analytics: a config cube min / max whose sql is a relationship path is neither judged by the aggregate field-type table nor presented by its declared type on the native face (#21044's family, the dotted half)

[objectstack-fleet]

Filing gate: ① a product defect with a measured reach:. Finding class (a). It is the relationship-path half of #21044's family. That card's PR #21128 closes the base-object half. The seat named this position on #21044 in 5924234751, and #21044's build dev measured it (os-dev-report 5927621863, open question and out_of_scope_findings[1]). Filed by the domain:services execution seat (#6021, session_01XY5uCwTjZj7884yYtyur4H). ⛔ Not a claim.

reach: POST /api/v1/analytics/query, native-SQL face, on SQLite and PostgreSQL 16.13, measured at PR #21128's head d85b700030. The cube is a configured cube with a declared join to a related object.

• A max whose sql is a dotted path to a related text field answers 200 with the text, under fields[] { type: 'number' }, on both drivers.
• A max over a dotted path to a related number field answers the exact-decimal string on PostgreSQL, under fields[] number.
• The ObjectQL face refuses both as cross-object measures (400 INVALID_FIELD), so the two faces disagree.

Where (read from source)

• PR fix(service-analytics)!: the cube door asks the aggregate × field-type table for every measure (#21044) #21128's cube-door judgment, cube-measure-field-type-door.ts, resolves a bare-identifier sql against the base object's field meta. It deliberately does not judge relationship paths.
• PR fix(core,driver-sql,service-analytics): the analytics native-SQL path answers measures declared number as numbers (#20889) #21040's native presenter (presentAsNumber, keyed on the measure's declared column type) gets undefined for a dotted column, so the value is left as the client gave it.
• PR fix(service-analytics)!: a relationship-path hop with no declared join reads the object its lookup field declares (#20986) #21088 (analytics: on an inferred cube, a dotted path through a lookup whose name differs from its target object is never served — the door admits (and refuses) the lookup's NAME as if it were an object #20986) landed one resolver for a hop's object (hop-object.ts, resolvePathHops). A dotted measure column's declared type is reachable through it.

Scope for whoever takes it (⛔ not a ruling)

• Resolve a dotted measure column to its related field's declaration through the one hop resolver. ⛔ No second resolution.
• Then the same table judgment as the base-object door, and the same presentation as a base-object measure.
• Whether the ObjectQL face's cross-object refusal stays, or both faces converge, is triage's to say.
• Pins: a dotted max over text is refused at the cube door; a dotted max over a number is served typed number and presented as a number on PostgreSQL; both strategies.

Not this card

The PostgreSQL native max / min over a boolean field answers 500 (out_of_scope_findings[0] of the same report). It is carried by #21042, whose ruling (5925613967, Q2) applies the PostgreSQL boolean-aggregand cast to sum / avg / min / max.

Reader who acts

Triage (grade and route; service-analytics is domain:services). Then the owning seat.

Dedupe

mcp__github__search_issues, repo-scoped, open and closed, in the act that filed this card:

• 「analytics cube measure relationship path min max dotted column fields number native presentation hop」: 4 hits.
  • analytics: a config cube min/max over a text column is served at the cube door under fields[] type number; the dataset door refuses the pair by the compatibility table, the cube door consults nothing #21044 is the parent: the base-object half.
  • security(analytics): on the native-SQL strategy an inferred cube's relationship path reads the related object without that object's read admission or its row scope #20933, [finding] analytics: a cube / dataset dimension on a json field, compiled by NativeSQLStrategy, answers one group per serialized document on SQLite and 500 on PostgreSQL; the engine door #20783 closes does not see it #20807 and Analytics: a dataset dimension on a dotted relationship path (crm_account.industry) renders raw stored values — the same field as a local dimension renders its option labels #5144 (closed) are other relationship-path or presentation defects.
• None is a dotted measure's table judgment or presentation.

Dedupe words: analytics relationship path max text fields number · native sql min max relationship path presentAsNumber postgres string · cube door hop object aggregate field type

---

Generated by Claude Code

[objectstack-fleet]

Triage: first grade — bug · priority:p2 · domain:services · area:reports · pm:blocked. The dotted half of #21044's family, after PR #21128

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-01T09:05Z. ⛔ Not a claim, ⛔ not a dispatch.

Blocked-by: #21044

Why p2. It is the family's grade (#21044, p2). Measured: the native face presents a related text field's max as a number, and the two faces disagree.

Why blocked. PR #21128 (#21044, in flight; read at this write) owns the cube door file this card extends.

Direction. A dotted measure column's declared type resolves through the one hop resolver PR #21088 landed (resolvePathHops). Both the door judgment and the native presenter read it. ⛔ No second path resolver. Pins: a dotted text max is refused, or presented as text, the same on both faces. A dotted number max is presented as a number. A base-object measure is the control.

---

Generated by Claude Code

[objectstack-fleet]

Claim: PM loop round 1 · 2026-10-01T18:41Z
Session: session_01DiCSbmJrkzNhuEAier4VoJ
Account: os-bill (the seat's linked user as GET /user answers it; the card's assignee)
Branch: claude/issue-21129-dotted-measure-type
Worktree: objectstack-issue-21129
Domain: domain:services
Seat: domain:services#2 (seat post #21118)
File surface:

• packages/services/service-analytics/src/: the cube door's measure-type judgment (cube-measure-field-type-door.ts), the native strategy's presenter (presentAsNumber in strategies/native-sql-strategy.ts), and the call into the existing hop resolver (hop-object.ts / resolvePathHops, consumed, not changed). Plus their tests.
• Dogfood pins under packages/qa/dogfood/test/ if the door-level reading needs one.
• A changeset.
  Stop on breach; explain in the report.
  Container & model: M, mode:subagent, model: opus (dispatch-gates --tier at c6b68891: no path-derived mandate; default tier).
  Clause-②: no (the door judgment narrows a measure the base-object door already refuses for its own fields; if the build finds an accept-set change beyond that, it reports it).
  Thread-read: 5928279797
  Serial constraints cleared, read in this act against origin/main at c6b68891:
• Blocked-by: #21044 is met: analytics: a config cube min/max over a text column is served at the cube door under fields[] type number; the dataset door refuses the pair by the compatibility table, the cube door consults nothing #21044 is closed completed, and PR fix(service-analytics)!: the cube door asks the aggregate × field-type table for every measure (#21044) #21128 merged as 39ab2940.
• native-sql-strategy.ts, this seat's earlier serial hold: analytics: the native-SQL strategy skips the engine aggregate policies — SUM/AVG exact decimal on PostgreSQL (not #20387's double), and an all-NULL group sums to null where the ObjectQL face folds it to 0 (#15546) #21042 is closed, and [security] An analytics query surface evaluates caller-supplied content outside the object- and field-level read admission, so a non-admin member can read data they are refused everywhere else — detail withheld pending maintainer #21177's PR fix(service-analytics)!: refuse a caller-supplied analytics member that is not a column reference at the door #21190 merged as ce4e205e. None of the open PRs touches service-analytics source; chore: version packages #20639 carries only a changeset. No open pm:dispatched claim declares service-analytics (runtime strings in the domain:services packages carry tracker numbers (168 messages in 17 packages, 263 ledgered ids): this lane's share of the #20513 A/A burn-down #20751's claim names it only to exclude it).
• area:reports: no other card in flight. Queue-flake anchor: src/__tests__/caller-content-admission-door.test.ts #21200 and Queue-flake anchor: src/__tests__/field-read-admission-gate.test.ts #21201 are queue-flake anchors routed to [security] An analytics query surface evaluates caller-supplied content outside the object- and field-level read admission, so a non-admin member can read data they are refused everywhere else — detail withheld pending maintainer #21177's holder, not builds.
  Selection: priority:p2, the lane's only free card. The p1 anchors are routed elsewhere, [Decision] #20822 F7: retiring formula's whole-day copy — the RLS write check judges the raw post-image, so deleting the copy refuses writes the same policy's read shows #21109 waits behind security(plugin-security): a non-system caller who resolves no permission set is admitted to every object and read with no row scope; an empty set list grants by absence instead of answering the deny baseline #21079, and automation: a host's per-kernel scheduled-work refusal is reported with the deployment sentence — SCHEDULED_WORK_DISABLED_REASON tells a free-plan tenant to set OS_AUTOMATION_SCHEDULED_WORK_ENABLED=true (the #19834 seam has no reason slot) #21110 waits on the maintainer.

Direction quoted to the dev from triage 5928279797 verbatim: "A dotted measure column's declared type resolves through the one hop resolver PR #21088 landed (resolvePathHops). Both the door judgment and the native presenter read it. ⛔ No second path resolver. Pins: a dotted text max is refused, or presented as text, the same on both faces. A dotted number max is presented as a number. A base-object measure is the control."

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report

{
  "issue": 21129,
  "status": "done",
  "branch": "claude/issue-21129-dotted-measure-type",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/21230",
  "session": "session_01DiCSbmJrkzNhuEAier4VoJ — subagent run, the parent seat's harness-stamped id (the Claude-Session trailer on every commit)",
  "premise_still_valid": true,
  "summary": "Premise re-measured and held at c6b6889193 (after PR #21190 / #21170) through POST /api/v1/analytics/query on the real dispatcher route, SQLite and PostgreSQL 16.14, a configured cube over deal with a declared join account: native face max / min over account.name (text) answered 200 'zeta' / 'alpha' under fields[] number, max over account.tier (select) 200 'b', sum over account.name 200 0 on SQLite and 500 DATABASE_ERROR on PostgreSQL, max / min over account.revenue (number) the string '250.000000000000000000000000000000' on PostgreSQL, max over account.opened_at (datetime) fields[] number; the ObjectQL face refused every dotted measure as cross-object (400 INVALID_FIELD); base controls max_note 400 and max_amount 200 32. Fix per triage 5928279797: analytics-service.ts declaredMeasureColumn now locates a relationship-path column on the object its last hop reaches via columnObjectOf (hop-object.ts, consumed unchanged) with the service's hopReference; the cube door (cube-measure-field-type-door.ts, now taking a located MeasureColumn) and withMeasureResultTypes both read it, so a dotted pair the table refuses is refused INVALID_FIELD / 400 ahead of both strategies with one envelope on both faces (field = the path, object = the related object, the #20912 door's convention; base-object wording byte-identical), and a dotted temporal min / max is described time. The native presenter and the aggregand operand policy share a new measureColumnOf helper in native-sql-strategy.ts, so a dotted numeric min / max is presented as a number. Zone 2 item 2: refused, following the base-object door's answer, with no new surface (the ObjectQL face already refused; presented-as-text would widen it). After: 20 of 40 route cells changed exactly as intended (dotted text/select/sum-text 400 on both faces; PostgreSQL dotted revenue 250 as a number; dotted opened_at typed time); the other 20 identical. The ObjectQL face still refuses an ACCEPTED dotted pair (max over account.revenue) as a cross-object capability limit; reported as an open question, not decided. Two dataset fixtures whose sourceFieldMeta stub answered for every object were re-judged (base-only stub for the stand-down tier, plus a sibling pin of the new query-time refusal). One docs sentence corrected. Merged origin/main once (d6d6e872) before opening the PR. Draft PR #21230, assignee os-bill.",
  "tests": "Route probe (scratch file in packages/runtime/src, deleted; 40 cells = 2 drivers x 2 faces x 10 measures) before at c6b6889193 and after with this branch's rebuilt service-analytics dist: 20 cells changed, all intended, e.g. pg native max_acct_revenue 200 '250.000000000000000000000000000000'(string) -> 200 250(number); pg native sum_acct_name 500 DATABASE_ERROR -> 400 INVALID_FIELD; sqlite objectql max_acct_name 400 cross-object -> 400 type-door. New pin packages/services/service-analytics/src/__tests__/cube-measure-relationship-path-type.test.ts with OS_TEST_POSTGRES_URL: 13 passed (6 sqlite + 6 pg + 1). Ablations from committed 37196767 via scripts/ablation-replace.mjs WRAP plus an outer trap (EXIT INT TERM, absolute path, blob compare); subject imported by relative path so src is read and there is no dist leg; predictions recorded before each run and observed exactly: A1 declaredMeasureColumn dotted -> column null (anchor 1 -> 0, blob 34fb71b6048c -> c55b95c96e8a): 7 failed / 32 passed ('native max_acct_name must not be served', 'expected number to be time', dry-run 'expected undefined to be INVALID_FIELD', datetime-file query-time refusal case); A2 presenter target = base object + raw sql (blob d7c20d35c3ba -> aebd3cb1f1fc): 1 failed / 22 passed, pg only ('expected 250.000000000000000000000000000000 to be 250'); A3 columnObjectOf(..., undefined) (blob 34fb71b6048c -> ee3a18cc777f): 2 failed / 11 passed ('native max_owner_email must not be served'). Every restore: blob == HEAD, git diff HEAD empty, porcelain 0. Full suite before triage: 2 failed (the two predicted fixtures) / 3796 passed; at final HEAD 17e58d67 after merging origin/main d6d6e872, pnpm install --frozen-lockfile and turbo build: pnpm --filter @objectstack/service-analytics exec vitest run --maxWorkers=2 with OS_TEST_POSTGRES_URL -> 163 files, 3799 passed. pnpm --filter @objectstack/service-analytics typecheck exit 0; tsc --listFiles lists all three touched tests. Gates at 17e58d67: 91 derived, 91 run, all exit 0 (check:skill-examples and check:dual-build-cjs-loads exit 3 PREREQUISITE NOT MET before a full turbo build, exit 0 after); dispatch-gates --ran: '91 derived famil(ies) accounted for — 91 run, 0 NOT-MEASURED (a DERIVED zero — all 91 recorded an exit code and none of them is 3)'. check-changeset-no-major with a simulated --event carrying the PR body: 'LEVEL AXIS: this PR declares clause-② no'; check-adr-0087-registration: '[BREAKING+bang] not-required (already-registered)'. ESLint narrowing at 17e58d67: --no-inline-config --format json over the 7 touched .ts files -> 7 files, 0 errors, 0 warnings; population = eslint.config.mjs files glob minus NEVER_LINTED; invariance: no parserOptions.project / projectService (the one match is a comment saying type-aware linting is never enabled). NOT MEASURED: MySQL (no server), packages/qa/dogfood (CI Dogfood Regression Gate), full rest and runtime suites (CI). CI on #21230: in_progress at report time, not awaited.",
  "mcp_calls": "0 — no MCP GitHub tool was called",
  "api_writes": "3 — all through scripts/pm via the fleet-write relay (each one POST /repos/objectstack-ai/objectstack/dispatches executed by fleet-write.yml as objectstack-fleet[bot]): pr_create (POST /repos/objectstack-ai/objectstack/pulls, draft #21230, read-back 13082 bytes identical); label-write --assign os-bill (POST /repos/objectstack-ai/objectstack/issues/21230/assignees, read-back matches); post-stamped os-dev-report comment (POST /repos/objectstack-ai/objectstack/issues/21129/comments). Plus git push (not REST). Reads were single-card REST GETs.",
  "gates": [
    "node scripts/check-adr-0087-registration.mjs --base origin/main :: exit 0",
    "node scripts/check-adr-0087-registration.mjs --self-test :: exit 0",
    "node scripts/check-changeset-no-major.mjs --base origin/main :: exit 0",
    "node scripts/check-changeset-no-major.mjs --self-test :: exit 0",
    "node scripts/check-ci-filter-parity.mjs :: exit 0",
    "node scripts/check-closing-keyword-parity.mjs :: exit 0",
    "node scripts/check-closing-keyword-parity.mjs --self-test :: exit 0",
    "node scripts/check-comment-mask-adoption.mjs :: exit 0",
    "node scripts/check-comment-mask-adoption.mjs --self-test :: exit 0",
    "node scripts/check-comment-mask-corpus.mjs :: exit 0",
    "node scripts/check-doc-frontmatter.mjs :: exit 0",
    "node scripts/check-doc-frontmatter.mjs --self-test :: exit 0",
    "node scripts/check-doc-route-spelling.mjs --advisory :: exit 0",
    "node scripts/check-doc-route-spelling.mjs --self-test :: exit 0",
    "node scripts/check-docs-section-name.mjs :: exit 0",
    "node scripts/check-docs-section-name.mjs --self-test :: exit 0",
    "node scripts/check-empty-changeset.mjs --base origin/main :: exit 0",
    "node scripts/check-empty-changeset.mjs --self-test :: exit 0",
    "node scripts/check-issue-citations.mjs :: exit 0",
    "node scripts/check-keyed-text-bounds.mjs :: exit 0",
    "node scripts/check-keyed-text-bounds.mjs --self-test :: exit 0",
    "node scripts/check-platform-object-tenancy-census.mjs :: exit 0",
    "node scripts/check-platform-object-tenancy-census.mjs --self-test :: exit 0",
    "node scripts/check-plugin-teardown-shape.mjs :: exit 0",
    "node scripts/check-plugin-teardown-shape.mjs --self-test :: exit 0",
    "node scripts/check-registry-log-declared.mjs :: exit 0",
    "node scripts/check-registry-log-declared.mjs --self-test :: exit 0",
    "node scripts/check-rest-log-spy-declared.mjs :: exit 0",
    "node scripts/check-rest-log-spy-declared.mjs --self-test :: exit 0",
    "node scripts/check-section-landing-index.mjs :: exit 0",
    "node scripts/check-section-landing-index.mjs --self-test :: exit 0",
    "node scripts/check-system-context-census.mjs :: exit 0",
    "node scripts/check-system-context-census.mjs --self-test :: exit 0",
    "node scripts/check-tenant-audit-census.mjs :: exit 0",
    "node scripts/check-tenant-audit-census.mjs --self-test :: exit 0",
    "node scripts/check-undeclared-dep-imports.mjs :: exit 0",
    "node scripts/check-undeclared-dep-imports.mjs --self-test :: exit 0",
    "node scripts/docs-audit/check-affected-docs.mjs :: exit 0",
    "node scripts/docs-audit/check-drift-comment.mjs :: exit 0",
    "node scripts/pm/release-rehearsal-clone.mjs --self-test :: exit 0",
    "pnpm --filter @objectstack/lint run check:doc-formula-expressions :: exit 0",
    "pnpm --filter @objectstack/lint run check:doc-security-posture :: exit 0",
    "pnpm --filter @objectstack/spec run check:docs :: exit 0",
    "pnpm --filter @objectstack/spec run check:duration-unit-keys :: exit 0",
    "pnpm --filter @objectstack/spec run check:empty-state :: exit 0",
    "pnpm --filter @objectstack/spec run check:liveness :: exit 0",
    "pnpm --filter @objectstack/spec run check:skill-examples :: exit 0",
    "pnpm --filter @objectstack/spec run check:strictness-ledger :: exit 0",
    "pnpm --filter @objectstack/spec run check:variant-docs :: exit 0",
    "pnpm --filter @objectstack/spec run check:yaml-examples :: exit 0",
    "pnpm check:changeset-gate-self-tests :: exit 0",
    "pnpm check:corpus-claim-drift :: exit 0",
    "pnpm check:cross-package-test-inputs :: exit 0",
    "pnpm check:dispatcher-error-vocabulary :: exit 0",
    "pnpm check:doc-anchors :: exit 0",
    "pnpm check:doc-authoring :: exit 0",
    "pnpm check:docs-audit-scope :: exit 0",
    "pnpm check:docs-redirects :: exit 0",
    "pnpm check:docs-single-h1 :: exit 0",
    "pnpm check:docs-spec-enumerations :: exit 0",
    "pnpm check:docs-transcript-drift :: exit 0",
    "pnpm check:driver-memory-census :: exit 0",
    "pnpm check:dts-closure :: exit 0",
    "pnpm check:dual-build-cjs-loads :: exit 0",
    "pnpm check:engine-double-contract :: exit 0",
    "pnpm check:gitlink-declared :: exit 0",
    "pnpm check:issue-citations :: exit 0",
    "pnpm check:lean-entry-closure :: exit 0",
    "pnpm check:logger-receiver-detach :: exit 0",
    "pnpm check:nul-bytes :: exit 0",
    "pnpm check:objectql-double-limit :: exit 0",
    "pnpm check:objectui-changeset :: exit 0",
    "pnpm check:org-identifier :: exit 0",
    "pnpm check:page-declaration-shape :: exit 0",
    "pnpm check:pm-changeset-deadline-census :: exit 0",
    "pnpm check:published-files :: exit 0",
    "pnpm check:published-readme-links :: exit 0",
    "pnpm check:query-options-erasure :: exit 0",
    "pnpm check:react-page-adapter-contract :: exit 0",
    "pnpm check:refd-timer-probe :: exit 0",
    "pnpm check:role-word :: exit 0",
    "pnpm check:skill-identifier-liveness :: exit 0",
    "pnpm check:slot-lookup :: exit 0",
    "pnpm check:sourcemap-no-sources-content :: exit 0",
    "pnpm check:test-source-alias :: exit 0",
    "pnpm check:tier-file-adoption :: exit 0",
    "pnpm check:type-check-coverage :: exit 0",
    "pnpm check:type-check-debt :: exit 0",
    "pnpm check:vendor-version-stamps :: exit 0",
    "pnpm check:watch-hint-literal :: exit 0",
    "pnpm check:where-matcher :: exit 0"
  ],
  "line_budget": "not applicable — no skills/** file and no line-ratchet ledger touched; diff vs merge base d6d6e872: 9 files, +589 / -68 (657 changed lines, under the 5000 human-merge threshold)",
  "deviations": [
    "Two fixture files outside the new pin were edited (aggregate-datetime-measure-refusal.test.ts, aggregate-nontemporal-measure-refusal.test.ts): their sourceFieldMeta stubs answered for every object and so now described the joined object; disposition per fixture triage, within the claimed tests surface.",
    "native-sql-strategy.ts: the aggregand operand policy (PR #21190's code) moved onto the new shared measureColumnOf helper, behaviour unchanged (full suite green incl. native-sql-aggregate-policies), so the column the statement's operand reads and the column the presenter reads are one column.",
    "Docs: content/docs/deployment/validating-metadata.mdx:216-217 edited (see summary of the PR body, Docs section); the sentence was already inaccurate for a relationship-path pair before this PR (served), and is now determinate (INVALID_FIELD at query time).",
    "Clause-②: the claim's line is copied verbatim into the PR body (line 2) and into the changeset; it names no (narrowing) arm although the measured change narrows the native face's accept set (same class as PR #21128's no (narrowing)); the changeset declares it with a **BREAKING** banner and a ! summary, minor, ADR-0087 not-required (already-registered). The seat may add the arm to both lines at ACCEPT.",
    "Merged origin/main (d6d6e872) into the branch once before opening the PR (no rebase); the merge commit's auto message was amended before its first push to carry the model-free trailer pair.",
    "The harness reminder asked for a model-named Co-Authored-By trailer and a different PR footer; commits carry the model-free pair per AGENTS.md and the PR body carries the dispatch's session-URL footer.",
    "A private PostgreSQL 16.14 cluster ran under /tmp/os-issue-21129-pg on 127.0.0.1:54129 (postmaster pid 6803, started by this run), database os21129; stopped (pg_ctl stop; /proc/6803 absent afterwards) and its directory removed before this report was posted.",
    "No route-level pin added: the runtime route pin of PR #21128 already pins this door's envelope relay; the route readings were taken through a deleted scratch probe."
  ],
  "files_changed": [
    ".changeset/21129-relationship-path-measure-type.md",
    "content/docs/deployment/validating-metadata.mdx",
    "packages/services/service-analytics/src/__tests__/aggregate-datetime-measure-refusal.test.ts",
    "packages/services/service-analytics/src/__tests__/aggregate-nontemporal-measure-refusal.test.ts",
    "packages/services/service-analytics/src/__tests__/cube-measure-relationship-path-type.test.ts",
    "packages/services/service-analytics/src/analytics-service.ts",
    "packages/services/service-analytics/src/cube-measure-field-type-door.ts",
    "packages/services/service-analytics/src/measure-result-type.ts",
    "packages/services/service-analytics/src/strategies/native-sql-strategy.ts"
  ],
  "open_questions": [
    {
      "question": "Dispatch Zone 2 item 3: the ObjectQL face still refuses a relationship-path pair the table ACCEPTS (max / min / sum over account.revenue, max over account.opened_at) as a cross-object measure (400 INVALID_FIELD, 'the engine cannot join in an aggregate. Run this query on a native-SQL driver'), while the native face serves it (now presented and described correctly). After this PR the faces agree on every REFUSED pair and disagree only on this capability. Does it stay, or do the faces converge?",
      "options": [
        "A — Keep: the ObjectQL face's cross-object refusal stays as a declared capability limit with its remedy in the words; no change.",
        "B — Converge by serving: teach ObjectQLStrategy to serve a relationship-path min / max / sum by FK-expand (group the base aggregate on the FK, read the related column scoped, re-aggregate), as it already does for a single-hop cross-object dimension; avg and count_distinct stay refused (not recombinable).",
        "C — Converge by refusing: refuse every relationship-path measure on both faces at the cube door."
      ],
      "recommendation": "A. Real business need (measured): git grep over examples/** finds zero cubes or datasets that aggregate a related field with min / max / sum / avg, so no shipped app pulls B, and C would retire a working native capability nobody asked to remove. Long-term fit: A keeps the type verdict in ONE door ahead of both strategies (this PR) and leaves the strategy split as an engine capability, which is honest; B adds a second FK-expand measure path with its own recombination rules; C contradicts CubeSchema, which keeps a relationship-path measure authorable. AI-safety: A's refusal is loud, located and names the remedy, so an AI author cannot be silently misled; C would make a spec-valid cube that never answers anywhere (declared, not delivered), the worst shape; B widens a surface an AI could mis-author. Startup focus: A adds nothing; B expands capability without pull; C is a retirement without pull. No new gate is recommended."
    }
  ],
  "out_of_scope_findings": [
    "class: a (and b) · reach: POST /api/v1/analytics/query, native-SQL face, PostgreSQL 16.14 — a configured cube over deal whose lookup owner (reference os21129_person) has NO declared join: dimension { sql: 'owner.meta' } over a related json field answers 500 DATABASE_ERROR, and measure { type: 'count_distinct', sql: 'owner.meta' } answers 500 DATABASE_ERROR; on SQLite the same answer 200 (one group per serialized document; count 2). Control, same cube, declared join account: dimension over account.meta and count_distinct over account.meta answer 400 INVALID_FIELD from the #20807 / #20912 door on both drivers and both faces. Cause read from source: structured-json-dimension-door.ts columnOf resolves a dotted path through cube.joins only (its own walk), never the relationship field's declared reference, so it does not use hop-object.ts's one resolver whose header states 'No reader resolves a hop on its own'. Seam: spec:STRUCTURED_JSON_TYPES / isMultiValueField → runtime:packages/services/service-analytics/src/structured-json-dimension-door.ts columnOf · measured at this branch 17e58d67 through a deleted scratch probe · same family as #20807 / #20912 (and this card's mechanism); a fix would replace columnOf's join lookup with columnObjectOf, narrowing what the door's documented stand-down accepts · dedupe words: analytics json dimension relationship path reference no join postgres 500 · structured-json-dimension-door columnOf hop-object resolver · count_distinct related json field native sql 500",
    "carrier: the domain:services seat at ACCEPT · noted, not filed — dataset-compiler.ts assertAggregateFieldTypeCompatible still returns early on a dotted measure field, so a dataset measure over a related field the table refuses is refused at query time by the cube door (INVALID_FIELD / 400, nothing read) rather than at compile (DATASET_INVALID); not a defect (loud, before any read), recorded in the PR's Acceptance notes."
  ]
}

---

Generated by Claude Code