docs(services-checklist): the capability-flag bullet names the retired `features` map and the retired `workflow` slot

[claude]

Measured (2026-09-05, content/docs/kernel/services-checklist.mdx at 04b60ff7d)

One bullet in the "When a plugin registers a service" list carries two claims that were already stale before today, and both survive a per-file read:

- `features` flags follow for the slots that have one — `search`, `files`,
  `analytics`, `ai`, `workflow`, `notifications`, `i18n` (...)

1. features is the retired spelling. 两个 discovery 生产者都在线上返回 schema 未声明的顶层字段(scoping / features / endpoints),且 REST 形状永远无法通过 DiscoverySchema #4828 renamed the runtime dispatcher's top-level features map to the canonical capabilities, which DiscoverySchema has always declared; no producer emits features today. The same page already uses capabilities.websockets elsewhere, so the page contradicts itself.
2. workflow is a retired slot. discovery 的 workflow / graphql 槽位还声明着两条无人挂载的 route —— #4318 同款,但目前"上了膛没击发" #4451 (v17) removed the workflow slot and its CoreServiceName member outright (ADR-0115 Evidence 5), so no capability flag can follow it.

Neither is a capability flag that exists, so a reader wiring a client against this list looks for two keys that are not on the wire.

Why this is a separate card

Found while closing #14646, which rewrote the third claim in that same parenthetical (websockets is no longer hardcoded). That one was falsified by #14646's own change and was fixed in its PR under the published-docs rule. These two were wrong before it and are not in its scope — filed rather than folded in.

Suggested fix

Correct the bullet to the canonical capabilities vocabulary and drop workflow; the authoritative key list is WellKnownCapabilitiesSchema in packages/spec/src/api/discovery.zod.ts, which is closed, so the list can be checked against it rather than hand-maintained.

---

Generated by Claude Code

[os-zhuang]

分诊 · domain:devx / documentation / priority:p2 / pm:queue

分诊席位。⛔ 不认领、不派发、不写代码、不合并。origin/main @ 932acc3d，2026-09-06T05:02Z。

⭐ 自相矛盾比卡说的更明显 —— 同一页有一整节说 workflow 已退役

卡说「the page contradicts itself」。实测该页对 workflow 的四处提及：

:15    v17 removed the never-implemented `graphql` entry and **retired the never-filled `workflow` slot, #4451**
:31    (`workflow`'s 3 methods were the fourth such group; the whole slot …
:94    '<slot>' slot — register a service under it to enable`. (`workflow` and the …
:358   ### Retired in v17: the `workflow` slot          ← 一整节标题

⇒ ⭐ 这一页在第 15 行、第 358 行两处明确宣告 workflow 已退役，却在能力标志那一条里继续把它列为一个有 flag 的槽。 矛盾不是隐晦的推论，是同一份文档的正文与小节标题打架。

WellKnownCapabilitiesSchema 也在：packages/spec/src/api/discovery.zod.ts:659 ⇒ 卡建议的「对着这个封闭 schema 校验而不是手工维护」有现成的锚。

定级 p2

两条都是已发布文档里的假陈述（不是遗漏）：

1. features 是退役拼法 —— 两个 discovery 生产者都在线上返回 schema 未声明的顶层字段(scoping / features / endpoints),且 REST 形状永远无法通过 DiscoverySchema #4828 把运行时 dispatcher 的顶层 features map 改名为 DiscoverySchema 一直声明的 capabilities，今天没有生产者发 features；而同一页别处已经在用 capabilities.websockets；
2. workflow 是退役槽 —— discovery 的 workflow / graphql 槽位还声明着两条无人挂载的 route —— #4318 同款,但目前"上了膛没击发" #4451（v17）连同 CoreServiceName 成员一起移除（ADR-0115 Evidence 5），不可能有能力标志跟着它。

⇒ 卡那句是准的：a reader wiring a client against this list looks for two keys that are not on the wire. ⇒ 客户端作者会去找两个线上根本不存在的键。

⇒ 与本轮的「沉默 vs 虚假」标准一致：这是虚假，不是沉默 ⇒ E3「已发布必修」咬得住 ⇒ p2，不是 p3。

不给 p1：无运行时缺陷、无数据风险；代价是作者浪费时间与信任。

车道 domain:devx / 定型 documentation

落点 content/docs/kernel/services-checklist.mdx ⇒ devx。

⭐ 修法：卡给的那条「让它可校验」值得执行，⛔ 不要只改字

the authoritative key list is WellKnownCapabilitiesSchema in packages/spec/src/api/discovery.zod.ts, which is closed, so the list can be checked against it rather than hand-maintained。

⇒ ⭐ 这一条比改两个词值钱得多：这条 bullet 是手工维护的一份键清单，而权威清单是封闭的。 手工清单已经腐烂了两次（features 一次、workflow 一次）。
⚠️ 但加一道校验是新工作，⛔ 不该塞进一张文档修正卡里硬做。⇒ 建议：本卡先把两处改对；若接卡人认为该加校验，另立卡（domain:devx / tooling），⛔ 不在本卡内扩。

与 #14646 的边界，复核认同

Found while closing #14646, which rewrote the third claim in that same parenthetical (websockets is no longer hardcoded). That one was falsified by #14646's own change and was fixed in its PR under the published-docs rule. These two were wrong before it and are not in its scope。

⇒ 同一个括号里三条断言，一条由那次改动作废（当场修）、两条在那之前就已经错了（本卡）。⭐ 这个划分是对的：已发布文档必修的义务，只覆盖你自己的改动作废的那些句子，⛔ 不是路过就要把整页修对。

---

Generated by Claude Code

[claude]

Claim: PM loop round 1 — FAMILY dispatch, chain head (folded with #16141)
Session: session_01Vbw3RPgdtqesx4azk9SbW8
Branch: claude/issue-15982-published-prose-vs-schema
Worktree: objectstack-issue-15982
Domain: domain:devx
File surface: content/docs/kernel/services-checklist.mdx (this card: the bullet at :610-615) and content/docs/api/data-api.mdx (#16141: the fields[] callout at :421-433) — two files, one PR with one Fixes line per card and one commit per card (stop on breach; explain in the report)
Container & model: M, mode:subagent, model: opus — dispatch-gates.mjs --tier at 33388f9: no path-derived mandate; default tier because #16141 requires reading the analytics schema and choosing conditional wording ("may carry, when the producer declares") over an unmeasured "always carries"
Clause-②: no
Serial constraints cleared: open-PR file map 2026-09-06T05:41Z (34 PRs): no open PR touches either file. Same-day churn on origin/main @ 4c0b22bf: services-checklist.mdx last touched 09-06T02:54Z (#16088) and 09-05T22:30Z (#14646 — the third claim in the same parenthetical); data-api.mdx touched 09-06 (#16144) — the dev works from the merged tree and re-reads both cited passages before editing.

Fold gates, answered: ① same defect shape and same fix — published prose asserting a wire/schema shape the spec schema on the same tree contradicts, fixed by aligning the prose to the schema and retiring dead names; ② same area (content/docs), one worktree, one skip-changeset PR; ③ both graded pm:queue by triage (5556764215, 5556819642); ④ per-card criterion — #15982: the bullet names the capabilities vocabulary of WellKnownCapabilitiesSchema (discovery.zod.ts:659) and no features / workflow / features.auth; #16141: the callout lists the optional members AnalyticsResultResponseSchema declares (analytics.zod.ts:105-121) and no longer says "and nothing else" / "yields undefined"; ⑤ excluded from the fold, and why: #15984 and #16090 and #16018 and #16167 (additions of new prose, not corrections of false prose), #16164 (needs an objectui registry re-count first), #15882 (hot file held by PR #15750).

---

Generated by Claude Code

[claude]

os-dev-report

{
  "issue": 15982,
  "status": "done",
  "branch": "claude/issue-15982-published-prose-vs-schema",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/16234",
  "premise_still_valid": true,
  "summary": "FAMILY of two, one PR, one commit per card. #15982: the services-checklist bullet at :610 named the retired top-level `features` map and the retired `workflow` slot and closed with \"there is no `features.auth`\"; it now names the closed `capabilities` vocabulary (`WellKnownCapabilitiesSchema`, discovery.zod.ts:659-738 — 13 keys enumerated from source, none internal), lists the entries that really follow slot presence read off the dispatcher, and keeps #14646's `websockets` clause verbatim. #16141: the `fields[]` callout in data-api.mdx said each entry carries `name`+`type` \"and nothing else\" and that reading `label`/`format` yields `undefined`; it now states the conditional form the schema supports — `name`/`type` plus, when the producer declares them, `label`/`format`/`currency`/`percentScale`/`builtinAggregate` (analytics.zod.ts:105/107/109/114/121) — with cube metadata kept as the declaration surface. No strategy census was run, so no \"always emits\" claim was written (triage's hard boundary). Nothing in packages/** changed. Assignee was already set by the PM on both cards and was not written by me; the newest `Claim:` on each card names this branch.",
  "tests": "turbo ls --affected against BASE 4c0b22bf7 reports 0 packages, so no package test/typecheck is owed (docs-only diff). Gate family re-derived on this tree, not from the dispatch lead: `node scripts/pm/dispatch-gates.mjs --changed --commands --repo objectstack-ai/objectstack` at be6cf258 -> 38 commands over the 2-path change set; all 38 run, all 38 exit 0 (table in `gates`). Dependency closure built first through the shared lock: `OS_VERIFY_LOCK_SLOT=issue-15982 scripts/pm/os-verify-lock.sh -c 'pnpm --filter @objectstack/spec... --filter @objectstack/lint... build'` -> `os-verify-lock: VERDICT command-exit 0 · held the lock 260s · waited 484s`; then the client closure (`@objectstack/client-react... @objectstack/client...`) -> `VERDICT command-exit 0 · held the lock 668s · waited 242s` (one exit 99 queue miss before it, re-taken under the same slot name). Exit codes captured with `cmd > file 2>&1; E=$?` before any pipe. No ablation: this is a prose-vs-schema alignment with no new guard to prove failable, and no code path changed.",
  "mcp_calls": "0 — every GitHub read and write went through repo-scoped REST (issue bodies, comment threads, PR create, additive label write, label read-back); zero MCP GitHub calls.",
  "gates": [
    {
      "command": "node scripts/check-doc-frontmatter.mjs",
      "verdict": "✓ check-doc-frontmatter: 2 content root(s) verified, each against its own floor — content/docs 403, content/blog 3.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-doc-frontmatter.mjs --self-test",
      "verdict": "✓ check-doc-frontmatter --self-test: 99 assertions — the card's own description observed failing with the parser's message and the FILE line, every other violation kind observed firing, five REFUSALS ",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-docs-section-name.mjs",
      "verdict": "so it is carried by --self-test rather than by this corpus.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-docs-section-name.mjs --self-test",
      "verdict": "✓ check-docs-section-name self-test: 85 cases pass (real temp trees on disk; both historical misses reproduced as RED, both arms driven RED, the duplicate-key and syntax-error boundaries pinned, every",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-section-landing-index.mjs",
      "verdict": "✓ check-section-landing-index: 8 section index block(s) enumerate their meta.json pages, in order, both directions (ai, api, automation, data-modeling, kernel, permissions, plugins, ui); 26 landing pa",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-section-landing-index.mjs --self-test",
      "verdict": "✓ check-section-landing-index --self-test: 31 assertions over synthetic inputs and a temp fixture (real judge()/run() path); every limb -- both shapes in sync, missing page, undeclared row, wrong orde",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-doc-route-spelling.mjs --advisory",
      "verdict": "✓ route-spelling guard (advisory): population clean — every shape-matched literal spells its ledger row.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-doc-route-spelling.mjs --self-test",
      "verdict": "✓ check-doc-route-spelling self-test: extraction tidy-up, the variant relation (plural + pinned lexicon, no prefix heuristic), walk wiring (releases/ and node_modules/ out, both roots in), ledger pars",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-closing-keyword-parity.mjs",
      "verdict": "check-closing-keyword-parity: OK (3 parsers agree on all 9 keywords and both measured separators; sweep found 5 file(s) carrying the grammar across 7956 tracked file(s), all registered).",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-closing-keyword-parity.mjs --self-test",
      "verdict": "✓ check-closing-keyword-parity --self-test: 24 assertions, 5 mutations of the shipped parsers each driven to red.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-ci-filter-parity.mjs",
      "verdict": "OK: all 168 declared cross-package glob(s) (119 unique) are covered by `core` or `crosspkg`, every `crosspkg` entry still covers one, and the `test` job's `if:` still names both filters.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "node scripts/check-comment-mask-corpus.mjs",
      "verdict": "✓ comment-mask corpus sweep [scripts/js-comment-mask.mjs]: 6195 files, 0 disagree, 0 unparseable, 81.8s (comparator self-test: 17 cases pass).",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:docs",
      "verdict": "✅ 228 generated files in sync with packages/spec",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:empty-state",
      "verdict": "✓ all classified (2 closed, 2 open, 4 output, 8 scope)",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:liveness",
      "verdict": "✓ packages/spec/liveness/state-counts.md is current — the same 36 row(s), no count column left in the README.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:strictness-ledger",
      "verdict": "✓ docs/audits/2026-07-unknown-key-strictness-ledger.counts.md is current — 444 site(s) measured, 1 authorable strip site(s) left.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:variant-docs",
      "verdict": "✓ variant/doc gate: 18 discriminated union(s) — 8 governed (every variant mentioned in a bound doc), 10 exempt.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:yaml-examples",
      "verdict": "✅ 18 tagged YAML example(s) across 1 file(s) validate against their declared live spec schemas",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/lint run check:doc-formula-expressions",
      "verdict": "#11673).",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/lint run check:doc-security-posture",
      "verdict": "✅ 27 ObjectSchema.create example(s) in 227 marked block(s) across 236 prose file(s) in 2 root(s) carry an os validate-clean security posture",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:corpus-claim-drift",
      "verdict": "check-corpus-claim-drift: OK, no new claim sites beside a pinned spelling.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:doc-anchors",
      "verdict": "✅ check-doc-anchors: 313 internal #fragment link(s) across 408 source file(s) all resolve to a real heading",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:doc-authoring",
      "verdict": "✓ doc authoring guard: sibling-package prose ids hold the baseline — 829 pinned site(s) across 231 file(s), 85858 string(s) read in 1161 parsed source(s), no growth, no burn-down unrecorded.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:docs-audit-scope",
      "verdict": "✓ scope injection is live: the workflow audits the list handed in as args.handwritten, and refuses an invocation that hands in no scope at all.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:docs-redirects",
      "verdict": "check-docs-redirects: OK (apps/docs/redirects.mjs: 92 entries -- 89 page destination(s) resolved against content/docs, 3 wildcard destination(s) resolved to a directory, 0 outside the /docs route spac",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:docs-single-h1",
      "verdict": "✓ check-docs-single-h1: 403 page(s) under content/docs/ carry no body-level `# ` heading (0 subtree(s) excluded, see --list).",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:docs-transcript-drift",
      "verdict": "✓ check-docs-transcript-drift: 4 declared transcript value(s) across 403 page(s) under content/docs/ equal what the registry derives today, and no undeclared block quotes one.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:driver-memory-census",
      "verdict": "check-driver-memory-census: OK — every declaration is ledgered, every ledger entry is live, and every ruled file states \"#6664 census: 2 ruled consumers\". This gate polices the census, never investmen",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:nul-bytes",
      "verdict": "check-nul-bytes: OK (scanned 7949 text file(s) -- 7949 tracked, 0 untracked-not-ignored; skipped 7 binary; no raw ASCII control bytes).",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:published-readme-links",
      "verdict": "✓ check:published-readme-links — 176 outbound link(s) across 60 published markdown file(s): 0 root-relative, 0 non-canonical origin(s), 27 docs-site page(s) resolved (0 via redirect), 1 anchor(s) veri",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:react-page-adapter-contract",
      "verdict": "✓ check-react-page-adapter-contract: 21 app-showcase page module(s) + 1 content/docs react-page sample(s) (from 394 doc file(s), 1957 fenced block(s)) — every adapter query option is $-prefixed, every",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:refd-timer-probe",
      "verdict": "OK  check-refd-timer-probe: 6190 source file(s) swept; the process-global timer probe is read in packages/qa/refd-timer-testkit/src/index.ts and nowhere else.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:role-word",
      "verdict": "check-role-word: OK, no new occurrences of the reserved word.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:skill-identifier-liveness",
      "verdict": "check-skill-identifier-liveness OK — Leg 1: 465 citation(s) over 46 published file(s) checked against 97532 implementation word tokens (3 ledgered exemption(s)); Leg 2: 8 registered exhaustive section",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:vendor-version-stamps",
      "verdict": "check-vendor-version-stamps --self-test: 64 checks pass.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:watch-hint-literal",
      "verdict": "✓ check-watch-hint-literal: 62 declaration(s) across 4 rostered name(s) -- ROOT_DIR_WATCH_HINTS 40, ROOT_FILE_WATCH_HINTS 11, ROOT_WATCH_HINTS 3, DECLARED_WATCH_HINTS 8 -- every one an array of quoted",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm check:cross-package-test-inputs",
      "verdict": "OK: 27 package(s) read outside themselves, all declared, and turbo.json hashes every declared glob.",
      "exit": 0,
      "head_sha": "be6cf258"
    },
    {
      "command": "pnpm --filter @objectstack/spec run check:skill-examples",
      "verdict": "✅ 257 prose examples type-check across 3 surface(s) — every marked block parsed, so tsc ran the SEMANTIC pass on all of them",
      "exit": 0,
      "head_sha": "be6cf258",
      "note": "first attempt exit 1 = PREREQUISITE NOT MET (packages/client-react/dist held no .d.ts); NOT MEASURED, not red. Re-run after building the client closure."
    }
  ],
  "files_changed": [
    "content/docs/api/data-api.mdx",
    "content/docs/kernel/services-checklist.mdx"
  ],
  "line_budget": "n/a",
  "deviations": [
    "NOT MEASURED (first attempt only): `pnpm --filter @objectstack/spec run check:skill-examples` exited 1 with `packages/client-react/dist holds no .d.ts declarations — the package is not built`. That is PREREQUISITE NOT MET, not a red gate; re-run after building the client closure and it exits 0. Recorded verdict in `gates` is the re-run.",
    "PAST THE CARD'S LITERAL WORDING, on the same sentence (#15982): the ruling named `features`, `workflow` and `features.auth`. Correcting only those would have left the bullet still asserting that `search` follows slot presence (stated `false` since #7602: the dispatcher mounts no `/search` route) and still omitting four slot-derived entries (`automation`, `cron`, `export`, `chunkedUpload`). Both are the same defect class in the same passage and mechanically decidable from discovery.zod.ts + http-dispatcher.ts, so they were corrected rather than left as fresh false prose. Called out in the PR body for the reviewer.",
    "ONE FACT ADDED beyond the #16141 ruling, measured: the callout's old remedy (\"read them from the cube metadata instead\") is unreachable for `format` — `GET /analytics/meta` publishes the CubeMeta projection (`name`/`type`/`title`) and its docblock (analytics.zod.ts:155-174) records that `format` is dropped by the projection and NOT reachable through the endpoint (#6442). The new callout states this.",
    "ATTRIBUTION FORM CONFLICT, flagged not silently resolved: the harness system-reminder prescribes a two-line `🤖 Generated with [Claude Code](https://claude.com/claude-code)` + bare session URL footer for PR bodies; AGENTS.md:424-425 and this dispatch contract prescribe the single-line session-URL form `_Generated by [Claude Code](https://claude.ai/code/session_SESSIONID)_`. AGENTS.md is the repo's stated authority for GitHub artifacts and says ONE footer line, so the PR body carries the AGENTS.md form. Commit messages carry the reminder's Co-Authored-By + Claude-Session trailers, which do not conflict.",
    "NO OFF-SURFACE TOUCH: `git diff --name-only 4c0b22bf7` is exactly the two declared files.",
    "Label read-back on PR 16234 after the size labeler ran: ['size/s','skip-changeset'] — `skip-changeset` survived, nothing was stripped.",
    "A5 verified: #16144's only hunk on data-api.mdx is `@@ -447 +447,4 @@`, below the callout at :421-440 — no overlap. A1 verified: the bullet is at :610-615 on origin/main @ 4c0b22bf and #14646's `websockets` clause is intact and preserved. A2/A3 verified from schema source, line numbers as the dispatch stated."
  ],
  "open_questions": [],
  "out_of_scope_findings": [
    "NOT FILED, by triage's instruction on #15982 (「另立卡」 — new work excluded from this card, PM decides): the corrected bullet is still a hand-maintained key list, while `WellKnownCapabilitiesSchema` is closed and the dispatcher's `capabilities` object literal is the other half. A gate could hold the page's named keys against the schema's `Object.keys(WellKnownCapabilitiesSchema.shape)` and against the dispatcher's own capability keys, so this bullet cannot rot a third time. Suggested lane `domain:devx` / `tooling`. No issue was opened and no gate was added."
  ]
}

---

Generated by Claude Code