feat(objectql,cli,plugin-webhooks)!: 18.x step 4: the walled lift (8b walled half, the os serve lift, the declared-webhook name guard, declared webhooks deployment-wide) by objectstack-fleet[bot] · Pull Request #24667 · objectstack-ai/objectstack

wip(plugin-webhooks): declared webhooks read from the registry; seeder retired; webhook activation door

claude

committed

420fb8c

test(plugin-webhooks): pin the registry read, the ledger switch and the 18.0 dual read; door pins for webhook

claude

committed

e44c642

wip: liveness ledger re-anchored to the registry read; dogfood proof asserts no row and a dispatch

claude

committed

8189a84

docs+ledger: the registry read named across spec comments, liveness, the checklist, the webhooks guide and the showcase; changeset

claude

committed

e412cb8

spec(liveness): state counts regenerated; isActive named at the dispatcher's switch read

claude

committed

bdad70b

fix(plugin-webhooks): a declared webhook is deployment-wide when the posture builds no wall, as its 18.0 seeded copy stamped with the Default Organization was

claude

committed

723af97

fix(gates): tenant-audit census regenerated for the seeder's two retired writes; the declared-webhook double is drivable by the limit gate

claude

committed

e0a6dc9

test(plugin-webhooks): the fake engine refuses a WHERE combinator it does not implement

claude

committed

6b3042a

fix(lint,showcase): the dead label/description verdict is carried to authors; checklist and admitsOrganization docblock say a declared webhook is deployment-wide under single

claude

committed

820121c

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

claude

committed

b378ff5

test(dogfood): the R2 harness pins one delivery per task change from the fixture's customized declared-webhook mirror

claude

committed

c3b1452

test(dogfood): the harness case switches the declaration on, so it can fail on a double delivery

claude

committed

9bce0aa

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

claude

committed

7e580dc

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

claude

committed

fa6a837

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

claude

committed

b4ae8e6

Merge remote-tracking branch 'origin/claude/issue-24529-8b0g-webhooks-registry' into claude/issue-24580-walled-lift

claude

committed

a2e1e41

feat(objectql)!: lift the platform-object system-insert exemption under the walled postures (ADR-0131 C8 stage 8b, walled half)

claude

committed

bea5245

feat(plugin-webhooks)!: refuse a sys_webhook insert or rename onto a declared webhook's name with 409 RESOURCE_CONFLICT

claude

committed

31a9d26

chore(changeset): the walled platform-insert refusal and the declared webhook name guard

claude

committed

f3782ae

test(plugin-security): walled fixtures carry the organization a walled system insert needs

claude

committed

758915b

docs(system-context): census row for the declared webhook name guard; the guard test's fake refuses combinators

claude

committed

37a67fa

feat(plugin-webhooks)!: a declared webhook is deployment-wide under every posture (ruling A on the walled shape)

claude

committed

2d88dd2

test(dogfood): the walled door pin holds manage_metadata, so only the posture rule refuses it

claude

committed

75f6942

chore(changeset): declared webhooks are deployment-wide under the walled postures

claude

committed

a4cee54

feat(cli): os serve boots a walled posture again — the 18.0 refusal, its doctor row and fix-list note retire, and the seven walled e2e cases return

claude

committed

45898db

Merge remote-tracking branch 'origin/main' into claude/issue-24580-walled-lift

claude

committed

fdfc842

Navigation Menu

Repository navigation

feat(objectql,cli,plugin-webhooks)!: 18.x step 4: the walled lift (8b walled half, the os serve lift, the declared-webhook name guard, declared webhooks deployment-wide) - #24667

feat(objectql,cli,plugin-webhooks)!: 18.x step 4: the walled lift (8b walled half, the os serve lift, the declared-webhook name guard, declared webhooks deployment-wide)#24667
objectstack-fleet[bot] merged 33 commits into
mainfrom
claude/issue-24580-walled-lift

Commits on Oct 19, 2026

wip(plugin-webhooks): declared webhooks read from the registry; seeder retired; webhook activation door

test(plugin-webhooks): pin the registry read, the ledger switch and the 18.0 dual read; door pins for webhook

wip: liveness ledger re-anchored to the registry read; dogfood proof asserts no row and a dispatch

docs+ledger: the registry read named across spec comments, liveness, the checklist, the webhooks guide and the showcase; changeset

spec(liveness): state counts regenerated; isActive named at the dispatcher's switch read

fix(plugin-webhooks): a declared webhook is deployment-wide when the posture builds no wall, as its 18.0 seeded copy stamped with the Default Organization was

fix(gates): tenant-audit census regenerated for the seeder's two retired writes; the declared-webhook double is drivable by the limit gate

test(plugin-webhooks): the fake engine refuses a WHERE combinator it does not implement

fix(lint,showcase): the dead label/description verdict is carried to authors; checklist and admitsOrganization docblock say a declared webhook is deployment-wide under single

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

test(dogfood): the R2 harness pins one delivery per task change from the fixture's customized declared-webhook mirror

test(dogfood): the harness case switches the declaration on, so it can fail on a double delivery

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

Merge remote-tracking branch 'origin/main' into claude/issue-24529-8b0g-webhooks-registry

Merge remote-tracking branch 'origin/claude/issue-24529-8b0g-webhooks-registry' into claude/issue-24580-walled-lift

feat(objectql)!: lift the platform-object system-insert exemption under the walled postures (ADR-0131 C8 stage 8b, walled half)

feat(plugin-webhooks)!: refuse a sys_webhook insert or rename onto a declared webhook's name with 409 RESOURCE_CONFLICT

chore(changeset): the walled platform-insert refusal and the declared webhook name guard

test(plugin-security): walled fixtures carry the organization a walled system insert needs

docs(system-context): census row for the declared webhook name guard; the guard test's fake refuses combinators

feat(plugin-webhooks)!: a declared webhook is deployment-wide under every posture (ruling A on the walled shape)

test(dogfood): the walled door pin holds manage_metadata, so only the posture rule refuses it

chore(changeset): declared webhooks are deployment-wide under the walled postures

feat(cli): os serve boots a walled posture again — the 18.0 refusal, its doctor row and fix-list note retire, and the seven walled e2e cases return

Merge remote-tracking branch 'origin/main' into claude/issue-24580-walled-lift

Commits on Oct 20, 2026

test(plugin-sharing,plugin-auth): walled fixtures seed their organization-less legacy rows through the driver; the activation-ledger fixture has no organization column, as the platform object

fix(objectql): a cited walled bridge keeps sys_secret and sys_flow_credential organization-less system inserts landing until the steps 5+6 flips

chore(changeset): the walled insert changeset names the two bridged tables and spells the column opt-out systemFields

Merge remote-tracking branch 'origin/main' into claude/issue-24580-walled-lift

docs(qa): re-point the walled checklist legs and RUNNER.md's environment facts to the restated R4 — a walled os serve boots once provisioned

test(service-datasource): alias objectql and platform-objects/system to source for the walled credential-bind pin

Merge remote-tracking branch 'origin/main' into claude/issue-24580-walled-lift