Skip to content

docs: development assessment for app-metadata reference-integrity lint (#3583) - #3640

Merged
os-zhuang merged 2 commits into
mainfrom
claude/app-metadata-validation-assessment-xskbcg
Jul 27, 2026
Merged

docs: development assessment for app-metadata reference-integrity lint (#3583)#3640
os-zhuang merged 2 commits into
mainfrom
claude/app-metadata-validation-assessment-xskbcg

Conversation

@os-zhuang

Copy link
Copy Markdown
Contributor

针对 #3583 的开发方案评估文档(development assessment,仅路由工作、不做架构决策,沿用 2026-06-ask-build-agent-development-assessment.md 的先例格式)。

核心结论:HotCRM 审计出的 ~20 处已发布实例可收敛为 7 条 lint 规则 + 4 个小洞修复 + 1 个共享解析基座,按 ADR-0078 的 verify-then-enforce 棘轮分期落地。

逐类盘点(§1):9 类问题各自映射到 spec 授权面、现有检查与缺口(file:line 级证据)。其中 2 类不能直接写规则:knowledge indexes 在 stack 里根本没有定义位(需先做 spec 决策 D1);hook body 写入是不透明 JS 源码,静态检查诚实地说做不到(D4)。

两个结构性根因(§2):

  1. 没有共享解析基座 — 每条规则各自收集"已知名字",并对"可能来自其他包"各猜一套(现存 7 种策略并行);sys_|cloud_|ai_ 前缀启发式是假阴性来源(sys_approval_process 全线放行)。
  2. 放置不对称 — defineStack 硬错误 vs lint 规则,且 validate/lint/compile/doctor 各自接线不同的规则子集。

分期方案(§3):Phase 0 立即可落的 4 个小修(areas 导航未校验、i18n 数组 options bug、chart dataset 缺失旁路、hook 数组 object);Phase 1 共享基座(spec 导出 PLATFORM_PROVIDED_OBJECT_NAMES 注册表 + lint 侧 ResolutionContext,用属主包 conformance test 保持注册表诚实、不破坏 lint→spec 单向依赖);Phase 2/3 按规则逐条 PR。§4 给出统一的严重级阶梯(未前缀未解析→error;前缀但不在注册表→warning + 显式 opt-out)。§5 列出 5 个待决策项;§6 以 HotCRM 实例为回归语料。

关联:#3583 · ADR-0072 / ADR-0078 / ADR-0049


Generated by Claude Code

#3583)

Maps the nine HotCRM bug categories from #3583 against the current
validation surface (defineStack cross-refs, @objectstack/lint rules, CLI
wiring), identifies the two structural root causes (no shared resolution
substrate / prefix-heuristic platform-object guessing; validate-lint
wiring drift), and routes the work: 4 immediate hole-fixes, a shared
PLATFORM_PROVIDED_OBJECT_NAMES registry + ResolutionContext substrate,
7 phased lint rules behind the ADR-0078 verify-then-enforce ratchet, and
5 open decisions (knowledge-index definition site, runtime-registered
skills, nav-access placement, hook-body writes, rule-suite wiring).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GBks5G7AkwrvgF2kL5rfkT
@vercel

vercel Bot commented Jul 27, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectstack Ignored Ignored Jul 27, 2026 12:26pm

Request Review

@github-actions github-actions Bot added documentation Improvements or additions to documentation size/m and removed documentation Improvements or additions to documentation labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/m tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants