Issues · objectstack-ai/objectstack

spec(ui): retire `sortField` from the `object-master-detail-form` detail entry; the pinned console stopped reading it at objectui `0a3e5409f`, and the bump that crossed it did not carry the spec half

objectstack-ai/objectstack#21589 · opened

on Oct 3, 2026

1

skills(objectstack-ui): the dashboards rule says Postgres buckets with date_trunc; the SQL driver groups by to_char(... AT TIME ZONE UTC) on Postgres

objectstack-ai/objectstack#21588 · opened

on Oct 3, 2026

1

docs: positioning follow-up: stale home title, cover image and alt; README restructured on the four promises; an ontology concept page; glossary and north-star bridges

objectstack-ai/objectstack#21586 · opened

on Oct 3, 2026

4

[finding] os package install accepts a package whose hook uses only the deprecated function-name handler (no body), answers "installed", and the hook never fires: install-local drops it with a server-side warn only

objectstack-ai/objectstack#21585 · opened

on Oct 3, 2026

1

skills/objectstack-i18n: the `_actions` row and the `translation-target-unknown` paragraph omit the action-entry keys `os validate` judges (param options, `outcomeMessages`, `resultDialog` leaves and fields)

objectstack-ai/objectstack#21583 · opened

on Oct 3, 2026

1

spec(ui): drop the `[EXPERIMENTAL — not enforced]` marker on `object-grid`'s `keyboardNavigation` once objectui#11068's reader lands

objectstack-ai/objectstack#21582 · opened

on Oct 3, 2026

migrate: a sanctioned, operator-only read of unmapped (orphaned) columns for data conversion, before `--allow-destructive` drops them (the coupling #21571 names)

objectstack-ai/objectstack#21573 · opened

on Oct 3, 2026

spec(data/driver): withdraw `memory` / `mingo` / `in-memory` from the driver vocabulary's selection face, contract-only kept (the declaration half of #21492's retirement)

objectstack-ai/objectstack#21572 · opened

on Oct 3, 2026

5

An unprojected REST data query returns ORPHANED columns that no metadata declares (fields retired in an upgrade), outside any field-level rule, until `os migrate apply --allow-destructive`

objectstack-ai/objectstack#21571 · opened

on Oct 3, 2026

2

skills(objectstack-api): the published public-form opt-in names two of the three sharing keys the anonymous form endpoints require — an AI following it authors a form both endpoints answer 404

objectstack-ai/objectstack#21567 · opened

on Oct 3, 2026

2

[finding] The metadata save door accepts a hook whose sandboxed body targets a stored-metadata table, which the runtime then refuses at bind: authoring answers 200 for a hook that never runs

objectstack-ai/objectstack#21565 · opened

on Oct 3, 2026

4

ci: Temporal Conformance runs service-analytics with no OS_TEST_POSTGRES_URL, so the package's live-PostgreSQL temporal cells are named skips in CI and read as covered

objectstack-ai/objectstack#21564 · opened

on Oct 3, 2026

4

finding(metadata-protocol): the runtime save door accepts a view container saved under one of its own expanded names, and after #21510's rule no door answers a view item for that name

objectstack-ai/objectstack#21558 · opened

on Oct 3, 2026

1

security(metadata-protocol,runtime): one stored-metadata search narrowing and one filter-field collector, exported by the door and called by the reader seam (consolidation after PR #21539)

objectstack-ai/objectstack#21544 · opened

on Oct 3, 2026

2

finding(skills): the objectstack-ui skill authors a container's create/edit form under `formViews.default` / `formViews.edit`, which PR #21535 serves as a named form, never the default

objectstack-ai/objectstack#21537 · opened

on Oct 3, 2026

2

security(automation): the flow record-read node serves the stored-metadata family unprojected — consume PR #21513's door exports (#21454 item A4)

objectstack-ai/objectstack#21519 · opened

on Oct 3, 2026

2

[finding] [security] An in-process engine verb passes an object name the registry does not resolve to the driver as a raw table name, so a sandboxed body reads a protected table by a name the data door refuses

objectstack-ai/objectstack#21516 · opened

on Oct 3, 2026

7

finding(metadata-protocol): on an unscoped kernel a stored container's hydrated expansions carry no tenant marker, so an expanded view reads `resettable: true` and its layered `code` is the hydrated expansion

objectstack-ai/objectstack#21511 · opened

on Oct 3, 2026

3

`os dev --database-driver memory` boots, then every data read answers 503 SERVICE_UNAVAILABLE — the package registry's CREATE TABLE sys_packages goes through driver-memory's no-op execute()

objectstack-ai/objectstack#21492 · opened

on Oct 2, 2026

15

[Decision] install-local: a package's declared jobs are never scheduled — refuse the install, name them in the install answer, or make job handlers declarable bodies (the jobs half of #21322)

objectstack-ai/objectstack#21489 · opened

on Oct 2, 2026

9

driver-sql on PostgreSQL: a month (or any) date bucket over a `date` column shifts by the server's timezone (`::timestamptz AT TIME ZONE 'UTC'`), so with a non-UTC server a calendar day lands in the previous bucket

objectstack-ai/objectstack#21485 · opened

on Oct 2, 2026

4

forms: on a walled tenancy posture a published public form bound to a tenant-scoped object is served (GET 200) but every anonymous submit answers 500 ERR_SYSTEM_WRITE_ORGANIZATION_REQUIRED

objectstack-ai/objectstack#21476 · opened

on Oct 2, 2026

7

finding(pm): triage may propose folding two governed cards into one PR, or a follow-up pass without a card; the execution protocol has no rule for either — the seat declined both on objectui#11503 by judgment

objectstack-ai/objectstack#21467 · opened

on Oct 2, 2026

1

finding(pm): `check-widening-tells` T2 reads identifiers in a multi-line import list as "a new member of a closed set" — a by-reference narrowing that only adds imports is forced to declare `Clause-②: yes`

objectstack-ai/objectstack#21465 · opened

on Oct 2, 2026

1

spec(ui): the `ComponentPropsMap` rows still type renderer-read members as `z.unknown()` — `navigation` on object-map / object-gantt / object-tree and `conditionalFormatting` on object-kanban accept `42` — the family close-out after #21445

objectstack-ai/objectstack#21464 · opened

on Oct 2, 2026

15