You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
permission: four texts still say allowRestore / allowPurge "return with M2" after #30237 PR 4 corrected the tombstones (migration entry 18, conversion entry 18, ui permission slice, metadata plugin comment) #31508
Filing gate: ③ stale prose. #30237 PR 4 (PR #31438) corrects the allowRestore / allowPurge tombstone texts under the maintainer's consent (card #30237 comment 6720657486): restore and purge exist (ADR-0148), and their grants are allowRestoreOwnDeleted / manageRecycleBin. Four more texts outside that consent still say the keys "return with M2". The card thread listed them in its round-1 handback.
Reach:
packages/spec/src/conversions/entries/18/permission-allow-restore-purge-removed.ts: its summary, which os migrate meta prints to authors upgrading old metadata.
packages/spec/src/migrations/entries/semantic/18.permission-restore-purge-bits-retired.ts, plus its generated row in packages/spec/src/migrations/registry.ts.
Decide whether a released migration or conversion entry's prose may be reworded. Look for an immutability pin or a precedent. If it may, point the summary and the semantic entry at allowRestoreOwnDeleted / manageRecycleBin (ADR-0148) and regenerate the registry. If it may not, record why on this card.
Fix the two code comments (metadata plugin.ts, ui permission-slice.ts).
Prose only. No accept-set, conversion behaviour or tombstone change.
Clause-②: no · Metadata-protocol: none.
Precondition: PR #31438 merged. Until then this card is pm:blocked.
Scope addition · 2026-11-08T12:08Z · from the #31438 at-tier delta review (N2). Two more texts still say the keys "stay denied via DESTRUCTIVE_OPERATIONS … RETURN with M2":
packages/spec/liveness/permission.json, the dead rows for allowRestore (:94) and allowPurge (:100);
the retiredKeyRemedy docblock in packages/lint/src/validate-retired-permission-residue.ts (~:114-119).
They belong in this card's task list beside the entry-18 texts.
Unblocked · 2026-11-08T12:57Z · PR #31438 (#30237 PR 4) merged as 6a708214, so the precondition this card waited on is met. pm:blocked → pm:queue for the spec lane.
Activity
objectstack-fleet commentedon Nov 8, 2026
domain:server#3 · os-project-manager · session_01FEkQ5pXkgNXVpCn2GZDjyy
Scope addition · 2026-11-08T12:08Z · from the #31438 at-tier delta review (N2). Two more texts still say the keys "stay denied via DESTRUCTIVE_OPERATIONS … RETURN with M2":
packages/spec/liveness/permission.json, thedeadrows forallowRestore(:94) and:100);allowPurge(retiredKeyRemedydocblock inpackages/lint/src/validate-retired-permission-residue.ts(~:114-119).They belong in this card's task list beside the entry-18 texts.
objectstack-fleet commentedon Nov 8, 2026
triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U
Path: none
Triage: audit · p3 ·
domain:spec· confirmed · 2026-11-08T12:53Z⛔ Not a claim.
allowRestore/allowPurge"return with M2" after engine: snapshot deletes into the recycle bin, restore under original ids, purge, and the TTL reap (#3146 slice 3) #30237 PR 4 (PR feat(security): read the recycle bin's grants for restore and purge (#30237 PR 4) #31438) corrected the tombstones. The twopackages/specones are the conversion summaryos migrate metaprints and the semantic migration entry; the other two are a ui code comment and a metadata plugin comment.domain:specholds the spec sites under the spec red line. It stayspm:blockeduntil PR feat(security): read the recycle bin's grants for restore and purge (#30237 PR 4) #31438 merges. [security][立项位] M2 权限生命周期(undelete/purge)功能与 allowRestore/allowPurge RBAC 同批建设(evaluator 已 fail-closed,allowTransfer 已 enforced) #1883 tracks the same series.Generated by Claude Code
objectstack-fleet commentedon Nov 8, 2026
domain:server#3 · os-project-manager · session_01FEkQ5pXkgNXVpCn2GZDjyy
Unblocked · 2026-11-08T12:57Z · PR #31438 (#30237 PR 4) merged as
6a708214, so the precondition this card waited on is met.pm:blocked→pm:queuefor the spec lane.