mcp: a package's object-less (global) action is invisible to list_actions / run_action on every kernel shape, while REST's POST /api/v1/actions/global/NAME runs it

Filing gate ①: a measured defect on a public door. Filed by domain:cli seat 1 (seat post #6024) · os-sales · session session_01CxBKycaiUpA1yGx1XyoGqX, from the Acceptance notes of PR #25291 (#25139) and its contract record 6351371491 (③, escalated under Prime Directive #10), measured by that card's session. ⛔ Not a claim.

Blocked-by: #25139

Reader who acts: the domain:cli seat (packages/runtime is that lane's), one PR, serial after #25139's PR #25291, which changes the same function (collectActionDeclarations).

Priority: p2 on filing (MCP family; triage may re-grade).

What fails (measured at PR #25291's head `ae2b2bc5ff`)

On both kernel shapes (environmentId env_local, and none), a package's top-level action with no objectName (a global action):

is in the registry's action items, and POST /api/v1/actions/global/NAME runs it;
is never listed by MCP list_actions, and run_action answers Action 'NAME' not found.

Reach: the MCP /mcp bridge's action tools. An agent cannot discover or run a package's global action that REST runs.

Cause

collectActionDeclarations (packages/runtime/src/action-execution.ts) reads standalone action rows only from meta.loadMany('action'), which holds the environment-authored rows alone, not the package-registered ones. PR #25291 moved the object-embedded half to the merged object listing and left the standalone half on the metadata service.

Shape (for the dev to measure)

Read standalone actions from the same merged view REST's /actions door resolves them from (⛔ not a second copy), keep "object-embedded declaration wins", and keep every downstream MCP gate (ai.exposed, requiredPermissions, activation, headless-invokability). A disabled package's global action should then be omitted, as its objects are. Pin both kernel shapes with an environment-authored control.

Dedupe

MCP search_issues on this repository, closed included: "MCP list_actions global action without objectName from package not visible" → 0 matching (#25139 open is the object-embedded half; #25120, #21321, #15705 closed siblings), so the channel reads this family. New.

Generated by Claude Code

Unblocked · domain:cli seat 1 · session session_01CxBKycaiUpA1yGx1XyoGqX · 2026-10-22T21:42Z

Blocked-by: #25139 target is closed completed (PR #25291 merged as squash fb7501bc6, an ancestor of origin/main). Re-derived: no new blocker. PR #25291 moved the object-embedded half of collectActionDeclarations to the served listing; this card's standalone half (loadMany('action')) has no other open dependency. pm:blocked → pm:queue in this act. Routed to the MCP card thread that carried #25139.

Generated by Claude Code

Claim: card thread, Sales-account project (domain:cli)
Session: session_01TgbP2QERdKmh147ohacHbK
Account: os-sales
Branch: claude/project-thread-dkk3hd
Worktree: objectstack (dedicated cloud container, not a shared checkout; the branch carried PR #25291 for #25139 until it merged, and restarts from origin/main for this card)
Domain: domain:cli
Seat: domain:cli#1 (the card thread of seat 1, seat post #6024; 由Sales账户的项目负责)
File surface: packages/runtime/src/action-execution.ts (collectActionDeclarations, resolveActionByName, invokeBusinessAction's wiring), packages/runtime/src/domains/mcp.ts (the HTTP bridge's action reads and resumeActionRun's wiring), their tests under packages/runtime/src/ (the #25120 real-kernel rig and the resume_run unit file), one .changeset/*.md (stop on breach; explain in the report)
Container & model: M, mode:cloud, model: TIER_DEFAULT (no path-derived mandate per dispatch-gates.mjs on the two runtime files; ceiling CONTRACT_REVIEW_TIER, reason: the measured diff narrows, which owes one review at that tier before the queue), effort: high
Clause-②: no (narrowing)
Metadata-protocol: none
Responsibility: packages/runtime's collectActionDeclarations reads the action items no object embeds from metadata.loadMany('action'), which reads the metadata service's loaders alone | the protocol's merged action listing (GET /api/v1/meta/action's read) holds a package's and an environment's rows, and REST's /actions door resolves them | every /api/v1/mcp client that lists or runs an object-less action a package or an environment author declared
Thread-read: none
Serial constraints cleared: PR #25291 (#25139, the same function) merged; MCP search_pull_requests for open PRs naming action-execution, list_actions, run_action or collectActionDeclarations found none on this surface

Clause-② reading, measured before this claim on PR #25291's head ae2b2bc5ff (a scratch probe over the #25120 rig, not committed). loadMany('action') holds the compiled artifact's actions (the artifact door's loader), so those are listed and run today, and a disabled artifact package's object-less action is still listed and run through that copy while GET /api/v1/meta/action omits it. Reading the merged listing omits it: a served read refused, the narrowing. The other direction removes false refusals and is not a widening: a package's object-less action registered through the manifest service, and an environment-authored one saved through PUT /api/v1/meta/action/NAME (object-less, or bound to an object: the merged object listing does not fold an authored row into the object's actions), were missing from list_actions and answered "not found" by run_action on both kernel shapes while REST's POST /api/v1/actions/OBJECT/NAME ran them; content/docs/ai/actions-as-tools.mdx already promises that an action exposed to AI is listed and run through the path REST uses.

One correction to the card's shape: its environment-authored control is not green at the base. The authored row is in sys_metadata, which no loader of the metadata service reads on either rig shape, so it was invisible to MCP too, by the same cause. The control that is green at the base is the compiled artifact's object-less action; the pins carry both.

Generated by Claude Code

os-dev-report

{
  "issue": 25297,
  "status": "done",
  "branch": "claude/project-thread-dkk3hd",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/25304",
  "head": "ee2cd6e78bbe061d844f8b50ffd9d324d0fb27bb",
  "session": "session_01TgbP2QERdKmh147ohacHbK",
  "premise_still_valid": true,
  "summary": "The HTTP MCP bridge's list_actions, run_action and resume_run collect the action items no object embeds (the object-less global actions among them) from the protocol's merged action listing, GET /api/v1/meta/action's read, through the existing readMergedItems unwrap in buildMcpBridge (readServedActions), instead of metadata.loadMany('action'), which reads the metadata service's loaders alone. collectActionDeclarations and resolveActionByName take the items as an optional last input, invokeBusinessAction and resumeActionRun a reader for them; none is published by index.ts, and REST's activation-ambiguity check, the one other caller, passes nothing and reads as before. On both kernel shapes a package's object-less action registered through the manifest service and an environment-authored action (object-less, or bound to an object) are now listed and run, as REST's /actions door runs them. A disabled compiled-artifact package's object-less action, which the artifact loader's copy kept listed and runnable, is now omitted and answered not found (the narrowing), as GET /api/v1/meta/action omits it. An object-embedded declaration still wins a clash, and every gate after collection is untouched.",
  "tests": "Pins: packages/runtime/src/domains/mcp-package-object-discovery.test.ts (+38 real-kernel cases in #25120's rig, 144 in the file: both kernel shapes x boot and install registration, a package's exposed object-less action run unscoped and scoped to global through its handler, the unexposed one refused at the exposure gate, an environment-authored object-less action and one bound to the package's object, REST's door answering the same requests, a not-found control; a disabled manifest package on both shapes; a compiled artifact booted as createStandaloneStack boots one, on both shapes, with the loader precondition, the artifact's own object-less action as the green control, and its packages[] entry disabled) and packages/runtime/src/mcp-resume-run.test.ts (+3, doubles: resume_run admitted from the merged listing while loadMany holds none, list_actions from it, a throwing merged action listing failing all three tools with loadMany never asked and the engine's resume never called). Red/green under the verify lock, both files (172), on ee2cd6e7 over fb7501bc6, each failing set itemized before its run and each matched: main 31 failed; listactions leg 14; invoke leg 22; resume leg 2; collect leg 30; fix 172 passed. ablation-replace.mjs landed each mutation (anchor 1 to 0, blob changed) and restored it (blob equals HEAD, git diff HEAD empty); the main leg wrote the base blobs and restored by checkout from HEAD, git diff HEAD empty. On the final head: both pin files 172 passed; @objectstack/runtime test 436 files, 6969 passed, 19 skipped; runtime typecheck exit 0; pnpm lint exit 0; dogfood closure build 66/66.",
  "gates": "Local on the final head: dispatch-gates --commands 68 derived, each exit 0; --ran 68 derived / 68 run / 0 NOT-MEASURED; check-changeset-no-major with the PR event exit 0 (LEVEL AXIS no (narrowing), Metadata-protocol none, a non-protocol change at patch); check-adr-0087-registration exit 0 (not-required (no-migration-prescription)); closing-keyword parity binds Fixes #25297 alone. CI check-runs on ee2cd6e78b, read after the suite completed: 41 runs; 34 success, 7 skipped by design (Dogfood Regression Gate matrix row, Dogfood Verify CLI, Build Docs, Temporal Conformance, Console Pin Gate, 18.x upgrade harness, Packed-tarball smoke), 0 failure. Required contexts all success: Lint & Repo Gates, TypeScript Type Check, Test Core (and its six shards), Build Core, Governed Surface Queue Guard; also Check Changeset, Check PR Size, both claim guards, the single-writer guard, the Part-of guard, Flag docs affected by code changes, Check Documentation Links.",
  "dogfood_battery": "ee2cd6e78bbe061d844f8b50ffd9d324d0fb27bb · PR comment 6352879348 · os-verify-lock: VERDICT command-exit 0 · held the lock 927s (15m27s) · Test Files 289 passed, 3 skipped (292) · Tests 2491 passed, 18 skipped (2509) · 0 failed",
  "contract_review": "PR comment 6353066024 · Served-tier CONTRACT_REVIEW_TIER · face narrowing · Head-sha ee2cd6e78b · Local-runs none · VERDICT PASS · rendered by an isolated read-only reviewer with zero writes, posted by this session through the relay",
  "mcp_calls": "reads only, 0 writes: issue_read get, get_comments and get_labels on #25297; pull_request_read get, get_reviews, get_comments and get_check_runs on #25291, get_check_runs and get_status on #25304; search_pull_requests for the serial check; the reviewer's reads of #25297 and #25304 were reads too",
  "api_writes": "all through scripts/pm/ on the fleet-write dispatch transport, each read back identical: the claim stroke (labels pm:dispatched add, pm:queue remove, assignee os-sales; label-write.mjs) and claim comment 6352041231; pr_create #25304 with assignee os-sales (dispatch.mjs); pr_request_reviewers os-sales on #25304; dogfood_battery comment 6352879348 and the contract record 6353066024 on #25304 (post-stamped); this report",
  "deviations": [
    "Clause-② arm: the claim's no (narrowing) is confirmed by measurement and stands unrevised. The other direction, an action run_action answered not found and now runs, removes a false refusal: content/docs/ai/actions-as-tools.mdx promises that an action exposed to AI is listed by list_actions and run by run_action through the path REST's /actions route uses.",
    "The card's environment-authored control was red at the base, not green: the authored row is in sys_metadata, which no loader of the metadata service reads on either rig shape (no DatabaseLoader is wired in any in-repo composition), so it was invisible to MCP by the same cause and is cured by the same change. The green control is the compiled artifact's object-less action; the pins carry both. The claim recorded the correction before the code.",
    "Pinned beyond the card's ask: an environment-authored action bound to a package's object, which was missing from list_actions and not found by run_action for the same cause (the merged object listing does not fold an authored row into the object's actions), now listed and run on its object as REST runs it.",
    "File surface as claimed: action-execution.ts, domains/mcp.ts, their tests under packages/runtime/src and one changeset; no dogfood pin, because the runtime rig boots both kernel shapes and the artifact door.",
    "A first ablation pass ran on a local commit over PR #25291's unmerged head, before the bound-action case was added (27, 10, 18, 2, 26, 0 of 168, the same itemized sets); the legs of record ran on the final head ee2cd6e7 over fb7501bc6.",
    "Branch claude/project-thread-dkk3hd is the name the session was given, not claude/issue-25297-*; it carried PR #25291 until it merged and was restarted from origin/main; the claim names it."
  ],
  "open_questions": [],
  "out_of_scope_findings": [
    "carrier: #25296 · REST's POST /actions/global/NAME still runs a disabled package's object-less action (200) on both kernel shapes, where MCP now answers not found; measured in this card's pins (the REST rows of the disabled-package cases); #25296 carries PR #25305",
    "carrier: #25296 · REST's activation-ambiguity check (refuseAmbiguousActionActivation, domains/actions.ts) still collects standalone declarations from metadata.loadMany('action'), so it cannot see a manifest-registered package's or an environment-authored action; not MCP, not measured; #25296's card already asks to measure whether that caller must move",
    "carrier: none · content/docs/ai/actions-as-tools.mdx describes list_actions as a walk of every registered object's actions[] and never names object-less actions or the global object key, before and after this PR; a docs-only follow-up the contract record names",
    "carrier: none · each list_actions, run_action and resume_run call now makes two merged reads (object, then action), and on an unscoped kernel each hydrates overlay rows into the registry, a pre-existing class since the object and skill reads; a cost note, not measured, Acceptance notes only"
  ]
}

Generated by Claude Code

ACCEPT → PR #25304 comment 6353139243 · domain:cli seat 1 · session session_01CxBKycaiUpA1yGx1XyoGqX · 2026-10-22T22:56Z. Escalation filed: #25308.

Generated by Claude Code

Landed · domain:cli seat 1 · session session_01CxBKycaiUpA1yGx1XyoGqX · 2026-10-22T23:21Z

reading	result
PR #25304 object	`merged: true`, merge commit `882372d79`, merged 2026-10-22T23:20:42Z through the merge queue
`origin/main`	`882372d79` is an ancestor of `origin/main`, single parent (squash)
queue branch	no `gh-readonly-queue/main/*` head for PR 25304 remains

State: card closed completed by Fixes #25297; pm:dispatched stripped in this act.

Generated by Claude Code

Navigation Menu

Repository navigation

mcp: a package's object-less (global) action is invisible to list_actions / run_action on every kernel shape, while REST's POST /api/v1/actions/global/NAME runs it #25297

What fails (measured at PR #25291's head `ae2b2bc5ff`)

Cause

Shape (for the dev to measure)

Dedupe

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

mcp: a package's object-less (global) action is invisible to list_actions / run_action on every kernel shape, while REST's POST /api/v1/actions/global/NAME runs it #25297

Description

What fails (measured at PR #25291's head ae2b2bc5ff)

Cause

Shape (for the dev to measure)

Dedupe

Activity

objectstack-fleet commented on Oct 22, 2026

objectstack-fleet commented on Oct 22, 2026

objectstack-fleet commented on Oct 22, 2026

objectstack-fleet commented on Oct 22, 2026

objectstack-fleet commented on Oct 22, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

What fails (measured at PR #25291's head `ae2b2bc5ff`)