Issues

service-datasource: a runtime-origin or reconnected plugin-driver datasource loses the #27277 external-driver floor, because the connection service registers the datasource def without its driver id and unregisterDriver drops the stored one (epic #27261)

objectstack-ai/objectstack#27666 · opened

on Oct 29, 2026

1

plugin-sharing: the #8418 phantom-anchor write-deny diagnostic goes silent on a federated object that maps owner_id through external.columnMap over a plugin driver that ignores the map (epic #27261)

objectstack-ai/objectstack#27662 · opened

on Oct 29, 2026

spec: resolveInjectedColumnProvenance does not know the external.columnMap → owner_id arm plugin-sharing honours since #27425, so the #7858 convergence row and the two columnMap readers diverge (epic #27261)

objectstack-ai/objectstack#27661 · opened

on Oct 29, 2026

skills(objectstack-data): teach that a secret or password field is never a filter, sort or search key, only a has-a-value check (Skills-docs follow-up owed by #27477)

objectstack-ai/objectstack#27660 · opened

on Oct 29, 2026

1

qa checklist: records-forms.crud-roundtrip and record-edit-undo still send the runner to a History tab that record page v3 removed (same family as #27492)

objectstack-ai/objectstack#27654 · opened

on Oct 29, 2026

1

Studio: the Validations tab holds the autosave on a served CEL verdict at the rule's own path, as the RLS arm does (#27482 layer 2 of 2)

objectstack-ai/objectstack#27644 · opened

on Oct 29, 2026

1

lint: a validation rule's expression finding carries the key path `validations.N.condition`, not prose, so the draft read can address it (#27482 layer 1 of 2)

objectstack-ai/objectstack#27643 · opened

on Oct 29, 2026

2

record history: a dynamic-mode currency change still reads as a plain number, because the record page builds the History format context without the tenant currency

objectstack-ai/objectstack#27640 · opened

on Oct 29, 2026

2

pm:mailbox: one mailbox per seat, not per account — today a second lane seat under the same account is never woken

objectstack-ai/objectstack#27637 · opened

on Oct 29, 2026

1

rest: `GET /meta/diagnostics` declares no closed query-parameter set, so a misspelled parameter name (`?typ=view`) answers a 200 full sweep

objectstack-ai/objectstack#27633 · opened

on Oct 29, 2026

1

docs: the `/meta/diagnostics` query table does not say an unknown type, severity or package is refused, or that `stats` is keyed by the canonical type (#27514 follow-up)

objectstack-ai/objectstack#27632 · opened

on Oct 29, 2026

1

Studio Data pillar panels and ResourceEditPage: a CEL parse-fault hold still ends when the tab or selection changes; port the draft-stamped hold ruled on #27485

objectstack-ai/objectstack#27629 · opened

on Oct 29, 2026

Seam: one request opens a record — a record-page payload (record + related counts and first rows + field access + lock) and an app-scoped metadata bundle, so a record open is 2–3 requests instead of 23–45 serialized in three stages

objectstack-ai/objectstack#27627 · opened

on Oct 29, 2026

2

Console perf: opening a record refetches the list 10×, repeats field-access ×4 and security/explain ×2, and the inbox bell polls every 10 s — dedupe in-flight requests, pin the list's query key, push instead of poll

objectstack-ai/objectstack#27626 · opened

on Oct 29, 2026

console: a user with no stored language who picked 中文 on the sign-in page sees English month names in date cells on every load, because the Accept-Language answer outranks the UI language

objectstack-ai/objectstack#27625 · opened

on Oct 29, 2026

2

datasources: GET /datasources/NAME/remote-tables and POST /datasources/NAME/object-draft answer an unknown name 400 EXTERNAL_DATASOURCE_ERROR where GET /datasources/NAME answers 404 (the #25486 / #27510 family)

objectstack-ai/objectstack#27618 · opened

on Oct 29, 2026

1

ADR-0141: D1, the Consequences and exec-plan item 4 say os validate judges neither side of a cross-package binding — false for lookups since #16611

objectstack-ai/objectstack#27616 · opened

on Oct 29, 2026

1

approvals: a principal holding N of a step's approver slots — the chip's ×N and the eligible-approver count need the copy that reconciles them

objectstack-ai/objectstack#27615 · opened

on Oct 29, 2026

1

Datasource credential guidance prescribes shapes the 18.2.0 schema refuses: top-level `password` guidance, the `credentialsRef` example, and the drivers.mdx read-only section

objectstack-ai/objectstack#27614 · opened

on Oct 29, 2026

4

Console: send a same-origin `type: 'api'` action click through `POST /actions/:object/:action` instead of fetching its `target` directly (ruling on #27506, step 3 of 3)

objectstack-ai/objectstack#27611 · opened

on Oct 29, 2026

1

docs(adr): ADR-0066 D4 and ADR-0126 §8 — same-origin `type: 'api'` actions are dispatched by the platform action door (ruling on #27506, step 1 of 3)

objectstack-ai/objectstack#27610 · opened

on Oct 29, 2026

3

skills: objectstack-ui teaches only the named report navigation item, not the report-index form #27566 adds

objectstack-ai/objectstack#27609 · opened

on Oct 29, 2026

1

qa checklist: studio-authoring.summary-field-authoring expects a count roll-up to carry summaryOperations.field, which #27533 makes optional

objectstack-ai/objectstack#27608 · opened

on Oct 29, 2026

1

plugin-webhooks: the sys_webhook object still says declared webhooks are "materialized into rows on boot", which ADR-0131 D2 retired

objectstack-ai/objectstack#27607 · opened

on Oct 29, 2026

1

public forms: the submit door accepts a value outside a form row's declared `options` subset, and the renderer offers every option

objectstack-ai/objectstack#27606 · opened

on Oct 29, 2026

1

Navigation Menu

Repository navigation

Issues

service-datasource: a runtime-origin or reconnected plugin-driver datasource loses the #27277 external-driver floor, because the connection service registers the datasource def without its driver id and unregisterDriver drops the stored one (epic #27261)

plugin-sharing: the #8418 phantom-anchor write-deny diagnostic goes silent on a federated object that maps owner_id through external.columnMap over a plugin driver that ignores the map (epic #27261)

spec: resolveInjectedColumnProvenance does not know the external.columnMap → owner_id arm plugin-sharing honours since #27425, so the #7858 convergence row and the two columnMap readers diverge (epic #27261)

skills(objectstack-data): teach that a secret or password field is never a filter, sort or search key, only a has-a-value check (Skills-docs follow-up owed by #27477)

qa checklist: records-forms.crud-roundtrip and record-edit-undo still send the runner to a History tab that record page v3 removed (same family as #27492)

Studio: the Validations tab holds the autosave on a served CEL verdict at the rule's own path, as the RLS arm does (#27482 layer 2 of 2)

lint: a validation rule's expression finding carries the key path `validations.N.condition`, not prose, so the draft read can address it (#27482 layer 1 of 2)

record history: a dynamic-mode currency change still reads as a plain number, because the record page builds the History format context without the tenant currency

pm:mailbox: one mailbox per seat, not per account — today a second lane seat under the same account is never woken

rest: `GET /meta/diagnostics` declares no closed query-parameter set, so a misspelled parameter name (`?typ=view`) answers a 200 full sweep

docs: the `/meta/diagnostics` query table does not say an unknown type, severity or package is refused, or that `stats` is keyed by the canonical type (#27514 follow-up)

Studio Data pillar panels and ResourceEditPage: a CEL parse-fault hold still ends when the tab or selection changes; port the draft-stamped hold ruled on #27485

Seam: one request opens a record — a record-page payload (record + related counts and first rows + field access + lock) and an app-scoped metadata bundle, so a record open is 2–3 requests instead of 23–45 serialized in three stages

Console perf: opening a record refetches the list 10×, repeats field-access ×4 and security/explain ×2, and the inbox bell polls every 10 s — dedupe in-flight requests, pin the list's query key, push instead of poll

console: a user with no stored language who picked 中文 on the sign-in page sees English month names in date cells on every load, because the Accept-Language answer outranks the UI language

datasources: GET /datasources/NAME/remote-tables and POST /datasources/NAME/object-draft answer an unknown name 400 EXTERNAL_DATASOURCE_ERROR where GET /datasources/NAME answers 404 (the #25486 / #27510 family)

ADR-0141: D1, the Consequences and exec-plan item 4 say os validate judges neither side of a cross-package binding — false for lookups since #16611

approvals: a principal holding N of a step's approver slots — the chip's ×N and the eligible-approver count need the copy that reconciles them

Datasource credential guidance prescribes shapes the 18.2.0 schema refuses: top-level `password` guidance, the `credentialsRef` example, and the drivers.mdx read-only section

Console: send a same-origin `type: 'api'` action click through `POST /actions/:object/:action` instead of fetching its `target` directly (ruling on #27506, step 3 of 3)

docs(adr): ADR-0066 D4 and ADR-0126 §8 — same-origin `type: 'api'` actions are dispatched by the platform action door (ruling on #27506, step 1 of 3)

skills: objectstack-ui teaches only the named report navigation item, not the report-index form #27566 adds

qa checklist: studio-authoring.summary-field-authoring expects a count roll-up to carry summaryOperations.field, which #27533 makes optional

plugin-webhooks: the sys_webhook object still says declared webhooks are "materialized into rows on boot", which ADR-0131 D2 retired

public forms: the submit door accepts a value outside a form row's declared `options` subset, and the renderer offers every option