@@ -0,0 +1,12 @@
+---
+'@object-ui/app-shell': patch
+---
+
+fix(app-shell): on a narrow window, a toast raised beside the record drawer no longer covers the record's Edit and ⋯ buttons
+
+Clause-②: no
+Metadata-protocol: none
+
+When a right-edge drawer is open and the window is too narrow for a toast beside it (a 720px record drawer on a 1024px window, a split screen, a phone), the console's toaster drops below the drawer's header. It cleared only the drawer's own header, so the success toast raised by creating a record sat on the record header's Edit button and ⋯ menu for its whole four seconds. The toast now also drops below the drawer's first row of controls, measured from the drawer's layout, so it clears the record's actions row for any drawer content. Wide windows keep the toast in the strip beside the drawer, as before.
+
+What to do: nothing.
@@ -431,7 +431,27 @@ export const CEILINGS = new Map([
   // decision tables at 487 lines.
   // 5833 -> 5828: A2′ — the release-stamp line left the count (see
   // STAMP_LINE_REPIN); the file's count fell by the same 5, headroom unchanged.
-  ['skills/objectstack-platform/SKILL.md', 5828],
+  // 5828 -> 5981 (card #26302, the objectstack-platform row of the skills gap
+  // audit): the Seed Data section gains `demoStaff` against `devLogins` — a
+  // seed deals records to people and cannot create one, so the people are
+  // declared in `demoStaff` and `os dev` creates the accounts (position and
+  // permission sets from the stack's own declarations, the seed password, never
+  // in the built artifact), while `devLogins` is banner text that creates and
+  // grants nothing. Maintainer ruling 2026-10-27 on the seat's decision card
+  // 「skills 修复卡的教学和 eval 都撞 token 天花板,怎么付?」, his tap verbatim
+  // and untranslated: 「A:先削重复,余额按实测提高」. Paid down first, as the
+  // ruling asks — four restatements cut, each with a surviving home in the
+  // file: the `defineStack()` intro (the opening paragraph and the project
+  // tree say it), the "read the source for the exact shape" paragraph (the
+  // References section keeps the rule; one pointer line stays), the boot
+  // sequence's "(see Ports & networking)" aside and the two cheat-sheet port
+  // comments (the Port resolution paragraph says both). Arithmetic in bytes:
+  // on `origin/main` the priced text was 23294 bytes (5824 tokens, headroom 4);
+  // the cuts remove 309 bytes and the section adds 939, so the LANDED priced
+  // text is 23924 bytes -> 5981 tokens: the 4 tokens of headroom are absorbed
+  // and the ceiling moves 5828 -> 5981 (+153). Pinned AT the measurement.
+  //   ceil(($(wc -c < skills/objectstack-platform/SKILL.md) - 20) / 4) == ceil(23924 / 4)
+  ['skills/objectstack-platform/SKILL.md', 5981],
   // `skills/objectstack-pm-dispatch/SKILL.md` (9708) and its
   // `rules/dev-template.md` (1838) left this table on 2026-09-10 with the files:
   // the maintainer deleted the published PM skill whole (verbatim:
@@ -541,7 +561,14 @@ export const CEILINGS = new Map([
   // 3778 -> 3676: RE-LOCK at the landed count (#19715, card item 4). A 5-line
   // table of contents (+154 tokens) landed inside the row's 256 tokens of
   // headroom, so no raise; pinned AT the measurement — zero headroom.
-  ['skills/objectstack-data/rules/relationships.md', 3676],
+  // 3676 -> 3873 (#26297): `sharing.controlledByParent.ownerMayEdit` — the
+  // owner of a controlled_by_parent detail row may update it by id with read
+  // access to the master; what it does not widen; refused off a detail and
+  // one level up — which the file did not teach beside `controlled_by_parent`.
+  // +201 tokens on a landed 3672, 4 absorbed by headroom, ceiling +197. No
+  // repeated passage to cut first (measured: no sentence repeats). Maintainer ruling 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
+  // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
+  ['skills/objectstack-data/rules/relationships.md', 3873],
   // NEW FILE (#14296 item 1 = A, condition (b)): the entry's Security & Access
   // Control block moved here whole. Pinned at its landed count — no headroom,
   // because a split that arrives with budget is a raise wearing a new path.
@@ -571,7 +598,18 @@ export const CEILINGS = new Map([
   // first (measured: no sentence repeats in the file). Maintainer ruling
   // 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
   // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
-  ['skills/objectstack-data/rules/security.md', 2956],
+  // 2956 -> 3693 (#26297): membership keys (`membershipKeys` on the roster
+  // object — the three members, the refusals, the once-per-request system
+  // read that fails closed, and the choice rule against owner scoping, a
+  // position and a sharing rule), the position → `permissionSets` binding
+  // (a namesake set is reported, never granted) and the `external`
+  // membership tier for portal users (no baseline, explicit grants only) —
+  // none of which the file taught, so an author wrote per-row policies and
+  // expected a position-named set to grant itself. +737 tokens on a landed
+  // 2956 at headroom 0, ceiling +737. No repeated passage in the file to
+  // cut first (measured: no sentence repeats). Maintainer ruling 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
+  // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
+  ['skills/objectstack-data/rules/security.md', 3693],
   // 3024 -> 3109 (2026-08-31 app-repo-principles raise, see the block above).
   // Severity Levels listed the three values and left the CHOICE unstated: a
   // block rests on a judgement a person made, so a machine-inferred signal — a
@@ -726,8 +764,22 @@ export const CEILINGS = new Map([
   // ceiling +201; nothing duplicated in the file to cut first. Same ruling as
   // the `rules/security.md` row above (2026-10-27, tap A:
   // 「A:先削重复,余额按实测提高」).
-  ['skills/objectstack-data/evals/hooks-security-seeds-datasources.json', 1095],
-  ['skills/objectstack-data/evals/objects-fields-relationships.json', 946],
+  // 1095 -> 1404 (#26297): one regression case for the portal membership key
+  // (a portal user reads only the rows of the accounts they belong to —
+  // expected: `membershipKeys` on the roster object, `current_user.KEY` in the
+  // policy, the set bound through a position's `permissionSets`, the
+  // `external` tier), and the seed case gains the job-owned column declared
+  // `applyOn: 'create'`. +309 tokens at headroom 0, ceiling +309; nothing
+  // duplicated in the file to cut first. Maintainer ruling 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
+  // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
+  ['skills/objectstack-data/evals/hooks-security-seeds-datasources.json', 1404],
+  // 946 -> 1050 (#26297): the invoice-line case gains the owner opt-in
+  // (`ownerMayEdit` on the controlled_by_parent line) and pins `added_by` as
+  // `type: 'user'`, never a lookup to a `user` object. +104 tokens at
+  // headroom 0, ceiling +104; nothing duplicated in the file to cut first.
+  // Maintainer ruling 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
+  // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
+  ['skills/objectstack-data/evals/objects-fields-relationships.json', 1050],
   ['skills/objectstack-formula/evals/cel-predicates-formulas.json', 1046],
   // 1004 -> 1451 (2026-10-27, the objectstack-i18n fix card of the skills gap
   // audit): two eval prompts for the teaching that card adds — the `reports`,
@@ -740,7 +792,17 @@ export const CEILINGS = new Map([
   // is the whole addition; pinned AT the measurement, zero headroom. The
   // raising PR's body carries the same arithmetic.
   ['skills/objectstack-i18n/evals/bundles-locales-coverage.json', 1451],
-  ['skills/objectstack-platform/evals/config-plugins-ops.json', 1211],
+  // 1211 -> 1458 (card #26302): one eval for a demo whose seed names people —
+  // expected: both in `demoStaff` with a declared `position` /
+  // `permissionSets`, created by `os dev`; NO `role:` alias and NO platform
+  // set such as `admin_full_access`. Same ruling as the `SKILL.md` row above
+  // (2026-10-27, tap A: 「A:先削重复,余额按实测提高」); the file's six fixtures
+  // share no sentence, so there was no duplicate to cut (0 bytes). On
+  // `origin/main` the file was 4842 bytes (1211 tokens, headroom 0); the
+  // fixture adds +989 bytes, so the LANDED file is 5831 bytes -> 1458 tokens,
+  // ceiling +247, pinned AT the measurement.
+  //   ceil($(wc -c < skills/objectstack-platform/evals/config-plugins-ops.json) / 4) == ceil(5831 / 4)
+  ['skills/objectstack-platform/evals/config-plugins-ops.json', 1458],
   ['skills/objectstack-query/evals/filters-pagination-search.json', 955],
   // 1505 -> 1789 (#26295): two eval prompts — list grouping with `orderBy`, and the copy hole
   // + `onSuccess` pair — +284 tokens in the file's shape; fixtures, nothing to delete, the
@@ -769,9 +831,21 @@ export const CEILINGS = new Map([
   // absorbed by headroom, ceiling +18. Same maintainer ruling as the SKILL.md
   // row above (2026-10-27, verbatim and untranslated): 「A:先削重复,余额按实测提高」.
   ['skills/objectstack-automation/references/state-machines-and-approvals.md', 5587],
-  ['skills/objectstack-data/references/examples-objects.md', 1779],
+  // 1779 -> 1769 (#26297): RE-LOCK at the landed count after a net cut — two
+  // stale `{ type: 'lookup', reference: 'user' }` fields (an object that does
+  // not exist) became `type: 'user'`; -10 tokens, the row follows the
+  // measurement down, zero headroom.
+  ['skills/objectstack-data/references/examples-objects.md', 1769],
   ['skills/objectstack-data/references/lint-rules.md', 970],
-  ['skills/objectstack-data/references/seeds.md', 1299],
+  // 1299 -> 1566 (#26297): the `columns` dataset key and `applyOn: 'create'`
+  // — a column a job or an admin owns after the first load is written on
+  // create and left alone on every `upsert` replay; which modes it touches,
+  // the refused key, the cross-link to the import door's `applyOn` — which
+  // the option table lacked, so a replay reverted the app's own writes. +267
+  // tokens at headroom 0, ceiling +267. No repeated passage to cut first
+  // (measured: no sentence repeats). Maintainer ruling 2026-10-27 on the decision card 「skills 修复卡的教学和 eval 都撞 token 天
+  // 花板,怎么付?」, tap A, verbatim and untranslated: 「A:先削重复,余额按实测提高」.
+  ['skills/objectstack-data/references/seeds.md', 1566],
   ['skills/objectstack-platform/references/bootstrap.md', 1351],
   ['skills/objectstack-platform/references/operations.md', 3125],
   ['skills/objectstack-platform/references/plugin-development.md', 3137],
 
@@ -900,9 +900,52 @@ export const ESCAPABLE_LITERAL_LEDGER_ROWS = Object.freeze([
  *     already has. ⛔ Nor does either gate happening to go quiet: three of the
  *     five measured instances involved a green that proved nothing, because a
  *     sweep that cannot see your file is not evidence about your file.
+ *   - ui-scripts-suite entry: when a workflow runs the `ui/scripts/__tests__`
+ *     suite as a step of its own, under an invocation the discovery reads, the
+ *     row can name that family instead of standing in for a CI job — and when
+ *     the `Test UI` job stops running the suite at all, the binding goes STALE
+ *     by itself. ⛔ A path predicate that narrows the four roots to the files
+ *     each test "really" reads does NOT qualify: that map is a second thing
+ *     that goes stale, and the run is cheap enough not to need one (measured
+ *     below).
  *
  *
  *   Delete an entry the day its criterion is met, not before.
+ *
+ * ## Why the ui-scripts-suite entry stands in for a CI JOB (#26318)
+ *
+ * The 180 test files under `ui/scripts/__tests__/` (178 that run, 2 skipped)
+ * belong to no package and run
+ * only inside the 16 `Test UI` shards, as the "always-on" files the affected-test
+ * selector adds to every run because no package owns them. They pin facts a
+ * change under ui package source, the Console app, the objectui skill bundle or
+ * `ui/scripts` itself moves — turbo build inputs, the skill-examples floor, the
+ * SchemaRenderer channel keys — and no derived family named them: measured on
+ * PR #26274's head 1ef5c482, three reds there were that PR's own and had passed
+ * every derived local gate.
+ *
+ * Every other gate in this table is a family the workflows run, resolved by
+ * name. This one cannot be: the only step that runs the suite is the `Test UI`
+ * job's vitest line, which carries a shard and the selector's filter list, and
+ * no workflow spells a narrower invocation. So its gate declares the job and the
+ * runner prefix it narrows (`ciJob`, `ciRunner`), and the engine's
+ * `ciJobRunsRunner` resolves it against the live workflows the same way a family
+ * is resolved: a job renamed or a runner respelled renders it STALE, and the
+ * census guard in the self-test reds on the PR that does it.
+ *
+ * It names the WHOLE suite, never an affected subset: a subset map is a second
+ * list that rots. Measured at 6390fe52 on a 4-vCPU container, after the seven
+ * @objectstack packages the job builds: 178 files passing in 284 s and 286 s
+ * (two runs; the card's "about a minute" was read elsewhere), nearly all of it
+ * module import — so a subset would save minutes, not a CI round trip, and the
+ * reach it would have to model is the tree itself: by a static scan of each
+ * file and the helpers it imports, 165 of the 180 read ui package source, 141
+ * the ui apps, 16 the objectui skill bundle and 170 ui/scripts. What it does not see is
+ * stated rather than hidden: a ui path outside the four roots (a ui package's
+ * tests outside `src`, its `package.json`, a root config) is not named here,
+ * though CI's `Test UI` job still schedules the suite for it — the full battery
+ * on `main` remains the backstop for that, as it is for the selector's own
+ * misses.
  */
 export const CHANGE_KIND_ROWS = [
   {
@@ -1013,8 +1056,37 @@ export const CHANGE_KIND_ROWS = [
       },
     ],
   },
+  {
+    kind: 'edits a file the ui/scripts/__tests__ suite reads (ui package source, the ui apps, the objectui skill bundle, or ui/scripts itself)',
+    matches: 'ui-scripts-suite-input',
+    gates: [
+      {
+        name: 'pnpm --dir ui exec vitest run scripts/',
+        ciJob: 'Test UI',
+        ciRunner: 'pnpm --dir ui exec vitest run',
+        why: "the 178 test files under ui/scripts/__tests__ belong to no package and run only in CI's 16 Test UI shards, where the affected-test selector adds them to every run, so no package suite and no check family covers them: they pin turbo build inputs, the skill-examples floor, the SchemaRenderer channel keys and the other facts a change under ui package source, the ui apps, skills/objectui or ui/scripts moves. The whole suite, never a subset: measured at about five minutes on a 4-vCPU container (284 s and 286 s, 178 files passing, import-bound), against the CI round trip of about 25 minutes it saves. It needs the seven @objectstack packages Test UI builds first, or about twenty files red on an import of a missing dist — build them exactly as the job does: pnpm exec turbo run build --filter=@objectstack/spec... --filter=@objectstack/client... --filter=@objectstack/core... --filter=@objectstack/formula... --filter=@objectstack/lint... --filter=@objectstack/sdui-parser... --filter=@objectstack/types... . Positional filter, no bare `--`, from the repo root: ui/scripts/vitest-invocation-guard.mjs refuses every other spelling",
+      },
+    ],
+  },
 ];
 
+/**
+ * The roots whose change the `ui/scripts/__tests__` suite can see (#26318), in CI's own `paths:` language
+ * — the engine matches them with `triggerListCovers`, the reader of every workflow trigger. They are the
+ * card's four, as written there: ui package SOURCE (any depth below `ui/packages`, so a nested package
+ * counts), the ui apps, the objectui skill bundle the suite reads through `ui/scripts/skill-bundle-root.mjs`,
+ * and the suite's own tree. The bare `src` directory form is listed beside its subtree because a dispatch
+ * surface is often given as that directory, and the trigger language reads a directory only through a
+ * pattern's literal prefix.
+ */
+export const UI_SCRIPTS_SUITE_ROOTS = Object.freeze([
+  'ui/packages/**/src',
+  'ui/packages/**/src/**',
+  'ui/apps/**',
+  'skills/objectui/**',
+  'ui/scripts/**',
+]);
+
 /**
  * The globs that MANDATE a model tier for any card whose file surface touches
  * them, as DATA. This is the one list in this file besides CHANGE_KIND_GATES,