feat(plugin-security)!: no seeder or materializer writes a sys_permission_set row; the boot seeds no row for a declared set (#15204 stage 6b-2) by objectstack-fleet[bot] · Pull Request #22900 · objectstack-ai/objectstack

wip(plugin-security): retire the declared-permission seeder, drift, refusal diagnostics and managed_by normalizer (#15204 stage 6b-2)

claude

committed

7a5ef33

wip(plugin-security,cli): the platform-admin bootstrap writes no catalog row; os meta resync is retired (#15204 stage 6b-2)

claude

committed

77ad5f2

wip(examples,plugin-security): delete the example binders; drift_status retires with its writer (#15204 stage 6b-2)

claude

committed

7f18550

wip: zero-row boot pin, everyone re-derivation pin, changeset (#15204 stage 6b-2)

claude

committed

8d2baa4

chore(plugin-security): regenerate the translation bundles without drift_status / drift_detail (#15204 stage 6b-2)

claude

committed

facb9fd

test(plugin-security): fixtures modelling an existing database write the legacy platform-bucket rows themselves (#15204 stage 6b-2)

claude

committed

47f0b55

docs(changeset): state the migration in prose under the runtime-interface-only disposition (#15204 stage 6b-2)

claude

committed

206cdd1

docs(changeset): no-migration-prescription disposition (#15204 stage 6b-2)

claude

committed

173f4c1

chore: liveness verdicts and the tenant-audit census follow the retired seeders (#15204 stage 6b-2)

claude

committed

6e67a32

chore: the engine-double ledgers drop the retired suites and pin the new one (#15204 stage 6b-2)

claude

committed

c89e15d

docs(changeset): os meta resync and the example binders carry their own changeset (#15204 stage 6b-2a)

claude

committed

274040f

test(dogfood): fixtures read the security catalog, not a seeded sys_permission_set row; existing-database cases write the legacy row themselves (#15204 stage 6b-2)

claude

committed

7d870d1

test(dogfood): catalogPermissionSet answers any, as the findOne it replaces did (#15204 stage 6b-2)

claude

committed

6c849ce

chore(docs-audit): the CLI command-anchor specimen is os meta register, a command that exists (#15204 stage 6b-2a)

claude

committed

8b9fb77

refactor(plugin-security)!: delete the organization-scope helpers the seeder was the only caller of (#15204 stage 6b-2)

claude

committed

a574a24

test(plugin-security): tighten the stage's new test and comment text (#15204 stage 6b-2)

claude

committed

fcaedfd

Navigation Menu

Repository navigation

feat(plugin-security)!: no seeder or materializer writes a sys_permission_set row; the boot seeds no row for a declared set (#15204 stage 6b-2) - #22900

feat(plugin-security)!: no seeder or materializer writes a sys_permission_set row; the boot seeds no row for a declared set (#15204 stage 6b-2)#22900
objectstack-fleet[bot] merged 28 commits into
mainfrom
claude/issue-15204-s6b2-declared-permissions

Commits on Oct 11, 2026

wip(plugin-security): retire the declared-permission seeder, drift, refusal diagnostics and managed_by normalizer (#15204 stage 6b-2)

wip(plugin-security,cli): the platform-admin bootstrap writes no catalog row; os meta resync is retired (#15204 stage 6b-2)

wip(examples,plugin-security): delete the example binders; drift_status retires with its writer (#15204 stage 6b-2)

wip: zero-row boot pin, everyone re-derivation pin, changeset (#15204 stage 6b-2)

chore(plugin-security): regenerate the translation bundles without drift_status / drift_detail (#15204 stage 6b-2)

test(plugin-security): fixtures modelling an existing database write the legacy platform-bucket rows themselves (#15204 stage 6b-2)

docs(changeset): state the migration in prose under the runtime-interface-only disposition (#15204 stage 6b-2)

docs(changeset): no-migration-prescription disposition (#15204 stage 6b-2)

chore: liveness verdicts and the tenant-audit census follow the retired seeders (#15204 stage 6b-2)

chore: the engine-double ledgers drop the retired suites and pin the new one (#15204 stage 6b-2)

docs(changeset): os meta resync and the example binders carry their own changeset (#15204 stage 6b-2a)

test(dogfood): fixtures read the security catalog, not a seeded sys_permission_set row; existing-database cases write the legacy row themselves (#15204 stage 6b-2)

test(dogfood): catalogPermissionSet answers any, as the findOne it replaces did (#15204 stage 6b-2)

chore(docs-audit): the CLI command-anchor specimen is os meta register, a command that exists (#15204 stage 6b-2a)

refactor(plugin-security)!: delete the organization-scope helpers the seeder was the only caller of (#15204 stage 6b-2)

test(plugin-security): tighten the stage's new test and comment text (#15204 stage 6b-2)

Commits on Oct 12, 2026

Merge remote-tracking branch 'origin/main' into claude/issue-15204-s6b2-declared-permissions

chore(census): regenerate the tenant-audit census after merging main

fix(security): an uninstall revokes the grants naming the package's permission sets

test(runtime,cli): read a package's permission set from the catalog, not a seeded row

test(plugin-auth): the grant-reader suites write the legacy platform-bucket rows they read

test(cloud-connection): resolve @objectstack/metadata-protocol from source in the unit tests

Merge remote-tracking branch 'origin/main' into claude/issue-15204-s6b2-declared-permissions

chore(census): restamp the tenant-audit census after merging main

docs(permissions): describe the catalog-served package sets, not the retired seeder and materializer

docs(permissions): say what the ADR-0094 projector still writes on a publish; retire the remaining seeder prose

docs(permissions): the environment-admin bullet points at the transitional projection row

Merge remote-tracking branch 'origin/main' into claude/issue-15204-s6b2-declared-permissions