docs(metadata-protocol): re-anchor the other source files' dead tracker citations to the commits that decided them

Claude-Session: https://claude.ai/code/session_017xfMoEjKUuSh2xYB8sCozp
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/metadata-protocol/src/discovery-version.ts

@@ -4,7 +4,7 @@
  * Resolves the value `ObjectStackProtocolImplementation.getDiscovery()` serves
  * as the `DiscoverySchema` "System Identity" `version` field (`./protocol.ts`).
  *
- * ## #11235 — why the literal it replaces was provably not a contract value
+ * ## Commit 376c70f98 — why the literal it replaces was provably not a contract value
  *
  * This producer hardcoded `version: '1.0'`. It is the SECOND
  * `DiscoverySchema`-conforming producer; the first
@@ -23,7 +23,7 @@
  * `@objectstack/metadata-protocol`, not the reverse, so importing it would
  * invert the dependency direction. Hoisting a shared helper into
  * `@objectstack/types` or `@objectstack/core` (both already dependencies of
- * this package) was considered and declined at #11235 triage: a hoist widens
+ * this package) was considered and declined when the derivation landed (commit 376c70f98): a hoist widens
  * two packages' published surface for ~10 lines serving two call sites.
  * Consolidation rides a later card if a third caller ever appears.
  *
@@ -103,7 +103,7 @@ function resolvePackageVersion(): string | undefined {
  * 3. `'unknown'` — only if BOTH of the above are unavailable (the package's own
  *    `package.json` is unreadable). Honest about not knowing, rather than a
  *    plausible-looking literal a caller could mistake for real identity — the
- *    exact failure mode #10993 and #11235 exist to close.
+ *    exact failure mode #10993 and commit 376c70f98 close.
  */
 export function resolveDiscoveryVersion(): string {
     return getEnv('OS_RUNTIME_VERSION') || resolvePackageVersion() || 'unknown';

packages/metadata-protocol/src/migrations/live-mysql-database.testkit.ts

@@ -1,7 +1,7 @@
 // Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
 
 /**
- * #10382 — the per-file live MySQL database for this package's live suites.
+ * Commit ee09d2119 — the per-file live MySQL database for this package's live suites.
  *
  * ## What was actually wrong, which is not what the card said
  *

packages/metadata-protocol/src/migrations/partial-index-probe.ts

@@ -41,7 +41,7 @@
  * message that discloses neither the statement nor the diagnostic — and carries
  * the dialect error whole under a non-enumerable `cause`. Read bare, `detail`
  * became *"the database refused to run a raw statement"* for every caller that
- * stores it. `operatorFacingErrorText` (`@objectstack/types`, #16657) reads the
+ * stores it. `operatorFacingErrorText` (`@objectstack/types`, commit 5a95b0e93) reads the
  * dialect's own words back out of that chain, so a stored record still names
  * `no such column: foo`. The envelope itself is left exactly as the driver
  * declared it: this is a READ of the cause, never a widening of the disclosure.
@@ -392,7 +392,7 @@ export async function probeThenReplaceIndex(
     } catch (err: unknown) {
         // `detail` is the OPERATOR-facing text: the dialect's own prose, read
         // out of the `cause` the raw seam attaches when it declares its fault
-        // (#16019/#16657 — see the module header). Callers STORE it, and a
+        // (#16019/commit 5a95b0e93 — see the module header). Callers STORE it, and a
         // stored record is the only copy its reader ever gets.
         // The VERDICT is taken from the error object itself, so a conflict
         // reported on `code` / `errno` / `cause` with unhelpful prose is still

packages/metadata-protocol/src/migrations/read-probe.ts

@@ -45,7 +45,7 @@
  * than an oversight. Quietening a refusal requires CLASSIFYING it, this repo has
  * exactly one predicate for that (`isMissingTableError`, `@objectstack/types`),
  * and it needs `readObject` — the name of the thing the caller was reading —
- * both to avoid the #13324 fail-open and because
+ * both to avoid the fail-open commit 4cda78c9b closed and because
  * `driver-error-classification.callers.test.ts` fails any in-repo call that
  * omits it. The raw path has no such name: `execute()` takes a string, and
  * `rawStatementFaultError` declares no targeted table (pinned by
@@ -111,7 +111,7 @@ export type ReadProbeExec = (sql: string) => Promise<unknown>;
  * array (better-sqlite3 through knex), `{ rows }` (pg), and the `[rows, fields]`
  * tuple (mysql2). An empty result set in any of those spellings is still a
  * result set, and still `true` — that is what keeps a healthy install's
- * `no-split` intact, and it is the half of #10789 that stopped it being a
+ * `no-split` intact, and it is the half of commit 38bc74ed1 that stopped it being a
  * rename.
  *
  * This cannot lose a split that {@link normalizeRows} would have found: every
@@ -255,7 +255,7 @@ export type TablePresenceVerdict =
   | 'absent'
   /**
    * The seam accepted the statement and returned no result set at all — a
-   * memory engine's no-op `execute` (#10789). Not a failure and not an answer;
+   * memory engine's no-op `execute` (commit 38bc74ed1). Not a failure and not an answer;
    * each caller maps it the way its own history already ruled.
    */
   | 'no-answer'
@@ -274,7 +274,7 @@ export interface TablePresenceProbe {
   /**
    * The table whose presence is asked. Also the `readObject` the fallback arm's
    * classification compares the dialect's phrase against, so a refusal naming
-   * some OTHER relation is ⛔ not read as this table's absence (#13324).
+   * some OTHER relation is ⛔ not read as this table's absence (commit 4cda78c9b).
    */
   table: string;
   /** The knex client name, when the caller resolved one. */

packages/metadata-protocol/src/migrations/seed-tenancy-backfill.ts

@@ -190,15 +190,15 @@ export type SeedTenancyBackfillStatus =
    * No raw-SQL-capable driver at all — the engine exposes neither `execute` nor
    * `raw`, so no seam was resolved. A test double with no driver is the case.
    *
-   * ⚠️ NOT a memory engine, however plausible that reads (#10789). A memory
+   * ⚠️ NOT a memory engine, however plausible that reads (commit 38bc74ed1). A memory
    * engine's `execute` is a no-op that RETURNS rather than being absent, so it
    * resolves a seam and reports {@link 'absent'} — this branch never sees it.
    */
   | 'no-driver'
   /**
    * The counter table could not be read: either there is no
    * `_objectstack_sequences` (nothing has ever allocated a number), or the seam
-   * answered nothing at all — a memory engine's no-op `execute` (#10789), and
+   * answered nothing at all — a memory engine's no-op `execute` (commit 38bc74ed1), and
    * the case this branch's comment always claimed. `detail` names which.
    */
   | 'absent'
@@ -414,7 +414,7 @@ export function resolveSeedTenancyExec(engine: unknown): SeedTenancyExec | undef
 }
 
 /**
- * ── The seam that ACCEPTS a query but never ANSWERS one (#10789) ───────────
+ * ── The seam that ACCEPTS a query but never ANSWERS one (commit 38bc74ed1) ───────────
  *
  * {@link normalizeRows} flattens the three shapes a raw SELECT comes back as.
  * A seam can hand back a FOURTH thing, and it means something else entirely:
@@ -435,7 +435,7 @@ export function resolveSeedTenancyExec(engine: unknown): SeedTenancyExec | undef
  * the only thing that distinguishes them: a driver that answers returns a RESULT
  * SET. Nothing here names a driver, so any host with the same no-op shape is
  * covered without an allowlist to maintain — the consumer-side shape #10677 /
- * PR #10788 landed for `os migrate duplicates`, applied to this module's own
+ * commit 3a7ec2d3b landed for `os migrate duplicates`, applied to this module's own
  * probes.
  */
 
@@ -961,7 +961,7 @@ function toNumber(value: unknown): number {
 //     ruled destination, is not: it resolves there with no engine bound, so
 //     `set()` answers "resolved" while nothing reaches the database — a receipt
 //     that reports success and persists nothing is the very defect this card
-//     exists to remove. Measured; recorded separately as #10159.)
+//     exists to remove. Measured; recorded separately, and refused since commit 1ec36b730.)
 //   - its API surface is read-only (`apiMethods: ['get', 'list']`), so the
 //     receipt cannot be edited back through the shipped routes;
 //   - its row contract lives in `@objectstack/spec/system`, which this package
@@ -1228,7 +1228,7 @@ export async function backfillSeedTenancy(
   //    statement above is kept and is still what runs on a dialect
   //    `read-probe.ts` has no catalog arm for.
   //
-  //    FOUR verdicts, and the third and fourth are the two #10789 named. A seam
+  //    FOUR verdicts, and the third and fourth are the two commit 38bc74ed1 named. A seam
   //    that accepts the statement and never runs it (a memory engine's no-op
   //    `execute`) answers nothing — still `absent`, still separated by
   //    `detail`, exactly as ruled. ⛔ But `'unreadable'` is NOT folded in with
@@ -1317,7 +1317,7 @@ export async function backfillSeedTenancy(
   //    `resolveSystemWriteOrganization`'s probe (#9261). Unknown is not zero.
   //
   //    "Separately" is `undefined` versus a string, and the distinction is
-  //    load-bearing (#17167): the failure FACT must not ride on the failure
+  //    load-bearing (commit dc709b2cf): the failure FACT must not ride on the failure
   //    TEXT, because the operator channel is allowed to be empty — a thrown
   //    `''`, a thrown `[]`, an `Error` whose `name` and `message` are both
   //    empty. A site that reads "the text is empty" as "there was no failure"
@@ -1336,7 +1336,7 @@ export async function backfillSeedTenancy(
       .map((r) => (r.id == null ? '' : String(r.id)))
       .filter((id) => id.length > 0);
   } catch (e) {
-    // [#16657, #17167] The record is the helper's return AS IS, `''` included —
+    // [commit 5a95b0e93, commit dc709b2cf] The record is the helper's return AS IS, `''` included —
     // the rule the other four `operatorFacingErrorText` sites in this file
     // follow. ⛔ No placeholder on top of it: a record reading `'unknown error'`
     // where the backend said nothing is this migration writing operator-facing
@@ -1393,7 +1393,7 @@ export async function backfillSeedTenancy(
         (organizationProbeError === undefined
           ? ''
           : // The parenthetical is dropped, never filled in, when the backend's
-            // operator channel was empty (#17167): the FAILURE is the load-
+            // operator channel was empty (commit dc709b2cf): the FAILURE is the load-
             // bearing half of this note and it is stated either way, while the
             // text is the backend's own or is not there at all.
             `NOTE: the ${ORGANIZATION_TABLE} probe FAILED` +
@@ -1404,7 +1404,7 @@ export async function backfillSeedTenancy(
       // `organizationProbeError` is `undefined` — and so serializes AWAY — when
       // the probe answered; a probe that failed carries its text, `''` and all.
       // Absent-versus-empty is what tells the two apart in the stored record
-      // now that no placeholder does it (#17167).
+      // now that no placeholder does it (commit dc709b2cf).
       { splits, organizationCount: organizationIds.length, organizationProbeError },
     );
     return { status: 'skipped-ambiguous-organization', splits, collisions: [], objectsStamped: 0 };