Merge remote-tracking branch 'origin/main' into claude/project-thread-ybjm3h

Author: claude

.github/workflows/ci.yml

@@ -277,6 +277,8 @@ jobs:
               - 'package.json'
               - 'pnpm-lock.yaml'
               - 'tsconfig.json'
+              - 'tsconfig.base.json'
+              - 'tsconfig.test.base.json'
               - '.github/workflows/ci.yml'
               # BUILD INPUTS outside every package (#21202): turbo.json itself,
               # its `globalDependencies`, and each `$TURBO_ROOT$/…` input of a

docs/audits/2026-09-loadmany-consumer-census.md

@@ -96,8 +96,9 @@ files that assert today's unkeyed shape.
 test-only fixture doubles (`*.test.ts`, not loaders anyone ships). Each shipped loader's
 `list()`, `loadMany()` and `loadManyKeyed()` were read at the cited lines, then the cost
 claim was **measured**, not guessed — either by counting the calls a fake engine/fs sees,
-or by timing the real implementation. Scripts are committed under `scripts/audits/` (see
-§5) so every number below is re-runnable.
+or by timing the real implementation. Scripts were committed under `scripts/audits/` (see
+§5) so every number below is re-runnable; they were later removed from the tree and are
+held at commit `7111e14ac9`.
 
 | Loader | `listNames` (via `list()`) | `loadManyKeyed` | Cost of `listNames()` + N × by-name `load`/`loadDiagnosed`, vs `loadMany()` |
 |---|---|---|---|
@@ -289,6 +290,8 @@ direct a re-check once the rate limit clears) rather than risk a duplicate.
 ## Commands to re-run every measurement in this census
 
 ```bash
+# The four scripts were removed from the tree; run these from a checkout of commit
+# 7111e14ac9, which holds them: git worktree add --detach ../objectstack-7111e14ac9 7111e14ac9
 # Build the dependency closures this census's scripts import from (dist, not src):
 pnpm --filter '@objectstack/objectql^...' build && pnpm --filter @objectstack/objectql build
 

docs/audits/2026-09-multi-update-per-row-value-census.md

@@ -165,7 +165,7 @@ SELF-TEST PASSED — 10/10 cases
 ## 3. Instrument B — runtime behavioural probe on the real engine
 
 `scripts/audits/14744-before-update-per-row-value-probe.mjs`
-(`npx tsx … --out <path.json>`). It boots the real `ObjectQL` against a stub driver,
+(`npx tsx … --out <path.json>`; removed from the tree after this reading; held at commit `7111e14ac9`). It boots the real `ObjectQL` against a stub driver,
 dispatches handlers per row of a genuine `multi: true` update, and reads what actually
 reaches `driver.updateMany` — the one `SET` clause D3 gives N rows. **Four of its eight
 subjects are the shipped handlers themselves, imported and dispatched unmodified**; the

docs/audits/2026-09-tenancy-ledger-namespace-regexp-census.md

@@ -77,7 +77,7 @@ which only *mention* the call in comments), filtered to a literal `name: '...'`
 matching — a first pass without that step undercounted by 2
 (`sys_oauth_client_resource`, `sys_oauth_resource`), both because a doc comment shaped like
 `(255, 768]` desyncs a naive bracket scan; see the script's own header comment for detail).
-Script: `scripts/audits/14096-tenancy-ledger-namespace-regexp-census.mjs`.
+Script: `scripts/audits/14096-tenancy-ledger-namespace-regexp-census.mjs` (removed from the tree after this reading; held at commit `7111e14ac9`).
 
 **Result: 84 registered platform-namespace objects** — all `sys_`-prefixed; zero `cloud_`
 or `ai_` object schemas exist in this repository (the ledger's own comment explains why:
@@ -282,6 +282,8 @@ under `scripts/audits/` — no exported symbol, no published payload key, nothin
 # Build the dependency closure the script imports from (dist, not src):
 pnpm --filter '@objectstack/objectql^...' build && pnpm --filter @objectstack/objectql build
 
+# The script was removed from the tree; run these from a checkout of commit 7111e14ac9,
+# which holds it: git worktree add --detach ../objectstack-7111e14ac9 7111e14ac9
 # The whole census, in one command — prints the full JSON report to stdout
 # and a human-readable summary to stderr; exits 0 (measurement, not a gate):
 node scripts/audits/14096-tenancy-ledger-namespace-regexp-census.mjs

examples/embed-objectql/tsconfig.json

@@ -1,5 +1,5 @@
 {
-  "extends": "../../tsconfig.json",
+  "extends": "../../tsconfig.base.json",
   "include": ["src/**/*", "test/**/*"],
   "exclude": ["node_modules", "dist"],
   "compilerOptions": {

package.json

@@ -126,7 +126,7 @@
     "check:slot-lookup": "node scripts/check-slot-lookup-ratchet.mjs --self-test && node scripts/check-slot-lookup-ratchet.mjs",
     "check:query-options-erasure": "node scripts/check-query-options-erasure-ratchet.mjs --self-test && node scripts/check-query-options-erasure-ratchet.mjs",
     "check:verify-stand-in": "node scripts/check-verify-stand-in-erasure.mjs --self-test && node scripts/check-verify-stand-in-erasure.mjs",
-    "check:service-providers": "node scripts/check-service-providers.mjs",
+    "check:service-providers": "node scripts/check-service-providers.mjs --self-test && node scripts/check-service-providers.mjs",
     "check:route-envelope": "node scripts/check-route-envelope.mjs --self-test && node scripts/check-route-envelope.mjs",
     "check:auth-mount-ledger": "node scripts/check-auth-mount-ledger.mjs --self-test && node scripts/check-auth-mount-ledger.mjs",
     "check:error-code-casing": "node scripts/check-error-code-casing.mjs --self-test && node scripts/check-error-code-casing.mjs",
@@ -152,11 +152,11 @@
     "check:override-consistency": "node scripts/check-override-consistency.mjs --self-test && node scripts/check-override-consistency.mjs",
     "check:vendor-export-contract": "node scripts/check-vendor-export-contract.mjs --self-test && node scripts/check-vendor-export-contract.mjs",
     "check:vendor-export-contract-resolve": "node scripts/check-vendor-export-contract.mjs --self-test && node scripts/check-vendor-export-contract.mjs --resolve",
-    "check:release-notes": "node scripts/check-release-notes.mjs",
+    "check:release-notes": "node scripts/check-release-notes.mjs --self-test && node scripts/check-release-notes.mjs",
     "check:release-page-status": "node scripts/check-release-page-status.mjs --self-test && node scripts/check-release-page-status.mjs",
     "check:release-body": "node scripts/release-github-releases.mjs --self-test",
     "check:release-index-currency-sync": "node scripts/sync-release-index-currency.mjs --self-test",
-    "check:node-version": "node scripts/check-node-version.mjs",
+    "check:node-version": "node scripts/check-node-version.mjs --self-test && node scripts/check-node-version.mjs",
     "check:pnpm-acquisition": "node scripts/check-pnpm-acquisition.mjs --self-test && node scripts/check-pnpm-acquisition.mjs",
     "check:workflow-status-functions": "node scripts/check-workflow-status-functions.mjs --self-test && node scripts/check-workflow-status-functions.mjs",
     "check:workflow-step-name-quoting": "node scripts/check-workflow-step-name-quoting.mjs --self-test && node scripts/check-workflow-step-name-quoting.mjs",

packages/adapters/hono/tsconfig.json

@@ -1,10 +1,8 @@
 {
-  "extends": "../../../tsconfig.json",
+  "extends": "../../../tsconfig.base.json",
   "compilerOptions": {
     "outDir": "./dist",
     "rootDir": "./src",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
     "esModuleInterop": true,
     "skipLibCheck": true,
     "lib": [

packages/adapters/hono/tsconfig.test.json

@@ -63,11 +63,8 @@
 // ledger to be added to -- the same call `metadata-fs` and
 // `trigger-record-change` recorded.
 {
-  "extends": "./tsconfig.json",
+  "extends": ["./tsconfig.json", "../../../tsconfig.test.base.json"],
   "compilerOptions": {
-    "noEmit": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
     "lib": ["ES2022", "DOM", "DOM.Iterable"]
   },
   "include": ["src/**/*"],

packages/apps/account/tsconfig.json

@@ -1,5 +1,5 @@
 {
-  "extends": "../../../tsconfig.json",
+  "extends": "../../../tsconfig.base.json",
   "compilerOptions": {
     "outDir": "./dist",
     "rootDir": "./src",

packages/apps/setup/tsconfig.json

@@ -1,5 +1,5 @@
 {
-  "extends": "../../../tsconfig.json",
+  "extends": "../../../tsconfig.base.json",
   "compilerOptions": {
     "outDir": "./dist",
     "rootDir": "./src",