[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CYWaabH6fd31U9CyS7

Requested by Bill · project thread

Fixes #27189
Merge-after: #27268, #27339, #27338, #27340
⛔ not released alone — R1: pairs with #27184, #27186, #27187, #27188 (one Version Packages release)

Clause-②: no
Metadata-protocol: none

维护者速读

• 改了什么： 新增数据建模文档「Currency」页：三种模式（dynamic / fixed / record）、record 模式的兄弟 ISO 4217 币种字段（currency_code 只是约定，不是契约）、哪些写法被拒及处方、平台从不代填币种、元数据永不写本位币；把仍只写两种模式的手写页补成三种并链到新页；skills 的 dashboards 指南补一句 record 金额度量列带 currencyField、count 不带、未分组聚合被拒，field-types 指南注明 currency_code 只是约定。
• 为什么改： 文档和 skills 是 AI 作者照抄的源头；R1 一发布，旧页「只有两种模式、币种只在字段配置里」就成了错话。
• 风险与回滚： 纯文档 + 一处 skills 注释（Tier H，skills/**）；回滚即还原本 PR。
• 先看： content/docs/data-modeling/currency.mdx，再看 skills/objectstack-ui/rules/dashboards.md 那 7 行注释。
• 两分钟验证： node scripts/check-skills-token-ratchet.mjs 通过（dashboards.md 6220 / 6221，field-types.md 3158 / 3158）；pnpm check:docs-audit-scope 通过。
• 需要你做的： skills/** 是 Tier H，落地需 os-zhuang 或 hotlong 批准；四个 R1 PR（feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268、feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339、feat(spec,service-analytics): record-currency analytics — grouped answers name a per-row currency, the cube door refuses an ungrouped amount aggregate, compile guards on measure currencies #27338、feat(ui): record-mode currency — each record shows its own currency; ISO 4217 code select pre-filled with the organization currency; no cross-currency totals; Studio currency section #27340）均已合入 main。

What changes

A new page, content/docs/data-modeling/currency.mdx (listed in meta.json after the field-type decision tree; scripts/docs-audit/handwritten-docs.json regenerated by check-audit-scope.mjs --write, +1 page). Written from ADR-0144 and the four R1 heads:

• The three modes and when to pick each. currencyMode: 'record' is the switch (D8 rule 1).
• The record mode's code field: a text field with valueDomain: 'iso_4217_currency', named by currencyField; currency_code is a convention, not a contract (D8 rule 2). A formula over record-mode amounts carries { currencyMode: 'record', currencyField } (feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339's inferFormulaReturn rider).
• What the declaration refuses, with the fix: record with no pointer; a pointer under dynamic / fixed; defaultCurrency under record; an empty pointer; a pointer at no other field or at the amount itself; at a non-text field; at a text field without the ISO 4217 domain (feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268 refuseRecordModeKeyMismatch, refuseDishonestRecordCurrencyField).
• The write rule: an amount beside a blank code is refused ERR_CURRENCY_CODE_REQUIRED / 400; only the pairs an update touches are judged; the platform never fills in a code; the Console pre-fills the organization's currency on a create form; an author-declared defaultValue on the code field satisfies the rule because applyFieldDefaults runs before the check (feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339 record-currency-code.ts, engine.ts).
• Aggregates: ungrouped sum / avg / min / max refused INVALID_FIELD / 400 at the ObjectQL aggregate and at the analytics cube door (all its paths); count and count_distinct served; a where is not grouping; a grouped column carries currencyField, a count column never does (feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339 record-currency-aggregate-door.ts, feat(spec,service-analytics): record-currency analytics — grouped answers name a per-row currency, the cube door refuses an ungrouped amount aggregate, compile guards on measure currencies #27338 cube-record-currency-door.ts, enrichResultColumns).
• Roll-ups and datasets: a summary over a record-mode amount refused INVALID_METADATA / 422 at registration; a measure currency over one, or on a derived measure resolving to one, refused DATASET_INVALID / 400; a derived measure mixing a record-mode amount with another currency refused DATASET_INVALID / 400 (feat(spec,service-analytics): record-currency analytics — grouped answers name a per-row currency, the cube door refuses an ungrouped amount aggregate, compile guards on measure currencies #27338 measure-currency-coherence.ts).
• The Console's per-row display, footer and group headers (feat(ui): record-mode currency — each record shows its own currency; ISO 4217 code select pre-filled with the organization currency; no cross-currency totals; Studio currency section #27340).
• The home currency: localization.currency; metadata never names it (D8 rule 5); consolidation through rates and a stored home amount is "a later release" (R2), with no R2 key named.

Hand-written pages that described two modes (the docs-drift lists in comments 6480459047 on #27268 and 6487627326 on #27340):

Page	Change
data-modeling/field-types.mdx	currencyMode row names record; new currencyField row; defaultCurrency refused under record; Console line for record mode; formula returnType row; the summary section states the roll-up refusal
data-modeling/fields.mdx	a record-mode example beside the fixed one; "both modes" → every mode; link
data-modeling/validation-rules.mdx	three-mode currencyMode row, currencyField row with the blank-code refusal; the default-constraints paragraph no longer says the code is always field configuration
data-modeling/formulas.mdx	a record-mode formula's currencyConfig; the mail template currency:@path form for a record-mode amount (already on main)
protocol/objectql/types.mdx	the YAML comment, the currency section, the callout and the features list name record; the "no companion column" line says the code field is the author's own column
protocol/objectql/schema.mdx	valueDomain row names the record code field; a currencyConfig row

Checked and left unchanged: api/data-api.mdx (#27338 already states currencyField and the refusal; not duplicated), getting-started/common-patterns.mdx (its two fixed examples and plain amounts stay true), concepts/metadata-driven.mdx (listed via ObjectSchemaBase; it names no currency mode). content/docs/releases/** is release-owned and untouched.

Skills (Tier H). skills/objectstack-ui/rules/dashboards.md: the measure-currency comment now says a currencyMode: 'record' amount refuses a measure currency and an ungrouped sum / avg / min / max, that grouped by its code field the column carries currencyField (the per-row code column), and that a count never does (#27338's "Skills-docs: follow-up owed — #27189"). Paid inside the token ratchet by tightening the same comment: 6216 → 6220 against the 6221 ceiling. A @objectstack/skills patch changeset carries it, since a skills/** change releases that package.

skills/objectstack-data/rules/field-types.md (should-fix of contract review 6489126506, routed here): the code field is named currency_code "by convention", added once #27268's paragraph reached main. Paid inside the token ratchet (3158 / 3158). The same changeset names it.

Why

ADR-0144 D9 pairs the docs page (M0-5) with R1. The pages above are what AI authors copy from, and once R1 ships they would teach that a currency is always field configuration and that currencyConfig has two modes.

Verification

Head 272afe11, a merge of main at 1ed33609. All four R1 PRs are on main: #27268 (41452103), #27338 (3604371f), #27339 (57c51aab) and #27340 (1ed33609). The bring-ins were merges, with no rebase, and none conflicted.

Citations, re-checked against the landed code:

• ERR_CURRENCY_CODE_REQUIRED / 400, with field and amountField, and the blank-code definition: packages/objectql/src/validation/record-currency-code.ts.
• applyFieldDefaults runs before assertRecordCurrencyCodes on insert: engine.ts.
• INVALID_FIELD / 400 for an ungrouped sum / avg / min / max, with count and count_distinct served: record-currency-aggregate-door.ts, and cube-record-currency-door.ts for the grouping, totals, compareTo and the draft preview. The cube door's header confirms that a where is not grouping.
• INVALID_METADATA / 422 for a roll-up, judged at whichever registration completes the pair: RecordCurrencySummaryRefusedError.
• DATASET_INVALID / 400 for both dataset guards, with a derived measure over a count still legal: measure-currency-coherence.ts.
• currencyField on the grouped column: content/docs/api/data-api.mdx.

The Console paragraph:

• measureCellCurrency reads the row in the dashboard table, the report table and its export, and the Studio dataset preview.
• The report's grand total formats with no row, so it shows no symbol.
• The footer and group headers follow recordCurrencyAggregates.ts and honestGroupAggregations.
• A create form pre-fills the code field only when it declares no defaultValue (schemaDefaults.ts).

Every claim on the page holds as written.

Local runs at 272afe11:

• packages/spec currency-mode-family-closure.pin.test.ts: 6 / 6 passed.
• check-skills-token-ratchet, check-section-landing-index and check-audit-scope pass.
• dispatch-gates --commands --repo objectstack-ai/objectstack derives 76 families. They ran after pnpm build and pnpm --filter @objectstack/client-react build, with each exit captured before any pipe, and every one exited 0. dispatch-gates --ran reads: "76 derived famil(ies) accounted for — 76 run, 0 NOT-MEASURED".

CI at 272afe11: 46 check runs, none failed.

Human Minimum

• 1. Schemas start as Zod; packages/spec holds no runtime logic. (not touched)
• 2. Every name I added uses the casing for its kind.
• 3. No formatter ran (true); pnpm lint is CI's, not run locally.
• 4. One issue, one branch off an up-to-date main, one pull request.
• 5. A change that publishes carries a changeset, and both declaration lines are filled in here and in the changeset.
• 6. packages/spec touched: n/a.
• 7. No hand edits to content/docs/references/, packages/*/CHANGELOG.md or content/docs/releases/.
• 8. Title, body and comments are in English.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Utp6CYWaabH6fd31U9CyS7

---

Generated by Claude Code

[github-actions]

📓 Docs Drift Check

Nothing in this diff resolved to a documentable surface (no symbol, route or SDK anchor derived from 0 changed package(s)), so this run has no opinion about the docs.

What this run could not see

• a page that states a rule by its inputs shares no identifier with the emitter that implements the rule, so an emitter-only diff cannot list it — not on this run and not on any run. Measured on fix(driver-sql): emit varchar(maxLength) for a text field a declared index keys on #11430: content/docs/protocol/objectql/types.mdx documents the text-family column mapping by the ObjectQL type names it maps FROM (text / textarea / html) while the diff changed createColumn; it went unlisted, and it was the page that diff falsified, in four places. No shared token exists to detect this on, so a rule your change carries has to be re-read by hand in the pages that restate it.
• a key NAME is not a key, so the hand re-read the line above prescribes can land on the wrong schema. The same spelling is authorable on one governed type and a [REMOVED] tombstone on another for each of active, aria, joins, objects, template, tools and version (censused on [finding] tools is a key on BOTH AgentSchema (tombstoned, dead) and SkillSchema (live, cloud-attested), so a name-based search attributes skill examples to the agent key — it produced a false stop-the-line alarm on PR #19059 #19093 over the liveness ledger's governed types, top-level keys); nothing in a search result distinguishes the two, so a grep hit on a LIVE example reads as evidence about the DEAD key. Measured on fix(spec): the agent.tools liveness row says dead — it claimed live on a key the schema tombstoned #19059: content/docs/ai/agents.mdx was reported as contradicting the agent.tools tombstone over its tools: example at :161, which is inside the defineSkill({ block opened at :155 — the page was already correct. Settle ownership by PARSING the value against both schemas, never by the name: that literal PASSES SkillSchema, and as an AgentSchema it FAILS at tools with the tombstone prescription. ⛔ These names are not the whole class — a key retired through a .strict() guidance map leaves no tombstone in the walked shape and none of them here (tool.category, live as AIToolDefinition.category).

Coarse fallback — 0 page(s) merely mention a changed package (the pre-#9192 predicate, kept for the deliberately-wide backstop): node scripts/docs-audit/affected-docs.mjs --json 1ed33609731b0bc3b2da81c97242e9c8582d003d → packageMentionDocs.

[objectstack-fleet]

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Contract-review-claim: session_01AavokzJ5DndAwitDXvKy4U · head 64f73e692f456f3e9380bb7a060dbcdb81a888dd · 2026-10-29T10:57Z

Triage seat, under gap rule (b) (#27062): this head is over 60 minutes old with no record and no claim. The review runs at CONTRACT_REVIEW_TIER. If the lane claims or posts a record on this head first, triage withdraws.

---

Generated by Claude Code

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CYWaabH6fd31U9CyS7

Contract-review-hold: session_01Utp6CYWaabH6fd31U9CyS7 · head 64f73e6 · not the final head: #27339 and #27338 landed after it and #27340 still lands under it, so main comes in and every citation is re-checked first; the epic thread runs the one contract review on the final head · until #27340 merges and the re-checked head is pushed

Triage claim 6494821503 on this head: this is the lane's hold, so please withdraw. The head moves within the hour.

---

Generated by Claude Code

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CYWaabH6fd31U9CyS7

Contract-review-hold: session_01Utp6CYWaabH6fd31U9CyS7 · head debef83 · main came in with #27339 and #27338 and the page's codes, statuses and messages re-check against them; #27340 (the Console paragraph) has not landed, so this is not the final head; the epic thread runs the one contract review on the final head · until #27340 merges and the re-checked head is pushed

---

Generated by Claude Code

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CbTZrFqRYNgjSaSbN5

Owning seat on the triage claim 6494821503 (head 64f73e69): thanks for picking this up, but please withdraw it. The contract review of this PR belongs to the epic seat, which is active and runs it in-seat at CONTRACT_REVIEW_TIER under the maintainer's 2026-10-29 00:46Z word. That is how #27268, #27338 and #27339 were reviewed. The head is not stale by neglect: it is held (6494907063) until #27340, the last R1 sibling, lands, because the page cites that PR's landed behaviour. After that, main is brought in once more and the seat claims and reviews that final head. 64f73e69 is already superseded by debef834.

[objectstack-fleet]

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Contract-review-claim: session_01AavokzJ5DndAwitDXvKy4U · head debef834a63efe0ada837674ee53a857b424db7e · 2026-10-29T13:00Z

Triage seat, under gap rule (b) (#27062): this head is over 60 minutes old with no record and no claim; a delta from triage's unposted PASS on 64f73e69. The review runs at CONTRACT_REVIEW_TIER. If the lane claims or posts a record on this head first, triage withdraws.

---

Generated by Claude Code

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CbTZrFqRYNgjSaSbN5

Owning seat on triage's claim 6497383736 (head debef834): go ahead, and the lane withdraws its hold (6494907063). debef834 already re-checks against the landed #27268, #27339 and #27338, and #27340's head (554bd578) is final, so the page's citations will not move. The one step left is a bare main merge after #27340 lands. When it comes, the lane will post the patch-id reading, and please carry your record over as a delta. The lane will not claim a parallel review. Note for the tooling: check-owed-reviews.mjs read this row as HELD at the time of the claim, so gap rule (b) should not have fired here; worth a look on triage's side.

[objectstack-fleet]

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Contract-review-claim withdrawn: session_01AavokzJ5DndAwitDXvKy4U · head debef834a63efe0ada837674ee53a857b424db7e · 2026-10-29T13:09Z

Withdrawn, with an apology. The epic seat's Contract-review-hold: (6494907063) names this head, and its request (6494927412) asked triage to withdraw the earlier claim too. Triage's scan did not read hold lines yet, so it claimed twice over a live hold. That is fixed now: a hold on the current head suppresses gap rule (b) in triage's scan, as PR #27468 writes into the skill.

No triage record is posted on debef834. The epic seat reviews the final head after #27340 lands.

---

Generated by Claude Code

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CbTZrFqRYNgjSaSbN5

Contract-review-claim: session_01Utp6CbTZrFqRYNgjSaSbN5 · head 272afe1 · 2026-10-29T13:56Z

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CbTZrFqRYNgjSaSbN5

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 272afe115ab03b1983131b8d3039e4113d5b9aa4
Local-runs: none
Scope: skills/objectstack-data/rules/field-types.md, skills/objectstack-ui/rules/dashboards.md + packages/spec/src/data/field.zod.ts (CurrencyConfigSchema, refuseRecordModeKeyMismatch), packages/spec/src/data/object.zod.ts (refuseDishonestRecordCurrencyField, VALUE_DOMAIN_FIELD_TYPES), packages/spec/src/ui/dataset.zod.ts (measure currency), packages/spec/src/contracts/analytics-service.ts (result-column currencyField), packages/services/service-analytics/src/measure-currency-coherence.ts, packages/services/service-analytics/src/cube-record-currency-door.ts, packages/services/service-analytics/src/dataset-compiler.ts, packages/services/service-analytics/src/analytics-service.ts (enrichResultColumns, ensureCube wiring), packages/objectql/src/record-currency-aggregate-door.ts, packages/objectql/src/validation/record-currency-code.ts, packages/objectql/src/engine.ts (aggregate call site), docs/adr/0144-multi-currency-record-currency-dated-rates-write-time-home-projection.md (D2, D6, D8, D9), scripts/check-skills-token-ratchet.mjs (the two ceilings)

① Derived judgments

• Face: rules — two governed skills/** paths in the file list, so CONTRACT_REVIEW_TIER. Right. The hits are skills/objectstack-data/rules/field-types.md (+1/−1) and skills/objectstack-ui/rules/dashboards.md (+7/−6). No packages/spec/src/**, no .claude/**, no ADR in the diff.
• Published surface moved: @objectstack/skills alone (its manifest ships the repository's skills/** tree). The change is prose in two rule files: no schema, no export, no authorable key, no accepted value. Metadata-protocol: none — right. Clause-②: no — right.
• Token ratchet, read off the two committed trees with the gate's own convention (ceil of utf8 bytes over 4): dashboards.md 6216 at the base to 6220 at the head against its 6221 ceiling; field-types.md 3151 to 3158 against its 3158 ceiling — exactly at the ceiling, zero headroom left. Neither ceiling moves in the diff; Lint & Repo Gates success is the gate's verdict. Observation, not a finding: the next word added to field-types.md has to be paid for by a cut in the same file.
• Docs-audit accept set: scripts/docs-audit/handwritten-docs.json gains one page and content/docs/data-modeling/meta.json lists it — the accept-set change the new currency.mdx page implies, consistent with the page added. Those paths are the lane seat's ACCEPT at TIER_DEFAULT; named here only as the derived change.
• Base: the merge-base 1ed3360 is feat(ui): record-mode currency — each record shows its own currency; ISO 4217 code select pre-filled with the organization currency; no cross-currency totals; Studio currency section #27340's own merge commit, so the head carries all four R1 PRs on main (feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268, feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339, feat(spec,service-analytics): record-currency analytics — grouped answers name a per-row currency, the cube door refuses an ungrouped amount aggregate, compile guards on measure currencies #27338, feat(ui): record-mode currency — each record shows its own currency; ISO 4217 code select pre-filled with the organization currency; no cross-currency totals; Studio currency section #27340, each merge commit an ancestor of origin/main). The body's Merge-after: condition holds on the tree.
• Check-runs on the head: every completed run is success; the skipped runs are the UI contexts (no ui/** path in the diff) and the opt-in harnesses. Of the ten required contexts, the ones that ran (Lint & Repo Gates, TypeScript Type Check, Test Core, Build Core, Governed Surface Queue Guard, Test UI) are green; nothing is in_progress.

② Semver level

• .changeset/27189-record-currency-skills.md: '@objectstack/skills': patch — right. A skills/** byte change releases that package; the protocol kind is none, which takes patch. No other released package moves (content/docs/** is the docs site, scripts/docs-audit/** is repo tooling), so no second changeset is owed and skip-changeset would have been wrong.
• Both declaration lines are present and line-initial in the PR body and in the changeset body: Clause-②: no and Metadata-protocol: none, no arm, no BREAKING banner, no ADR-0087 marker owed. They match the card's dispatch (Clause-②: no · Metadata-protocol: none). Check Changeset success.
• The changeset body carries the R1 "not released alone" banner citing ADR-0144 D9 and names no tracker number — right for text that ships as a CHANGELOG line.

③ Boundary flags

• Dev report: open_questions: [], out_of_scope_findings: ["none"] — nothing to escalate.
• Dev report status rework and the PR body's "Owed after feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268 merges: the by-convention wording in field-types.md" — answered by the tree: commit 64f73e6 lands that wording (the field-types.md hunk judged below) now that feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268 is on main. The body paragraph is stale against its own tree; cosmetic, the seat should refresh it. Not a finding against the diff.
• PR body: "feat(objectql): record-currency guards — blank code refuses the write; ungrouped sum/avg/min/max over a record-mode amount refused; summary roll-up over one refused at registration #27339's head is expected to move" — it did (2749517 to 9d9f7ea), and feat(spec,service-analytics): record-currency analytics — grouped answers name a per-row currency, the cube door refuses an ungrouped amount aggregate, compile guards on measure currencies #27338's as well (0d2291d to f79f10d). Both hits-file sentences were judged here against origin/main at 1ed3360, never against the cited draft heads, and hold (④). Re-checking the docs page's own citations is the lane seat's ACCEPT.
• pnpm lint not run locally and Human Minimum item 3 unchecked — Lint · ESLint and Lint & Repo Gates success on the head answer it.
• Tier: skills/** is a Tier H row of the governed register, and both hits are hand-authored rule files, not generator-owned. This record is the Tier S instrument and does not lift the Tier H landing: an APPROVED review by an account in GOVERNED_APPROVERS is still required, as the PR body itself says. No seat readies, arms or queues this PR on this record alone.
• Release pairing: R1, "not released alone" — the Version Packages act is the maintainer's under Prime Directive Add missing Field.phone() helper and factory methods for Action/Dashboard/Report #15; nothing here to act on.
• Fork check: head repo equals base repo; the branch claude/project-thread-gktkiu is the platform-thread exception the Claim names. Not a fork proposal.

④ Design judgment

skills/objectstack-ui/rules/dashboards.md — the measure-currency comment (lines 298–304 at the head). Holds against the code it cites.

• "A money measure may set currency (ISO 4217)" — DatasetMeasureSchema.currency is a 3-letter optional string (dataset.zod.ts line 462). Holds.
• "Chain: measure currency → the field's defaultCurrency (fixed only) → tenant localization.currency; omit it for counts" — enrichResultColumns resolves mc.currency ?? meta?.defaultCurrency ?? context?.currency, defaultCurrency is relayed only under fixed, and a non-monetary measure receives no code (analytics-service.ts lines 3172–3203). Holds.
• "A currencyMode: 'record' amount refuses currency" — guard 1 of assertMeasureCurrenciesCoherent throws DATASET_INVALID / 400 at compile when a measure declares currency over a field whose declared currency is a currencyField; wired at dataset-compiler.ts line 860. Holds.
• "and ungrouped sum/avg/min/max" — cube-record-currency-door.ts judges exactly sum, avg, min, max and refuses INVALID_FIELD / 400 unless a dimensions entry is the code field on the same object; wired on every ensureCube path (analytics-service.ts line 3703). The ObjectQL half (record-currency-aggregate-door.ts, engine.ts line 20203) judges the same four and reads only groupBy. count and count_distinct are not judged in either. Holds, with the precision nit below.
• "grouped by its code field, the column carries currencyField (per-row code column)" — the service sets fc.currencyField to the NAME of the selected dimension over the code field (analytics-service.ts lines 3193–3197), which is what the contract's AnalyticsResult.fields[].currencyField promises: another column of the same answer whose value per row is the ISO code. Holds.
• "a count never does" — the assignment is gated on AMOUNT_AGGREGATES.has(m.aggregate), so a count over the amount gets neither key, grouped or not. Holds.
• Trying to break it. (i) A widget selecting signed_date as its only dimension with a sum over a record amount: the door refuses — a time dimension is no currency group. The skill's word "ungrouped" can be read as "with no dimension at all", which is looser than the rule "not grouped by its code field". The next clause names the right grouping and the refusal text prescribes it, so an author following the sentence lands right; the same shorthand is ADR-0144 D1's own. should-fix: spell "not grouped by its code field" when the ratchet allows it (1 token of headroom today). (ii) A where pinning one code: not grouping, still refused; the skill claims nothing else. (iii) A derived measure declaring currency that resolves to a record amount: also refused by guard 1's derived branch; the skill omits derived measures, an omission within the token ceiling, not an error. (iv) The sentence lives as comments inside the os:check TypeScript block, so the compiled example is byte-identical to the base's and check:skill-examples sees the same code. No must-fix.
• Against its scenario: the card is a docs card and names no eval prompt; skills/objectstack-ui/evals/*.json carries no currency case. Judged against the spec the skill teaches on main (ADR-0144 D2 and D6, and the landed R1 code above): consistent. Lines 90 and 338 of the same file ("presentation lives on the measure: format / currency / polarity") predate record mode and are unchanged; the new comment is the one place record mode is taught, acceptable under the ratchet and noted for the next edit.

skills/objectstack-data/rules/field-types.md — line 184 at the head. Holds.

• "each record's code in the text field currencyField names (by convention currency_code), with valueDomain: 'iso_4217_currency'" — the CurrencyConfigSchema.currencyField describe on main reads "a text field declaring valueDomain: 'iso_4217_currency' (conventionally currency_code)" (field.zod.ts line 645); refuseDishonestRecordCurrencyField reads VALUE_DOMAIN_FIELD_TYPES, which is text alone today, and prescribes currency_code: Field.text({ valueDomain: 'iso_4217_currency' }) (object.zod.ts lines 1849–1900); ADR-0144 D8 rule 2 makes the naming convention guidance in skills/**, never a contract. Holds. This is the should-fix routed from the contract review record on feat(spec): currencyMode: 'record' + currencyField — a record-mode amount points at a sibling ISO 4217 code field (multi-currency M0-1) #27268, delivered.
• Trying to break it. A select code field: refused by the object door, and the skill says text. A code field named ccy: accepted by the spec, and the skill now says "by convention", not "must". The example at line 177 already uses currency_code and pairs with the sentence. No finding.
• Observation, pre-existing and not this hunk: the type table row at line 55 lists currencyConfig (currencyMode, defaultCurrency) without currencyField. With the file at its ceiling, adding it needs a cut elsewhere — the lane's call, not a finding against this change.

Findings: 0 must-fix · 1 should-fix (dashboards.md: "ungrouped" is looser than "not grouped by its code field").

Implemented-by: claude/project-thread-gktkiu
Reviewed-by: session_01Utp6CbTZrFqRYNgjSaSbN5

VERDICT: PASS

[objectstack-fleet]

epic:#8345#1 · os-bill · session_01Utp6CbTZrFqRYNgjSaSbN5

席位记录 · epic PM epic:#8345 · 2026-10-29T14:16Z

Head: 272afe115ab03b1983131b8d3039e4113d5b9aa4 · Session session_01Utp6CbTZrFqRYNgjSaSbN5

维护者速读

• 改了什么： 新增数据建模文档「Currency」页：三种模式（dynamic / fixed / record）、record 模式的兄弟 ISO 4217 币种字段（currency_code 只是约定，不是契约）、哪些写法被拒及处方、平台从不代填币种、元数据永不写本位币；把仍只写两种模式的手写页补成三种并链到新页；skills 的 dashboards 指南补一句 record 金额度量列带 currencyField、count 不带、未按币种分组的聚合被拒；field-types 指南注明 currency_code 只是约定。
• 为什么改： 文档和 skills 是 AI 作者照抄的源头；R1 一发布，旧页「只有两种模式」就成了错话。
• 风险与回滚： 纯文档 + 两处 skills 文字（Tier H，skills/**），不动任何代码与 schema；回滚即还原本 PR。⛔ 与已合入的 R1 四张 PR 同一次发布。
• 先看： content/docs/data-modeling/currency.mdx，再看 skills/objectstack-ui/rules/dashboards.md 那 7 行注释。
• 两分钟验证： node scripts/check-skills-token-ratchet.mjs 通过（dashboards.md 6220 / 6221，field-types.md 3158 / 3158）；pnpm check:docs-audit-scope 通过。
• 需要你做的： 由 os-zhuang 或 hotlong 在本 head 批准。契约复审 PASS（见本记录上一条评论），Head-sha: 272afe115ab03b1983131b8d3039e4113d5b9aa4。批准后席位翻 ready、入队，然后发 R1。

席位意见：建议批准。契约复审在本 head 上 PASS，无必改；一条建议（dashboards.md 的 "ungrouped" 应写成 "not grouped by its code field"，现在 token 预算只剩 1）不移动本 head，并入席位接下来的 Tier H 收尾 PR（ADR-0144 两条日期注记 + 存量行回填的 skills 一行）。

席位核对

ACCEPT · epic PM epic:#8345 · head 272afe11

• 形态：13 个文件，+301/−34；content/docs/** 9 个、scripts/docs-audit/handwritten-docs.json、skills/** 2 个（Tier H）、changeset（@objectstack/skills patch）；Clause-②: no · Metadata-protocol: none；draft。
• 前提实测：merge-base 1ed33609 即 feat(ui): record-mode currency — each record shows its own currency; ISO 4217 code select pre-filled with the organization currency; no cross-currency totals; Studio currency section #27340 的合并提交，R1 四张 PR 全在树上；手写页引用的错误码、状态码与消息由开发线程对照已落地代码逐条复核（PR 正文 Verification 段）。
• 门禁 check-runs：本 head 46 个，全部 success 或按路径 / opt-in 跳过，0 failure；本地派生门 76 / 76 退出 0。
• 接受的偏差：上述 "ungrouped" 措辞建议延后到席位的 Tier H 收尾 PR；field-types.md 已顶到 3158 / 3158 上限，类型表第 55 行补 currencyField 需要同文件删字，留待下次改动。
• 范围外去向：skills 措辞建议 → 席位 Tier H 收尾 PR；存量行回填 → objectql + cli: backfill the currency code when a stored amount switches to record mode, and a 409 acknowledgement at the metadata door (multi-currency, epic #8345) #27577；fixed 字段跨币种拒收 → service-analytics: refuse fixed-versus-fixed cross-currency measures at dataset compile (multi-currency, epic #8345) #27579。Skills-docs: updated here。
• 落地条款：授权批准在案 → 席位过落地前检、清标、ready、入队；之后 R1 Version Packages。

ACCEPT → this comment.