…2, one ai copy, merged-tree gate fixes (objectstack#25727)
- `.objectstack-sha` moves from 43edf90b56 to objectstack main
5874d25302cbb80db675eddf1b69198073fbe2a9 (20 commits, none under
packages/spec; the packed manifests do not move).
- plugin-chatbot pins `@ai-sdk/react` 4.0.121 and `ai` 7.0.118, the `ai`
that release pins: a caret on either resolves a second `ai` and
`useObjectChat`'s transport fails TS2322. auth pins `better-auth` 1.7.12.
pnpm-lock.yaml re-resolved from main's: one `ai`.
- plugin-dashboard/SKILL.md gains frontmatter marked `metadata.internal`,
which the merged repo's skills-catalog boundary test requires of every
SKILL.md outside `skills/`.
- ADR-0075 citations in source and tests read `ObjectUI ADR-0075`, so the
merged repo's ADR-anchor gate does not resolve them against objectstack's
ADRs; CHANGELOG lines stay as published. The docs-build-trigger fixture
path drops its `ADR-` prefix.
- DraftChangesPanel.securityProblems test warms `@objectstack/lint` at
module scope, so the panel's function-body import does not pay its first
transform inside the findBy window.
Part of objectstack#25727 (epic objectstack#25677).
Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01K1ngdG6x8wAt8cjeVx2cSk
Requested by Tesla · project thread
Part of objectstack-ai/objectstack#25727
Part of objectstack-ai/objectstack#25677
Clause-②: no
Metadata-protocol: none
What changes
Round 2 (a) of objectui-readiness 3: the non-governed items the merged objectstack tree's verify runs found in
ui/..objectstack-shamoves from43edf90b56to objectstackmain5874d25302cbb80db675eddf1b69198073fbe2a9(git ls-remote, 09:15Z): 20 commits, none underpackages/spec.scripts/bump-objectstack.sh --no-commitreported "on origin/main"; the packed manifests in.objectstack-pin/do not move.ai.packages/plugin-chatbotpins@ai-sdk/reactto4.0.121andaito7.0.118, theaithat@ai-sdk/react4.0.121 pins (and the one@objectstack/speccarries in the merged tree). Measured standalone: withaiat^7.0.118the caret resolves 7.0.153, the lockfile holds both, and@object-ui/plugin-chatbot#type-checkfails TS2322 inuseObjectChat.ts(DefaultChatTransportvsChatTransport); with7.0.118exact it is green.pnpm-lock.yamlis re-resolved frommain's, so it holds oneai@7.0.118.packages/authpinsbetter-authto1.7.12.packages/plugin-dashboard/SKILL.mdgains frontmatter withmetadata: internal: true, which the merged repo's create-objectstack test requires of every SKILL.md outsideskills/. The two.claude/skillsfiles go in a separate governed PR.ObjectUI ADR-0075, so the merged repo's ADR-anchor gate does not resolve them against objectstack's ADRs. CHANGELOG lines are published history and stay as they are (AGENTS.md rule 11); the epic seat ledgers them objectstack-side. The docs-build-trigger fixture path drops itsADR-prefix (docs/adr/9999-example.md).DraftChangesPanel.securityProblems.test.tsximports@objectstack/lintat module scope, the remedy AGENTS.md's test discipline prescribes, so the panel's function-bodyimport('@objectstack/lint')does not pay its first transform inside the 1000 msfindBywindow.securityPostureLint.tsis unchanged.25727-round2-dependency-pins.md:@object-ui/plugin-chatbotand@object-ui/authpatch.Verification (local)
pnpm install --frozen-lockfilepnpm type-check(81/81 turbo tasks)packages/plugin-chatbot/+packages/auth/(121 files)check:spec-symbols,check:installed-pin-claims,check:lockfile-integrity,check:lockfile-dedupe,check:phantom-deps,check:unused-depscheck:changeset-claims,check:pending-changeset-literals,changeset:check,check:new-line-citationscheck:skills-paths,check:skill-examples,check:skill-eval-tokens,check:shell-escape-residue,check:control-bytes,check:doc-jsoncheck:test-path-roots,check:i18n-keys,check:designer-field-key-parity,type-check:scripts,lint:root, eslint over the touched filesnode scripts/check-governed-queue-guard.mjs --testover the diffThe whole
scripts/__tests__suite and the fullpnpm testrun on this PR's CI shards.🤖 Generated with Claude Code
Session:
https://claude.ai/code/session_01K1ngdG6x8wAt8cjeVx2cSk