People lands on "My Profile" (one row), and My week's row link is the status pill — two nav/column fixes

[os-warren]

Two defects measured in the browser on 2026-09-02 (demo on main 8a0a436, Console served by @objectstack/cli 17.2.0). Both are one-line-class metadata fixes with a visible payoff on the two screens a manager and a team member open first.

1. nav_people shows only the signed-in user

The nav entry (src/apps/duly.app.ts, nav_people) points at sys_user with no viewName, so the Console lands on the platform object's default view, which is My Profile — a {current_user_id} filter. A manager opening People / 成员 sees one row: themselves. The demo has 13.

Fix: viewName: 'all_users'. That is the platform's own view name — verified: /_console/apps/ai.objectstack.duly/sys_user/view/all_users renders all 13 with Name / Email / Business unit columns. Keep requiresObject: 'sys_user'.

2. my_week puts status first, so the row link is the status pill

src/views/task.view.ts my_week.columns starts with { field: 'status' }. Two consequences, both measured:

• On desktop the Console makes the first column the record link, so the clickable thing is the Open pill and the task name is inert text. Users click the name.
• On a 390px viewport the card renderer takes the first column as the card title, and renders the raw value — every card is titled open / in_progress (see screenshot in the QA thread). The task name is demoted to a field.

Fix: subject first, status second. While there: drop attachments from my_week.columns — it is a dash on every row of the busiest screen (attachments stay on the record page's "Progress and attachments" section, which is where #108 put the upload).

Check late, stalled, by_unit still start with subject (they do today) and that test/i18n-coverage.test.ts and any view test keyed on column order stay green.

Not in this card

Bulk confirm / approve / return buttons on the duty views (a feature, separate card); board card tweaks; dashboard number formatting.

[os-warren]

Claiming this one.

• Branch: claude/issue-118-people-view-subject-first
• Session: https://claude.ai/code/session_01SqkTcrxUFci7nqXdbBSe2p

Scope taken as written: (1) nav_people → viewName: 'all_users'; (2) my_week.columns → subject first, status second, drop attachments. Bulk duty actions / board / dashboard formatting explicitly out of scope.

---

Generated by Claude Code

[os-warren]

{
  "issue": 118,
  "branch": "claude/issue-118-people-view-subject-first",
  "pr_url": "https://github.com/objectstack-ai/duly/pull/119",
  "pr_number": 119,
  "head_sha": "8d1711d95b7607960ffc7734a4dc71b8c4b69506",
  "gates": {
    "validate": "pass — '✓ Validation passed (445ms)', plus the one expected hierarchy-security capability warning AGENTS.md §7 says must not be silenced",
    "typecheck": "pass — tsc --noEmit, exit 0",
    "test": "pass — 'Test Files 32 passed (32) / Tests 837 passed (837)'",
    "build": "pass — '✓ Build complete', artifact dist/objectstack.json 208.3 KB"
  },
  "browser_evidence": {
    "harness": "pnpm demo --port 4318 in the worktree; signed in as admin@objectos.ai via in-page POST /api/v1/auth/sign-in/email (status 200) so the session cookie is on the browser context; Playwright chromium at /opt/pw-browsers/chromium; server killed by PID afterwards, port 4318 confirmed closed",
    "people_nav_entry_href": "/_console/apps/ai.objectstack.duly/sys_user/view/all_users — read off the Team nav menu, so this is the nav ENTRY resolving, not a typed URL",
    "people_rows_default_view": 1,
    "people_rows_all_users": 13,
    "people_detail": "breadcrumb 'User / All Users'; view tab bar shows My Profile | All Users | Unverified | 2FA Enabled with All Users active; first row 'Ana Ferreira · ana.ferreira@ardenline.example'",
    "my_week_headers": ["#", "Task", "Status", "Source", "Due", "Latest progress", "Actions"],
    "my_week_row_link": "a[href*=\"/record/\"] sits in the Task cell with the subject as its text — e.g. 'Emissions return — Northgate' -> /_console/apps/ai.objectstack.duly/duly_task/record/rWCkoZEut6a7ngu2; 'Open' is now plain text in the next cell",
    "my_week_390px_cards": "card titles are 'Emissions return — Northgate', 'Waste transfer log review — Northgate', 'Keep up with regulator bulletins', 'Permit condition review — Northgate', 'Site environmental audit — Northgate' — no longer raw open / in_progress",
    "attachments_column": "absent from my_week headers; still present on the other four grids via the shared columns array"
  },
  "files_changed": [
    "src/apps/duly.app.ts — nav_people gains viewName: 'all_users'; the adjacent comment now explains why the default view was the defect",
    "src/views/task.view.ts — my_week.columns is subject, status, source, due_date, progress (attachments dropped); the view's doc comment rewritten so it no longer describes the old order",
    "test/views.test.ts — my_week order pin updated; new walked guard: every duly_task grid leads with subject",
    "test/member-page.test.ts — pins nav_people.viewName === 'all_users'",
    "test/metadata-bindings.test.ts — the binding walk now RESOLVES a nav viewName on a platform object against @objectstack/platform-objects, plus three self-tests for the branch"
  ],
  "decisions": [
    "The card's two fixes were applied exactly as specified; no scope added beyond the guards the changes required.",
    "test/metadata-bindings.test.ts pins `boundaries` to an exact zero and exists to 'fail the day one is authored' — this card authored the app's first cross-boundary nav reference, so it fired. Rather than widen the pin, the walk now resolves the reference for real: a platform object's FIELDS cannot be judged from @objectstack/spec, but its VIEWS can, because @objectstack/platform-objects is a devDependency shipping them on disk. Net effect: boundaries stays zero AND a typo'd platform view name is now a finding — the same silent-fallback defect this card fixes.",
    "The new views.test.ts guard walks every duly_task grid rather than listing lens names, because the defect was one lens disagreeing with four; it also reaches the container default `list`, which the file's byName helper cannot address.",
    "`all_users` is NAMED, never redeclared locally — sys_user is runtime-provided and a local copy of a platform view would drift.",
    "No changeset and no release-notes edit: this repo has neither.",
    "Reverse-verification was run from the COMMITTED tree, three mutations, each confirmed on disk before running and restored after (tree verified clean): dropping viewName reddens member-page; restoring status-first reddens both views.test.ts assertions; 'all_userz' reddens metadata-bindings with the platform's own five view names listed in the message — which is what proves the walk reads the package rather than a copied list."
  ],
  "concerns": [
    "Card inaccuracy, not acted on: the issue says all_users renders 'Name / Email / Business unit'. It actually renders Name / Email / Phone Number / Email Verified / Identity Source / Two-Factor Enabled / Created At. That column set is the platform's and not this app's to choose; the row count — 1 vs 13, which is the actual defect — matched the card exactly. Noted in the PR body.",
    "Browser verification ran on the open edition, where ADR-0057 hierarchy scopes resolve to owner-only (AGENTS.md §7). That does not affect either fix: sys_user visibility here is the platform view's filter, and 13 rows were returned to the dev admin.",
    "premise_still_valid: true for both halves — the named files, the named symbols and both measured behaviours all reproduced on origin/main 8a0a436 before the change."
  ]
}

---

Generated by Claude Code

[os-warren]

os-dev-report

(Supersedes the report comment above. That one led with an HTML-comment marker, which GitHub's sanitizer stripped after the write — read back and confirmed gone, so it was invisible to a marker scan. No comment-edit tool is available in this session, so it is re-posted here leading with the literal text instead. The JSON is unchanged.)

{
  "issue": 118,
  "branch": "claude/issue-118-people-view-subject-first",
  "pr_url": "https://github.com/objectstack-ai/duly/pull/119",
  "pr_number": 119,
  "head_sha": "8d1711d95b7607960ffc7734a4dc71b8c4b69506",
  "gates": {
    "validate": "pass — '✓ Validation passed (445ms)', plus the one expected hierarchy-security capability warning AGENTS.md §7 says must not be silenced",
    "typecheck": "pass — tsc --noEmit, exit 0",
    "test": "pass — 'Test Files 32 passed (32) / Tests 837 passed (837)'",
    "build": "pass — '✓ Build complete', artifact dist/objectstack.json 208.3 KB"
  },
  "browser_evidence": {
    "harness": "pnpm demo --port 4318 in the worktree; signed in as admin@objectos.ai via in-page POST /api/v1/auth/sign-in/email (status 200) so the session cookie is on the browser context; Playwright chromium at /opt/pw-browsers/chromium; server killed by PID afterwards, port 4318 confirmed closed",
    "people_nav_entry_href": "/_console/apps/ai.objectstack.duly/sys_user/view/all_users — read off the Team nav menu, so this is the nav ENTRY resolving, not a typed URL",
    "people_rows_default_view": 1,
    "people_rows_all_users": 13,
    "people_detail": "breadcrumb 'User / All Users'; view tab bar shows My Profile | All Users | Unverified | 2FA Enabled with All Users active; first row 'Ana Ferreira · ana.ferreira@ardenline.example'",
    "my_week_headers": ["#", "Task", "Status", "Source", "Due", "Latest progress", "Actions"],
    "my_week_row_link": "the record link sits in the Task cell with the subject as its text — e.g. 'Emissions return — Northgate' -> /_console/apps/ai.objectstack.duly/duly_task/record/rWCkoZEut6a7ngu2; 'Open' is now plain text in the next cell",
    "my_week_390px_cards": "card titles are 'Emissions return — Northgate', 'Waste transfer log review — Northgate', 'Keep up with regulator bulletins', 'Permit condition review — Northgate', 'Site environmental audit — Northgate' — no longer raw open / in_progress",
    "attachments_column": "absent from my_week headers; still present on the other four grids via the shared columns array"
  },
  "files_changed": [
    "src/apps/duly.app.ts — nav_people gains viewName: 'all_users'; the adjacent comment now explains why the default view was the defect",
    "src/views/task.view.ts — my_week.columns is subject, status, source, due_date, progress (attachments dropped); the view's doc comment rewritten so it no longer describes the old order",
    "test/views.test.ts — my_week order pin updated; new walked guard: every duly_task grid leads with subject",
    "test/member-page.test.ts — pins nav_people.viewName === 'all_users'",
    "test/metadata-bindings.test.ts — the binding walk now RESOLVES a nav viewName on a platform object against @objectstack/platform-objects, plus three self-tests for the branch"
  ],
  "decisions": [
    "The card's two fixes were applied exactly as specified; no scope added beyond the guards the changes required.",
    "test/metadata-bindings.test.ts pins boundaries to an exact zero and exists to 'fail the day one is authored' — this card authored the app's first cross-boundary nav reference, so it fired. Rather than widen the pin, the walk now resolves the reference for real: a platform object's FIELDS cannot be judged from @objectstack/spec, but its VIEWS can, because @objectstack/platform-objects is a devDependency shipping them on disk. Net effect: boundaries stays zero AND a typo'd platform view name is now a finding — the same silent-fallback defect this card fixes.",
    "The new views.test.ts guard walks every duly_task grid rather than listing lens names, because the defect was one lens disagreeing with four; it also reaches the container default list view, which the file's byName helper cannot address.",
    "all_users is NAMED, never redeclared locally — sys_user is runtime-provided and a local copy of a platform view would drift.",
    "No changeset and no release-notes edit: this repo has neither.",
    "Reverse-verification was run from the COMMITTED tree, three mutations, each confirmed on disk before running and restored after (tree verified clean): dropping viewName reddens member-page; restoring status-first reddens both views.test.ts assertions; 'all_userz' reddens metadata-bindings with the platform's own five view names listed in the message — which is what proves the walk reads the package rather than a copied list."
  ],
  "concerns": [
    "Card inaccuracy, not acted on: the issue says all_users renders 'Name / Email / Business unit'. It actually renders Name / Email / Phone Number / Email Verified / Identity Source / Two-Factor Enabled / Created At. That column set is the platform's and not this app's to choose; the row count — 1 vs 13, which is the actual defect — matched the card exactly. Noted in the PR body.",
    "Browser verification ran on the open edition, where ADR-0057 hierarchy scopes resolve to owner-only (AGENTS.md §7). That does not affect either fix: sys_user visibility here is the platform view's filter, and 13 rows were returned to the dev admin.",
    "premise_still_valid: true for both halves — the named files, the named symbols and both measured behaviours all reproduced on origin/main 8a0a436 before the change."
  ]
}

---

Generated by Claude Code