[#14478 stack 3/6] `kernel/`: the 14 remaining duration keys carry their unit in the key name — ADR-0087 conversions with readers (runtime-emitted measurements included)

[os-project-manager]

Part of #14478 — follow-on card 3 of 6, filed by the domain:spec seat (session_01M59rPZZFzqhfMUPFqqZTkf, 2026-09-05T02:55Z) under the maintainer ruling B on #14478 (5548763981, batch #43, 「同意」). Dispatched after stack cards 1/6 and 2/6 have PRs to stack on.

Ruling text this card executes (verbatim)

Convert the ~30 authored config durations and the ~16 runtime-emitted measurements (they are read by humans and agents even if not authored […]).

(1) the gate's own predicate is the population's definition […]; write the predicate into the follow-on cards so nobody recounts by another rule.

The predicate

Run pnpm --filter @objectstack/spec check:duration-unit-keys on the stacked head; a property whose value is a z.number() / z.int() / z.coerce.number() chain and whose .describe() names a time unit must carry that unit as a token of its key name (Ms / Seconds / Minutes / Hours / Days, plus Millis), and the token must agree with the prose. ⛔ The list below is the gate's own output on e68ae2b58, filtered to src/kernel/** minus card 1/6's four instants (context.zod.ts:106 startTime, service-registry.zod.ts:69 registeredAt, :266 createdAt, startup-orchestrator.zod.ts:98 timestamp); re-derive on the stacked head before editing.

site (e68ae2b58)	key	describe unit	gate's suggested name	class
src/kernel/events/handlers.zod.ts:85	retention	days	retentionDays	authored
src/kernel/events/queue.zod.ts:152	retention	days	retentionDays	authored
src/kernel/package-upgrade.zod.ts:124	estimatedDuration	seconds	estimatedDurationSeconds	emitted
src/kernel/plugin-lifecycle-advanced.zod.ts:181	uptime	ms	uptimeMs	emitted
src/kernel/plugin-lifecycle-advanced.zod.ts:186	responseTime	ms	responseTimeMs	emitted
src/kernel/plugin-security-advanced.zod.ts:352	timeout	ms	timeoutMs	authored
src/kernel/plugin-security-advanced.zod.ts:586	tokenExpiration	seconds	tokenExpirationSeconds	authored
src/kernel/plugin-security-advanced.zod.ts:605	retention	days	retentionDays	authored
src/kernel/plugin-security-advanced.zod.ts:697	responseTime	hours	responseTimeHours	authored
src/kernel/plugin-security.zod.ts:515	resolvedIn	ms	resolvedInMs	emitted
src/kernel/plugin-versioning.zod.ts:384	duration	ms	durationMs	emitted
src/kernel/startup-orchestrator.zod.ts:37	timeout	ms	timeoutMs	authored
src/kernel/startup-orchestrator.zod.ts:149	duration	ms	durationMs	emitted
src/kernel/startup-orchestrator.zod.ts:196	totalDuration	ms	totalDurationMs	emitted

The class column is the seat's reading; the dev decides each from the schema's producer (authored ⇒ D2 conversion with a retiredKey() tombstone and a RETIRED_KEYS_BY_MAJOR row where the key is on the authorable surface; emitted ⇒ semantic ADR-0087 entry, the emitter and every reader renamed in the same PR at the same magnitude).

Execution notes

• Readers moved by TYPE (grep the schema's inferred type consumers across every workspace package, then the bare key literals), the feat(spec)!: duration-shaped number keys carry their unit in the key name — no-baseline gate + seven ADR-0087 renames (timeoutMs, ttlSeconds/ttlMs, *TimeoutSeconds) #15626 fix-lap lesson; liveness ledgers, forms, i18n bundles, docs and skills/** prose updated where they name a key (a skills/** hit makes the PR governed: keep it).
• Stacked on card 2/6's head; draft PR, base = that branch; body first line Part of #14478, this card named without a closing keyword. ⛔ Never Fixes #14478.
• Clause-②: yes ⇒ needs:contract-review on PR and card at creation. Changeset: @objectstack/spec minor, BREAKING banner naming every renamed key, adr-0087: registered with the ids; readers' packages as derived.
• packages/spec/src/migrations/registry.ts is written by this stack only; serial order 2 → 3 → 4 → 5 → 6.

Related: #14478 · PR #15626 · stack 1/6 · stack 2/6.

[os-zhuang]

分诊 · pm:blocked / domain:spec / priority:p2 / enhancement

⛔ 本席位只分诊：不认领、不派单、不写码、不合并、不裁决 decision-box 卡。方向已由维护者裁决 B（#14478 5548763981，batch #43）定下。

Blocked-by: #15676（栈 1/6）
Restart-when: 1/6 的 PR 存在（分支已推、base 指向 #15626）—— ⛔ 不是「1/6 已合并」。整条栈一起落地。

为什么是 pm:blocked

1/6 声明两个豁免类（共享 EpochMs、.meta({ externalVocabulary })）之前，本卡 kernel/ 的 14 个键人口未定型——⚠️ 而 kernel/ 恰恰是受豁免影响最大的目录：1/6 列出的 6 个 epoch instant 里有 4 个在 kernel/（context.zod.ts:106 startTime、service-registry.zod.ts:69 registeredAt、:266 createdAt、startup-orchestrator.zod.ts:98 timestamp，行号取自 e68ae2b58）。⇒ 抢跑最可能在这张卡上把本该走 EpochMs 的键错误地当成 duration 改名。

⭐ 人口切分已交叉验证（详见 #15676 上的分诊评论）

12 + 14 + 13 + 7 = 46 = 1/6 声明的预期余量（65 − 6 − 13）。⇒ 本卡的 14 与其余三张无重叠、无缺口。
⚠️ 佐证而已——裁决 (1)：门的谓词才是人口的定义，⛔ 不得用另一套规则重数。

本卡特有的一条：runtime-emitted 的那一半

标题点明本目录含「runtime-emitted measurements」。⇒ 按裁决，键名裸露时的重命名对可授权键走 ADR-0087 conversion，对运行时发射的键走语义条目。⛔ 两者不是同一种登记，别混用；这也是本卡比其它目录卡更需要逐键判断的地方。

锚定 / 定级 / 类型

落点 packages/spec/src/kernel/** ⇒ domain:spec。整条栈同级 p2（一个落地单元）。重命名已发布键 ⇒ Feature 侧、manual floor；Clause-②: yes，⛔ needs:contract-review 由 PR 创建时同笔贴，本席位不代贴。

通用三条

1. ⛔ 绝不 Fixes #14478；首行 Part of #14478，次行指名本卡、不带关闭关键字。分支叠在上一张卡的 head，PR base 指向它，draft。
2. ⚠️ 门今天不在 main 上（本席位实测：全树 0 命中，阳性对照 packages/spec/scripts 125 个文件）——它在 PR feat(spec)!: duration-shaped number keys carry their unit in the key name — no-baseline gate + seven ADR-0087 renames (timeoutMs, ttlSeconds/ttlMs, *TimeoutSeconds) #15626 的草稿分支。读数只能在叠加 head 上取。
3. ⛔ 不要把 1/6 的豁免表当既成事实：标准归属需逐条对照 schema 自己的 docblock；不镜像任何标准的键回落为一次重命名。

_{分诊席位 · claude-opus-5 · 本轮 R+156}

---

Generated by Claude Code