[Epic] MCP: what an agent can read and write on the HTTP MCP door, and answers that agree with the gate #32897

Activity

1. objectstack-fleet

   added

   trackingGenerated anchor/tracker issue — not dispatchable; exempt from the half-state sweep's findingsGenerated anchor/tracker issue — not dispatchable; exempt from the half-state sweep's findings

   area:aiAI-native — agent / tool / skill metadata, and the MCP surface an agent drivesAI-native — agent / tool / skill metadata, and the MCP surface an agent drives

   on Nov 12, 2026
2. objectstack-fleet

   changed the title [-]MCP: agent read/write surface on the HTTP MCP door (tracking, kept by triage#1)[/-] [+][Epic] MCP: what an agent can read and write on the HTTP MCP door, and answers that agree with the gate[/+] on Nov 12, 2026
3. objectstack-fleet

   added sub-issues on Nov 12, 2026

   • [Decision] Should an agent be able to publish its own staged changes over MCP, or must every MCP-authored change wait for a person to click Publish in Studio? #32591
   • mcp: an agent finds a colleague through a read-only sys_user (id, name, email) within the caller's organization visibility — ruled B, email visible #32641
   • [Decision] How should an MCP agent create a record whose required file field must be filled (e.g. an expense line with a required e-invoice)? #32686
   • studio: refetch drafts on focus and poll while the tab is visible, so changes made outside the tab show without a reload — ruled C, phase 1 (phase 2 is #33023) #32592
   • spec: a per-object, read-only AI exposure declaration so an agent can read a declared system object through the MCP record tools (#32442 read half) #32865
   • [Decision] Should an approver be able to see and decide their pending approvals over MCP? #32442
   • mcp: describe_object serves formula, autonumber and edit-denied fields as readonly: false #32530
   • mcp: validate_expression answers ok for a validation that the save/publish gate then refuses (a relationship read as both a record and a value) #32640
   • mcp: validate_expression still answers ok where the validation/formula gate refuses (null-guard, undeclared hop field, and the rest of the gate's private passes) #32872
   • MCP run_action: a business refusal inside the action's flow comes back as the engine chain ("Flow '…' failed: Node '…' failed: update_record(…) failed: 电子发票 is required"), while the console shows 「电子发票不能为空」 #32757
   • MCP list_actions still offers members identity actions they cannot run (invite_user, remove_member, delete_sso_provider, create_organization) after #30771 #32163
   • mcp: verify_build and create_metadata do not surface a publish-time refusal (an unsupported autonumber format) before publish #32456
4. 7 remaining items

   Load more
5. objectstack-fleet

   added sub-issues on Nov 13, 2026

   • MCP stdio get_record answers a missing or hidden id with uncoded error text, while the HTTP door answers RECORD_NOT_FOUND 404 #33030
   • MCP list_actions lists a deployment-authored action on a packaged object twice, attributing one row to the package's namespace, and refuses its AI face as ambiguous #33029
   • MCP query_dataset with an empty selection.measures reaches the SQL driver and answers 500 DATABASE_ERROR, while the REST twin refuses it 400 #33028
   • mcp: list_actions marks no action unavailable for an AI service account, though run_action refuses its confirmation-gated actions whatever it sends #33067
6. objectstack-fleet commented on Nov 13, 2026

   

   objectstack-fleetBot

   on Nov 13, 2026

   ContributorAuthor

   More actions

   triage#1 · hotlong · session_01Q4EjjMnyLqJdzuktEmRPXH

   Path: none

   Ruling recorded · MCP approval and upload p1 cards may be developed now, in parallel with the 18.4.0 cut · 2026-11-13T08:01Z

   Maintainer, verbatim (triage#1 session): 「同意改回p1」 · 「这些任务如果不影响发展，没有风险的话，都可以同步开发」 · 「如果不影响发版本」.

   • Covers: [Decision] How should an MCP agent create a record whose required file field must be filled (e.g. an expense line with a required e-invoice)? #32686, Upload links: refuse at issue a field whose readonlyWhen holds now (carries the issue-time readonlyWhen half of #32734) #32768, console AI chat: an uploaded image/PDF goes to the model and the agent puts that same file into the record's file field, as the user — ruled A #32749, storage + mcp: one upload link on a multiple: true file field accepts several files (same user, record, field, one use, same expiry) — ruled A #32747, [Decision] Should an approver be able to see and decide their pending approvals over MCP? #32442 and MCP: a submitter's agent cannot recall or resubmit its own approval request — approval_recall / approval_resubmit are not ai.exposed, while the approver's four decide actions now are (ruling A on #32442) #32993 (p1 since 07:56Z), plus the rest of this epic's p1 cards.
   • Condition: they must not affect the release. In practice:
     1. Claim, build and review them now.
     2. Before the 18.4.0 version commit is merged, land only a PR that cannot move an 18.4.0 answer, for example one that is new-surface only with no change to a reviewed release path. Anything that touches a release-critical path (publish, storage grants for Attachments: a member cannot attach a file to their own record (create_upload_link attachments:true answers 403 "cannot create sys_attachment"), though they can edit the record #32754, metadata row ownership for metadata: a rewrite that keeps the host's stamp turns an environment row into the host's own, and unregistering the host deletes it again (gates the release shipping #32198) #33003, the dataset closure for An app package's dashboard tile on a sibling module's dataset answers 409 on main; os validate accepts it (HotCRM CRM Overview regresses against 18.3.0) #32929) waits until the cut.
     3. If unsure, keep the PR ready and unqueued until the version commit lands.
   • Release blockers keep precedence for a seat holding both.

   ---

   Generated by Claude Code
7. objectstack-fleet

   added sub-issues on Nov 13, 2026

   • mcp: validate_expression answers ok at site flow_condition (and for a stored field's expression at site formula) where the publish gate refuses or warns #33147
   • mcp: stdio describe_object and the objects resource serve readonly: false for a stored expression field whose expression the caller's field mask hides, while the HTTP door answers true #33156
   • storage: a committed upload that no record ever names is never reclaimed (new path: MCP pre-record upload links) #33125
8. objectstack-fleet commented on Nov 13, 2026

   

   objectstack-fleetBot

   on Nov 13, 2026

   ContributorAuthor

   More actions

   epic:#32897#1 · os-tesla · session_01L9qibzoApSyVPuia3NCrBY

   Seated · round 1 open — epic seat epic:#32897#1 · os-tesla · session_01L9qibzoApSyVPuia3NCrBY · 2026-11-13T23:03Z · a thread of the os-tesla account's fleet project ("Objectstack devx ui adr-150")

   Audit only. This is the seat's registration and open-round marker.

   • Summons (the maintainer, this account's project): 「再开一个专题卡 pm-dispatch epic [Epic] MCP: what an agent can read and write on the HTTP MCP door, and answers that agree with the gate #32897」, run as /pm-dispatch epic:#32897, mirroring the brief of epic:#31527#3 (6866989399): concurrency 5, contract review self-run, not handed to review#1 nor to triage.
   • Mutex readings: no earlier epic:#32897 signature, claim or mailbox exists (issue and PR search for epic:#32897, and the open pm:seat list, read this fire). Seat number 1.
   • Owner: this seat takes the owner-lane duties of this parent (split, table, split summary) on the maintainer's word above; domain:server stays the lane of the children. No pm:epic exception: the children stay in their lane queues and are taken by ordinary claims.
   • Scope: the open children nobody holds, read this fire: mcp: an agent finds a colleague through a read-only sys_user (id, name, email) within the caller's organization visibility — ruled B, email visible #32641 (p2, ruling B), mcp: stdio describe_object and the objects resource serve readonly: false for a stored expression field whose expression the caller's field mask hides, while the HTTP door answers true #33156 (p2), metadata + runtime: loose ends of the per-member registry keys and the fallback host's action doors: event kind, orphaned member, view inference, MCP pins (follow-up of #32517) #32714 (p3), MCP stdio get_record answers a missing or hidden id with uncoded error text, while the HTTP door answers RECORD_NOT_FOUND 404 #33030 (p3), storage: a committed upload that no record ever names is never reclaimed (new path: MCP pre-record upload links) #33125 (p3), spec + docs + skills: SkillSchema.tools is no longer inert once #32767 lands — the skill is offered on an MCP connection only when every bound tool is served #32885 (p3, domain:spec). Not this seat's: mcp: describe_object serves formula, autonumber and edit-denied fields as readonly: false #32530, os start with the stdio MCP transport drops a host plugin console.log written after boot: it reaches neither stdout nor stderr #32942, mcp: validate_expression answers ok at site flow_condition (and for a stored field's expression at site formula) where the publish gate refuses or warns #33147, storage + mcp: one upload link on a multiple: true file field accepts several files (same user, record, field, one use, same expiry) — ruled A #32747 (domain:server#7), studio: refetch drafts on focus and poll while the tab is visible, so changes made outside the tab show without a reload — ruled C, phase 1 (phase 2 is #33023) #32592 (domain:ui#4), MCP list_actions still offers members identity actions they cannot run (invite_user, remove_member, delete_sso_provider, create_organization) after #30771 #32163 (assigned huangyiirene), mcp: verify_build and create_metadata do not surface a publish-time refusal (an unsupported autonumber format) before publish #32456 (cloud PM), spec + server + ui: draft and publish events on the live change channel, so every open Studio follows writes from MCP, REST and other tabs (#32592 phase 2, ADR-0008) #33023 (pm:on-hold). Nothing of theirs is taken over.
   • Contract review: self-run at CONTRACT_REVIEW_TIER. ⛔ Not sent to review#1 (same account) nor to triage.
   • Order: p2 first (mcp: an agent finds a colleague through a read-only sys_user (id, name, email) within the caller's organization visibility — ruled B, email visible #32641, mcp: stdio describe_object and the objects resource serve readonly: false for a stored expression field whose expression the caller's field mask hides, while the HTTP door answers true #33156), then the p3 cards; cards whose file surfaces meet (the stdio door: mcp: stdio describe_object and the objects resource serve readonly: false for a stored expression field whose expression the caller's field mask hides, while the HTTP door answers true #33156, MCP stdio get_record answers a missing or hidden id with uncoded error text, while the HTTP door answers RECORD_NOT_FOUND 404 #33030, and domain:server#7's os start with the stdio MCP transport drops a host plugin console.log written after boot: it reaches neither stdout nor stderr #32942) run serially. Claims follow on each card as each card thread reports its branch.
   • Patrol: trig_01Pdt8oPajp2oAyEiXnaRzEB · 2 */5 * * * (5 h fallback; mailbox and PR events wake the seat)
   • Mailbox: PR pm:mailbox — epic:#32897#1 · os-tesla #33162 (To: epic:#32897#1)
   • Write path: the relay as objectstack-fleet[bot]. ⛔ No GitHub MCP writes.

   ---

   Generated by Claude Code
9. objectstack-fleet

   added sub-issues on Nov 14, 2026

   • mcp: the stdio record resource objectstack://objects/{name}/records/{id} answers a missing or hidden id as an uncoded { error }, while its own refusals and the get_record tool answer RECORD_NOT_FOUND 404 #33178
   • mcp: validate_expression at flow_condition judges a bare name without the flow's variables, so its type verdict and the door's shadowed-read warning can differ from the runtime flow door #33176
   • MCP list_objects takes 44 s for an environment owner on hosted (describe_object 1.7 s): close to the common 60 s client timeout #33179
   • storage + platform-objects: avatars, organization logos and the branding logo name their file by URL in a url field or a setting, so no reference reader sees them and an abandoned console upload can never be reclaimed safely #33191
10. objectstack-fleet commented on Nov 14, 2026

    

    objectstack-fleetBot

    on Nov 14, 2026

    ContributorAuthor

    More actions

    epic:#32897#1 · os-tesla · session_01L9qibzoApSyVPuia3NCrBY

    Seat offline · epic:#32897#1 · 2026-11-14T06:03Z

    On the maintainer's 「所有座位当前任务处理完，合并后就下班」 (2026-11-14T04:35Z) and 「各座位自己的契约复审也暂停，等新的 review agent 上线后复审」 (2026-11-14T04:37Z). Patrol deleted, mailbox PR #33162 closed in the same stroke.

    Landed this tenure (all merged, cards closed):

    • metadata + runtime: loose ends of the per-member registry keys and the fallback host's action doors: event kind, orphaned member, view inference, MCP pins (follow-up of #32517) #32714 · PR fix(metadata): the store declares its views where it builds them, and a not-held refusal names each holder once #33174
    • mcp: stdio describe_object and the objects resource serve readonly: false for a stored expression field whose expression the caller's field mask hides, while the HTTP door answers true #33156 + MCP stdio get_record answers a missing or hidden id with uncoded error text, while the HTTP door answers RECORD_NOT_FOUND 404 #33030 · PR fix(mcp): the stdio door answers get_record misses and describe_object readonly as the HTTP door does #33175
    • mcp: an agent finds a colleague through a read-only sys_user (id, name, email) within the caller's organization visibility — ruled B, email visible #32641 · PR feat(platform-objects,mcp): a member's agent finds a colleague through the read-only sys_user #33180 (6a36b79c)
    • storage: a committed upload that no record ever names is never reclaimed (new path: MCP pre-record upload links) #33125 · PR fix(service-storage): reclaim an upload-link file no record took, through the sys_file ttl #33209 (a3a3cea6), ruling A delivered

    Stay-behind (one): #32885 · PR #33188 @ 63201e82. Tier H (skills/**). Contract review PASS 6868711489, seat record with the landing terms on the PR. It waits only for os-zhuang's approval. After that approval, whoever holds the lane lands it: re-read checks and mergeable_state, then label-write --land, then close out #32885. The approval is not a contract review, so the review pause does not hold it.

    Filed, not dispatched (lane queues, domain:server):

    • mcp: the stdio record resource objectstack://objects/{name}/records/{id} answers a missing or hidden id as an uncoded { error }, while its own refusals and the get_record tool answer RECORD_NOT_FOUND 404 #33178 · stdio record resource answers a miss uncoded
    • storage + platform-objects: avatars, organization logos and the branding logo name their file by URL in a url field or a setting, so no reference reader sees them and an abandoned console upload can never be reclaimed safely #33191 · avatar/logo URL fields → file fields; console upload reclaim

    The milestone table in the body is current. No child is claimed by this seat any more, except #32885 through its PR.

    ---

    Generated by Claude Code
11. objectstack-fleet

    added a sub-issue on Nov 14, 2026

    • mcp skill: the served SKILL.md line and its Console mirror do not name validate_expression's variables input (after #33176) #33272