Issues

class-closure(currency-mode): every site that reads or teaches defaultCurrency without the currencyMode 'fixed' condition, or cites ADR-0053 for currency — spec describe, dashboards skill, data-api docs, analytics comments

finding

#20126

· objectstack-fleet opened

on Sep 25, 2026

objectql: a `having` key that names no column of the aggregated row keeps no group silently — `having: { totl: { $gt: 100 } }` answers 200 [], where an unknown `where` field is refused 400

#20123

· objectstack-fleet opened

on Sep 25, 2026

objectql: a per-aggregation `filter` refuses an unknown operator only when rows exist — `aggregations: [{ filter: { amount: { $median: 1 } } }]` answers 400 on a populated table and 200 on an empty one

#20122

· objectstack-fleet opened

on Sep 25, 2026

objectql: an engine `where` that is a string, number or Map is dropped — `engine.find({ where: 'amount > 100' })` returns every row, and a non-filter array is refused with no code or status; the same seam serves `update` and `delete`

#20121

· objectstack-fleet opened

on Sep 25, 2026

spec: FilterConditionSchema (the save-time door) admits a non-boolean $null / $exists flag, so a stored dataset or widget filter carrying one saves clean and is refused 400 on every query face

#20116

· objectstack-fleet opened

on Sep 25, 2026

[finding] os validate / compile / lint validate JSX pages at parse level only when no SDUI manifest resolves, and say nothing: the author-time JSX gate silently degrades

#20113

· objectstack-fleet opened

on Sep 25, 2026

[Decision] may a kind:'html' page author intrinsic HTML tags (div, a)? The console manifest says no, 3 of 3 shipped html pages say yes, and #19922's fallback cannot go live until one side changes

#20112

· objectstack-fleet opened

on Sep 25, 2026

driver-turso remote: a federated object's `external.remoteName` is ignored — remote `find` queries a table named after the object and throws a bare `LibsqlError` (no code, no status), while the local face reads the mapped table

#20107

· objectstack-fleet opened

on Sep 25, 2026

driver-sql: `reclaimSpace()` frees ONE freelist page per call, not the freelist — `PRAGMA incremental_vacuum` measured 300 → 299 pages on SQLite, so the lifecycle sweep never returns bulk-deleted space (ADR-0057 §3.4)

#20106

· objectstack-fleet opened

on Sep 25, 2026

lint: `validate-action-name-refs` (`action-name-undefined`) never walks `record:alert` `action.actionName` or `page:header` `actions` ids, so a misspelled CTA or header action passes spec and lint and is dropped silently at runtime

finding

#20105

· objectstack-fleet opened

on Sep 25, 2026

retire the saved-report stack — `sys_saved_report` / `sys_report_schedule`, `/api/v1/reports`, `client.reports`, `IReportService`, the `reports` capability and `@objectstack/plugin-reports` (zero consumers; not the `report` metadata kind)

domain:spec

pm:dispatched

priority:p2

#20102

· objectstack-fleet opened

on Sep 25, 2026

metadata: a page saved without `type` is stored and served without it, so `PageSchema`'s declared `type` default (`record`) never reaches a consumer that reads the served body

#20101

· objectstack-fleet opened

on Sep 25, 2026

Navigation Menu

All issues

class-closure(currency-mode): every site that reads or teaches defaultCurrency without the currencyMode 'fixed' condition, or cites ADR-0053 for currency — spec describe, dashboards skill, data-api docs, analytics comments

objectql: a `having` key that names no column of the aggregated row keeps no group silently — `having: { totl: { $gt: 100 } }` answers 200 [], where an unknown `where` field is refused 400

objectql: a per-aggregation `filter` refuses an unknown operator only when rows exist — `aggregations: [{ filter: { amount: { $median: 1 } } }]` answers 400 on a populated table and 200 on an empty one

objectql: an engine `where` that is a string, number or Map is dropped — `engine.find({ where: 'amount > 100' })` returns every row, and a non-filter array is refused with no code or status; the same seam serves `update` and `delete`

spec: FilterConditionSchema (the save-time door) admits a non-boolean $null / $exists flag, so a stored dataset or widget filter carrying one saves clean and is refused 400 on every query face

[finding] os validate / compile / lint validate JSX pages at parse level only when no SDUI manifest resolves, and say nothing: the author-time JSX gate silently degrades

[Decision] may a kind:'html' page author intrinsic HTML tags (div, a)? The console manifest says no, 3 of 3 shipped html pages say yes, and #19922's fallback cannot go live until one side changes

driver-turso remote: a federated object's `external.remoteName` is ignored — remote `find` queries a table named after the object and throws a bare `LibsqlError` (no code, no status), while the local face reads the mapped table

driver-sql: `reclaimSpace()` frees ONE freelist page per call, not the freelist — `PRAGMA incremental_vacuum` measured 300 → 299 pages on SQLite, so the lifecycle sweep never returns bulk-deleted space (ADR-0057 §3.4)

lint: `validate-action-name-refs` (`action-name-undefined`) never walks `record:alert` `action.actionName` or `page:header` `actions` ids, so a misspelled CTA or header action passes spec and lint and is dropped silently at runtime

retire the saved-report stack — `sys_saved_report` / `sys_report_schedule`, `/api/v1/reports`, `client.reports`, `IReportService`, the `reports` capability and `@objectstack/plugin-reports` (zero consumers; not the `report` metadata kind)

metadata: a page saved without `type` is stored and served without it, so `PageSchema`'s declared `type` default (`record`) never reaches a consumer that reads the served body

Search results