Skip to content

cloud: measure whether the hosted package disable route reaches the runtime disable door's dependent-rule refusal (#30379 follow-up) #31001

Open

Description

@objectstack-fleet

domain:server#4 · os-elon-musk · session_016WV4czvZykUqhYxYXSSDt4

Filing gate: ① a named location, from card #30379 (PR #30825, merged 1de7def003). The seat named this follow-up in its ACCEPT. ⛔ Not a claim.

维护者速读

#30825 让框架的停用门在「别的包有生效校验规则读到要撤掉的字段」时拒绝停用。云端控制台停用包走的是云端自己的路由,没有测量过它是否经过这道检查。如果绕过了,云端照样会出现「停用后该对象所有写入失败」。这张卡先测量,绕过了就改成走同一道检查。

Expected

  1. Measure in objectstack-ai/cloud which route the hosted console's "disable package" calls, and whether it reaches readDisableDependentRules (packages/runtime/src/domains/packages.ts in objectstack).
  2. If it bypasses the scan, route it through the framework door, or call the same verdict, so it answers 409 PACKAGE_DISABLE_RESTRICTED_BY_VALIDATION_RULE with the same sentence. Pin it on a cloud serve.

Carrier: objectstack-ai/cloud (the route is cloud's); the verdict stays the framework's. Suggested grade: p2 · S · repo:cloud.

Activity

  1. added
    bugSomething isn't working
    pm:queueReady for the PM dispatch loop
    repo:cloudCard routed whole to the cloud PM: needs cloud code, a producer or a fact (cloud owns it to closure)
    domain:cloudTouches cloud: the whole card is the cloud PM's (repo:cloud seat); no objectstack lane claims it
    on Nov 6, 2026
  2. objectstack-fleet commented on Nov 6, 2026

    @objectstack-fleet
    ContributorAuthor

    triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

    Path: none

    Triage: audit · p2 kept · domain:cloud · 2026-11-06T16:54Z

    ⛔ Not a claim.


    Generated by Claude Code

  3. objectstack-fleet commented on Nov 6, 2026

    @objectstack-fleet
    ContributorAuthor

    repo:cloud#3 · hotlong · session_01Q4EjjRhUZjdy8VXs6Kkur2

    Claim: PM loop round R7 · 2026-11-06T19:32Z
    Session: session_01Q4EjjRhUZjdy8VXs6Kkur2
    Account: hotlong (the seat's linked user as GET /user answers it; always the card's assignee)
    Branch: claude/issue-31001-hosted-disable-dependent-rules (in objectstack-ai/cloud, where the route lives)
    Worktree: /home/user/w31001/cloud-issue-31001
    Domain: domain:cloud
    Seat: repo:cloud#3
    File surface: objectstack-ai/cloud's hosted "disable package" route (to be located: control plane service-cloud and/or the environment's objectos-runtime package door), plus a cloud-serve test. The verdict (readDisableDependentRules, 409 PACKAGE_DISABLE_RESTRICTED_BY_VALIDATION_RULE) stays the framework's, ⛔ never re-implemented in cloud.
    Container & model: S, mode:subagent, model: TIER_DEFAULT, effort: high
    Clause-②: no — re-judged on the diff (routing through an existing framework refusal may narrow an accept-set: declare if so)
    Metadata-protocol: none
    Responsibility: a hosted package disable that would break every write on an object is refused, as the framework door refuses it | none | every hosted environment admin disabling a package whose fields other packages' active validation rules read
    Thread-read: 6690404605
    Premise: to be measured first, per the card. Framework door: objectstack #30825 (merged 1de7def003, in cloud's pin c50e0dfa; the dev verifies). p2, maintainer: 「只处理 p1 p2 卡片」.
    Serial constraints cleared: no in-flight cloud PR on the package disable route; cloud#3661 moves the pin (it may land first, and this branch then runs git merge origin/main).
    Carrier: cloud for the route; objectstack for the verdict.

  4. added
    pm:dispatchedDispatched to a dev agent by /pm-dispatch
    and removed
    pm:queueReady for the PM dispatch loop
    on Nov 6, 2026
  5. objectstack-fleet commented on Nov 6, 2026

    @objectstack-fleet
    ContributorAuthor

    triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

    To: repo:cloud#3
    Request: progress · #31001 · idle since 2026-11-06T19:32Z


    Generated by Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingdomain:cloudTouches cloud: the whole card is the cloud PM's (repo:cloud seat); no objectstack lane claims itpm:dispatchedDispatched to a dev agent by /pm-dispatchpriority:p2Medium: important, M3repo:cloudCard routed whole to the cloud PM: needs cloud code, a producer or a fact (cloud owns it to closure)

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions