@teamscala/service-boot 0.23.539 → 0.23.540

package/package.json

@@ -19,6 +19,7 @@
 		"@teamscala/content-gate-token": "*",
 		"@teamscala/data-resolvers": "*",
 		"@teamscala/db": "*",
+		"@teamscala/db-org-branding": "*",
 		"@teamscala/document-signing": "*",
 		"@teamscala/email-client": "*",
 		"@teamscala/encryption": "*",
@@ -35,6 +36,7 @@
 		"@teamscala/orpc-openapi": "*",
 		"@teamscala/orpc-ws": "*",
 		"@teamscala/os": "*",
+		"@teamscala/process-spawn": "*",
 		"@teamscala/publish-registry": "*",
 		"@teamscala/puck-boundary": "*",
 		"@teamscala/puck-tree": "*",
@@ -303,5 +305,5 @@
 	"repository": "https://github.com/teamgbg/service-boot",
 	"sideEffects": false,
 	"type": "module",
-	"version": "0.23.539"
+	"version": "0.23.540"
 }

package/src/attach-portal-members.test.ts

@@ -6,6 +6,8 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_db_query_rows from "@teamscala/db/query-rows";
+import * as __scalaReal_teamscala_auth_get_session from "@teamscala/auth/get-session";
 
 import { describe, expect, mock, test } from "bun:test";
 import { Hono } from "hono";
@@ -19,10 +21,12 @@ let failMemberQuery = false;
 const queryCalls: QueryRowsCall[] = [];
 
 mock.module("@teamscala/auth/get-session", () => ({
+	...__scalaReal_teamscala_auth_get_session,
 	getSession: async () => session,
 }));
 
 mock.module("@teamscala/db/query-rows", () => ({
+	...__scalaReal_teamscala_db_query_rows,
 	queryRows: (strings: TemplateStringsArray, ...values: unknown[]) => {
 		const sql = strings.join("?");
 		queryCalls.push({ sql, values });

package/src/build-client-assets/sourcemaps-upload.test.ts

@@ -6,13 +6,14 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
-
 import { mkdtemp, mkdir, readdir, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { afterAll, afterEach, describe, expect, test } from "bun:test";
+import { afterAll, afterEach, beforeEach, describe, expect, test } from "bun:test";
 import {
 	releaseFromHydratePath,
+	sentryTarget,
+	sourceMapArtifactName,
 	sourceMapsCacheDir,
 	uploadCachedSourceMaps,
 	uploadSourceMaps,
@@ -33,21 +34,37 @@ async function seedMaps(outDir: string, names: string[]): Promise<void> {
 	}
 }
 
+// Full five-method surface: mock.module installs PROCESS-WIDE, so a partial
+// double breaks every suite that imports the logger later (measured 2026-09-30).
 const noopLog = {
+	debug: () => {},
 	info: () => {},
 	warn: () => {},
 	error: () => {},
+	child: () => noopLog,
 } as unknown as ReturnType<typeof import("@teamscala/logger/app-loggers").getAppLogger>;
 
+// The uploader's gate is the DSN the client already reports to, and temps
+// authenticates that endpoint with the DSN PUBLIC KEY — never an API token —
+// so the suite seeds SENTRY_DSN (and clears it) rather than the retired
+// SENTRY_AUTH_TOKEN / SENTRY_URL pair the GlitchTip-era uploader read.
+const UPLOAD_DSN = "https://0123456789abcdef0123456789abcdef@temps.test/12";
+
 afterAll(async () => {
 	for (const d of dirs) await rm(d, { recursive: true, force: true });
 });
 
+beforeEach(() => {
+	delete process.env.SENTRY_DSN;
+	delete process.env.SENTRY_ORG;
+});
+
 afterEach(() => {
 	delete process.env.SENTRY_DSN;
+	delete process.env.SENTRY_ORG;
 });
 
-describe("uploadSourceMaps — skip path (absent env)", () => {
+describe("uploadSourceMaps — skip path (absent SENTRY_DSN)", () => {
 	const currentOutputs = new Set(["hydrate-abc123.js", "chunk-xyz789.js"]);
 	test("maps STILL leave the served root and are retained in the cache", async () => {
 		const cwd = await makeDir();
@@ -80,20 +97,48 @@ describe("uploadSourceMaps — skip path (absent env)", () => {
 
 describe("uploadCachedSourceMaps — the fingerprint-skip retry path", () => {
 	test("no cached maps → failed, naming the release and the reason", async () => {
-		process.env.SENTRY_DSN = "https://cred@glitchtip.test/scala";
+		process.env.SENTRY_DSN = UPLOAD_DSN;
 		const cwd = await makeDir();
 		const result = await uploadCachedSourceMaps(cwd, "deadbeef", noopLog);
 		expect(result.status).toBe("failed");
 		expect(result.failures[0]).toContain("deadbeef");
 	});
 
-	test("absent env → skipped without any upload attempt", async () => {
+	test("absent SENTRY_DSN → skipped without any upload attempt", async () => {
 		const cwd = await makeDir();
 		const result = await uploadCachedSourceMaps(cwd, "abc123", noopLog);
 		expect(result.status).toBe("skipped");
 	});
 });
 
+describe("sourceMapArtifactName — the name temps stores and is looked up by", () => {
+	test("names the SERVED JS path, with .map NOT appended", () => {
+		// temps stores the multipart `name` field verbatim as source_maps.file_path
+		// and matches a frame's abs_path against it (normalized to ~/<path>); it
+		// never appends ".map", so a .map-suffixed name could not symbolicate.
+		expect(sourceMapArtifactName("hydrate-abc123.js.map")).toBe("~/assets/hydrate-abc123.js");
+		expect(sourceMapArtifactName("chunk-xyz789.js.map")).toBe("~/assets/chunk-xyz789.js");
+	});
+});
+
+describe("sentryTarget — one DSN, never a second host/token/project triple", () => {
+	test("derives origin, credential and project from the DSN", () => {
+		expect(sentryTarget(UPLOAD_DSN)).toEqual({
+			origin: "https://temps.test",
+			credential: "0123456789abcdef0123456789abcdef",
+			project: "12",
+		});
+	});
+
+	test("a malformed DSN yields null rather than a partial target", () => {
+		expect(sentryTarget("")).toBeNull();
+		expect(sentryTarget(undefined)).toBeNull();
+		expect(sentryTarget("https://temps.test/12")).toBeNull();
+		expect(sentryTarget("https://key@temps.test")).toBeNull();
+		expect(sentryTarget("https://key@temps.test/")).toBeNull();
+	});
+});
+
 describe("releaseFromHydratePath", () => {
 	test("extracts the bare content hash from a manifest hydratePath", () => {
 		expect(releaseFromHydratePath("/assets/hydrate-9df3aab732.js")).toBe("9df3aab732");
@@ -109,4 +154,4 @@ describe("releaseFromHydratePath", () => {
 		expect(releaseFromHydratePath("/assets/hydrate-9DF3AAB732.js")).toBeNull();
 		expect(releaseFromHydratePath("/assets/hydrate-9df3aab73 2.js")).toBeNull();
 	});
-});
+});

package/src/mount-orpc-router.test.ts

@@ -6,6 +6,10 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_event_log_record_event from "@teamscala/event-log/record-event";
+import * as __scalaReal_teamscala_tool_executor_configure from "@teamscala/tool-executor/configure";
+import * as __scalaReal_teamscala_orpc_configure from "@teamscala/orpc/configure";
+import * as __scalaReal_teamscala_orpc_app_router from "@teamscala/orpc/app-router";
 
 import { mkdir, mkdtemp, rm } from "node:fs/promises";
 import { afterEach, describe, expect, mock, test } from "bun:test";
@@ -72,14 +76,17 @@ describe("mountOrpcRouter generated-artifact seam", () => {
 		// injectors are absent.
 		let seenKeys: Array<string> = [];
 		mock.module("@teamscala/orpc/app-router", () => ({
+	...__scalaReal_teamscala_orpc_app_router,
 			getAppRouter: async () => ({
 				healthz: { health: async () => ({ ok: true }) },
 			}),
 		}));
 		mock.module("@teamscala/orpc/configure", () => ({
+	...__scalaReal_teamscala_orpc_configure,
 			getPrisma: () => ({}),
 		}));
 		mock.module("@teamscala/tool-executor/configure", () => ({
+	...__scalaReal_teamscala_tool_executor_configure,
 			configure: (opts: Record<string, unknown>) => {
 				seenKeys = Object.keys(opts);
 			},
@@ -137,6 +144,7 @@ describe("mountOrpcRouter procedure error hook", () => {
 			}),
 		}));
 		mock.module("@teamscala/event-log/record-event", () => ({
+	...__scalaReal_teamscala_event_log_record_event,
 			recordEvent: (input: { kind: string; payload: unknown }) => {
 				recordedEvents.push(input);
 			},

package/src/orpc-contract-rows.test.ts

@@ -1,6 +1,6 @@
 /**
  * @status generated — ts_function_contract_runner template (scala-test-suites
- * templates/ts_function_contract_runner.pkl @1.15.0) over @teamscala/service-boot's
+ * templates/ts_function_contract_runner.pkl @1.16.0) over @teamscala/service-boot's
  * test_vector rows: one `it` per function_call row (args -> value or
  * expect_error) and one per fs_flow row (ordered steps in a temp
  * workspace). This runner carries NO facts: every case is the registry

package/src/read-html-template.test.ts

@@ -6,12 +6,20 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import { afterAll as __scalaRestoreGlobals } from "bun:test";
+import { GlobalRegistrator } from "@happy-dom/global-registrator";
+const __scalaDomWasMissing = !globalThis.document;
+if (__scalaDomWasMissing) GlobalRegistrator.register();
+__scalaRestoreGlobals(async () => {
+    if (__scalaDomWasMissing) await GlobalRegistrator.unregister();
+});
+
 
 import { mkdir, mkdtemp, rm } from "node:fs/promises";
 import { afterEach, beforeEach, describe, expect, test } from "bun:test";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { readHtmlTemplate } from "./read-html-template.ts";
+const { readHtmlTemplate } = await import("./read-html-template.ts");
 
 let dir: string;
 let origCwd: string;

package/src/register-registry-page-route/apply-page-branding.test.ts

@@ -6,6 +6,16 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_db_org_branding_fetch_organisation_page_branding from "@teamscala/db-org-branding/fetch-organisation-page-branding";
+import * as __scalaReal_teamscala_db_registry_platform from "@teamscala/db/registry/platform";
+import { afterAll as __scalaRestoreGlobals } from "bun:test";
+import { GlobalRegistrator } from "@happy-dom/global-registrator";
+const __scalaDomWasMissing = !globalThis.document;
+if (__scalaDomWasMissing) GlobalRegistrator.register();
+__scalaRestoreGlobals(async () => {
+    if (__scalaDomWasMissing) await GlobalRegistrator.unregister();
+});
+
 
 import { describe, expect, mock, test } from "bun:test";
 
@@ -14,6 +24,7 @@ const TENANT_ORG = "5b742740-0f37-494c-a059-d8399ae4b350";
 const VIEWER_ORG = PLATFORM_ORG;
 
 mock.module("@teamscala/db/registry/platform", () => ({
+	...__scalaReal_teamscala_db_registry_platform,
 	getPlatformOrgId: () => PLATFORM_ORG,
 }));
 
@@ -28,7 +39,8 @@ const fetchBranding = mock(async () => ({
 	company_logo_for_light_theme: "/viewer-light.png",
 	company_logo_for_dark_theme: "/viewer-dark.png",
 }));
-mock.module("@teamscala/db/fetch-organisation-page-branding", () => ({
+mock.module("@teamscala/db-org-branding/fetch-organisation-page-branding", () => ({
+	...__scalaReal_teamscala_db_org_branding_fetch_organisation_page_branding,
 	fetchOrganisationPageBranding: fetchBranding,
 }));
 mock.module("../page-server-orpc/server-client.ts", () => ({

package/src/register-registry-page-route/apply-page-branding.ts

@@ -6,7 +6,7 @@
 
 
 
-import { fetchOrganisationPageBranding } from "@teamscala/db/fetch-organisation-page-branding";
+import { fetchOrganisationPageBranding } from "@teamscala/db-org-branding/fetch-organisation-page-branding";
 import { getPlatformOrgId } from "@teamscala/db/registry/platform";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
 import { getServerClient } from "../page-server-orpc/server-client.ts";

package/src/register-registry-page-route/live-loader-config.test.ts

@@ -6,6 +6,7 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_logger_app_loggers from "@teamscala/logger/app-loggers";
 
 import { GlobalRegistrator } from "@happy-dom/global-registrator";
 import { afterEach, describe, expect, mock, test } from "bun:test";
@@ -44,16 +45,14 @@ mock.module("@teamscala/db/registry/load-config", () => {
 });
 
 // ── The heavy collaborators (recorded, not executed) ───────────────────
-const graphCalls: { loaderConfig: Record<string, unknown>; configFingerprint?: string }[] = [];
+const graphCalls: { loaderConfig: Record<string, unknown> }[] = [];
 
 mock.module("./resolve-request-graph.ts", () => ({
 	resolveRequestGraph: async (args: {
 		loaderConfig: Record<string, unknown>;
-		configFingerprint?: string;
 	}) => {
 		graphCalls.push({
 			loaderConfig: args.loaderConfig,
-			configFingerprint: args.configFingerprint,
 		});
 		return {};
 	},
@@ -93,8 +92,18 @@ mock.module("../bind-page-handler.ts", () => ({
 		_request: Request,
 	) => c.json(await handler.loadData(c.req.raw)),
 }));
+// Full five-method surface: mock.module installs PROCESS-WIDE, so a partial
+// double breaks every suite that imports the logger later (measured 2026-09-30).
+const loggerDouble = {
+	debug: () => {},
+	info: () => {},
+	warn: () => {},
+	error: () => {},
+	child: () => loggerDouble,
+};
 mock.module("@teamscala/logger/app-loggers", () => ({
-	getAppLogger: () => ({ info: () => {}, warn: () => {} }),
+	...__scalaReal_teamscala_logger_app_loggers,
+	getAppLogger: () => loggerDouble,
 }));
 
 const { registerRegistryPageRoute } = await import(

package/src/register-registry-page-route/page-data-shared.test.ts

@@ -6,16 +6,23 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_logger_app_loggers from "@teamscala/logger/app-loggers";
 
 import { describe, expect, mock, test } from "bun:test";
 
 const warns: string[] = [];
+// Full five-method surface: mock.module installs PROCESS-WIDE, so a partial
+// double breaks every suite that imports the logger later (measured 2026-09-30).
+const loggerDouble = {
+	debug: () => {},
+	info: () => {},
+	warn: (message: string) => warns.push(message),
+	error: () => {},
+	child: () => loggerDouble,
+};
 mock.module("@teamscala/logger/app-loggers", () => ({
-	getAppLogger: () => ({
-		warn: (message: string) => warns.push(message),
-		info: () => {},
-		error: () => {},
-	}),
+	...__scalaReal_teamscala_logger_app_loggers,
+	getAppLogger: () => loggerDouble,
 }));
 
 import {

package/src/register-registry-page-route/resolve-entity-title.test.ts

@@ -6,9 +6,17 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import { afterAll as __scalaRestoreGlobals } from "bun:test";
+import { GlobalRegistrator } from "@happy-dom/global-registrator";
+const __scalaDomWasMissing = !globalThis.document;
+if (__scalaDomWasMissing) GlobalRegistrator.register();
+__scalaRestoreGlobals(async () => {
+    if (__scalaDomWasMissing) await GlobalRegistrator.unregister();
+});
+
 
 import { describe, expect, test } from "bun:test";
-import { resolveEntityTitle } from "./meta-title.ts";
+const { resolveEntityTitle } = await import("./meta-title.ts");
 
 describe("resolveEntityTitle", () => {
 	test("a report is named by its own document name, not the diagnostic", () => {

package/src/register-registry-page-route/resolve-page-data.test.ts

@@ -6,17 +6,32 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_service_boot_page_server_orpc_server_client from "@teamscala/service-boot/page-server-orpc/server-client";
+import * as __scalaReal_teamscala_db_registry_load_config from "@teamscala/db/registry/load-config";
+import * as __scalaReal_teamscala_logger_app_loggers from "@teamscala/logger/app-loggers";
 
 import { describe, expect, mock, test } from "bun:test";
 
 const warn = mock((_message: string) => {});
+// Full five-method surface: mock.module installs PROCESS-WIDE, so a partial
+// double breaks every suite that imports the logger later (measured 2026-09-30).
+const loggerDouble = {
+	debug: () => {},
+	info: () => {},
+	warn,
+	error: () => {},
+	child: () => loggerDouble,
+};
 mock.module("@teamscala/logger/app-loggers", () => ({
-	getAppLogger: () => ({ warn, info: () => {} }),
+	...__scalaReal_teamscala_logger_app_loggers,
+	getAppLogger: () => loggerDouble,
 }));
 mock.module("@teamscala/db/registry/load-config", () => ({
+	...__scalaReal_teamscala_db_registry_load_config,
 	loadRegistryConfig: async () => ({}),
 }));
 mock.module("@teamscala/service-boot/page-server-orpc/server-client", () => ({
+	...__scalaReal_teamscala_service_boot_page_server_orpc_server_client,
 	getServerClient: () => ({}),
 }));
 

package/src/register-registry-page-route/resolve-request-graph.test.ts

@@ -6,18 +6,25 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_logger_app_loggers from "@teamscala/logger/app-loggers";
 
 import { describe, expect, mock, test } from "bun:test";
 
 let loaderGraph: Record<string, unknown> = {};
 const resolveCalls: Array<{ params: Record<string, string> }> = [];
 
+// Full five-method surface: mock.module installs PROCESS-WIDE, so a partial
+// double breaks every suite that imports the logger later (measured 2026-09-30).
+const loggerDouble = {
+	debug: () => {},
+	info: () => {},
+	warn: () => {},
+	error: () => {},
+	child: () => loggerDouble,
+};
 mock.module("@teamscala/logger/app-loggers", () => ({
-	getAppLogger: () => ({
-		warn: () => {},
-		info: () => {},
-		error: () => {},
-	}),
+	...__scalaReal_teamscala_logger_app_loggers,
+	getAppLogger: () => loggerDouble,
 }));
 
 mock.module("../page-server-loader-graph.ts", () => ({
@@ -60,12 +67,6 @@ mock.module("../content-page-floor.ts", () => ({
 	},
 }));
 
-mock.module("./graph-cache.ts", () => ({
-	staticShellGraphCache: { getWithMeta: () => undefined, set: () => {}, refreshInBackground: () => {} },
-	paramRouteGraphCache: { getWithMeta: () => undefined, set: () => {}, refreshInBackground: () => {} },
-	readCachedGraph: () => undefined,
-}));
-
 import { resolveRequestGraph, type ResolveRequestGraphArgs } from "./resolve-request-graph.ts";
 import type { PageRouteConfig } from "../register-registry-page-route.ts";
 
@@ -88,12 +89,9 @@ describe("resolveRequestGraph", () => {
 	test("a bare root with a resource_type throws the 200 holding-page signal", async () => {
 		const err = (await resolveRequestGraph({
 			pattern: "/",
-			routeSlug: "proposal",
 			routeConfig: route({ pattern: "/", resource_type: "proposal" }),
 			loaderConfig: loader([{ key: "proposal" }]),
 			params: { host: "proposals.scala.business", path: "/" },
-			isStaticShell: false,
-			serviceSlug: "scala-proposals",
 		}).catch((e) => e)) as Error & { httpStatus: number; resourceType: string };
 		expect(err).toBeInstanceOf(Error);
 		expect((err as { httpStatus?: number }).httpStatus).toBe(200);
@@ -104,12 +102,9 @@ describe("resolveRequestGraph", () => {
 		loaderGraph = { proposal: null };
 		const err = (await resolveRequestGraph({
 			pattern: "/:id",
-			routeSlug: "proposal",
 			routeConfig: route({ resource_type: "proposal" }),
 			loaderConfig: loader([{ key: "proposal" }]),
 			params: { host: "proposals.scala.business", path: "/missing" },
-			isStaticShell: false,
-			serviceSlug: "scala-proposals",
 		}).catch((e) => e)) as Error & { httpStatus: number; resourceType: string };
 		expect((err as { httpStatus?: number }).httpStatus).toBe(404);
 		expect((err as { resourceType?: string }).resourceType).toBe("proposal");
@@ -119,12 +114,9 @@ describe("resolveRequestGraph", () => {
 		loaderGraph = { page: null };
 		const err = (await resolveRequestGraph({
 			pattern: "/:id",
-			routeSlug: "public-page",
 			routeConfig: route({ resource_type: undefined }),
 			loaderConfig: loader([{ key: "page" }]),
 			params: { host: "public.scala.business", path: "/deleted" },
-			isStaticShell: false,
-			serviceSlug: "scala-public",
 		}).catch((e) => e)) as Error & { httpStatus: number; empty: boolean };
 		expect((err as { httpStatus?: number }).httpStatus).toBe(404);
 		expect((err as { empty?: boolean }).empty).toBe(false);
@@ -134,12 +126,9 @@ describe("resolveRequestGraph", () => {
 		loaderGraph = { page: { content: [] } };
 		const err = (await resolveRequestGraph({
 			pattern: "/:id",
-			routeSlug: "public-page",
 			routeConfig: route({ resource_type: undefined }),
 			loaderConfig: loader([{ key: "page" }]),
 			params: { host: "public.scala.business", path: "/empty" },
-			isStaticShell: false,
-			serviceSlug: "scala-public",
 		}).catch((e) => e)) as Error & { httpStatus: number; empty: boolean };
 		expect((err as { httpStatus?: number }).httpStatus).toBe(200);
 		expect((err as { empty?: boolean }).empty).toBe(true);
@@ -149,12 +138,9 @@ describe("resolveRequestGraph", () => {
 		loaderGraph = { proposal: { id: "p1", name: "Q3" } };
 		const resolved = await resolveRequestGraph({
 			pattern: "/:id",
-			routeSlug: "proposal",
 			routeConfig: route({ resource_type: "proposal" }),
 			loaderConfig: loader([{ key: "proposal" }]),
 			params: { host: "proposals.scala.business", path: "/p1" },
-			isStaticShell: false,
-			serviceSlug: "scala-proposals",
 		});
 		expect((resolved.proposal as { id: string }).id).toBe("p1");
 	});

package/src/resource-not-found.test.ts

@@ -10,7 +10,7 @@
 import { describe, expect, it } from "bun:test";
 import { inlineLogoAsDataUri } from "./error-page-logo.ts";
 import { PrimaryResourceMissingError, buildResourceNotFoundResponse } from "./resource-not-found.ts";
-import { buildWakingPageHtml } from "@teamscala/os/brand/waking-page-html";
+import { buildWakingPageHtml } from "@teamscala/brand/brand/waking-page-html";
 
 describe("PrimaryResourceMissingError", () => {
 	it("is an Error carrying resourceType + httpStatus", () => {
@@ -51,6 +51,24 @@ describe("buildResourceNotFoundResponse", () => {
 		expect(logo).toBe("data:image/png;base64,iVBORw==");
 	});
 
+	it("passes the resolved logo to the waking page instead of its placeholder", async () => {
+		const logo = await inlineLogoAsDataUri(
+			"/api/assets/c503629a/logos/cropped.png",
+			async () => ({
+				file() {
+					return {
+						stat: async () => ({}),
+						arrayBuffer: async () => new Uint8Array([137, 80, 78, 71]).buffer,
+					};
+				},
+			}),
+		);
+		const html = buildWakingPageHtml({ logoUrl: logo });
+		expect(logo).toStartWith("data:image/png;base64,");
+		expect(html).toContain('<img src="data:image/png;base64,iVBORw=="');
+		expect(html).not.toContain('class="uif-logo-loading-pulse" aria-hidden="true"');
+	});
+
 	it("returns a 404 Response for a dead link", () => {
 		const res = buildResourceNotFoundResponse("project");
 		expect(res).toBeInstanceOf(Response);

package/src/scala-tools-currency-watchdog.ts

@@ -5,7 +5,7 @@
 
 import { recordEvent } from "@teamscala/event-log/record-event";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
-import { spawn } from "@teamscala/os/spawn";
+import { spawn } from "@teamscala/process-spawn/spawn";
 import { createWatchdog } from "@teamscala/watchdog/create-watchdog";
 import type { WatchdogHandle } from "@teamscala/watchdog/types";
 import { loadRegistryConfig } from "@teamscala/db/registry/load-config";

package/src/theme-fonts-link.test.ts

@@ -6,6 +6,7 @@
 // carries them verbatim, this file is the emission, and hand edits here are
 // overwritten on the next run. The rationale each assertion carries moved
 // with it into the band.
+import * as __scalaReal_teamscala_db_registry_accessors from "@teamscala/db/registry/accessors";
 
 import { describe, expect, mock, test } from "bun:test";
 
@@ -13,6 +14,7 @@ type ConfigRow = { fonts?: Record<string, string> } | undefined;
 let injectedConfig: ConfigRow;
 
 mock.module("@teamscala/db/registry/accessors", () => ({
+	...__scalaReal_teamscala_db_registry_accessors,
 	getEntryConfig: (_type: string, _slug: string) => injectedConfig,
 }));
 

package/src/two-phase-full-app.test.ts

@@ -99,11 +99,57 @@ describe("phase-2 step isolation", () => {
 		expect(markFullAppReadyCall).toBeGreaterThan(gate);
 	});
 
-	test("a failed verification throws — the boot never continues past an unverified manifest", () => {
+	/*
+	 * THE 2026-10-13 RULING (client-build failure must not kill the process).
+	 *
+	 * The gate used to THROW on a failed verification, and the caller in ui-service
+	 * turns any phase-2 throw into process.exit(1). Measured on portal-dev: a
+	 * hydrate build that failed on unresolved @teamscala/ui-foundation block
+	 * imports exited the process, supervise-daemon respawned until it gave up, and
+	 * the service was parked stopped — so a broken CLIENT BUNDLE took down the
+	 * API, MCP and job surfaces too, and nothing rendered for an error boundary to
+	 * catch. A build failure is a fault to REPORT, not a reason to exit.
+	 *
+	 * The gate now returns with clientBuildFailed set and never throws, so the
+	 * process stays up serving its non-page surfaces while pages stay unready.
+	 */
+	test("a failed verification returns degraded instead of throwing out of phase 2", () => {
 		const body = buildFullAppBody();
 		const gate = body.indexOf("verifyClientBuildAssets()");
 		const slice = body.slice(gate, gate + 1200);
 		expect(slice).toContain("!clientBuild.ok");
-		expect(slice).toContain("throw new Error");
+		expect(slice).not.toContain("throw new Error");
+		expect(slice).toContain("clientBuildFailed");
+	});
+
+	/*
+	 * The failure must REACH US. The reason is logged and recorded as a durable
+	 * boot.client-build-failed event, so the degraded state is observable on our
+	 * end rather than a silent page outage.
+	 */
+	test("a failed verification records the fault durably, so the degraded state is reported", () => {
+		const body = buildFullAppBody();
+		const gate = body.indexOf("verifyClientBuildAssets()");
+		const slice = body.slice(gate, gate + 1200);
+		expect(slice).toContain("log.error");
+		expect(slice).toContain("recordEventDurable");
+		expect(slice).toContain("boot.client-build-failed");
+	});
+
+	/*
+	 * PAGES STAY UNAVAILABLE. The early return must sit BEFORE both readiness flip
+	 * call sites, or the 2026-09-01 unstyled-proposal incident returns: a service
+	 * whose client build never ran flips ready, serves pages, and answers /health
+	 * 200 while every asset URL 404s. Degrading the PROCESS is not degrading READINESS.
+	 */
+	test("the degraded return precedes both readiness flips, so pages stay unready", () => {
+		const body = buildFullAppBody();
+		const gate = body.indexOf("verifyClientBuildAssets()");
+		const degraded = body.indexOf("clientBuildFailed: reason");
+		const setPageHandlerCall = body.indexOf("setPageHandler(deps.createPageHandler)");
+		const markFullAppReadyCall = body.indexOf("markFullAppReady()");
+		expect(degraded).toBeGreaterThan(gate);
+		expect(setPageHandlerCall).toBeGreaterThan(degraded);
+		expect(markFullAppReadyCall).toBeGreaterThan(degraded);
 	});
 });

package/src/two-phase-full-app.ts

@@ -6,6 +6,7 @@
 
 
 
+import { recordEventDurable } from "@teamscala/event-log/record-event";
 import { getAppLogger } from "@teamscala/logger/app-loggers";
 import type { Hono } from "hono";
 import { buildClientAssets } from "./build-client-assets.ts";
@@ -21,6 +22,7 @@ export interface FullAppResult {
 	blocks: { slug: string; packagePath: string }[];
 	routes: string[];
 	pgBossJobs: Array<{ handlerSlug: string }>;
+	clientBuildFailed?: string;
 }
 
 export async function buildFullApp(
@@ -63,12 +65,29 @@ export async function buildFullApp(
 
 	const clientBuild = await verifyClientBuildAssets();
 	if (!clientBuild.ok) {
-		throw new Error(
-			`[two-phase-boot:${serviceSlug}] refusing readiness — ${clientBuild.reason}. ` +
-				`Serving pages here would emit asset URLs that 404 while every health surface reports ok. ` +
-				`Background work is mounted and unaffected; pages and /health stay unavailable until a real client build exists. ` +
-				`Fix the client build (see build-client-assets logs above) and restart.`,
-		);
+		const reason =
+			`[two-phase-boot:${serviceSlug}] client build is not servable — ${clientBuild.reason}. ` +
+			`Pages stay unavailable: serving here would emit asset URLs that 404 while every health surface reports ok. ` +
+			`Background work is mounted and unaffected, and the server keeps serving its API, MCP and job surfaces. ` +
+			`Fix the client build (see build-client-assets logs above); pages recover on the next restart.`;
+		log.error(reason);
+		await recordEventDurable({
+			id: crypto.randomUUID(),
+			kind: "boot.client-build-failed",
+			payload: {
+				at: new Date().toISOString(),
+				service: serviceSlug,
+				reason: reason.slice(0, 2000),
+			},
+			occurredAt: new Date(),
+		});
+		return {
+			app: minimalApp,
+			blocks: [],
+			routes: [],
+			pgBossJobs,
+			clientBuildFailed: reason,
+		};
 	}
 
 	log.info(

package/src/ui-service.ts

@@ -101,6 +101,13 @@ export async function bootUiService(
 
 			swapToFullApp(fullAppResult.app, serviceSlug);
 
+			if (fullAppResult.clientBuildFailed !== undefined) {
+				log.error(
+					`[ui-service-boot:${serviceSlug}] Full app swapped in after ${fullDuration}ms with NO servable client build — the process stays up serving API, MCP and jobs; pages and /health stay unready. buildFullApp recorded boot.client-build-failed with the reason.`,
+				);
+				return;
+			}
+
 			log.info(
 				`[ui-service-boot:${serviceSlug}] Full app swapped in after ${fullDuration}ms (${fullDuration - minimalDuration}ms after minimal app)`,
 			);