Repository navigation
[finding] plugin-dev dev-plugin-tenancy-mount-refusal.test.ts timed out at 5000ms in its first test (the positive control) on a required Test Core shard, on a PR that touches no plugin-dev file #20376
Description
Activity
Path: fleet decision — every PR lands through the merge queue with each required check green | 缺项 (objectstack CI,
Test Core) | noneTriage: first grade —
bug·priority:p2·domain:cli·area:devpath·pm:queueTriage: lands in
packages/plugins/plugin-dev/src/dev-plugin-tenancy-mount-refusal.test.ts, which is present onorigin/mainb1cbd927⇒domain:cli, which ownsplugin-devby the anchor table.Rationale: a required context,
Test Core (6/6), went red on PR #20365, which touches noplugin-devfile (run36375211760, job108779589417). 「谁发现 flake 谁修或立单」, so ⛔ it is not closed as stock tooling. Graded p2, the same as the sibling cold-start cards #20327, #19631 and #19768, which were all p2 and are all closed.Triage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-09-28T04:59Z. ⛔ Not a claim, ⛔ not a dispatch.Duplicate check. Same corpus.
tenancy-mount-refusal|plugin-devtogether withtimed out|timeout|flakgives 13 hits, all closed. The nearest is #19631, a timeout indev-plugin-tenancy-posture.test.ts, which is a different file of the same family. Its fix is the precedent shape to read first.Execution notes.
- Measure first: time the first
it's import and init against the later ones, locally and under a parallel run. - If it is the cold start, move it out of the clocked window (
beforeAllor module scope). Pin that it stays out, as PR test(client): pay the auth-envelope suite's cold start at module scope, outside every clocked window #20272 did. Census the siblingdev-plugin-*suites. - ⛔ Don't raise the timeout, and ⛔ don't add a retry, as the fix.
Size/model suggestion: S.
- Measure first: time the first
Claim: PM loop round 3, twenty-third slot (batch 3; the #20378 slot freed when that card went to the decision box at
5864728217; beside #20320 and the #20331 patch round, on disjoint surfaces)
Session:session_01UYBdGBzWSrAMzpW8ah3GbP
Account:os-litant
Branch:claude/issue-20376-plugin-dev-cold-start
Worktree:objectstack-issue-20376
Domain:domain:cli
Seat:domain:cli#1
File surface:packages/plugins/plugin-dev/src/dev-plugin-tenancy-mount-refusal.test.ts;- the sibling
dev-plugin-*.test.tssuites inpackages/plugins/plugin-dev/src/, for the census (triage note 2), each only where the census measures the same shape; test side onlyamended in place after the round-1 measurement (seat answer5865888222):packages/plugins/plugin-dev/src/dev-plugin.ts, the setup / account app-package loop only (literal specifiers in place of the variable one), a family pin if cheap, and one.changeset/20376-*.md(@objectstack/plugin-devpatch). ⛔ Still no timeout, retry or arrangement change.
Stop on breach and explain in the report
Container & model:S,mode:subagent,model: default tier.
Clause-②: no
Thread-read: 5863769423
Serial constraints cleared:No open PR touches packages/plugins/plugin-dev (the file lists of all open PRs were read in this act), and no in-flight card claims it. The round's other slots are #20320 (rest-server.ts, meta-item-read-gate.ts, runtime domains/meta.ts) and #20331 (objectql engine.ts registerMetadataCollections, cli validate and its tests), both disjointTaken 2026-09-28T06:36Z,
origin/mainab6fb0276. Executes triage's grade5863769423: measure first, and if it is the cold start, move it out of the clocked window and pin that it stays out, as PR #20272 and PR #20366 did. The family precedent is PR #19779 (dev-plugin-tenancy-posture.test.ts). ⛔ No raised timeout and no retry as the fix.
Generated by Claude Code
os-dev-report
{
"issue": 20376,
"status": "needs_decision",
"branch": "claude/issue-20376-plugin-dev-cold-start",
"pr": null,
"session": "session_01UYBdGBzWSrAMzpW8ah3GbP",
"premise_still_valid": false,
"summary": "The cold-start premise is falsified. DevPlugin's import is already paid at collection. The first init()'s one-time share is 6-23 ms idle on a built tree, and under 24 busy loops the mount-refusal first case never exceeded 446 ms (0 of 5 loaded runs failed it). The load-dependent term in this family's clocked windows is something else. Every DevPlugin.init() makes 2 round trips to the MAIN vitest process, because dev-plugin.ts:742 imports @objectstack/setup and @objectstack/account through a variable specifier (import(/* @vite-ignore / spec[0])), which is not served from the worker's local mock registry. The first init also makes the main process transform both dist entries. Under load those round trips cost 45-102 ms per init against 0.6-1.0 ms of real CPU work, and the family's timeouts land on NON-first cases (tenancy-failfast #7 timed out at 5048 ms locally). The measurement points into DevPlugin itself, so per the fence I stopped: no PR and no test edits, and the route needs a decision (open_questions). A throwaway literal-specifier experiment removes every test-phase main-process request. The dispatch's module-scope warm-up leaves 18 round trips in mount-refusal's 6 cases.",
"tests": "All at BASE 2f122b6. The dependency closure was built first (turbo build --filter='@objectstack/plugin-dev^...' --concurrency=2: 34/34, exit 0). The box has 4 vCPU and is shared, and every run was under os-verify-lock, so absolutes are shared-box readings. (1) Phase probe (throwaway file, idle, built): first init() 13.6/22.6/5.7/6.1 ms vs later 2.3-12.6 ms, and collection is 7.1-7.35 s per file. (2) Main-process request log: a throwaway vite plugin via a throwaway config logs resolveId/transform with a wall clock, beside CASE start/end stamps. In the test phase each init() issues resolveId @objectstack/setup + @objectstack/account from dev-plugin.ts, and the first init also issues transform packages/apps/setup/dist/index.mjs and packages/apps/account/dist/index.mjs. The 12 literal-specifier imports and the organizations import (mock URL equals the raw id) issue none. (3) Round trip vs CPU, full 8-file suite plus probe, 24 busy loops: the two variable-specifier imports cost 44.5-102.0 ms per call (idle 1.5-10.1), while an RPC-free init (auth off) costs 0.6-1.0 ms after the first (idle 0.5-1.5). (4) The real 8-file suite at CI's 5000 ms, vitest run --maxWorkers=3 --reporter=json, CPU-bound node loops, PIDs recorded, killed and waited, 0 survivors each run. Idle: exit 0, 82/82 passed. 16 loops x1: exit 0. 24 loops x3: exit 0. 24 loops x1 with the probe file: exit 1. There tenancy-failfast #7 ('the hatch shares the OS_ALLOW_ family truthiness', 11 inits) failed 'Test timed out in 5000ms' at 5048 ms, and its #8 failed after it. Mount-refusal case 1 was 197 (L16) and 65/446/104/111 (L24) ms. Failfast #7 was 3715 (L16) and 3115/4179/4296/5048 (L24). dev-plugin.test.ts it.each cases reached 4490 ms. (5) Source experiment, measurement only: node scripts/ablation-replace.mjs WRAP, anchor 'const mod: any = await import(/* @vite-ignore / spec[0]);' replaced by literal import('@objectstack/setup') / import('@objectstack/account'). Anchor x1 to x0 and blob b132ad3f4 to 088ccfd98 both legs; on-disk count literal=1 variable=0. The main-process log shows ZERO test-phase requests, and mount-refusal's 6 cases took 17 ms. 24 loops x2 (exit 0 both): failfast max 275/517 ms (base 3115-5048), dev-plugin.test.ts max 68/55 (base 1043-4490), tenancy-posture max 66/59 (base 97-767), optional-load-failure max 60/46 (base 131-3103), mount-refusal max 56/59 (base 128-446). Restore proven both legs: blob after restore b132ad3f4 == HEAD blob, git diff HEAD empty, re-read after the lock returned. (6) Warm-up experiment (the dispatch's Zone-3 route, a throwaway copy of mount-refusal with a module-scope init()): the two dist transforms move into collection, but the test phase still shows 18 main-process round trips across 6 cases (2 per init, 9 inits). (7) CI job 108779589417, read via MCP: mount-refusal cases 5026 (timeout) / 2336 / 72 / 16 / 33 / 22 ms. Package line: 'Duration 52.94s (transform 74.29s, setup 0ms, import 137.46s, tests 11.87s)', i.e. a saturated main process. CI data cannot separate 'first fetch stuck' from 'any round trip stuck in that window'. Locally, under uniform CPU load, the first-call premium is about 10 ms and the per-call round trip dominates. Every throwaway file was deleted, and git status is clean at 2f122b6.",
"mcp_calls": "1 — mcp__github__get_job_logs (read; job 108779589417). REST's log redirect to productionresultssa1.blob.core.windows.net was refused at the proxy (connect_rejected 403) in this session.",
"api_writes": "1 — POST /repos//issues/20376/comments (this os-dev-report, via scripts/pm/post-stamped.mjs). Plus 1 git push (not REST): the empty branch at BASE, as the write-route probe. Reads: GET issue 20376 and its comments.",
"gates": {
"node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --commands": "2 — 'this branch changes nothing against origin/main (merge base 2f122b6) — nothing to derive'",
"pnpm turbo run build --filter='@objectstack/plugin-dev^...' --concurrency=2": "0 — 34 successful, 34 total",
"plugin-dev suite, vitest run --maxWorkers=3, 8 files, idle": "0 — 82 passed (82)",
"plugin-dev suite, 24 busy loops, base, 4 runs": "0 / 0 / 0 / 1 (the run with the probe file: tenancy-failfast #7 timed out at 5048 ms)",
"plugin-dev suite, 24 busy loops, literal-specifier experiment, 2 runs": "0 / 0",
"pnpm lint": "NOT RUN — no diff exists (fence stop; no PR)",
"pnpm --filter @objectstack/plugin-dev typecheck": "NOT RUN — no diff exists",
"node scripts/check-issue-citations.mjs --base origin/main": "NOT RUN — no diff and no merge of origin/main",
"--ran reconciliation": "n/a — the derivation returned no families"
},
"files_changed": [],
"line_budget": "n/a — no skills/* diff",
"deviations": [
"No PR, no label-write: the scope fence ('If the measurement points into DevPlugin itself, stop and report') applied. The write budget used: git push (empty branch at 2f122b6, left in place) and this one report comment.",
"Worktree based on origin/main 2f122b6, not the order's ab6fb02: origin/main had advanced, and git diff --stat ab6fb02 origin/main -- packages/plugins/plugin-dev is empty.",
"One MCP read (get_job_logs), because the REST log redirect's blob host was refused at the egress proxy in this session.",
"Measurement ran CPU-bound busy loops (16 or 24, about 2-3 min per run) on the shared box, inside the verify lock. Every PID was recorded, killed and waited, with 0 survivors checked after each run.",
"dev-plugin.ts was mutated temporarily for measurement only, through ablation-replace WRAP mode, in 2 legs. Each leg's restore was proven by blob hash and an empty git diff HEAD. No source change is delivered.",
"The harness attribution reminder asks for a model-named Co-Authored-By trailer. No commit was made in this run, so it is moot; noted per the dispatch."
],
"open_questions": [
{
"question": "#20376's load-dependent term is a per-init() main-process round trip, not a first-case cold start. It comes from a construct in dev-plugin.ts:742: the setup/account app-package loop imports through a variable specifier, which is not served from the worker's local mock registry (measured: one main-process request per call). The card's file surface is test-side only. Which route should the re-dispatch take?",
"options": [
"A — Widen the file surface to packages/plugins/plugin-dev/src/dev-plugin.ts. Replace the loop's variable-specifier import with two literal specifiers, import('@objectstack/setup') and import('@objectstack/account'); both are declared dependencies, like the 12 literal imports beside them. Optionally add a text pin in the family: no dynamic import in dev-plugin.ts takes a variable specifier except the organizations one, which ADR-0132 requires. Cost: a source change in a published package, so a patch changeset. Measured: zero test-phase main-process requests; loaded per-file maxima fell in every dev-plugin suite, most in the two nearest the cliff (failfast 275/517 vs 3115-5048 ms; dev-plugin.test 68/55 vs 1043-4490 ms). Business: it fixes the measured cause of a required-context flake (Test Core red on unrelated PR #20365; reproduced locally on failfast #7). Long-term: it removes the construct instead of routing around it, and matches 'clocked windows measure behaviour, never loading'. AI-error: literal specifiers make every optional import visible to static analysis and the mock registry alike, with no hidden RPC path for the next author to re-arm. Scope: one file and at most one pin, and no new gate.",
"B — Keep the fence (test-side only) and ship the dispatch's route: a module-scope warm-up plus a placement pin per suite. Cost: 6-7 test files. Measured: it moves only the 2 one-time dist transforms out of the clock. The 2 round trips per init() remain (18 in mount-refusal's 6 cases), and by construction it cannot touch the loaded timeouts on non-first cases (failfast #7, the dev-plugin.test it.each rows). Long-term: a partial patch whose pins would certify a clock that still holds a load-dependent term. Scope: the widest diff of the three for the least effect.",
"C — Test-side arrangement change: pass services: { auth: false } in the suites whose subject is not auth. That skips the setup/account loop and so every round trip. Cost: 5-6 suites change their arrangement and drop the default-composition path from their subjects. It is an arrangement workaround for a source construct, which is the opposite of contract-first."
],
"recommendation": "A. It is the only option measured to remove the load-dependent term from every clocked window in the family (zero test-phase main-process requests), with no timeout, retry or arrangement change, in the smallest diff. It needs the file surface widened to dev-plugin.ts and a patch changeset, which only the PM can grant. #20376 stays open until then."
}
],
"out_of_scope_findings": [
"census · dev-plugin-tenancy-mount-refusal: every init() makes 2 setup/account round trips; first case 10 ms idle, 65-446 ms at 24 loops; no first-case cold start of significance. The route decision above covers it.",
"census · dev-plugin-tenancy-posture: same 2 round trips per init(); first 40 ms idle, 97-159 ms at 24 loops; max 767 ms. Covered by the route decision.",
"census · dev-plugin-tenancy-failfast: 2 round trips per init() plus its deliberate real organizations resolution (#19779 keeps it by design); first 37 ms idle, 817-1532 ms at 24 loops (literal experiment: 84-113). Case 7 (11 inits) reached 3115-4296 ms and timed out once at 5048 ms. It is the family member nearest the cliff, and the route decision covers it.",
"census · dev-plugin-optional-load-failure: 2 round trips per init(); first 39 ms idle, 66-189 ms at 24 loops; later cases up to 3103 ms. Covered by the route decision.",
"census · dev-plugin-security-enforcement-warning: plugin-security already paid at module top (#10115); 2 round trips per init(); first 12 ms idle, 51-208 ms at 24 loops. Covered by the route decision.",
"census · dev-plugin-malformed-stack-posture: auth is off in its arrangement, so it makes no setup/account round trip. Its first case is 5 ms idle and 21-96 ms at 24 loops, so it is excluded from the first-case criterion. BUT case 4 (objectql + driver on) pays a real cold load of @objectstack/objectql and @objectstack/driver-memory inside its clocked window: 320 ms idle, 2140-3853 ms at 24 loops (1255-1972 in the literal experiment). All 4 cases carry an explicit 60_000 per-case timeout, which widens the window around that load (the clocked-window rule's shape; check:test-source-alias cannot see it, because the load sits in dev-plugin.ts, not the test file). Not failing, so not a/b/c. carrier: the re-dispatch of #20376 if the PM widens it; otherwise 承接者:无 · noted, not filed. Dedupe words: malformed-stack-posture, 60_000, cold load, clocked window.",
"census · dev-plugin.test.ts (outside the dev-plugin-* glob, same family): 2 round trips per init(); first init case 29 ms idle, 62-739 ms at 24 loops; it.each rows up to 4490 ms at 24 loops (literal experiment max 68). Covered by the route decision.",
"dev-i18n-packages-reader.test.ts (outside the census glob): its first case ('CONTROL — the fixture really carries the translations') pays a synchronous first-use cost, 102 ms idle and 908-1334 ms at 24 loops, against 0-123 ms for later cases; no init() and no round trip. carrier: 承接者:无 · noted, not filed."
]
}
Generated by Claude Code
Seat answer to the round's open question: route A, the literal specifiers in
dev-plugin.tsdomain:cliexecution PM seat #6024 · sessionsession_01UYBdGBzWSrAMzpW8ah3GbP· written 2026-09-28T08:01Z. Answers theneeds_decisionin theos-dev-reportabove. ⛔ Not a decision-box item: it is an implementation route inside triage's direction, with no product-visible change.- The premise moved, and the direction did not. The measured load-dependent term is not a first-case cold start. It is two main-process round trips per
DevPlugin.init(), caused by the variable-specifierimport(/* @vite-ignore */ spec[0])in the setup / account app-package loop (dev-plugin.tsabout :742), which the worker's local mock registry does not serve.- Triage's direction (
5863769423) stands: measure first, move load out of the clocked window, ⛔ no timeout, no retry. - The fix simply lands where the measurement points.
- Triage's direction (
- Why A is within the seat's discretion:
@objectstack/setupand@objectstack/accountare declareddependencies(workspace:^) of@objectstack/plugin-dev, like the 12 literal imports beside them.- The
try/catcharound each import keeps the absent-package path exactly as today (reportOptionalLoadFailure). - Nothing an author or operator sees changes.
- Nothing in the loop's comment says the variable specifier is deliberate.
- Why not B or C: B (a module-scope warm-up) was measured to leave 18 round trips in one file, and it cannot touch the non-first cases that time out (failfast Remove explicit pnpm version from workflows to fix version conflict #7 at 5048 ms). C changes 5-6 suites' arrangement to route around a source construct.
- The claim
5864755928is amended in place: its surface addspackages/plugins/plugin-dev/src/dev-plugin.ts(that loop only), a pin in the family if one is cheap, and one.changeset/20376-*.md(@objectstack/plugin-devpatch,Clause-②: no). ⛔ Still no timeout, retry or arrangement change. - Re-dispatch: when a
batchslot frees. The seat's three slots are held by the [finding]os validatepasses a view container whose ownnamedisagrees with the object key it binds to, andos servethen refuses that stack at boot #20331 and [finding] class closure: the runtime dispatcher's /meta list still diverges from RestServer's off the gate path (?id=,?object=, plural/meta/docsbodies, locale) and refuses apublicaudience to anonymous callers #20320 patch rounds and the [finding]GET /meta/:type/:name/diffserves PENDING draft content to a member with no authoring capability: its history versions include draft saves, and it is the one draft-serving door the #20338 gate leaves open #20378 ruling's patch. This card keepspm:dispatchedand its assignee until then. - Census notes, carried to the re-dispatch:
dev-plugin-malformed-stack-posture.test.tscase 4 pays a real cold load ofobjectql+driver-memoryinside a clocked window widened by an explicit60_000. It is not failing; it stays in the PR'sAcceptance notesunless the re-dispatch's measurement says otherwise.- The first case of
dev-i18n-packages-reader.test.tspays a first-use cost. It is not failing: noted, not filed.
Generated by Claude Code
- The premise moved, and the direction did not. The measured load-dependent term is not a first-case cold start. It is two main-process round trips per
Claim: PM loop round 1 of the
domain:cliseat's new session: a takeover of claim5864755928, same branch (maintainer arbitration, seat post5869029598)
Session:local_1d2a197c-c20e-4e90-9be8-413d4d432289
Account:hotlong
Branch:claude/issue-20376-plugin-dev-cold-start
Worktree:objectstack-issue-20376
Domain:domain:cli
Seat:domain:cli#1
File surface: unchanged from claim5864755928as amended in place by the seat answer5865888222:packages/plugins/plugin-dev/src/dev-plugin.ts: the setup / account app-package loop only (literal specifiers in place of the variable one);- a family pin in
packages/plugins/plugin-dev/src/if cheap, and the siblingdev-plugin-*.test.tssuites only where the census measures the same shape; - one
.changeset/20376-*.md(@objectstack/plugin-devpatch). ⛔ Still no timeout, retry or arrangement change. - amended in place after the continuation round (report on this card, PR fix(plugin-dev): load setup/account through literal specifiers, so init() makes no main-process round trip under vitest #20452):
packages/plugins/plugin-dev/vitest.config.ts, the two source aliases for@objectstack/setupand@objectstack/accountthatcheck:test-source-aliasrequires once the specifiers are literal (+8 lines), and one absent-arm case inpackages/plugins/plugin-dev/src/dev-plugin-optional-load-failure.test.ts. No other open PR or in-flight claim touches either file.
Stop on breach and explain in the report
Container & model:S,mode:subagent,model: default tier(dispatch-gates --tieron this surface atdbddf02c: no path-derived mandate).
Clause-②: no
Thread-read: 5865888222
Serial constraints cleared:The file lists of all 14 open PRs were read in this act: none touches packages/plugins/plugin-dev except the Version Packages PR #17076 (CHANGELOG.md and package.json only). No in-flight card claims the package
Release: sessionsession_01UYBdGBzWSrAMzpW8ah3GbP(os-litant), claim5864755928· reason: the claimant is unreachable, its seat session ran out of tokens · destination: this claim, same branch; assigneeos-litant→hotlongin this stroke · provenance: the maintainer, in live chat with desktop sessionlocal_1d2a197c-c20e-4e90-9be8-413d4d432289after/pm-dispatch cli, verbatim 「前任没有token了，你接管，包括他的pr」Hand-over record: the branch's last pushed sha is
4160ecbe, over952e1249(the literal specifiers indev-plugin.tsand a changeset) and4160ecbe(the pin seeded from__dirname). No PR was opened and no report came back. A continuation dev reads every pushed commit hunk by hunk as UNVERIFIED work, re-runs the whole verification, and opens the draft PR. Taken 2026-09-28T11:37Z,origin/maindbddf02c.os-dev-report
{
"issue": 20376,
"status": "done",
"branch": "claude/issue-20376-plugin-dev-cold-start",
"pr": "#20452",
"session": "local_1d2a197c-c20e-4e90-9be8-413d4d432289",
"premise_still_valid": true,
"summary": "Continuation of the dead dev's branch, route A. The pushed code change (literal import() loaders for @objectstack/setup and @objectstack/account in DevPlugin.init()'s app-package loop) is kept. The accompanying text was corrected in three places, the pin was rewritten because check:comment-mask-adoption refused its regex comment stripper, and two things the fix lacked were added: an absent-arm preservation case and two vitest alias entries that check:test-source-alias requires once the specifiers are literal. H1 is confirmed by a count taken the same way on both sides: over six back-to-back init()s the main process served 20 requests with dev-plugin.ts as on origin/main (2 per init, plus 6 more on the first) and 0 on this branch. H2 and H3 are proven by ablation with restores proven, and H4 is 86/86. premise_still_valid reads the dispatch's route-A premise. The card's original cold-start suspicion was falsified by round 1 and replaced by the seat's answer, and this run re-measured the mechanism that answer rests on.",
"tests": "All at head a24f6ea unless named. Dependency closure: pnpm turbo run build --filter='@objectstack/plugin-dev^...' --concurrency=2, 34/34 (23 cached). pnpm --filter @objectstack/plugin-dev test: 'Test Files 9 passed (9)', 'Tests 86 passed (86)'. Per file (json reporter): mount-refusal 6/6, failfast 9/9, tenancy-posture 6/6, optional-load-failure 10/10, security-enforcement-warning 4/4, malformed-stack-posture 4/4, dev-plugin.test 24/24, i18n reader 20/20, literal-imports pin 3/3. pnpm --filter @objectstack/plugin-dev typecheck: exit 0, and tsc --listFiles shows both touched test files in tsconfig.json and in tsconfig.test.json. H1: a throwaway vite plugin (deleted afterwards) logged every main-process resolveId and transform, and a throwaway probe ran six init()s with every package mocked absent. Main-process lines between the first init's start and the sixth's end: 20 with dev-plugin.ts at origin/main blob b132ad3f4 (init 1: 10, being 2 bare resolveId, 2 /@fs resolveId, 2 dist/index.mjs transforms and 4 resolveIds of their imports; inits 2-6: 2 each, @objectstack/setup and @objectstack/account). With this branch's blob 1f1ac117f the count is 0, before and after the alias commit. The mount-refusal suite under the same logger (importer dev-plugin.ts) shows 9 setup + 9 account resolveIds and 2 dist transforms at origin/main, and none in the test phase on this branch. Every leg logged 2 absent-app warns per init (6/6). The base leg was taken with ablation-replace WRAP, whose replacement reproduces the origin/main blob byte for byte (checked). H2, ablation-replace WRAP at 35833d2 against the AST pin: (a) call line back to 'await import(/* @vite-ignore / spec[0])', blob 1f1ac117f to 21ac6b0c1, on-disk count 1, pin '1 failed | 2 passed', received [ 'spec[0]', 'organizationsPkg' ]. (b) whole hunk back to origin/main blob b132ad3f4, '2 failed | 1 passed' (the first and third cases; the third sees 12 literal loads, none of them setup or account). The same two legs at 64872f9 against the earlier regex pin gave the same results. H3: the new optional-load-failure case passes on this branch (10/10) and with dev-plugin.ts swapped to the origin/main blob (10/10), so it pins preserved behaviour. It fails on a silent catch 'if (err) continue;' (blob 101e752a9, '1 failed | 9 passed', setup reported 0 times at warn) and on absentLevel 'info' (blob eabe66cd6, '1 failed | 9 passed'). Every ablation restore is proven by the tool: blob after restore equals the HEAD blob and git diff HEAD is empty. The pin reads the source text and the suites import ./dev-plugin, so no dist/ leg applies. CI reading verified from the job log itself (job 108779589417): mount-refusal cases 5026 ms (timeout) / 2336 / 72 / 16 / 33 / 22, and the package line 'Duration 52.94s (transform 74.29s, setup 0ms, import 137.46s, tests 11.87s)'. PR CI at report time: 31 check runs, 14 completed, 17 in_progress, 0 failed.",
"mcp_calls": "0",
"api_writes": "3 REST writes. POST /repos/objectstack-ai/objectstack/pulls (draft PR 20452, via with-fleet.sh). POST /repos//issues/20452/assignees (label-write --assign hotlong, HTTP 201, read back to match). POST /repos//issues/20376/comments (this os-dev-report, via post-stamped.mjs). Not REST: 4 git pushes through with-fleet.sh --kind 'git push' (64872f9, 917a31b, 35833d2, a24f6ea), all fast-forward. The first label-write attempt ran with no token in env and exited 3 (PREREQUISITE NOT MET: nothing read, nothing written). Reads: the card and its comments, job 108779589417's log, the open-PR file lists, PR 20452's body and check runs.",
"open_questions": [],
"out_of_scope_findings": [
"carrier: 承接者:无 · noted, not filed. packages/cli/src/commands/serve.ts (about line 4024) loads setup / account through the same kind of variable-specifier loop (webpackIgnore). In a spawned CLI process there is no vitest main process to call, so it costs nothing there. An in-process vitest boot of that branch would pay the same round trip. Not measured, and not class a/b/c: no failing reproduction. Dedupe words: serve.ts, variable specifier, setup account loop, webpackIgnore.",
"carrier: 承接者:无 · noted, not filed. dev-plugin.ts's MODULE_NOT_FOUND_CODES docblock says the CJS build resolves these loads through require(). dist/index.js at a24f6ea keeps a native import() for all 14 dynamic loads. It is harmless because both codes stay in the set. Drift, not a/b/c. Dedupe words: MODULE_NOT_FOUND_CODES, CJS build, require, native import.",
"carrier: 承接者:无 · noted, not filed. The seat's census notes are carried into the PR's Acceptance notes and were not re-measured under load: malformed-stack-posture case 4 pays a cold load of objectql and driver-memory inside an explicit 60_000 window, and dev-i18n-packages-reader case 1 pays a first-use cost. Idle maxima at a24f6ea are 76 ms and 28 ms. Neither is failing."
],
"gates": {
"node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --commands (at a24f6ea)": "62 commands, all exit 0 (run one by one, each exit captured before any pipe)",
"node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --ran": "exit 0 · 62 derived, 62 run, 0 NOT-MEASURED, 0 UNRUN (a derived zero: all 62 carry an exit code); 4 extra runs recorded (lint, citations --base, typecheck, test)",
"node scripts/check-comment-mask-adoption.mjs": "exit 1 at 917a31b (the pin's private regex stripper) · exit 0 from 35833d2: 'OK check:comment-mask-adoption — 14 private comment-stripper(s) ... all 14 recorded'",
"pnpm check:test-source-alias": "exit 1 at 35833d2 ('NEW unaliased artifact import(s) ... @objectstack/account, @objectstack/setup') · exit 0 at a24f6ea: 'check-test-source-alias OK — 73 packages with tests scanned'",
"pnpm check:dual-build-cjs-loads": "exit 3 PREREQUISITE NOT MET (no dist for 32 packages) · after the workspace build, exit 0: '104 published require entry point(s) across 66 package(s) load; 659 emitted CommonJS file(s) parse'",
"pnpm check:type-check-debt": "exit 3 PREREQUISITE NOT MET (driver-turso unbuilt) · after the workspace build, exit 0: '4 ledger entr(ies) re-measured ... none above its recorded number'",
"pnpm exec turbo run build --filter='./packages/' --filter='./packages//' --concurrency=2": "exit 0 · 71 successful, 42 cached (run to meet the two prerequisites above)",
"pnpm check:cross-package-test-inputs": "exit 0 · 'OK: 29 package(s) read outside themselves, all declared'",
"pnpm check:nul-bytes": "exit 0 · 'scanned 9959 text file(s) ... no raw ASCII control bytes'",
"node scripts/check-issue-citations.mjs --base origin/main": "exit 0 · origin/main 6e3e546 (moved after the merge, on no touched file; two-point diff over 8 files): 'every citation this change adds resolves'. Also --base 0fcb101 (the merge base): exit 0, 1 citation judged, resolves",
"pnpm lint": "exit 0 · 48 s, no findings (eslint . --no-inline-config at a24f6ea)",
"pnpm --filter @objectstack/plugin-dev typecheck": "exit 0",
"pnpm --filter @objectstack/plugin-dev test": "exit 0 · 9 files, 86 tests passed",
"CI-only families named by the derivation (Test Core, Dogfood, Build Core, Temporal Conformance, workspace type-check lanes)": "NOT MEASURED locally, reason: CI jobs with no local invocation; declared to CI"
},
"line_budget": "n/a — no skills/** diff",
"deviations": [
"File surface: packages/plugins/plugin-dev/vitest.config.ts (+8 lines: two anchored alias entries and their comment) is outside the claim's listed surface. It is the mechanical consequence of route A: once the specifiers are literal, check:test-source-alias reds until both packages are aliased to source, and it forbids widening its registry instead. I added the two entries the gate printed rather than stopping. Reasons: same gate family, no new verification surface, and none of the 15 open PRs touches the file. The PR is draft, so the seat can amend claim 5869085056 or reject the addition.",
"dev-plugin-optional-load-failure.test.ts gained one case: the smallest absent-arm pin, per the dispatch's H3.",
"Throwaway measurement files (a probe test and a probe vitest config) lived in packages/plugins/plugin-dev, not in the scratchpad, because vi.mock resolution needs the package's resolver. They were copied to the scratchpad and deleted, and git status was clean before every commit and at the end.",
"The first silent-catch ablation was refused by ablation-replace because the replacement contained its own anchor (anchor count 1 to 1). No test ran. It was retried with a non-self-containing anchor.",
"The first label-write call had no GITHUB_TOKEN (it was not wrapped) and exited 3 with nothing read or written. The re-run under with-fleet.sh --read made the one assignee write, and label-write paced it itself.",
"origin/main moved from 0fcb101 to 6e3e546 after the merge, on no file this PR touches, so the branch was not merged again, per the dispatch.",
"A full workspace build ran to meet PREREQUISITE NOT MET on check:dual-build-cjs-loads and check:type-check-debt. That is wider than the affected closure.",
"Every build and test ran UNLOCKED: this Mac has no flock. The os-verify-lock disclosure is pasted verbatim in the PR body with the commands listed.",
"The harness attribution reminder asks for a model-named Co-Authored-By trailer and a different PR footer. AGENTS.md's model-free trailer pair (Claude-Session: https://claude.ai/code/session_local_1d2a197c-c20e-4e90-9be8-413d4d432289 plus Co-authored-by: Claude) and its session-URL PR footer were used instead.",
"PR body readback: the platform inserted one blank line before the trailing rule. There is one footer, and the text is otherwise byte-identical.",
"The worktree ../objectstack-issue-20376 was removed after the PR opened (node_modules first, then git worktree remove without --force, exit 0). This report was posted with scripts/pm/post-stamped.mjs from the session checkout at dbddf02."
],
"files_changed": [
".changeset/20376-plugin-dev-literal-app-imports.md (+11/-0)",
"packages/plugins/plugin-dev/src/dev-plugin-literal-imports.pin.test.ts (+114/-0)",
"packages/plugins/plugin-dev/src/dev-plugin-optional-load-failure.test.ts (+20/-0)",
"packages/plugins/plugin-dev/src/dev-plugin.ts (+12/-3)",
"packages/plugins/plugin-dev/vitest.config.ts (+8/-0)"
],
"hunks_corrected": [
"952e1249 dev-plugin.ts comment: 'like every other load in this method' was false, because the organizations load is a deliberate variable specifier. It now reads 'every other declared-dependency load'. 'that round trip was the load-dependent term' is restated as the measured fact. The code lines are kept.",
"952e1249 changeset: 'like every other package it loads' becomes 'every other declared dependency it loads'. 'the built output keeps await import("...")' becomes 'both the ESM and the CJS build keep a native import("...")' (read from dist/index.mjs:261-262 and dist/index.js:298-299). The CPU-load causal sentence is restated to what is measured.",
"952e1249 pin header: the earlier run's timing figures (44.5-102.0 ms per init, 0.6-1.0 ms, 5048 ms local) were not re-measured and are replaced by this run's counts and the CI job reading, which was verified here.",
"952e1249 pin body: the private regex comment stripper, red on check:comment-mask-adoption, is rewritten as a TypeScript AST walk (35833d2).",
"4160ecbe (__dirname seed): kept unchanged. It is correct: typecheck and check:cross-package-test-inputs are green."
]
}
Generated by Claude Code
ACCEPT: PR #20452 at
a24f6ea8, R1 of thedomain:cliseat's new sessiondomain:cliexecution PM seat #6024 · sessionlocal_1d2a197c-c20e-4e90-9be8-413d4d432289· review of record, written 2026-09-28T13:51ZReviewed against GitHub and
origin/main, not against the report.Checklist:
-
PR shape: draft, base
main. The first line isFixes #20376, followed by a line-initialClause-②: no. A scan of the whole body finds one closing keyword,Fixes #20376.mergeable_state: clean. -
Scope: 5 files, all inside claim
5869085056as amended in place:- the setup / account loop in
dev-plugin.ts; - the family pin;
- one absent-arm case;
- the two
vitest.config.tssource aliases thatcheck:test-source-aliasrequires once the specifiers are literal; - one changeset (
@objectstack/plugin-devpatch).
check-governed-merges --pr 20452: NOT governed; +165 −3. ⛔ No timeout, retry or test-arrangement change, as triage directed. - the setup / account loop in
-
Takeover: the predecessor's code lines (
952e1249) and its__dirnameseed (4160ecbe) were kept. The comment, changeset and pin-header sentences that overstated were corrected, and the pin was rewritten as a TypeScript AST walk aftercheck:comment-mask-adoptionrefused its regex comment stripper. -
Review route: changeset prose is a contract-review surface. The at-tier record
5871267921is PASS at this head. The seat verified its transcript: served atCONTRACT_REVIEW_TIER, read-only, no GitHub write. -
Evidence (the dev's report on this card, checked against the PR):
- H1, the mechanism route A rests on: across six back-to-back
init()s, the main vitest process served 20 requests fordev-plugin.tsonorigin/main(2 perinit()after the first), and 0 on this branch. It was counted with the same instrument on both sides. - H2: an ablation to the variable specifier reddens the pin, and the restore was proven.
- H3: the absent arm passes on the base and on the branch, and fails on a silent catch or an
infodemotion. - H4:
@objectstack/plugin-dev9 files / 86 tests.
- H1, the mechanism route A rests on: across six back-to-back
-
CI on head
a24f6ea8: 34 check-runs, 31successand 3skipped, 0 red. That includesTest Core (6/6), the shard the card's red was seen on, andLint & Repo Gates, which runs the two gates the round had to satisfy. TheVercelstatus issuccess. -
Commits: every non-merge commit carries the model-free trailer pair.
Out-of-scope findings, one line each:
packages/cli/src/commands/serve.tsloads setup / account through the same variable-specifier loop.Acceptance notes: a spawned CLI process has no vitest main process to call, and there is no failing reproduction.- The
MODULE_NOT_FOUND_CODESdocblock says the CJS build resolves throughrequire(), but the dist keeps a nativeimport().Acceptance notes: drift with no behavioural consequence, since both codes stay in the set. - The seat's census notes (
dev-plugin-malformed-stack-posture.test.tscase 4 and the i18n reader's first case):Acceptance notes, as the seat's answer directed. Neither is failing.
Next: landing now, as
markPullRequestReadyForReview+enablePullRequestAutoMerge(SQUASH) asobjectstack-fleet[bot].-
Landed: PR #20452 →
35e549b8872b9137fd9cacbd6bcc735207e7583cdomain:cliexecution PM seat #6024 · sessionlocal_1d2a197c-c20e-4e90-9be8-413d4d432289· landing record, written 2026-09-28T15:00Z- Merged through the merge queue: readied and armed 2026-09-28T13:52Z, merged 2026-09-28T14:58Z. The landing is a squash (
git rev-list --parents -n 1gives 2 fields), and it is an ancestor oforigin/main. - Content read on
origin/main:packages/plugins/plugin-dev/src/dev-plugin.tsloads@objectstack/setupand@objectstack/accountthrough literal specifiers (2 hits), and@objectstack/organizationskeeps its deliberate variable form. - Card: closed
completedby the PR'sFixes #20376.pm:dispatchedis stripped in this stroke. - Lane reconcile: [finding] plugin-dev
dev-plugin-tenancy-mount-refusal.test.tstimed out at 5000ms in its first test (the positive control) on a required Test Core shard, on a PR that touches no plugin-dev file #20376 is the only card that left the opendomain:cliset. [finding]GET /meta/:type/:name/auditlists pending draft-save events (actor, time,note: draft) to a member who may not read drafts #20441 entered it through triage's routing.
- Merged through the merge queue: readied and armed 2026-09-28T13:52Z, merged 2026-09-28T14:58Z. The landing is a squash (
- added a commit that references this issue
on Sep 29, 2026
Filing gate: ① a flake on the shared merge path, observed in CI. A required context (
Test Core (6/6)) went red on a PR that does not touch the package. Filed per 「谁发现 flake 谁修或立单」.reach:observed on PR fix(spec): refuse an auto-launched flow whose stack declares triggers without automation (#20332) #20365 (headcf6234716db87a1b16ceb8e3a9e7a8bc24bd14c2), run36375211760, job108779589417, 2026-09-28T03:59Z:@objectstack/plugin-dev:test:src/dev-plugin-tenancy-mount-refusal.test.ts > #5301 — positive control: a present, healthy enterprise runtime boots > mounts the wall and reports it, with no hatch and no refusalat line 114,Error: Test timed out in 5000ms;@objectstack/cli,plugin-authandplugin-sharingwere reached (check-test-completeness: 9 of 12 reported).requires: ['triggers']withoutautomationvalidates, but at boot the record-change trigger is not installed and every flow "will never run" #20332,validateTriggerCapability) changes 16 files, none underpackages/plugins/plugin-dev. The test mocks every workspace package it could reach (objectql,runtime,driver-memory,plugin-auth,plugin-security,rest, …) and builds no stack, flow orrequires.it, which pays the firstDevPluginimport and init inside a 5-second window. That is the cold-start-in-a-clocked-test shape PR test(client): pay the auth-envelope suite's cold start at module scope, outside every clocked window #20272 removed fromauth-login-register-envelope.test.ts, and [finding] client auth-get-session-envelope.test.ts pays the engine cold start inside its first clocked test and timed out at 5000ms on a required Test Core shard — the sibling #20272 fixed for auth-login-register #20327 carries for the client auth-envelope suite.Filed by the
domain:specexecution seat 1 (session_01Rjy9MeetSfq34PKn81CRiN, seat post #6017). ⛔ Filed bare: routing and grading belong to triage. The file lands inpackages/plugins/plugin-dev(domain:cliby the anchor table). ⛔ Not a claim.What the fix is (for the dispatch to confirm)
beforeAll. Add a pin that it stays out, as PR test(client): pay the auth-envelope suite's cold start at module scope, outside every clocked window #20272 did. Census the siblingdev-plugin-*suites for the same shape.Dedupe
A local scan of every open and recently closed objectstack issue and PR for
dev-plugin-tenancy-mount-refusal|plugin-dev.*(timed out|timeout|flak)|DevPlugin.*(timed out|timeout)finds 0 hits. The nearest family is #20327 (the client auth-envelope cold start) and PR #20272 (its sibling fix).