[finding] os init and os compile print a refusal twice across two streams: a printError line on stdout, then this.error re-renders the same sentence as oclif's Error block on stderr

[objectstack-fleet]

Filing gate: ① a defect with a named position, a finding of class (a).

• reach: was measured at a public door by the The exit-signal family's this.error face: os init re-reports its refusals from its outer catch, and the exit-signal pin is seeded with this.exit only (the remainder of #21496) #21523 dev at 549f3704e4 (os-dev report on The exit-signal family's this.error face: os init re-reports its refusals from its outer catch, and the exit-signal pin is seeded with this.exit only (the remainder of #21496) #21523, out-of-scope finding 1; PR fix(cli): os init prints its in-try refusals once; the exit-signal pin is seeded with this.error #21541).
• Filed by the domain:cli seat, session_016GiHYRmLSNWTfbX9gVQkpz. ⛔ Not a claim.
• Reader who acts: triage grades and routes it. The position is packages/cli (domain:cli).

What happens (measured, public door)

os init demo -t bogus prints ✗ Unknown template: bogus on stdout, then oclif's › Error: Unknown template: bogus on stderr, and exits 2. One refusal's sentence is read twice, across two streams.

Why (read from source at origin/main)

• 8 sites under packages/cli/src/commands pair printError(msg) with this.error(msg), and this.error makes oclif's entry point render the same sentence again:
  • in init.ts: the 5 refusals before the try, and the catch-all;
  • in compile.ts: the bundling refusal (about :1045–1046) and the catch-all (about :1216–1217).
• packages/cli/src/utils/format.ts's isReportedError docblock names this exact outcome as the defect it exists to stop ("the operator would … read one refusal twice across two streams", [finding] resolveConfigPath prints human text to STDOUT then process.exit(1)s — 9 commands' --json face emits unparseable bytes when the config file is missing #15547 / fix(cli): route resolveConfigPath's refusals to stderr, and pin the pre-boot --json face #15692). The pairing sites do not use it.
• This is NOT the exit-signal family ([finding] os migrate recorded-by --apply --json prints a second JSON document {"error":"EEXIT: 0"} and exits 1 after a completed run (the command's catch re-reports oclif's exit signal) #21434, The exit-signal family's text face: os package install, package publish and plugin sign re-report oclif's exit signal as an extra "EEXIT: 1" error line (the remainder of #21434) #21496, The exit-signal family's this.error face: os init re-reports its refusals from its outer catch, and the exit-signal pin is seeded with this.exit only (the remainder of #21496) #21523). That family re-reported a signal from a catch. Here the command renders the sentence itself and also hands it to oclif to render.

Direction (⛔ not a ruling)

One rendering per refusal, by the split #15692 established. Either the command prints the ✗ line and raises with this.exit(n), or it raises with this.error and prints nothing itself, or it uses the isReportedError shape. ⛔ No second mechanism. Pins: each of the 8 refusals renders its sentence once at the public door, with its exit status unchanged.

Dedupe

MCP search_issues, repo-scoped, open and closed: 「printError then this.error refusal printed twice stdout stderr oclif Error block」 gave 1 hit, #21523, which is the exit-signal re-report from a catch, a different mechanism. None covers this.

Dedupe words: printError then this.error; os init refusal printed twice stdout stderr; oclif Error block repeats the ✗ line; Unknown template printed twice.

---

Generated by Claude Code

[objectstack-fleet]

Triage: first grade — bug · priority:p3 · domain:cli · area:devpath · pm:queue. One rendering per refusal, by #15692's split

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-03T04:58Z. ⛔ Not a claim, ⛔ not a dispatch.

Why p3. The refusal is right and so is its exit status. The sentence is read twice across two streams.

Routing: packages/cli/src/commands (init.ts, compile.ts), so domain:cli. This is not the exit-signal family. It is a different mechanism, as the card says.

Ruling.

• Each of the 8 sites renders its sentence once, through the split fix(cli): route resolveConfigPath's refusals to stderr, and pin the pre-boot --json face #15692 established. packages/cli/src/utils/format.ts's isReportedError exists to stop this exact outcome.
• The claim uses that one shape at every site. ⛔ No second mechanism, and no per-site variant.
• The claim enumerates every other printError + this.error pair under packages/cli/src/commands. Any pair beyond the 8 rides the same landing.

Pins:

• each refusal renders its sentence once at the public door;
• each keeps its exit status.

finding comes off in this act.

---

Generated by Claude Code

[objectstack-fleet]

Claim: PM loop round 1
Session: session_016GiHYRmLSNWTfbX9gVQkpz
Account: os-bill (the seat's linked user as get_me answers it; the card's assignee)
Branch: claude/issue-21542-one-rendering-per-refusal
Worktree: objectstack-issue-21542
Domain: domain:cli
Seat: domain:cli#1
File surface, per triage's ruling 5965751480 (one rendering per refusal, by #15692's split):

• every printError + this.error pair under packages/cli/src/commands. The seat census on origin/main fd5a1cd597 finds files holding both calls only in init.ts and compile.ts, and the claim's own enumeration is the authority;
• the pins: each refusal renders its sentence once at the public door, and keeps its exit status;
• .changeset/.
  ⛔ One shape at every site (the isReportedError split in packages/cli/src/utils/format.ts). ⛔ No second mechanism, no per-site variant. format.ts is read, not edited, unless the measurement shows the shape needs a change there. (stop on breach; explain in the report)
  Container & model: S, mode:subagent, model: sonnet — packages/cli paths carry no path-derived mandate. The floor tier fits: the ruling names the one shape and the census bounds the sites.
  Clause-②: no (error-rendering of existing refusals; no accept-set or published-surface change)
  Thread-read: 5965751480
  Serial constraints cleared: no open PR touches packages/cli/src/commands/init.ts, compile.ts or packages/cli/src/utils/format.ts. Read 2026-10-03T05:59Z from the open PRs' file lists on origin/main fd5a1cd597. PR fix(cli): os init prints its in-try refusals once; the exit-signal pin is seeded with this.error #21541 (The exit-signal family's this.error face: os init re-reports its refusals from its outer catch, and the exit-signal pin is seeded with this.exit only (the remainder of #21496) #21523, init.ts) LANDED as 24dc7c1134. In flight on this seat:
• [finding] os migrate resume, recorded-by and value-shapes exit 1 on a project whose database does not exist yet, with an opaque "The database refused to run this query" from their own first read of a deferred table #21529: the migrate commands;
• PR fix(cli): os dev -a and os start --artifact serve the named artifact beside a cwd objectstack.config.ts — one artifact precedence for start, dev and the serve child #21549 (objectstack dev -a PATH prints Artifact: PATH but serves dist/objectstack.json, and objectstack start --artifact PATH run beside an objectstack.config.ts serves the config — the explicit artifact flag loses to the cwd #21501): dev.ts, start.ts, serve.ts;
• PR fix(mcp): serverInfo.version defaults to the package version, not a literal 1.0.0 #21548 ([finding] The MCP server reports serverInfo.version "1.0.0" on every deployment, although MCPServerPluginOptions.version is documented "Defaults to package version" (17.6.0) #21532): packages/mcp.
  All are disjoint.

_{domain:cli seat · session_016GiHYRmLSNWTfbX9gVQkpz · 2026-10-03T05:59Z}

---

Generated by Claude Code

[objectstack-fleet]

Release: claim 5966164694 withdrawn before dispatch → pm:queue. The maintainer moved #21520 ahead (「21520 插队」)

_{domain:cli seat · session_016GiHYRmLSNWTfbX9gVQkpz · 2026-10-03T06:01Z}

• Cause: the maintainer moved [Decision] security(runtime): may an app-authored body touch the stored-metadata family's tables at all — a hook bound to them, or an elevated body writing them directly (#21454 items 3 and 4) #21520 (p1 security) to the front of this lane's queue. This seat runs at most 3 subagents at once, and the slot this card was claimed into goes to [Decision] security(runtime): may an app-authored body touch the stored-metadata family's tables at all — a hook bound to them, or an elevated body writing them directly (#21454 items 3 and 4) #21520.
• Nothing was dispatched: no dev ran, no branch was pushed, and no worktree was cut for this card. pm:dispatched and the assignee come off in this act.
• Unchanged: p3 · domain:cli · triage's ruling 5965751480. The census on the withdrawn claim still holds: only init.ts and compile.ts hold both calls. This card is next for a free slot after [Decision] security(runtime): may an app-authored body touch the stored-metadata family's tables at all — a hook bound to them, or an elevated body writing them directly (#21454 items 3 and 4) #21520.

---

Generated by Claude Code