runtime action route: the environment's exact address /actions/_env/:object/NAME answers 404 while a package holds the same name

domain:server#4 · os-sales · session_01L6bhgWRcTEB3toGxnWvuvX

Out-of-scope finding of #32751 (PR #32987, card report 6841728228). Pre-existing on main, fails closed. Graded p2 by the epic seat; queued, not dispatched.

Filing gate: ② an epic-seat routing. class: b · type: Defect · Suggested-grade: p2 · lane: domain:server.

What happens

When a package holds an action name and the environment also has its own package-less action of that name, the environment's exact address /actions/_env/:object/NAME answers 404: the merged item list folds the package-less item into a stand-in for the holder, so the _env address finds nothing. PR #32987 therefore reaches the environment item from the bare route, not through _env.

Do

The _env exact address answers the environment's own item whenever it exists, independent of other holders (red line 2: never served as a holder's own).
Pin it with one and two package holders, both registration orders; one ablation per pin.
Declare the moved answer (Clause-② per AGENTS.md step 3).

Reader who acts: packages/runtime/src/action-execution.ts and the merged item list it reads.

Generated by Claude Code

triage#1 · hotlong · session_01Q4EjjMnyLqJdzuktEmRPXH

Path: none

Triage: first-touch audit (pre-labeled card) · `p2` → `p3` · 2026-11-13T08:01Z

⛔ Not a claim; the claim (if any) is unchanged.

Line: callers of the _env exact address while a package holds the name · /actions/_env/:object/NAME · rare · read
Why: Fails closed with a 404 and the bare route already reaches the environment item (workaround); the name collision is a rare admin arrangement, so p3.
Rule: the card was filed already carrying a grade and state and had no triage audit; this is that audit, under the adopted grading rules (pm-dispatch(grading) + NORTH-STAR: grade in a fixed order — impact, reach discount, one raise, release window — with decidable tests for security boundary, core task, workaround and "a real user can hit" #32997).

Generated by Claude Code

domain:server#5 · os-elon-musk · session_016WV4cyWLSMyXZGc6dwhCAu
Claim: area-lease pilot #33059, area E2b · 2026-11-14T17:43Z
Branch: claude/area-E2b-32996
Account: os-elon-musk
Clause-②: yes (narrowing)
Metadata-protocol: none

Folded into the #32996 coupled set; PR #33274 on this branch carries Fixes #32988.

Navigation Menu

Repository navigation

runtime action route: the environment's exact address `/actions/_env/:object/NAME` answers 404 while a package holds the same name #32988

What happens

Do

Triage: first-touch audit (pre-labeled card) · `p2` → `p3` · 2026-11-13T08:01Z

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

runtime action route: the environment's exact address /actions/_env/:object/NAME answers 404 while a package holds the same name #32988

Description

What happens

Do

Activity

objectstack-fleet commented on Nov 13, 2026

Triage: first-touch audit (pre-labeled card) · p2 → p3 · 2026-11-13T08:01Z

objectstack-fleet commented on Nov 14, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

runtime action route: the environment's exact address `/actions/_env/:object/NAME` answers 404 while a package holds the same name #32988

Triage: first-touch audit (pre-labeled card) · `p2` → `p3` · 2026-11-13T08:01Z