Issues

core: a bootstrap that fails after every plugin started (a kernel:ready, kernel:bootstrapped or kernel:listening throw) never runs any plugin destroy(), so the datasource driver it connected is never disconnected

objectstack-ai/objectstack#23644 · opened

on Oct 15, 2026

Queue-flake anchor: src/package-uninstall-shared-object.integration.test.ts

objectstack-ai/objectstack#23641 · opened

on Oct 15, 2026

3

ADR-0139 E3 + E4: the five drivers compile the composed ReadableIds leaf or refuse it with D3's envelope, and the conformance case-set lands with their suites (D3)

objectstack-ai/objectstack#23639 · opened

on Oct 15, 2026

2

security(approvals): a lookup target's title in the approvals inbox (payload_display) is read under the system context without asking whether the reader may read that target record (row-level, sharing), unlike $expand and dataset labels; measure first

objectstack-ai/objectstack#23637 · opened

on Oct 15, 2026

1

objectql: the "sys_metadata could NOT be read at boot" ERROR tells the operator to "check the datasource behind sys_metadata" when no datasource is declared and no driver is registered

objectstack-ai/objectstack#23636 · opened

on Oct 15, 2026

1

driver-sqlite-wasm: a background flush that fails (`void this.flush()`) is an unhandled rejection — main's Dogfood shard 2/3 went red on it, when a refused boot's never-closed driver flushed into a directory the test had already removed

objectstack-ai/objectstack#23635 · opened

on Oct 15, 2026

3

runtime: a host config's declared default datasource (autoConnect) never serves a production serve's boot — AppPlugin.start connects config datasources after AuthPlugin.start already needed a driver for sys_organization

objectstack-ai/objectstack#23634 · opened

on Oct 15, 2026

2

cli/serve --dev: an OS_DATABASE_URL whose scheme the CLI does not recognise is ignored in silence, and the boot serves an in-memory SQLite store instead of the database the operator named

objectstack-ai/objectstack#23633 · opened

on Oct 15, 2026

1

i18n(spec): no exported resolver localizes a form view's `sections` through the declared `objects.<object>._sections.<name>` keys, so a server-side reader (the public form read, #23497) cannot translate a section label without copying the locale chain

objectstack-ai/objectstack#23632 · opened

on Oct 15, 2026

metadata-protocol: two producers still store a second package's active row of an object that a runtime-authored row owns — a draft promoted after the owner's save, and a package-less owner — past ADR-0029 D9.9's save-door refusal (family close-out)

objectstack-ai/objectstack#23630 · opened

on Oct 15, 2026

2

docs deploy is red: llms-full.txt reached 20 MB, Vercel's cap for an ISR page, so every production docs deploy now fails

objectstack-ai/objectstack#23625 · opened

on Oct 15, 2026

6

cli/serve: with --no-server the ready banner still prints "API: http://localhost:PORT/" and an MCP connect URL, though no HTTP server is composed and nothing listens

objectstack-ai/objectstack#23623 · opened

on Oct 15, 2026

1

cli: read-only arms still say they wrote nothing on a SQLite file whose journal mode their connect switches (security-catalog-overlays preview, recorded-by, resume, secret orphans / rewrap, storage orphans) — the remainder of #23562

objectstack-ai/objectstack#23622 · opened

on Oct 15, 2026

1

skills/objectstack-data/rules/security.md still calls the retired grant id column "legacy, do not write": restate grants by name with the per-organization unique index (split from #23513 item 1)

objectstack-ai/objectstack#23615 · opened

on Oct 15, 2026

1

spec: `PageTypeSchema` says `home` is "the platform-level landing page" and `utility` a "floating utility panel", but the landing is the first navigation item and both types render as ordinary inline pages

objectstack-ai/objectstack#23610 · opened

on Oct 15, 2026

5

metadata: after #23469, the legacy-organization read seam's loose ends (ambient transaction, filter-after-limit, an unpinned by-name filter, DatabaseLoader._count, a 404 where a named refusal belongs) and the ceremony wording

objectstack-ai/objectstack#23609 · opened

on Oct 15, 2026

[Decision] Three spec contract dev agents in one container queued ~70 min each on the shared verify lock: leave package `test:repo` to CI, and send build-heavy cards to cloud sessions?

objectstack-ai/objectstack#23607 · opened

on Oct 15, 2026

3

[Decision] The line ratchet (check:pm-skill-ratchet): 32 of 37 files at zero headroom, so a sentence already ruled still needs a second ruling to land — keep it, let the ordering ruling carry its lines, add slack, or narrow it

objectstack-ai/objectstack#23606 · opened

on Oct 15, 2026

3

verify family split (#15953), services rows: service-automation regression tests that replace hotcrm's platform-semantics pins (rows 8, 11)

objectstack-ai/objectstack#23604 · opened

on Oct 15, 2026

verify family split (#15953), engine rows: objectql and driver-sql regression tests that replace hotcrm's platform-semantics pins (rows 3, 4-5, 7, 8, 10, 11)

objectstack-ai/objectstack#23603 · opened

on Oct 15, 2026

check:platform-checklist is red on main

objectstack-ai/objectstack#23593 · opened

on Oct 15, 2026

2

hono: a 409 DELETE_RESTRICTED answered by createHonoApp carries no developerMessage, dependentObject, dependentCount or object, which RestServer's structuredCodeAnswer arm carries (the #23531 family beyond CONCURRENT_UPDATE)

objectstack-ai/objectstack#23587 · opened

on Oct 15, 2026

8

spec(ui): `RecordRelatedListProps.parentDataSource` still says `[PLANNED — not yet rendered]` and the liveness note says nothing reads it — objectui renders it since objectui PR #12407

objectstack-ai/objectstack#23585 · opened

on Oct 15, 2026

1

[Decision] A card triaged to one lane carries an item that lands in another (#23513: an engine card with a skills/** item) — who splits it, and when

objectstack-ai/objectstack#23579 · opened

on Oct 15, 2026

3

[Decision] contract review of a mixed diff: does one governed path send the whole PR to CONTRACT_REVIEW_TIER, or only the governed hunks?

objectstack-ai/objectstack#23578 · opened

on Oct 15, 2026

3

Navigation Menu

Repository navigation

Issues

core: a bootstrap that fails after every plugin started (a kernel:ready, kernel:bootstrapped or kernel:listening throw) never runs any plugin destroy(), so the datasource driver it connected is never disconnected

Queue-flake anchor: src/package-uninstall-shared-object.integration.test.ts

ADR-0139 E3 + E4: the five drivers compile the composed ReadableIds leaf or refuse it with D3's envelope, and the conformance case-set lands with their suites (D3)

security(approvals): a lookup target's title in the approvals inbox (payload_display) is read under the system context without asking whether the reader may read that target record (row-level, sharing), unlike $expand and dataset labels; measure first

objectql: the "sys_metadata could NOT be read at boot" ERROR tells the operator to "check the datasource behind sys_metadata" when no datasource is declared and no driver is registered

driver-sqlite-wasm: a background flush that fails (`void this.flush()`) is an unhandled rejection — main's Dogfood shard 2/3 went red on it, when a refused boot's never-closed driver flushed into a directory the test had already removed

runtime: a host config's declared default datasource (autoConnect) never serves a production serve's boot — AppPlugin.start connects config datasources after AuthPlugin.start already needed a driver for sys_organization

cli/serve --dev: an OS_DATABASE_URL whose scheme the CLI does not recognise is ignored in silence, and the boot serves an in-memory SQLite store instead of the database the operator named

i18n(spec): no exported resolver localizes a form view's `sections` through the declared `objects.<object>._sections.<name>` keys, so a server-side reader (the public form read, #23497) cannot translate a section label without copying the locale chain

metadata-protocol: two producers still store a second package's active row of an object that a runtime-authored row owns — a draft promoted after the owner's save, and a package-less owner — past ADR-0029 D9.9's save-door refusal (family close-out)

docs deploy is red: llms-full.txt reached 20 MB, Vercel's cap for an ISR page, so every production docs deploy now fails

cli/serve: with --no-server the ready banner still prints "API: http://localhost:PORT/" and an MCP connect URL, though no HTTP server is composed and nothing listens

cli: read-only arms still say they wrote nothing on a SQLite file whose journal mode their connect switches (security-catalog-overlays preview, recorded-by, resume, secret orphans / rewrap, storage orphans) — the remainder of #23562

skills/objectstack-data/rules/security.md still calls the retired grant id column "legacy, do not write": restate grants by name with the per-organization unique index (split from #23513 item 1)

spec: `PageTypeSchema` says `home` is "the platform-level landing page" and `utility` a "floating utility panel", but the landing is the first navigation item and both types render as ordinary inline pages

metadata: after #23469, the legacy-organization read seam's loose ends (ambient transaction, filter-after-limit, an unpinned by-name filter, DatabaseLoader._count, a 404 where a named refusal belongs) and the ceremony wording

[Decision] Three spec contract dev agents in one container queued ~70 min each on the shared verify lock: leave package `test:repo` to CI, and send build-heavy cards to cloud sessions?

[Decision] The line ratchet (check:pm-skill-ratchet): 32 of 37 files at zero headroom, so a sentence already ruled still needs a second ruling to land — keep it, let the ordering ruling carry its lines, add slack, or narrow it

verify family split (#15953), services rows: service-automation regression tests that replace hotcrm's platform-semantics pins (rows 8, 11)

verify family split (#15953), engine rows: objectql and driver-sql regression tests that replace hotcrm's platform-semantics pins (rows 3, 4-5, 7, 8, 10, 11)

check:platform-checklist is red on main

hono: a 409 DELETE_RESTRICTED answered by createHonoApp carries no developerMessage, dependentObject, dependentCount or object, which RestServer's structuredCodeAnswer arm carries (the #23531 family beyond CONCURRENT_UPDATE)

spec(ui): `RecordRelatedListProps.parentDataSource` still says `[PLANNED — not yet rendered]` and the liveness note says nothing reads it — objectui renders it since objectui PR #12407

[Decision] A card triaged to one lane carries an item that lands in another (#23513: an engine card with a skills/** item) — who splits it, and when

[Decision] contract review of a mixed diff: does one governed path send the whole PR to CONTRACT_REVIEW_TIER, or only the governed hunks?