Merge origin/main into claude/issue-20234-dead-citations-data-rest

Claude-Session: https://claude.ai/code/session_014EJ1ED8X4MMrT18BhVx4tx
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

.changeset/20233-rest-analytics-view-package-object-sharing-audit-flow-http-migration-guidance-tracker-free.md

@@ -0,0 +1,36 @@
+---
+'@objectstack/spec': patch
+---
+
+fix(spec): `os migrate meta` guidance for the `rest-*`, `analytics-*`, `view-*`, `package-*`, `object-*`, `sharing-*`, `audit-*`, `flow-*` and `http-*` migration entries states each lesson in words instead of citing tracker numbers
+
+Clause-②: no
+
+The ADR-0087 semantic entries of the `rest-*` family (the retired OpenAPI 3.1 block, the
+endpoint `handlerStatus` marker, the REST server's dead config keys and the REST plugin
+durations renamed with their unit), the `analytics-*` family (the retired query envelope,
+the unknown-key refusals on cubes, and the closed date-range vocabulary and two-bound
+window), the `view-*` family (the filter value shaped by its operator and its array and
+absent-value refusals, the retired view-management protocol, the page-size default and the
+judged overlay `options` bag), the `package-*` family (the explicit all-tenants uninstall,
+the retired unmounted contract-map entries and rollback response, and the strict wrapped
+install body), the `object-*` family (the array `sort` on object blocks, the converged grid
+`data`, the rule-array `defaultFilters` and the index unknown-key refusal), the `sharing-*`
+family (the retired `SharingExecutionContext` type and the reconciled rule recipients), the
+`audit-*` family (the audit-log action values no writer produced), the `flow-*` family (the
+retry count, the decision-branch and edge refusals, first-match edge branching and blank
+predicate slots) and the `http-*` family (the retired error counter and server runtime
+vocabulary) are printed by `os migrate meta` as the header, `why:` and `verify:` lines of a
+manual change. Their text sent the reader to issue-tracker, decision-batch and ruling-record
+numbers — some of which no longer resolve, and some in another repository — for what a
+ruling, measurement or fix had decided; it now says what was decided, in the sentence being
+read. ADR ids are kept. Two entries of other families are corrected the same way:
+`api-error-retry-after-unit-in-key` now dates the population ruling its clause describes,
+and `inline-grid-column-currency-scale-refused` names its two currency rulings by date
+instead of by record number.
+
+Text only: no entry id, `from` / `to`, conversion or matching logic changes, and the chain
+rewrites exactly what it rewrote before. One entry's `surface` (the header line of
+`flow-edge-condition-evaluated-slot-source-required`) drops the two tracker numbers it
+carried and names nothing else differently. The generated migration registry,
+`spec-changes.json` and the protocol upgrade guide carry the same text.

.changeset/20361-liveness-counts-sharded.md

@@ -0,0 +1,13 @@
+---
+"@objectstack/spec": patch
+---
+
+`liveness/state-counts.md` is replaced by `liveness/state-counts/<type>.md`: the generated liveness counts are one shard per governed type, and no total is committed anywhere.
+
+Clause-②: no — no schema key moves, no accept set widens or narrows, no export changes. What changes is the layout of a generated table that ships in the tarball, and no count in it moves.
+
+The ledgers ship inside this package (`files[]` includes `liveness`), so the changed tarball bytes are: `liveness/state-counts.md` removed, forty `liveness/state-counts/<type>.md` shards added (each carries exactly the row that file published for its type), and the prose in `liveness/README.md`, `liveness/book.json` and `liveness/translation.json` that named the removed file.
+
+- **Where a count now lives.** A type's row is `liveness/state-counts/<type>.md`, byte-for-byte the row the single file carried. The table's total is not in any file: `pnpm --filter @objectstack/spec check:liveness` sums the shards when it reads them, prints the sum on its success line, and carries it in `--json` as `countsTotal`. At this release the sum is the total the removed file published: 940 live · 5 experimental · 1 live-elsewhere · 148 dead · 9 planned = 1103 classified.
+- **Why.** Every change that moved a liveness verdict rewrote the single file's total row, and GitHub's server-side merge runs no custom merge driver, so any two such changes in flight conflicted on that one line. With one file per type, changes that move different types touch different files.
+- **Anything that read `liveness/state-counts.md` from the published package** reads the shard for the type it wants, or sums the shards for the total. `gen:liveness-counts` rewrites only the shards whose counts moved and deletes the removed file if a merge brings it back; `check:liveness` fails while it is present.

.gitattributes

@@ -67,15 +67,25 @@
 # cleanly because they do not overlap, and the subtotal merges clean and WRONG
 # (seven cases in one day). Note it is the counts file, not the ledger — the
 # ledger's prose is hand-written and must never be resolved by regenerating.
+# #20361 sharded it into `….counts/`, one file per source directory, and stopped
+# committing its cross-directory totals — the same measured conflict as the
+# liveness counts below, in the same driver-less server-side merge.
 #
 # The liveness state table's counts joined at #7377 for the same reason, one file
 # over — 9 of its 30 rows had drifted from the gate before anyone re-ran the
-# documented snippet. Same split and the same caveat: `liveness/state-counts.md`
-# is the numbers and is driver-managed; `liveness/README.md` is the Notes prose —
+# documented snippet. Same split and the same caveat: `liveness/state-counts/` is
+# the numbers and is driver-managed; `liveness/README.md` is the Notes prose —
 # hand-written measurement of how each type got where it is — and is NOT.
 # Regenerating a Note would fabricate a verdict, which that README calls worse
 # than a missing row.
 #
+# #20361 then SHARDED those counts, one file per governed type, and stopped
+# committing a total: the single file's shared total row was rewritten by every
+# liveness PR, so in the driver-less server-side merge any two of them conflicted
+# and each landing left every other one `dirty`, with no CI run until a
+# merge-and-regenerate round. The cure is the one the header above records for
+# the three hottest artifacts; each gate sums its shards when it reads them.
+#
 # The elevation census page joined at #13646 — a generated `file:line` anchor
 # table whose correct merged values are on NEITHER side of a conflict (measured on
 # #13625: five conflicted anchors resolved to 4408/5771/6019/6382/6575 against
@@ -138,7 +148,7 @@
 # neither side.
 
 packages/spec/spec-changes.json                              merge=os-regen
-packages/spec/liveness/state-counts.md                       merge=os-regen
+packages/spec/liveness/state-counts/**                       merge=os-regen
 packages/spec/authorable-surface/**                          merge=os-regen
 packages/spec/authorable-surface.base.json                   merge=os-regen
 packages/spec/authorable-defaults/**                         merge=os-regen
@@ -149,7 +159,7 @@ packages/spec/export-origins/**                              merge=os-regen
 packages/spec/declaration-map/**                             merge=os-regen
 packages/spec/api-surface-signatures.json                    merge=os-regen
 docs/protocol-upgrade-guide.md                               merge=os-regen
-docs/audits/2026-07-unknown-key-strictness-ledger.counts.md  merge=os-regen
+docs/audits/2026-07-unknown-key-strictness-ledger.counts/**  merge=os-regen
 content/docs/references/**                                   merge=os-regen
 content/docs/permissions/system-context.mdx                  merge=os-regen
 skills/*/references/_index.md                                merge=os-regen

docs/audits/2026-07-unknown-key-strictness-ledger.counts.md

@@ -0,0 +1,22 @@
+<!-- GENERATED — DO NOT EDIT BY HAND. -->
+<!-- Regenerate: pnpm --filter @objectstack/spec gen:strictness-ledger -->
+
+# `ai/` — unknown-key strictness counts (generated)
+
+The object-site total of `packages/spec/src/ai/`, computed from the AST
+(`packages/spec/scripts/lib/strictness-ledger.ts`). The directory is untriaged:
+the ledger classifies it coarsely, per directory rather than per file, so this
+total is the one number measured here.
+
+The verdicts, the evidence and the exemption rationales live in
+[the ledger itself](../2026-07-unknown-key-strictness-ledger.md) and are
+hand-written; **this file has no prose to preserve** and is regenerated whole.
+One file per directory, and no total across directories is committed anywhere:
+`check:strictness-ledger` sums the shards when it reads them. **Never
+hand-patch a number here** — fix the code or the verdict and regenerate.
+
+## Site total (untriaged)
+
+| Dir | Sites |
+|---|---|
+| `ai/` | 78 |