diff --git a/lib/host/serve.sh b/lib/host/serve.sh
index dc82404c..722fa152 100755
--- a/lib/host/serve.sh
+++ b/lib/host/serve.sh
@@ -194,6 +194,7 @@ EPOCH=1
   # auto-mounts /login + /logout and wraps everything in the signed-session
   # middleware, so a browser logs in then publishes. The bearer resolver is a stub
   # (no API tokens configured) — browser session is the live auth path for now.
-  # blog-routes LAST — its GET /:slug catch-all must not shadow the rest.
-  echo "(eval \"(host/serve $PORT (list host/static-routes host/feed-routes host/relations-routes (host/blog-write-routes (fn (tok) nil)) host/blog-routes otel/routes))\")"
+  # blog-routes LAST — its GET /:slug catch-all must not shadow the rest. otel/routes must
+  # come BEFORE blog-routes, or GET /otel is swallowed by /:slug (only /otel/stream survives).
+  echo "(eval \"(host/serve $PORT (list host/static-routes host/feed-routes host/relations-routes otel/routes (host/blog-write-routes (fn (tok) nil)) host/blog-routes))\")"
 } | exec "$SX_SERVER"