Skip to content

docs: development assessment for app-metadata reference-integrity lint (#3583) - #3640

Merged
os-zhuang merged 2 commits into
mainfrom
claude/app-metadata-validation-assessment-xskbcg
Jul 27, 2026
Merged

docs: development assessment for app-metadata reference-integrity lint (#3583)#3640
os-zhuang merged 2 commits into
mainfrom
claude/app-metadata-validation-assessment-xskbcg

Conversation

@os-zhuang

Copy link
Copy Markdown
Contributor

针对 #3583 的开发方案评估文档(development assessment,仅路由工作、不做架构决策,沿用 2026-06-ask-build-agent-development-assessment.md 的先例格式)。

核心结论:HotCRM 审计出的 ~20 处已发布实例可收敛为 7 条 lint 规则 + 4 个小洞修复 + 1 个共享解析基座,按 ADR-0078 的 verify-then-enforce 棘轮分期落地。

逐类盘点(§1):9 类问题各自映射到 spec 授权面、现有检查与缺口(file:line 级证据)。其中 2 类不能直接写规则:knowledge indexes 在 stack 里根本没有定义位(需先做 spec 决策 D1);hook body 写入是不透明 JS 源码,静态检查诚实地说做不到(D4)。

两个结构性根因(§2):

  1. 没有共享解析基座 — 每条规则各自收集"已知名字",并对"可能来自其他包"各猜一套(现存 7 种策略并行);sys_|cloud_|ai_ 前缀启发式是假阴性来源(sys_approval_process 全线放行)。
  2. 放置不对称 — defineStack 硬错误 vs lint 规则,且 validate/lint/compile/doctor 各自接线不同的规则子集。

分期方案(§3):Phase 0 立即可落的 4 个小修(areas 导航未校验、i18n 数组 options bug、chart dataset 缺失旁路、hook 数组 object);Phase 1 共享基座(spec 导出 PLATFORM_PROVIDED_OBJECT_NAMES 注册表 + lint 侧 ResolutionContext,用属主包 conformance test 保持注册表诚实、不破坏 lint→spec 单向依赖);Phase 2/3 按规则逐条 PR。§4 给出统一的严重级阶梯(未前缀未解析→error;前缀但不在注册表→warning + 显式 opt-out)。§5 列出 5 个待决策项;§6 以 HotCRM 实例为回归语料。

关联:#3583 · ADR-0072 / ADR-0078 / ADR-0049


Generated by Claude Code

#3583)

Maps the nine HotCRM bug categories from #3583 against the current
validation surface (defineStack cross-refs, @objectstack/lint rules, CLI
wiring), identifies the two structural root causes (no shared resolution
substrate / prefix-heuristic platform-object guessing; validate-lint
wiring drift), and routes the work: 4 immediate hole-fixes, a shared
PLATFORM_PROVIDED_OBJECT_NAMES registry + ResolutionContext substrate,
7 phased lint rules behind the ADR-0078 verify-then-enforce ratchet, and
5 open decisions (knowledge-index definition site, runtime-registered
skills, nav-access placement, hook-body writes, rule-suite wiring).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBks5G7AkwrvgF2kL5rfkT
@vercel

vercel Bot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectstack Ignored Ignored Jul 27, 2026 12:26pm

Request Review

@github-actions github-actions Bot added documentation Improvements or additions to documentation size/m and removed documentation Improvements or additions to documentation labels Jul 27, 2026
@github-actions github-actions Bot added documentation Improvements or additions to documentation tooling labels Jul 27, 2026
@os-zhuang
os-zhuang marked this pull request as ready for review July 27, 2026 12:29
@os-zhuang
os-zhuang merged commit d8231ac into main Jul 27, 2026
15 checks passed
@os-zhuang
os-zhuang deleted the claude/app-metadata-validation-assessment-xskbcg branch July 27, 2026 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/m tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants