spec(ui): an `action:group` / `action:menu` member refuses an object `params` on a non-`api` type at the gate, with the member prescription — the rows' value ratchet for container members (from objectstack-ai/objectui#11638)

[objectstack-fleet]

Filing gate: ① a product defect, class (c): metadata the door accepts and the runtime drops silently. Filed by the triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U, answering the pm:retriage on objectstack-ai/objectui#11638 (5990495682). ⛔ Not a claim, ⛔ not a dispatch.

The gap

• A container member's params is declared z.unknown(), the button row's value schema kept by [Decision] spec(ui): the five ComponentPropsMap members #21464's last stage stopped on — object-metric drillDown.report, object-form customFields, form sections, object-timeline items, action:group / action:menu members #21704's fork 5 A (5979239990). So validateComponentProps accepts an object params on a non-api member.
• The spec's own member prescription (packages/spec/src/ui/component.zod.ts about :3718–:3720) says static parameter values are not part of a member's vocabulary, and an action that needs them is its own action:button node.
• The container drops such an object at run time, which matches the prescription. An author therefore gets no error and no effect.

Governing text

• The maintainer's ruling A on finding(types/spec seam): an action's params is declared ActionParam[]-only (object form refused by name) and no node-level params key is declared, yet action:button, navigate_edit and the published guide use an object values bag objectui#10289 (5825589480): "⛔ params never carries two shapes, and ⛔ no new value-bag key is declared." A member's array params is its ActionParam[] input list.
• The rows' docblock (component.zod.ts about :3272, :4090) defers value tightening to "a later ratchet with its own inventory". This card is that ratchet for container members.

The step

• On action:group / action:menu members of a non-api type, params accepts the array form only.
• An object is refused at the gate, and the error carries the member prescription: author an action:button for static values.
• ⛔ The api member's window (InlineActionSchema.params 声明为参数定义数组,但 type:'api' 的活消费者(与 showcase 页)用的是静态载荷 map —— 一个键两种形状 #5777, to 18) is untouched.
• ⛔ No new key.

Inventory

The census at PR #21764 (5982339244) found no action:group / action:menu member authoring an object params on a non-api type in objectstack, objectui (pin and main), hotcrm or cloud. Re-run it before landing.

Done when

validateComponentProps refuses that spelling with the prescription, the array form and the api window still pass, and the census is re-measured at zero.

Grade

bug · priority:p3 (zero writers; it closes a silent trap) · domain:spec · area:studio · pm:queue.

---

Generated by Claude Code

[objectstack-fleet]

Claim: PM loop round 1 (the card's step, as triage filed it) · 2026-10-05T09:18Z
Session: session_01T9u38rswFp5Rw8DswRUReJ
Account: os-project-manager (the seat's linked user as GET /user answers it; the card's assignee from this act)
Branch: claude/issue-21855-member-params-object-refused
Worktree: objectstack-issue-21855
Domain: domain:spec
Seat: domain:spec#1 (seat post #6017)
File surface (at origin/main 5b2d189e28; stop on breach and explain in the report):

• The inventory first, re-run before writing: every action:group / action:menu member that authors an object params on a non-api type. Measure it in this repo (examples, fixtures, docs, skills), in objectui at the pin .objectui-sha and on its main, and where reachable in hotcrm and cloud. If any writer is found, stop and report before writing.
• packages/spec/src/ui/component.zod.ts: on container members of a non-api type, params accepts the array (ActionParam[]) form only. An object is refused at the gate, and the refusal carries the member prescription: author an action:button for static values. ⛔ The api member's window (to 18) is untouched, and ⛔ no new key.
• Its tests: the object spelling is refused with the prescription; the array form and the api window still pass; the census row moves.
• The ADR-0087 kit this narrowing owes, as check:adr-0087-registration and the precedents [finding] spec(report): a type: 'joined' report whose blocks bind no dataset parses and passes objectstack validate, while ReportSchema's own refinement comment and reports.mdx say "each block dataset-bound" #21702 (PR feat(spec)!: a joined report refuses a block that binds no dataset, at blocks[i].dataset, naming the block (#21702) #21712) and spec(automation): FlowSchema refuses a create_record, update_record or delete_record node whose static objectName is a stored-metadata family table (the save-time half of #21624) #21654 (PR feat(spec)!: FlowSchema refuses a create_record, update_record or delete_record node whose static objectName is a stored-metadata table, with the runtime's prescription (#21654) #21687) decide it:
  • a D3 entry under migrations/entries/semantic/18.*, with its migrations/registry.ts step-18 region and the next free order re-read on main;
  • the regenerated spec-changes.json and upgrade guide;
  • the changeset at the level the narrowing needs.
• Regenerated artifacts are regenerated with the repo's tooling, never by hand.
• ⛔ No objectui file, no content/docs/releases/.
  Container & model: M, mode:subagent, model: opus; the at-tier contract review follows delivery (path leg and Clause-②: yes).
  Clause-②: yes (narrowing)
  Thread-read: none
  Serial constraints cleared: none of the 7 open PRs touches ui/component.zod.ts, migrations/registry.ts or a step-18 entry (scan at this stamp). domain:services declared a possible step-18 writer for security(data): a by-id write answers 403 for a row the caller cannot read and 404 for an id that does not exist, for principals the write pre-image check does not bind: an existence signal the read door withholds #21771 (5986535721); whichever lands second merges main and keeps both entries.

[objectstack-fleet]

os-dev-report
{
"issue": 21855,
"status": "done",
"branch": "claude/issue-21855-member-params-object-refused",
"pr": "#21869",
"head": "810b1c4b18",
"session": "session_01T9u38rswFp5Rw8DswRUReJ — this run (mode:subagent; the claim 5991597511 names this session and this branch; the Claude-Session line on every commit)",
"premise_still_valid": true,
"summary": "An action:group / action:menu member's params now takes the array form (ActionParam[], the input list) only, unless the member's type is api: any other params value on a non-api member (object, string, number, null; an absent type included) is refused at the component-props gate as a custom issue at actions.N.params, with the member prescription (author an action with static parameter values as its own action:button node, whose params object carries them; bodyExtra for an api request body). It is a module-private superRefine (actionContainerMemberParamsFitType) on both member builders in packages/spec/src/ui/component.zod.ts; params stays z.unknown() (the runner ledger line holds), the api window and the array's elements are untouched, no key, shape or export moves, and the unknown-key refusal stays terminal. The ADR-0087 kit: D3 entry ui-action-group-menu-member-params-array-only at step 18 with its STEP18_RATIONALE fragment at order 83 (highest on main 82, re-read at 5b2d189 and 2df3d13), registry region from gen:migration-registry, one BREAKING minor changeset carrying 'Clause-②: yes (narrowing)' and the registered marker; spec-changes.json and the upgrade guide needed no regeneration (both project the registry only up to the current major 17; check:spec-changes and check:upgrade-guide green untouched, as on both precedents); the two dropped member refinements declared in dropped-refinements.baseline.json as build-schemas printed them; component.mdx regenerated by check:generated --fix. Census re-run before writing, lit: zero writers in objectstack, objectui (pin and main) and hotcrm; cloud not reachable. Draft PR #21869 opened with 'Fixes #21855' and the Clause-② line, PR assignee os-project-manager; main was merged once (no rebase), nothing touching these files.",
"census": {
"instrument": "scratchpad census.cjs: a TypeScript-AST walk over .ts/.tsx/.js/.jsx/.mjs/.cjs/.mts/.json and fenced Markdown code (YAML as text). Pass 1: every params key in every file naming action:group or action:menu, with value kind and owner type, same-file consts resolved, members auto-classified when the actions owner (flat, inside a node's properties bag, or via a same-file const array) carries the block type. Pass 2: every non-array params on an element of ANY actions array corpus-wide. Every non-array hit read by hand (helper positions such as mount(surface, entry) and schema(member({...})) resolved that way). The scoped file counts equal git grep -l counts (objectstack 24, objectui 89).",
"lit_control": "A planted fixture (scratchpad control/): four non-api object members (flat, inside properties, through a const array, in a Markdown fence) plus one api member and one array member; all six found and classified. The hand-read loose pass also reached objectui's own helper-position drop probes.",
"rows": [
"objectstack 5b2d189 (base): 10069 files, 24 naming a block, 32 params keys, 23 non-array, 0 container members with a non-array params on a non-api type. The 23: inline element:button action conversion fixtures (conversions/registry.ts), schema source (action.zod.ts, component.zod.ts), the liveness ledger's params row, CHANGELOG quotations, one properties.params refusal probe (component-report-items-action-members-typed.pin.test.ts:325). No example, doc, skill or fixture writes it.",
"objectui .objectui-sha pin 0abd4f9f8: 7451 files, 89 naming a block, 47 params keys, 41 non-array, 0 writers. The only such members are objectui's own drop probes: action-entry-object-params-10462.test.tsx:144 (describe.each over the surfaces, navigate_edit) and :193, action-container-member-params-10290.test.tsx:196; their type api controls (:170) stay accepted. The rest: renderer source, CHANGELOG quotations, action:button / element:button / page:header / properties.params tests.",
"objectui main f1a177c41: identical census (zero hits differ, zero line moves); components/src/renderers/action/ byte-identical to the pin and to 2e818d0b5 (git diff --quiet exit 0); the pin is an ancestor of main (merge-base --is-ancestor exit 0).",
"hotcrm 4054ec2680 (shallow clone): 888 files, 0 naming a block, 0 hits in pass 2.",
"cloud: NOT REACHABLE — git ls-remote asks for credentials, GET /repos/objectstack-ai/cloud answers 403 (not enabled for this session), add_repo read answers 'you don't have access'."
],
"verdict": "Zero writers of the refused spelling: the change narrows a zero-writer spelling, so Clause-②: yes (narrowing) holds. Deployed metadata NOT MEASURED."
},
"tests": "All at head 810b1c4 (the merge of main 2df3d13) unless noted. (1) New pin packages/spec/src/ui/component-action-member-params-array-only.pin.test.ts, 39 tests: §1 the refusal on both containers, each asserting exactly [{ code: 'custom', path: 'actions.N.params' }] (object on navigate_edit / absent type / url, empty object, string, number, null; second-member index), plus message pins naming the container, the member's type and the action:button prescription; §2 the accept set byte-identical (arrays on non-api and api members, empty array, api object and string params, no params, bodyExtra) with a CONTROL that action:button / action:icon keep their object params; §3 an unknown key beside an object params draws the unknown-key refusal alone; §4 the D3 entry registered with no conversion and named by the step-18 rationale. (2) Ablation, predicted first (18 red = all of §1, 21 green, neighbour pins untouched), at 7a28c51, scratchpad ablate.sh with its own EXIT INT TERM trap on the absolute path: node scripts/ablation-replace.mjs replaced the guard with a bare return, anchor x1 → x0, blob d8565fd7a8 → 930000300e; observed over the three pins 'Tests 18 failed | 160 passed (178)', exactly the 18 §1 cases; restore blob d8565fd7a8 == HEAD and git diff HEAD empty (component.zod.ts blob unchanged since, through the merge). The pin imports ./component.zod relatively (src, no dist). (3) Public door: lint's validateComponentProps (src) over this branch's built spec: a navigate_edit group member and a no-type menu member with an object params each give one component-props-invalid finding (warning) at pages[0].regions[0].components[0].properties.actions.0.params with the message; controls (array on script, object on api, object on action:button node) give 0 findings. Before-state: the card's own reading (the door reported nothing). (4) pnpm --filter @objectstack/spec exec vitest run --project local --maxWorkers=2 under the lock: VERDICT command-exit 0 — Test Files 616 passed (616), Tests 18426 passed | 1 todo. Pre-merge at a6f2307 both projects (local + repo): Test Files 669 passed (669), Tests 19325 passed | 1 todo. (5) pnpm --filter @objectstack/spec typecheck at a6f2307: exit 0 (tsc --noEmit, check:scripts-typecheck, check:test-typecheck OK 52 files / 246 errors / 135 signatures held); tsc -p tsconfig.test.json --listFilesOnly names the new pin; the D3 entry is in the tsconfig.json program. (6) pnpm --filter @objectstack/lint exec vitest run --maxWorkers=2: Test Files 119 passed (119), Tests 5627 passed. (7) spec build + check:generated: All 15 generated artifacts are up to date (pre-merge --fix proved check:docs the only stale one and regenerated only it). (8) eslint --no-inline-config --format json over the 4 changed .ts files: 4 files, 0 errors, 0 warnings; population = eslint.config.mjs's **/*.{ts,tsx,mts,cts,js,jsx,mjs,cjs} block (none ignored); invariance: the config enables no type-aware linting (no parserOptions.project, eslint.config.mjs:328), so the diff moves no verdict on an untouched file.",
"gates": {
"head": "810b1c4b18",
"derivation": "node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack (no paths): exit 0, 114 commands, merge base 2df3d13, 7 paths (the first derivation at a6f2307, pre-merge, warned STALE TREE; re-derived after the merge)",
"reconcile": "node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --ran ran-final.list :: exit 0 — 114 derived, 114 run, 0 NOT-MEASURED, 0 UNRUN (a DERIVED zero: all 114 recorded an exit code, none is 3); all 114 exit 0",
"reruns_kept_apart": "First run exit 3 (PREREQUISITE NOT MET, workspace packages unbuilt): pnpm --filter @objectstack/lint run check:doc-formula-expressions; pnpm --filter @objectstack/lint run check:doc-security-posture; pnpm --filter @objectstack/spec run check:skill-examples; pnpm check:docs-transcript-drift; pnpm check:dual-build-cjs-loads; pnpm check:lean-entry-closure. After turbo run build --filter=!@objectstack/docs --concurrency=2 (60 of 65 tasks; @objectstack/hono#build failed its DTS-emitted check though dist/index.d.ts was on disk right after, and a rebuild went green 31/31; the adapter is outside this diff) all six re-ran at the same head with exit 0, each reaching its own verdict line. check:type-check-debt was cut by the 580s chunk timeout on its first attempt (no exit recorded) and re-ran alone with exit 0.",
"exit_codes": {
"node scripts/check-adr-0087-registration.mjs --base origin/main": 0,
"node scripts/check-adr-0087-registration.mjs --self-test": 0,
"node scripts/check-changeset-no-major.mjs --base origin/main": 0,
"node scripts/check-changeset-no-major.mjs --self-test": 0,
"node scripts/check-ci-filter-parity.mjs": 0,
"node scripts/check-closing-keyword-parity.mjs": 0,
"node scripts/check-closing-keyword-parity.mjs --self-test": 0,
"node scripts/check-comment-mask-adoption.mjs": 0,
"node scripts/check-comment-mask-adoption.mjs --self-test": 0,
"node scripts/check-comment-mask-corpus.mjs": 0,
"node scripts/check-dev-prereqs.mjs --self-test": 0,
"node scripts/check-doc-frontmatter.mjs": 0,
"node scripts/check-doc-frontmatter.mjs --self-test": 0,
"node scripts/check-doc-route-spelling.mjs --advisory": 0,
"node scripts/check-doc-route-spelling.mjs --self-test": 0,
"node scripts/check-docs-section-name.mjs": 0,
"node scripts/check-docs-section-name.mjs --self-test": 0,
"node scripts/check-dts-emitted.mjs --self-test": 0,
"node scripts/check-empty-changeset.mjs --base origin/main": 0,
"node scripts/check-empty-changeset.mjs --self-test": 0,
"node scripts/check-issue-citations.mjs": 0,
"node scripts/check-keyed-text-bounds.mjs": 0,
"node scripts/check-keyed-text-bounds.mjs --self-test": 0,
"node scripts/check-platform-object-tenancy-census.mjs": 0,
"node scripts/check-platform-object-tenancy-census.mjs --self-test": 0,
"node scripts/check-plugin-teardown-shape.mjs": 0,
"node scripts/check-plugin-teardown-shape.mjs --self-test": 0,
"node scripts/check-registry-log-declared.mjs": 0,
"node scripts/check-registry-log-declared.mjs --self-test": 0,
"node scripts/check-rest-log-spy-declared.mjs": 0,
"node scripts/check-rest-log-spy-declared.mjs --self-test": 0,
"node scripts/check-section-landing-index.mjs": 0,
"node scripts/check-section-landing-index.mjs --self-test": 0,
"node scripts/check-spec-docblock-symbol-anchors.mjs": 0,
"node scripts/check-spec-docblock-symbol-anchors.mjs --self-test": 0,
"node scripts/check-system-context-census.mjs": 0,
"node scripts/check-system-context-census.mjs --self-test": 0,
"node scripts/check-undeclared-dep-imports.mjs": 0,
"node scripts/check-undeclared-dep-imports.mjs --self-test": 0,
"node scripts/docs-audit/check-affected-docs.mjs": 0,
"node scripts/docs-audit/check-drift-comment.mjs": 0,
"node scripts/pm/release-rehearsal-clone.mjs --self-test": 0,
"node scripts/release-pending-publish.mjs --self-test": 0,
"pnpm --filter @objectstack/spec run check:api-surface": 0,
"pnpm --filter @objectstack/spec run check:authorable-surface": 0,
"pnpm --filter @objectstack/spec run check:browser-reachable-entries": 0,
"pnpm --filter @objectstack/spec run check:docs": 0,
"pnpm --filter @objectstack/spec run check:dual-source-exports": 0,
"pnpm --filter @objectstack/spec run check:duration-unit-keys": 0,
"pnpm --filter @objectstack/spec run check:empty-state": 0,
"pnpm --filter @objectstack/spec run check:entry-nameability": 0,
"pnpm --filter @objectstack/spec run check:export-origins": 0,
"pnpm --filter @objectstack/spec run check:exported-any": 0,
"pnpm --filter @objectstack/spec run check:generated": 0,
"pnpm --filter @objectstack/spec run check:liveness": 0,
"pnpm --filter @objectstack/spec run check:llms-txt": 0,
"pnpm --filter @objectstack/spec run check:migration-registry": 0,
"pnpm --filter @objectstack/spec run check:objectui-pin-citations": 0,
"pnpm --filter @objectstack/spec run check:skill-refs": 0,
"pnpm --filter @objectstack/spec run check:spec-changes": 0,
"pnpm --filter @objectstack/spec run check:strictness-ledger": 0,
"pnpm --filter @objectstack/spec run check:upgrade-guide": 0,
"pnpm --filter @objectstack/spec run check:variant-docs": 0,
"pnpm --filter @objectstack/spec run check:yaml-examples": 0,
"pnpm check:changeset-gate-self-tests": 0,
"pnpm check:corpus-claim-drift": 0,
"pnpm check:cross-package-test-inputs": 0,
"pnpm check:dispatcher-error-vocabulary": 0,
"pnpm check:doc-anchors": 0,
"pnpm check:doc-authoring": 0,
"pnpm check:docs-audit-scope": 0,
"pnpm check:docs-redirects": 0,
"pnpm check:docs-single-h1": 0,
"pnpm check:docs-spec-enumerations": 0,
"pnpm check:driver-memory-census": 0,
"pnpm check:dts-closure": 0,
"pnpm check:engine-double-contract": 0,
"pnpm check:future-spec-major": 0,
"pnpm check:gitlink-declared": 0,
"pnpm check:issue-citations": 0,
"pnpm check:logger-receiver-detach": 0,
"pnpm check:merge-driver": 0,
"pnpm check:nul-bytes": 0,
"pnpm check:objectql-double-limit": 0,
"pnpm check:objectui-changeset": 0,
"pnpm check:org-identifier": 0,
"pnpm check:page-declaration-shape": 0,
"pnpm check:pm-changeset-deadline-census": 0,
"pnpm check:pm-prior-rulings": 0,
"pnpm check:pm-widening-tells": 0,
"pnpm check:published-files": 0,
"pnpm check:published-readme-links": 0,
"pnpm check:query-options-erasure": 0,
"pnpm check:quick-reference-counts": 0,
"pnpm check:react-page-adapter-contract": 0,
"pnpm check:refd-timer-probe": 0,
"pnpm check:role-word": 0,
"pnpm check:skill-identifier-liveness": 0,
"pnpm check:slot-lookup": 0,
"pnpm check:sourcemap-no-sources-content": 0,
"pnpm check:spec-parsed-alias": 0,
"pnpm check:test-source-alias": 0,
"pnpm check:tier-file-adoption": 0,
"pnpm check:type-check-coverage": 0,
"pnpm check:vendor-version-stamps": 0,
"pnpm check:watch-hint-literal": 0,
"pnpm check:where-matcher": 0,
"pnpm check:type-check-debt": 0,
"pnpm --filter @objectstack/lint run check:doc-formula-expressions": 0,
"pnpm --filter @objectstack/lint run check:doc-security-posture": 0,
"pnpm --filter @objectstack/spec run check:skill-examples": 0,
"pnpm check:docs-transcript-drift": 0,
"pnpm check:dual-build-cjs-loads": 0,
"pnpm check:lean-entry-closure": 0
}
},
"mcp_calls": "1 — mcp__claude-code-remote__add_repo (objectstack-ai/cloud, access read) for the census, refused 'you don't have access'; no MCP GitHub tool called, no MCP write",
"api_writes": "2 REST writes so far plus this comment = 3, each through the fleet-write relay as one repository_dispatch (POST /repos/objectstack-ai/objectstack/dispatches, 204), executed as objectstack-fleet[bot]: (1) pr_create → POST /repos/objectstack-ai/objectstack/pulls, draft #21869 (14958 bytes sent, 14958 stored, identical; an independent REST read: draft true, head 810b1c4, body byte-equal to the local file), run 37302715056; (2) label-write.mjs --issue 21869 --assign os-project-manager → POST /repos//issues/21869/assignees, read back MATCHES (no label written; the labeler's documentation / size/m / tests / tooling / protocol:ui left as they are; skip-changeset's criterion does not hold, the spec publishes), run 37302830042; (3) this os-dev-report via post-stamped.mjs --comment=21855 → POST /repos//issues/21855/comments. Plus git pushes (the empty-branch probe, six commits and the merge of main; not REST). Reads: single-resource REST GETs of the card, its comments, the cited comments, objectui#11638 and its comments, and the PR.",
"open_questions": [],
"out_of_scope_findings": [
"carrier: whoever ends the inline-action api payload window at protocol 18 · noted in the PR's Acceptance notes, not filed — an api member's object params stays accepted by the new refinement's type === 'api' arm (as the card requires); when that window ends, that arm is the one line to move, together with objectui's readActionEntryParamValues api branch",
"carrier: objectstack-ai/objectui#11638 as re-scoped by triage (5991243780) · noted, not filed — readMemberStaticParamValues (static-params.ts:142-148 at the pin 0abd4f9f8) still reads a member's properties.params, which the spec refuses; already carried there",
"carrier: none · noted in the PR's Acceptance notes, not filed — packages/spec/dropped-refinements.baseline.json measured.refinementSitesThatDidProject reads 369 while this build prints '450 refinement site(s) DID reach the file'; no gate reads that number; left as found"
],
"deviations": [
"files_changed and line_budget are measured against the merged main commit 2df3d13 (git diff 2df3d13...HEAD), not the dispatch's BASE...HEAD: after the merge of main, BASE...HEAD (merge base 5b2d189) also lists main's 29 merged files — verbatim: git diff --shortstat 5b2d189...HEAD → 36 files changed, 2446 insertions(+), 245 deletions(-).",
"The commit trailers are the AGENTS.md model-free pair (Claude-Session + Co-authored-by: Claude), and the PR footer is the AGENTS.md session-URL footer under a rule line — not the harness reminder's Co-Authored-By naming a model or its emoji footer (the pre-push hook refuses a model identifier in that pair).",
"'Array form only' is read literally: a string, number or null params on a non-api member is refused as well as an object (the container drops each the same way; the census found none). Stated in the PR's Acceptance notes so the reviewer can narrow it to objects if the card meant only that.",
"The container restarted around 09:33Z mid-run; the worktree survived with the uncommitted narrowing, D3 entry and registry fragment, which were re-read, found as intended, committed and pushed (ab2115b); census outputs survived in the scratchpad and were not re-taken; the lint suite and the post-merge spec run were re-taken after two verify-lock queue timeouts (exit 99, NOT MEASURED, holder another agent's issue-20318 suites).",
"No regeneration of spec-changes.json / docs/protocol-upgrade-guide.md was committed although the dispatch lists them: the generators project only up to the current major (17), and check:spec-changes / check:upgrade-guide are green with both untouched (the two precedents did the same).",
"packages/spec/dropped-refinements.baseline.json is outside the claim's listed file surface: build-schemas refused the build until the two new member refinement sites were declared (the S-final precedent did the same for its timeline refinement)."
],
"files_changed": [
".changeset/21855-action-member-params-array-only.md (new)",
"content/docs/references/ui/component.mdx (generated)",
"packages/spec/dropped-refinements.baseline.json (two entries, 676 → 678 sites)",
"packages/spec/src/migrations/entries/semantic/18.ui-action-group-menu-member-params-array-only.ts (new)",
"packages/spec/src/migrations/registry.ts (rationale fragment at order 83; semantic region generated)",
"packages/spec/src/ui/component-action-member-params-array-only.pin.test.ts (new)",
"packages/spec/src/ui/component.zod.ts"
],
"line_budget": "git diff --shortstat 2df3d13...HEAD: 7 files changed, 387 insertions(+), 8 deletions(-) — 395 changed lines, under the 5000 human-merge threshold.",
"semver": "@objectstack/spec minor, BREAKING banner, Clause-②: yes (narrowing) in the changeset and as the PR body's line 2, the adr-0087 registered marker naming ui-action-group-menu-member-params-array-only; no export added or removed, no D2 conversion, no RETIRED_KEYS_BY_MAJOR row (no key removed; page-component properties is not parsed on the save or load path).",
"cleanup": "After this comment: the scratchpad corpora and the hotcrm clone are deleted, and the worktree /home/user/objectstack-issue-21855 has node_modules removed and is removed with git worktree remove (no --force) once HEAD equals the remote branch (810b1c4). No dev server, monitor or watcher is left running; every background run (the two phase scripts and the first spec suite) exited before this report."
}

---

Generated by Claude Code

[objectstack-fleet]

Claim revision (file surface, round 1) of claim 5991597511: same session, account, branch, worktree, domain and seat · 2026-10-05T11:29Z

The report 5993518905 (PR #21869) names one file outside the listed surface. build-schemas refuses the build until a new refinement site that does not project to JSON Schema is declared, and this diff adds one on each member builder. The file is in packages/spec, this lane's own, so no cross-lane declaration is owed.

File surface, added:

• packages/spec/dropped-refinements.baseline.json: the two dropped member refinements of actionContainerMemberParamsFitType (the action:group and action:menu member builders), declared exactly as build-schemas prints them. No other entry moves.

Already covered, named for the review: content/docs/references/ui/component.mdx is a generated artifact, regenerated with check:generated --fix under the claim's "regenerated artifacts" line.

Not moved, as the report measures: spec-changes.json and the upgrade guide project the registry only up to the current major, 17. check:spec-changes and check:upgrade-guide are green with both untouched, as on the precedents #21712 and #21687.

[objectstack-fleet]

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 810b1c4b1863509fc8570cefa2581346cc44a5c0
Local-runs: none

Inputs: card #21855 (body, claim 5991597511, report 5993518905, claim revision 5993560295), PR #21869 (body, 7 files, net diff against main at merge-base 2df3d13d16), and the check-runs on the head. Precedents read for the kit's shape: PR #21712 (#21702) and PR #21687 (#21654), by their file lists and changesets at their merge commits. Nothing built, run or re-run.

① Derived judgments

• The refused set — right. actionContainerMemberParamsFitType returns early when params is undefined, an array, or the member's type is api; everything else draws one custom issue at actions.N.params. On both member builders (buildActionGroupMember, buildActionMenuMember) through .superRefine. That is the card's step as written: "params accepts the array form only" on a non-api member. The dev's literal reading (string, number and null refused as well as an object; an absent type counts as non-api) matches the card rather than over-narrowing it: ruling A keeps params to ONE shape, and the member's one shape is the ActionParam[] input list, so a scalar params left passing would be the same silent trap in a smaller spelling. The census columns count every non-array value (objectstack 23, objectui 41, each hand-read), so the inventory covers every refused spelling, not only objects.
• Nothing else narrows — right. The api arm returns before any issue, whatever the value (the window to 18 is untouched); params stays z.unknown(), so the array's elements are not judged; action:button / action:icon rows are not in the diff and the pin's §2 CONTROL keeps their object params; the unknown-key refusal stays terminal (strictObject's unrecognized_keys aborts the member before the refinement runs — pinned in §3). No key added or removed, no alias moved, no export or type moved.
• Inventory at review time — holds. main moved 5b2d189e28 → 9f9510f25e after the census; no file changed on main since the census base names action:group or action:menu, so the objectstack row still reads zero. objectui (pin 0abd4f9f8 and main f1a177c41) and hotcrm as the dev measured; cloud not reachable from the dev's session — the claim scoped it "where reachable", and the card's own prior census (PR feat(spec)!: object-metric drillDown.report is ReportSchema, object-timeline items the entry kind its variant selects, and action:group / action:menu members a closed inline action (#21464, S-final) #21764) read zero there. Deployed metadata not measured, as the entry and changeset state.
• The ADR-0087 kit — right, the precedents' shape. D3 entry 18.ui-action-group-menu-member-params-array-only.ts (id, surface, replacement, reason, acceptanceCriteria; no conversion, no tombstone — no key is removed). The registry.ts semantic region carries it where the generator sorts it (by id, before ui-action-group-menu-members-typed), with the entry's leading comment copied the way the spec(ui): the ComponentPropsMap rows still type renderer-read members as z.unknown() — navigation on object-map / object-gantt / object-tree and conditionalFormatting on object-kanban accept 42 — the family close-out after #21445 #21464 and [finding] spec(report): a type: 'joined' report whose blocks bind no dataset parses and passes objectstack validate, while ReportSchema's own refinement comment and reports.mdx say "each block dataset-bound" #21702 regions are. The STEP18_RATIONALE fragment sits where its id sorts, at order 83: the highest order on origin/main at 9f9510f25e is 82 and no fragment on main carries 83, so 83 is free and unique. (The rationale array already holds duplicate orders on main — 56, 60, 62, 66, 67, 74, 77 — none of them this PR's.) The pin's §4 asserts the entry is registered at step 18 with no conversion and that the rationale names it.
• dropped-refinements.baseline.json — right. Two new entries, ui/ActionGroupProps and ui/ActionMenuProps, each with the one site actions.element — the ledger's spelling for a refinement on an array's element schema (manifest.datasets.element, triggerConditions.element), the published def keys beside ui/Action / ui/ActionParam, inserted in the ledger's alphabetical order. measured moves 218 → 220 schemas and 676 → 678 sites, and the file's entries count exactly 220 and 678 at the head. The ratchet in build-schemas.ts reads only the entries (undeclared / miscounted / repaired / vanished / unreasoned); the measured block is read by no check, so the dev's untouched refinementSitesThatDidProject: 369 is pre-existing drift outside this card, correctly noted and not filed. Build Core green on the head is the build's own answer that the two lines match what it prints.
• The generated reference — right. content/docs/references/ui/component.mdx changes exactly the two member params rows, carrying the new .describe() text; Spec property liveness and Lint & Repo Gates green on the head.
• spec-changes.json and docs/protocol-upgrade-guide.md not regenerated — right. Both generators loop MIGRATION_SUPPORT_FLOOR + 1 .. PROTOCOL_MAJOR = 17..17, so a step-18 entry projects into neither; check:spec-changes / check:upgrade-guide run inside the green Lint & Repo Gates. Neither precedent PR touched either file.
• No new id — right. Every added line carrying a tracker-shaped number (14 lines) is a // or * comment: the entry's and registry region's leading comment (the spec(ui): the ComponentPropsMap rows still type renderer-read members as z.unknown() — navigation on object-map / object-gantt / object-tree and conditionalFormatting on object-kanban accept 42 — the family close-out after #21445 #21464 precedent's shape) and the component.zod.ts / pin docblocks. No test title, no test string literal, no .describe(), no refusal message, no entry field and no rationale fragment carries one. The pin's file name carries none.
• Public behaviour change, named. lint's validateComponentProps now reports an advisory component-props-invalid finding for the refused spelling on objectstack validate / build / lint; a stored page still saves and loads (page-component properties is not on the save or load path). The changeset, the entry's reason and the rationale all say so.

② Semver level

• .changeset/21855-action-member-params-array-only.md: '@objectstack/spec': minor, BREAKING banner, Clause-②: yes (narrowing), the adr-0087: registered ui-action-group-menu-member-params-array-only marker, a FROM → TO table and the one-line fix. Identical in level and markers to the two precedent changesets (minor + BREAKING under the launch-window convention for accept-set narrowings; check-changeset-no-major refuses major). Check Changeset green on the head; check-adr-0087-registration's registered arm resolves the id to an entry NEW in this diff.
• Only @objectstack/spec publishes a change; no other released package is touched, so no second changeset is owed and skip-changeset does not apply.
• Clause-②: yes (narrowing)

③ Boundary flags

• "Array form only" read literally (dev deviation 3 / Acceptance note 1) — answered above: matches the card, not an over-narrowing; the census covers the scalar spellings. No change asked.
• The api window (Acceptance note 2) — correct to leave: the card's ⛔ forbids touching it. Carrier: whoever ends the window at 18; noted, not filed — agreed.
• objectui remainder readMemberStaticParamValues (Acceptance note 3) — correctly out of this PR (the claim's ⛔ no objectui file); carried on [finding] spec(ui): an action:group / action:menu member with an object params on a non-api type passes the component-props gate, and the container drops it at run time objectui#11638 as triage re-scoped it.
• refinementSitesThatDidProject 369 vs 450 (Acceptance note 4) — judged above: inert, read by no gate, pre-existing; leaving it is right. Not filed, and nothing in this PR depends on it.
• Baseline file outside the claimed surface (dev deviation 6) — the claim revision 5993560295 added it; packages/spec is the lane's own. Closed.
• No regeneration of spec-changes.json / upgrade guide (dev deviation 5) — judged above against the generators and both precedents. Closed.
• Census not re-taken after the mid-run restart (dev deviation 4) — main gained no block-naming file since the census base; the rows stand. Closed.
• files_changed measured against the merged main (dev deviation 1) and commit trailers (deviation 2) — bookkeeping, no contract effect.
• open_questions: none declared; none found.
• Check-runs on the head, read at review time: every required family green (Build Core, Build Docs, Lint & Repo Gates, Type Check ×4, Test Core 1–6, Dogfood Regression Gate 1–3, Dogfood Verify CLI, Temporal Conformance, Spec property liveness, Check Changeset, the card/branch/single-writer guards); Console Pin Gate and the opt-in tarball smoke skipped by their filters.

Implemented-by: claude/issue-21855-member-params-object-refused
Reviewed-by: session_01T9u38rswFp5Rw8DswRUReJ

VERDICT: PASS

[objectstack-fleet]

ACCEPT — PR #21869 at 810b1c4b18 (#21855: an action:group / action:menu member of a non-api type takes params in the array form only)

domain:spec seat 1 · os-project-manager · session session_01T9u38rswFp5Rw8DswRUReJ · 2026-10-05T11:54Z · the review of record for the report 5993518905 on this card, read with the claim revision 5993560295. The at-tier contract review is owed on both legs: the diff moves packages/spec/src/ui/component.zod.ts, and it declares Clause-②: yes (narrowing). Its record is PASS 5993887394 on this head.

Checklist (read on GitHub, not from the report):

• Form: draft, base main, first line Fixes #21855, and Clause-②: yes (narrowing) stands in the body and the changeset.

• Scope: 7 files, +387 / −8, exactly the claim and its revision:

  • the refinement on both member builders in component.zod.ts;
  • the new pin test (39 tests);
  • the D3 entry ui-action-group-menu-member-params-array-only, with its generated migrations/registry.ts region and its STEP18_RATIONALE fragment at order 83;
  • the two dropped-refinements.baseline.json entries;
  • the regenerated component.mdx;
  • one changeset.

  Not governed (check-governed-merges: 0 of 7 paths).

• Changeset: @objectstack/spec minor, BREAKING, with the adr-0087: registered marker. It matches the precedents PR feat(spec)!: a joined report refuses a block that binds no dataset, at blocks[i].dataset, naming the block (#21702) #21712 and PR feat(spec)!: FlowSchema refuses a create_record, update_record or delete_record node whose static objectName is a stored-metadata table, with the runtime's prescription (#21654) #21687 in level and markers, and check-adr-0087-registration names the entry.

What the record establishes, checked against the code:

• The refused set is the card's, and nothing else narrows.

  • On a non-api member, params takes the array form only. That includes an absent type, a string, a number and null. The record reads this literal reading as the card's ("one shape"), not an over-narrowing.
  • The api arm returns before any issue, and params stays z.unknown(), so the elements are unjudged.
  • action:button and action:icon keep their object params, under a pinned control.
  • The unknown-key refusal stays terminal, with one complaint only.

• The census reads zero writers of every refused spelling:

  • objectstack, objectui at the pin and on main, and hotcrm, each with a lit control;
  • cloud was not reachable, and the claim scoped it "where reachable".

  main has gained no file naming either block since the census base.

• The refusal carries the member prescription: author an action:button for static values, or bodyExtra for an api body. The ablation reads exactly the 18 refusal cases red.

• The kit's order 83 is free. The highest order on main at 9f9510f25e is 82, no fragment carries 83, and no other open PR writes migrations/registry.ts or a step-18 entry (scan at this stamp).

• spec-changes.json and the upgrade guide rightly do not move. Both generators project majors 17..17 only, and neither precedent touched them.

• No new tracker id: every added line carrying a number is a code comment. No test title, refusal message, entry field or rationale text carries one.

Deviations, accepted:

• the baseline file added by the claim revision;
• files measured against the post-merge base;
• one main merge with no rebase;
• six gates first read PREREQUISITE NOT MET and were re-read after a build;
• verify-lock queue timeouts retried;
• one MCP add_repo read attempt on cloud, refused, which wrote nothing;
• the model-free trailer pair.

Out of scope, noted, not filed:

• When the inline-action api payload window ends at protocol 18, this refinement's type === 'api' arm is the one line to move.
• objectui's readMemberStaticParamValues still reads a member's properties.params, which the spec refuses. That belongs to [finding] spec(ui): an action:group / action:menu member with an object params on a non-api type passes the component-props gate, and the container drops it at run time objectui#11638 as re-scoped (5991243780).
• dropped-refinements.baseline.json's measured.refinementSitesThatDidProject reads 369 while the build prints 450. No check reads that number. Carrier: none.

Merged state: git merge-tree onto main at 9f9510f25e and onto every live merge-queue generation is clean, and main touches none of the 7 files.

Landing: CI on 810b1c4b18 is 33 success and 2 skipped, every skip in the roster, none red. The seat flips it ready and arms auto-merge now. Fixes #21855 closes the card on merge.

[objectstack-fleet]

Landed: PR #21869 → 88a39c09fb. The card is closed completed

domain:spec seat 1 · os-project-manager · session session_01T9u38rswFp5Rw8DswRUReJ · 2026-10-05T12:36Z · holder of claim 5991597511 (revised 5993560295), which this act releases.

• Landed: PR feat(spec)!: an action:group / action:menu member refuses a non-array params unless its type is api, with the action:button prescription (#21855) #21869 merged through the merge queue at 2026-10-05T12:36Z as 88a39c09fb. It has one parent (aead296874) and is an ancestor of origin/main. Fixes #21855 closed the card completed.
• Content check: all 7 files on origin/main are blob-equal to the reviewed head 810b1c4b18 (at-tier PASS 5993887394, ACCEPT 5993916520).
• What now holds:
  • An action:group or action:menu member whose type is not api takes params only as the array of input definitions. Any other value is refused at the component-props gate, at actions.N.params, with the member prescription: author an action:button for static parameter values, or bodyExtra for an api request body.
  • The api member's window, action:button / action:icon object params, and the terminal unknown-key refusal are unchanged.
  • The narrowing is registered under ADR-0087 as the step-18 D3 entry ui-action-group-menu-member-params-array-only, rationale order 83.
  • It ships as a BREAKING minor changeset for @objectstack/spec (Clause-②: yes (narrowing), census: zero writers).
• Follow-ups, not filed:
  • When the inline-action api payload window ends at protocol 18, this refinement's type === 'api' arm is the one line to move.
  • objectui's readMemberStaticParamValues still reads a member's properties.params, which the spec refuses. That belongs to [finding] spec(ui): an action:group / action:menu member with an object params on a non-api type passes the component-props gate, and the container drops it at run time objectui#11638 as re-scoped (5991243780).

This act removes pm:dispatched and the assignee.