Skip to content

fix(components): page:header resolves a lookup title candidate instead of rendering its expanded object - #10157

Merged
os-tesla merged 4 commits into
mainfrom
claude/issue-10117-page-header-title-fallback-crash
Sep 20, 2026
Merged

os-tesla merged 4 commits into
mainfrom
claude/issue-10117-page-header-title-fallback-crash

Conversation

@os-tesla

Copy link
Copy Markdown
Collaborator

Fixes #10117

Clause-②: no — a renderer-internal title resolution, entirely inside
PageHeaderRenderer's record-chrome branch. It adds no export, moves no
exported symbol and no key on a published payload, and touches none of the
eight published-contract fields on any package.json. The two symbols it now
imports, recordDisplayValueAt and resolveNameField, were already exported
from @object-ui/core and already have other consumers.

Clause-②-correction: this is the declaration the claim comment (id
5751061454) deferred for want of a diff. It is ⛔ not a second Claim:.

Step 1 — the real chooser, and where the card's reading was off

The card's 「Where」 section was explicit that it was read off a minified
plugins-views chunk, so it was treated as a lead. In source the chooser is
the resolvedTitle chain inside PageHeaderRenderer's record-chrome branch
(the hasRecord && !disableRecordChrome block) in
packages/components/src/renderers/layout/containers.tsx. Cited by symbol, not
by line address, per AGENTS.md #11.

Two corrections to the relayed reading, both from the source:

  • nameField / displayNameField are not read by the chooser at all. They
    are read one rung above it, inside getRecordDisplayName — the unified
    ADR-0079 resolver in @object-ui/core (record-title.ts) — which the header
    calls with deriveFromRecordKeys: false.
  • The raw walk is six keys, not five. The card reported
    name, full_name, title, subject, display_name; the source also walked
    label, and below it sat two further rungs the card did not mention:
    ${objectLabel} ${id-prefix} and a bare objectLabel.

⭐ What the header was really doing, which is sharper than "it walks some
candidates": it switched the resolver's record-key rung OFF with
deriveFromRecordKeys: false, and then re-spelled that very rung itself as a
raw || chain. recordDisplayValueAt's own header (objectui#8350) says in as
many words not to re-spell that test at a call site. This header was the
remaining re-spelling, and raw || diverged from it on both of that
function's documented clauses:

  1. it reads the stored value, so for a lookup the truthy candidate is the
    expanded reference object — which went into JSX and took the block down;
  2. it counts a whitespace-only string as a value. Measured on the way in: a
    record with name: ' ' rendered a blank H1 — a second live defect in
    the same chain, found by the repro pin rather than by the card.

⭐ The control the card supplied was the key, and it held. The breadcrumb
resolves the same record through the same resolver without
deriveFromRecordKeys: false — getRecordDisplayName(objectDef, pageRecord)
in RecordDetailView's record-title effect — so each of its rungs runs through
recordDisplayValueAt and on into displayNameOfEmbeddedObject. That is why
the breadcrumb showed the business unit's name while the header beside it
crashed. The resolution was never missing from this tree; the header simply had
a copy of the walk instead of a call to it.

The fix — all three clauses

  1. Reuse, don't re-implement. The raw chain is deleted. The record-key
    safety net now asks getRecordDisplayName for its own step-4b rung. That is
    the resolution the breadcrumb and the detail grid use; no second one was
    written.
  2. Degrade, don't borrow. An object that names its title field — declared
    nameField / displayNameField, or a type-aware derivation over its
    fields, which is exactly what the exported resolveNameField answers —
    has already said which field titles a record. An empty value there is an
    empty title, and the header degrades to its existing
    ${objectLabel} ${id-prefix} placeholder instead of hopping to the next
    candidate. The silent hop was part of the defect, not just its rendering.
    The record-key net still runs in full for an object that names no title
    field, which is the case it exists for.
  3. Defensive stringify, last and explicitly not the fix — see the honest
    reading below.

Pins, and what ablation actually measured

Six pins in
packages/components/src/__tests__/page-header-title.emptyNameLookupFallback-10117.test.tsx.
Before the fix, on the base commit: 5 failed, 1 passed — the one that
passed is the control, which is what makes it a control. The failure carried
the card's args[] key list verbatim.

⚠️ The first pin set was not good enough, and the ablation is what said so.
Restoring the raw walk while KEEPING the defensive stringify left "did not
crash" and "the display name is on screen" both green: the backstop
resolves an expanded reference through the same displayNameOfEmbeddedObject,
so for a lookup it renders a byte-identical heading. Two pins were added to
separate the clauses, and they exist because that ablation came back green:

Ablation (anchor verified on disk, blob hash before/after) Result
Raw walk restored, backstop kept clause-2 pin and clause-1 pin red; the other four green
Backstop deleted, clauses 1+2 kept all six green
Both removed, i.e. the base behaviour 5 red, control green, React child error reproduced

The clause-2 pin puts a non-empty string in the borrowable field, so no
stringify can neutralize it. The clause-1 pin puts the value behind the
resolver's own *_name affix rung, which the deleted raw chain never looked at
and which no stringify can reach.

⚠️ Clause 3 is implemented but unpinned, and that is reported rather than
papered over.
With clauses 1 and 2 in place no rung of the chain can produce
a non-string: pickLocalized, which every author-supplied title passes
through first, is typed to a string and collapses an object with no string
value to the empty string. So there is no honest fixture for the backstop
through the registered component's public surface. It is kept as a guard
against a future rung and described as exactly that in the code, rather than
as a live hazard. A contrived pin would have asserted nothing.

Every ablation ran through ablation-replace, so each mutation's landing is
proved by an anchor count and a blob-hash change on disk, and each restore by
blob == HEAD plus an empty git diff HEAD — not by an exit code.

Scope

Confined to the header's title resolution and its fallback. ⛔ No hands-off path
was touched: no packages/i18n/src/locales, no packages/plugin-calendar, no
packages/plugin-form sanitize/autoLayout/masterDetailTx, no
record-quick-actions, no app-shell publish-drafts call site,
no content/docs/releases, and nothing in
scripts/check-eager-closure-budget.mjs or any ceiling in it. The
action-params dialog control worked on objectui#10129 was never reached — this
change does not enter a param or field renderer.

vitest.config.mts gains one entry: the new pin renders through the REAL
page:header registration, so it belongs in the dom-heavy project. Under the
light dom setup nothing registers that type and the file reported
page:header not registered.

🤖 Generated with Claude Code

https://claude.ai/code/session_018HrVaotisyhgmot9o2MLRq


Generated by Claude Code

…d of rendering its expanded object

The record-chrome branch asked the unified ADR-0079 resolver with
`deriveFromRecordKeys: false`, then re-spelled the rung it had just
switched off as a raw `data?.name || … || data?.subject || …` chain.
Raw `||` reads the STORED value, so for a lookup the truthy candidate
is the expanded reference object — which went into JSX and took the
whole header down with React #31.

The breadcrumb resolves the same record through the same resolver
WITHOUT that option, so its walk runs through `recordDisplayValueAt`
and the embedded-object display chain. The copy is deleted and that
rung is asked for instead of imitated.

Also closed, both legs of the same divergence:
  - an object that NAMES its title field no longer borrows another
    field's value when that field is empty; it degrades to the
    existing `${objectLabel} ${id}` placeholder;
  - a whitespace-only value is empty here, as it is to the resolver.

A non-string candidate is reduced through the same authority before
rendering — a backstop, deliberately last, because alone it would only
trade the crash for a header showing the wrong field.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018HrVaotisyhgmot9o2MLRq
The first pin set did not separate the clauses. Restoring the raw walk
while KEEPING the defensive stringify left "did not crash" and "the
display name is on screen" both GREEN: the backstop resolves an
expanded reference through the same `displayNameOfEmbeddedObject`, so
for a lookup it renders a byte-identical heading.

Two pins now carry the separation, and the ablation is why they exist:

  - the no-borrowing rule is pinned with a non-empty STRING in the
    borrowable field, which no stringify can neutralize;
  - the reuse rule is pinned behind the resolver's own `*_name` affix
    rung, which the deleted raw chain never looked at.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018HrVaotisyhgmot9o2MLRq
The comment claimed an author `title` that is an object reaches the
title chain. It does not: `pickLocalized` sits in front of every
author-supplied title, is typed to a string, and collapses an object
with no string value to `''`. Deleting the backstop leaves every pin
green, which is the honest reading and is now written down on both
sides instead of implied away.

The guard stays — it is defence against a future rung — but it is
described as that rather than as a live hazard.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_018HrVaotisyhgmot9o2MLRq
@github-actions

Copy link
Copy Markdown
Contributor

changeset-claim-re-read

⚠️ 5 pending changeset(s) describe a file this change touches

Their bodies publish verbatim into the CHANGELOG at the next release, so this is a request to re-read them against your diff — addressed here because you are the one seat that can answer it without re-deriving anything.

⛔ Nothing here blocks, and nothing here is a verdict on your change. This gate exits 0, is not a required context, and judges name resolution, never meaning: it asked whether a pending body names a file you touched. "Is this sentence still true?" is the one question it will not answer, and the one you are being asked to answer.

.changeset/6771-retire-body-child-list-dialect.md

  • names renderers/layout/containers.tsx → packages/components/src/renderers/layout/containers.tsx — edited by this change

    Non-rendering readers keep their arm on the same rule, and none of them renders anything: while a renderer still reaches stored body content, a reader that must see the SAME content keeps its arm, or the renderer draws what the reader cannot find. Those are the two tab-subtree walkers in renderers/layout/containers.tsx, app-shell's pageSchemaIntrospect (CONTAINER_KEYS) and PageBlockInspector (STRUCTURAL_PROP_KEYS, the inspector half of a stored properties.body), and the CLI's OBJECTUI_STRUCTURAL_KEYS — a file-IDENTIFICATION marker, where keeping body is what lets an old file still be recognised as an ObjectUI node and therefore refused, instead of silently not judged.

.changeset/7182-declared-action-ids-one-rule.md

  • names containers.tsx → packages/components/src/renderers/layout/containers.tsx — edited by this change

    New on @object-ui/types, beside actionRendersAt: the pure resolveDeclaredActionIds(elements, registeredActions), with the DeclaredActionsResolution / DeclaredActionsRefusal result types (the shape classifier stays module-internal: called with no registry, the function already returns the registry-independent verdict a renderer needs before its lookup). Both renderers call it; the whole-array switch in record-quick-actions.tsx and the per-element normalisation in containers.tsx are gone. The rule is closed: a string is an id, a non-null non-array object is an inline definition, and any other element (null, a number, a nested array) is refused at its index too. An all-id array resolves by name in authored order, first registration winning on a duplicate name; ids that name nothing are reported back with their index for the caller to warn about once its lookup has settled.

.changeset/8155-app-root-residue-swept.md

  • names containers.tsx → packages/components/src/renderers/layout/containers.tsx — edited by this change

    Swept as a class, not as two coordinates. Every other place in this tree that stated app was a bound expression-scope root is corrected in the same change — the diagnostic copy and its byte-pin, the ambient-scope docblocks in @object-ui/react (SchemaRenderer, useExpression), @object-ui/core (ActionRunner.ParamDef.visible, RowPredicateOptions.scope), @object-ui/components (form.tsx, containers.tsx), @object-ui/plugin-detail, @object-ui/plugin-form (docblock and README), @object-ui/app-shell and the console app, plus fourteen test fixtures that transcribed the old bag with an app key. The fixtures in @object-ui/app-shell now call buildExpressionScope instead of transcribing it, so that pair cannot drift again.

.changeset/9174-interpolate-fastpath-trim.md

  • names packages/components/src/renderers/layout/containers.tsx → packages/components/src/renderers/layout/containers.tsx — edited by this change

    page:header's title/subtitle (and the record-title titleFormat) all go through interpolate() in packages/components/src/renderers/layout/containers.tsx. When the template contained a {token} the function collapsed and trimmed whitespace before returning; when it contained no { at all it returned the raw string untouched. A whitespace-only authored title (e.g. ' ') has no token, so it came back unchanged — truthy — and PageHeaderRenderer's {explicitTitle && ANGLE-BRACKETS(h1)} gate drew a blank h1. Because literalTitleText (page.tsx), which decides whether PageRenderer delegates its own heading to the authored header, already trimmed and correctly read "no title", PageRenderer also drew its own implicit heading — two ANGLE-BRACKETS(h1) elements on one document, the broken outline objectui#3434 closed, arriving through a different door.

.changeset/record-picker-label-placeholder-i18n-5637.md

  • names renderers/layout/containers.tsx → packages/components/src/renderers/layout/containers.tsx — edited by this change

    KNOWN GAP, unchanged by this release: the sibling label read sites in renderers/layout/containers.tsx compose translateLabel(pickLocalized(…), language), and that second helper is not applied here — translateLabel and its KNOWN_LABEL_DICT are module-private to that file. Only the locale-map resolution lands in this change; a plain-English string label is still rendered verbatim in every language, exactly as before.

Read the paragraph, not the line: both false halves of the objectui#8617 claim sat in one paragraph, and correcting either alone would have left it asserting the same wrong thing.

If a claim did go false, correct the body. That is precedented and prose-only, frontmatter untouched; check-changeset-overwrite.mjs will report the correction as its own case 2 ("correcting a declaration on purpose … legitimate"), which is the intended shape — one gate asks for the read, the other records the write.

Not covered, stated so nobody reads this as more: a born-false claim that spells no line address at all (objectui#9495 coordinated one by ORDINAL — "a grep finds that member first" — and deciding that means reading what the sentence means), a claim spelled as a symbol or a package rather than a backticked file name, and a file named ambiguously.

Angle-bracketed names in the quoted prose above are rewritten as ANGLE-BRACKETS(name): GitHub deletes tag-shaped fragments from a stored body, and a quote that silently loses the identifier it is about is worse than a visible repair.

Compared the checked-out tree with 6cae9a0b3 (merge-base with origin/main): 3 file(s) changed outside .changeset/, read against 1243 pending declaration(s) that publish a body (1808 pending in total). · run

@github-actions

Copy link
Copy Markdown
Contributor

✅ Console Performance Budget

Metric Value Budget
Eager closure (gzip, 329 chunks) 3032.0 KB 3104.5 KB
Main entry chunk (gzip) 146.9 KB 350 KB
Entry file index-e6VY3ZWW.js —
Status PASS —

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.


📦 Bundle Size Report

Package Size Gzipped
app-shell (consoleActionDispatch.js) 0.20KB 0.19KB
app-shell (index.js) 16.68KB 6.20KB
app-shell (runtime-config.js) 20.68KB 7.36KB
app-shell (types.js) 0.01KB 0.04KB
app-shell (urlParams.js) 10.06KB 3.86KB
auth (ActiveOrganizationStorage.js) 25.05KB 9.16KB
auth (AuthContext.js) 0.31KB 0.24KB
auth (AuthGuard.js) 2.07KB 1.00KB
auth (AuthProvider.js) 40.18KB 10.59KB
auth (AuthShell.js) 3.49KB 1.40KB
auth (ForgotPasswordForm.js) 12.21KB 3.45KB
auth (LoginForm.js) 18.15KB 5.39KB
auth (PreviewBanner.js) 0.90KB 0.50KB
auth (RegisterForm.js) 6.65KB 2.22KB
auth (SocialSignInButtons.js) 9.61KB 3.89KB
auth (UserMenu.js) 3.41KB 1.23KB
auth (auth-gate-events.js) 1.29KB 0.66KB
auth (authStyles.js) 5.04KB 1.72KB
auth (createAuthClient.js) 40.21KB 10.80KB
auth (createAuthenticatedFetch.js) 8.46KB 3.43KB
auth (index.js) 3.19KB 1.44KB
auth (invitation-status.js) 1.22KB 0.70KB
auth (org-roles.js) 6.66KB 2.78KB
auth (phone-identifier.js) 1.11KB 0.66KB
auth (types.js) 0.59KB 0.35KB
auth (useAuth.js) 5.30KB 1.02KB
auth (useWorkspaceAdminStatus.js) 11.08KB 4.58KB
collaboration (CommentThread.js) 26.08KB 7.56KB
collaboration (LiveCursors.js) 3.17KB 1.27KB
collaboration (PresenceAvatars.js) 6.49KB 2.64KB
collaboration (PresenceProvider.js) 2.79KB 1.13KB
collaboration (index.js) 1.68KB 0.73KB
collaboration (useCollaborationTranslation.js) 6.05KB 2.52KB
collaboration (useCommentSearch.js) 1.98KB 0.88KB
collaboration (useConflictResolution.js) 7.75KB 1.86KB
collaboration (useMentionNotifications.js) 1.81KB 0.68KB
collaboration (usePresence.js) 6.33KB 1.84KB
collaboration (useRealtimeSubscription.js) 7.91KB 2.01KB
components (index.js) 546.12KB 130.78KB
core (index.js) 8.94KB 3.59KB
create-plugin (index.js) 27.94KB 9.51KB
data-objectstack (index.js) 221.99KB 61.72KB
fields (index.js) 251.81KB 63.47KB
i18n (LocalizationContext.js) 1.76KB 0.96KB
i18n (builtinAggregateLabels.js) 0.86KB 0.49KB
i18n (currency.js) 1.22KB 0.64KB
i18n (fallbackInterpolation.js) 6.25KB 2.77KB
i18n (i18n.js) 8.87KB 3.64KB
i18n (index.js) 5.22KB 2.26KB
i18n (pickLocalized.js) 9.86KB 3.95KB
i18n (provider.js) 32.15KB 10.49KB
i18n (useDisplayLocale.js) 2.85KB 1.45KB
i18n (useObjectLabel.js) 34.34KB 9.17KB
i18n (useSafeTranslation.js) 5.60KB 2.33KB
layout (index.js) 38.90KB 10.97KB
mobile (MobileProvider.js) 0.92KB 0.49KB
mobile (ResponsiveContainer.js) 0.94KB 0.38KB
mobile (breakpoints.js) 1.51KB 0.70KB
mobile (createOfflineDataSource.js) 5.61KB 1.75KB
mobile (index.js) 1.99KB 0.87KB
mobile (offlineQueue.js) 3.91KB 1.35KB
mobile (pwa.js) 0.97KB 0.49KB
mobile (serviceWorker.js) 1.48KB 0.62KB
mobile (serviceWorkerSource.js) 3.41KB 1.48KB
mobile (useBreakpoint.js) 1.54KB 0.65KB
mobile (useGesture.js) 6.96KB 1.98KB
mobile (useOfflineSync.js) 1.99KB 0.72KB
mobile (usePullToRefresh.js) 2.53KB 0.85KB
mobile (useResponsive.js) 0.72KB 0.42KB
mobile (useSpecGesture.js) 5.52KB 2.10KB
mobile (useTouchTarget.js) 1.01KB 0.54KB
permissions (MePermissionsProvider.js) 13.52KB 4.88KB
permissions (PermissionContext.js) 0.31KB 0.25KB
permissions (PermissionGuard.js) 0.89KB 0.45KB
permissions (PermissionProvider.js) 6.24KB 2.16KB
permissions (discardProofCache.js) 1.04KB 0.55KB
permissions (evaluator.js) 8.39KB 3.10KB
permissions (index.js) 0.93KB 0.41KB
permissions (store.js) 0.91KB 0.42KB
permissions (useFieldPermissions.js) 1.28KB 0.53KB
permissions (usePermissions.js) 4.83KB 2.27KB
plugin-ai (index.js) 14.81KB 3.63KB
plugin-calendar (index.js) 50.94KB 14.49KB
plugin-charts (index.js) 71.73KB 20.08KB
plugin-chatbot (index.js) 198.20KB 47.14KB
plugin-dashboard (index.js) 132.96KB 35.17KB
plugin-designer (index.js) 215.94KB 44.33KB
plugin-detail (index.js) 255.22KB 66.49KB
plugin-editor (index.js) 2.23KB 1.05KB
plugin-form (index.js) 140.27KB 35.67KB
plugin-gantt (index.js) 167.99KB 41.37KB
plugin-grid (index.js) 213.40KB 58.19KB
plugin-kanban (index.js) 48.71KB 15.17KB
plugin-list (index.js) 113.53KB 27.99KB
plugin-map (index.js) 21.74KB 7.07KB
plugin-markdown (index.js) 13.88KB 4.80KB
plugin-report (index.js) 43.49KB 11.97KB
plugin-timeline (index.js) 30.68KB 8.95KB
plugin-tree (index.js) 10.58KB 3.72KB
plugin-view (index.js) 85.18KB 21.05KB
providers (DataSourceProvider.js) 0.75KB 0.39KB
providers (MetadataProvider.js) 1.37KB 0.59KB
providers (ThemeProvider.js) 1.90KB 0.85KB
providers (UploadProvider.js) 11.66KB 3.50KB
providers (index.js) 0.45KB 0.23KB
providers (types.js) 0.01KB 0.04KB
react-runtime (index.js) 5.62KB 2.34KB
react (LazyPluginLoader.js) 4.47KB 1.63KB
react (SchemaRenderer.js) 109.04KB 36.08KB
react (data-invalidation.js) 5.05KB 2.08KB
react (index.js) 4.63KB 2.18KB
react (schema-input.js) 4.25KB 2.04KB
react (spec-input.js) 0.20KB 0.18KB
sdui-parser (body-dialect.js) 4.38KB 1.98KB
sdui-parser (codegen.js) 6.58KB 2.74KB
sdui-parser (dashboard-widget-options.js) 3.08KB 1.30KB
sdui-parser (index.js) 5.74KB 2.54KB
sdui-parser (input-type.js) 2.84KB 1.40KB
sdui-parser (kanban-quick-add.js) 3.89KB 1.87KB
sdui-parser (parse.js) 25.28KB 7.80KB
sdui-parser (provenance.js) 3.66KB 1.82KB
sdui-parser (types.js) 0.28KB 0.23KB
sdui-parser (validate.js) 15.71KB 5.30KB
types (ai.js) 4.11KB 2.06KB
types (api-types.js) 0.20KB 0.18KB
types (app.js) 2.87KB 1.00KB
types (base.js) 0.20KB 0.18KB
types (blocks.js) 0.20KB 0.18KB
types (complex.js) 2.93KB 1.49KB
types (crud.js) 0.20KB 0.18KB
types (dashboard-filter-alias.js) 6.23KB 2.74KB
types (data-display.js) 3.75KB 1.85KB
types (data-protocol.js) 0.20KB 0.19KB
types (data.js) 0.20KB 0.18KB
types (designer.js) 1.85KB 0.85KB
types (disclosure.js) 0.20KB 0.18KB
types (error-code.js) 1.54KB 0.88KB
types (expression.js) 0.20KB 0.18KB
types (feedback.js) 0.20KB 0.18KB
types (field-types.js) 0.20KB 0.18KB
types (form.js) 0.20KB 0.18KB
types (http-inflight.js) 8.87KB 3.73KB
types (http-retry.js) 4.32KB 2.02KB
types (icon-key-migration.js) 4.26KB 1.63KB
types (index.js) 4.74KB 2.25KB
types (layout.js) 0.20KB 0.18KB
types (managed-by.js) 0.19KB 0.18KB
types (mobile.js) 5.00KB 2.39KB
types (navigation.js) 0.20KB 0.18KB
types (objectql.js) 0.20KB 0.18KB
types (overlay.js) 0.20KB 0.18KB
types (permissions.js) 0.20KB 0.18KB
types (plugin-scope.js) 0.20KB 0.18KB
types (record-components.js) 0.20KB 0.19KB
types (record-semantics.js) 1.28KB 0.67KB
types (registry.js) 0.20KB 0.18KB
types (reports.js) 0.20KB 0.18KB
types (select-option.js) 0.20KB 0.19KB
types (spec-report.js) 5.05KB 1.93KB
types (spec-ui-namespace.js) 0.20KB 0.19KB
types (strict-authoring-face.js) 17.15KB 6.32KB
types (system-fields.js) 3.33KB 1.54KB
types (theme.js) 6.28KB 2.87KB
types (ui-action.js) 8.11KB 3.32KB
types (views.js) 0.20KB 0.18KB
types (widget.js) 0.20KB 0.18KB

Size Limits

  • ✅ Core packages should be < 50KB gzipped
  • ✅ Component packages should be < 100KB gzipped
  • ⚠️ Plugin packages should be < 150KB gzipped

Copy link
Copy Markdown
Collaborator Author

ACCEPT — PR #10157, card objectui#10117

Reviewed by the domain:ui execution seat (Seat: domain:ui#2, session session_018HrVaotisyhgmot9o2MLRq) at 2026-09-20T17:10Z. Implemented-by: an os-dev subagent of this session · Reviewed-by: this seat.

⭐ The diagnosis is sharper than the card's, and this seat re-derived it on origin/main

The card read a minified bundle and reported a five-key walk. The dev corrected it twice. Both corrections hold on this seat's own read of PageHeaderRenderer's resolvedTitle chain:

  • The raw walk is six keys, not five — name, full_name, title, subject, display_name and label — with two further rungs the card omitted below them (an objectLabel + id-prefix rung, then bare objectLabel).
  • nameField / displayNameField are ⛔ not read by that chain at all. They are read one rung above it, inside the unified ADR-0079 resolver.

⭐ And the reading that actually explains the defect, which neither the card nor the dispatch had:

PageHeaderRenderer calls getRecordDisplayName(objSchema, data, { deriveFromRecordKeys: false }) — the record-key rung switched OFF — and then re-spells that same rung immediately below as a raw || chain.

The contrast is the proof, and it is why the breadcrumb was right while the header crashed: RecordDetailView's record-title effect calls getRecordDisplayName(objectDef, pageRecord) with no such option, so its record-key rung runs through recordDisplayValueAt. Same resolver, same record, one call site opting out and hand-copying the rung it opted out of. Verified by this seat: one call site in the tree passes deriveFromRecordKeys: false, and it is the header's.

⇒ the hand-copy diverged on both of recordDisplayValueAt's documented clauses: it reads the STORED value (so a lookup's expanded object reached JSX — the React #31 crash) and it counts a whitespace-only string as a value. ⭐ That second one is a live defect the card did not know about: a record with name: ' ' rendered a BLANK <h1>. It was found by the repro pin, not by the card, and it is the same defective chain — so fixing and pinning it here rather than filing it separately is correct.

Ruling on the open question — A, and AGENTS.md #0.1 does not decide it

Clause 3 (the defensive stringify) is implemented as the card required and is structurally unreachable today. Ablation [B] proves it: delete the backstop, keep clauses 1+2, and all six pins stay green.

Ruled A — keep it, documented on both sides as an unpinned guard against a future rung.

⛔ The dev's cited ground for B — that AGENTS.md #0.1 disfavours renderer-side tolerance — does not hold here, and this seat read the rule rather than taking it: #0.1 is about metadata tolerance, 「a lenient fallback/alias in the renderer (reading both columns and fields, coercing a malformed shape, ??-defaulting around bad input) to make non-compliant metadata 'work'」, whose named harm is fossilizing a second de-facto contract for authors. A type-level crash guard on a value no author supplies accretes no dialect and teaches authors nothing. ⇒ #0.1 is silent on this, so the card's own text — which asked for all three clauses — governs, and there is no ruling that would let this seat drop a clause the card named.

C is the better long-run shape and is ⛔ not filed, deliberately: pinning pickLocalized's string guarantee would defend the invariant the backstop rests on. It is test-only hygiene, in none of the three filable classes, and the carrier test answers itself — whoever next touches that seam. Recorded here, not as an orphan card.

⭐ What makes A safe is that the null result is written where a reader will hit it: the code comment and the test docblock each say the ablation left every pin green. ⛔ Nobody can mistake that branch for a tested path.

The ablation is the part that earns the acceptance

Three legs, each mutation proved on disk by an anchor count plus a blob-hash change and each restore by blob == HEAD with an empty git diff HEAD — ⛔ never by an exit code:

  • [A] raw walk restored, backstop kept → clause-1 and clause-2 pins RED, the other four green.
  • [B] backstop deleted, clauses 1+2 kept → all six GREEN. The null result, reported rather than hidden behind a contrived pin.
  • [C] both removed (= base behaviour) → 5 RED, control green, and the React Task: Refactor Monorepo to Support Lazy-Loaded Plugins #31 error reproduced with the card's args[] key list verbatim.

⭐ The report's best line is an admission: the FIRST pin set was insufficient, and ablation [A] is what exposed it — with the backstop present, 「did not crash」 and 「display name on screen」 were both green, because the backstop resolves through the same displayNameOfEmbeddedObject and renders a byte-identical heading. Two pins were then added to isolate the clauses. A test suite that cannot tell which clause fixed it is a suite that will not notice one of them being removed.

Also recorded: a first CJK-precedent grep returned a false zero (grep -P with no UTF-8 locale, exit 2, empty stdout); a positive control caught it, and the real count is 546 of 2581 tracked test files. That is the third false-zero-caught-by-control on this shift, and the reason the discipline exists.

Gates

check-clause2-carriers.mjs --pair 10157 exits 0 — the declaration is read from the Clause-②-correction: comment naming claim 5751061454, which is the protocol's designated second carrier and ⛔ not a second Claim:. check-governed-merges.mjs --pr objectstack-ai/objectui#10157 exits 0, not governed. Clause-② no measured from the diff: four files, zero export lines added or removed in the renderer module.

⛔ Not filed, agreed: interpolate is annotated : string but returns its argument unchanged when that argument is not a string. LATENT — all three call sites are guarded — and in none of the three filable classes. Successor named: whoever adds a fourth caller that does not pass through pickLocalized.

Landing

43 checks, 0 pending, 0 failed. Flipping ready and arming now.


Generated by Claude Code

@os-tesla
os-tesla marked this pull request as ready for review September 20, 2026 17:10
@os-tesla
os-tesla added this pull request to the merge queue Sep 20, 2026
Merged via the queue into main with commit 4c6f549 Sep 20, 2026
45 checks passed
@os-tesla
os-tesla deleted the claude/issue-10117-page-header-title-fallback-crash branch September 20, 2026 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants