Issues

spec: the stack definition has no `email`, `sms` or `appName` key, so the `config.email` / `config.sms` contract `serve` reads is unreachable from a `defineStack` config

objectstack-ai/objectstack#22748 · opened

on Oct 10, 2026

ci(spec): render-projection-diff's base archive lacks the generated `registry.ts` since #22706, so every merge-queue entry fails `Type Check · source gates`

objectstack-ai/objectstack#22744 · opened

on Oct 10, 2026

3

skills(objectstack-data): `rules/field-types.md` says a formula's `returnType` has no `currency` member, which PR #22733 (#22727) widens

objectstack-ai/objectstack#22743 · opened

on Oct 10, 2026

[finding] import: a sandbox's own fault (CPU budget, wall-clock ceiling) reaches an import row as its debug wrapper, where the data doors answer `Internal server error`

objectstack-ai/objectstack#22741 · opened

on Oct 10, 2026

1

security(import): an import's reference resolution matches a lookup cell against a target whose exposure refuses reads (census row 7 of #22661)

objectstack-ai/objectstack#22739 · opened

on Oct 10, 2026

security(approvals, audit): a lookup target's title is resolved into the approvals inbox payload and the activity summary without asking the target's exposure (census rows 5-6 of #22661)

objectstack-ai/objectstack#22738 · opened

on Oct 10, 2026

security(data): a nested-relation filter condition on a lookup target is evaluated without asking the target's exposure (census row 4 of #22661)

objectstack-ai/objectstack#22737 · opened

on Oct 10, 2026

spec: a formula field cannot declare a currency result — `returnType` is `number | text | boolean | date`, so a formula over money renders as a bare number

objectstack-ai/objectstack#22727 · opened

on Oct 10, 2026

6

validation: a `severity: 'warning'` rule's hit is only logged — the data write answer carries no `warnings`, so no client can show the advisory #13889 calls UI-level

objectstack-ai/objectstack#22726 · opened

on Oct 10, 2026

5

approvals: a request opened under `onEmptyApprovers: 'admin_rescue'` is in no one's pending queue — `listRequests` / `countRequests` have no arm that returns it to the callers who can decide it

objectstack-ai/objectstack#22725 · opened

on Oct 10, 2026

console: a permitted editor gets no Edit / Delete on controlled_by_parent records — the record header hides them although security/explain answers allowed and the PATCH returns 200 (HotCRM sales manager on contracts and quotes, 17.7.0)

objectstack-ai/objectstack#22721 · opened

on Oct 10, 2026

1

[finding] rest: 20 REST write routes answer a sandboxed hook's refusal as the debug wrapper, because their hand-built error arms relay `.message` (approvals ×9, sharing rules ×3, security ×3, packages/publish, external datasources ×4)

objectstack-ai/objectstack#22719 · opened

on Oct 10, 2026

4

[finding] import: a hook body that CRASHES reaches an import row as its native fault text (hook NAME threw: TypeError: …), while `POST /data/:object` and `/createMany` answer `500 INTERNAL_ERROR` and withhold it

objectstack-ai/objectstack#22718 · opened

on Oct 10, 2026

5

[Decision] fleet relay: should the auto-merge row spend `workflows: write` so seats can enqueue pulls that change `.github/workflows/**`, or stay a human-queue item?

objectstack-ai/objectstack#22708 · opened

on Oct 10, 2026

spec: catalog references in authoring surfaces become names (approver position binding, decision-output positions, the position form's permissionSets widget), ADR-0131 D4, from #15204

objectstack-ai/objectstack#22682 · opened

on Oct 10, 2026

6

ADR (ruling A on #22590 item 3): one engine-internal semi-join leaf, "the ids of object X this caller may read"; ADR-0055 alternatives row (a) revisited for this one leaf

objectstack-ai/objectstack#22678 · opened

on Oct 10, 2026

6

[Ruling A on #22649] docs: the skills install command reads the catalog from the installed @objectstack/skills package; the GitHub path is documented as the next (unreleased main) channel only

objectstack-ai/objectstack#22668 · opened

on Oct 10, 2026

skills+docs: governed texts still describe the committed spec-changes.json, its os-regen route and its regeneration lap, which #22485 (PR #22638) retired

objectstack-ai/objectstack#22667 · opened

on Oct 10, 2026

4

security(data, analytics): a lookup target's exposure declaration is not judged when the data door's `$expand`, or the dataset door's dimension-label pass, reads it — detail withheld pending maintainer

objectstack-ai/objectstack#22661 · opened

on Oct 10, 2026

5

[Ruling A on #22649] create-objectstack installs the skills catalog from the installed @objectstack/skills package, not from GitHub main; the scaffolded project depends on it at the spec's version

objectstack-ai/objectstack#22659 · opened

on Oct 10, 2026

[Ruling A on #22649] @objectstack/skills: the published skills catalog ships as a versioned package in the fixed group — the build copies skills/** in and files lists only it; the compatibility line and metadata.version derive from the package version

objectstack-ai/objectstack#22658 · opened

on Oct 10, 2026

11

[PM seat] domain:cli · seat 2 — ⏳ vacant

objectstack-ai/objectstack#22648 · opened

on Oct 10, 2026

2

lint(runtime gate): a flow write's per-write snapshot carries no actions and no other flows, so a flow CEL root rule cannot see the entrances that hand a flow its record (W, from #22565)

objectstack-ai/objectstack#22636 · opened

on Oct 10, 2026

9

verify: `hooks.run(object, 'delete', …)` is typed to resolve with a row (`Promise<EngineRow>`), but the engine answers `true`

objectstack-ai/objectstack#22599 · opened

on Oct 10, 2026

1

runtime (17.7.0): file fields read "no file" for a record reader without sys_file read, flow run summaries report acted 0 while notifying, and the activity read pre-scan caps at 2000 rows fail-closed

objectstack-ai/objectstack#22590 · opened

on Oct 10, 2026

15

Navigation Menu

Repository navigation

Issues

spec: the stack definition has no `email`, `sms` or `appName` key, so the `config.email` / `config.sms` contract `serve` reads is unreachable from a `defineStack` config

ci(spec): render-projection-diff's base archive lacks the generated `registry.ts` since #22706, so every merge-queue entry fails `Type Check · source gates`

skills(objectstack-data): `rules/field-types.md` says a formula's `returnType` has no `currency` member, which PR #22733 (#22727) widens

[finding] import: a sandbox's own fault (CPU budget, wall-clock ceiling) reaches an import row as its debug wrapper, where the data doors answer `Internal server error`

security(import): an import's reference resolution matches a lookup cell against a target whose exposure refuses reads (census row 7 of #22661)

security(approvals, audit): a lookup target's title is resolved into the approvals inbox payload and the activity summary without asking the target's exposure (census rows 5-6 of #22661)

security(data): a nested-relation filter condition on a lookup target is evaluated without asking the target's exposure (census row 4 of #22661)

spec: a formula field cannot declare a currency result — `returnType` is `number | text | boolean | date`, so a formula over money renders as a bare number

validation: a `severity: 'warning'` rule's hit is only logged — the data write answer carries no `warnings`, so no client can show the advisory #13889 calls UI-level

approvals: a request opened under `onEmptyApprovers: 'admin_rescue'` is in no one's pending queue — `listRequests` / `countRequests` have no arm that returns it to the callers who can decide it

console: a permitted editor gets no Edit / Delete on controlled_by_parent records — the record header hides them although security/explain answers allowed and the PATCH returns 200 (HotCRM sales manager on contracts and quotes, 17.7.0)

[finding] rest: 20 REST write routes answer a sandboxed hook's refusal as the debug wrapper, because their hand-built error arms relay `.message` (approvals ×9, sharing rules ×3, security ×3, packages/publish, external datasources ×4)

[finding] import: a hook body that CRASHES reaches an import row as its native fault text (hook NAME threw: TypeError: …), while `POST /data/:object` and `/createMany` answer `500 INTERNAL_ERROR` and withhold it

[Decision] fleet relay: should the auto-merge row spend `workflows: write` so seats can enqueue pulls that change `.github/workflows/**`, or stay a human-queue item?

spec: catalog references in authoring surfaces become names (approver position binding, decision-output positions, the position form's permissionSets widget), ADR-0131 D4, from #15204

ADR (ruling A on #22590 item 3): one engine-internal semi-join leaf, "the ids of object X this caller may read"; ADR-0055 alternatives row (a) revisited for this one leaf

[Ruling A on #22649] docs: the skills install command reads the catalog from the installed @objectstack/skills package; the GitHub path is documented as the next (unreleased main) channel only

skills+docs: governed texts still describe the committed spec-changes.json, its os-regen route and its regeneration lap, which #22485 (PR #22638) retired

security(data, analytics): a lookup target's exposure declaration is not judged when the data door's `$expand`, or the dataset door's dimension-label pass, reads it — detail withheld pending maintainer

[Ruling A on #22649] create-objectstack installs the skills catalog from the installed @objectstack/skills package, not from GitHub main; the scaffolded project depends on it at the spec's version

[Ruling A on #22649] @objectstack/skills: the published skills catalog ships as a versioned package in the fixed group — the build copies skills/** in and files lists only it; the compatibility line and metadata.version derive from the package version

[PM seat] domain:cli · seat 2 — ⏳ vacant

lint(runtime gate): a flow write's per-write snapshot carries no actions and no other flows, so a flow CEL root rule cannot see the entrances that hand a flow its record (W, from #22565)

verify: `hooks.run(object, 'delete', …)` is typed to resolve with a row (`Promise<EngineRow>`), but the engine answers `true`

runtime (17.7.0): file fields read "no file" for a record reader without sys_file read, flow run summaries report acted 0 while notifying, and the activity read pre-scan caps at 2000 rows fail-closed