Skills optimization flight — skills/objectstack-platform: RESTRUCTURE (≈ −5,970 tok, −25%) — an orphan rules file with zero inbound links, the canonical hooks reference two hops from the entry file, "When to Use" printed twice, and `requires:` / `engines.protocol` / `onEnable` (every real config) taught nowhere

[os-litant]

Member card of the skills catalog optimization program #14292 (maintainer mandate 2026-09-02, verbatim: 「审核所有的 skills，进行全面的优化。」). Filed by the skills lane seat (session session_01LraLgQVGq8egUwfYZpbYt1). Read-only audit at objectstack origin/main a59f78d; 50 findings PLAT-A … PLAT-I. The full findings table is the audit record: the dev posts it verbatim as the first comment on this card at claim time (seat scratchpad audit/objectstack-platform/findings.md).

Audit summary

8 files / 2,656 lines / 24,278 tokens (12.9% of the bundle, 3rd largest); all 6 ratcheted files at 0–4 tokens of headroom. File graph: rules/bootstrap-patterns.md (1,093 tok) is an orphan — zero inbound links repo-wide and ~fully duplicated by SKILL.md; references/plugin-hooks.md (2,628, hand-authored, the canonical hooks reference) is reachable only via rules/plugin-hooks-events.md (985), a file that calls itself a "compact pointer" and then restates it. Real usage: 5 patterns; plugin authoring and the os validate/os dev loop well covered; objectstack.config.ts partial (teaches shapes the 4 real configs never use, omits 3 they all use); requires: capability tokens and the onEnable export have zero coverage. CLI verification clean: every os command at SKILL.md:1117-1214 resolves, and the negative claims hold. Example gate: 80 TypeScript fences, 2 marked — both teach data authoring; zero plugin/kernel/service examples are type-checked. Verdict RESTRUCTURE (net ≈ −5,970 tok, −24.6%).

Top findings (|Δtok| × confidence)

#	id · span · proposal	Δtok
1	PLAT-B-01 · rules/bootstrap-patterns.md:1-142 · DELETE — orphan, duplicated by SKILL.md:209-234,327-339,351-357,389-397	−1,093
2	PLAT-B-02 · rules/plugin-hooks-events.md:1-108 · MERGE-INTO references/plugin-hooks.md (the self-declared pointer restates it)	−985
3	PLAT-D-03 · rules/service-registry.md:270-319 · DELETE naming conventions + toBeDefined() test + 10 best-practices	−452
4	PLAT-D-02 · rules/plugin-lifecycle.md:293-340 · DELETE "Version your plugin", reverse-domain names, two vacuous vitest blocks	−409
5	PLAT-C-05 · 5 in-package sites · DELETE 4 of 5 — the data:* boundary is stated 7× counting frontmatter + catalog	−310
6	PLAT-B-03 · SKILL.md:39-49 + :699-708 · DELETE — "When to Use This Skill" twice	−276
7	PLAT-H-01 · evals/README.md · planned stubs (DEFERRED, #14296 item 2)	−246
8	PLAT-D-04 · references/plugin-hooks.md:312-327 · DELETE 7 best-practices restating the same file	−235
9	PLAT-E-01 · SKILL.md:527-542 · REWRITE-AS-CONSTRUCT — Host Pattern uses defineStack/SqlDriver un-imported, CrmApp/TodoApp undefined, { ... } → TS1109	−227
10	PLAT-D-08 · rules/plugin-lifecycle.md:201-230 vs rules/service-registry.md:193-223 · DELETE the lifecycle copy	−225
11	PLAT-C-01 · SKILL.md:548-576 · DELETE → pointer — duplicates objectstack-data seeds and writes object: by hand, which data forbids	−190
12	PLAT-D-01 · SKILL.md:735-758 · DELETE ASCII decision tree restating the table 2 lines above	−183
13	PLAT-C-02 · SKILL.md:626-663 · REWRITE-AS-CONSTRUCT — re-teaches field types in a spelling 7/7 real object files don't use	−180
14	PLAT-B-07 · rules/service-registry.md:145-158 · MERGE-INTO SKILL.md:1008-1024	−174
15	PLAT-D-06 · references/plugin-hooks.md:252-311 · DELETE second near-identical vitest block	−150

Also load-bearing: PLAT-F-05 (composeStacks() — zero usages outside spec + tests, −165 → one row), PLAT-F-06 (driver-as-plugins: taught as canonical; zero app configs do it — the CLI wires it at serve.ts:2687-2745, −100), PLAT-B-06 (−129), PLAT-D-07 (−210), PLAT-G-01 (project → environment, five spans, against skills/README.md:88).

Imprecision to fix

SKILL.md:79-80 says the blank template ships "One example object, in-memory driver, Hono server" — the template's config has neither driver nor Hono plugin (packages/create-objectstack/src/templates/blank/objectstack.config.ts:40-44); both arrive from CLI auto-registration. State it as the running app, not the file.

Three funded additions

1. manifest.engines: { protocol: '^17' } — one Manifest Reference row (+40, paid by PLAT-C-01): 4 real usages incl. every create-objectstack project; grep engines skills/objectstack-platform/ → 0.
2. requires: [...] capability tokens — a token table in the Boot Sequence (+120, paid by PLAT-D-07 + PLAT-B-03): packages/cli/src/commands/serve.ts:1446-1560 ~20 providers; 3 real configs declare it.
3. The onEnable export — 4 lines in the Boot Sequence (+60, paid by PLAT-B-06 + PLAT-D-01): 4 real sites.

Flight scope

IMPLEMENT (shrink-only): delete rules/bootstrap-patterns.md (orphan) and rules/plugin-hooks-events.md (its unique content folded into references/plugin-hooks.md and paid there by PLAT-D-04 + PLAT-D-06); link references/plugin-hooks.md directly from SKILL.md; drop both deleted files' ceiling rows; every other DELETE / MERGE-INTO / REWRITE-AS-CONSTRUCT row at HIGH or MED; the three funded additions; PLAT-G-01 vocabulary; PLAT-B-05 reorder (free — bring defineStack() above the preamble); os:check on the self-contained plugin/kernel examples that pass.

ANCHOR RULINGS: references/plugin-hooks.md path stays STABLE — objectstack-data's hooks file links here and the data flight re-points its link to this path. Seeds → anchor objectstack-data (PLAT-C-01: delete + pointer). Field types → objectstack-data (PLAT-C-02). data:* boundary: keep ONE statement in SKILL.md. The api flight deletes its datasource/service-registry copies and points at SKILL.md:353-357 / rules/service-registry.md — keep those stable. The upstream-reporting residue of objectstack-pm-dispatch points at SKILL.md:59-70 — keep that section.

DEFER (pending #14296): PLAT-H-01 (eval stubs, item 2).

Flight constraints (binding)

• ONE draft PR, first line Fixes #<this card>; governed ⇒ stays draft; review requests are the seat's step.
• Token ratchet: no ratcheted file may grow; additions paid by deletions in the SAME file; ⛔ re-wrap is not payment; ⛔ no ceiling raise; ⛔ no new files; scripts/check-skills-token-ratchet.mjs touched ONLY to drop the rows of the two deleted files.
• ⛔ Never edit another package's files: MERGE-INTO another package = DELETE here + one-line pointer; a missing/weaker anchor goes in the PR body under "follow-up for ".
• Generated files untouched (references/_index.md); frontmatter edits ⇒ regenerate skills/README.md.
• Live surface with zero measured usage ⇒ one row pointing at its schema, never delete the last mention; retired/tombstoned surface ⇒ delete.
• Gates: node scripts/check-skills-token-ratchet.mjs, pnpm --filter @objectstack/spec check:skill-examples, pnpm check:skill-compatibility, pnpm check:skill-identifier-liveness, plus node scripts/pm/dispatch-gates.mjs --commands <changed paths>; record the head sha.
• PR body: per-item 落点 | before | after list keyed by finding id; per-file token delta; needs:contract-review on both carriers if any operator/contract-semantics claim changes.

Refs: #14292 · #14296 · #13658.

[os-litant]

Claim: PM loop round 1
Session: session_01LraLgQVGq8egUwfYZpbYt1
Branch: claude/issue-14299-skills-platform-optimization
Worktree: objectstack-issue-14299
Domain: domain:skills
File surface: skills/objectstack-platform/** (delete rules/bootstrap-patterns.md and rules/plugin-hooks-events.md; every other file shrink-only; references/plugin-hooks.md path stays stable) + scripts/check-skills-token-ratchet.mjs ONLY to drop the two deleted files' ceiling rows; ⛔ no other package (stop on breach; explain in the report)
Container & model: M (8 files, file-graph repair + prose diet), mode:subagent, model: opus — --tier reports no path-derived mandate; content limb applies (below), compensated by the seat's in-seat review at CONTRACT_REVIEW_TIER
Clause-②: yes — reframes behavioral claims about bootstrap (driver-as-plugin vs CLI auto-registration, the blank template's contents) and adds requires: / engines.protocol / onEnable semantics ⇒ needs:contract-review on both carriers at PR creation
Serial constraints cleared: sibling flights #14297 (data) and #14298 (ui) on disjoint directories; the data flight re-points its inbound link from rules/plugin-hooks-events.md to references/plugin-hooks.md (this flight keeps that path); the api flight (not yet dispatched) will point at SKILL.md:353-357 and rules/service-registry.md, the pm-dispatch flight at SKILL.md:59-70 — keep those sections; ratchet-map rows disjoint from the data flight's; skills/README.md not regenerated in-flight unless the drift gate demands it

Decision re-read: no maintainer ruling on this card; binding inputs = the mandate, the value gate, the ratchet discipline, and #14296 (item 2 deferred: eval stub untouched).

---

Generated by Claude Code

[os-litant]

Claim: os-dev (skills/objectstack-platform optimization flight)
Session: session_01LraLgQVGq8egUwfYZpbYt1
Branch: claude/issue-14299-skills-platform-optimization
Worktree: ../objectstack-issue-14299
Base: 909a4417 (origin/main at worktree creation; the card names d63c8a2 — origin/main is a shared pointer and moved forward, premise assumption 1 is verified against my actual base below)
File surface: skills/objectstack-platform/** + scripts/check-skills-token-ratchet.mjs (ceiling rows of the two deleted files only) + skills/README.md only if the drift gate demands regeneration. No other package.
Assignee untouched (PM owns it).

---

Generated by Claude Code

[os-litant]

audit-record — skills/objectstack-platform (read-only audit at a59f78d)

Posted by the dev seat at claim time; this is the finding-by-finding spec for the flight on #14299.

Transliteration key (deviation from a byte-verbatim post, disclosed). The GitHub comment sanitizer is measured to eat angle-bracket / HTML-comment-shaped fragments (and, in the worst measured shape, everything after the first one), and this seat has no raw-REST read path to verify byte survival (repo-scoped REST returns 403; the MCP read path eats inline angle fragments on its own). Nine fragments are therefore spelled without angle brackets. Nothing else is changed — every finding id, span, evidence, proposal, delta-token, gate verdict, confidence and human-floor flag is byte-identical to audit/objectstack-platform/findings.md:

on disk	in this comment	occurrences
HTML comment wrapping os:check	os:check marker	3
Promise then angle-PluginHealthStatus	Promise(PluginHealthStatus)	1
getService then angle-AuditService	getService(AuditService)	1
angle-ns double-underscore angle-short	NS__SHORT	1
angle-id dash angle-version dot osplugin	ID-VERSION.osplugin	1
angle-upstream hash angle-n	UPSTREAM#N	1

---

Audit — skills/objectstack-platform/ (read-only)

Pinned ref: objectstack origin/main = a59f78d. Working checkout is at a39b02a;
git diff --stat a59f78d HEAD -- skills/ is empty, so every span below is
identical at the pinned ref.

Package inventory (tokens = node scripts/check-skills-token-ratchet.mjs)

File	Lines	Tokens	Ceiling	Linked from SKILL.md?
SKILL.md	1309	12984	12984 (headroom 0)	—
references/plugin-hooks.md	328	2628	2628 (0)	no — 2 hops via rules/plugin-hooks-events.md
rules/plugin-lifecycle.md	340	2404	2408 (4)	yes (:715, :812)
rules/service-registry.md	319	2329	2331 (2)	yes (:716, :834)
references/_index.md	61	1344	generated	yes (:1305)
rules/bootstrap-patterns.md	142	1093	1093 (0)	NO — orphan, zero inbound links
rules/plugin-hooks-events.md	108	985	985 (0)	yes (:717, :865)
evals/README.md	49	514	514 (0)	no
Total	2656	24278

24,278 tk = 12.9 % of the 187,840-token published bundle; 3rd largest of 11
packages (data 47,260 · ui 36,540 · platform 24,278 · automation 15,345 · …).
All 6 ratcheted files sit at 0–4 tokens of headroom.

Real-usage corpus measured

• objectstack.config.ts authors: examples/app-crm, examples/app-showcase,
  examples/app-todo, packages/create-objectstack/src/templates/blank (4).
• Plugin/service authors: packages/plugins/* (15), packages/services/* (16),
  packages/drivers/* (5), packages/adapters/hono.
• CLI: 62 non-test command files under packages/cli/src/commands/.
• Embedding: examples/embed-objectql.

Derived TOP-5 authoring tasks and coverage

#	Task (evidence)	Coverage
1	Write/extend objectstack.config.ts — 4 real configs	partial — teaches shapes the 4 real configs do not use; omits 3 they all use (F-01/02/03)
2	Declare capabilities requires: [...] — 3 configs + provider registry packages/cli/src/commands/serve.ts:1446-1560	none — one table cell (SKILL.md:152) + a bare key name (:207)
3	Wire runtime code via the stack's onEnable export — 4 sites	none (lives in objectstack-data)
4	Author a kernel plugin (init/registerService/ctx.hook) — 36 packages	good
5	Verify loop (os validate / os dev --ui) — every example package.json	good (SKILL.md:1135-1166)

CLI verification

Every os command documented at SKILL.md:1117-1214 exists in
packages/cli/src/commands/: init build compile serve start dev validate lint info doctor generate diff register login logout whoami; data create|get|query|update|delete; meta register|resync; migrate plan|apply;
environments list|create|switch; cloud login|logout|whoami; package publish|install. Negative claims hold too — no studio.ts, no data/seed.ts,
no meta/apply.ts, no rollback.ts; cloud/ holds exactly login.ts logout.ts whoami.ts. No false CLI commands found. Undocumented real commands: test explain verify, plugin build|sign|publish, datasource introspect|list-tables|validate, db clean, secret orphans, storage orphans, migrate resume|meta|duplicates|…, meta get|list|delete,
environments show|bind (see PLAT-F-04).

---

Findings

A — Trigger precision

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-A-01	A	SKILL.md:5,9-10,20	description sells "drivers, adapters", "wiring a framework adapter", tags: … adapter; the body's answer is SKILL.md:394-397 "There are no @objectstack/adapter-* packages (no adapter-express / -fastify / -nextjs …)". Promise and truth are 385 lines apart. Routing is still correct, so this is an over-billed noun, not a misroute.	REWRITE-AS-CONSTRUCT: adapters → the Hono HTTP layer	−10	① no ② yes ③ n/a	HIGH	no
PLAT-A-02	A	SKILL.md:3-13 vs packages/cli/src/commands/serve.ts:1446-1560	The description enumerates defineStack, drivers, adapters, PluginContext, DI, kernel hooks, CLI, migrations, deployment, LiteKernel — and never names capabilities / requires:, the key that decides which service plugins boot. An agent asked "how do I turn on approvals / messaging?" has no trigger to load this package; objectstack-automation:779 half-answers for flows only.	ADD one clause (paid by A-01 + B-06)	+15	① yes ② no ③ n/a	MED	no

B — Structure / progressive disclosure

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-B-01	B	rules/bootstrap-patterns.md:1-142 (whole file)	Orphan. grep -rn "bootstrap-patterns" skills/ returns zero hits; SKILL.md:715-717 lists only lifecycle / service-registry / hooks-events. Content is ~fully carried by SKILL.md: driver table :66-74 ≡ SKILL.md:351-357; HTTP-layer table :76-83 ≡ SKILL.md:389-397; "no driver: key … refused at load" + the defineStack validation failed block :7-31,87-105 ≡ SKILL.md:209-234; manifest-required-fields :29-31,107-130 ≡ SKILL.md:327-339. Its own last line (:142) points back at SKILL.md.	DELETE	−1093	① no (never read) ② yes ③ n/a	HIGH	yes
PLAT-B-02	B	rules/plugin-hooks-events.md:1-108 + references/plugin-hooks.md:1-328	rules/plugin-hooks-events.md:3-5 self-declares "This document is a compact pointer. Complete documentation lives in the canonical reference → references/plugin-hooks.md" — then reproduces the event table (:39-47 ≡ references:45-53), the data:* warning (:51-59 ≡ references:63-79), custom-hook convention (:61-73 ≡ references:80-99), execution order (:95-98 ≡ references:219-236), and a DO/DON'T list (:77-91) restating references:312-327. SKILL.md links only the pointer, so the 2,628-token canonical file is 2 hops from the entry file and 985 tokens restate it.	MERGE-INTO references/plugin-hooks.md; relink SKILL.md:717,865	−985	① no ② yes ③ n/a	HIGH	yes
PLAT-B-03	B	SKILL.md:39-49 and :699-708	"## When to Use This Skill" appears twice, 650 lines apart, both restating the frontmatter (:41 ≡ :9; :701 ≡ :6). A loaded package is already selected.	DELETE both	−276	① no ② yes ③ n/a	HIGH	no
PLAT-B-04	B	SKILL.md:1277-1279 → :1056-1083	"Health endpoints: … GET /health and GET /ready … (see "Health Monitoring" earlier in this skill)". That section documents kernel.checkPluginHealth() / checkAllPluginsHealth() / getPluginMetrics() — an in-process TS API — and contains no HTTP route.	REWRITE-AS-CONSTRUCT (drop the cross-ref)	−25	① yes ② partly ③ n/a	HIGH	no
PLAT-B-05	B	SKILL.md:23-158 (order)	1,441 tokens precede ## defineStack() at :161: merge preamble :23-50 (289), App/Platform philosophy :52-71 (279), template :74-96 (193), directory tree :99-140 (422), CRM blueprint :142-158 (258). The core construct is 12 % down the file.	MOVE-TO: defineStack() first	0	① yes ② n/a ③ yes	MED	yes
PLAT-B-06	B	SKILL.md:25-35	Narrates the package's edit history: "(the original "quickstart" skill)", "(the original "plugin" skill)", "which is why they live in one skill". A customer agent never chose between two former skills.	DELETE	−129	① no ② yes ③ n/a	HIGH	no
PLAT-B-07	B	SKILL.md:1008-1024 vs rules/service-registry.md:145-158	Same table twice with inverted columns: SKILL.md Plugin Name │ Service Key │ Package (13 rows); rules Service Key │ Plugin Name │ Package (6 rows, a subset). Both then repeat "the REST plugin registers no service" (SKILL.md:1015 / :156-158).	MERGE-INTO SKILL.md	−174	① no ② yes ③ yes	HIGH	no

C — Cross-package redundancy

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-C-01	C	SKILL.md:548-576 vs skills/objectstack-data/SKILL.md:1000-1055	skills/README.md:22-24 assigns seeds to data ("and the seeds (defineSeed())"). The platform copy teaches a raw literal — data: [{ object: 'task', mode: 'upsert', externalId: 'subject', records: [...] }] (:555-564) — writing object: by hand, which objectstack-data/SKILL.md:1036 forbids verbatim: "object │ derived │ Auto-set from objectDef.name — never write manually". Platform never mentions defineSeed(). Its mode table (:569-575) also drops the two decision-changing bits: the ⚠️ Data loss flag on replace and the env: row (objectstack-data:1041,1052). Repo: 24 real defineSeed( sites in examples/**; 0 raw-literal data: entries.	DELETE → one pointer line	−190	① no (teaches the worse spelling) ② yes ③ n/a	HIGH	yes
PLAT-C-02	C	SKILL.md:626-663	The "Complete Working Example" object file re-teaches Field.text/textarea/select/date + indexes: — objectstack-data's domain (skills/README.md:24-25). Wrong spelling too: 7 of 7 files under examples/*/src/objects/*.object.ts use ObjectSchema.create({…}); 0 use export default { … } (the shape at :631). The scaffolder's own object (packages/create-objectstack/src/templates/blank/src/objects/note.object.ts:5) uses ObjectSchema.create and declares sharingModel. This is one of only two os:check marker-marked blocks (:627).	REWRITE-AS-CONSTRUCT: replace body with a pointer	−180	① no ② yes ③ yes	HIGH	yes
PLAT-C-03	C	SKILL.md:62-68 vs skills/objectstack-pm-dispatch/SKILL.md:916-979	"Record the block against the platform issue …; before resuming, confirm the version you pin carries the fix (merged upstream ≠ present on your pin) and re-run the defect's own reproduction" restates pm-dispatch's ## Upstream reporting (:933-939 reproduce-against-current; :976-979 "pin the current upstream version … unpin when UPSTREAM#N ships in >= 17.3"). Bullets 1 and 3 (:59-61, :69-71) are platform-specific and should stay.	MERGE-INTO pm-dispatch	−126	① no ② yes ③ n/a	MED	no
PLAT-C-04	C	SKILL.md:1299	Ops-pitfalls row on permission-set assignment ends "— see "Assigning a permission set to a user" in objectstack-data": a 60-token restatement of a rule it simultaneously delegates.	REWRITE-AS-CONSTRUCT: symptom + one-line cause	−45	① no ② yes ③ yes	MED	no
PLAT-C-05	C	5 in-package sites + frontmatter + catalog	The "no data:* kernel hooks / silently never fires" rule appears five times in-package — SKILL.md:857-863, SKILL.md:944-948, rules/plugin-hooks-events.md:51-59 (+:88), rules/plugin-lifecycle.md:110-113, references/plugin-hooks.md:63-79 (+ the ❌/✅ pair :166-184) — plus SKILL.md:11-13 (frontmatter) and skills/README.md:110-112. Seven statements of one boundary.	DELETE 4 of 5; keep references/plugin-hooks.md:63-79 + frontmatter	−310	① no ② yes ③ n/a	HIGH	no

D — Density

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-D-01	D	SKILL.md:735-758	"### Decision Guide" ASCII tree restates the table 2 lines above (:723-733): "Production server / full application? → ✅ ObjectKernel" ≡ "Use case │ Production servers, full applications │ Serverless, edge, unit tests". The gloss ("Fast cold start", "Simple setup, fast teardown") changes no branch.	DELETE (table survives)	−183	① no ② yes ③ yes	HIGH	no
PLAT-D-02	D	rules/plugin-lifecycle.md:293-340	"## Best Practices" (10 items incl. "9. Version your plugin — Use semantic versioning", "10. Use reverse domain names", "8. Avoid circular dependencies") + "## Testing Lifecycle" (two vitest blocks whose only assertions are toBeDefined() / isConnected()). Items 1-7 restate the file's own §Phase 1/2/3 headings.	DELETE	−409	① no ② yes ③ n/a	HIGH	no
PLAT-D-03	D	rules/service-registry.md:270-319	"## Service Naming Conventions" (4 generic items: "3. Use descriptive names — e.g. auth-service not as", "4. Avoid abbreviations") + "## Testing Service Registration" (toBeDefined()/toThrow()) + "## Best Practices" (10 items, 1-2 and 8-9 restating §Registration Patterns and the null paragraph at :220-223).	DELETE	−452	① no ② yes ③ n/a	HIGH	no
PLAT-D-04	D	references/plugin-hooks.md:312-327	"## Best Practices" 7 items, each restating the same file: item 1 ≡ :5-7+:63-79; 2 ≡ the :45-53 table's "Triggered When" column; 3 ≡ :147-162; 4 ≡ :137-145; 5 ≡ :80-99; 7 ≡ :252-257.	DELETE	−235	① no ② yes ③ n/a	HIGH	no
PLAT-D-05	D	references/plugin-hooks.md:238-251	"## Hook Naming Conventions" with 4 good / 2 bad names. :80-82 already gave the convention and :225-232 already demonstrated it; the only new rule is "use lowercase".	REWRITE-AS-CONSTRUCT: fold into :82	−60	① no ② yes ③ yes	HIGH	no
PLAT-D-06	D	references/plugin-hooks.md:252-311	Two near-identical 25-line vitest blocks; the second differs only by asserting receivedData instead of hookCalled. The load-bearing fact (kernel.context is protected — capture a probe PluginContext) is stated at :254-256, :90, and SKILL.md:986-989.	DELETE the second block	−150	① no ② yes ③ n/a	HIGH	no
PLAT-D-07	D	SKILL.md:142-158	"## CRM Blueprint": rows 2-3 ("By-type directories src/{objects,views,pages,actions,flows,...}", "Typed aggregates src/*/index.ts") restate :99-140 (same tree, 18 lines earlier, plus the Object.values(imported) row at :138). Rows 5-6 point at src/profiles/*, src/sharing/*, src/translations/* — data / i18n territory. Only row 4 (requires:) is platform-specific and non-duplicated.	REWRITE-AS-CONSTRUCT: keep row 4, promote into the defineStack section	−210	① no ② yes ③ yes	MED	no
PLAT-D-08	D	rules/plugin-lifecycle.md:201-230 vs rules/service-registry.md:193-223	The same ❌/✅ lesson twice across two files — "getService() in init() Without a Declared Dependency" → "Declare the Dependency" — differing only in names (CachePlugin/db-pool vs AnalyticsPlugin/objectql). Both close with the same paragraph: "Never register null as a placeholder: registerService throws on a duplicate key … and getService() treats a falsy value as missing and throws anyway."	DELETE the plugin-lifecycle.md copy	−225	① no ② yes ③ n/a	HIGH	no

E — Constructs & examples

Fence-marker rule (packages/spec/scripts/check-skill-examples.ts:16-22): a
self-contained, should-compile block opts in with os:check marker above the
fence; the gate type-checks it against built @objectstack/spec declarations and
(:78-84) refuses a bare any inside a marked block. Fragments stay unmarked by
design.

80 TypeScript fences in the package, 2 marked (2.5 %) — both in SKILL.md
(:168, :627), and both teach data authoring. Zero plugin/kernel/service
examples are covered.

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-E-01	E	SKILL.md:527-542	"### Host Pattern (Plugins as AppPlugin)" reads as a complete config file (opens with a 3-line import block) but cannot compile: defineStack used, not imported; SqlDriver used, not imported; Runtime/ObjectQLPlugin/AuthPlugin imported, two unused; CrmApp/TodoApp undefined; new SqlDriver({ ... }) at :536 is an ellipsis (TS1109 — the exact trap check-skill-examples.ts:30-36 documents). ≥4 errors on paste.	REWRITE-AS-CONSTRUCT or DELETE with F-05	−227	① yes ② yes ③ yes	HIGH	no
PLAT-E-02	E	SKILL.md:1059-1073	Types the literal as Plugin & { healthCheck(): Promise(PluginHealthStatus) } then reads this.pool.query(...) (:1067, TS2339) and err.message on a catch binding (:1070, TS18046). PluginHealthStatus is never imported. Repo: only 2 files under packages/{plugins,services,drivers} implement async healthCheck.	REWRITE-AS-CONSTRUCT: shrink to the 3 real call sites	−90	① yes ② partly ③ yes	HIGH	no
PLAT-E-03	E	SKILL.md:954-969	Ends kernel.getService(AuditService)('audit'); AuditService is a non-exported class from a different fence (:898-908) and is not imported (TS2304).	REWRITE-AS-CONSTRUCT: drop the type argument	−10	① yes ② yes ③ yes	HIGH	no
PLAT-E-04	E	SKILL.md:296-298, rules/bootstrap-patterns.md:57-64	Two more ellipsis-placeholder blocks: defineStack({ ... }, { strict: false }) and a bare new DriverPlugin(new SqlDriver({ … })) expression statement with no import. Both TS1109 by construction.	REWRITE-AS-CONSTRUCT / covered by B-01	−20	① no ② yes ③ yes	MED	no
PLAT-E-05	E	package-wide	The 2 marked blocks cover the package's least proprietary content (data authoring, already gated by objectstack-data) while Plugin/PluginContext/registerServiceFactory/ServiceLifecycle/LiteKernel examples — 78 fences — are unchecked. check-skill-examples.ts:39-45 warns bare Plugin resolves against lib.dom, which is exactly the type these examples use.	ADD os:check marker to SKILL.md:886-942 after fixing E-01/02/03 — paid by D-02	0	① yes ② no ③ yes	MED	no

F — Gaps vs real usage

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-F-01	F	gap at SKILL.md:327-343	manifest.engines: { protocol: '^17' } has 4 real usages — examples/app-showcase/objectstack.config.ts:89, examples/app-crm/…:48, examples/app-todo/…:48, packages/create-objectstack/src/templates/blank/objectstack.config.ts:22 (every project the scaffolder emits). grep -rn "engines" skills/objectstack-platform/ → 0 hits. The Manifest Reference lists id/version/type/name/description then spends 6 lines on manifest.namespace, omitting the key the scaffolder stamps and whose own comment says the runtime "refuses this app at the boundary with the exact migration command". Only objectstack-upgrade/SKILL.md:108 mentions it, from the upgrade side.	ADD one manifest row (paid by C-01)	+40	① yes ② no ③ yes	HIGH	no
PLAT-F-02	F	gap at SKILL.md:197-207 / :426-458	requires: [...] decides which service plugins boot — packages/cli/src/commands/serve.ts:1446-1560 is a ~20-entry CAPABILITY_PROVIDERS registry (automation, analytics, audit, cache, storage, queue, job, messaging, triggers, …); serve.ts:2281-2321 gives precedence and the auth ⇒ email implication. Real usage: app-showcase:107 (9 tokens), app-crm:54, blank template:30. This package shows it once as a CRM-blueprint cell (:152) and once as a bare word (:207); the Boot Sequence (:439-455) narrates a fixed auto-register list and never says requires: drives it.	ADD a requires: token table (paid by D-07 + B-03)	+120	① yes ② no ③ yes	HIGH	no
PLAT-F-03	F	gap at SKILL.md:426-458	The onEnable export from objectstack.config.ts — the AppPlugin-invoked hook where an app binds runtime code — has 4 real sites (examples/app-showcase/objectstack.config.ts:283, examples/app-crm/…:127, examples/app-todo/…:33, examples/app-todo/src/actions/register-handlers.ts:37-64, each with a comment naming AppPlugin). Coverage exists only in objectstack-data (references/data-hooks.md:1093,1332; rules/datasources.md:46,65). The package that owns objectstack.config.ts and the boot sequence is silent.	ADD 4 lines to the Boot Sequence (paid by B-06 + D-01)	+60	① yes ② no ③ yes	HIGH	no
PLAT-F-04	F	gap at SKILL.md:1107-1214	Part 2 teaches plugin authoring and stops at kernel.use(plugin); there is no path to a distributable plugin. packages/cli/src/commands/plugin/{build,sign,publish}.ts is a real ADR-0025 §3.4 pipeline (objectstack.plugin.json → esbuild bundle → per-file sha256- integrity → reproducible ID-VERSION.osplugin), and SKILL.md:335 already tells authors manifest.type may be 'plugin'. Not mentioned anywhere in skills/.	ADD a 3-row CLI table (paid by D-02)	+70	① yes ② no ③ yes	HIGH	no
PLAT-F-05	F	SKILL.md:498-522	Speculative surface. composeStacks() gets a section + a 3-row Conflict-Strategies table. Repo-wide grep -rn "composeStacks" over .ts/.tsx/.md excluding skills/ and node_modules: packages/spec/src/stack.zod.ts (impl), 4 test files in packages/spec/src/, packages/spec/src/index.ts, 2 ADRs, 2 CHANGELOGs, 1 changeset, AGENTS.md. Zero usages in examples/**, packages/apps/**, packages/create-objectstack/**. Real multi-app composition happens via AppPlugin registration in serve.ts.	RETIRE-SURFACE → 2-line pointer at stack.zod.ts	−165	① no ② yes ③ n/a	MED (zero usage is evidence, not proof)	yes
PLAT-F-06	F	SKILL.md:347-381, rules/bootstrap-patterns.md:7-64,87-105	Near-speculative. The driver-as-plugins:-entry pattern (plugins: [new DriverPlugin(new InMemoryDriver())]) is taught as the canonical bootstrap in two files. Real configs: examples/app-showcase/objectstack.config.ts:134 lists connector plugins; blank template:40 lists connector plugins; app-crm/app-todo have no plugins: key. DriverPlugin appears in examples/ only in two test files (app-todo/test/seed-check.ts:16, test/mcp-actions.e2e.ts:57). The CLI wires it itself from a resolved DB URL (serve.ts:2687-2745). Real for embedders/tests; framed as step one of writing a config.	REWRITE-AS-CONSTRUCT: keep the selection table, reframe the code as "embedding / tests only"	−100	① yes ② partly ③ yes	MED	yes
PLAT-F-07	F	gap at SKILL.md:735-758	The kernel Decision Guide offers two answers and routes "Serverless / edge … Fast cold start" to LiteKernel. The repo's own example for that shape — examples/embed-objectql/src/index.ts:1-32 (ADR-0076) — uses neither: new ObjectQL() from @objectstack/objectql/core, "NO kernel, NO ObjectQLPlugin". grep -rn "objectql/core" skills/ → 0 hits across all 11 packages.	ADD a third branch (paid by D-01)	+50	① yes ② no ③ yes	HIGH	no

G — Consistency

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-G-01	G	SKILL.md:303-304, 319, 322-323, 1035	skills/README.md:88 — "v5.0 vocabulary — runtime workspace is environment, not project" — and the CLI surface is os environments list/create/switch (SKILL.md:1210). Five spans use the retired word for the workspace: "Do not configure a project runtime to read or write metadata through its business database" (:303); "Project revisions, history, overlays" (:319); "do not add sys_metadata objects to a project runtime manifest" (:322-323); "an isolated project kernel" (:1035). Implementation confirms: packages/metadata/src/migrations/migrate-project-id-to-environment-id.ts renames project_id → environment_id (the earlier migrate-env-id-to-project-id.ts is the legacy step it supersedes). Uses of "project" for the local source tree (:41, :99, :163) are correct and out of scope.	REWRITE-AS-CONSTRUCT: project runtime → environment runtime; Project revisions → Environment revisions	0	① yes ② no ③ n/a	MED-HIGH	yes
PLAT-G-02	G	references/plugin-hooks.md (location) vs skills/README.md:55-58	The catalog anatomy reserves references/ for the generated _index.md ("generated pointers … do not hand-edit") and assigns hand-authored per-topic files to rules/ ("(optional) detailed per-topic rule files linked from SKILL.md"). references/plugin-hooks.md is hand-authored, 2,628 tokens, and not linked from SKILL.md — it violates both halves. (objectstack-data does the same with references/data-hooks.md — a catalog-wide drift, not a lone slip.)	MOVE-TO rules/plugin-hooks.md (combines with B-02)	0	① no ② no ③ n/a	HIGH	yes
PLAT-G-03	G	SKILL.md:307-310, 607-610 vs :585-593, 1109	Binary spelling flips. :1109 declares "ships an os binary (alias: objectstack)" — 800 lines after :307-310 used objectstack compile / OS_ARTIFACT_PATH=… objectstack dev; the sample package.json at :607-610 uses `objectstack dev	start	build	validatewhile the shell block at:685-687usesos dev --ui. (The real template package.jsonalso usesobjectstack …`, so both are valid — the cost is one lookup.)	REWRITE-AS-CONSTRUCT: move the alias sentence to first use	0
PLAT-G-04	G	package-wide grep	No retired-spelling residue found. Greps for M9, v5.0, OLD/NEW, deprecated, tableName, object-level namespace return nothing or a correct current statement: :322 "never set tableName"; :341 "the object-level namespace field is retired (ADR-0129 D3) and refused at load". The 8 hits for "silently"/"dropped"/"legacy" all describe live behaviour (warn-then-drop :228-234; the rejected NS__SHORT form :343).	— (clean)	0	—	HIGH	no

H — Evals

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-H-01	H	evals/README.md:1-49	Zero eval fixtures exist. :3 "This directory is reserved for future skill evaluation tests"; :11 "When implemented, evals will follow this structure"; :41 "⚠️ Not yet implemented — This is a placeholder for future development". It ships a tree of 10 filenames that do not exist (:13-29). Breakdown: :1-15 preamble 91 tk · :16-28 tree 268 tk · :30-49 Format/Status/Contributing 155 tk. Sibling objectstack-automation ships a real 1,329-token eval; objectstack-ui a JSON fixture. Widest eval gap in the bundle for a 24,278-token package.	DELETE :1-15 and :30-49; keep :16-28 as a checklist, retitled — its annotations are the package's real invariant list ("no phantom keys (driver:, workflows:, approvals:)", "blank is the whole catalog", "registerService throws on duplicate; no null placeholders", "no os studio / os data seed / os meta apply", "kernel.context is protected")	−246	① no ② yes ③ yes	HIGH	yes
PLAT-H-02	H	evals/README.md:22-28	If lifted verbatim into a rubric, :21 "test-hono-integration.md # @objectstack/hono vs plugin-hono-server; no adapter-*" would fail a correct answer that mounts the Hono fetch handler inside Next.js — which SKILL.md:394-397 explicitly endorses ("mount the Hono app (a web-standard fetch handler)").	REWRITE-AS-CONSTRUCT when promoting per H-01	0	① yes ② no ③ yes	MED	no

I — Size proportionality

id	dim	file:span	evidence	proposal	Δtok	gate ①②③	conf	human-floor
PLAT-I-01	I	package-wide	24,278 tk (12.9 % of the 187,840-token bundle; 3rd of 11) buys 2 of the top 5 real authoring tasks well, 1 partially, 2 not at all. Two of the largest sections cover surfaces with 0 app usages (composeStacks 195 tk; driver-as-plugin 382 tk) plus a duplicate 1,093-token orphan file. Summing the non-overlapping reductions above (B-01 1093, B-02 985 — which absorbs the rules/plugin-hooks-events.md share of C-05 and E-04 — B-03 276, B-04 25, B-06 129, B-07 174, C-01 190, C-02 180, C-03 126, C-04 45, C-05 residue 320, D-01 183, D-02 409, D-03 452, D-04 235, D-05 60, D-06 150, D-07 210, D-08 225, E-01 227, E-02 90, E-03 10, E-04 residue 10, F-05 165, F-06 100, H-01 246, A-01 10) gives ≈ 6,325 tk (26 %) removable without losing a decision, against +355 tk of additions for the five uncovered real patterns (A-02, F-01…F-04, F-07). Net ≈ −5,970 tk (−24.6 %). The structural defects (orphan file, 2-hop canonical reference behind a self-declared "compact pointer", hand-authored file in the generated references/ dir, duplicated "When to Use", 1,441 tk before the core construct) are independent of the percentage.	—	−5970	① yes ② yes ③ yes	HIGH	yes

---

Incidental falsehoods

None established. Two claim families were checked against the implementation while
auditing structure and both hold: every os command at SKILL.md:1117-1214
resolves to a real file in packages/cli/src/commands/ (including the negative
claims), and the references/_index.md pointers are generator-owned and
consistent with packages/spec/src/kernel/**.

One statement is imprecise rather than false, recorded because it sits in the
entry file: SKILL.md:79-80 says the blank template ships "One example object,
in-memory driver, Hono server". The template's objectstack.config.ts
contains neither — no DriverPlugin, no HonoServerPlugin; its plugins: array
holds three connector executors
(packages/create-objectstack/src/templates/blank/objectstack.config.ts:40-44),
and the memory driver + Hono server arrive from the CLI's own auto-registration
(packages/cli/src/commands/serve.ts:2687-2745). True of the running app, false
of the file the reader will open.

Human-floor list

• PLAT-B-01 — deleting rules/bootstrap-patterns.md removes a published file.
• PLAT-B-02 / PLAT-G-02 — deleting rules/plugin-hooks-events.md and moving
  references/plugin-hooks.md restructures the package and breaks
  skills/objectstack-data/rules/hooks.md:202, an inbound cross-package link.
• PLAT-B-05 — reordering SKILL.md.
• PLAT-C-01 / PLAT-C-02 — removing published capability text.
• PLAT-F-05 / PLAT-F-06 — retiring / reframing composeStacks() and the
  driver-as-plugin bootstrap.
• PLAT-G-01 — project → environment touches retired vocabulary.
• PLAT-H-01 — rewrites a published file's stated contract.
• PLAT-I-01 — the aggregate; every ratcheted file is at 0–4 tokens of
  headroom, so each addition (A-02, F-01…F-04, F-07, +355 tk) must land in the same
  file as its paying deletion or carry a maintainer ruling.

---

Generated by Claude Code