Setup field help is written for developers ("Foreign key to sys_user.id", "via isGrantActive", "(P3 digest middleware)", "Reaper / Rotator / Archiver") and shows inert fields — rewrite it for admins and hide Last Certified At (hotcrm#2194 T2-U02) #25331

Activity

1. objectstack-fleet

   added

   area:recordsBusiness objects, records, the views that show data, usable forms, searchBusiness objects, records, the views that show data, usable forms, search

   bugSomething isn't workingSomething isn't working

   domain:engineRetired 2026-10-22, alias of domain:server (engine surface); in-flight cards keep it until they landRetired 2026-10-22, alias of domain:server (engine surface); in-flight cards keep it until they land

   pm:queue

   priority:p2Medium: important, M3Medium: important, M3

   pm:dispatched

   and removed

   pm:queue

   on Oct 23, 2026
2. objectstack-fleet

   assigned

   os-tesla

   on Oct 23, 2026
3. objectstack-fleet commented on Oct 23, 2026

   

   objectstack-fleetBot

   on Oct 23, 2026

   ContributorAuthor

   More actions

   Claim: PM loop round 1
   Session: session_01RsXNmkeex9WY5XsjNwtRYv (a card thread scheduled by the project's coordinator, which follows .claude/agents/os-dev.md as its role file; the seat session is session_014Hse9cj2i4o5UAVrd21NKr)
   Account: os-tesla
   Branch: claude/project-thread-xlmv3p (the thread's designated branch: a card thread can push only that branch, a measured platform exception to claude/issue-<n>-<slug>)
   Worktree: objectstack-issue-25331
   Domain: domain:engine
   Seat: domain:engine#1 (seat post #6367)
   File surface: packages/platform-objects (identity/apps objects + generated bundles), plugin-security/src/objects/, plugin-approvals/src/sys-approval-delegation.object.ts (the via isGrantActive help only), service-messaging/src/objects/notification-preference.object.ts, objectql/src/lifecycle/lifecycle-settings.ts, their bundles and one pin (stop on breach; explain in the report)
   Container & model: M, mode:thread, model: TIER_DEFAULT (dispatch-gates --tier: no path-derived mandate), effort: high
   Clause-②: no
   Metadata-protocol: none
   Responsibility: the platform's own object declarations and console produce it | no existing path covers it | every administrator on Setup reaches it today
   Thread-read: none
   Serial constraints cleared: #25332 (this seat, in flight) regenerates the same platform-objects bundles from other source lines: parallel, the second to land re-runs the generator after merging main. #25280 (domain:services, queued) owns sys-approval-delegation's organization_id help; this card leaves that line alone. Seat 2's #25278 / #25295: no shared file in these regions (#25295 is create_user / invite visibility).

   Clause-② reading: no (help text and form visibility only; no accept set moves). Dispatch order: /mnt/project-files/engine-seat1/dispatch-25331.md (+ common.md). Ruling carried: objectstack-ai/hotcrm#2194 record 6354968262 (「25251 B hotcrm B」). Claimed 2026-10-23T03:46Z.

   ---

   Generated by Claude Code
4. objectstack-fleet commented on Oct 23, 2026

   

   objectstack-fleetBot

   on Oct 23, 2026

   ContributorAuthor

   More actions

   os-dev-report

   {
     "issue": 25331,
     "status": "done",
     "branch": "claude/project-thread-xlmv3p",
     "pr": "https://github.com/objectstack-ai/objectstack/pull/25377",
     "session": "session_01RsXNmkeex9WY5XsjNwtRYv",
     "premise_still_valid": true,
     "summary": "Every developer string on the card is rewritten as administrator help in the sources (plugin-security user_id / permission_set / access-review pair, plugin-approvals valid_from only, service-messaging digest and quiet_hours, objectql Data Lifecycle settings, platform-objects sys_user ai_access and locale plus every OAuth reference field), en bundles regenerated and zh-CN / ja-JP / es-ES translated by hand. last_certified_at and certified_by on both assignment objects are hidden: true (columns kept). Pinned by five new entries in the four existing admin-copy vocabulary tests plus a new objectql lifecycle-settings copy test. Head ee5da23123.",
     "tests": "head ee5da23123: pnpm turbo run test --only --continue on metadata-core 19/19 files, platform-objects 88/88, plugin-security 212/212, plugin-approvals 94/94, service-messaging 60/60, objectql 465/465 (os-verify-lock VERDICT command-exit 0). First run red in 2 platform-objects translation-decision tests reading sys_user.fields.ai_access.help as capability evidence; fixed by keeping 'ai_seat capability' (能力 / ケイパビリティ) in that help. typecheck 6/6 (VERDICT command-exit 0). check-i18n-bundles: 10/10 in sync. No ablation: copy + declared flag; each new matcher entry carries a positive control on the old string.",
     "gates": "dispatch-gates --commands: 71 families run, 70 exit 0; pnpm check:dual-build-cjs-loads exit 3 PREREQUISITE NOT MET (no full workspace build) = NOT MEASURED, CI runs it. check-engine-split-ratio and check-plugin-teardown-shape --self-test first exited 2/3 on a shallow clone, 0 after git fetch --unshallow. --ran with exit codes: 71 accounted, 70 run, 1 NOT-MEASURED. PR check-runs: in_progress at report time.",
     "dogfood_battery": "n/a — no ! in the PR title and Clause-② no without a (narrowing) arm",
     "line_budget": "37 files, +292 / -148 (440 changed lines, generated bundles included)",
     "files_changed": 37,
     "deviations": [
       "packages/metadata-core/src/objects/sys-metadata.object.ts (package_version_id help, one line) is outside the claim's file surface: taken under os-dev rule 3's bounded in-place fix (same class, mechanical, in the population platform-objects' setup-copy-vocabulary test already walks, so the new foreign-key entry could not go green without it). Seat: amend the file surface.",
       "Also rewrote the sibling OAuth reference-field helps (Foreign key to sys_oauth_application.client_id / sys_session.id / sys_oauth_refresh_token.id / sys_oauth_resource.identifier) and sys_user.ai_access's code names, inside the declared platform-objects identity surface, so one form does not mix admin and developer help.",
       "Four source-hashes.generated.ts entries (plugin-approvals and service-messaging, ja-JP and es-ES) dropped by the generator because those leaves are now translated rather than byte copies."
     ],
     "mcp_calls": "3 — mcp__github__issue_read (get, get_comments x2); no write tool",
     "api_writes": "2 — fleet relay pr_create (POST pulls + POST issues/25377/assignees, one action, run 39901364669) and this os-dev-report comment via post-stamped",
     "open_questions": [],
     "out_of_scope_findings": [
       "carrier: none · noted, not filed — 34 platform-objects en field-help leaves still name better-auth (e.g. Managed by better-auth) and a few name code identifiers or table.column paths (sys_business_unit_member.is_primary, sys_file.name); not on the card's list. Dedupe words: better-auth help, admin copy, developer vocabulary",
       "carrier: none · noted, not filed — [ADR-0086 D3] has 0 hits in any bundle; it lives in packages/spec .describe() text (security/capabilities.ts, permission.zod.ts packageId). Whether the Capabilities detail page renders that text is NOT MEASURED (no running console)."
     ]
   }

   ---

   Generated by Claude Code
5. objectstack-fleet commented on Oct 23, 2026

   

   objectstack-fleetBot

   on Oct 23, 2026

   ContributorAuthor

   More actions

   ACCEPT → PR #25377 comment 6357944420 (ready + auto-merge set 2026-10-23T05:15Z).

   ---

   Generated by Claude Code
6. objectstack-fleet

   closed this as completedin #25377on Oct 23, 2026