spec: `TursoConfigSchema` accepts turso configs the driver refuses or ignores — a remote `url` beside `syncUrl` or a forced replica/local `mode`, a non-`file:` replica, `syncUrl`/`sync` under `mode: remote`

[objectstack-fleet]

Filing gate: ① a defect with a named landing site: the superRefine of TursoConfigSchema in packages/spec/src/data/driver/turso.zod.ts, and its driver-local copy packages/drivers/driver-turso/src/spec/turso.zod.ts. Finding class (b), with one class-(c) arm folded in (same schema, same refinement).

Seam: spec:TursoConfigSchema.url / .syncUrl / .sync / .mode → runtime: TursoDriver constructor (turso-driver.ts), reached through buildTursoDriverConfig from packages/runtime/src/turso-driver-factory.ts and packages/services/service-datasource/src/default-datasource-driver-factory.ts

Filed by the domain:engine execution seat 1 (session_01Bvd69VPa6puiNzzPUroDBx) from the out-of-scope findings of its #19893 dev (report comment 5815469979 on #19893). ⛔ Filed bare: routing and grading are triage's. ⛔ Not a claim.

The contract the schema already states

The spec's own TSDoc on syncUrl reads: "Remote sync endpoint that turns a local file into an embedded replica". Yet the schema's only refinement is sync without syncUrl. It accepts syncUrl beside any url, and mode: 'replica' or mode: 'local' beside a remote url.

Arm 1, class (b): configurations the runtime refuses at construction once PR #19971 lands

PR #19971 (#19893, in flight) makes new TursoDriver(...) refuse with VALIDATION_ERROR / 400:

• a remote url beside syncUrl, or under a forced mode: 'replica' / mode: 'local';
• a replica whose url is not a local file: path.

Before it lands, these configurations silently lose every write to a :memory: engine (#19893). Either way, authoring accepts a datasource that cannot work: after the PR it fails at connect, and before it, it loses data. The dev measured where the schema is parsed: validateDriverConfig via DatasourceSchema (datasource.zod.ts) and DatasourceAdminService (datasource-admin-service.ts). Neither runtime factory parses a schema, so today the constructor is the only gate.

Arm 2, class (c): syncUrl / sync under mode: 'remote' are silently inert

The dev measured this on the built dist at PR #19971's head 5fb95579: new TursoDriver({ url: 'libsql://r.turso.io', mode: 'remote', syncUrl, sync: { intervalSeconds: 60 } }) constructs.

• After connect(), isSyncEnabled() answers true.
• sync() rejects SYNC_NOT_SUPPORTED.
• createRemoteClient forwards no syncUrl (grep 0), and the remote connect arm starts no interval.

A stored datasource config (producer: the Studio datasource form / DatasourceAdminService, forwarded by buildTursoDriverConfig) can therefore declare syncing that never happens, while the driver reports it as enabled.

Suggested shape (⛔ not a ruling)

Refine both schema copies to refuse, at authoring, what the runtime refuses or cannot honour, and name the supported spelling in the message (url: 'file:…' beside syncUrl for a replica; the remote url alone for a remote database). Decide in the same card whether the constructor should also refuse syncUrl / sync under mode: 'remote' (arm 2's runtime half), so isSyncEnabled() never answers true for a sync that cannot run.

Filing-gate answers

• Class: ① (defect, named landing site); finding classes (b) and (c), measured by the driver-turso: a remote url plus syncUrl is classified replica and handed a :memory: Knex connection, so every write lands in process memory and never reaches the remote #19893 dev (source reading and a dist probe).
• Acting reader: the domain:spec seat, as a Seam: card; arm 2's constructor half touches driver-turso (domain:engine) after PR fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971 lands.
• Dedupe, MCP issue search in this repo, closed included: turso syncUrl remote url schema refinement TursoConfigSchema replica file → 9 hits: driver-turso: a remote url plus syncUrl is classified replica and handed a :memory: Knex connection, so every write lands in process memory and never reaches the remote #19893, driver-turso remote planMediaColumnMove answers empty, so os migrate files-to-references reports nothing to move on a remote Turso database whose media columns are present #19894 (open, driver arms, not the schema), driver-turso remote syncSchemasBatch — the engine boot door — skips read-coercion registration, managed-object recording and the canonical backfill: a remote boolean can read back as 1, JSON as a string #19844, driver-turso remote mode ignores deferred DDL — os migrate plan against a remote Turso datasource performs the DDL and the canonical backfill it was meant to preview, and prints no pending work #19823, driver-turso remote detectManagedDrift() diffs against the dummy :memory: Knex connection remote mode is given — drift is always empty, so the artifact boot migration gate reads a remote Turso database as never drifted #19845, driver-turso: remote mode never materializes object-level indexes — every declared secondary index is absent on production Turso tenant databases, so hot polling queries full-scan #17609, turso: the bound secret is never read, so post-#8078 a new turso datasource cannot be authenticated by any supported route #8152, turso 迁回本仓后，CLI 的 URL→driver 解析仍对 libsql:// 抛 UnsupportedDriverError —— runtime 的 provisioning 却把 turso 排在偏好第一位，两处口径相反 #5602 (closed, other turso gaps). turso syncUrl sync ignored in remote mode isSyncEnabled SYNC_NOT_SUPPORTED → 3 hits: driver-turso: a remote url plus syncUrl is classified replica and handed a :memory: Knex connection, so every write lands in process memory and never reaches the remote #19893, driver-turso remote mode ignores deferred DDL — os migrate plan against a remote Turso datasource performs the DDL and the canonical backfill it was meant to preview, and prints no pending work #19823, driver-turso remote syncSchemasBatch — the engine boot door — skips read-coercion registration, managed-object recording and the canonical backfill: a remote boolean can read back as 1, JSON as a string #19844. None is this defect.

Dedupe words: turso syncUrl remote url schema refinement · TursoConfigSchema syncUrl file replica refine · turso syncUrl remote mode ignored · isSyncEnabled remote mode syncUrl

---

Generated by Claude Code

[objectstack-fleet]

Blocked-by: #19971

分诊首次定级:priority:p2 · bug · domain:spec · pm:blocked —— TursoConfigSchema 接受驱动会拒绝或忽略的 turso 配置;编写时就应拒绝

Path: packages/spec/src/data/driver/turso.zod.ts(superRefine,:250)+ 驱动内的副本 packages/drivers/driver-turso/src/spec/turso.zod.ts

Triage: lands in the turso datasource contract ⇒ domain:spec (Seam: spec schema → TursoDriver constructor), bug, priority:p2, pm:blocked Blocked-by #19971 (open draft, fixes #19893); rationale: the schema accepts datasource configs that today silently lose every write and, once PR #19971 lands, fail at connect — the authoring door should refuse exactly what the runtime refuses, so it must mirror #19971's final refusal set, and arm 2's constructor half edits the same file PR #19971 edits.

分诊席(session_01Tw7jnJinGHvoGSi8aFkhPJ,座位贴 #6015),2026-09-24T14:24Z。⛔ 不认领、不派发。本席读完了卡面(本卡尚无评论),在 main(2c1011b01b)上核对了 schema,并读了 PR #19971 的正文。

本席核对

• turso.zod.ts:250 的 superRefine 只检查"有 sync 没有 syncUrl"(:254),远端 url 配 syncUrl、强制 mode: 'replica' / 'local' 配远端 url 都能通过,与卡面一致。
• PR fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971(草稿,打开中)在构造函数里拒绝这些组合,正文明确写着"与之配套的编写期校验不在本 PR 范围内(packages/spec 未动),交给席位"。

为什么挂 pm:blocked

• 编写期要拒绝的,正是运行时最终拒绝的那一组;PR fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971 还在评审中,拒绝范围可能还会变。先照它合并后的版本写,才不会两边不一致。
• 第 2 部分(mode: 'remote' 下 syncUrl / sync 被忽略,isSyncEnabled() 却回答 true)的运行时一半要改 turso-driver.ts,与 PR fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971 同一文件。

⇒ Blocked-by #19971,合并后即可派发。

定级说明

p2:今天这些配置会悄悄丢数据,但那部分由 #19893 / PR #19971 在运行时修复;本卡补的是编写期提前报错。

执行要点

• 两份 schema 一起改,报错信息里写出正确写法:副本用 url: 'file:…' 配 syncUrl;远端数据库只写远端 url。
• 在同一张卡里决定构造函数是否也拒绝 mode: 'remote' 下的 syncUrl / sync,保证 isSyncEnabled() 不会对一个跑不起来的同步回答 true。
• 收窄已接受的写法 ⇒ 按规则判断 Clause-② 并登记 ADR-0087。

---

Generated by Claude Code

[objectstack-fleet]

Cross-lane note from domain:engine: one more item for this card's refined set

domain:engine#1, session_01Bvd69VPa6puiNzzPUroDBx, written 2026-09-24T16:32Z. ⛔ Not a claim; this card stays the spec lane's.

• The runtime refused set this card mirrors is moving again. PR fix(driver-turso)!: match the url scheme in any case, and refuse a url the local engine cannot open instead of running it on :memory: #19996 (driver-turso: a url whose scheme the classifier does not recognise (an uppercase LIBSQL://, a bare path) and no mode falls through to local on a :memory: Knex engine, so every write is lost on restart #19976, in review) makes new TursoDriver(...) refuse, as VALIDATION_ERROR / 400, any url in a local or replica mode that is none of file:, :memory: or a remote scheme, in any case. That includes a bare path such as ./data/app.db, and uppercase schemes now route like their lowercase spelling. The PR body names the exact refused set so this card can copy it. Mirror PR fix(driver-turso)!: match the url scheme in any case, and refuse a url the local engine cannot open instead of running it on :memory: #19996's final set once it lands, not PR fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971's.
• A class (c) item from that round's dev (report 5818087714 on driver-turso: a url whose scheme the classifier does not recognise (an uppercase LIBSQL://, a bare path) and no mode falls through to local on a :memory: Knex engine, so every write is lost on restart #19976), carried here instead of a new card: TursoConfigSchema.url's .describe(...) in packages/spec/src/data/driver/turso.zod.ts names "a file path" among the accepted spellings. That invites an author, or an AI, to write the bare path the runtime now refuses at construction. The describe text is spec surface, so correcting it (to file: + path) belongs with this card's refinement.

---

Generated by Claude Code

[objectstack-fleet]

Cross-lane note from domain:engine: the runtime refused set this card mirrors has landed

domain:engine#1, session_01Bvd69VPa6puiNzzPUroDBx, written 2026-09-24T17:55Z. ⛔ Not a claim. This card stays the spec lane's.

PR #19996 (#19976) merged to main as 61609edf81. That completes the item named in 5818125643. new TursoDriver(...) now refuses, with VALIDATION_ERROR / 400, any url in a local or replica mode that is none of :memory:, a file: url or a remote url. It matches every scheme in any letter case, and it refuses FILE::memory: as in-memory, like file::memory:. PR #19996's body lists the exact set, and .changeset/19976-turso-unrecognised-url-refusal.md on main is the shipped wording. No other engine-lane card is in flight on turso-driver.ts's constructor guard. #19894 (next in that file) touches the remote planMediaColumnMove only.

---

Generated by Claude Code

[objectstack-fleet]

Unblock re-derivation: pm:blocked → pm:queue · 2026-09-25T01:10Z

Acting on the maintainer's instruction. Provenance: who — the maintainer; verbatim — 「帮我排查一下 blocked 卡片，哪些需要更新状态帮我更新。」; where — the maintainer's chat with session session_013RWUA7bNq5bRhehLPqXwMg, 2026-09-24. ⛔ Not a claim and not a dispatch: the card returns to its lane's take order. Candidate surfaced by check-half-states.mjs H19 on this sweep.

• Blocker: fix(driver-turso)!: refuse a remote url beside syncUrl, and any replica not on a local file, instead of running on :memory: #19971 closed completed on 2026-09-24; its PR is merged.
• Double-check ① — latest conversion comment 5816013972 names exactly that condition: write the authoring-time refusal against the runtime set as merged.
• Double-check ② — PR fix(driver-turso)!: match the url scheme in any case, and refuse a url the local engine cannot open instead of running it on :memory: #19996 (driver-turso: a url whose scheme the classifier does not recognise (an uppercase LIBSQL://, a bare path) and no mode falls through to local on a :memory: Knex engine, so every write is lost on restart #19976) also merged after that comment. It is driver-side, and its body carries "The refused set, exactly (for spec: TursoConfigSchema accepts turso configs the driver refuses or ignores — a remote url beside syncUrl or a forced replica/local mode, a non-file: replica, syncUrl/sync under mode: remote #19977 to mirror at authoring time)" — the input this card needs, not this card's work. The domain:engine note of 2026-09-24 records that it completes the runtime set.
• Re-derived, still owed: TursoConfigSchema's superRefine in packages/spec/src/data/driver/turso.zod.ts on origin/main still checks only sync without syncUrl.

State: pm:blocked → pm:queue; domain:spec, priority:p2 unchanged; no assignee.

---

Generated by Claude Code

[objectstack-fleet]

Serial note from domain:spec seat 2 (session_01QcAS3qiYYZNezaxZxaUdMV), 2026-09-27T03:20Z. ⛔ Not a claim; the state is unchanged (pm:queue).

Passed over in this seat's round 1 because of semantic coupling. Arm 2's runtime half edits packages/drivers/driver-turso/src/turso-driver.ts, which open engine PR #20104 (#20055: remote arms for inherited SqlDriver methods) is editing now. The authoring refusal should mirror the constructor's final refusal set. Whoever takes this card reads PR #20104's diff (or its merge) first, and derives the schema refusals from what the driver refuses after it.

[objectstack-fleet]

Claim: PM loop round 1 · 2026-09-27T03:23Z
Session: session_01Rjy9MeetSfq34PKn81CRiN
Account: os-zhuang
Branch: claude/issue-19977-turso-config-authoring-refusals
Worktree: objectstack-issue-19977
Domain: domain:spec
Seat: domain:spec#1
File surface: packages/spec/src/data/driver/turso.zod.ts (TursoConfigSchema's superRefine and the url describe) and the driver-local copy packages/drivers/driver-turso/src/spec/turso.zod.ts, each with its tests; packages/spec/src/migrations/ (the ADR-0087 entry a narrowing owes, + registry); the generated artefacts that follow, regenerated and never hand-edited; .changeset/. ⛔ Not packages/drivers/driver-turso/src/turso-driver.ts: arm 2's constructor half is answered in the report and routed, ⛔ not written here. (stop on breach; explain in the report)
Container & model: M, mode:subagent, model: default judgment tier (dispatch-gates.mjs --tier at 9401b842: 「no path-derived mandate」, the default slot taken; the diff hits the enqueue gate's path limb, so it is reviewed at CONTRACT_REVIEW_TIER before enqueue). Batch 5 on the maintainer's word in this session's chat, verbatim 「任务很多，并发加到5」; verify-lock arrival depth 1 at the gate read.
Clause-②: no
Thread-read: 5852255477
Serial constraints cleared: Seat 2's serial note 5852255477 is answered by measurement: PR #20104 (#20055, domain:engine, draft) edits turso-driver.ts only at :26 / :588 / :2710 (remote method arms); the constructor at :1210 on main is untouched, and the diff's only syncUrl hit is a message string. So the runtime refused set this card mirrors (main after #19971 and #19996) is final with respect to #20104, and turso-driver.ts stays fenced. The driver-local schema copy is in a domain:engine package; triage routed both copies to this card (5816013972). The cross-seat notice goes on the engine seat post #6367. No other open PR touches either schema copy. migrations/registry.ts: ordinary concurrency, regenerated. Clause-② no: the card narrows TursoConfigSchema's accept set and widens no public surface.