Issues

tooling(ui-wiring): objectstack-side inert wiring for the `ui/` workspace — workspace globs, root turbo tasks, path-filtered ui test/typecheck/lint/E2E jobs, spec change compiles the Console; pin gates retire at cutover (parent #25677, 3/6)

objectstack-ai/objectstack#25697 · opened

on Oct 24, 2026

2

spec(automation): the notify recipients describe names a written-out address as an author constant, and drops the bare "an email address" audience selector — the spec half of ruling B on #25647

objectstack-ai/objectstack#25696 · opened

on Oct 24, 2026

1

pm-dispatch: 决策卡 `Brief-claimed-by:` 标记，防两个总监席对同一张 needs-user-decision 卡并行出批（双裁撞车）

objectstack-ai/objectstack#25695 · opened

on Oct 24, 2026

anonymous write doors: an authorization-adjacent gap when a guest-writable object declares a file field (detail withheld pending measurement)

objectstack-ai/objectstack#25694 · opened

on Oct 24, 2026

1

files: an authorization-adjacent gap on a file-serving door (detail withheld pending measurement)

objectstack-ai/objectstack#25693 · opened

on Oct 24, 2026

4

files: an authorization gap in the file-reference lifecycle, within one organization (detail withheld)

objectstack-ai/objectstack#25692 · opened

on Oct 24, 2026

1

tooling(objectui-readiness): make the objectui tree merge-ready in its own repo before cutover — one react line, one zod range, uiRoot() helper, tsc heap, workspace-aware Console chunk tests, typecheck alias (parent #25677, 2/6)

objectstack-ai/objectstack#25685 · opened

on Oct 24, 2026

3

cli/i18n: os i18n check does not read a field's inlineHelpText as the default-locale source of its help key, so translating help into en turns the default locale red

objectstack-ai/objectstack#25683 · opened

on Oct 24, 2026

1

Object fields: `repeater` / `composite` cannot declare typed sub-fields, so they are untyped JSON in forms and flows

objectstack-ai/objectstack#25681 · opened

on Oct 24, 2026

2

spec + lint 18.x: refuse an action's copy-template findings (blank text, an unbound root, a ${…} or single-brace token) at validate / compile / the publish gate — the refusal half of #24814 (ruling 6365736632)

objectstack-ai/objectstack#25680 · opened

on Oct 24, 2026

5

tooling(monorepo): 在试验分支上把 objectui 并入 `ui/` workspace（subtree add、单 lockfile、turbo 构建图），交冲突清单、必改脚本清单与各类 PR 的 CI 时长读数 — 不落 main（父单 1/6）

objectstack-ai/objectstack#25678 · opened

on Oct 24, 2026

3

objectui 并入 objectstack 为 `ui/` workspace：D1 裁定（A+）的执行父单 — 一个 PR 同时改 spec 与渲染器，删除两仓互钉，@object-ui 保留包名并与 @objectstack 同一版本组，objectui 仓归档为迁移说明

objectstack-ai/objectstack#25677 · opened

on Oct 24, 2026

2

deps: @azure/msal-node GHSA-xcx6-jx8p-x3h5 (high) stays in the lockfile until an @azure/identity release admits msal-node 7.1.0

objectstack-ai/objectstack#25676 · opened

on Oct 24, 2026

An app package cannot ship an inbound `api` flow: `config.secret` must be a literal in source, and there is no deployment-time seam for a package-authored flow

objectstack-ai/objectstack#25675 · opened

on Oct 24, 2026

7

REST search on sys_user answers 403 for non-admin members (search expands to hidden role / ban_reason / last_login_ip) — every user picker breaks when typing

objectstack-ai/objectstack#25672 · opened

on Oct 24, 2026

3

skills: `objectstack-platform` teaches `engines: { protocol: '^17' }`, which the 18.x boot handshake refuses; scaffold and examples already write `'^18'`

objectstack-ai/objectstack#25671 · opened

on Oct 24, 2026

3

plugin-security + organizations: the seed-ownership claims re-own rows with one filter-matched bulk update, which the engine refuses when a stored expression reads `owner_id`, so every seeded row of that object stays ownerless

objectstack-ai/objectstack#25668 · opened

on Oct 24, 2026

1

Security: a runAs system hook or an action script body reaches the four identity-assignment objects past the delegated-administration gate (the #25251 refusal requires flowRunId)

objectstack-ai/objectstack#25653 · opened

on Oct 24, 2026

spec/i18n: a translation bundle has no key for positions or permission sets, so their labels stay in the authoring language

objectstack-ai/objectstack#25652 · opened

on Oct 24, 2026

6

localization: the single posture's Default Organization takes its first owner's default currency when that owner is bound (the same rule as a new organization's creator, #25495) — maintainer ruling B

objectstack-ai/objectstack#25651 · opened

on Oct 24, 2026

3

spec(ui): a form view open to anonymous intake (`sharing.allowAnonymous`) that declares a file field is refused at publish — the protocol half of #25572 (ruling C)

objectstack-ai/objectstack#25650 · opened

on Oct 24, 2026

2

Code-package bound actions are registered without ActionSchema parse, so their declared `requiresFeature` is never lowered and never takes effect (declared, not enforced)

objectstack-ai/objectstack#25649 · opened

on Oct 24, 2026

3

[Decision] A notify node already mails a written-out or computed email address: does ruling 6377842908's 「⛔ 不接受自由文本或表达式拼出的地址」 reach it — refuse both (A), refuse computed addresses only (B), or leave both (C)?

objectstack-ai/objectstack#25647 · opened

on Oct 24, 2026

3

release(changelog): the published 18.1.0 CHANGELOGs attribute 260 of 265 entries to 3937697, the commit that reverted the first cut, instead of each entry's own commit

objectstack-ai/objectstack#25638 · opened

on Oct 24, 2026

3

plugin-pinyin-search: every boot scans all rows of transient `sys_inbox_message`, making startup O(table size)

objectstack-ai/objectstack#25634 · opened

on Oct 24, 2026

3

Navigation Menu

Repository navigation

Issues

tooling(ui-wiring): objectstack-side inert wiring for the `ui/` workspace — workspace globs, root turbo tasks, path-filtered ui test/typecheck/lint/E2E jobs, spec change compiles the Console; pin gates retire at cutover (parent #25677, 3/6)

spec(automation): the notify recipients describe names a written-out address as an author constant, and drops the bare "an email address" audience selector — the spec half of ruling B on #25647

pm-dispatch: 决策卡 `Brief-claimed-by:` 标记，防两个总监席对同一张 needs-user-decision 卡并行出批（双裁撞车）

anonymous write doors: an authorization-adjacent gap when a guest-writable object declares a file field (detail withheld pending measurement)

files: an authorization-adjacent gap on a file-serving door (detail withheld pending measurement)

files: an authorization gap in the file-reference lifecycle, within one organization (detail withheld)

tooling(objectui-readiness): make the objectui tree merge-ready in its own repo before cutover — one react line, one zod range, uiRoot() helper, tsc heap, workspace-aware Console chunk tests, typecheck alias (parent #25677, 2/6)

cli/i18n: os i18n check does not read a field's inlineHelpText as the default-locale source of its help key, so translating help into en turns the default locale red

Object fields: `repeater` / `composite` cannot declare typed sub-fields, so they are untyped JSON in forms and flows

spec + lint 18.x: refuse an action's copy-template findings (blank text, an unbound root, a ${…} or single-brace token) at validate / compile / the publish gate — the refusal half of #24814 (ruling 6365736632)

tooling(monorepo): 在试验分支上把 objectui 并入 `ui/` workspace（subtree add、单 lockfile、turbo 构建图），交冲突清单、必改脚本清单与各类 PR 的 CI 时长读数 — 不落 main（父单 1/6）

objectui 并入 objectstack 为 `ui/` workspace：D1 裁定（A+）的执行父单 — 一个 PR 同时改 spec 与渲染器，删除两仓互钉，@object-ui 保留包名并与 @objectstack 同一版本组，objectui 仓归档为迁移说明

deps: @azure/msal-node GHSA-xcx6-jx8p-x3h5 (high) stays in the lockfile until an @azure/identity release admits msal-node 7.1.0

An app package cannot ship an inbound `api` flow: `config.secret` must be a literal in source, and there is no deployment-time seam for a package-authored flow

REST search on sys_user answers 403 for non-admin members (search expands to hidden role / ban_reason / last_login_ip) — every user picker breaks when typing

skills: `objectstack-platform` teaches `engines: { protocol: '^17' }`, which the 18.x boot handshake refuses; scaffold and examples already write `'^18'`

plugin-security + organizations: the seed-ownership claims re-own rows with one filter-matched bulk update, which the engine refuses when a stored expression reads `owner_id`, so every seeded row of that object stays ownerless

Security: a runAs system hook or an action script body reaches the four identity-assignment objects past the delegated-administration gate (the #25251 refusal requires flowRunId)

spec/i18n: a translation bundle has no key for positions or permission sets, so their labels stay in the authoring language

localization: the single posture's Default Organization takes its first owner's default currency when that owner is bound (the same rule as a new organization's creator, #25495) — maintainer ruling B

spec(ui): a form view open to anonymous intake (`sharing.allowAnonymous`) that declares a file field is refused at publish — the protocol half of #25572 (ruling C)

Code-package bound actions are registered without ActionSchema parse, so their declared `requiresFeature` is never lowered and never takes effect (declared, not enforced)

[Decision] A notify node already mails a written-out or computed email address: does ruling 6377842908's 「⛔ 不接受自由文本或表达式拼出的地址」 reach it — refuse both (A), refuse computed addresses only (B), or leave both (C)?

release(changelog): the published 18.1.0 CHANGELOGs attribute 260 of 265 entries to 3937697, the commit that reverted the first cut, instead of each entry's own commit

plugin-pinyin-search: every boot scans all rows of transient `sys_inbox_message`, making startup O(table size)