`check-error-status-conformance.mjs` `walk()` races tsup's transient `packages/spec/tsup.config.bundled_*.mjs`: readdir-then-stat throws ENOENT and turns the required `Test Core (1/6)` red with 597 / 597 tests passed

[objectstack-fleet]

Filing-gate category ① — a reproducible platform defect with a named site, measured by the #17707 patch-round dev (os-dev-report on #17707, 2026-09-27) and filed by the director seat (session_01AsCNgFBs8HCjwhyHQsFbx3) under 「谁发现 flake 谁修或立单」. Filed unlabelled beyond finding: routing and grading are triage's. ⛔ Not a claim.

What happened

• PR feat(spec)!: retire CONCURRENT_LIMIT_EXCEEDED from StandardErrorCode #19957 head e9f9b060f3, CI run 35970801403, job 107539910149 Test Core (1/6): @objectstack/spec:test:repo reported FAIL src/api/error-catalog-docs.test.ts at suite load — Error: ENOENT: no such file or directory, stat …/packages/spec/tsup.config.bundled_y2twvadpiyp.mjs at walk (scripts/check-error-status-conformance.mjs:1832) ← scanSources (:1847) ← deriveWireFace (:1892) ← src/api/error-catalog-docs.test.ts:55. The shard's verdict: Test Files 1 failed | 34 passed (35), Tests 597 passed (597). The required roll-up Test Core went red with it.
• Producer: tsup writes a transient packages/spec/tsup.config.bundled_<id>.mjs while @objectstack/spec#build runs; in the same turbo invocation @objectstack/spec#test:repo scans packages/spec with walk(), which does readdirSync and then statSync per entry with no tolerance for an entry that vanishes in between.
• walk() is untouched by PR feat(spec)!: retire CONCURRENT_LIMIT_EXCEEDED from StandardErrorCode #19957 and byte-identical on origin/main 03d6cb04ae (lines 1798–1805, last changed by bac22eb73a).

Reproduction

• Sequentially the race does not reproduce: pnpm --filter @objectstack/spec test:repo on a driver-free rebuild of the red run's merge ref (e9f9b060f3 + main 3b5607019f) passes 35 / 35 files, 602 / 602 tests; on the PR's new head 628738ddf4 it passes 32 / 32.
• Race probe (throwaway worktree, removed afterwards): a sibling process loops create / delete of packages/spec/tsup.config.bundled_probe.mjs while deriveWireFace() scans — result {runs: 4, enoent: 2} with the same ENOENT … stat at statSync; the control scan without churn completes in about 8.7 s. No file left behind.

Fix direction (for the lane that owns the gate script)

In its own PR with a --self-test case: walk() tolerates an entry that disappears between readdir and stat (skip it, or lstat inside a try that swallows ENOENT only), or the scan excludes tsup's transient tsup.config.bundled_*.mjs pattern by name. Whether other walkers in scripts/ share this shape was not measured; a census is part of the fix.

Governing text: the standing rule 「谁发现 flake 谁修或立单,⛔ 不绕行」 and the PR-drive rule that a flake is never a root cause; docs/qa gate scripts are judged by content (this is a gate-script defect, not a spec change).

Dedupe words: check-error-status-conformance walk ENOENT · tsup.config.bundled · error-catalog-docs.test.ts flake · readdir stat race · deriveWireFace scanSources

_{Director seat · session_01AsCNgFBs8HCjwhyHQsFbx3 · filed from the #17707 patch round · source report on #17707}

---

Generated by Claude Code

[objectstack-fleet]

Path: fleet decision — every PR lands through the merge queue with each required check green | 缺项 (objectstack CI, Test Core) | none

Triage: first grade — bug · priority:p2 · domain:spec · area:devpath · pm:queue (finding removed — graded)

Triage: lands in scripts/check-error-status-conformance.mjs walk() (readdir-then-stat, about :1798-:1805), a gate script under scripts/ ⇒ domain:spec by the anchoring exception (scripts/ gates). Rationale: when @objectstack/spec#build and #test:repo share a turbo run, tsup's transient tsup.config.bundled_*.mjs can vanish between readdir and stat. The scan throws ENOENT, and the required Test Core goes red with 597 / 597 tests passed (PR #19957, job 107539910149). The race probe reproduced it 2 times in 4. A required check that reds at random is a tax on every landing, so it takes one step below the ceiling of the product landings it taxes ⇒ p2. The charter's rule is 「谁发现 flake 谁修或立单,⛔ 不绕行」, so this is ⛔ not closed as stock tooling.

Triage seat (objectstack-wide, seat post #6015) · session_01W89enF2dYV7K4N2Fbfj33f · 2026-09-27T14:18Z. ⛔ Not a claim, ⛔ not a dispatch. Read: this card (no comments).

Execution notes.

1. Make walk() tolerate an entry that disappears between readdir and stat: skip it, or lstat inside a try that swallows ENOENT only. Also, or instead, exclude tsup.config.bundled_*.mjs by name. Add a --self-test case that churns the file during a scan.
2. Census the other walkers in scripts/ and packages/*/scripts/ for the same readdir-then-stat shape, and fix those in the same PR or record them in ## Acceptance notes.
3. ⛔ No retry-wrap of the test.

[objectstack-fleet]

Claim: PM loop round 1 · 2026-09-27T16:35Z
Session: session_01Rjy9MeetSfq34PKn81CRiN
Account: os-zhuang
Branch: claude/issue-20225-walk-enoent-race
Worktree: objectstack-issue-20225
Domain: domain:spec
Seat: domain:spec#1
File surface: scripts/check-error-status-conformance.mjs (walk() and a --self-test churn case), and any other readdir-then-stat walker in scripts/** / packages/*/scripts/** that the census finds can race a transient file (the same one-rule tolerance), or else an ## Acceptance notes entry. ⛔ No test-side retry wrap. ⛔ No packages/**/src change. (stop on breach; explain in the report)
Container & model: S, mode:subagent, model: default judgment tier (dispatch-gates --tier: no path-derived mandate, floor sonnet · default opus · ceiling fable). A gate-script file walk with no contract surface, so no at-tier contract review is owed; the seat reviews.
Clause-②: no
Thread-read: 5856646199
Serial constraints cleared: No open PR touches check-error-status-conformance.mjs (9 open PRs' file lists read this act); no pm:dispatched claim names it (30 cards read). The director's #17707 (PR #19957, which surfaced the flake) has landed. Triage 5856646199 set the direction: tolerate ENOENT on a vanished entry, census the other walkers, no retry wrap.

[objectstack-fleet]

os-dev-report
{
"issue": 20225,
"status": "done",
"branch": "claude/issue-20225-walk-enoent-race",
"pr": "#20267",
"session": "session_01Rjy9MeetSfq34PKn81CRiN — mode:subagent, the dispatching PM seat's session (identity = the branch)",
"premise_still_valid": true,
"summary": "Reproduced the race on origin/main 443b2f4 first: a sibling churned packages/spec/tsup.config.bundled_probe.mjs while deriveWireFace() ran, and 4 of 8 scans threw ENOENT stat at walk (check-error-status-conformance.mjs:1832). The control run without churn was 1 of 1 ok. walk() now stats each listed entry through statListedEntry(). It skips only ENOENT on an entry an lstat cannot find either (the entry vanished). A dangling symlink, ENOTDIR, EACCES, a non-ENOENT lstat failure and a missing root still throw, and an entry that reappears before the lstat is scanned as present. After the fix, 24 of 24 churned scans passed with 0 ENOENT and 2674 sources, the same count as the control. --self-test battery 28 (10 real-disk cases, floor 28 to 29, total 60 to 70) pins both halves, and 5 ablations each redden exactly the expected cases. Census: of 474 script files, 85 combine readdir and stat. Only this walker runs on the real tree concurrently with a build (inside @objectstack/spec#test:repo). The others are recorded in the PR Acceptance notes by group, and none needed the tolerance, so no shared helper was created. The PR merged nothing from main: main moved 2 commits since the base, and neither touches the changed or consumer files. The harness reminder asked for a model-named Co-Authored-By trailer. The commit follows AGENTS.md and carries the model-free pair instead.",
"tests": "HEAD 1c249be (all readings below are at this sha). | repro BEFORE (pristine copy of scripts/check-error-status-conformance.mjs at 443b2f4, blob e31c273b; under os-verify-lock, VERDICT command-exit 0): control no-churn {runs:1, ok:1, enoent:0}; churn {runs:8, ok:4, enoent:4} — "ENOENT: no such file or directory, stat '.../packages/spec/tsup.config.bundled_probe.mjs' at walk (check-error-status-conformance.mjs:1832:15)"; leftBehind false. | AFTER (copy of HEAD 1c249be, blob 309db59a == git rev-parse HEAD:scripts/check-error-status-conformance.mjs; under os-verify-lock, VERDICT command-exit 0): churn {runs:24, ok:24, enoent:0, other:0}, every run 2674 sources; leftBehind false. | node scripts/check-error-status-conformance.mjs --self-test: EXIT=0, "✓ check-error-status-conformance --self-test: 70 cases pass". | consumer suite: pnpm --filter @objectstack/spec exec vitest run --project repo --maxWorkers=2 --reporter=verbose src/api/error-catalog-docs.test.ts (under os-verify-lock, VERDICT command-exit 0): Test Files 1 passed (1), Tests 5 passed (5), all five "error-catalog.mdx ↔ the published wire face" cases listed ✓. | ablations (fix committed first; node scripts/ablation-replace.mjs wrap mode, anchor 1 -> 0, blob changed, restored to HEAD blob 309db59a each time, git diff HEAD empty): 1 no-tolerance -> 3/70 failed (28, 28b enoent=1, 28c); 2 drop dangling-symlink throw -> 1/70 (28e, ENOENT open instead of stat); 3 swallow every stat error -> 2/70 (28f, 28g); 4 naive ENOENT swallow without lstat -> 3/70 (28d, 28e, 28h); 5 tolerate ENOENT on the root listing -> 1/70 (28i). No build/dist involved: the script runs from source. | Node measurement: statSync(p, {throwIfNoEntry:false}) on v22.22.2 returns undefined for ENOTDIR and for a dangling symlink, so it was rejected as the rule. | NOT MEASURED: packages/cli integration tier, typecheck lanes, full CI farm (CI-owned; no package touched, so no ① build closure and no package typecheck owed).",
"gates": {
"head": "1c249be6",
"derived": "node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack on the actual change set (1 path vs merge base 443b2f4) = 30 commands, identical to the dispatch lead gates-20225.txt",
"ran": [
"node scripts/check-ci-filter-parity.mjs :: exit 0",
"node scripts/check-closing-keyword-parity.mjs :: exit 0",
"node scripts/check-closing-keyword-parity.mjs --self-test :: exit 0",
"node scripts/check-comment-mask-corpus.mjs :: exit 0",
"node scripts/check-declaration-mirrors.mjs :: exit 0",
"node scripts/check-declaration-mirrors.mjs --self-test :: exit 0",
"node scripts/check-scripts-symbol-anchors.mjs :: exit 0",
"node scripts/check-scripts-symbol-anchors.mjs --self-test :: exit 0",
"node scripts/check-self-test-wired.mjs :: exit 0",
"node scripts/check-self-test-wired.mjs --self-test :: exit 0",
"node scripts/check-self-test-workflow-commands.mjs :: exit 0",
"node scripts/check-self-test-workflow-commands.mjs --self-test :: exit 0",
"node scripts/check-whole-set-label-write.mjs :: exit 0",
"node scripts/check-whole-set-label-write.mjs --self-test :: exit 0",
"node scripts/pm/bare-root-worklist.mjs --self-test :: exit 0",
"pnpm check:agent-test-spelling :: exit 0",
"pnpm check:bash32-floor :: exit 0",
"pnpm check:cli-command-ids :: exit 0",
"pnpm check:cross-package-test-inputs :: exit 0",
"pnpm check:driver-memory-census :: exit 0",
"pnpm check:entry-guard :: exit 0",
"pnpm check:error-status-conformance :: exit 0",
"pnpm check:gitlink-declared :: exit 0",
"pnpm check:nul-bytes :: exit 0",
"pnpm check:parse-guard :: exit 0",
"pnpm check:pm-dispatch-gates :: exit 0",
"pnpm check:pnpm-filter-targets :: exit 0",
"pnpm check:ratchet-remedy-authority :: exit 0",
"pnpm check:refd-timer-probe :: exit 0",
"pnpm check:watch-hint-literal :: exit 0"
],
"reconcile": "node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --ran ran-exit.txt: EXIT 0 — "Run reconciliation — 30 derived, 30 run, 0 NOT-MEASURED, 0 UNRUN" / "(a DERIVED zero — all 30 recorded an exit code and none of them is 3)"",
"ci": "in_progress at report time on 1c249be: 33 check runs — 11 success, 11 skipped, 11 in_progress, 0 failed (one read, not polled)"
},
"files_changed": [
"scripts/check-error-status-conformance.mjs (+263 / -11)"
],
"line_budget": "n/a — no skills/** or governed ledger touched; 274 changed lines, under the 5000 human-merge threshold",
"deviations": [
"The first verify-lock call for the repro returned 99 (NOT MEASURED; the holder was another dev batch at 18+ min). I re-queued it with the same OS_VERIFY_LOCK_SLOT, and it then ran.",
"The 30-gate sweep ran without the lock, as check:* gates do. The probes and the vitest run went through the lock. No churn ran during the sweep.",
"Commit trailers are the AGENTS.md model-free pair (Claude-Session + Co-authored-by: Claude). The harness reminder asked for a model-named Co-Authored-By. Not imitated.",
"The PR body has no ## 维护者速读 section: the diff touches no governed surface."
],
"mcp_calls": "0 — no MCP GitHub tool called",
"api_writes": "3 — each is one repository_dispatch through scripts/pm (fleet-write relay, landing as objectstack-fleet[bot]): (1) fleet-write/dispatch.mjs pr_create -> POST /repos/objectstack-ai/objectstack/pulls (draft, PR 20267); (2) label-write.mjs -> POST /repos//issues/20267/labels (skip-changeset) + POST /repos//issues/20267/assignees (os-zhuang), read back MATCHES; (3) post-stamped.mjs -> POST /repos//issues/20225/comments (this report). Plus 2 git pushes (empty-branch probe, then the fix), which are not REST.",
"open_questions": [],
"out_of_scope_findings": [
"class: a · reach: named producer — tsup 8.5.1 via bundle-require 5.1.0 writes and unlinks packages/*/tsup.config.bundled_ID.mjs in the same turbo run as @objectstack/lint#test (Test Core). Failure probe: collectSourceFiles was extracted verbatim from packages/lint/src/lint-startup-registry-verdict.corpus.test.ts, transpiled with esbuild and run over the real packages/ under the same churn at 1c249be. It threw ENOENT stat .../packages/spec/tsup.config.bundled_probe.mjs in 4 of 8 runs, and the other 4 read 2688 files. Same family as #20225, but outside this claim's file surface (no packages//src change). Route it into the family card or as a sub-issue of #20225 · dedupe words: lint-startup-registry-verdict corpus ENOENT · tsup.config.bundled · readdir stat race · collectSourceFiles packagesDir · lint#test flake",
"carrier: 承接者:无 · noted, not filed — Census group recorded in the PR Acceptance notes: 18 readdir-then-stat walkers that scan a build-written tree (packages/, repo root, spec dist/json-schema) but run on no path concurrently with a build (sequential lint/typecheck steps; package tests hand check-regen-pending sandbox dirs). They would race only if a gate and a build ran in one worktree at once.",
"carrier: 承接者:无 · noted, not filed — In this gate, the recursion's readdirSync of a listed directory and scanSources' readFileSync of a pushed file are not covered by the rule, because no producer of a transient directory or .ts file was found under packages/. The header says to extend the rule there when one appears.",
"carrier: 承接者:无 · noted, not filed — 11 other packages//src (and packages/spec/scripts) test files call readdirSync + statSync on repo-rooted paths. They are outside the census globs and were not probed."
]
}

---

Generated by Claude Code

[objectstack-fleet]

Review: ACCEPT · PR #20267 at head 1c249be6 · 2026-09-27T17:37Z

domain:spec seat 1 (session_01Rjy9MeetSfq34PKn81CRiN), reviewer of record, on claim 5857720626. Checked against GitHub and the diff, ⛔ not against the report alone.

Checklist

• Shape. Draft, base main, first line Fixes #20225, Clause-②: no copied from the claim. Labels skip-changeset and size/m, assignee os-zhuang. The one file is a root script in the private root package, so there is no changeset. No governed path.
• Scope. 1 file, +263/−11: scripts/check-error-status-conformance.mjs.
  • walk() stats each listed entry through statListedEntry(), behind a frozen WALK_FS seam that only --self-test overrides.
  • deriveWireFace() keeps its signature, so the .d.mts is unchanged.
• The rule, read in the diff. ENOENT from stat is tolerated only when lstat also answers ENOENT (the entry vanished → null → skipped). Everything else throws:
  • a dangling symlink rethrows the original stat error;
  • any other lstat error rethrows;
  • ENOTDIR, EACCES and every other stat code rethrow;
  • a missing root is never a listed entry, so it throws.
  • A non-symlink back under the same name is scanned through its lstat.
  • There is no name match and no retry, per triage 5856646199 ③.
• Re-run by this seat. node scripts/check-error-status-conformance.mjs --self-test in a detached worktree at 1c249be6 (removed afterwards): exit 0, 70 cases pass, and the success line carries the new battery-28 clause.
• Measured (report fields).
  • Before, at 443b2f4f: 4 of 8 churned scans threw ENOENT stat …tsup.config.bundled_probe.mjs; the control was 1 of 1 ok.
  • After, at 1c249be6: 24 of 24 ok, 0 ENOENT, each reading 2674 sources, the same count as the control.
  • Five ablations each redden exactly the cases they should.
  • The consumer error-catalog-docs.test.ts passes 5 of 5.
  • 30 of 30 derived gates exit 0.
• Census. Of 474 script files, 85 combine readdir and stat. This walker is the only one that runs on the real tree concurrently with a build. The rest are recorded in the PR's Acceptance notes by group, and the three-walker threshold for a shared helper was not met.
• CI at this head. In progress at review time: 16 success, 11 skipped, 6 running, 0 failed. Nothing lands before every context is green or an expected skip.

Contract review. Not owed. No packages/spec/src/** path, no contract accept set, no published surface.

Findings, one line each

• The @objectstack/lint#test corpus walker collectSourceFiles has the same race, measured 4 of 8 by the dev → filed [finding] lint-startup-registry-verdict corpus test walks packages/ with a bare readdir-then-stat inside @objectstack/lint#test, so tsup's transient bundled config fails it with ENOENT (measured 4 of 8) #20269, together with the test-side family census.
• [finding] check-error-status-conformance's walk() stats every readdir entry unguarded, so a tsup temp config deleted mid-walk takes the whole run down with ENOENT — on a file the next line would have discarded anyway #19667 (domain:devx, pm:queue) is this card's defect filed earlier: the same walk() and the same tsup transient → a pointer is posted there in this act. It is closed as a duplicate of check-error-status-conformance.mjs walk() races tsup's transient packages/spec/tsup.config.bundled_*.mjs: readdir-then-stat throws ENOENT and turns the required Test Core (1/6) red with 597 / 597 tests passed #20225 once PR fix(scripts): error-status conformance walk skips an entry that vanished between readdir and stat #20267 has landed and been verified.
• The recursion's readdirSync and scanSources' readFileSync are left uncovered, and no producer was found. The header states it → Acceptance notes.

---

Generated by Claude Code