but empty)",
+      "expect": {
+        "is_undefined": true
+      },
+      "export": "resolveEntityTitle",
+      "module": "src/register-registry-page-route/meta-title.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-entity-title-undefined-when-nothing-names-the-page-empty-quiz"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "path": "/hub/portal-integrations"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "bare path (no UUID prefix) → portal_id/org_id null, path untouched",
+      "expect": {
+        "org_id": null,
+        "portal_id": null,
+        "center_path": "/hub/portal-integrations",
+        "toolbar_path": "/portal-integrations-toolbar"
+      },
+      "export": "resolvePortalRoutePaths",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-portal-route-paths-bare-path-no-uuid-prefix-ids-null-path-untouched"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "path": "/a9a28515-4ad5-405c-a74d-bb83fed079d0/5b742740-0f37-494c-a059-d8399ae4b350/hub/portal-integrations"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "canonical two-UUID shape → strips portal+org, center_path is the builda path",
+      "expect": {
+        "org_id": "5b742740-0f37-494c-a059-d8399ae4b350",
+        "portal_id": "a9a28515-4ad5-405c-a74d-bb83fed079d0",
+        "center_path": "/hub/portal-integrations",
+        "toolbar_path": "/portal-integrations-toolbar"
+      },
+      "export": "resolvePortalRoutePaths",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-portal-route-paths-canonical-two-uuid-shape-strips-portal-and-org"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "path": "/a9a28515-4ad5-405c-a74d-bb83fed079d0/dashboard"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "note": "The violating behaviour this locks out left portal_id null and center_path as the literal /<websiteId>/dashboard (so it silently rendered unscoped). The org-less shape is gated upstream in resolve-page-state (portalHomeRedirect) so it never silently renders.",
+      "label": "org-less portal shape /<websiteId>/<path> → portal_id populated, org_id null, center_path is the real path",
+      "expect": {
+        "org_id": null,
+        "portal_id": "a9a28515-4ad5-405c-a74d-bb83fed079d0",
+        "center_path": "/dashboard",
+        "toolbar_path": "/dashboard-toolbar"
+      },
+      "export": "resolvePortalRoutePaths",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-portal-route-paths-org-less-portal-shape-portal-id-populated-org-id-null"
+    },
+    {
+      "args": [
+        {
+          "input": {
+            "path": "/a9a28515-4ad5-405c-a74d-bb83fed079d0/5b742740-0f37-494c-a059-d8399ae4b350/",
+            "home_path": "/dashboard"
+          },
+          "client": null,
+          "params": {}
+        }
+      ],
+      "label": "/ falls back to the home path",
+      "expect": {
+        "org_id": "5b742740-0f37-494c-a059-d8399ae4b350",
+        "portal_id": "a9a28515-4ad5-405c-a74d-bb83fed079d0",
+        "center_path": "/dashboard",
+        "toolbar_path": "/dashboard-toolbar"
+      },
+      "export": "resolvePortalRoutePaths",
+      "module": "src/resolvers/portal-route-paths.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-portal-route-paths-root-falls-back-to-the-home-path"
+    },
+    {
+      "args": [
+        3021,
+        5203
+      ],
+      "note": "scala-quiz declares 5203; PORT=3021 leaked in from the tmux server env and it bound session-picker's port, splitting that daemon's traffic via SO_REUSEPORT. Covers the band's second test too: the conflict is reported, not swallowed.",
+      "label": "the live bug: a leaked PORT cannot move a UI service off its declared port",
+      "expect": {
+        "port": 5203,
+        "source": "service_routing",
+        "conflict": {
+          "envPort": 3021,
+          "declaredPort": 5203
+        }
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-a-leaked-port-cannot-move-a-ui-service-off-its-declared-port"
+    },
+    {
+      "args": [
+        3021,
+        8080
+      ],
+      "note": "The exact incident: env said 3021 (session-picker's port), the row said 8080. Obeying the env bound another service's port.",
+      "label": "a PORT contradicting the routing row is REFUSED and reported",
+      "expect": {
+        "port": 8080,
+        "source": "service_routing",
+        "conflict": {
+          "envPort": 3021,
+          "declaredPort": 8080
+        }
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-a-port-contradicting-the-routing-row-is-refused-and-reported"
+    },
+    {
+      "args": [
+        0,
+        3021
+      ],
+      "label": "an unparseable or out-of-range PORT never displaces a valid row (resolvedPort narrowing: 0)",
+      "expect": 3021,
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-a-zero-port-never-displaces-a-valid-row"
+    },
+    {
+      "args": [
+        5203,
+        5203
+      ],
+      "label": "an agreeing PORT reports no conflict (kind:ui services)",
+      "expect": {
+        "port": 5203,
+        "source": "service_routing"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-an-agreeing-port-reports-no-conflict-for-kind-ui"
+    },
+    {
+      "args": [
+        70000,
+        3021
+      ],
+      "label": "an unparseable or out-of-range PORT never displaces a valid row (resolvedPort narrowing: 70000)",
+      "expect": 3021,
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-an-out-of-range-port-70000-never-displaces-a-valid-row"
+    },
+    {
+      "args": [
+        70000,
+        null
+      ],
+      "label": "an out-of-range PORT with no row is an error rather than a bad bind",
+      "expect": {
+        "error": "no-port-source"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-an-out-of-range-port-with-no-row-is-an-error-rather-than-a-bad-bind"
+    },
+    {
+      "args": [
+        null,
+        null
+      ],
+      "label": "no routing row and no usable PORT is an error, not a guess",
+      "expect": {
+        "error": "no-port-source"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-no-routing-row-and-no-usable-port-is-an-error-not-a-guess"
+    },
+    {
+      "args": [
+        8080,
+        null
+      ],
+      "note": "A Railway-only backend legitimately has no dev routing row, and Railway healthchecks the exact port it injected.",
+      "label": "no routing row: Railway's injected PORT wins",
+      "expect": {
+        "port": 8080,
+        "source": "env"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-no-routing-row-railways-injected-port-wins"
+    },
+    {
+      "args": [
+        8080,
+        5200
+      ],
+      "label": "isRailway defaults to false: off Railway the registry still wins a conflict",
+      "expect": {
+        "port": 5200,
+        "source": "service_routing",
+        "conflict": {
+          "envPort": 8080,
+          "declaredPort": 5200
+        }
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-off-railway-the-registry-still-wins-a-conflict"
+    },
+    {
+      "args": [
+        8080,
+        5200,
+        true
+      ],
+      "note": "The 2026-07-31 portal incident: portal declares dev port 5200 in service_install, Railway injects PORT=8080 and healthchecks 8080. The registry-wins rule made portal bind 5200 on Railway, so the healthcheck probed a dead port and the deploy failed — despite the service booting healthy. On Railway PORT must win.",
+      "label": "Railway: a conflicting declared port does NOT override Railway's injected PORT",
+      "expect": {
+        "port": 8080,
+        "source": "env"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-railway-a-conflicting-declared-port-does-not-override-the-injected-port"
+    },
+    {
+      "args": [
+        8080,
+        8080,
+        true
+      ],
+      "label": "Railway: an agreeing declared port still resolves to env on Railway",
+      "expect": {
+        "port": 8080,
+        "source": "env"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-railway-an-agreeing-declared-port-still-resolves-to-env"
+    },
+    {
+      "args": [
+        null,
+        5200,
+        true
+      ],
+      "label": "Railway with no injected PORT falls back to the declared port",
+      "expect": {
+        "port": 5200,
+        "source": "service_routing"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-railway-no-injected-port-falls-back-to-the-declared-port"
+    },
+    {
+      "args": [
+        3021,
+        3021
+      ],
+      "note": "The conflict member is absent, which a whole-value compare asserts by inequality.",
+      "label": "routing row and an agreeing PORT: no conflict reported",
+      "expect": {
+        "port": 3021,
+        "source": "service_routing"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-routing-row-and-an-agreeing-port-reports-no-conflict"
+    },
+    {
+      "args": [
+        null,
+        3021
+      ],
+      "label": "routing row with no PORT env: the row wins",
+      "expect": {
+        "port": 3021,
+        "source": "service_routing"
+      },
+      "export": "resolveServicePort",
+      "module": "src/resolve-service-port.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:resolve-service-port-routing-row-with-no-port-env-the-row-wins"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/:orgId",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/:orgId/kanban",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/sign-in",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/*",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/",
+              "service": "scala-quiz"
+            }
+          }
+        ],
+        "scala-projects-bun-dev"
+      ],
+      "note": "The regression this module exists for: before the capability join, a dev lane matched ZERO rows and served 404 on every path. The whole-value compare also carries the band's never-returns-another-services-rows test: only scala-projects rows can equal this set.",
+      "label": "a dev lane resolves the rows that name the capability",
+      "expect": [
+        {
+          "config": {
+            "pattern": "/sign-in",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId/kanban",
+            "service": "scala-projects"
+          }
+        }
+      ],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-a-dev-lane-resolves-the-rows-that-name-the-capability"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/",
+              "service": "scala-roadmap-bun-dev"
+            }
+          }
+        ],
+        "scala-roadmap"
+      ],
+      "label": "a row naming a deployable form still matches its lane",
+      "expect": [
+        {
+          "config": {
+            "pattern": "/",
+            "service": "scala-roadmap-bun-dev"
+          }
+        }
+      ],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-a-row-naming-a-deployable-form-still-matches-its-lane"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/:orgId",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/:orgId/kanban",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/sign-in",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/*",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/",
+              "service": "scala-quiz"
+            }
+          }
+        ],
+        "scala-nonexistent-bun-dev"
+      ],
+      "label": "an unknown service resolves nothing",
+      "expect": [],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-an-unknown-service-resolves-nothing"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/:orgId",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/:orgId/kanban",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/sign-in",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/*",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/",
+              "service": "scala-quiz"
+            }
+          }
+        ],
+        "scala-projects"
+      ],
+      "label": "both lanes of one application resolve the same set (prod bare spelling)",
+      "expect": [
+        {
+          "config": {
+            "pattern": "/sign-in",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId/kanban",
+            "service": "scala-projects"
+          }
+        }
+      ],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-both-lanes-resolve-the-same-set-prod-bare"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/:orgId",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/:orgId/kanban",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/sign-in",
+              "service": "scala-projects"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/*",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/",
+              "service": "scala-quiz"
+            }
+          }
+        ],
+        "scala-projects-bun-prod"
+      ],
+      "label": "both lanes of one application resolve the same set (prod tiered spelling)",
+      "expect": [
+        {
+          "config": {
+            "pattern": "/sign-in",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId",
+            "service": "scala-projects"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId/kanban",
+            "service": "scala-projects"
+          }
+        }
+      ],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-both-lanes-resolve-the-same-set-prod-tiered"
+    },
+    {
+      "args": [
+        [
+          {
+            "config": {
+              "pattern": "/*",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/:orgId",
+              "service": "scala-portal"
+            }
+          },
+          {
+            "config": {
+              "pattern": "/sign-in",
+              "service": "scala-portal"
+            }
+          }
+        ],
+        "scala-portal"
+      ],
+      "label": "orders literal before param before wildcard",
+      "expect": [
+        {
+          "config": {
+            "pattern": "/sign-in",
+            "service": "scala-portal"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/:orgId",
+            "service": "scala-portal"
+          }
+        },
+        {
+          "config": {
+            "pattern": "/*",
+            "service": "scala-portal"
+          }
+        }
+      ],
+      "export": "selectServiceRoutes",
+      "module": "src/select-service-routes.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:select-service-routes-orders-literal-before-param-before-wildcard"
+    },
+    {
+      "args": [
+        "@import \"./local.css\";\n.a{}"
+      ],
+      "label": "leaves local/relative @imports untouched (Tailwind inlines those)",
+      "expect": "@import \"./local.css\";\n.a{}",
+      "export": "stripRemoteImports",
+      "module": "src/build-client-assets/styles-build.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:strip-remote-imports-leaves-local-relative-imports-untouched"
+    },
+    {
+      "args": [
+        ":root{--x:1}\n.a{color:red}"
+      ],
+      "label": "no remote @import → unchanged",
+      "expect": ":root{--x:1}\n.a{color:red}",
+      "export": "stripRemoteImports",
+      "module": "src/build-client-assets/styles-build.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:strip-remote-imports-no-remote-import-unchanged"
+    },
+    {
+      "args": [
+        ".a { color: red; }\n@import \"https://rsms.me/inter/inter.css\";\n:root { --x: 1; }"
+      ],
+      "label": "removes a remote @import (Puck's rsms.me font)",
+      "expect": {
+        "absent": [
+          "@import",
+          "rsms.me"
+        ],
+        "contains_text": [
+          ".a { color: red; }",
+          "--x: 1;"
+        ]
+      },
+      "export": "stripRemoteImports",
+      "module": "src/build-client-assets/styles-build.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:strip-remote-imports-removes-a-remote-import-pucks-rsms-me-font"
+    },
+    {
+      "args": [
+        "@import \"https://a.test/x.css\";\n.a{}\n@import \"https://b.test/y.css\";\n.b{}"
+      ],
+      "label": "removes multiple remote @imports",
+      "expect": {
+        "absent": [
+          "@import"
+        ]
+      },
+      "export": "stripRemoteImports",
+      "module": "src/build-client-assets/styles-build.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:strip-remote-imports-removes-multiple-remote-imports"
+    },
+    {
+      "args": [
+        ".a{}\n@import url(\"https://fonts.example/f.css\") screen;\n.b{}"
+      ],
+      "label": "removes the url() form with a media suffix",
+      "expect": {
+        "absent": [
+          "@import"
+        ],
+        "contains_text": [
+          ".a{}",
+          ".b{}"
+        ]
+      },
+      "export": "stripRemoteImports",
+      "module": "src/build-client-assets/styles-build.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:strip-remote-imports-removes-the-url-form-with-a-media-suffix"
+    },
+    {
+      "args": [],
+      "label": "families derive from the css_theme row, deduplicated",
+      "expect": [
+        "Inter",
+        "Playfair Display"
+      ],
+      "export": "themeFontFamilies",
+      "module": "src/theme-fonts-link.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "export": "getEntryConfig",
+            "module": "@teamscala/db/registry/accessors",
+            "returns": {
+              "fonts": {
+                "body": "Inter, sans-serif",
+                "heading": "Inter, sans-serif",
+                "manuscript": "Playfair Display"
+              }
+            }
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:theme-font-families-derive-from-the-css-theme-row-deduplicated"
+    },
+    {
+      "args": [],
+      "label": "an absent row degrades to no fonts link — never throws",
+      "expect": "",
+      "export": "themeFontsLink",
+      "module": "src/theme-fonts-link.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "export": "getEntryConfig",
+            "module": "@teamscala/db/registry/accessors",
+            "returns": null
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:theme-fonts-link-an-absent-row-degrades-to-no-fonts-link"
+    },
+    {
+      "args": [],
+      "note": "Covers the band's served-head test at the string the template interpolates it into: the head-level contains-claims over readHtmlTemplate stay hand-written with the fs harness.",
+      "label": "the fonts link carries every family the row declares",
+      "expect": "<link rel=\"stylesheet\" href=\"https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=Playfair%20Display:wght@400;500;600;700&display=optional\" />",
+      "export": "themeFontsLink",
+      "module": "src/theme-fonts-link.ts",
+      "package": "@teamscala/service-boot",
+      "fixtures": {
+        "stubs": [
+          {
+            "export": "getEntryConfig",
+            "module": "@teamscala/db/registry/accessors",
+            "returns": {
+              "fonts": {
+                "body": "Inter, sans-serif",
+                "heading": "Inter, sans-serif",
+                "manuscript": "Playfair Display"
+              }
+            }
+          }
+        ]
+      },
+      "suite_type": "function_call",
+      "slug": "service-boot:theme-fonts-link-the-served-link-carries-every-family-the-row-declares"
+    },
+    {
+      "args": [
+        "scala-quiz-ts-dev"
+      ],
+      "note": "This is the property the page_route join depends on: the dev and prod spellings land on one capability slug.",
+      "label": "both lanes of one application normalize to the same identity",
+      "expect": "scala-quiz",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-both-lanes-normalize-to-one-identity-scala-quiz-ts-dev"
+    },
+    {
+      "args": [
+        "scala-quiz-ts-prod"
+      ],
+      "note": "This is the property the page_route join depends on: the dev and prod spellings land on one capability slug.",
+      "label": "both lanes of one application normalize to the same identity",
+      "expect": "scala-quiz",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-both-lanes-normalize-to-one-identity-scala-quiz-ts-prod"
+    },
+    {
+      "args": [
+        "scala-ai-bun-prod"
+      ],
+      "note": "The fleet was renamed under -bun before the operator ruling of 2026-09-08 fixed the language segment at ts; rows or supervised names still carrying it converge rather than fail the join.",
+      "label": "strips the retired bun spelling to the same capability",
+      "expect": "scala-ai",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-converges-the-retired-bun-spelling-scala-ai-bun-prod"
+    },
+    {
+      "args": [
+        "scala-projects-bun-dev"
+      ],
+      "note": "The fleet was renamed under -bun before the operator ruling of 2026-09-08 fixed the language segment at ts; rows or supervised names still carrying it converge rather than fail the join.",
+      "label": "strips the retired bun spelling to the same capability",
+      "expect": "scala-projects",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-converges-the-retired-bun-spelling-scala-projects-bun-dev"
+    },
+    {
+      "args": [
+        "bun-dev"
+      ],
+      "note": "Too short to carry both segments.",
+      "label": "leaves a name whose tail is not the closed grammar alone",
+      "expect": "bun-dev",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-leaves-a-name-too-short-to-carry-both-segments-bun-dev"
+    },
+    {
+      "args": [
+        "scala-node-dev"
+      ],
+      "note": "node is not a language segment.",
+      "label": "leaves a name whose tail is not the closed grammar alone",
+      "expect": "scala-node-dev",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-leaves-a-name-whose-tail-is-not-a-language-segment-scala-node-dev"
+    },
+    {
+      "args": [
+        "scala-bun-staging"
+      ],
+      "note": "staging is not a tier segment.",
+      "label": "leaves a name whose tail is not the closed grammar alone",
+      "expect": "scala-bun-staging",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-leaves-a-name-whose-tail-is-not-a-tier-segment-scala-bun-staging"
+    },
+    {
+      "args": [
+        "supavisor"
+      ],
+      "label": "leaves a name whose tail is not the closed grammar alone",
+      "expect": "supavisor",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-leaves-a-single-word-unchanged-supavisor"
+    },
+    {
+      "args": [
+        "scala-otp"
+      ],
+      "note": "The prod lane is still bare while the tier migration is in flight, so the SAME function must be correct before and after the rename lands.",
+      "label": "returns an already-capability slug unchanged",
+      "expect": "scala-otp",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-returns-an-already-capability-slug-unchanged-scala-otp"
+    },
+    {
+      "args": [
+        "scala-projects"
+      ],
+      "note": "The prod lane is still bare while the tier migration is in flight, so the SAME function must be correct before and after the rename lands.",
+      "label": "returns an already-capability slug unchanged",
+      "expect": "scala-projects",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-returns-an-already-capability-slug-unchanged-scala-projects"
+    },
+    {
+      "args": [
+        "scala-ai-ts-dev"
+      ],
+      "label": "strips the language+tier suffix from a dev deployable",
+      "expect": "scala-ai",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-strips-the-language-and-tier-suffix-from-a-dev-deployable-scala-ai-ts-dev"
+    },
+    {
+      "args": [
+        "scala-image-optimizer-rust-dev"
+      ],
+      "label": "strips the language+tier suffix from a dev deployable",
+      "expect": "scala-image-optimizer",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-strips-the-language-and-tier-suffix-from-a-dev-deployable-scala-image-optimizer-rust-dev"
+    },
+    {
+      "args": [
+        "scala-projects-ts-dev"
+      ],
+      "label": "strips the language+tier suffix from a dev deployable",
+      "expect": "scala-projects",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-strips-the-language-and-tier-suffix-from-a-dev-deployable-scala-projects-ts-dev"
+    },
+    {
+      "args": [
+        "scala-messaging-service-rust-prod"
+      ],
+      "label": "strips the language+tier suffix from a prod deployable",
+      "expect": "scala-messaging-service",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-strips-the-language-and-tier-suffix-from-a-prod-deployable-scala-messaging-service-rust-prod"
+    },
+    {
+      "args": [
+        "scala-projects-ts-prod"
+      ],
+      "label": "strips the language+tier suffix from a prod deployable",
+      "expect": "scala-projects",
+      "export": "toCapabilitySlug",
+      "module": "src/capability-slug.ts",
+      "package": "@teamscala/service-boot",
+      "suite_type": "function_call",
+      "slug": "service-boot:to-capability-slug-strips-the-language-and-tier-suffix-from-a-prod-deployable-scala-projects-ts-prod"
     }
   ]
 }