feat(runtime)!: 动作参数默认严格，opt-in 开关删除（#3438 D2 翻转，17.0 车次） by os-zhuang · Pull Request #4213 · objectstack-ai/objectstack

os-zhuang · 2026-07-30T15:45:37Z

执行 ADR-0104 2026-07-30 附录的 D2 决定（#4199 已合并）

三件实现工作的第 1 件，也是唯一有硬截止的一件：changeset pre exit 之前。一旦 OS_ACTION_PARAMS_STRICT_ENABLED 随 GA 上了 latest，「直接删除、不背弃用债」的窗口就永久关闭，此后必须走 readEnvWithDeprecation 兼容一版。

代码变更

- function actionParamsStrict()  → process.env.OS_ACTION_PARAMS_STRICT_ENABLED === '1'
+ function laxActionParams()     → process.env.OS_ALLOW_LAX_ACTION_PARAMS === '1'

- if (actionParamsStrict())  return `Invalid action params: ${summary}`;
+ if (!laxActionParams())    return `Invalid action params: ${summary}`;

违规参数包（缺 required、越出 options、multiple/reference 形状错、未声明键）在 handler 运行前被拒：REST 400 VALIDATION_FAILED，MCP 抛错。逃生阀路径仍然每个 action 告警一次——设了它是「容忍漂移」，不是「让漂移重新隐形」。

变量名按 PD #9 与 ADR-0110 D6 采用 OS_ALLOW_*（opt-out）形态。顺带：D6 原文把 OS_ACTION_PARAMS_STRICT_ENABLED 举为"可容忍的 opt-in 例外"，本次删除后该规则再无例外可指，已在 ADR-0110 就地更新。

Dogfood 对偶翻转

原来「默认宽松」是每个调用方都会走的路径、而「严格」要设变量才能到达；现在反过来。测试也随之反过来：默认路径成为被证明的那条，而逃生阀——那条没人会设的分支——拿到专门用例，否则它正是会悄悄腐烂的东西。

顺带修掉两处 v17 发版说明的自相矛盾（#3681 遗留）

不是本任务范围，但我的新章节交叉引用了它，就变成了我的问题：

「Files become platform records」：前一段说「硬拒绝只有在部署 opt-in OS_DATA_VALUE_SHAPE_STRICT_ENABLED 时才到来」，后一段说「媒体值形态只在本部署验证过自己的迁移后才强制」——feat(objectql)!: 媒体值形态 strict 按部署生效 —— #3438 中标记真正覆盖的那一半 #3681 之后只有后者是真的。已重写，并说清两个开关分立在标记两侧：OS_ALLOW_LAX_MEDIA_VALUES 往回退，OS_DATA_VALUE_SHAPE_STRICT_ENABLED 往前推到全部值类（含尚无迁移背书的引用/结构化 JSON，D1 非媒体类型的按部署扫描门禁 + D2 动作参数 17.0 默认严格 —— 证据来源与载体已定于 ADR-0104 2026-07-30 附录（修订版） #3438 第 2 项）。
升级清单：原文让用户「跑完迁移然后设 OS_DATA_VALUE_SHAPE_STRICT_ENABLED」——那会一次性把没有证据支撑的类别也打开。已改为「跑迁移即可，别碰那个变量」，并新增 Actions 一条。

验证

套件	结果
`@objectstack/runtime`	951 passed
`@objectstack/spec`	7147 passed
完整 dogfood（真实 HTTP）	425 passed / 3 skipped，零失败
D2 契约 dogfood（翻转后对偶）	3/3
spec 十项生成物闸门	全 PASS

风险面排查：扫了 examples/ 与 packages/ 所有投递 param 包的调用点。todo 的 MCP e2e 只调用无 params 声明的动作（complete_task/clone_task；声明了参数的 defer_task 是 modal-only 且未被调用），showcase 测试直接调 handler 绕过 dispatch。完整 dogfood 跑真实 HTTP 全绿，是这条结论最强的证据。

Console 侧（objectui）从声明构造参数包，且 dispatch 自注入的 recordId/objectName 在 ACTION_PARAM_BUILTIN_KEYS 白名单内——R3 里唯一会造成误伤的那半早已关闭，所以现在被拒的确实是写错的。

关联

#3438 剩余两项（os migrate value-shapes 扫描门禁 + 新库创建时记账）不在本 PR，仍在 issue 跟踪。

🤖 Generated with Claude Code

https://claude.ai/code/session_016zgA8CQMJeJbFEjnbib1Uv

Generated by Claude Code

… is gone (#3438) ADR-0104 D2 landed warn-first behind OS_ACTION_PARAMS_STRICT_ENABLED. The 2026-07-30 addendum decided that window closes in 17.0 rather than 18.0, so this executes it: - actionParamsStrict() becomes laxActionParams(): enforcement is the default and OS_ALLOW_LAX_ACTION_PARAMS=1 is the only knob — spelled OS_ALLOW_* per PD #9 and ADR-0110 D6, which this change also removes the sole cited exception from. The opt-in name never reached `latest` (RC-only), so it is deleted outright rather than deprecated for a release. - The escape-hatch path still warns once per action, so opting out tolerates the drift instead of hiding it again. - Dogfood duals are inverted: the DEFAULT path is now what the gate proves, and the hatch — the branch nobody sets — is what gets a test so it cannot rot unnoticed. Also corrects three docs the flip falsifies, plus two the earlier #3681 media work had already left self-contradictory in the v17 notes (the section said hard rejection arrives only via OS_DATA_VALUE_SHAPE_STRICT_ENABLED two paragraphs before saying media enforces per verified deployment; the upgrade checklist prescribed the env var as the way to get there, which would opt in every value class including the ones with no migration behind them). Verified: runtime 951, spec 7147, dogfood 425 (+3 skipped) all green; the D2 contract dogfood passes with the inverted duals; all ten spec artifact gates pass. Swept examples and packages for callers posting param bags — the todo MCP e2e invokes only param-less actions, showcase tests call handlers directly. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016zgA8CQMJeJbFEjnbib1Uv

vercel · 2026-07-30T15:45:43Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
objectstack	Ignored		Jul 30, 2026 4:12pm

…efault-flip-vbly5z # Conflicts: # content/docs/releases/v17.mdx

github-actions · 2026-07-30T16:12:58Z

📓 Docs Drift Check

This PR changes 2 package(s): @objectstack/runtime, @objectstack/spec.

113 hand-written doc(s) reference the affected code and may need an implementation-accuracy re-verification:

content/docs/ai/agents.mdx (via @objectstack/spec)
content/docs/ai/skills-reference.mdx (via @objectstack/spec)
content/docs/ai/skills.mdx (via @objectstack/spec)
content/docs/api/client-sdk.mdx (via packages/runtime, @objectstack/spec)
content/docs/api/environment-routing.mdx (via @objectstack/spec)
content/docs/api/error-catalog.mdx (via @objectstack/spec)
content/docs/api/error-handling-client.mdx (via @objectstack/spec)
content/docs/api/error-handling-server.mdx (via @objectstack/spec)
content/docs/api/index.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/api/wire-format.mdx (via @objectstack/runtime)
content/docs/automation/approvals.mdx (via packages/spec)
content/docs/automation/flows.mdx (via @objectstack/spec)
content/docs/automation/hook-bodies.mdx (via @objectstack/runtime, packages/spec)
content/docs/automation/hooks.mdx (via @objectstack/spec)
content/docs/automation/index.mdx (via @objectstack/spec)
content/docs/automation/webhooks.mdx (via @objectstack/spec)
content/docs/automation/workflows.mdx (via @objectstack/spec)
content/docs/concepts/architecture.mdx (via @objectstack/spec)
content/docs/concepts/design-principles.mdx (via packages/spec)
content/docs/concepts/index.mdx (via @objectstack/spec)
content/docs/concepts/metadata-driven.mdx (via @objectstack/spec)
content/docs/concepts/metadata-lifecycle.mdx (via packages/spec)
content/docs/concepts/north-star.mdx (via packages/runtime, packages/spec)
content/docs/data-modeling/analytics.mdx (via @objectstack/spec)
content/docs/data-modeling/drivers.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/data-modeling/external-datasources.mdx (via @objectstack/spec)
content/docs/data-modeling/field-types.mdx (via @objectstack/spec)
content/docs/data-modeling/fields.mdx (via @objectstack/spec)
content/docs/data-modeling/formulas.mdx (via @objectstack/spec)
content/docs/data-modeling/index.mdx (via @objectstack/spec)
content/docs/data-modeling/objects.mdx (via @objectstack/spec)
content/docs/data-modeling/queries.mdx (via @objectstack/spec)
content/docs/data-modeling/schema-design.mdx (via @objectstack/spec)
content/docs/data-modeling/seed-data.mdx (via @objectstack/spec)
content/docs/data-modeling/validation-rules.mdx (via @objectstack/spec)
content/docs/data-modeling/validation.mdx (via @objectstack/spec)
content/docs/deployment/cli.mdx (via @objectstack/spec)
content/docs/deployment/index.mdx (via @objectstack/runtime)
content/docs/deployment/production-readiness.mdx (via @objectstack/runtime)
content/docs/deployment/single-project-mode.mdx (via @objectstack/runtime)
content/docs/deployment/troubleshooting.mdx (via @objectstack/spec)
content/docs/deployment/validating-metadata.mdx (via @objectstack/spec)
content/docs/deployment/vercel.mdx (via @objectstack/runtime)
content/docs/getting-started/build-with-claude-code.mdx (via @objectstack/spec)
content/docs/getting-started/common-patterns.mdx (via @objectstack/spec)
content/docs/getting-started/examples.mdx (via @objectstack/spec)
content/docs/getting-started/quick-reference.mdx (via @objectstack/spec)
content/docs/getting-started/quick-start.mdx (via @objectstack/spec)
content/docs/getting-started/your-first-project.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/kernel/cluster.mdx (via @objectstack/spec)
content/docs/kernel/contracts/auth-service.mdx (via packages/spec)
content/docs/kernel/contracts/cache-service.mdx (via packages/spec)
content/docs/kernel/contracts/data-engine.mdx (via @objectstack/spec)
content/docs/kernel/contracts/index.mdx (via @objectstack/spec)
content/docs/kernel/contracts/metadata-service.mdx (via packages/spec)
content/docs/kernel/contracts/storage-service.mdx (via packages/spec)
content/docs/kernel/index.mdx (via packages/spec)
content/docs/kernel/runtime-services/email-service.mdx (via packages/spec)
content/docs/kernel/runtime-services/index.mdx (via packages/spec)
content/docs/kernel/runtime-services/queue-service.mdx (via packages/spec)
content/docs/kernel/runtime-services/sharing-service.mdx (via packages/spec)
content/docs/kernel/runtime-services/sms-service.mdx (via packages/spec)
content/docs/kernel/runtime-services/storage-service.mdx (via packages/spec)
content/docs/kernel/services-checklist.mdx (via @objectstack/spec)
content/docs/kernel/services.mdx (via @objectstack/spec)
content/docs/permissions/authentication.mdx (via @objectstack/runtime)
content/docs/permissions/authorization.mdx (via packages/runtime, @objectstack/spec)
content/docs/permissions/permission-sets.mdx (via @objectstack/spec)
content/docs/permissions/permissions-matrix.mdx (via @objectstack/spec)
content/docs/permissions/positions.mdx (via @objectstack/spec)
content/docs/permissions/rls.mdx (via @objectstack/spec)
content/docs/permissions/sharing-rules.mdx (via @objectstack/spec)
content/docs/plugins/adding-a-metadata-type.mdx (via @objectstack/spec)
content/docs/plugins/development.mdx (via @objectstack/spec)
content/docs/plugins/index.mdx (via @objectstack/spec)
content/docs/plugins/packages.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/protocol/backward-compatibility.mdx (via @objectstack/spec)
content/docs/protocol/diagram.mdx (via packages/spec)
content/docs/protocol/kernel/config-resolution.mdx (via @objectstack/spec)
content/docs/protocol/kernel/http-protocol.mdx (via @objectstack/runtime)
content/docs/protocol/kernel/i18n-standard.mdx (via @objectstack/spec)
content/docs/protocol/kernel/index.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/protocol/kernel/lifecycle.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/protocol/kernel/plugin-spec.mdx (via @objectstack/spec)
content/docs/protocol/kernel/runtime-capabilities.mdx (via @objectstack/spec)
content/docs/protocol/knowledge.mdx (via @objectstack/spec)
content/docs/protocol/objectql/index.mdx (via @objectstack/spec)
content/docs/protocol/objectql/query-syntax.mdx (via @objectstack/spec)
content/docs/protocol/objectql/schema.mdx (via @objectstack/spec)
content/docs/protocol/objectql/security.mdx (via packages/spec)
content/docs/protocol/objectql/state-machine.mdx (via @objectstack/spec)
content/docs/protocol/objectui/actions.mdx (via @objectstack/spec)
content/docs/protocol/objectui/concept.mdx (via @objectstack/spec)
content/docs/protocol/objectui/index.mdx (via @objectstack/spec)
content/docs/protocol/objectui/layout-dsl.mdx (via @objectstack/spec)
content/docs/protocol/objectui/record-alert.mdx (via @objectstack/spec)
content/docs/protocol/objectui/widget-contract.mdx (via @objectstack/spec)
content/docs/releases/implementation-status.mdx (via @objectstack/runtime, @objectstack/spec)
content/docs/releases/index.mdx (via @objectstack/spec)
content/docs/releases/v12.mdx (via @objectstack/spec)
content/docs/releases/v13.mdx (via @objectstack/spec)
content/docs/releases/v16.mdx (via @objectstack/spec)
content/docs/releases/v17.mdx (via @objectstack/spec)
content/docs/releases/v9.mdx (via @objectstack/spec)
content/docs/ui/actions.mdx (via @objectstack/spec)
content/docs/ui/create-vs-edit-form.mdx (via @objectstack/spec)
content/docs/ui/dashboards.mdx (via @objectstack/spec)
content/docs/ui/forms.mdx (via @objectstack/spec)
content/docs/ui/index.mdx (via @objectstack/spec)
content/docs/ui/public-data-collection.mdx (via @objectstack/spec)
content/docs/ui/setup-app.mdx (via @objectstack/spec)
content/docs/ui/translations.mdx (via @objectstack/spec)
content/docs/ui/views.mdx (via @objectstack/spec)

Advisory only. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs origin/main → pass the list as args.docs.

Merge remote-tracking branch 'origin/main' into claude/d1-d2-strict-d…

f2ba53b

…efault-flip-vbly5z # Conflicts: # content/docs/releases/v17.mdx

github-actions Bot added documentation Improvements or additions to documentation tests protocol:ui tooling size/m labels Jul 30, 2026

os-zhuang marked this pull request as ready for review July 30, 2026 16:30

os-zhuang merged commit 698cbc2 into main Jul 30, 2026
18 checks passed

os-zhuang deleted the claude/d1-d2-strict-default-flip-vbly5z branch July 30, 2026 16:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(runtime)!: 动作参数默认严格，opt-in 开关删除（#3438 D2 翻转，17.0 车次） - #4213

feat(runtime)!: 动作参数默认严格，opt-in 开关删除（#3438 D2 翻转，17.0 车次）#4213
os-zhuang merged 2 commits into
mainfrom
claude/d1-d2-strict-default-flip-vbly5z

os-zhuang commented Jul 30, 2026

Uh oh!

vercel Bot commented Jul 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 30, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

os-zhuang commented Jul 30, 2026

执行 ADR-0104 2026-07-30 附录的 D2 决定（#4199 已合并）

代码变更

Dogfood 对偶翻转

顺带修掉两处 v17 发版说明的自相矛盾（#3681 遗留）

验证

关联

Uh oh!

vercel Bot commented Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 30, 2026

📓 Docs Drift Check

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel Bot commented Jul 30, 2026 •

edited

Loading