Issues

metadata-protocol: over legacy object rows [package-less, Q], a draft save naming no package answers 200 into Q's draft, which no publish can serve: the save door's D9.9 check judges the request's package before the draft address resolves to Q

objectstack-ai/objectstack#23712 · opened

on Oct 15, 2026

1

spec liveness: the console pin hop to objectui 1f23d5b070fa makes `page.print` and `translation.flows.successMessage` / `errorMessage` read `planned` while the shipped console applies them (family card; the `parentDataSource` leg is #23585)

objectstack-ai/objectstack#23710 · opened

on Oct 15, 2026

1

runtime: an engine `DuplicateRecordError` a sandboxed script body lets propagate leaves the VM as `SandboxError`, so no door recognises it and it answers `409 DUPLICATE_RECORD`, not the ruled `UNIQUE_VIOLATION`

objectstack-ai/objectstack#23702 · opened

on Oct 15, 2026

2

mcp: a tool call that repeats a unique value answers the engine's in-process `DUPLICATE_RECORD` in its error result, not the ruled wire spelling `UNIQUE_VIOLATION` (`create_record`, `run_action`, `resume_run`)

objectstack-ai/objectstack#23701 · opened

on Oct 15, 2026

2

runtime: a declared sqlite datasource whose file cannot be created never settles its connect, so the boot is refused only by a plugin start timeout (30 s, 120 s after PR #23694) that names neither the datasource, the path nor the open error

objectstack-ai/objectstack#23696 · opened

on Oct 15, 2026

1

pm-dispatch: a narrowing-only PR (no schema, no governed path) gets two review tiers: execution-duties.md and `dispatch-gates --tier` owe a contract-review-tier review; `reviewFace` reads the declaration face, `TIER_DEFAULT` exactly

objectstack-ai/objectstack#23692 · opened

on Oct 15, 2026

3

metadata-protocol: an orphan adoption registers a package-less DRAFT view as live — reassignOrphanedMetadata's view write-through has no state gate, so the registry serves a draft the boot never registers (found by #23646)

objectstack-ai/objectstack#23690 · opened

on Oct 15, 2026

1

objectql/mcp: on an environmentId kernel (os dev env_local, the cloud runtime) a runtime-authored object may have no metadata-service copy, so the MCP exposure gate would read apiEnabled false as no declaration (not walked)

objectstack-ai/objectstack#23689 · opened

on Oct 15, 2026

4

os-dev contract: a PR that renames or removes an exported symbol runs the scoped platform-checklist check on its changed files before push (#23653 letter C, item 3)

objectstack-ai/objectstack#23665 · opened

on Oct 15, 2026

1

pm-dispatch: the decision-analysis self-check line and SKILL.md axis 4 give opposite recommendations when axis 1 picks a new derived check (measured on #23653)

objectstack-ai/objectstack#23662 · opened

on Oct 15, 2026

5

metadata-protocol: a draft save naming no package, of an item never published into a package whose only draft is bound to package Q, writes a package-unbound draft beside it, while the publish and discard naming none act on Q's (after PR #23654)

objectstack-ai/objectstack#23657 · opened

on Oct 15, 2026

4

spec(ui): `page:header` `showStar` is declared but no longer reaches a user in the reference console: since objectui#12427 the star draws only where a host wires a favorites toggle, and no host does

objectstack-ai/objectstack#23650 · opened

on Oct 15, 2026

1

spec: the stack's `datasources` accepts a datasource named `default`, which every boot refuses as host-reserved — `defineStack` / `os validate` / publish pass a config that boots in no posture

objectstack-ai/objectstack#23634 · opened

on Oct 15, 2026

6

cli/serve --dev: an OS_DATABASE_URL whose scheme the CLI does not recognise is ignored in silence, and the boot serves an in-memory SQLite store instead of the database the operator named

objectstack-ai/objectstack#23633 · opened

on Oct 15, 2026

1

i18n(spec): no exported resolver localizes a form view's `sections` through the declared `objects.<object>._sections.<name>` keys, so a server-side reader (the public form read, #23497) cannot translate a section label without copying the locale chain

objectstack-ai/objectstack#23632 · opened

on Oct 15, 2026

cli/serve: with --no-server the ready banner still prints "API: http://localhost:PORT/" and an MCP connect URL, though no HTTP server is composed and nothing listens

objectstack-ai/objectstack#23623 · opened

on Oct 15, 2026

1

cli: read-only arms still say they wrote nothing on a SQLite file whose journal mode their connect switches (security-catalog-overlays preview, recorded-by, resume, secret orphans / rewrap, storage orphans) — the remainder of #23562

objectstack-ai/objectstack#23622 · opened

on Oct 15, 2026

3

spec: `PageTypeSchema` says `home` is "the platform-level landing page" and `utility` a "floating utility panel", but the landing is the first navigation item and both types render as ordinary inline pages

objectstack-ai/objectstack#23610 · opened

on Oct 15, 2026

9

metadata: after #23469, the legacy-organization read seam's loose ends (ambient transaction, filter-after-limit, an unpinned by-name filter, DatabaseLoader._count, a 404 where a named refusal belongs) and the ceremony wording

objectstack-ai/objectstack#23609 · opened

on Oct 15, 2026

[Decision] Three spec contract dev agents in one container queued ~70 min each on the shared verify lock: leave package `test:repo` to CI, and send build-heavy cards to cloud sessions?

objectstack-ai/objectstack#23607 · opened

on Oct 15, 2026

7

verify family split (#15953), services rows: service-automation regression tests that replace hotcrm's platform-semantics pins (rows 8, 11)

objectstack-ai/objectstack#23604 · opened

on Oct 15, 2026

verify family split (#15953), engine rows: objectql and driver-sql regression tests that replace hotcrm's platform-semantics pins (rows 3, 4-5, 7, 8, 10, 11)

objectstack-ai/objectstack#23603 · opened

on Oct 15, 2026

spec(ui): `RecordRelatedListProps.parentDataSource` still says `[PLANNED — not yet rendered]` and the liveness note says nothing reads it — objectui renders it since objectui PR #12407

objectstack-ai/objectstack#23585 · opened

on Oct 15, 2026

1

lint: a locale pack's `picklists.<name>` translations are never checked — an option key that is not in the list, or a list no package declares, passes `os lint --strict` and is dropped silently at runtime

objectstack-ai/objectstack#23566 · opened

on Oct 15, 2026

2

metadata-protocol: duplicatePackage renames a token that names both a prefixed package object and one of its fields as the object, so a copied view's column or form field names a field the copy does not have (family close-out)

objectstack-ai/objectstack#23561 · opened

on Oct 15, 2026

2

Navigation Menu

Repository navigation

Issues

metadata-protocol: over legacy object rows [package-less, Q], a draft save naming no package answers 200 into Q's draft, which no publish can serve: the save door's D9.9 check judges the request's package before the draft address resolves to Q

spec liveness: the console pin hop to objectui 1f23d5b070fa makes `page.print` and `translation.flows.successMessage` / `errorMessage` read `planned` while the shipped console applies them (family card; the `parentDataSource` leg is #23585)

runtime: an engine `DuplicateRecordError` a sandboxed script body lets propagate leaves the VM as `SandboxError`, so no door recognises it and it answers `409 DUPLICATE_RECORD`, not the ruled `UNIQUE_VIOLATION`

mcp: a tool call that repeats a unique value answers the engine's in-process `DUPLICATE_RECORD` in its error result, not the ruled wire spelling `UNIQUE_VIOLATION` (`create_record`, `run_action`, `resume_run`)

runtime: a declared sqlite datasource whose file cannot be created never settles its connect, so the boot is refused only by a plugin start timeout (30 s, 120 s after PR #23694) that names neither the datasource, the path nor the open error

pm-dispatch: a narrowing-only PR (no schema, no governed path) gets two review tiers: execution-duties.md and `dispatch-gates --tier` owe a contract-review-tier review; `reviewFace` reads the declaration face, `TIER_DEFAULT` exactly

metadata-protocol: an orphan adoption registers a package-less DRAFT view as live — reassignOrphanedMetadata's view write-through has no state gate, so the registry serves a draft the boot never registers (found by #23646)

objectql/mcp: on an environmentId kernel (os dev env_local, the cloud runtime) a runtime-authored object may have no metadata-service copy, so the MCP exposure gate would read apiEnabled false as no declaration (not walked)

os-dev contract: a PR that renames or removes an exported symbol runs the scoped platform-checklist check on its changed files before push (#23653 letter C, item 3)

pm-dispatch: the decision-analysis self-check line and SKILL.md axis 4 give opposite recommendations when axis 1 picks a new derived check (measured on #23653)

metadata-protocol: a draft save naming no package, of an item never published into a package whose only draft is bound to package Q, writes a package-unbound draft beside it, while the publish and discard naming none act on Q's (after PR #23654)

spec(ui): `page:header` `showStar` is declared but no longer reaches a user in the reference console: since objectui#12427 the star draws only where a host wires a favorites toggle, and no host does

spec: the stack's `datasources` accepts a datasource named `default`, which every boot refuses as host-reserved — `defineStack` / `os validate` / publish pass a config that boots in no posture

cli/serve --dev: an OS_DATABASE_URL whose scheme the CLI does not recognise is ignored in silence, and the boot serves an in-memory SQLite store instead of the database the operator named

i18n(spec): no exported resolver localizes a form view's `sections` through the declared `objects.<object>._sections.<name>` keys, so a server-side reader (the public form read, #23497) cannot translate a section label without copying the locale chain

cli/serve: with --no-server the ready banner still prints "API: http://localhost:PORT/" and an MCP connect URL, though no HTTP server is composed and nothing listens

cli: read-only arms still say they wrote nothing on a SQLite file whose journal mode their connect switches (security-catalog-overlays preview, recorded-by, resume, secret orphans / rewrap, storage orphans) — the remainder of #23562

spec: `PageTypeSchema` says `home` is "the platform-level landing page" and `utility` a "floating utility panel", but the landing is the first navigation item and both types render as ordinary inline pages

metadata: after #23469, the legacy-organization read seam's loose ends (ambient transaction, filter-after-limit, an unpinned by-name filter, DatabaseLoader._count, a 404 where a named refusal belongs) and the ceremony wording

[Decision] Three spec contract dev agents in one container queued ~70 min each on the shared verify lock: leave package `test:repo` to CI, and send build-heavy cards to cloud sessions?

verify family split (#15953), services rows: service-automation regression tests that replace hotcrm's platform-semantics pins (rows 8, 11)

verify family split (#15953), engine rows: objectql and driver-sql regression tests that replace hotcrm's platform-semantics pins (rows 3, 4-5, 7, 8, 10, 11)

spec(ui): `RecordRelatedListProps.parentDataSource` still says `[PLANNED — not yet rendered]` and the liveness note says nothing reads it — objectui renders it since objectui PR #12407

lint: a locale pack's `picklists.<name>` translations are never checked — an option key that is not in the list, or a list no package declares, passes `os lint --strict` and is dropped silently at runtime

metadata-protocol: duplicatePackage renames a token that names both a prefixed package object and one of its fields as the object, so a copied view's column or form field names a field the copy does not have (family close-out)