Issues

plugin-security: the first sign-up on a freshly seeded database blocks ~45 s while claimSeedOwnership re-owns every seed row through the full write pipeline — app hooks, record-change flows, approvals and notification emails fire for a bookkeeping write

objectstack-ai/objectstack#22067 · opened

on Oct 7, 2026

5

program(pm): rule-text diet and guard-script split for the skills lane — 3,020 lines of skill text, 126k lines of pm scripts (two files 65k), 58 commits in two weeks; plus a body section-patch door and template files for seat writes

objectstack-ai/objectstack#22060 · opened

on Oct 7, 2026

1

[Decision] published skills/** teaching errors are found by hand (21 of 109 lane cards in two weeks): run the skill evals or a schema check over skill examples in CI (a new gate), or keep maintainer-scored evals

objectstack-ai/objectstack#22059 · opened

on Oct 7, 2026

1

finding(spec): the expression dialect table lists notification subjects/bodies as `template` slots, but NotifyConfigSchema.title is z.string() and refuses the tmpl envelope

objectstack-ai/objectstack#22054 · opened

on Oct 7, 2026

6

protocol(pm): a silent claim has no reclaim clock or write path — seat-lifecycle.md:37's one-day recycle names no actor, so p1 #21892 idles 34 h with no PR and its serial dependent #21915 waits

objectstack-ai/objectstack#22053 · opened

on Oct 7, 2026

1

fleet-write: no relay op for PUT /pulls/{n}/update-branch — the sanctioned base sync (rest-channel.md:49) runs as bare REST and authors the merge commit under the seat's personal account (PR #22002 head fab444b4)

objectstack-ai/objectstack#22052 · opened

on Oct 7, 2026

1

[Decision] the >5000-line SIZE limb counts a pure deletion the maintainer already ruled (ruling 208), and the Tier H wait for an authorized APPROVED has no clock — PR #22002 idles green

objectstack-ai/objectstack#22051 · opened

on Oct 7, 2026

1

decision: open v18 now and ship it in stages — release the last 17.x from main first without waiting for #21908's deny (A), skip the last 17.x (B), or keep #22009's order (C)?

objectstack-ai/objectstack#22050 · opened

on Oct 7, 2026

7

security(service-storage): three upload doors authorize by session alone, with no ownership or resume-token check on the file or upload they name (the owner-check class the #21908 ruling sent to its own card)

objectstack-ai/objectstack#22046 · opened

on Oct 7, 2026

5

lint: a conditional validation rule's nested `then` / `otherwise` predicate is never validated, so `os build` passes and the object save door stores a predicate the top-level rule would refuse

objectstack-ai/objectstack#22042 · opened

on Oct 6, 2026

1

finding(ci): fetch-depth 0 checkouts fetch ~1236 heads and ~7950 tags (main alone is 15–20× faster), and Test Core shards still turn a slow fetch into a cancelled required check — the cost #22020 budgets around

objectstack-ai/objectstack#22034 · opened

on Oct 6, 2026

2

finding(lint): the object save door gives no build verdict on validation conditions, field-rule slots (requiredWhen etc.), option visibleWhen or action predicates; os build refuses them, a metadata save stores them (#22019's sibling)

objectstack-ai/objectstack#22032 · opened

on Oct 6, 2026

5

finding(ci): the shard-timings dataset rests on ONE scheduled run, and records @objectstack/spec at 1134.86 s against 1573–1651 s executed — #16468's 25%-headroom ceilings built on it would red every PR that runs spec

objectstack-ai/objectstack#22014 · opened

on Oct 6, 2026

5

build: a `script` node's undeclared config key passes `objectstack validate`, `compile` and `registerFlow`, then fails every run — the key half of #21898's class (`subflow` by reading)

objectstack-ai/objectstack#21982 · opened

on Oct 6, 2026

1

security(spec, plugin-security): the AI tool contract says a context with no caller runs "RLS-on, sees-nothing", but plugin-security hands a principal-less context straight through, and on a hosted kernel it read and wrote more than a member may

objectstack-ai/objectstack#21908 · opened

on Oct 5, 2026

19

service-automation: a built-in node's config value its own contract refuses still registers, then fails every run — the built-in half of #21848's class

objectstack-ai/objectstack#21898 · opened

on Oct 5, 2026

21

finding(pm tooling): label-write falls back to a direct write under the seat's personal login when an accepted relay dispatch shows no run within 90 s — the identity exchange #19774 forbade, on a second branch

objectstack-ai/objectstack#21892 · opened

on Oct 5, 2026

4

[finding] revertCommit's restore limb hands a stored manifest-plural type ('objects') to put, so a legacy plural row's field-order restore is skipped as unchanged and still reported restored

objectstack-ai/objectstack#21821 · opened

on Oct 5, 2026

1

[PM seat] domain:services · seat 2 — 🟢 os-warren

objectstack-ai/objectstack#21118 · opened

on Oct 1, 2026

27

[finding] The delegated-admin gate resolves an EMPTY subtree on a stock `objectstack dev` boot — seeded business units are organization-less while every session carries an active organization, so every in-scope delegated write is refused

objectstack-ai/objectstack#21057 · opened

on Oct 1, 2026

9

[PM seat] domain:engine · seat 2 — 🟢 os-litant · session_01Ujdtvqs7ree7WyQmEDwEnG

objectstack-ai/objectstack#20966 · opened

on Sep 30, 2026

16

mcp distribution: verify the remote MCP + OAuth surface against ChatGPT connectors and Codex CLI, and submit the metadata-only registry listings — the remainder of #2714

objectstack-ai/objectstack#20791 · opened

on Sep 30, 2026

3

runtime strings in the `domain:spec` packages carry tracker numbers (`spec` 175 and `lint` 83 messages): this lane's share of the #20513 A/A burn-down

objectstack-ai/objectstack#20749 · opened

on Sep 30, 2026

114

automation: config.organization '*' fans a packaged scheduled flow out once per installing organization under isolated tenancy (the recorded end state of #20619 ruling A)

objectstack-ai/objectstack#20645 · opened

on Sep 29, 2026

1

[finding] the dogfood ledger row `cel-action-disabled` may be mis-measured: `action:group` / `action:menu` members evaluate a registered action's `disabled` without `throwOnError` and grey out on a fault

objectstack-ai/objectstack#20470 · opened

on Sep 28, 2026

2

Navigation Menu

Repository navigation

Issues

plugin-security: the first sign-up on a freshly seeded database blocks ~45 s while claimSeedOwnership re-owns every seed row through the full write pipeline — app hooks, record-change flows, approvals and notification emails fire for a bookkeeping write

program(pm): rule-text diet and guard-script split for the skills lane — 3,020 lines of skill text, 126k lines of pm scripts (two files 65k), 58 commits in two weeks; plus a body section-patch door and template files for seat writes

[Decision] published skills/** teaching errors are found by hand (21 of 109 lane cards in two weeks): run the skill evals or a schema check over skill examples in CI (a new gate), or keep maintainer-scored evals

finding(spec): the expression dialect table lists notification subjects/bodies as `template` slots, but NotifyConfigSchema.title is z.string() and refuses the tmpl envelope

protocol(pm): a silent claim has no reclaim clock or write path — seat-lifecycle.md:37's one-day recycle names no actor, so p1 #21892 idles 34 h with no PR and its serial dependent #21915 waits

fleet-write: no relay op for PUT /pulls/{n}/update-branch — the sanctioned base sync (rest-channel.md:49) runs as bare REST and authors the merge commit under the seat's personal account (PR #22002 head fab444b4)

[Decision] the >5000-line SIZE limb counts a pure deletion the maintainer already ruled (ruling 208), and the Tier H wait for an authorized APPROVED has no clock — PR #22002 idles green

decision: open v18 now and ship it in stages — release the last 17.x from main first without waiting for #21908's deny (A), skip the last 17.x (B), or keep #22009's order (C)?

security(service-storage): three upload doors authorize by session alone, with no ownership or resume-token check on the file or upload they name (the owner-check class the #21908 ruling sent to its own card)

lint: a conditional validation rule's nested `then` / `otherwise` predicate is never validated, so `os build` passes and the object save door stores a predicate the top-level rule would refuse

finding(ci): fetch-depth 0 checkouts fetch ~1236 heads and ~7950 tags (main alone is 15–20× faster), and Test Core shards still turn a slow fetch into a cancelled required check — the cost #22020 budgets around

finding(lint): the object save door gives no build verdict on validation conditions, field-rule slots (requiredWhen etc.), option visibleWhen or action predicates; os build refuses them, a metadata save stores them (#22019's sibling)

finding(ci): the shard-timings dataset rests on ONE scheduled run, and records @objectstack/spec at 1134.86 s against 1573–1651 s executed — #16468's 25%-headroom ceilings built on it would red every PR that runs spec

build: a `script` node's undeclared config key passes `objectstack validate`, `compile` and `registerFlow`, then fails every run — the key half of #21898's class (`subflow` by reading)

security(spec, plugin-security): the AI tool contract says a context with no caller runs "RLS-on, sees-nothing", but plugin-security hands a principal-less context straight through, and on a hosted kernel it read and wrote more than a member may

service-automation: a built-in node's config value its own contract refuses still registers, then fails every run — the built-in half of #21848's class

finding(pm tooling): label-write falls back to a direct write under the seat's personal login when an accepted relay dispatch shows no run within 90 s — the identity exchange #19774 forbade, on a second branch

[finding] revertCommit's restore limb hands a stored manifest-plural type ('objects') to put, so a legacy plural row's field-order restore is skipped as unchanged and still reported restored

[PM seat] domain:services · seat 2 — 🟢 os-warren

[finding] The delegated-admin gate resolves an EMPTY subtree on a stock `objectstack dev` boot — seeded business units are organization-less while every session carries an active organization, so every in-scope delegated write is refused

[PM seat] domain:engine · seat 2 — 🟢 os-litant · session_01Ujdtvqs7ree7WyQmEDwEnG

mcp distribution: verify the remote MCP + OAuth surface against ChatGPT connectors and Codex CLI, and submit the metadata-only registry listings — the remainder of #2714

runtime strings in the `domain:spec` packages carry tracker numbers (`spec` 175 and `lint` 83 messages): this lane's share of the #20513 A/A burn-down

automation: config.organization '*' fans a packaged scheduled flow out once per installing organization under isolated tenancy (the recorded end state of #20619 ruling A)

[finding] the dogfood ledger row `cel-action-disabled` may be mis-measured: `action:group` / `action:menu` members evaluate a registered action's `disabled` without `throwOnError` and grey out on a fault