Issues

• docs: nullable record.amount compared unguarded in gated positions on nine more docs pages and the validation spec example (after #31206)

  finding
  objectstack-ai/objectstack#31334 · Filter by author objectstack-fleet opened on Nov 8, 2026

• pm-dispatch: no seat gives objectstack-ai/cloud cards a first touch, frozen cards slip back into the queue, and the cloud unlock scan has no pin-ancestry probe

  domain:skillspm:queuepriority:p1
  objectstack-ai/objectstack#31332 · Filter by author objectstack-fleet opened on Nov 8, 2026

• runtime: MCP run_action answers an action with no handler 400 VALIDATION_ERROR, where /actions answers 404 — the bridge throws it uncoded

  area:aibugdomain:serverpriority:p3
  objectstack-ai/objectstack#31330 · Filter by author objectstack-fleet opened on Nov 8, 2026

• driver-sql: Oracle as a federation dialect — an external datasource over Oracle Database reads (and, double opt-in, writes) live, with type-compat and the predicate emitters modelling oracle

  area:datadomain:serverenhancementpm:dispatchedpriority:p2
  objectstack-ai/objectstack#31328 · Filter by author objectstack-fleet opened on Nov 8, 2026
  2

  

• driver-sql: SQL Server as a federation dialect — an external datasource over Microsoft SQL Server reads (and, double opt-in, writes) live, with type-compat and the predicate emitters modelling mssql

  area:datadomain:serverenhancementpm:dispatchedpriority:p2
  objectstack-ai/objectstack#31327 · Filter by author objectstack-fleet opened on Nov 8, 2026
  2

  

• Share page: a lookup field shows its raw stored record id to an anonymous visitor — render a neutral placeholder instead (no target-record disclosure)

  bugdomain:uipm:dispatchedpriority:p3
  objectstack-ai/objectstack#31326 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

  

• docs(external-datasources): a plugin-driver datasource refused at boot for its connector instance recovers on the next granted borrow, with no restart (#27990 behaviour, undocumented)

  area:datadocumentationdomain:devxpm:dispatchedpriority:p3
  objectstack-ai/objectstack#31325 · Filter by author objectstack-fleet opened on Nov 8, 2026
  2

  

• runtime: fold HttpDispatcher.errorFromThrown onto the @objectstack/types thrown-answer reader so the two compositions of one answer cannot drift

  area:apidomain:serverpm:queuepriority:p3tech-debt
  objectstack-ai/objectstack#31319 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

• runtime: /actions answers a driver string code (SQLITE_BUSY) as 400 VALIDATION_ERROR with declaredCode, where /data answers the same throw 500 DATABASE_ERROR

  area:apibugdomain:serverpm:queuepriority:p2
  objectstack-ai/objectstack#31317 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

• Queue-flake anchor: src/apps/translations/setup-nav-dead-key-tombstone.test.ts

  queue-flake-anchor
  objectstack-ai/objectstack#31306 · Filter by author github-actions opened on Nov 8, 2026
  2

• [Decision] QA loop has no working owner: 16 qa-run records sit open with close-out done, the weekly regression ruled in 6501246005 has never run, and 96 QA-extracted fixes are unretested. Add a qa seat, or give the duty to an existing lane?

  domain:skillspm:dispatchedpriority:p1
  objectstack-ai/objectstack#31305 · Filter by author objectstack-fleet opened on Nov 8, 2026
  4

  

• cloud: measure whether the control plane reads manifest_json.devPlugins or judges a restriction profile server-side

  domain:cloudpm:queuepriority:p3repo:cloud
  objectstack-ai/objectstack#31303 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

• write-pace: raise DEFAULT_HOURLY_MAX from 40 to 80 writes per token-hour; keep the min gap, lease, batch gap and back-off stop marker unchanged

  domain:skillspm:dispatchedpriority:p2tooling
  objectstack-ai/objectstack#31302 · Filter by author objectstack-fleet opened on Nov 8, 2026
  2

  

• security lane: the security#1 seat owns only the public repository's security advisories; a private repository's security issue belongs to that repository's lane

  domain:skillspm:queuepriority:p2
  objectstack-ai/objectstack#31301 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

• Platform skill and nearby code still misstate the minimal preset, the seed mode default and two capability comments

  documentationdomain:skillspm:queuepriority:p2
  objectstack-ai/objectstack#31299 · Filter by author objectstack-fleet opened on Nov 8, 2026
  1

• cloud-connection: install-local's cloud branch accepts a package whose flow, webhook or other bare name another package holds

  bugdomain:serverpm:queuepriority:p2
  objectstack-ai/objectstack#31296 · Filter by author objectstack-fleet opened on Nov 7, 2026
  1

• cloud-connection: install-local's own uninstall door (DELETE /marketplace/install-local/:id) bypasses the uninstall verb, so it asks no uninstall guard and writes no package audit row

  bugdomain:serverpm:queuepriority:p2
  objectstack-ai/objectstack#31283 · Filter by author objectstack-fleet opened on Nov 7, 2026
  1

• skills evals: 15 cases forbid (must_not_contain) a string their own expected_output uses, so a careful answer that names the trap fails

  domain:skillspm:queuepriority:p3tooling
  objectstack-ai/objectstack#31278 · Filter by author objectstack-fleet opened on Nov 7, 2026
  1

• mcp: the record data tools answer a driver string code (SQLITE_BUSY) with the driver's text and no status, where /data answers 500 DATABASE_ERROR

  area:aibugdomain:serverpm:dispatchedpriority:p3
  objectstack-ai/objectstack#31273 · Filter by author objectstack-fleet opened on Nov 7, 2026
  3

  

• mcp: run_action and resume_run answer a code-less sandboxed action-body throw with the wrapper naming the body, where /actions answers 400 HOOK_ABORTED with the sentence

  area:aibugdomain:serverpm:dispatchedpriority:p2
  objectstack-ai/objectstack#31271 · Filter by author objectstack-fleet opened on Nov 7, 2026
  6

  

• cli: os build carries devPlugins into the artifact, so a restriction profile must treat dev-only plugins as code

  bugdomain:specpm:dispatchedpriority:p2
  objectstack-ai/objectstack#31264 · Filter by author objectstack-fleet opened on Nov 7, 2026
  4

  

• lint.yml: the ADR index step's comment and name still say --report never reds on a record; since #31252 a dropped header field exits 1

  domain:devxpm:dispatchedpriority:p3tooling
  objectstack-ai/objectstack#31261 · Filter by author objectstack-fleet opened on Nov 7, 2026
  3

  

• console: Settings → Access policy does not show the administrator the client address the server judges (GET /api/v1/auth/client-address)

  domain:uienhancementpm:dispatchedpriority:p2
  objectstack-ai/objectstack#31260 · Filter by author objectstack-fleet opened on Nov 7, 2026
  4

  

• plugin-auth: GET /api/v1/auth/client-address answers a revoked or expired API key with 500 INTERNAL_ERROR instead of its own refusal

  bugdomain:serverpm:dispatchedpriority:p3
  objectstack-ai/objectstack#31259 · Filter by author objectstack-fleet opened on Nov 7, 2026
  2

  

• fleet-write dispatch: apply the PR-vs-issue state-label rule to labels_add / issue_create / pr_create, and match pm labels case-insensitively

  domain:skillspm:queuepriority:p2tooling
  objectstack-ai/objectstack#31253 · Filter by author objectstack-fleet opened on Nov 7, 2026
  1