finding(skills): page-builder.md still tells readers to provide dataSource through the renderer provider — a sixth member of the retired-expression-root class

skills/objectui/guides/page-builder.md still tells a reader to wire the retired channel: step 3 of "Wire renderer and registry cleanly" says "Provide dataSource and contextual data through renderer provider", and the page's own examples then read ${data.userRole} and ${data.metrics.activeUsers}.

The reading

This is a sixth member of the class objectui#9379 belongs to — re-derived by that card's dev rather than relayed:

member	state
`data-integration.md`, `schema-expressions.md`, `rules/protocol.md`	held by open PR #9378
`auth-permissions.md`	repaired by PR #9669 (objectui#9379)
`testing.md`	objectui#9380, held serial, ⛔ not touched
`page-builder.md`	this card — nothing holds it

⚠️ Triage graded objectui#9379 calling it a fourth instance. The dev re-derived the class and found five, and then this sixth. ⛔ Neither number should be copied forward — count it again when you take this.

Why it bites

The step names no other channel, so a reader wires the one that was retired. After objectui#9308 the consequences are silent rather than loud:

a hidden gate fails soft — hidden for everyone;
a statistic value and a text content print their own source text — the characters ${data.metrics.activeUsers} reach the page.

⇒ nothing throws; the page is simply wrong.

Why it was not folded into PR #9669

⭐ Deliberate, and the reason is the surface: skills/** is a governed surface, so every extra file widens what a human must approve. objectui#9379's PR is already parked as a draft awaiting os-zhuang / hotlong. Adding a second guide to that approval would have made the human's job larger for the filing seat's convenience — the wrong trade.

Related, noted rather than filed separately

The guide's "Provider composition pattern" example nests only SchemaRendererProvider, with no PredicateScopeProvider beside it. Not false — the adapter does belong there — but a reader copying it gets no expression scope at all. It is the same one-time nesting fix this card needs, so it belongs to whoever takes this.

Filed by the domain:devx @ objectui PM seat (session_015h79niBMyoB1xcaQje3uiz, R65) from a dev's out-of-scope finding on objectui#9379. ⛔ Deliberately ungraded — no priority:*, no pm:*, no domain:*. Grading and routing are triage's.

Generated by Claude Code

Claim: PM loop round 1 (skills seat at objectstack#7623 — this seat's R1, wave 2; the domain:skills lane has no seat post of its own in this repository, so the lane's seat carries its cards here under 「执行席恒随落地仓车道」)
Session: session_01W5y9kRg1YtYaMQYExVLRc2
Branch: claude/issue-9672-page-builder-published-scope
Worktree: objectui-issue-9672
Domain: domain:skills
Seat: domain:skills#1
File surface: skills/objectui/guides/page-builder.md — section 「### 4. Wire renderer and registry cleanly」 step 3 (:101 at edbcf1e), the four ${data.…} reads the page's own examples make (:43, :47, :179, :193) and the sentence that names the published channel; ⛔ NOT section 5 「Use action data」 (:105–:122), which open PR #9592 (objectui#7945, domain:ui, os-justin) rewrites — a named-region split on one file; skills/objectui/evals/page-builder.json only if check:skill-eval-tokens names a token; ⛔ no other guide (data-integration.md / schema-expressions.md / rules/protocol.md are PR #9378's; testing.md is objectui#9380's, serial) and no package source (stop on breach; explain in the report)
Container & model: S in size, M in judgment, mode:subagent, model: fable — published skills/** builds at the contract-review tier (lane policy; hand-derived — dispatch-gates --tier answers only for the objectstack tree)
Clause-②: yes
Thread-read: 5714826620
Ruling-ref: none on this card; binding = the triage grading 5714826620 (p2 · Bug · domain:skills) and the closed objectui#9308 (the renderer seam's dataSource no longer carries the data.* root; the published channel is what auth-permissions.md :268–:310 teaches since PR #9669 — PredicateScopeProvider's scope, every key a root).
Serial constraints cleared: page-builder.md is touched by 1 of 15 open objectui PRs — PR #9592 (draft since 2026-09-16T04:32Z), whose one hunk on this file is section 5 (:105–:122, the events bag → action:button); this card's regions (:43 / :47, :101, :179 / :193) are disjoint from it with unchanged lines between the nearest pair, so the two land in either order; every open PR's file list enumerated at 2026-09-19T04:55Z (201 rows; positive control on the same enumeration: skills/objectui/guides/auth-permissions.md 1 — PR #9994); git ls-remote --heads origin | grep -iE 'issue-9672|page-builder' → 0 heads at 2026-09-19T04:57Z. No .changeset expected for skills/** — scripts/check-changeset-presence.mjs decides.

Why Clause-②: yes: the guide will state which channel publishes expression roots to a page — a contract-semantics claim about @object-ui/react (PredicateScopeProvider, exported through packages/react/src/hooks/useExpression.ts :36 → hooks/index.ts → the package index) — the same limb that put objectui#9671 (PR #9994) through the contract-tier review. needs:contract-review is hung on this card in the same act and on the PR when it opens; Tier H (skills/**) ⇒ draft at the four-piece terminal, one authorized approval, then this seat lands it.

Class census at edbcf1e (for the dev's 「count it again」, ⛔ not to be copied forward): git grep -c '\${data\.' -- 'skills/objectui/**/*.md' → architecture.md 1 · data-integration.md 2 · page-builder.md 4 · schema-expressions.md 21 · testing.md 4 · rules/protocol.md 13. The card's 「Provider composition pattern」 paragraph is not in page-builder.md at edbcf1e (composition → 0 in that file; control SchemaRenderer → 5) — measure before acting on that 「related」 item.

Net-line budget (a PM figure, ⛔ not the dev's to raise): net ≤ +8 lines in page-builder.md (331 lines at edbcf1e); the package skills/objectui/**/*.md sums to 4,640 at edbcf1e (4,646 once PR #9994 lands) — both readings before / after in the PR body.

Generated by Claude Code

os-dev-report

{
  "issue": 9672,
  "status": "done",
  "branch": "claude/issue-9672-page-builder-published-scope",
  "pr": "https://github.com/objectstack-ai/objectui/pull/9997",
  "session": "session_01W5y9kRg1YtYaMQYExVLRc2",
  "premise_still_valid": true,
  "summary": "skills/objectui/guides/page-builder.md only (commit 045d02959 on BASE edbcf1e7a): section 4 step 3 now names ONE channel — PredicateScopeProvider from @object-ui/react, every key of its scope is an expression root (and bind reads the same bag) — states the roots the renderer adds itself (record, page), that nothing publishes data, and that SchemaRendererProvider's dataSource is the object-bound blocks' adapter, not a root; the four ${data.…} example reads (BASE :43/:47/:179/:193) now read userRole / metrics.activeUsers / metrics.growth, with two one-line sentences saying the host published userRole and metrics (auth-permissions.md shape). Residual ${data. in the file: 0. Section 5 (PR #9592's hunk) byte-identical. Draft PR #9997 opened, Tier H — stays draft; no labels written; no changeset owed. Assignee was already os-tesla at dispatch (not written by me).",
  "channel_decision": {
    "channel": "PredicateScopeProvider (@object-ui/react) — packages/react/src/hooks/useExpression.ts exports PredicateScopeProvider / usePredicateScope, re-exported via hooks/index.ts and packages/react/src/index.ts",
    "reading": "packages/react/src/SchemaRenderer.tsx evaluatedSchema builds new ExpressionEvaluator({ ...predicateScope, current_user: predicateScope.user, ...(boundRecord ? { record: boundRecord } : null), page: pageVariables }); the block's own comment: 'data is NOT here, and the absence is the decision (objectui#9308, maintainer ruling 2026-09-13 option B)'. hidden/hiddenOn/visible go through evaluateVisibilityPredicate on that evaluator (fail-soft), content is evaluated on every type, a statistic's value via the declared text keys. useExpression/useCondition merge usePredicateScope() under the caller's local context — same roots on the widget tier. useDataScope (what bind reads) now walks usePredicateScope() too; SchemaRendererContext.dataSource is read by useViewData (object-bound blocks) and is no longer an expression root.",
    "roots_renderer_adds": [
      "record — from RecordContextProvider, only when a row is bound",
      "page — page variables, empty object outside a Page",
      "current_user — alias of a published user (derived, not independent)"
    ],
    "data_root": "absent on origin/main; teaching it would teach a root that resolves to undefined",
    "examples_read": [
      "userRole",
      "metrics.activeUsers",
      "metrics.growth"
    ],
    "published_by_prose": "yes — section 3 lead-in and the Expression-evaluation-boundaries lead-in both say the host published userRole / metrics"
  },
  "class_count": {
    "command": "git grep -c '\\${data\\.' -- 'skills/objectui/**/*.md'",
    "ref": "edbcf1e7a (BASE)",
    "counts": {
      "guides/architecture.md": 1,
      "guides/data-integration.md": 2,
      "guides/page-builder.md": 4,
      "guides/schema-expressions.md": 21,
      "guides/testing.md": 4,
      "rules/protocol.md": 13
    },
    "files": 6,
    "reads": 45,
    "touched_here": [
      "skills/objectui/guides/page-builder.md (4 → 0)"
    ],
    "not_touched": "data-integration.md / schema-expressions.md / rules/protocol.md = PR #9378 (objectui#9370); testing.md = objectui#9380; auth-permissions.md already 0 (PR #9669)"
  },
  "line_readings": {
    "file": {
      "path": "skills/objectui/guides/page-builder.md",
      "before": 331,
      "after": 339,
      "net": 8,
      "budget": "net ≤ +8 — at the cap, no headroom"
    },
    "package": {
      "spelling": "find skills/objectui -name '*.md' -type f | xargs cat | wc -l (16 files)",
      "before": 4640,
      "after": 4648,
      "note": "git ls-files 'skills/objectui/**/*.md' skips SKILL.md and README.md and reads 4,439 — not the figure used"
    }
  },
  "region_fence": "PR #9592 (objectui#7945, draft) hunk on this file = @@ -105,18 +105,16 @@ only; BASE :102–:122 is byte-identical at :109–:129 of this branch (diff empty); the two land in either order",
  "related_item": "The card's 'Provider composition pattern' example is NOT in page-builder.md (composition → 0 in that file at BASE; control SchemaRenderer → 5). It lives in skills/objectui/guides/auth-permissions.md under the heading '## Provider composition pattern' (unmarked typescript fence, nests SchemaRendererProvider only) — outside this card's surface; said so in the PR body, no paragraph invented.",
  "tests": "All exit codes captured before any pipe. Build closure under the shared lock (OS_VERIFY_LOCK_SLOT=issue-9672-skill-examples-build): pnpm exec turbo run build $(node scripts/check-skill-examples.mjs --build-filter) --concurrency=2 → 'VERDICT command-exit 0 · held the lock 2s' (29/29 cached, shared worktree cache). node scripts/check-skill-examples.mjs --self-test → exit 0 '60 cases pass'. pnpm check:skill-examples → exit 0 'Semantic phase: 15 of 15 ts fence(s) judged, 0 failed. JSON phase: 70 fence(s) parsed, 0 failed.' (all ten page-builder.md marked fences pass in --list). pnpm check:skill-eval-tokens → exit 0 'Every must_contain token is taught by its own skill bundle.' (eval untouched). pnpm check:skills-paths → exit 0 (88/89 resolve, 1 baselined). pnpm check:new-line-citations on head 045d02959 → exit 0 'VERDICT new-cross-file-line-citations: 0 new citation(s)'. pnpm check:control-bytes → exit 0 (8061 files). node scripts/check-governed-queue-guard.mjs --test skills/objectui/guides/page-builder.md → exit 3 'GOVERNED — 1 of 1 path(s)' (expected, informational). node scripts/check-changeset-presence.mjs → exit 0 'no changeset is owed'. pnpm exec vitest run scripts/__tests__/check-skill-eval-tokens.test.ts (repo-root spelling; the only test naming page-builder.md, a fixture) → exit 0, Test Files 1 passed, Tests 36 passed. No ablation: docs-only diff, no runtime assertion added. NOT MEASURED: pnpm lint (repo-wide, CI-owned; one .md outside every eslint population).",
  "gates": [
    {
      "command": "os-verify-lock.sh -c 'pnpm exec turbo run build --filter=… --concurrency=2'",
      "exit": 0,
      "verdict": "VERDICT command-exit 0 · held the lock 2s · waited 0s"
    },
    {
      "command": "node scripts/check-skill-examples.mjs --self-test",
      "exit": 0,
      "verdict": "60 cases pass"
    },
    {
      "command": "pnpm check:skill-examples",
      "exit": 0,
      "verdict": "Every marked skill example holds up against the built types."
    },
    {
      "command": "pnpm check:skill-eval-tokens",
      "exit": 0,
      "verdict": "Every must_contain token is taught by its own skill bundle."
    },
    {
      "command": "pnpm check:skills-paths",
      "exit": 0,
      "verdict": "check-skills-paths: OK (88/89 stated path(s) resolve across 20 guide file(s); 1 baselined)"
    },
    {
      "command": "pnpm check:new-line-citations (head 045d02959)",
      "exit": 0,
      "verdict": "VERDICT new-cross-file-line-citations: 0 new citation(s), enforcement report-only → exit 0 (arrow spelled → here; the gate prints a hyphen-arrow)"
    },
    {
      "command": "pnpm check:control-bytes",
      "exit": 0,
      "verdict": "check-control-bytes: OK (scanned 8061 tracked text file(s); skipped 85 binary)"
    },
    {
      "command": "node scripts/check-governed-queue-guard.mjs --test skills/objectui/guides/page-builder.md",
      "exit": 3,
      "verdict": "GOVERNED — 1 of 1 path(s) are on a governed surface (expected; PR stays draft)"
    },
    {
      "command": "node scripts/check-changeset-presence.mjs",
      "exit": 0,
      "verdict": "No source or published contract of a released package changed in this range, so no changeset is owed."
    },
    {
      "command": "pnpm exec vitest run scripts/__tests__/check-skill-eval-tokens.test.ts",
      "exit": 0,
      "verdict": "Test Files 1 passed (1) · Tests 36 passed (36)"
    },
    {
      "command": "pnpm lint",
      "exit": null,
      "verdict": "NOT MEASURED — repo-wide, CI-owned"
    }
  ],
  "ci": "in_progress — not waited on (report delivered at local-verification end)",
  "mcp_calls": "0 — no MCP GitHub tool called (reads and writes all via REST proxy with GITHUB_TOKEN)",
  "api_writes": "4 — git push ×2 (empty-branch probe; commit 045d02959); POST /repos/objectstack-ai/objectui/pulls ×1 (→ #9997, draft); POST /repos/objectstack-ai/objectui/issues/9672/comments ×1 (this report). No label writes, no PATCH.",
  "deviations": [
    "Net +8 lines in page-builder.md is exactly the PM's cap (≤ +8), not under it; step 3 needed six lines to name the channel, the renderer's own roots, the absence of data and what dataSource still is.",
    "Commit trailer pair written model-free (Co-Authored-By: Claude) per os-dev.md over the harness reminder's model-named form; PR footer uses os-dev.md's session-URL form.",
    "Stored PR body is 1 byte shorter than sent (trailing newline); read back to the tail — 0 angle-bracket hits, Clause-②: yes at line start, footer intact.",
    "First attempt to post this report was aborted by my own pre-write assertion (a quoted gate verdict carried a hyphen-arrow shape); no write was spent; re-posted with the arrow spelled →.",
    "pnpm lint not run locally (declared to CI)."
  ],
  "files_changed": [
    "skills/objectui/guides/page-builder.md"
  ],
  "open_questions": [],
  "out_of_scope_findings": [
    "noted, not filed: skills/objectui/guides/auth-permissions.md '## Provider composition pattern' fence nests SchemaRendererProvider only, no PredicateScopeProvider — a reader copying it gets no expression scope; incompleteness, not a false statement (not class a); 承接者: the seat — file held by PR #9994 (objectui#9671)."
  ]
}

Generated by Claude Code

ACCEPT — in-seat review of PR #9997 (head 045d0295, report 5739623133) by the domain:skills seat, session_01W5y9kRg1YtYaMQYExVLRc2 · 2026-09-19T05:25Z. Verified against GitHub and the fetched branch, ⛔ not against the report. Tier H (skills/**) ⇒ the terminal's four pieces in this act: ① this ACCEPT + the ## Contract review record on the PR (PASS); ② the card moves pm:dispatched → needs-user-decision (assignee stays — the PR is in flight to MERGED) and the 终稿速读 below; ③ review requested from os-zhuang and hotlong on the draft PR; ④ the round report lists it under awaiting a human merge.

PR shape: draft, base main, first line Fixes #9672, Clause-②: yes at line start (matches the claim), one session-URL footer, no model identifier; needs:contract-review hung on the PR by the seat in this act (the pair instrument read C1 half-hung before it, 0 after). No changeset owed (scripts/check-changeset-presence.mjs exit 0).
Scope = the claim (5739526152): exactly skills/objectui/guides/page-builder.md (+15 / −7, one commit, trailer pair model-free) at :33–:49, :101–:108, :173–:204; section 5 (:105–:122 on base) byte-identical — PR docs(skills,AGENTS): teach action:button + actionType, retire the events bag #9592's region untouched (seat's own diff); no other guide, no package source, eval JSON untouched (check:skill-eval-tokens exit 0).
Done-when (triage 5714826620, 判据 (a)) met: step 3 names ONE channel — PredicateScopeProvider (@object-ui/react), every scope key a root, bind reading the same bag — plus the renderer's own record / page, the absence of data, and what dataSource still is; the four ${data.…} reads become ${userRole …} / ${metrics.…} under prose that says the host published them; residual ${data. in the file 0.
Seat's own reads on origin/main: SchemaRenderer.tsx :866 / :938 (「data is NOT here … objectui#9308」) / :968–:974 (the evaluator's roots: predicate scope, current_user, record, page); useExpression.ts :36 / :50 / :175 / :205 / :284; SchemaRendererContext.tsx :114 — the dev's channel decision is a reading of that code.
Line readings: guide 331 → 339 (+8, at the claim's cap); package 4,640 → 4,648.
Class count re-derived at edbcf1e (six files, 45 reads); only this file touched; the 「Provider composition pattern」 item measured absent from this guide and located in auth-permissions.md (PR docs(skills): gate the usePermissions example on can(), a boolean, and mark its fence (objectui#9671) #9994's file) — noted, no paragraph invented.
Gates: 10 run at exit 0 plus the governed-queue-guard's informational exit 3; pnpm lint NOT MEASURED locally with the reason (CI's Lint is success); CI 24 success · 3 skipped · 5 in progress at this writing — read again before landing.
Landing = after an authorized APPROVED review (GOVERNED_APPROVERS): the seat runs the three pre-landing checks, clears needs:contract-review on both carriers, ready through .../ccr/ready_for_review, auto-merge through .../ccr/auto_merge; residue at MERGED. Lands in either order relative to PR docs(skills,AGENTS): teach action:button + actionType, retire the events bag #9592.

维护者速读(终稿)

改了什么 — 只改 skills/objectui/guides/page-builder.md 一个文件,净 +8 行。第 4 节第 3 步原来教读者「通过 renderer provider 提供 dataSource 和上下文数据」;现在只点名一条能用的通道:PredicateScopeProvider(@object-ui/react),交给它的 scope 的每个键都成为表达式的根(bind 读同一组),同时写明渲染器自己只补 record 与 page、没有任何东西发布 data、SchemaRendererProvider 的 dataSource 是对象绑定块取数的适配器而不是表达式根。页面自己的四处示例从 ${data.userRole} / ${data.metrics.activeUsers} 改为读宿主已发布的 userRole / metrics,并各用一句话写明「宿主发布了这两个键」。

为什么改 — 照旧文接线的读者,页面不报错但结果是错的:hidden 门对所有人都隐藏,text 的 content 与 statistic 的 value 把 ${data.metrics.activeUsers} 这串字符原样打到页面上(objectui#9308 之后 data.* 根已不存在)。这是 auth-permissions.md(PR #9669)同一类问题的又一个成员;修法照抄那次的形状。席位在 origin/main 上复核了渲染器求值器的根集合(SchemaRenderer.tsx :968–:974)与 usePredicateScope 的读者,dev 的通道判断与代码一致。

风险与代价(含回滚) — 纯文档改动,不动包源码、不发版、不欠 changeset;check:skill-examples 对本文件十个标记示例全部通过。与在途 PR #9592(改同文件第 5 节,domain:ui)区域不相交,先后合并都干净。回滚 = revert 这一个 commit。同类其余成员(schema-expressions.md 等 21 处、rules/protocol.md 13 处)在 PR #9378 / objectui#9380 名下,本 PR 不碰。

席位意见 — 建议批准。通道判断有代码读数支撑,四处示例在新前提下为真,行数正好在预算上限,门禁全绿;席位无异议项。

你要做的 — 在 PR #9997 上以授权账号提交一条 APPROVED review(已向 os-zhuang / hotlong 请审);其余由席位落地。

Generated by Claude Code

docs(skills): page-builder.md names the channel that publishes expres…

Navigation Menu

Repository navigation

finding(skills): page-builder.md still tells readers to provide `dataSource` through the renderer provider — a sixth member of the retired-expression-root class #9672

The reading

Why it bites

Why it was not folded into PR #9669

Related, noted rather than filed separately

维护者速读(终稿)

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

finding(skills): page-builder.md still tells readers to provide dataSource through the renderer provider — a sixth member of the retired-expression-root class #9672

Description

The reading

Why it bites

Why it was not folded into PR #9669

Related, noted rather than filed separately

Activity

os-tesla commented on Sep 19, 2026

os-tesla commented on Sep 19, 2026

os-tesla commented on Sep 19, 2026

维护者速读(终稿)

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

finding(skills): page-builder.md still tells readers to provide `dataSource` through the renderer provider — a sixth member of the retired-expression-root class #9672