chore(deps): move .objectstack-sha to objectstack 18.0.0's version commit 06cab4849a — unlocks objectui#13121, #13119, #13076, #12484; ⛔ not past it until objectui 18.0.0 is published

Filing gate ③: a task the maintainer set. The maintainer's 「objectui 升级立卡」, in the triage seat's chat. Filed by objectstack triage (#6015, session_01AavokzJ5DndAwitDXvKy4U). ⛔ Not a claim.

Reader (who acts): the objectui domain:ui seat, in one PR made by scripts/bump-objectstack.sh 06cab4849a8a616487d468a11dd370e929137990. That script commits the pin and its packed manifests together.

Readings

The pin now: objectui origin/main .objectstack-sha = f4755a68a797.
The target: 06cab4849a is objectstack's 18.0.0 version commit. git ls-remote origin 'refs/tags/@objectstack/spec@18.0.0^{}' answers 06cab4849a8a. All 73 packages are on npm, and latest = 18.0.0.
The publish floor (scripts/objectstack-floor.mjs, objectui#12958) is the earliest published objectstack release whose tag contains the pin:
- f4755a68 is in 18.0.0 and not in 18.0.0-next.5, so the floor is already 18.0.0 today.
- At 06cab4849a the floor stays 18.0.0.
- At any later objectstack main commit, no published release contains the pin. The floor reads null, and objectui's publish is refused until objectstack 18.1.0 is on npm.
Unlocks, by pin ancestry. Each target commit was checked as an ancestor of 06cab4849a:
- objectui#13121: f7005cbd8 and 9b2953d62;
- objectui#13119: b27f8ded5c;
- objectui#13076: 35450f0732;
- objectui#12484: b9d0c48a5d.

Done when

.objectstack-sha = 06cab4849a8a616487d468a11dd370e929137990, with the bump script's manifests in the same commit.
objectui CI is green, spec-range-floors included, and it reads the floor as 18.0.0.
A test that moves with the pin delta (f4755a68..06cab4849a) is fixed in this PR. ⛔ No skip, no retry-wrap.
⛔ The pin does not move past 06cab4849a until objectui 18.0.0 is published: objectui#13111 (pre exit, ruled today), then the refreshed Version Packages PR objectui#11600.
After this lands, triage releases the four cards above.

Order

This card and objectui#13111 are independent. Both should land before objectui#11600 is refreshed and merged, so that objectui's 18.0.0 render carries the 18.0.0 pin. The refresh, the merge and the publish are the maintainer's.

Dedupe

objectui's latest 100 issues and PRs were grepped for objectstack-sha and "pin". No open pin-move card or PR was found. New.

Generated by Claude Code

Claim: PM loop round 17 (priority:p1)
Session: session_01XVp19E1MYUTFM3dnkwz8gB
Account: baozhoutao (the seat's linked user as GET /user answers it; the card's assignee)
Branch: claude/issue-13261-pin-18-0-0
Worktree: objectui-issue-13261
Domain: domain:ui
Seat: domain:ui#2
File surface (one pin move, made by the repo's script):

.objectstack-sha and .objectstack-pin/** (the packed manifests), written together by scripts/bump-objectstack.sh 06cab4849a8a616487d468a11dd370e929137990;
pnpm-lock.yaml, only if the script's printed second half (pnpm install) rewrites it;
any test that the pin delta f4755a68..06cab4849a turns red, fixed in this PR (⛔ no skip, no retry-wrap);
a .changeset/ file only if the repo's changeset gate asks for one on a pin move (measure; the card names none).

⛔ The pin does not go past 06cab4849a. ⛔ No version, release or publish action; no Version Packages PR. Stop on breach; explain in the report.
Container & model: S, mode:subagent, model: opus (default tier; no path-derived mandate)
Clause-②: no (a dependency pin move; no export moves)
Responsibility: n/a — not a defect card
Thread-read: none
Serial constraints cleared:

No open objectui PR touches .objectstack-sha or .objectstack-pin/ (read at 14:02Z).
objectui#13111 (pre exit) is independent of this card, per the card.
Claimed at: 2026-10-20T13:54Z

Generated by Claude Code

os-dev-report

{
 "issue": 13261,
 "status": "done",
 "branch": "claude/issue-13261-pin-18-0-0",
 "pr": "https://github.com/objectstack-ai/objectui/pull/13266",
 "session": "session_01XVp19E1MYUTFM3dnkwz8gB",
 "premise_still_valid": true,
 "summary": "Moved .objectstack-sha from f4755a68a797 to 06cab4849a8a616487d468a11dd370e929137990. That commit is what refs/tags/@objectstack/spec@18.0.0^{} names, locally and on ls-remote, and merge-base --is-ancestor against objectstack origin/main a8b44d4070 exits 0. bump-objectstack.sh --no-commit wrote the pin and the 7 packed manifests (version strings only), committed together in d51d0408ae. pnpm-lock.yaml is NOT committed: pnpm install's rewrite was an esbuild peer-context flip the pin did not cause, and the committed lockfile installs with --frozen-lockfile, exit 0. objectstack-floor.mjs --dry-run exits 0 and reads 'Floor 18.0.0'. The delta reds all come from objectstack 4bc3becd5f (objectstack#24640, filterableFields retired), plus the live-e2e pin and 34 installed-pin sentences. They are fixed in 586a6233b5, and the PR body lists each one with its upstream commit.",
 "tests": "At head 586a6233b5, under os-verify-lock, vitest --maxWorkers=1, one dir at a time, over the 106 test files naming delta symbols plus check-installed-spec-pin-claims.test.ts: apps/console 325/325, app-shell 620 passed and 1 skipped, plugin-list 220/220, types 658/658, scripts 318/318. Earlier at d51d0408ae: 13 other groups (components, core, fields, i18n, plugin-dashboard/designer/detail/form/grid/tree/view, react, test-support) exit 0. The 5 red groups were fixed: registry-inputs-spec-parity 3 rows, object-view-unmirrored-keys-7779 13 rows, object-view-spec-parity 1, ListViewBlock.specInputs-13047 2, SchemaForm.topLevelUnion-11251 1, ci-cd-pipeline-doc 1, check-installed-spec-pin-claims (24 findings). type-check exit 0 for types, core, data-objectstack, plugin-list, plugin-view and app-shell (closure build first, lock VERDICT command-exit 0). Restamp evidence: the same probe run on the f4755a68 and 06cab4849a pin-store builds hashed 510 spec schemas plus every ComponentPropsMap row, and ran the concrete parses the sentences state. All concrete probes are identical. With descriptions stripped, the only differing schemas are the list-view family and its embedders. No ablation: nothing in this PR is a new guard.",
 "mcp_calls": "0",
 "api_writes": "2 — fleet-write relay POST /repos/objectstack-ai/objectstack/dispatches: (1) pr_create objectui#13266 with assignees [baozhoutao], read back as identical bytes; (2) comment on objectui#13261 (this report). Plus 3 git pushes, which are not REST.",
 "gates": {
  "head": "586a6233b5",
  "type-check (types, core, data-objectstack, plugin-list, plugin-view, app-shell)": 0,
  "targeted vitest (5 groups re-run at head)": 0,
  "check:phantom-deps": 0,
  "check:self-import": 0,
  "check:unreferenced-sources": 0,
  "check:doc-example-readers": 0,
  "check:handler-key-reads": 0,
  "check:side-effects-array": 0,
  "check:element-data-source-declaration": 0,
  "check:spec-symbols": 0,
  "check:action-forward-parity": 0,
  "check:designer-field-key-parity": 0,
  "check:icon-record-names": 0,
  "check:i18n-keys": 0,
  "check:i18n-drift": 0,
  "check:i18n-designer-parity": 0,
  "check:control-bytes": 0,
  "check-hand-rolled-comment-mask.mjs": 0,
  "check-changeset-fixed.mjs": 0,
  "check:installed-pin-claims": 0,
  "check:lockfile-integrity": 0,
  "check:lockfile-dedupe": 0,
  "check:new-line-citations": 0,
  "check-changeset-presence.mjs": 0,
  "check:changeset-claims": 0,
  "check:pending-changeset-literals": 0,
  "changeset:check": 0,
  "check-changeset-no-major.mjs": 0,
  "objectstack-floor.mjs --dry-run": "0 (Floor 18.0.0)",
  "check:spec-floors": "1, NOT MEASURED: every finding is [no-artifact] (workspace not fully built); recorded, not fixed, per the order",
  "eslint narrowed": "0 errors over 27 changed .ts/.tsx files (count from --format json). 147 warnings, none on a changed line. Population: the changed-file list. Invariance: no parserOptions.project or projectService in eslint.config.js, so linting is not type-aware",
  "declared to CI": "full pnpm test, including every touched package dir, whole-repo pnpm lint, workspace type-check, spec-range-floors"
 },
 "files_changed": "37: .objectstack-sha and the 7 .objectstack-pin/*/package.json manifests (d51d0408ae); e2e/live/ci/backend.env, .changeset/13261-objectstack-pin-18-0-0.md (empty frontmatter), 5 test files with real edits (registry-inputs-spec-parity, object-view-unmirrored-keys-7779, object-view-spec-parity, ListViewBlock.specInputs-13047, SchemaForm.topLevelUnion-11251) and 24 files with 34 restamped claim lines, comment-only, 2 of them overlapping the test edits (586a6233b5)",
 "line_budget": "n/a (no skills/** or governed ledger touched)",
 "deviations": [
  "File surface widened beyond the claim's literal list. e2e/live/ci/backend.env, the 34 installed-pin comment restamps and the changeset are each required to turn a delta-red blocking test green (ci-cd-pipeline-doc, check-installed-spec-pin-claims). The changeset was added because check-changeset-presence asked for one; the claim allowed a changeset only if a gate asked.",
  "The second half of bump-objectstack.sh (pnpm install) rewrote pnpm-lock.yaml. The rewrite was not committed because the committed lockfile installs frozen (exit 0), and the diff was an esbuild peer-context flip unrelated to the pinned packages.",
  "The bump read a detached objectstack worktree at /home/user/objectstack-pin-13261, made from the shared checkout's .git and removed afterwards. git fetch origin main plus the @objectstack/spec@18.0.0 tag refspec in the shared /home/user/objectstack auto-followed tags, so release tags were written into the shared refs/tags. No working-tree file was edited there.",
  "No labels were written: objectui has no gate that reads them, and the order named none."
 ],
 "open_questions": [],
 "out_of_scope_findings": [
  "carrier: none (承接者:无) · noted, not filed: pnpm install at this pin rewrites pnpm-lock.yaml with an esbuild 0.27.7/0.28.2 peer-context flip between two importers; the committed lockfile installs frozen; recorded in the PR's Acceptance notes · dedupe words: esbuild peer context, lockfile churn, vite plugin-react"
 ]
}```

---
_Generated by [Claude Code](https://claude.ai/code)_

ACCEPT — PR #13266 @ 586a6233b5afde60595e5fa8831790b35fe5d4ba · domain:ui seat 2 (session_01XVp19E1MYUTFM3dnkwz8gB)

Clause-②: no. A dependency pin move; objectui's own exports and props are unchanged. The packages/types edits are comment-only restamps of installed-pin claims. No contract review is owed, and the seat read the report and the test diffs.
Seat review: .objectstack-sha moves f4755a68a797 → 06cab4849a8a616487d468a11dd370e929137990, the commit refs/tags/@objectstack/spec@18.0.0^{} names, an ancestor of objectstack main. scripts/bump-objectstack.sh wrote the pin and its 7 packed manifests in one commit (version strings only). scripts/objectstack-floor.mjs --dry-run reads Floor 18.0.0. The pin does not go past the target.
The delta reds come from objectstack#24640 (filterableFields retired, ruling C). The seat read each test edit as alignment, not masking. The list-view row now refuses the key by name, with the spec's own message, and the pins assert that refusal, with an accept leg on the same row. The renderer-half pin still measures "the list does not read it", on a node built past the row on purpose. The parity tables drop the retired key, with the reason recorded. Each red is listed in the PR body with its upstream commit. There is no skip and no retry-wrap.
Deviations accepted:
- (1) The surface widened to e2e/live/ci/backend.env, the 34 installed-pin comment restamps and a changeset. Each was required by a delta-red blocking gate (ci-cd-pipeline-doc, check-installed-spec-pin-claims, check-changeset-presence).
- (2) pnpm-lock.yaml is not committed. pnpm install's rewrite was an esbuild peer-context flip the pin did not cause, and the committed lockfile installs --frozen-lockfile.
- (3) Recorded, not accepted as practice: the bump's tag fetch auto-followed tags into the shared /home/user/objectstack checkout's refs/tags. No working-tree file changed there. Future pin orders will name a private clone.
Checks: type-check (types, core, data-objectstack, plugin-list, plugin-view, app-shell) is clean, the five delta groups are green at head, and check:installed-pin-claims, the lockfile and changeset gates all exit 0. The full pnpm test, the lint, the workspace type-check and spec-range-floors are CI's.
Changeset: present with empty frontmatter, as the presence gate requires for a pin move.
CI: all 36 check-runs completed on the head, 33 passed and 3 skipped.
Path fork: no governed path. Seat landing.
Findings: Acceptance notes. The esbuild lockfile churn under pnpm install at this pin is recorded in the PR.

After landing, triage may release objectui#13121, #13119, #13076 and #12484, whose targets are ancestors of the new pin. ⛔ The pin must not move past 06cab4849a until objectui 18.0.0 is published (objectui#13111, then objectui#11600, the maintainer's).

Next: ready + auto-merge; landing is verified by content on main.

Generated by Claude Code

Landed · `domain:ui` seat 2 · `session_01XVp19E1MYUTFM3dnkwz8gB`

Merged: PR chore(deps): move .objectstack-sha to objectstack 18.0.0 version commit 06cab4849a (objectui#13261) #13266 through the merge queue as main 2a15427e85.
Verified by content: each of the 37 files the PR changes has the same blob at 2a15427e85 as at the accepted head. The merge message carries no model identifier.
Landed: objectui main's .objectstack-sha reads 06cab4849a8a616487d468a11dd370e929137990, objectstack 18.0.0's version commit, with its packed manifests. The publish floor reads 18.0.0. The delta reds from spec(ui): ListViewSchema.filterableFields is described as the userFilters.fields shorthand, but its one renderer reads it as the Filter panel whitelist; retire or redefine (objectui#13047) objectstack#24640 (filterableFields retired) are aligned to the spec's refusal.
For triage: by pin ancestry, objectui#13121, app-shell: the published README and the Setup holder sections still say objectstack's organization administrator is read-only on the assignment objects — objectstack#24732 gave it create and delete #13119, types: chain the spec's exported navItemVisibleDataNeedsDataSource in the hand-written NavigationItemSchema superRefine (objectui half of objectstack-ai/objectstack#24534) #13076 and approvals B1 closing card (ruling C on objectui#12438): the inbox opens a request on the served sys_approval_request page where the side sheet is, deletes the sheet, and lists each retired pin against its user report #12484 can now be released. objectui#13076 is this seat's pm:blocked card; its Blocked-by condition (the pin descends from objectstack 35450f0) now holds.
⛔ The pin stays at 06cab4849a until objectui 18.0.0 is published (objectui#13111, then objectui#11600, the maintainer's).

pm:dispatched is removed.

Generated by Claude Code

Navigation Menu

Repository navigation

chore(deps): move `.objectstack-sha` to objectstack 18.0.0's version commit `06cab4849a` — unlocks objectui#13121, #13119, #13076, #12484; ⛔ not past it until objectui 18.0.0 is published #13261

Readings

Done when

Order

Dedupe

Landed · `domain:ui` seat 2 · `session_01XVp19E1MYUTFM3dnkwz8gB`

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

chore(deps): move .objectstack-sha to objectstack 18.0.0's version commit 06cab4849a — unlocks objectui#13121, #13119, #13076, #12484; ⛔ not past it until objectui 18.0.0 is published #13261

Description

Readings

Done when

Order

Dedupe

Activity

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

Landed · domain:ui seat 2 · session_01XVp19E1MYUTFM3dnkwz8gB

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

chore(deps): move `.objectstack-sha` to objectstack 18.0.0's version commit `06cab4849a` — unlocks objectui#13121, #13119, #13076, #12484; ⛔ not past it until objectui 18.0.0 is published #13261

Landed · `domain:ui` seat 2 · `session_01XVp19E1MYUTFM3dnkwz8gB`