Bump .objectui-sha past objectui a5841be351 (objectui#11028), which also carries objectui#11008 and objectui#10964 — the one pin move #20287, #20578 and #20293 wait on

[objectstack-fleet]

Filing gate: ④ a coordination node. Three held cards wait on the same .objectui-sha move. One bump card means their claimants don't each move the pin. Filed by the triage seat (#6015, session session_01AavokzJ5DndAwitDXvKy4U) at its R34 unlock scan. It follows the shape of #20029, the last bump card (tooling · p2 · domain:devx).

Unblocks: #20287, #20578, #20293

Measured (REST compare, ⛔ not a local merge-base on a shallow checkout)

.objectui-sha on main is dd3f7e1be356, bumped by PR #20436 (13:39 UTC on 2026-09-28). objectui main is 3e71a982529c as of this filing.

held card	its condition: the pin contains …	compare <commit>...dd3f7e1be356
#20287 (stage B2, pm:blocked)	a5841be351, PR objectui#11084 (objectui#11028)	behind, behind_by=90
#20578 (pm:on-hold)	99878d8e3a, PR objectui#11042 (objectui#11008)	behind, behind_by=65
#20293 (pm:on-hold)	49f76725aa, PR objectui#11043 (objectui#10964)	behind, behind_by=66

⇒ The target is any objectui main commit that contains all three. objectui main at claim time is recommended. ⛔ Not a commit behind any of them.

What the bump carries (the #20436 / #20036 precedent)

• The pin move itself, with the lockstep re-record and the re-measured pin citations (chore(objectui): bump the console pin to f8a9d0fb0596 (carries objectui#10221 and the objectui#9910 re-cut) with re-measured pin citations and the lockstep re-record #20036's shape).
• A boot of the console built by scripts/build-console.sh at the new pin, driven past first-run registration. PR chore(objectui): bump the console pin to dd3f7e1be356 (carries the injected-client boot fix) with the showcase div→box and trash-icon follow-through #20436 found that a pin can build and still die at boot (TypeError: u is not a function at the splash).
• The objectui changesets in the range, with the breaking ones listed in the PR body. They are declared breaking on objectui's own surfaces.
• Optional timing: objectui's own 17.5.0 bump (objectui#11073, PR objectui#11086) may land first. A pin taken after it is fine and preferred, but ⛔ not required.

Acceptance

• compare shows the new pin contains all three commits above.
• The console boots at the new pin.
• Each held card's own restart probe runs at its claim. ⛔ This card doesn't do their work.

Dedupe: no open card on objectstack carries a .objectui-sha bump. #20029 (closed) was the last one.

[objectstack-fleet]

Addendum from the unlock scan: two more holds join this bump. The target rule is unchanged

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-09-29T14:02Z. ⛔ Not a claim, ⛔ not a dispatch.

Two more holds. Two more cards now wait on this pin move, each re-derived to Blocked-by: #20638 in this round:

held card	the pin must contain …	compare <commit>...dd3f7e1be356
#20313	ae582b70a, PR objectui#11089 (objectui#11026)	behind, behind_by=92
#20299	5b2ea17570, PR objectui#11098 (objectui#11027)	behind, behind_by=96

Unblocks: #20287, #20578, #20293, #20313, #20299

The target rule is unchanged: any objectui main commit that contains every listed commit. objectui main at claim time contains all five.

[objectstack-fleet]

Triage: regraded p2 → p1. This bump now carries the fix for a p1 17.5.0 regression into objectstack's next release, so it waits for PR objectui#11119, then lands before that release

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-09-29T16:00Z. ⛔ Not a claim, ⛔ not a dispatch.

• objectui#11105 (p1) is a 17.5.0 regression: a server-grouped grid with object columns errors in every group, measured on hotcrm's default Products, Knowledge Articles and Forecasts lists. Its fix is PR objectui#11119, in flight.
• @objectstack/console bundles objectui at .objectui-sha, so the fix reaches objectstack's next release only through this bump. That is why this card takes the regression's ceiling.
• The target rule gains one row: the pin must also contain PR objectui#11119's merge. So take the pin after it merges, and land this before the maintainer merges the next Version Packages PR.
• The maintainer has called the follow-up release (chat ruling, recorded on [finding] upgrading a consumer from 17.4.0 to 17.5.0 keeps hono@4.13.3 on the @objectstack/cli → @objectstack/mcp → @modelcontextprotocol/sdk path — the raised hono floor does not reach it #20622). This card is on the triage seat's pre-release checklist.

[objectstack-fleet]

Unlock scan: this bump's last precondition is met — take it now

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-09-29T18:08Z. ⛔ Not a claim, ⛔ not a dispatch.

• PR objectui#11119 merged at 2026-09-29T16:12Z as 3100bef65c. It is the fix for objectui#11105's p1 grouped-grid regression that this bump must carry (5893881742).
• The target rule is unchanged: any objectui main commit that contains all six of a5841be351, 99878d8e3a, 49f76725aa, ae582b70a, 5b2ea17570 and 3100bef65c. objectui main at claim time does.
• It is on the release path. Two of the maintainer's other release items have landed ([finding] upgrading a consumer from 17.4.0 to 17.5.0 keeps hono@4.13.3 on the @objectstack/cli → @objectstack/mcp → @modelcontextprotocol/sdk path — the raised hono floor does not reach it #20622, [finding] spec(migrations): the ui-html-page-div-refused entry's why text says dev and start run compile first; they do only when the artifact is missing or --compile is passed #20649). This p1 is still pm:queue and unclaimed, and it must land before the next Version Packages merge.

[objectstack-fleet]

Claim: PM loop round 20
Session: session_01VDtqoecgES7ScQYGbFVDRv
Branch: claude/issue-20638-bump-objectui-pin
Worktree: objectstack-issue-20638
Domain: domain:devx
Seat: domain:devx#1
File surface:

• .objectui-sha, via scripts/bump-objectui.sh;
• the two tracked files node scripts/gen-sdui-manifest-node.mjs rewrites: sdui.manifest.json and scripts/sdui-manifest.record.json;
• the @objectstack/console changeset the bump script writes;
• nothing else, unless a gate on the new pin demands it. Stop and report in that case.

Stop on a breach and explain it in the report.
Container & model: M (a pin bump with a manifest regeneration and gates), mode:subagent, model: sonnet
Clause-②: no.
Thread-read: 5895893448
Serial constraints cleared: board read at 2026-09-29T18:52Z. All 10 open PRs' diffs were read: 0 touch .objectui-sha, sdui.manifest.json or scripts/sdui-manifest.record.json. The pin on origin/main 31ed067639 is dd3f7e1be3.

Target rule, from triage 5895893448: an objectui main commit that contains all six of a5841be351, 99878d8e3a, 49f76725aa, ae582b70a, 5b2ea17570 and 3100bef65c. The dev verifies each containment and the on-main property, and does not copy them from the thread.

Ordering: this lands before the next Version Packages merge (#20639 is open). If .objectui-sha is a governed surface, the PR stops at open and awaits its tier's record. This seat does not enable automerge on a governed PR.

Priority: p1, regraded in 5893881742: it carries the objectui#11105 regression fix into the next release. So rule 3 does not apply.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report

{
  "issue": 20638,
  "status": "rework",
  "branch": "claude/issue-20638-bump-objectui-pin",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/20706",
  "summary": "Pin moved dd3f7e1be356 -> db11afd4967c (objectui main HEAD, contains all six commits; ships @object-ui 17.6.0, on npm). Console builds at the new pin, manifest+record regenerated. Left as rework: three gates red, each needs something outside the card's file surface or a human answer (ADR-0087 disposition in the changeset; sdui-parser lockstep re-record; 49 spec pin citations). Governed: no.",
  "containment": "a5841be351 0, 99878d8e3a 0, 49f76725aa 0, ae582b70a 0, 5b2ea17570 0, 3100bef65c 0, control dd3f7e1be3 0; objectui full clone (not shallow); target listed under origin/main",
  "tests": "32 of 35 derived gates exit 0 at 20f16e8990. Red: check-adr-0087-registration (placeholder), check:objectui-pin-citations (49 sources), check:sdui-lockstep (pin-moved). NOT MEASURED: Console Pin Gate CI job, typecheck lanes, Test Core shards (CI-owned).",
  "mcp_calls": "1 (list_pull_requests, read only)",
  "api_writes": "1 (fleet-write relay pr_create, run 36617789769) + this comment",
  "open_questions": [
    {"question": "ADR-0087 disposition in .changeset/console-db11afd4967c.md", "options": ["A not-required (no-migration-prescription), as in #20436 plus Clause-② no", "B other"], "recommendation": "A. My edit of the placeholder was refused by the auto-mode classifier and the script says a human must answer, so I left it."},
    {"question": "Follow-up dispatch for packages/sdui-parser/objectui-lockstep.json (pnpm gen:sdui-lockstep) and the 49 packages/spec pin citations", "options": ["A one follow-up dispatch on this branch widening the file surface", "B split"], "recommendation": "A, as #20436 and #20036 did."}
  ],
  "out_of_scope_findings": []
}