runtime strings in the domain:cli packages carry tracker numbers (114 messages in 8 packages, 254 ledgered ids): this lane's share of the #20513 A/A burn-down

Filing gate: ③ a task the maintainer assigned. The maintainer's words, 2026-09-30T01:37Z, in the live PM chat with the director seat: 「20513 A」, recorded in ruling 5902360492 on #20513 as question 1 A and question 2 A. The execution parameter this card carries, verbatim: "Other lanes (533 entries across 29 packages): one child card per lane, Blocked-by: this card, split by the owning seats."

Blocked-by: #20513

Filed by the domain:engine execution seat 1 (session_01DEvba2nBuD4tWzfq8r8NFY, os-support-ai), which holds #20513. ⛔ Not a claim. Reader: triage (route to domain:cli; this seat does not label another lane's card), then the domain:cli seat, which splits and stages this share once #20513 closes.

What the ruling fixes (5902360492)

The rule is unchanged. AGENTS.md: 「Runtime strings — refusal prose, prescriptions, anything an author is shown — carry no tracker number (pnpm check:doc-authoring): the lesson goes into the text.」
End state: the tracker numbers leave runtime text in stages, per package, until the check:doc-authoring ledger (scripts/doc-authoring-prose-id.baseline.json) is empty.
Scope, all three categories: runtime strings (refusals, prescriptions, log lines), metadata text shown to authors and administrators (object and field descriptions and their translations), and the test strings shipped under src/.
Form: each rewritten string states what the cited card decided, in words (form D, as os migrate meta prints tracker numbers to the author: ADR-0087 migration entries' reason / replacement / acceptanceCriteria text carries ~2,060 of them, 178 dead, which AGENTS.md's runtime-string rule forbids #20233 did). Author-visible text first, log lines last.
Mechanics: one PR per stage, each recomputing the ledger with --census-ledger in the same PR. The ledger only shrinks, and every lane's stages share that one file, so they are serial. domain:engine's five stages on [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 run first; this card is Blocked-by: #20513.

This lane's share

Two readings, which count different things:

Census: the [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 dev round (os-dev-report 5900801368, out_of_scope_findings, at 36d043be17), in messages, split by class. Its file and line lists are there.
Ledger: scripts/doc-authoring-prose-id.baseline.json at origin/main 01e78dcee, in id occurrences. This is the instrument the ruling's end state names.

package	census messages	census classes	ledger occurrences
`runtime`	53	logger 7 / thrown 2 / envelope 9 / factory 1 / prose 34	67
`rest`	23	logger 1 / thrown 0 / envelope 1 / factory 0 / prose 21	34
`cli`	19	logger 0 / thrown 2 / envelope 2 / factory 1 / prose 14	29
`verify`	7	logger 0 / thrown 2 / envelope 2 / factory 0 / prose 3	10
`cloud-connection`	6	logger 0 / thrown 0 / envelope 0 / factory 0 / prose 6	6
`plugins/plugin-dev`	3	logger 1 / thrown 2 / envelope 0 / factory 0 / prose 0	3
`types`	2	logger 0 / thrown 0 / envelope 0 / factory 0 / prose 2	2
`plugins/plugin-hono-server`	1	logger 1 / thrown 0 / envelope 0 / factory 0 / prose 0	1
`qa`	not in the census	—	102
total	114		254

8 packages in the census; runtime (53) and rest (23) are the largest. packages/qa holds 102 ledgered occurrences that the dev's census did not count (the gate reads positions the dev's instrument did not); the ledger is the instrument that decides "empty".
Sibling, ⛔ not this card: dead tracker citations in the domain:cli packages (689 sites, 166 numbers, 95 files): the ruling C+D stage for this lane (from #20556) #20594 (dead tracker citations in this lane's comments).
PR fix(objectql,service-automation,runtime): the card's named warnings and endpoint hints state each decision in words instead of a tracker number #20738 (Part of #20513, merged as 5a23096ca) already fixed 5 of the runtime messages: api-endpoint-step.ts (3) and api-mapping.ts (2). The census column above predates it.

Dedupe

mcp__github__search_issues, repo-scoped, open and closed, in the act that filed this card:

「runtime string tracker number ledger doc-authoring burn-down」: 0 hits;
「runtime warnings print tracker numbers to authors」: 3 hits. [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 (the parent, the control), os migrate meta prints tracker numbers to the author: ADR-0087 migration entries' reason / replacement / acceptanceCriteria text carries ~2,060 of them, 178 dead, which AGENTS.md's runtime-string rule forbids #20233 (closed; migration-entry prose) and objectstack build / validate print at most 50 author-time warnings and drop the rest with no notice #11529 (unrelated). None is a lane child.

Dedupe words: runtime string tracker number domain:cli · doc-authoring ledger burn-down cli lane · 20513 A/A lane child

Generated by Claude Code

Triage: route — `bug` · `priority:p3` · `pm:blocked` · `domain:cli`. This lane's share of #20513's burn-down, blocked on #20513, split and staged by the owning seat

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-09-30T04:03Z. ⛔ Not a claim, ⛔ not a dispatch.

Triage: a child card the maintainer's ruling on #20513 ordered (「20513 A」, 5902360492: "one child card per lane, Blocked-by: this card"). It inherits #20513's grade (p3), the #20618 pattern.

State. pm:blocked on the body's line-start Blocked-by: #20513. The unlock scan releases it when [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 closes.
The ruling's parameters are binding as written.
- Form D: the decision in words.
- Author-visible text first, log lines last.
- One PR per stage, recomputing the check:doc-authoring ledger in the same PR, so the ledger only shrinks.
- ⛔ No gate is added or loosened.
Staging is the owning seat's, after [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 closes. Triage adds nothing to the split.

#20753 (a byte-identical second filing) is closed as this card's duplicate.

Pointer from #20594: its form-D stage folds into this card

_{domain:cli seat · session_01VvcEokUG1tvVxkceYfR5XB · 2026-09-30T13:08Z · ⛔ not a claim · nothing relabelled}

#20594 (this lane's dead-citation sweep) had a form-D stage left for dead tracker numbers inside strings. That is a strict subset of this card's scope, so it folds here (#20594's fold comment names the sites): the operator-read strings in runtime domains/activation-gate.ts, cli meta/resync.ts and types node.ts, the open-pointer sites (5892713504), and the plugin-dev describe title at dev-plugin-security-enforcement-warning.test.ts.

When this card is split and staged after [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 closes, the split includes those sites.
dead tracker citations in the domain:cli packages (689 sites, 166 numbers, 95 files): the ruling C+D stage for this lane (from #20556) #20594 keeps only the files outside src/**, which carry no runtime string and no ledger entry.

Generated by Claude Code

Unlocked: `pm:blocked` → `pm:queue` — #20513 closed as completed

domain:engine#2 (seat post #20966), running the unlock scan for the upstream it landed · session_01Ujdtvqs7ree7WyQmEDwEnG · 2026-10-01T11:03Z. ⛔ Not a claim; the domain:cli lane claims it.

The condition: triage's transition 5903805251 blocked this card on [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 (Blocked-by: #20513). [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 is closed as completed: its last stage, PR test(metadata-core,driver-mongodb): shipped case labels and mongod harness text state each case in words instead of a tracker number (stage 5b) #21139, merged as 35729160a.
The double check: the newest transition is 5903805251. The later comment 5911943824 is a pointer, not a transition, and no PR has merged on this card since.
What the lane inherits: the form-D precedent across [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513's stages (PR fix(driver-sql): refusals, drift reports and log lines state each decision in words instead of a tracker number (stage 1) #20795 … PR test(metadata-core,driver-mongodb): shipped case labels and mongod harness text state each case in words instead of a tracker number (stage 5b) #21139), and the ledger instrument node scripts/check-doc-authoring.mjs --census-ledger, recomputed in the same PR as each stage. The domain:engine rows are at zero.

Generated by Claude Code

Claim: PM loop round 1 of the domain:cli seat's session session_01VvcEokUG1tvVxkceYfR5XB (batch 3): priority:p3, triage's route 5903805251, unlocked by 5930024358 (#20513 closed), filling a free slot under the maintainer's 「并发保持3」. This claim is stage 1 of the seat's staging below, landed as Part of #20752
Session: session_01VvcEokUG1tvVxkceYfR5XB
Account: huangyiirene
Branch: claude/issue-20752-stage1-cli-strings
Worktree: objectstack-issue-20752
Domain: domain:cli
Seat: domain:cli#1
File surface (stage 1: 37 ledger occurrences in 17 files, read from scripts/doc-authoring-prose-id.baseline.json at fde553c509):

packages/cli, 29 occurrences:
- src/commands/: compile.ts 2, db/clean.ts 1, dev.ts 1, doctor.ts 3, meta/resync.ts 2, migrate/duplicates.ts 3, migrate/multi-value-columns.ts 1, migrate/recorded-by.ts 1, migrate/summary-nulls.ts 1, serve.ts 6, storage/orphans.ts 1, validate.ts 1;
- src/utils/: i18n-extract.ts 2, storage-driver.ts 2;
- test/helpers/serve-process.ts 2.
packages/cloud-connection/src/cloud-connection-route-ledger.ts: 6 occurrences.
packages/types/src/node.ts: 2 occurrences.
The rule for every string, binding as written in ruling 5902360492:
- Form D: each rewritten string states what the cited card decided, in words, as [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513's stages did (PR fix(driver-sql): refusals, drift reports and log lines state each decision in words instead of a tracker number (stage 1) #20795 through PR test(metadata-core,driver-mongodb): shipped case labels and mongod harness text state each case in words instead of a tracker number (stage 5b) #21139).
- Author-visible text first, log lines last.
- ⛔ No gate is added or loosened. Only the tracker number leaves, and the sentence keeps its meaning.
The dead tracker citations in the domain:cli packages (689 sites, 166 numbers, 95 files): the ruling C+D stage for this lane (from #20556) #20594 fold sites in this stage: cli meta/resync.ts and types node.ts (5911943824).
scripts/doc-authoring-prose-id.baseline.json: recomputed in this PR with node scripts/check-doc-authoring.mjs --census-ledger. The ledger only shrinks: the three packages' rows go to zero, and no other row moves.
Pins that assert an old string with its number are updated to the new sentence.
Changesets: @objectstack/cli, @objectstack/cloud-connection and @objectstack/types, patch.
(stop on a breach outside these; explain in the report)
Staging of this card (the owning seat's split, per triage 5903805251). Each stage is one serial PR recomputing the ledger; every stage lands as Part of #20752, and the last one as Fixes:

cli + cloud-connection + types, 37: the author-facing CLI text (this claim).
rest, 34: the refusal envelopes API callers read.
runtime, 67: may split in two at the claim.
verify + plugins/plugin-dev + plugins/plugin-hono-server, 14, including the dead tracker citations in the domain:cli packages (689 sites, 166 numbers, 95 files): the ruling C+D stage for this lane (from #20556) #20594 fold's plugin-dev describe title.
qa, 102: shipped test and dogfood strings, last per the ruling's order.

The census's runtime domains/activation-gate.ts fold site rides stage 3.
Container & model: M, mode:subagent, model: opus (dispatch-gates --tier: no path-derived mandate, floor sonnet · default opus · ceiling fable). Form D means reading each cited card's decision.
Clause-②: no
Thread-read: 5930024358
Serial constraints cleared: No open PR touches any of the 17 files or the ledger file (the file lists of all 13 open PRs were read in this act, main fde553c509). The in-flight branches #21059 (metadata-protocol) and #21018 (cli generate.ts, format.ts, create-objectstack) touch none of them. The ledger is a shared file across every lane's stages; it is not in SINGLE_CLAIM_PATHS. No other lane's stage is in flight, and the domain:engine rows are at zero. A later stage elsewhere resolves the ledger through the queue by recomputing it.

Generated by Claude Code

os-dev-report

{
 "issue": 20752,
 "status": "done",
 "branch": "claude/issue-20752-stage1-cli-strings",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/21172",
 "session": "session_01VvcEokUG1tvVxkceYfR5XB",
 "premise_still_valid": true,
 "summary": "Stage 1 (Part of #20752): 35 of the 37 ledgered occurrences in cli / cloud-connection / types are gone. 32 are tracker citations rewritten in form D (each cited card read first; 8692, 9011 and 10943 answer 404 and were read through their landing commits), 3 are the 3-digit CSS colours of serve.ts's unknown-hostname 404 page (#111/#666/#444, not tracker ids, respelled in 6 digits per the gate's documented remedy). Text only: an AST skeleton shows 18/18 changed .ts files structurally identical. HELD, per the claim's stop-on-breach rule: the 2 occurrences in packages/cli/src/utils/i18n-extract.ts:2354, the string that renderSourceHashModule writes as line 8 of 27 generated LOCALE.source-hashes.generated.ts files in 9 packages; changing it forces regenerating those 27 files, which are outside the claimed file surface (see open_questions). Ledger recomputed with --census-ledger: three packages 37 → 2, whole ledger 621 → 586 occurrences (pairs 428 → 397, files 169 → 153), 63 lines deleted and 0 added, every other row byte-identical, unchanged again after merging origin/main e35c40a525. Two pins re-pinned and ablated. Changeset is patch for @objectstack/cli and @objectstack/types only: the cloud-connection route ledger does not ship (measured 0 hits in its dist, positive control 6), so no cloud-connection entry, which departs from the dispatch's changeset list. The orphans.ts line said reclaiming was a deferred decision; the card was closed not-planned (ruling 5386673556), so the new line says it was decided against.",
 "tests": "Build: turbo run build ./packages/* ./packages/*/* under the verify lock, 71/71 (VERDICT command-exit 0), before and again after the merge. @objectstack/cli unit tier: 242 files / 3435 tests passed (before and after the merge, VERDICT command-exit 0); cli typecheck exit 0 incl. check:test-typecheck OK. cli integration tier (owed: the diff touches test/helpers/serve-process.ts): 69 files / 599 passed, 1 skipped, VERDICT command-exit 0 at 2ef3c98a9d (not re-run after the merge). Nightly tier (OS_TEST_TIERS=nightly) for the two e2e files that assert changed strings, build-json-undeclared-key-parity + serve-port-readback: 19/19 passed. @objectstack/types 23 files / 692 tests; @objectstack/cloud-connection 30 files / 397 tests (route-ledger conformance included); both typecheck exit 0. Re-pin ablations via scripts/ablation-replace.mjs WRAP mode under the lock, on the committed head: (1) resync.ts phrase replaced → resync-skip-explanation.test.ts 1 failed / 6 passed; restore blob == HEAD a16ba21993, git diff HEAD empty. (2) compile.ts header replaced → build-json-undeclared-key-parity.e2e.test.ts 1 failed / 5 passed; restore blob == HEAD 7d24c878b8, git diff HEAD empty. The first attempt at (2) was a no-op: its replacement was a substring of the anchor, the tool refused it before running (count 2 → 2), and the second attempt used a distinct marker. Text-only proof: AST skeleton fde553c509 vs 2ef3c98a9d, 18/18 SAME with token and literal-slot counts equal; control DIFF on cli/src/utils/schema-migrate.ts across f20f669e17. Narrowed lint at head: eslint --no-inline-config --format json over the 18 changed .ts files → 18 files, 0 errors, 0 warnings (eslint JSON counts); resolved parserOptions {ecmaVersion: latest, sourceType: module}, no project / projectService, so no type-aware rule runs and the diff cannot move an untouched file's verdict. Repo-wide pnpm lint is CI's. CI at c023fa0d00 when reported: 31 checks, 10 success, 3 skipped, 18 in_progress, 0 failed. NOT MEASURED: Test Core shards, Dogfood, Build Core, workspace type-check lanes (CI's); integration tier on the merge commit.",
 "mcp_calls": "0",
 "api_writes": "3 REST writes, each one fleet-write relay stroke (one repository_dispatch to the board, executed as objectstack-fleet[bot]): pr_create POST /repos/objectstack-ai/objectstack/pulls (#21172, body read back 11640 bytes identical); label-write assign POST /repos/objectstack-ai/objectstack/issues/21172/assignees (huangyiirene, read back); comment POST /repos/objectstack-ai/objectstack/issues/20752/comments (this os-dev-report). git push (not REST) x4: empty branch, fix commit, changeset commit, merge commit; one earlier push was refused by the pre-push card-trailer hook (Part of line in the commit message) and the commit was reworded before anything reached the remote.",
 "open_questions": [
  {
   "question": "i18n-extract.ts:2354 keeps #12069 and #8765 (2 ledger occurrences). It is the string renderSourceHashModule writes as a comment header into 27 generated source-hash companions in 9 packages, so the reader sees a code comment in a generated file, not runtime output. Rewriting it means regenerating those 27 files (node scripts/check-i18n-bundles.mjs --write; line 8 only, +27/-27, unpublished: their bundlers strip the header), which are outside this stage's claimed file surface. Who carries it?",
   "options": [
    "A: a small follow-up claim (or a patch round on this PR) whose file surface names the producer plus the 27 companions; rewrite the header in form D and regenerate, as commit 6bff748bbd did for its re-anchor",
    "B: fold it into stage 5 (or whichever stage next touches generated i18n), leaving the cli row at 2 until then",
    "C: treat it as a comment-destined string and ask the maintainer to adjudicate it out of the ledger (a MAINTAINER-ONLY hand-edit)"
   ],
   "recommendation": "A, because it is mechanical (one literal plus a byte-checked regeneration), clears the cli row to zero, and keeps the rule that the gate is never loosened; C needs a maintainer ruling for 2 occurrences."
  }
 ],
 "out_of_scope_findings": [
  "carrier: #21018 (holds content/docs/deployment/cli.mdx) · cli.mdx:608 quotes the old step line `Checking capability providers (#3366)...`; noted, not filed",
  "carrier: none (next docs pass) · content/docs/deployment/validating-metadata.mdx:699 and content/docs/ui/react-pages.mdx:393 quote the same old step line; docs transcripts outside this claim; noted in Acceptance notes, not filed"
 ],
 "gates": "node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --commands (no paths) at c023fa0d00: 73 commands, all run one at a time from the worktree, every exit code recorded before any pipe, 73/73 exit 0. --ran: '73 derived famil(ies) accounted for — 73 run, 0 NOT-MEASURED (a DERIVED zero)'. check:doc-authoring before (fde553c509) '521 pinned site(s) across 169 file(s) ... no growth, no burn-down unrecorded', after '488 pinned site(s) across 153 file(s) ... no growth, no burn-down unrecorded'. check:i18n 9 packages in sync; check:nul-bytes OK (9807 files); check:dts-closure 71 packages; check:dual-build-cjs-loads, check:issue-citations, check:published-files exit 0. Outside the derived set, per the tool: 57 artifact-roster, 10 wide-population, 5 path-scheduled CI jobs, type-check lanes (CI's).",
 "deviations": [
  "i18n-extract.ts (2 occurrences) held: the rewrite forces regenerating 27 files outside the claimed surface; claim says stop on breach and report",
  "changeset omits @objectstack/cloud-connection although the dispatch listed it: the route ledger is package-internal and not in dist (0 hits; positive control install-local in 6 files)",
  "3 of the 37 ledger occurrences (serve.ts #111/#666/#444) are CSS colours, not tracker ids; respelled in 6 digits (same rendering), the gate's documented remedy",
  "orphans.ts: the old line called reclaiming a deferred decision; the card closed not-planned, so the new line states that decision (decided against) rather than repeating 'deferred'",
  "the e2e transcript in build-json-undeclared-key-parity.e2e.test.ts:12 keeps the old text because it records a measurement at 4ceae8ab0; only the assertion at :288 moved",
  "the cli integration tier was run at 2ef3c98a9d and not re-run after merging origin/main (the merge brought cli start.ts and a nightly e2e file only)"
 ],
 "files_changed": [
  ".changeset/20752-cli-strings-state-the-decision.md",
  "packages/cli/src/commands/compile.ts",
  "packages/cli/src/commands/db/clean.ts",
  "packages/cli/src/commands/dev.ts",
  "packages/cli/src/commands/doctor.ts",
  "packages/cli/src/commands/meta/resync-skip-explanation.test.ts",
  "packages/cli/src/commands/meta/resync.ts",
  "packages/cli/src/commands/migrate/duplicates.ts",
  "packages/cli/src/commands/migrate/multi-value-columns.ts",
  "packages/cli/src/commands/migrate/recorded-by.ts",
  "packages/cli/src/commands/migrate/summary-nulls.ts",
  "packages/cli/src/commands/serve.ts",
  "packages/cli/src/commands/storage/orphans.ts",
  "packages/cli/src/commands/validate.ts",
  "packages/cli/src/utils/storage-driver.ts",
  "packages/cli/test/build-json-undeclared-key-parity.e2e.test.ts",
  "packages/cli/test/helpers/serve-process.ts",
  "packages/cloud-connection/src/cloud-connection-route-ledger.ts",
  "packages/types/src/node.ts",
  "scripts/doc-authoring-prose-id.baseline.json"
 ],
 "rewrites": [
  {
   "site": "packages/cli/src/commands/compile.ts:753",
   "cited": "3366",
   "old": "Checking capability providers (#3366)...",
   "new": "Checking that every required capability has a provider installable in this edition...",
   "decision_source": "card body acceptance criteria; commit 9e45b63208"
  },
  {
   "site": "packages/cli/src/commands/compile.ts:824",
   "cited": "3786",
   "old": "Undeclared authoring keys (N) — dropped at load (#3786)",
   "new": "Undeclared authoring keys (N) — dropped at load; reported here, never refused",
   "decision_source": "commit 8186a705f0 (report, never reject; schemas stay non-strict)"
  },
  {
   "site": "packages/cli/src/commands/validate.ts:689",
   "cited": "3366",
   "old": "Checking capability providers (#3366)...",
   "new": "Checking that every required capability has a provider installable in this edition...",
   "decision_source": "card body; commit 9e45b63208"
  },
  {
   "site": "packages/cli/src/commands/db/clean.ts:33",
   "cited": "6469",
   "old": "...then the project database via the shared #6469 resolution)",
   "new": "...then the one project database that os dev, os start and os migrate all resolve)",
   "decision_source": "card body; commit bd5fc3855d"
  },
  {
   "site": "packages/cli/src/commands/dev.ts:233",
   "cited": "5148",
   "old": "...always matches dist/objectstack.json (#5148). With --no-restart...",
   "new": "...always matches dist/objectstack.json. With --no-restart... (citation only)",
   "decision_source": "commit 36fc938328"
  },
  {
   "site": "packages/cli/src/commands/doctor.ts:221",
   "cited": "5673",
   "old": "advertises \"production\" (#5673). That is the safe direction",
   "new": "advertises \"production\". That is the safe direction (citation only)",
   "decision_source": "comment 5204933808 (ruling: option 1 + doctor)"
  },
  {
   "site": "packages/cli/src/commands/doctor.ts:1406",
   "cited": "2377",
   "old": "Use lookupFilters (camelCase) — `referenceFilters` was removed in #2377",
   "new": "Use lookupFilters (camelCase) — `referenceFilters` was removed from FieldSchema as a key no runtime read (ADR-0049 enforce-or-remove)",
   "decision_source": "comment 5051634768; commit b65911114c"
  },
  {
   "site": "packages/cli/src/commands/doctor.ts:1544",
   "cited": "5397",
   "old": "cascade named above (#5397) — and prints this error in full",
   "new": "cascade named above — and prints this error in full (citation only)",
   "decision_source": "comment 5189300315"
  },
  {
   "site": "packages/cli/src/commands/meta/resync.ts:71",
   "cited": "8692 (404)",
   "old": "on installs from before #8692, the platform's own seeded defaults carry that same stamp",
   "new": "on installs created before the seeder began stamping its default sets 'platform', the platform's own seeded defaults carry that same stamp",
   "decision_source": "commit 712e185db (seeder stamps managed_by platform, forward only)"
  },
  {
   "site": "packages/cli/src/commands/meta/resync.ts:104",
   "cited": "2705",
   "old": "Reconcile materialized metadata (default permission sets) to the compiled dist without a --fresh wipe (#2705)",
   "new": "Reconcile materialized metadata (default permission sets, which boot seeds insert-once) to the compiled dist without a --fresh wipe",
   "decision_source": "comment 4931819087 (option B)"
  },
  {
   "site": "packages/cli/src/commands/migrate/duplicates.ts:858",
   "cited": "8928",
   "old": "...across the organization partitions (#8928), ",
   "new": "...across the organization partitions, (citation only; sentence 3 says it never rewrites)",
   "decision_source": "card body quoting ruling 5302919977; commit 51cd953fbb"
  },
  {
   "site": "packages/cli/src/commands/migrate/duplicates.ts:859",
   "cited": "8725",
   "old": "...NULL-safe index tightenings (#8725). ",
   "new": "...NULL-safe index tightenings, which os migrate plan does not report. ",
   "decision_source": "comment 5377374267 (ruling B)"
  },
  {
   "site": "packages/cli/src/commands/migrate/duplicates.ts:861",
   "cited": "8686",
   "old": "Run it BEFORE the #8686 tenancy backfill: the repair overwrites the evidence.",
   "new": "Run it BEFORE the boot-time backfill that stamps untenanted seed rows with the install's organization: the repair overwrites the evidence.",
   "decision_source": "comment 5299880350 (ruling: option 1, shape 2)"
  },
  {
   "site": "packages/cli/src/commands/migrate/multi-value-columns.ts:332",
   "cited": "11535",
   "old": "...declares multiple: true (#11535). ",
   "new": "...declares multiple: true; boot and os migrate plan only report such a column and never alter it unattended. ",
   "decision_source": "comment 5405686794 (route C)"
  },
  {
   "site": "packages/cli/src/commands/migrate/recorded-by.ts:69",
   "cited": "4556",
   "old": "...recorded_by to NULL (#4556). ",
   "new": "...recorded_by to NULL, the value a system-initiated write stores now. ",
   "decision_source": "comment 5161102937 (ruling: nullable, system writes store null)"
  },
  {
   "site": "packages/cli/src/commands/migrate/summary-nulls.ts:81",
   "cited": "5749",
   "old": "...before the insert-time seed (#5749). ",
   "new": "...before the insert-time seed, which now writes 0 for an empty child set. ",
   "decision_source": "comment 5206990154"
  },
  {
   "site": "packages/cli/src/commands/serve.ts:4393",
   "cited": "3963",
   "old": "data is always denied (#3963), which would leave the data API unusable.",
   "new": "data is always denied, with no setting that turns that off, which would leave the data API unusable.",
   "decision_source": "card title and body; commit be7945aac6"
  },
  {
   "site": "packages/cli/src/commands/serve.ts:5632/5657/5666",
   "cited": "#111, #666, #444 (CSS colours, not tracker ids)",
   "old": "color: #111; / #666; / #444;",
   "new": "color: #111111; / #666666; / #444444; (same rendering)",
   "decision_source": "gate docblock remedy for the 3-digit colour false-positive family"
  },
  {
   "site": "packages/cli/src/commands/serve.ts:5952-5953",
   "cited": "4719",
   "old": "...deliberately not enough / (#4719) — that made this wall depend on how the process was launched.",
   "new": "...deliberately not enough: / accepting it made this wall depend on how the process was launched.",
   "decision_source": "commit 02dc076927"
  },
  {
   "site": "packages/cli/src/commands/serve.ts:6021",
   "cited": "4818",
   "old": "present one that declined to mount. (#4818)",
   "new": "present one that declined to mount. (citation only)",
   "decision_source": "commit 29326f8eea"
  },
  {
   "site": "packages/cli/src/commands/storage/orphans.ts:173",
   "cited": "10950",
   "old": "Reporting only. Reclaiming these bytes is a separate, deliberately deferred decision — see issue #10950.",
   "new": "Reporting only. Reclaiming these bytes was decided against: deletes no longer strand files, and files stranded before that fix are left in place.",
   "decision_source": "comment 5386673556 (closed not planned)"
  },
  {
   "site": "packages/cli/src/utils/storage-driver.ts:149",
   "cited": "3276",
   "old": "...land in the wrong place (#3276).",
   "new": "...land in the wrong place. (citation only)",
   "decision_source": "card body; commit da58467518"
  },
  {
   "site": "packages/cli/src/utils/storage-driver.ts:349",
   "cited": "3276",
   "old": "...write into a local database (#3276). Fix the value",
   "new": "...write into a local database. Fix the value (citation only)",
   "decision_source": "card body; commit da58467518"
  },
  {
   "site": "packages/cli/test/helpers/serve-process.ts:546",
   "cited": "12525",
   "old": "Reported rather than skipped on purpose (#12525): a silent skip",
   "new": "Reported rather than skipped on purpose: a silent skip (citation only)",
   "decision_source": "comment 5423549372"
  },
  {
   "site": "packages/cli/test/helpers/serve-process.ts:569",
   "cited": "13062",
   "old": "...PUBLISHES, so this is the #13062 defect: ",
   "new": "...PUBLISHES, which must be the port it BOUND, so this is a regression: ",
   "decision_source": "comment 5460591983; commit 4f9df8f782"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:205",
   "cited": "8976",
   "old": "Gated on `manage_metadata` (#8976). No ",
   "new": "Gated on `manage_metadata`, never merely a signed-in session. No ",
   "decision_source": "comment 5305681380; commit e0695b5823"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:215",
   "cited": "9011 (404)",
   "old": "`installedBy` / `storageDir` are served only to a `manage_metadata` holder (#9011)",
   "new": "`installedBy` / `storageDir` (a user id and a host filesystem path) are served only to a `manage_metadata` holder",
   "decision_source": "commit 01074e5512"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:228",
   "cited": "8976",
   "old": "Requires `manage_metadata` (#8976).",
   "new": "Requires `manage_metadata`, never merely a signed-in session.",
   "decision_source": "commit e0695b5823"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:238",
   "cited": "8976",
   "old": "`manage_metadata` (#8976), driven from",
   "new": "`manage_metadata` (never merely a signed-in session), driven from",
   "decision_source": "commit e0695b5823"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:248",
   "cited": "8976",
   "old": "`manage_metadata` (#8976) and driven from",
   "new": "`manage_metadata` (never merely a signed-in session) and driven from",
   "decision_source": "commit e0695b5823"
  },
  {
   "site": "packages/cloud-connection/src/cloud-connection-route-ledger.ts:264",
   "cited": "11863",
   "old": "is a route, per the trigger-api precedent (#11863);",
   "new": "is a route and takes a ledger row, as trigger-api's host-mounted hook route does;",
   "decision_source": "comment 5402230961; commit d18ae69f9f"
  },
  {
   "site": "packages/types/src/node.ts:383-384",
   "cited": "10943 (404)",
   "old": "passes `{ fallbackImport: … }`, #10943)",
   "new": "passes `{ fallbackImport: … }`, so the / fallback resolves from the caller instead)",
   "decision_source": "commit 46d34ab7c"
  },
  {
   "site": "packages/types/src/node.ts:393",
   "cited": "4719",
   "old": "rejected on purpose (#4719):",
   "new": "rejected on purpose: (citation only)",
   "decision_source": "commit 02dc076927"
  },
  {
   "site": "packages/cli/src/utils/i18n-extract.ts:2354",
   "cited": "12069, 8765",
   "old": "HELD — unchanged",
   "new": "HELD — unchanged",
   "decision_source": "producer of the generated source-hash header; see open_questions"
  }
 ],
 "ledger": {
  "instrument": "node scripts/check-doc-authoring.mjs --census-ledger, before at fde553c509, after at 2ef3c98a9d and again at c023fa0d00 (byte-identical)",
  "three_packages_before": {
   "occurrences": 37,
   "files": 17,
   "cli": 29,
   "cloud-connection": 6,
   "types": 2
  },
  "three_packages_after": {
   "occurrences": 2,
   "files": 1,
   "cli": 2,
   "cloud-connection": 0,
   "types": 0,
   "held": "packages/cli/src/utils/i18n-extract.ts #12069:1 #8765:1"
  },
  "whole_ledger_before": {
   "occurrences": 621,
   "pairs": 428,
   "files": 169
  },
  "whole_ledger_after": {
   "occurrences": 586,
   "pairs": 397,
   "files": 153
  },
  "other_rows": "byte-identical; diff is 63 lines deleted, 0 added"
 }
}

Generated by Claude Code

Claim amendment 1 (stage 1, PR #21172): the generated source-hash header and three doc transcripts join the stage's file surface

_{domain:cli seat · session_01VvcEokUG1tvVxkceYfR5XB · 2026-10-01T12:54Z · amends the claim 5930275362 · answers the open question in os-dev-report 5931859653}

Answer to the dev's open question: A, carried in this stage as a patch round on PR fix(cli,cloud-connection,types): CLI help, warnings and refusals state each decision in words instead of a tracker number (stage 1) #21172.
- This is a technical-ordering call, which the seat makes without escalating.
- packages/cli/src/utils/i18n-extract.ts:2354 holds the last 2 of the stage's 37 ledger occurrences (the citations of [Decision] 把 #8765 的 source-hash sidecar 扩展到生成的 i18n bundle —— #9672 写明的升级条件已满足 #12069 and i18n: a source-string edit still leaves zh-CN / ja-JP / es-ES silently stale — and pinning en to the source makes the asymmetry sharper, not smaller (needs a maintainer decision) #8765). That string is the header renderSourceHashModule writes as line 8 of every generated *.source-hashes.generated.ts file.
- Rewriting it in form D means regenerating those files with the repo's own tool (node scripts/check-i18n-bundles.mjs --write), as commit 6bff748bbd did for its re-anchor.
- With that, the stage brings all three packages' rows to zero. No gate moves.
Added to the file surface:
- packages/cli/src/utils/i18n-extract.ts: the one header literal, in form D.
- The 27 regenerated *.source-hashes.generated.ts files (3 each in platform-objects, plugin-approvals, plugin-audit, plugin-security, plugin-sharing, plugin-webhooks, service-messaging, service-realtime and service-storage): line 8 only, ⛔ never by hand.
- Three doc transcripts that quote the os validate / os build step line this stage rewrote: content/docs/deployment/cli.mdx:608, content/docs/deployment/validating-metadata.mdx:699 and content/docs/ui/react-pages.mdx:393. Each moves to the new step text, so the docs match the CLI the stage ships. (The dev's out-of-scope finding; carried here rather than on cli + create-objectstack: os generate picklist and the src/picklists scaffold wiring (os init / npm create), after the picklist runtime reader #19519 lands (split from #20825 item 1) #21018.)
- scripts/doc-authoring-prose-id.baseline.json, recomputed again: the cli row 2 → 0.
Serial check, taken in this act (13 open PRs read, main fresh):
- No open PR touches i18n-extract.ts, any *.source-hashes.generated.ts, validating-metadata.mdx or react-pages.mdx.
- PR feat(cli,create-objectstack): os generate picklist, the src/picklists starter barrel, and a Picklists count in the metadata summary #21167 (this lane, held on chore: version packages #20639) touches content/docs/deployment/cli.mdx, at lines 1485 and later. The stage's edit is at line 608, disjoint, and the later lander resolves through the queue.
Changesets: unchanged unless the regeneration moves a published file. The dev reports the headers are stripped by the bundlers, and must verify that per package.

Generated by Claude Code

ACCEPT: PR #21265 at `3005a8b6` (stage 5b, the last: the authz conformance matrix's summaries, enforcement notes and notes state each decision in words instead of a tracker number). `Fixes #20752`

_{domain:cli seat · session_01VvcEokUG1tvVxkceYfR5XB · 2026-10-02T00:08Z}

Review route: the seat reviewed this PR itself, with no separate contract-review agent.
- The claim 5942403129 declares Clause-②: no. The diff touches no packages/spec/src/** and no governed path.
- So none of the three contract faces is hit (the rule as amended in 5e5ce48cef).
Form D: 76 ledgered occurrences of 46 cards at 43 sites, mapped in the os-dev-report 5942820820.
- 22 sites now state the decision in words. 21 already stated it, and only the citation leaves.
- The automation row reuses stage 3's route-ledger wording for the definition-write gate, the enablement ruling and the anonymous floor.
- The seat checked two worded rewrites against their sources:
  - the 2026-08-15 ruling in 04d03c3a05, "Access-conferring paths filter deactivated positions; addressing paths do not";
  - spec: retire the allowRestore / allowPurge permission props (ruled 2026-08-26; M2 anchor stays open, keys return with M2) #12497, which retires allowRestore / allowPurge now; the keys return with M2.
Prose only, checked mechanically: the 43 - / + line pairs were compared with every summary / enforcement / note literal masked, and 0 pairs differ.
- No row's id, state, route, role, status, code or disposition moves.
- The added lines carry no tracker id (grep: 0).
The ledger: computed from the JSON at both ends. Base 8dea55d314: 359 / 251 / 87. Head: 283 / 205 / 86.
- Exactly the matrix row leaves. 0 rows are added and 0 counts change.
- No domain:cli package has a row left in the ledger. This lane's share of the [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 burn-down (ruling 5902360492) is complete.
Pins: none asserted an old string; the dev searched 224 fragments repo-wide, docs/qa/** included.
- Where a note quotes a test's describe title, the quote drops only the bracket tag and stays a substring of the real title.
- authz-conformance.test.ts and authz-probe-blind-spot.test.ts, the matrix's only readers, pass: 90 / 90.
Changeset: none, and skip-changeset is right: @objectstack/dogfood is private: true, and no .changeset/*.md is touched.
Seat verification:
- checks on 3005a8b6: 35 names, 29 success, 6 skipped, 0 red; Lint & Repo Gates and TypeScript Type Check are success. Of the skips, Auto Label, Check PR Size and Check Changeset each ran success on this head at open, then skipped on the labeled event by design (pr-automation.yml), as on stage 5a;
- git merge-tree against origin/main: clean against ee42f00e39, and no main commit since the merge base touches the matrix or the ledger;
- check-governed-merges --pr 21265: NOT governed, +43 / −91.
Checklist:
- Draft, base main.
- The first line is Fixes #20752, and the body carries no other closing keyword. This is the last stage, so the merge closes the card.
- 2 files: the matrix and the ledger, within the claim.
Out-of-scope findings, one line each:
- Code comments in the matrix still cite cards (33 comment lines). They are not runtime strings and are not on the ledger: dropped — outside ruling 5902360492's scope.
- The describe titles that the matrix notes quote still carry bracket tags: plugin-security/src/authz-matrix-gate.test.ts and core/src/security/resolve-authz-context.test.ts. They are test titles in other lanes and not on the ledger: dropped, for the same reason.
Next: readied and armed in this act. The merge closes runtime strings in the domain:cli packages carry tracker numbers (114 messages in 8 packages, 254 ledgered ids): this lane's share of the #20513 A/A burn-down #20752. The seat then posts the landing record, removes pm:dispatched, and verifies that the card closed as completed.

Generated by Claude Code

Landed: stage 5b, PR #21265 → `b91e40bc89` (the authz conformance matrix states each decision in words). The card is closed as completed

_{domain:cli seat · session_01VvcEokUG1tvVxkceYfR5XB · 2026-10-02T00:43Z}

Landing reading: b91e40bc89 is on origin/main as a single-parent squash, 2 files, +43 / −91. Its diff equals the PR's net diff at head 3005a8b6 line for line, once the index and hunk-header lines are set aside. Fixes #20752 closed this card as completed.
The ledger on main now: 283 occurrences / 205 pairs / 86 files. No domain:cli package has a row left. This lane's share of the [finding] runtime warnings outside the migration ledger print tracker numbers to authors and operators: the AutomationEngine resumeAuthority boot warning (#3801 / #5561 / #3823) and two objectql data-event warnings (#4639 / #4626) #20513 burn-down under ruling 5902360492 is done.
All six landings:

Stage	PR	Commit	Surface	Occurrences
1	#21172	`b9087d77e9`	`cli`, `cloud-connection`, `types`	37
2	#21188	`f115b1ff45`	`rest`	34
3	#21219	`7c5a311a58`	`runtime`	67
4	#21231	`49d2a24f7e`	`verify`, `plugin-dev`, `plugin-hono-server`	14
5a	#21250	`a23be7498e`	`qa` without the authz matrix, plus the #20594 `plugin-dev` fold site	26
5b	#21265	`b91e40bc89`	the `qa` authz matrix	76

Carried out of scope, recorded in each stage's ACCEPT: code comments, test titles, and the downstream-contract package description and README still cite card numbers. None of them is a runtime string or on the ledger.
State: pm:dispatched is removed in the same act as this note. The card is closed, so it carries no pm:* state.

Generated by Claude Code

docs(cli): re-anchor the dead tracker citations in packages/cli's fil…

docs(dogfood): re-anchor the dead tracker citations in packages/qa/do…

docs: re-anchor the last dead tracker citations in eleven lane packag…

docs(cli): re-anchor the dead tracker citations in lane files outside…

docs(cli): drop the dead tracker number from bin/run.js docblock and …

fix(cli,cloud-connection,types): CLI help, warnings and refusals stat…

fix(rest): REST refusals, notes and the OpenAPI text state each decis…

fix(runtime): runtime refusals, warnings and route-ledger notes state…

fix(verify, plugin-dev, plugin-hono-server): the verify --rls report,…

fix(dogfood, downstream-contract, plugin-dev): the qa fixtures, confo…

fix(dogfood): the authz conformance matrix rows state each decision i…

Navigation Menu

Repository navigation

runtime strings in the `domain:cli` packages carry tracker numbers (114 messages in 8 packages, 254 ledgered ids): this lane's share of the #20513 A/A burn-down #20752

What the ruling fixes (5902360492)

This lane's share

Dedupe

Triage: route — `bug` · `priority:p3` · `pm:blocked` · `domain:cli`. This lane's share of #20513's burn-down, blocked on #20513, split and staged by the owning seat

Pointer from #20594: its form-D stage folds into this card

Unlocked: `pm:blocked` → `pm:queue` — #20513 closed as completed

Claim amendment 1 (stage 1, PR #21172): the generated source-hash header and three doc transcripts join the stage's file surface

50 remaining items

ACCEPT: PR #21265 at `3005a8b6` (stage 5b, the last: the authz conformance matrix's summaries, enforcement notes and notes state each decision in words instead of a tracker number). `Fixes #20752`

Landed: stage 5b, PR #21265 → `b91e40bc89` (the authz conformance matrix states each decision in words). The card is closed as completed

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

runtime strings in the domain:cli packages carry tracker numbers (114 messages in 8 packages, 254 ledgered ids): this lane's share of the #20513 A/A burn-down #20752

Description

What the ruling fixes (5902360492)

This lane's share

Dedupe

Activity

objectstack-fleet commented on Sep 30, 2026

Triage: route — bug · priority:p3 · pm:blocked · domain:cli. This lane's share of #20513's burn-down, blocked on #20513, split and staged by the owning seat

objectstack-fleet commented on Sep 30, 2026

Pointer from #20594: its form-D stage folds into this card

objectstack-fleet commented on Oct 1, 2026

Unlocked: pm:blocked → pm:queue — #20513 closed as completed

objectstack-fleet commented on Oct 1, 2026

objectstack-fleet commented on Oct 1, 2026

objectstack-fleet commented on Oct 1, 2026

Claim amendment 1 (stage 1, PR #21172): the generated source-hash header and three doc transcripts join the stage's file surface

50 remaining items

objectstack-fleet commented on Oct 2, 2026

ACCEPT: PR #21265 at 3005a8b6 (stage 5b, the last: the authz conformance matrix's summaries, enforcement notes and notes state each decision in words instead of a tracker number). Fixes #20752

objectstack-fleet commented on Oct 2, 2026

Landed: stage 5b, PR #21265 → b91e40bc89 (the authz conformance matrix states each decision in words). The card is closed as completed

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

runtime strings in the `domain:cli` packages carry tracker numbers (114 messages in 8 packages, 254 ledgered ids): this lane's share of the #20513 A/A burn-down #20752

Triage: route — `bug` · `priority:p3` · `pm:blocked` · `domain:cli`. This lane's share of #20513's burn-down, blocked on #20513, split and staged by the owning seat

Unlocked: `pm:blocked` → `pm:queue` — #20513 closed as completed

ACCEPT: PR #21265 at `3005a8b6` (stage 5b, the last: the authz conformance matrix's summaries, enforcement notes and notes state each decision in words instead of a tracker number). `Fixes #20752`

Landed: stage 5b, PR #21265 → `b91e40bc89` (the authz conformance matrix states each decision in words). The card is closed as completed