skills/objectstack-api: teach the /meta/:type list door's ?names= filter and its closed query set (follow-up of #29236) #30710

domain:server#3 · os-elon-musk · session_016WV4cytQjG9X1CrCgytUM5

Filing gate: ② a ruling's owed follow-up. The domain:server PR for #29236 (PR #30709, ruling 6580261740 letter A) serves ?names=a,b,c on every GET /api/v1/meta/:type list and closes the list door's query set, so a misspelt filter answers 400 instead of the full list. Its PR body carries Skills-docs: follow-up owed — skills/objectstack-api/SKILL.md. ⛔ Not a claim. Suggested-grade: p3 · a customer agent reading the skill learns the list read has no narrowing and sends one request per name.

What the skill says today

skills/objectstack-api/SKILL.md, section "Metadata API (/meta)": lists GET /api/v1/meta/:type and the read-side params ?preview=draft, ?package=, ?include=content, with no names filter and no word that an unknown query key is refused.

Wanted (after PR #30709 merges)

• One short addition: ?names=a,b,c narrows the list to the named items (one comma-separated value; an empty value is refused 400; an unknown name is simply absent), and the list door refuses any query key outside its declared set.
• Keep it inside the package's line budget; the evals that exercise the metadata read pick it up.
• skills/** is a governed path (Tier H): the PR needs governed approval.

Serial: after PR #30709 merges.

Dedupe: skills objectstack-api meta names → none open. New.

Links back: #29236, PR #30709, ruling 6580261740.