[objectstack-fleet]

Requested by Tesla · project thread

Fixes #25832
Part of #25677 (decision C aftercare).

Clause-②: no
Metadata-protocol: none

Tier H (skills/**). This PR stays a draft until an authorized GOVERNED_APPROVERS review. It also carries two maintainer-only ratchet entries, listed under 维护者速读 below.

维护者速读(草稿)

改了什么：objectui 的技能包从 ui/skills/objectui 搬进仓根 skills/objectui，去掉 metadata.internal: true，@objectstack/skills 从此带上 objectui 这个技能（共 11 个）。切换 PR 里因为撞门禁被回退的 J 系列 19 号补丁在 main 上重新落地，读这个包的 ui 测试和脚本跟着改路径。

为什么改：你裁的 C 是一个技能目录服务两个产品。切换时用 internal: true 把包藏起来，现在从合并后的仓装技能的 agent 拿不到任何 objectui 技能。

风险与代价（含回滚）：

• 要你点头的第一项（token 棘轮）：scripts/check-skills-token-ratchet.mjs 新增 27 行 CEILINGS，每行按落地计数定价、零余量，发布目录多出 50,614 token；不抬任何已有的上限。
• 要你点头的第二项（角色词基线）：scripts/role-word-baseline.json 新增 1 行 skills/objectui/guides/auth-permissions.md: 13。「role」保留词 38 处里改写 24 处，1 处放进 better-auth 线格式围栏，剩下 13 处是 @object-ui/permissions 真实 API 的 roles 键和 D3 改名的历史说明。
• 回滚就是 revert 本 PR，包回到 ui/skills 并重新隐藏。

席位意见：

你要做的：批准本 PR，就等于同意上面两项入账（27 行定价、角色词基线 1 行 13 处）。如果不同意其中一项，在评论里说明，我按你的意见改。

What changed

• The move (patch 19 of the cutover series, re-applied on main). git mv ui/skills/objectui skills/objectui (27 renames). ui/scripts/skill-bundle-root.mjs decides where the bundle lives (the ui root in fixtures, else the monorepo root above it), and the ui gates (check-skills-paths, check-skill-examples, check-skill-eval-tokens, check-doc-json-fences, check-shell-escape-residue), their tests, markdown-test-inputs, doc-version-claims, layered-read-declared-path-4016 and four package tests read it through the helper. @objectstack/spec's check-skill-examples leaves skills/objectui to the ui gate, which judges it against the built @object-ui/* types. scripts/check-skill-identifier-liveness.mjs indexes ui/packages, where the two identifiers the bundle cites are implemented. The one rejected hunk (doc-version-claims.test.ts import) was re-applied by hand, because main had gained a root-ci import there since the patch was cut.
• skills/objectui/SKILL.md. metadata.internal: true is removed. compatibility: now reads Requires @objectstack/spec 18.x; …, and metadata.version is stamped by check-skill-compatibility-version.mjs --fix (2.0 → 18.1.0).
• Reserved word (ADR-0090 D3). Expression examples gate on data.status, user.email or a position instead of a role field. The testing guide's evaluator example reads user.position. Prose says "positions", "grant key" or "permission checks". The @object-ui/permissions example renames its local array to definitions (the roles prop and keys are the package's real API and stay). UserMenu's comment no longer claims it shows a role, because the component renders none. The better-auth display fields move into a fenced block marked os:vendor-wire better-auth. ui/packages/permissions/src/__tests__/skill-guide-permission-config.test.tsx pins the guide example verbatim, so it carries the same edits.
• visibleOn. guides/schema-expressions.md's "Combined conditions" example uses visibleWhen, the canonical key in @object-ui/types BaseSchema (visibleOn there is @deprecated ADR-0089 — use visibleWhen).
• plugin-development.md. The color input passes value ?? '' instead of a hard-coded black hex fallback. check:pm-skill-id-lint read the all-decimal hex as an issue id. This keeps the epic PM's ruling on patch 19, option (a).
• Token ratchet. 27 CEILINGS rows, each pinned at its landed count with zero headroom, under a comment block that cites decision C. No existing row moves.
• Role-word baseline. One row was added: "skills/objectui/guides/auth-permissions.md": 13. The --update diff touches no other row.
• Readers. skills/README.md points to ./objectui/SKILL.md instead of the objectui repository. ui/skills-lock.json points to ../skills/objectui.
• Changeset. @objectstack/skills patch (.changeset/25832-objectui-skill-in-catalog.md).

The five gates on the card, before → after

"Move" is the raw move commit 0c57048f (patch 19 plus the flag removal, nothing else). "Head" is this PR's head.

Gate	main bbf70614	Move 0c57048f	Head
node scripts/check-skills-token-ratchet.mjs	0 (bundle not in skills/)	1: 27 of 91 files unpriced	0: 81 authored files within ceilings, 10 generator-owned
… --self-test	0	1: 2 failures (unpriced files; SKILL.md ceilings 10 vs 11)	0: 79 cases
pnpm check:role-word	0	1: 7 files, 38 new uses	0
@objectstack/spec repo test src/ui/visibility-alias-keys-retirement.test.ts	—	1 failed / 11 passed (skills/objectui/guides/schema-expressions.md authors "visibleOn")	12 / 12
node scripts/check-ci-filter-parity.mjs (+ --self-test)	0 / 0 (120 assertions)	0 / 0	0 / 0: no count to update, because skills/** is a @objectstack/skills#build input covered by core on main
pnpm --filter create-objectstack test (template-consistency "skills catalog boundary")	0 (bundle hidden by internal: true)	—	0: 18 files / 269 tests, flag removed

The visibility row's "before" was measured on head with only schema-expressions.md restored from 0c57048f. The restore leg was checked with git diff HEAD (empty) and blob 9b97e3c4a6.

Role-word split: 38 → 24 rewritten, 1 fenced (os:vendor-wire better-auth), 13 baselined. The 13 are auth-permissions.md's @object-ui/permissions API (ObjectPermissionConfig.roles, the roles prop and keys, about 9 uses) and the paragraph recording the D3 roles → positions retirement (4 uses).

skills/** readings (lines are the measure; token counts from the ratchet's convention)

• Whole bundle: 5428 → 5434 lines (+6). auth-permissions.md 409 → 416 (the vendor-wire fence). SKILL.md 143 → 142 (the internal line). The other 25 files are unchanged in length. Raw bytes/4 50582 → 50619.
• Changed files: SKILL.md, guides/architecture.md, guides/auth-permissions.md, guides/page-builder.md, guides/plugin-development.md, guides/schema-expressions.md, guides/testing.md and rules/protocol.md. All except the two above keep their line count. skills/README.md stays at 133 → 133.
• Catalog SKILL.md sum: 4383 → 4525 lines (+142, the objectui SKILL.md).
• Priced catalog: ratcheted subtotal +50,614 tokens (the 27 new rows). Bundle total 206,118 tokens. The @objectstack/skills build copies 92 files across 11 skills.

Verification (head 12e779c)

• skills CLI: npx skills@1.7.2 add ./skills --list → "Found 11 skills", objectui listed. pnpm --filter @objectstack/skills build → 92 files across 11 skills, read back byte-identical.
• Skills family: check:skill-compatibility, check:skill-identifier-liveness, check:skill-frame-sync, check:skill-top-level-keys, check:pm-skill-id-lint 0. @objectstack/spec check:skill-refs, check:skill-docs, check:skill-examples 0 (after @objectstack/spec and the client-react / client closures were built).
• ui gates (ui/scripts): check-skills-paths, check-skill-examples (after the scoped build its --build-filter names), check-skill-eval-tokens, check-doc-json-fences, check-shell-escape-residue all 0.
• ui tests: ui/scripts/__tests__/ 180 files passed, 2 skipped / 5273 tests passed. The 14 package test files that read the bundle: 159/159.

Derived gates (head 12e779cd): node scripts/pm/dispatch-gates.mjs --commands derives 107 families (100 commands at 67d25683 plus 7 changeset-family commands after the changeset commit). 106 exit 0. --ran reconciliation: 107 of 107 accounted, 0 unrun. check-plugin-teardown-shape --self-test first exited 3 because its pinned commit 621a4876 was missing from the shallow clone. After git fetch origin 621a4876… --depth=1 it exits 0 (48 cases). NOT MEASURED: pnpm check:dual-build-cjs-loads, exit 3 (prerequisite: every published package needs a dist/, so it needs a full workspace build). The diff changes no package's build output except @objectstack/skills' copied catalog, so it is left to CI's Lint & Repo Gates.

Push-environment battery (head 12e779cd): GITHUB_ACTIONS=true GITHUB_EVENT_NAME=push node scripts/pm/check-dispatch-gates.mjs: 2182 cases pass (1901 fast + 265 slow = 2166 partitioned, plus the census), 0 failed, exit 0.

Acceptance notes

• The generated catalog index omits objectui. packages/spec/scripts/build-skill-docs.ts admits only objectstack-* directories, so the skills/README.md index table and the skills-reference page list 10 skills. The CLI, the package and the README's hand-written routing line all see 11. Admitting a non-objectstack- skill there is a generator change, outside this card. Carrier: the epic PM.
• A skills/objectui/**-only PR does not trigger the ui lanes. The ci.yml filter job's ui glob is ui/**, so the ui skill gates ported into Lint UI no longer see the bundle's own edits. This is bill item 35. Its owner is the 4b ci.yml work (tooling(ui-merge): governance in-repo — liveness evidence and spec tests stop citing objectui by commit, one sdui-parser, AGENTS.md / pm scripts drop objectui#, ui/AGENTS.md nests, 18 governance workflows merged or retired (parent #25677, 4b/6) #25712, Tier H). This PR does not touch .github/workflows/**.
• The ui/skills/** register row is now empty. GOVERNED_SURFACES, the CODEOWNERS /ui/skills/ line and AGENTS.md Prime Directive feat: Comprehensive CRM example demonstrating all ObjectStack protocol features #14 still name ui/skills/**. The root skills/** row governs the bundle now. Dropping the row is an AGENTS.md / pm-dispatch SKILL.md edit at zero line headroom, so it is left to the 4b governance rewrite.
• @object-ui/permissions still spells its grant keys roles. That is objectui's own API, older than ADR-0090 D3. Renaming it is a code change, not a guide change, and the 13 baselined uses go away with it.

---

Generated by Claude Code

[github-actions]

📓 Docs Drift Check

Nothing in this diff resolved to a documentable surface (no symbol, route or SDK anchor derived from 0 changed package(s)), so this run has no opinion about the docs.

What this run could not see

• a page that states a rule by its inputs shares no identifier with the emitter that implements the rule, so an emitter-only diff cannot list it — not on this run and not on any run. Measured on fix(driver-sql): emit varchar(maxLength) for a text field a declared index keys on #11430: content/docs/protocol/objectql/types.mdx documents the text-family column mapping by the ObjectQL type names it maps FROM (text / textarea / html) while the diff changed createColumn; it went unlisted, and it was the page that diff falsified, in four places. No shared token exists to detect this on, so a rule your change carries has to be re-read by hand in the pages that restate it.
• a key NAME is not a key, so the hand re-read the line above prescribes can land on the wrong schema. The same spelling is authorable on one governed type and a [REMOVED] tombstone on another for each of active, aria, joins, objects, template, tools and version (censused on [finding] tools is a key on BOTH AgentSchema (tombstoned, dead) and SkillSchema (live, cloud-attested), so a name-based search attributes skill examples to the agent key — it produced a false stop-the-line alarm on PR #19059 #19093 over the liveness ledger's governed types, top-level keys); nothing in a search result distinguishes the two, so a grep hit on a LIVE example reads as evidence about the DEAD key. Measured on fix(spec): the agent.tools liveness row says dead — it claimed live on a key the schema tombstoned #19059: content/docs/ai/agents.mdx was reported as contradicting the agent.tools tombstone over its tools: example at :161, which is inside the defineSkill({ block opened at :155 — the page was already correct. Settle ownership by PARSING the value against both schemas, never by the name: that literal PASSES SkillSchema, and as an AgentSchema it FAILS at tools with the tombstone prescription. ⛔ These names are not the whole class — a key retired through a .strict() guidance map leaves no tombstone in the walked shape and none of them here (tool.category, live as AIToolDefinition.category).

Coarse fallback — 0 page(s) merely mention a changed package (the pre-#9192 predicate, kept for the deliberately-wide backstop): node scripts/docs-audit/affected-docs.mjs --json aa2f8e31f3ef355f576ba65bed672ff923614592 → packageMentionDocs.