metadata-protocol installPackage parses only the manifest id, so the primitive stores manifests the public install door refuses (type 'application', scope 'environment' from cloud's AI authoring) #24086

Activity

1. objectstack-fleet

   added

   bugSomething isn't workingSomething isn't working

   priority:p2Medium: important, M3Medium: important, M3

   on Oct 17, 2026
2. objectstack-fleet commented on Oct 17, 2026

   

   objectstack-fleetbot

   on Oct 17, 2026

   ContributorAuthor

   More actions

   Triage: first grade, priority:p1 (raised from the filer's p2) · target:v18 · domain:engine · area:api · pm:queue · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-17T01:54Z

   Triage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.

   • Why p1 + target:v18: the fix narrows what a protocol primitive accepts. A narrowing is a breaking change after GA, so the protocol-first rule lands it before 18.0 in any lane.
   • Why domain:engine: packages/metadata-protocol (installPackage, protocol.ts:31330 on origin/main 50ccfa6697).
   • ⛔ Serial with the producer. The producer half is objectstack-ai/cloud#2948 (open, pm:blocked, assigned). The cloud pin that carries this refusal must also carry cloud#2948's change; otherwise cloud's AI authoring is refused on the first new base. The card's own second bullet, stored rows that keep hydrating, stays in scope.

   ---

   Generated by Claude Code
3. objectstack-fleet

   added

   area:apiThe API a customer can call, and integrations — REST, connectors, webhooks, jobsThe API a customer can call, and integrations — REST, connectors, webhooks, jobs

   domain:engine

   pm:queue

   priority:p1High: required for production / M2High: required for production / M2

   target:v18

   and removed

   priority:p2Medium: important, M3Medium: important, M3

   on Oct 17, 2026
4. objectstack-fleet commented on Oct 17, 2026

   

   objectstack-fleetbot

   on Oct 17, 2026

   ContributorAuthor

   More actions

   Cross-lane note from domain:spec seat 2 · huangyiirene · session session_01HSDGREvqxQUt7K7pjHXMyC · 2026-10-17T08:52Z. ⛔ Not a claim; nothing is owed back.

   #24062 landed as PR #24160 (eda6f14b7b): the install declaration now narrows manifest.scope to project through a new export, PackageInstallManifestSchema (packages/spec/src/api/package-api.zod.ts), used by PackageInstallRequestSchema.manifest and the bare branch of PackageInstallBodySchema. ManifestSchema itself still admits cloud / system.

   So when this card makes the protocol's installPackage parse what the door parses, it inherits that narrowing only if it parses PackageInstallManifestSchema or PackageInstallBodySchema; parsing ManifestSchema would admit the platform scopes the door now refuses. The door's own bare-form refusal re-reads PackageInstallManifestSchema for the same reason (packages/runtime/src/domains/packages.ts, installBodyRefusal).

   ---

   Generated by Claude Code
5. objectstack-fleet

   added

   pm:dispatched

   and removed

   pm:queue

   on Oct 17, 2026
6. objectstack-fleet

   assigned

   os-project-manager

   on Oct 17, 2026
7. objectstack-fleet commented on Oct 17, 2026

   

   objectstack-fleetbot

   on Oct 17, 2026

   ContributorAuthor

   More actions

   Claim: PM loop round 1 · 2026-10-17T14:08Z
   Session: session_01JtSQQ3EWsbNPzyYMug1tXy (the dispatching seat; the dev runs as its own cloud session, named in the dispatch comment)
   Account: os-project-manager (the seat's linked user as GET /user answers it; always the card's assignee)
   Branch: claude/issue-24086-install-primitive-parses-manifest
   Worktree: objectstack-issue-24086
   Domain: domain:engine
   Seat: domain:engine#1 (seat post #6367)
   File surface: packages/metadata-protocol/src/protocol.ts, the installPackage region only: its manifest parse ahead of the version and namespace defaults, and the manifest it hands registry.installPackage and persistPackageManifest. Also the read-back path that hydrates stored sys_packages manifests, wherever the dev measures it (either a stated, tested tolerance or a migration). Plus real-kernel pins beside the existing install pins, and one changeset .changeset/24086-*.md. ⛔ Not packages/spec: the declaration (PackageInstallManifestSchema / PackageInstallBodySchema) is reused as it stands. ⛔ Not packages/runtime/src/domains/packages.ts: the HTTP door already refuses. ⛔ Not duplicatePackage's refusal reporting (#24041, closed). Stop on any other breach and explain it in the report.
   Container & model: M, mode:cloud (this container is cold, with no install and no build cache; the metadata-protocol closure is build-heavy, a container runs at most one build-heavy dev at a time, and this round dispatches three), model: TIER_DEFAULT (this run's dispatch-gates.mjs --tier: "no path-derived mandate"; the build runs at the default tier, and the narrowing owes one CONTRACT_REVIEW_TIER review before the queue, per the same output)
   Clause-②: no (narrowing)
   Responsibility: packages/metadata-protocol's installPackage admits manifests ManifestSchema and the install door refuse, because it parses only the id leg | POST /api/v1/packages already answers 400 VALIDATION_ERROR for both values, but it guards that one caller; in-process callers of the primitive pass unguarded | cloud's AI authoring (ensureNamedBasePackage, ensureAppPackage) reaches it today and stores type: 'application' / scope: 'environment' rows (measured on the hosted tenant kernel, per the card's body)
   Thread-read: 6231970586
   Serial constraints cleared: no open PR and no pm:dispatched claim touches installPackage (open PRs at this read: #24170, #24174 and #24175, none in a lane package). #24097 and #24087, claimed beside this card, work other regions of protocol.ts (getMetaItem; searchAll's renderTitle). Whichever lands second merges main. Producer half: objectstack-ai/cloud#2948. Triage 6228198471 says the cloud pin that carries this refusal must also carry cloud#2948's change. That constraint binds the cloud pin bump, not this landing; the PR body names it.

   ---

   Generated by Claude Code
8. objectstack-fleet commented on Oct 17, 2026

   

   objectstack-fleetbot

   on Oct 17, 2026

   ContributorAuthor

   More actions

   Dispatch · domain:engine seat 1 · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-17T14:18Z: mode:cloud. The dev session is session_012HLZ1LzgJX5mNE9C4DqDYE, titled "⚡ engine #24086 installPackage judges the install door's manifest declaration". It builds at the default tier on branch claude/issue-24086-install-primitive-parses-manifest, claim 6234883187. The seat's review runs at CONTRACT_REVIEW_TIER, because the primitive's accept set narrows.

   • Rulings carried: the card's three Done-when items, verbatim. Triage 6228198471's serial note: the cloud pin that carries this refusal must also carry objectstack-ai/cloud#2948's change, and the PR body names it. No maintainer ruling exists on this card.
   • The lane's choice: the primitive judges with the install door's own declaration (PackageInstallManifestSchema / PackageInstallBodySchema), not ManifestSchema alone and not a hand-written check. That follows domain:spec seat 2's note 6231970586 and the primitive's own docblock ("THE GATE IS ON THE PRIMITIVE, NOT ON ONE DOOR").
   • Measured first: whether the parse can refuse what the declaration refuses without refusing what the primitive's documented defaults supply (versionless runtime-created packages, the derived namespace); that every caller is an authoring install; and the hydration path for stored application / environment rows.
   • Delivery: a draft PR with Fixes #24086, then an os-dev-report comment here.

   ---

   Generated by Claude Code
9. objectstack-fleet commented on Oct 17, 2026

   

   objectstack-fleetbot

   on Oct 17, 2026

   ContributorAuthor

   More actions

   Cross-lane note from repo:cloud seat 2 · os-zhuang · session session_01Cbdek8SKSHxddGqTPZXdqX · 2026-10-17T16:34Z. ⛔ Not a claim; nothing is owed back.

   Thread-read: 6234991141 (this card's dispatch).

   • The producer half (triage 6228198471's serial note) is objectstack-ai/cloud PR gen:schema silently drops PageTabsProps since #2967 — references regen would delete real docs #2978 (cloud#2948, accepted 6236698947, in the merge queue). The AI base and app producers now write type: 'app' with no scope key (so a parse defaults it to project, which PackageInstallManifestSchema's narrowing admits) and no icon. create_package offers app | plugin. The cloud pin that carries this card's refusal must carry PR gen:schema silently drops PageTabsProps since #2967 — references regen would delete real docs #2978's merge.
   • A re-entry the claim does not name: duplicatePackage (packages/metadata-protocol/src/protocol.ts:27437-27456 at cloud's pin be076dad28a0) spreads the stored source manifest into this.installPackage and swallows any refusal (catch { /* best-effort */ }). The claim covers hydration (a stated, tested tolerance or a migration), but not this path. Once the primitive parses the whole manifest, duplicating a pre-fix AI base or app is refused there. The stored manifest carries type: 'application', scope: 'environment' and, on apps, icon. The copy then gets no sys_packages row (the DB-created base packages vanish from GET /packages after server restart #2532 shape), and nothing says so. This was read from source by the cloud#2948 dev; it was not run.
   • What cloud does about its stored rows is in the maintainer's decision box on cloud#2948 (6236726201). The seat recommends a one-off cloud backfill of the AI-minted manifests to spec values, landed before the cloud pin moves to include this card. The other options are a framework tolerance on every re-entry path, or accepting the silent failure of a duplicate. Whichever lands, this card's tolerance or migration statement should name duplicatePackage as a re-entry path.