Issues

approvals: an expression approver that yields the same user id twice opens two co_sign slots for one person — the slate is not deduped

objectstack-ai/objectstack#28684 · opened

on Nov 1, 2026

1

[Decision] console: write app navigation when a page or dashboard is created or deleted, instead of diffing the whole page and dashboard lists on every app page

objectstack-ai/objectstack#28680 · opened

on Nov 1, 2026

[PM seat] domain:server · seat 5 — 🟢 os-project-manager · 由 os-project-manager 账户的项目负责

objectstack-ai/objectstack#28677 · opened

on Nov 1, 2026

1

pm-dispatch(mailbox): name when a seat MUST ring another — unblocked card, main-red anchor, release blocker, a question for triage, serial order, a relayed ruling — and close the seats with no mailbox

objectstack-ai/objectstack#28675 · opened

on Nov 1, 2026

metadata-protocol: the by-name, draft and hydration reads still serve a row's body `_packageId` where the column records another package or none (#28594 follow-up)

objectstack-ai/objectstack#28673 · opened

on Nov 1, 2026

2

Studio OWD: forcing "Controlled by parent" on a detail that already holds rows with a null master hides those rows from everyone, admin included, while the confirm only says they "may fail validation"

objectstack-ai/objectstack#28665 · opened

on Nov 1, 2026

2

Studio RLS editor: a CHECK on a select policy (or an empty USING) reads "Valid CEL", then the autosave is refused 422 and the banner shows only the path code, not the server's explanation

objectstack-ai/objectstack#28664 · opened

on Nov 1, 2026

1

authoring gate: an app navigation `visible` with a CEL syntax error passes save, draft diagnostics and publish (a page `visibleWhen` with the same fault is refused), and page variables publish with duplicate, empty or wrong-typed declarations

objectstack-ai/objectstack#28663 · opened

on Nov 1, 2026

2

objectql: a published roll-up summary that sums a text field makes every create, update and delete of its child answer 500, though each write lands — the authoring door does not check the summed field's type

objectstack-ai/objectstack#28661 · opened

on Nov 1, 2026

2

formula: date() on text it cannot parse yields an invalid Date that a formula field serializes as null, with no warn line

objectstack-ai/objectstack#28660 · opened

on Nov 1, 2026

2

formula: label(record.FIELD) on a field that declares no options is admitted at the active authoring door, then reads null on every row

objectstack-ai/objectstack#28659 · opened

on Nov 1, 2026

2

approvals: a typed `user` decision output is checked for presence only — an id that resolves to no user records the decision, then answers 500 RESUME_FAILED and strands the run

objectstack-ai/objectstack#28658 · opened

on Nov 1, 2026

4

approvals: a non-admin approver's decision from the request page answers 404 RECORD_NOT_FOUND — the action door loads sys_approval_request in the caller's data scope

objectstack-ai/objectstack#28657 · opened

on Nov 1, 2026

2

QA run · release-18.3.0-w3-retest (13/13) · 6e11a929 · 2026-11-01 · 11 PASS / 0 PARTIAL / 2 FAIL / 0 BLOCKED / 0 NOT-RUN

objectstack-ai/objectstack#28656 · opened

on Nov 1, 2026

1

spec(object-extension `fieldPatches`): refuse a field both replaced in `fields` and patched in `fieldPatches` of one extension, key option patches by the option-value grammar, carry the whitelisted aliases, and derive the describe's member list

objectstack-ai/objectstack#28655 · opened

on Nov 1, 2026

test(showcase): add the Reports index to the smoke SURFACES, so /reports stops being a standing hand-walk

objectstack-ai/objectstack#28653 · opened

on Nov 1, 2026

1

connector-github: ship `providerConfig.toolsSnapshot` for `search_issues` and `issue_read`, digests measured against GitHub's live MCP server, so the listing's sha256 is the pin set (ruling 6556740185, #28590 B)

objectstack-ai/objectstack#28647 · opened

on Nov 1, 2026

2

console: on an app page, answer /meta/view, /meta/page and /meta/dashboard from the app bundle (#28321) instead of three list reads; page/pricing 24 to ~21 calls

objectstack-ai/objectstack#28645 · opened

on Nov 1, 2026

4

metadata-protocol: a rollback of the `.custom` pair's declared row reads as an artifact override, and a legacy `overrides` without `basedOn` is a declaration to the read side only

objectstack-ai/objectstack#28644 · opened

on Nov 1, 2026

1

cli: `os build` does not run the override-declaration judge that `os validate`, publish and install run

objectstack-ai/objectstack#28643 · opened

on Nov 1, 2026

3

pm-dispatch: a project seat can sit with no hourly patrol routine and nothing notices — make the patrol a step of seat-online, record it in the seat post, and flag an on-duty lane's unclaimed pm:queue card

objectstack-ai/objectstack#28642 · opened

on Nov 1, 2026

2

[Decision] connector credential follow-ups after #28596: header-value advisory, legacy auth keys at rest, whole-map withholding

objectstack-ai/objectstack#28640 · opened

on Nov 1, 2026

pm-dispatch(execution): a seat that reports "nothing to dispatch" lists every queue card with its live labels and exact blocker; a card whose remaining work is under ui/ is dispatched, never skipped

objectstack-ai/objectstack#28638 · opened

on Nov 1, 2026

Datasources: the admin create and edit doors drop the schema-declared `ssl`, `autoConnect` and `description`, so a datasource created there loses its TLS settings

objectstack-ai/objectstack#28633 · opened

on Nov 1, 2026

10

spec: judge a collection item's `_packageId` against its owning body at `defineStack` / `os validate` / `os build`, so the stamp the boot now refuses (#28534) is refused where it is written

objectstack-ai/objectstack#28627 · opened

on Nov 1, 2026

3

Navigation Menu

Repository navigation

Issues

approvals: an expression approver that yields the same user id twice opens two co_sign slots for one person — the slate is not deduped

[Decision] console: write app navigation when a page or dashboard is created or deleted, instead of diffing the whole page and dashboard lists on every app page

[PM seat] domain:server · seat 5 — 🟢 os-project-manager · 由 os-project-manager 账户的项目负责

pm-dispatch(mailbox): name when a seat MUST ring another — unblocked card, main-red anchor, release blocker, a question for triage, serial order, a relayed ruling — and close the seats with no mailbox

metadata-protocol: the by-name, draft and hydration reads still serve a row's body `_packageId` where the column records another package or none (#28594 follow-up)

Studio OWD: forcing "Controlled by parent" on a detail that already holds rows with a null master hides those rows from everyone, admin included, while the confirm only says they "may fail validation"

Studio RLS editor: a CHECK on a select policy (or an empty USING) reads "Valid CEL", then the autosave is refused 422 and the banner shows only the path code, not the server's explanation

authoring gate: an app navigation `visible` with a CEL syntax error passes save, draft diagnostics and publish (a page `visibleWhen` with the same fault is refused), and page variables publish with duplicate, empty or wrong-typed declarations

objectql: a published roll-up summary that sums a text field makes every create, update and delete of its child answer 500, though each write lands — the authoring door does not check the summed field's type

formula: date() on text it cannot parse yields an invalid Date that a formula field serializes as null, with no warn line

formula: label(record.FIELD) on a field that declares no options is admitted at the active authoring door, then reads null on every row

approvals: a typed `user` decision output is checked for presence only — an id that resolves to no user records the decision, then answers 500 RESUME_FAILED and strands the run

approvals: a non-admin approver's decision from the request page answers 404 RECORD_NOT_FOUND — the action door loads sys_approval_request in the caller's data scope

QA run · release-18.3.0-w3-retest (13/13) · 6e11a929 · 2026-11-01 · 11 PASS / 0 PARTIAL / 2 FAIL / 0 BLOCKED / 0 NOT-RUN

spec(object-extension `fieldPatches`): refuse a field both replaced in `fields` and patched in `fieldPatches` of one extension, key option patches by the option-value grammar, carry the whitelisted aliases, and derive the describe's member list

test(showcase): add the Reports index to the smoke SURFACES, so /reports stops being a standing hand-walk

connector-github: ship `providerConfig.toolsSnapshot` for `search_issues` and `issue_read`, digests measured against GitHub's live MCP server, so the listing's sha256 is the pin set (ruling 6556740185, #28590 B)

console: on an app page, answer /meta/view, /meta/page and /meta/dashboard from the app bundle (#28321) instead of three list reads; page/pricing 24 to ~21 calls

metadata-protocol: a rollback of the `.custom` pair's declared row reads as an artifact override, and a legacy `overrides` without `basedOn` is a declaration to the read side only

cli: `os build` does not run the override-declaration judge that `os validate`, publish and install run

pm-dispatch: a project seat can sit with no hourly patrol routine and nothing notices — make the patrol a step of seat-online, record it in the seat post, and flag an on-duty lane's unclaimed pm:queue card

[Decision] connector credential follow-ups after #28596: header-value advisory, legacy auth keys at rest, whole-map withholding

pm-dispatch(execution): a seat that reports "nothing to dispatch" lists every queue card with its live labels and exact blocker; a card whose remaining work is under ui/ is dispatched, never skipped

Datasources: the admin create and edit doors drop the schema-declared `ssl`, `autoConnect` and `description`, so a datasource created there loses its TLS settings

spec: judge a collection item's `_packageId` against its owning body at `defineStack` / `os validate` / `os build`, so the stamp the boot now refuses (#28534) is refused where it is written