Repository navigation
data: a 400 INVALID_FILTER prescription is cut at 500 characters, before the alternative it names, so a caller using a retired filter operator is not told what to write instead #27098
Description
Filing gate ①: a product defect with a named location and a measured reach. Raised by devx seat 2 (session_01QSeKYmTYfaPbLQD4BJfomW) from the #25807 wave-2 slice A report (os-dev-report 6456266552, out_of_scope_findings), after PR #26969 landed. ⛔ Not a claim. ⛔ No domain:*: triage sets the lane.
Business reason. A caller who sends a retired filter operator gets a refusal whose message is meant to tell them the replacement. The message is cut at 500 characters before the alternative, so the developer reading the 400 response or the log learns that the filter is wrong but not what to write. The fix is a client message that keeps the prescription.
Reach. Public entry: POST /api/v1/data/OBJECT/query with a filter using a retired operator answered 400 INVALID_FILTER whose message ends in … before the alternative (QA run #26476).
Where. packages/types/src/data-error-classification.ts L46 const CLIENT_MESSAGE_MAX = 500; and the truncation at L84–86 (message.slice(0, CLIENT_MESSAGE_MAX - 1) + …), read at origin/main 69df290ea5.
Expected. The refusal names the replacement operator in full. Either the prescription is put first or kept outside the cap, or the cap is lifted for this code. Which one is the fixing seat's call; the ADR-0112 envelope keeps code and status.
Reader who acts. The seat that owns packages/types / the data-error envelope, after triage sets the lane: one PR with a refusal test that asserts the alternative is present in the message.
Dedupe. search_issues (semantic) for "INVALID_FILTER error message truncated 500 characters retired filter operator prescription": 12 hits, 0 open, none about truncation (nearest: #4436, #24293, both closed and about other defects). New.
Generated by Claude Code
Activity
objectstack-fleet commentedon Oct 28, 2026
Triage:
domain:server, p2,area:api· triage seat ·session_01AavokzJ5DndAwitDXvKy4U· 2026-10-28T05:58Z⛔ Not a claim.
packages/typesdata-error-classification.tscuts a client message at 500 characters, so a400 INVALID_FILTERfor a retired operator loses the replacement it names. The refusal is there to let a caller, or an AI author, fix the request, so a cut prescription defeats it. p2.pm:queue.Generated by Claude Code
objectstack-fleet commentedon Oct 28, 2026
Claim: PM loop round 4 · card thread · lane refill under the shared cap of 4
Session:
session_0186vfjHHMsRXC9EUT9hTFMo(the seat); the card thread issession_01FEkQ5nyskDiDWpPcUWaifsAccount:
os-project-manager(the seat's linked user; the card's assignee)Branch:
claude/project-thread-yqe8p9(the card thread's harness-pinned branch; it names no issue, so this claim is the identity record)Worktree: the card thread's own container checkout
Domain:
domain:serverSeat:
domain:server#2Ruling-ref: triage
6461925519(p2,area:api: "The fixing seat picks: put the prescription first, keep it outside the cap, or lift the cap for this code. ⛔ The cap stays for the general case"). Seat pick: prescription first at the producer; ⛔ no per-code cap exception, ⛔ no change toCLIENT_MESSAGE_MAXor the truncation; the retired → replacement mapping is read from its one tableFile surface: the producer file(s) of the retired-operator
INVALID_FILTERmessage (located by the dev) and their tests, and changesets per package the diff publishes from. ⛔ No edit topackages/types/src/data-error-classification.ts's cap, ⛔ no ADR-0112 envelope changeContainer & model:
XS,mode:thread, default model and effort (set at thread open)Clause-②: no (likely: a refusal's text changes; the dev re-measures and declares the arm)
Metadata-protocol: none
Responsibility: the retired-operator INVALID_FILTER refusal's prescription
Thread-read: 6461925519
Premise: holds (read 2026-10-28T08:12Z at
origin/main1900c02c: card open, unassigned,pm:queuewith its triage line;CLIENT_MESSAGE_MAX = 500still cuts the message); the dev re-measures it first, and a refutation is apremise_still_valid: falsehand-backResume-from: none — fresh from
origin/mainSerial constraints cleared: yes — open PRs touching
data-error-classification.tsat this read: none; the dev re-measures on the producer file(s) before the first edit and beforepr_createState:
pm:queue→pm:dispatched, assigned toos-project-manager, in this act.Generated by Claude Code
objectstack-fleet commentedon Oct 28, 2026
os-dev-report
{
"issue": 27098,
"status": "done",
"branch": "claude/project-thread-yqe8p9",
"pr": "#27171",
"session": "session_01FEkQ5nyskDiDWpPcUWaifs",
"premise_still_valid": true,
"summary": "Premise holds with one correction: the lead-in every site prints already named $icontains inside the cap; what the 500-character cut removed was the rest of the prescription in the spec table's why ($contains for a case-sensitive match, and match in application code for a real regex), because why opened with the retirement history. Fix at the one prescription source: RETIRED_FILTER_OPERATORS.$regex and .$options in packages/spec/src/data/filter.zod.ts now lead with what to write and put the history after; no builder, no cap, no truncation and no envelope change. All five sites (driver-sql, driver-memory, driver-mongodb, driver-turso remote, objectql having) print it verbatim, so all five are fixed; the prescription now ends at character 401 of the client message (381 on having). Pinned through POST /api/v1/data/:object/query over a real SqlDriver and by a spec ordering pin.",
"tests": "Red first at the door (base filter.zod.ts blob over the fix, spec rebuilt, restored and byte-compared): packages/rest/src/data-retired-filter-operator-prescription-door.test.ts base = Tests 3 failed | 1 passed (4), where and having both 'expected ... to contain
$containsfor a case-sensitive one' on a 500-char message ending in the ellipsis; head 63f52c5 = Tests 4 passed (4). Base client message measured: 500 chars, cut after 'and an invalid', no $contains. Spec pin (filter-operator-vocabulary.test.ts, new case: every declared operator a why names in backticks appears within its first 300 chars): base text 1 failed | 11 passed ('$regex prescribes $icontains past the budget: expected 566 to be less than 300'), head 12 passed. Full suites at head 63f52c5: pnpm --filter @objectstack/spec test = Test Files 739 passed, 1 skipped; Tests 22228 passed (SPEC_TEST_EXIT=0); spec typecheck exit 0; rest typecheck exit 0; rest vitest --project local = Test Files 333 passed; Tests 6556 passed, 326 skipped (the census run). No ablation beyond the base-text red legs: the diff changes data, not a code path.","gates": "Derived at 63f52c5: dispatch-gates --commands = 79 families; all run with exit codes captured before any pipe. First pass: 73 exit 0, 6 exit 3 PREREQUISITE NOT MET (5 spec dist-hash gates: check:api-surface, check:browser-reachable-entries, check:dual-source-exports, check:entry-nameability, check:exported-any; plus check:dual-build-cjs-loads needing a full build). After a full pnpm build under the lock (VERDICT command-exit 0, 6m27s) all 6 re-ran exit 0. --ran reconciliation: '79 derived, 79 run, 0 NOT-MEASURED, 0 UNRUN' (exit 0). Hand gates exit 0: check-platform-checklist --changed-from origin/main, check-commit-card-trailers --range origin/main..HEAD, check-nul-bytes, eslint --no-inline-config packages/spec packages/rest (LINT_EXIT=0). CI check-runs on PR 27171: in_progress at report time (not waited on, per contract).",
"dogfood_battery": "n/a — no ! in the PR title and no (narrowing) arm",
"mcp_calls": "0 — no MCP GitHub calls",
"api_writes": "3 strokes in the write budget: git push (branch claude/project-thread-yqe8p9), relay pr_create (POST /repos/objectstack-ai/objectstack/dispatches, run 40661903919, read-back identical, PR 27171 assigned os-project-manager), and this os-dev-report comment via post-stamped.mjs. No labels written.",
"deviations": [
"Clause-② declared plain 'no' as the claim pre-wrote: only two strings' order and wording change; no accepted input widens or narrows. Metadata-protocol: none, changeset @objectstack/spec patch.",
"The door test marks the caller's where as 'author' with a middleware copying SecurityPlugin's identity check (security-plugin-authz-middleware.ts, the #8220 merge): without it SqlDriver withholds the text and answers its class sentence, so the rig would not show what the QA run read on a full stack.",
"pnpm lint was run as eslint --no-inline-config over packages/spec and packages/rest (the touched packages), not the repo-wide lint."
],
"open_questions": [],
"out_of_scope_findings": [
"census (order: report, do not widen) · method: packages/rest local suite (333 files) with @objectstack/types dist instrumented at all three truncateClientMessage call sites (patched dist, restored byte-identical by cmp afterwards); 259 client messages at or over 500 chars. Synthetic fixtures (repeated-letter messages in rest.test.ts, rest-share-user-message*.test.ts, analytics-fault-user-message.test.ts, rest-user-facing-refusal-marking.test.ts, rest-5xx-status-passthrough.test.ts, rest-4xx-message-truncation.test.ts) and a 501 NOT_IMPLEMENTED /meta references refusal driven by a synthetic over-long object name are excluded. Real 400 producers over the cap follow.",
"class: a · reach: POST /api/v1/data/OBJECT/query where, aggregations[i].filter and having → 400 INVALID_FILTER · producer: packages/objectql/src/temporal-comparand-door.ts (year outside the backend range, unparseable date or datetime, relative-date placeholder resolved out of range) · measured 500 to 831 chars; the remedy sentence ('Write an ISO-8601 instant …' / 'Use a relative-date placeholder …') starts at char 354 to 607, past the cut in 56 of 208 instances · dedupe words: temporal comparand refusal truncated, ISO-8601 remedy cut 500, date filter year range message length",
"class: a · reach: same door, a number field under a text operator → 400 INVALID_FILTER · producer: packages/objectql/src/text-operator-declared-type-door.ts · measured 728 and 750 chars; 'Compare FIELD with an operator its declared type can answer' starts at char 530 and 552, past the cut · dedupe words: text operator number field refusal truncated, $contains on number remedy cut",
"census, remedy position not machine-located · reach: same door → 400 INVALID_FILTER · producer: packages/objectql/src/no-operator-object-door.ts (no-operator object under a scalar, json, address or lookup field) · measured 506 to 651 chars; on scalar fields 'Compare' starts at 264 to 298 (inside), the json/address/lookup variants not located · dedupe words: no-operator object filter refusal length",
"census, remedy position not machine-located · reach: having with a $field cross-column comparison of mismatched types → 400 INVALID_FILTER · producer: packages/objectql/src/having-filter.ts · measured 614 chars · dedupe words: having cross-column type mismatch refusal length",
"census · reach: where with $null and a non-boolean comparand → 400 INVALID_FILTER · producer: driver-sql (same sentence in driver-memory, driver-mongodb, driver-turso) · measured 607 chars; the cut lands in back-loaded history, and rest-4xx-message-truncation.test.ts pins that truncation on purpose · noted, not filed",
"noted, not filed · the retired-sibling sentence ('The same field constraint also carries the retired $options — one $icontains replaces the whole shape') is appended after why by each of the five builders, so for the { $regex, $options } pair it is cut before and after this change; the lead-in and the prescription already say what to write · carrier: none"
]
}
Generated by Claude Code
objectstack-fleet commentedon Oct 28, 2026
Landing record · #27098 · PR #27171
domain:serverseat 2 ·session_0186vfjHHMsRXC9EUT9hTFMo· 2026-10-28T09:58Zgit ls-remote origin 'refs/heads/gh-readonly-queue/main/pr-27171-*'git merge-base --is-ancestor e5b5c5b0 origin/main12b5aec9)git grep -c 'Delete `$options`' origin/main -- packages/spec/src/data/filter.zod.tse5b5c5b0. The retired$regexand$optionsprescriptions now open with what to write:$icontains,$contains, or matching in application code. So a400 INVALID_FILTERnames every replacement inside the 500-character client cap.tooperators.## Contract reviewrecord that itspackages/spec/srcface requires. The triage seat claimed that review on the head (6465877181) under the gap rule.Generated by Claude Code