Issues

plugin-security: a member cannot react to another user's comment — reactions are stored on the author's sys_comment row, and the created_by update floor refuses the write (403)

objectstack-ai/objectstack#22500 · opened

on Oct 9, 2026

spec(contracts): the `ControlledByParentWriteDenialLeg` TSDoc says `master_chain` refusals name a master above the record's own master; the walk's first hop reads the record's own master

objectstack-ai/objectstack#22497 · opened

on Oct 9, 2026

1

docs(sso): the domain-verification callout says verify-domain passes the inner 404 through when the switch is off; since #10859 both doors answer 400 DOMAIN_VERIFICATION_DISABLED

objectstack-ai/objectstack#22493 · opened

on Oct 9, 2026

1

spec(ui): the view write door accepts a chart list view that names no dataset (`type: 'chart'` with no `chart` block, or `options.chart` with only `chartType`); once objectui stops reading the legacy axes, such a view saves green and renders only a refusal

objectstack-ai/objectstack#22491 · opened

on Oct 9, 2026

2

Queue-flake anchor: test/verify-host-root.test.ts

objectstack-ai/objectstack#22488 · opened

on Oct 9, 2026

2

platform-checklist: retire the drag-reorder step and acceptance clause of platform-core.shell-nav-personalization — end users do not reorder the runtime sidebar (maintainer ruling 2026-10-09)

objectstack-ai/objectstack#22487 · opened

on Oct 9, 2026

3

spec(changes): delete the committed spec-changes per-major projection and the upgrade guide copy, with their two merge=os-regen routes, once generation at publish has landed (#22449 B′)

objectstack-ai/objectstack#22485 · opened

on Oct 9, 2026

1

docs(adr): revise ADR-0087 D4 and its P2 true-up for B′, so the per-major projections are generated at publish rather than committed (#22449, Tier H)

objectstack-ai/objectstack#22484 · opened

on Oct 9, 2026

1

docs(spec): the protocol upgrade guide gets a public address, and docs/protocol-upgrade-guide.md stays as a committed pointer stub so the published pointers keep resolving (#22449 B′, condition 2)

objectstack-ai/objectstack#22483 · opened

on Oct 9, 2026

1

spec(changes): generate the per-major spec-changes section and the protocol upgrade guide at publish; the pull request still generates both in memory and renders the diff (#22449 B′, condition 1)

objectstack-ai/objectstack#22482 · opened

on Oct 9, 2026

3

lint: a declared `attachedOnRead` block is accepted in a flow condition on its object, where the bound row is the stored row and never carries it (`os validate` passes, the flow fails at run time)

objectstack-ai/objectstack#22481 · opened

on Oct 9, 2026

2

tooling(pm): dispatch-gates.mjs — the gate roster moves out as data, the engine keeps load / match / derive, the self-test splits fast / slow, derivation byte-identical (W3 of the skills-lane diet program, ruled A; carries the `--tier` note remainder)

objectstack-ai/objectstack#22478 · opened

on Oct 9, 2026

1

spec(automation): a `{{ $User.Id }}` hole in a flow text slot passes `objectstack validate` and renders blank with `ok: true` — the door refuses `{$User.Id}` loudly but admits its `{{ }}` spelling silently

objectstack-ai/objectstack#22477 · opened

on Oct 9, 2026

3

chore(objectui): bump the console pin past the fix for objectstack-ai/objectui#12056 (the designer's repeater row writes `dataSource`). #11509's v18 retirement must ship with it

objectstack-ai/objectstack#22476 · opened

on Oct 9, 2026

2

objectql: a `validate()` preview binds no master-detail `parent` header in either mode, so an import dry run refuses a detail row whose rule reads `parent` while the write admits it

objectstack-ai/objectstack#22474 · opened

on Oct 9, 2026

2

plugin-approvals: serve `sys_approval_request`'s detail page as a slotted page through the manifest `pages`, and declare the thread reply as `approval_comment` (objectui#12045 B1, ruling 乙)

objectstack-ai/objectstack#22473 · opened

on Oct 9, 2026

1

spec(ui) v18: declare the approval decision panel as a page component type with a strict `ComponentPropsMap` row (objectui#12045 B1, ruling 乙)

objectstack-ai/objectstack#22472 · opened

on Oct 9, 2026

finding(service-storage): an upload start naming a scope outside the sys_file vocabulary answers 500 INTERNAL (an engine invalid_option relayed as an internal fault) instead of a 400 naming the allowed scopes

objectstack-ai/objectstack#22470 · opened

on Oct 9, 2026

2

docs(forms): the "Current renderer status (2026-08-11)" note says the Console redirects verbatim without substituting `{{record.…}}` tokens; the pinned Console has substituted and URL-escaped them since objectui#4190

objectstack-ai/objectstack#22468 · opened

on Oct 9, 2026

pm tooling: the os-dev's PR-assignee write (`label-write.mjs --assign`) is refused by the auto-mode permission classifier on 4 of 12 objectui PRs in one seat's session — same command, same brief, nondeterministic

objectstack-ai/objectstack#22467 · opened

on Oct 9, 2026

storage(attachments): a committed `sys_file` whose attach is refused is never reaped — the lifecycle tombstones only files that lose their last join row, so a file that never gained one stays forever

objectstack-ai/objectstack#22466 · opened

on Oct 9, 2026

1

security(attachments): the attach / delete gate asks plugin-sharing's canEdit, which reads every controlled_by_parent object as public — a member with sys_attachment create/delete writes files on child records they cannot edit

objectstack-ai/objectstack#22455 · opened

on Oct 9, 2026

7

tooling(pm): platform-readings.md diet — delete every reading a scripts/pm tool now enforces; tool first, text second (W1 of the skills-lane diet program)

objectstack-ai/objectstack#22452 · opened

on Oct 9, 2026

i18n(flows): an `end` node's `outcome: 'refused'` message has no translation key — a first-class refusal renders English in every locale

objectstack-ai/objectstack#22450 · opened

on Oct 9, 2026

4

[Decision] generated protocol-change records (`spec-changes.json` per-major section, `docs/protocol-upgrade-guide.md`): keep committing them, or generate them at publish like the `release` section

objectstack-ai/objectstack#22449 · opened

on Oct 9, 2026

4

Navigation Menu

Repository navigation

Issues

plugin-security: a member cannot react to another user's comment — reactions are stored on the author's sys_comment row, and the created_by update floor refuses the write (403)

spec(contracts): the `ControlledByParentWriteDenialLeg` TSDoc says `master_chain` refusals name a master above the record's own master; the walk's first hop reads the record's own master

docs(sso): the domain-verification callout says verify-domain passes the inner 404 through when the switch is off; since #10859 both doors answer 400 DOMAIN_VERIFICATION_DISABLED

spec(ui): the view write door accepts a chart list view that names no dataset (`type: 'chart'` with no `chart` block, or `options.chart` with only `chartType`); once objectui stops reading the legacy axes, such a view saves green and renders only a refusal

Queue-flake anchor: test/verify-host-root.test.ts

platform-checklist: retire the drag-reorder step and acceptance clause of platform-core.shell-nav-personalization — end users do not reorder the runtime sidebar (maintainer ruling 2026-10-09)

spec(changes): delete the committed spec-changes per-major projection and the upgrade guide copy, with their two merge=os-regen routes, once generation at publish has landed (#22449 B′)

docs(adr): revise ADR-0087 D4 and its P2 true-up for B′, so the per-major projections are generated at publish rather than committed (#22449, Tier H)

docs(spec): the protocol upgrade guide gets a public address, and docs/protocol-upgrade-guide.md stays as a committed pointer stub so the published pointers keep resolving (#22449 B′, condition 2)

spec(changes): generate the per-major spec-changes section and the protocol upgrade guide at publish; the pull request still generates both in memory and renders the diff (#22449 B′, condition 1)

lint: a declared `attachedOnRead` block is accepted in a flow condition on its object, where the bound row is the stored row and never carries it (`os validate` passes, the flow fails at run time)

tooling(pm): dispatch-gates.mjs — the gate roster moves out as data, the engine keeps load / match / derive, the self-test splits fast / slow, derivation byte-identical (W3 of the skills-lane diet program, ruled A; carries the `--tier` note remainder)

spec(automation): a `{{ $User.Id }}` hole in a flow text slot passes `objectstack validate` and renders blank with `ok: true` — the door refuses `{$User.Id}` loudly but admits its `{{ }}` spelling silently

chore(objectui): bump the console pin past the fix for objectstack-ai/objectui#12056 (the designer's repeater row writes `dataSource`). #11509's v18 retirement must ship with it

objectql: a `validate()` preview binds no master-detail `parent` header in either mode, so an import dry run refuses a detail row whose rule reads `parent` while the write admits it

plugin-approvals: serve `sys_approval_request`'s detail page as a slotted page through the manifest `pages`, and declare the thread reply as `approval_comment` (objectui#12045 B1, ruling 乙)

spec(ui) v18: declare the approval decision panel as a page component type with a strict `ComponentPropsMap` row (objectui#12045 B1, ruling 乙)

finding(service-storage): an upload start naming a scope outside the sys_file vocabulary answers 500 INTERNAL (an engine invalid_option relayed as an internal fault) instead of a 400 naming the allowed scopes

docs(forms): the "Current renderer status (2026-08-11)" note says the Console redirects verbatim without substituting `{{record.…}}` tokens; the pinned Console has substituted and URL-escaped them since objectui#4190

pm tooling: the os-dev's PR-assignee write (`label-write.mjs --assign`) is refused by the auto-mode permission classifier on 4 of 12 objectui PRs in one seat's session — same command, same brief, nondeterministic

storage(attachments): a committed `sys_file` whose attach is refused is never reaped — the lifecycle tombstones only files that lose their last join row, so a file that never gained one stays forever

security(attachments): the attach / delete gate asks plugin-sharing's canEdit, which reads every controlled_by_parent object as public — a member with sys_attachment create/delete writes files on child records they cannot edit

tooling(pm): platform-readings.md diet — delete every reading a scripts/pm tool now enforces; tool first, text second (W1 of the skills-lane diet program)

i18n(flows): an `end` node's `outcome: 'refused'` message has no translation key — a first-class refusal renders English in every locale

[Decision] generated protocol-change records (`spec-changes.json` per-major section, `docs/protocol-upgrade-guide.md`): keep committing them, or generate them at publish like the `release` section