Search results

v17 verification tracker — browser-verify every user-facing change in the 17.0.0 train

Status: Open.

#3909 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 29, 2026

Skills are declared the only third-party extension primitive, but nothing in the open distribution consumes them

Status: Open.

#3905 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

[P2] The spec contract stops at authored source — stored metadata is rehydrated unparsed, unconverted, and ungated

priority:p2Medium: important, M3Medium: important, M3

Status: Open.

#3903 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

fix(sharing): 共享授权面自身无鉴权——任何登录用户可撤销他人的共享；且 edit 档共享同时放行删除

bugSomething isn't workingSomething isn't working

security

Status: Open.

#3902 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

plugin-dev 的 stub 全部 fail-open(verify() 恒 admin、checkObjectPermission() 恒 true、compileFilter() 恒 null)且无任何生产环境护栏

Status: Open.

#3900 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

请求体从不与声明它的 schema 对照(#3877 的请求侧对偶):7 个 schema 定义了从未启用,而 API 目录已宣称生效

Status: Open.

#3899 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

ADR-0076 D12 诚实能力层的三个洞:_fallback 标记不被识别、data 槽位不传实例、metadata 硬编码 degraded

Status: Open.

#3898 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

deleteManyData 把请求体的 options 展开在 where 之后 —— body 可覆盖 id 谓词,把"删这几条"放大成"删调用者可见的全部"

Status: Open.

#3897 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

POST /data/sharing/rules 绕过 SharingRuleSchema:criteria 缺失或拼错静默变成"共享该对象全部记录",与 ADR-0049 "never seeded as a permissive match-all" 直接冲突

Status: Open.

#3896 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

降级 analytics shim 把 ExecutionContext 丢在门口 —— /analytics/query 在没装 service-analytics 的装配里不注入 RLS/租户谓词，契约字段 where 也被静默忽略

Status: Open.

#3891 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

serve 对「bare defineStack config + objects、无 dist artifact」的形态启动失败:Service 'manifest' is async - use await

Status: Open.

#3887 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026

/analytics/query 的请求体形状取决于装没装 service-analytics(降级 shim 收信封、真引擎收裸 AnalyticsQuery),且发错形状静默生成空 SELECT

Status: Open.

#3878 In objectstack-ai/objectstack;

· os-zhuang opened on Jul 28, 2026