qa(checklist): a script action refused by a hook with a user-facing sentence shows exactly one error toast carrying it — the re-observation objectui#9151 has had no home for since 2026-09-14

[objectstack-fleet]

Filed by the triage seat (objectstack-wide, seat post #6015, session_01AavokzJ5DndAwitDXvKy4U). It is a foreseen follow-up of objectstack-ai/objectui#9151, filed so that the step has a carrier. ⛔ Not a claim, ⛔ not a dispatch.

Graded here: tests · priority:p2 · domain:devx (docs/qa/**) · area:workflow · pm:queue.

Why this card exists

• The symptom. objectui#9151: in a dogfood pass on published 17.4.0 (Dogfood pass on M3-complete main: drive the whole contract lifecycle in a browser and report what a real user hits hotclm#45), a script action whose beforeUpdate hook refused a transition with a user-facing sentence produced zero toast elements. The server answered 500 with the sentence in the body.
• What has been measured since:
  • The status half is fixed: A hook's business refusal on a script action answers 500 INTERNAL_ERROR and renders no toast — the user is told nothing, and the same class was already fixed on /data and /analytics #17265 / PR fix(runtime): a nested sandboxed hook refusal is a rejection, not a sandbox fault #17679 answer 4xx.
  • PR objectui#9252 pinned the console chain as correct end to end on objectui main. A 500 or a 400 carrying the sentence gives exactly one error toast with that sentence, and an unreadable body still toasts the failed (HTTP …) fallback.
  • Both app-side candidates, a per-action toast opt-out and a custom dispatch, measure false in hotclm. They were read at 14c899f on 2026-09-12 (objectui#9151 5643997103) and re-read at the same head in this round: showOnError has 0 hits in src/, and custom handler wiring has 0 hits.
• So no code defect survives measurement, and the symptom has never been re-observed on a current build. objectui#9151 sat pm:blocked on a hotclm card that no board can read, so nobody re-observed it.

The item (for checklist-author)

• Area: the action surface in docs/qa/platform-checklist/areas/. The author picks the area file by its existing grouping.
• Clause: on a stock app, a script action whose server-side hook refuses with a user-facing sentence answers a 4xx. The console shows exactly one toast of type error whose text contains that sentence. The record is left unchanged.
• Verify: count toast nodes in the DOM after the response lands, and tie the toast to that request in the network log, as RUNNER requires. ⛔ "I saw a toast" is not enough.
• Fixture: the author measures first whether the showcase carries a hook-refused script action. If it does not, adding the smallest fixture under examples/** is part of this card's PR. ⛔ The item is not authored against a fixture that does not exist.

Done when

• The item is in the checklist, and one run of it is recorded on a console built at the current .objectui-sha.
• objectui#9151's Restart-when: reads that run.
  • PASS: objectui#9151 closes completed on PR objectui#9252's diagnosis.
  • FAIL: objectui#9151 restarts with the run's evidence as its new reproduction.

[objectstack-fleet]

Claim: PM loop round 50
Session: session_01VDtqoecgES7ScQYGbFVDRv
Branch: claude/issue-21596-hook-refusal-toast-item (cut from origin/main b610eabf72)
Worktree: objectstack-issue-21596
Domain: domain:devx
Seat: domain:devx#1
File surface:

• The item. One new item in the action-surface area under docs/qa/platform-checklist/areas/. The author picks the file by its existing grouping, e.g. records-forms.json or automation.json, through checklist-author's conventions. The item carries the card's clause verbatim in substance:

  • a hook-refused script action answers a 4xx;
  • exactly one error toast whose text contains the sentence;
  • the record is unchanged.

  Verification counts toast nodes in the DOM and ties the toast to its request in the network log.

• The fixture, only if one is missing. The dev first measures whether examples/app-showcase already has a script action whose server-side hook refuses with a user-facing sentence (src/data/hooks/index.ts is the place to start). If none exists, the smallest fixture under examples/** goes in the same PR, with whatever changeset that example package owes.

• The run. One run record via checklist-test, against a console built at the current .objectui-sha (89cad75d55 at the claim ref), following RUNNER.

• ⛔ No runtime or objectui code change. Writes stay in this repo: nothing on objectui#9151 or any other repository. The run record is what objectui#9151's Restart-when: reads.

Stop on a breach and explain it in the report. That includes a run that cannot be completed in the container (no buildable console, browser unavailable). In that case, report the exact blocker, not a partial PASS.
Container & model: M (checklist item, possibly a fixture, one browser-driven run), mode:subagent, model: opus
Clause-②: no
Thread-read: none
Serial constraints cleared: board read at 2026-10-03T15:51Z. The card names no serial partner. PR objectui#9252's diagnosis is the expected PASS reading, and a FAIL is evidence, not a defect to fix here.

Priority rule 3 reading: domain:devx has no open P0/P1. This is a tests card that gives a stranded re-observation a carrier, not tooling hygiene. docs/qa/** is not a contract-review face. If a fixture under examples/** adds a .changeset, that changeset is a review face, and a same-form record is then owed on the landing head.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 21596,
"status": "done",
"branch": "claude/issue-21596-hook-refusal-toast-item",
"pr": "#21609",
"pr_number": 21609,
"head_sha": "ff3d71c7cf56eab67f25eb174af1a320cd02c61e",
"session": "session_01VDtqoecgES7ScQYGbFVDRv",
"premise_still_valid": true,
"summary": "The showcase had no hook that refuses a write (src/data/hooks/index.ts held 4 hooks, none throwing), so the smallest fixture was added: beforeUpdate hook showcase_guard_task_reopen refuses done true to false with TASK_REOPEN_REFUSAL, and script action showcase_reopen_task (task list row menu) writes exactly that. Checklist item records-forms.script-action-hook-refusal-toast (rev 1) was authored, records-forms.object-hook-lifecycle was bumped to rev 3 (roster-only: two knownGaps had become false), and the item was mapped under action and hook in coverage.json. One run against a console built at .objectui-sha 89cad75d55: PASS 4/4 clauses on two finished tasks (400 VALIDATION_ERROR carrying the sentence; exactly 1 error toast; only that POST in the window; record unchanged).",
"files_changed": [
"examples/app-showcase/src/data/hooks/index.ts",
"examples/app-showcase/src/ui/actions/index.ts",
"examples/app-showcase/src/system/translations/index.ts",
"examples/app-showcase/test/task-reopen-hook-refusal.test.ts",
"docs/qa/platform-checklist/areas/records-forms.json",
"docs/qa/platform-checklist/coverage.json"
],
"fixture": {
"existed": false,
"evidence": "examples/app-showcase/src/data/hooks/index.ts at b610eab: allHooks = 4 hooks (normalize/stamp/audit/warn), none throws; no script action in src/ui/actions writes a refused shape. Added GuardTaskReopenHook + ReopenTaskAction."
},
"item": {
"file": "docs/qa/platform-checklist/areas/records-forms.json",
"id": "records-forms.script-action-hook-refusal-toast",
"revision": 1
},
"run": {
"verdict": "PASS",
"record": "docs/qa/platform-checklist/runs/2026-10-03-script-action-hook-refusal-toast.json (git-ignored per runs/.gitignore, in worktree /home/user/objectstack-issue-21596; copy in the dev scratchpad issue-21596/)",
"toast_count": 1,
"status_code": 400,
"objectui_sha": "89cad75d55702cc4f267bead5bf267de575d5842",
"framework_sha": "4a428c11a0",
"evidence": "Attempts 1 (Audit current IA) and 2 (App wireframes), fresh loads: POST /api/v1/actions/showcase_task/showcase_reopen_task returned 400 with body.error = {code VALIDATION_ERROR, message: "hook 'showcase_guard_task_reopen' threw: Error: A finished task cannot be reopened. Create a follow-up task instead."}. Live toasts ([data-sonner-toast] not data-removed) went from 0 at baseline to 1 at ~1.1s after the response, data-type=error, with the same text. A MutationObserver installed pre-click saw exactly 1 toast node added in 6s. The only non-GET in the window was that POST. GET /data/showcase_task/ID before and after: done true, progress 100, updated_at identical. Screenshot: one red error toast top-right over the task list."
},
"qa_run_record": {
"note": "RUNNER makes a qa-run GitHub issue the durable record; this run had no budget for an issue write, so its title and body are carried here for the seat to file.",
"title": "QA run · records-forms.script-action-hook-refusal-toast (1/1) · 4a428c1 · 2026-10-03 · 1 PASS / 0 PARTIAL / 0 FAIL / 0 BLOCKED / 0 NOT-RUN",
"env": "framework 4a428c1 (branch claude/issue-21596-hook-refusal-toast-item; head ff3d71c adds only a zh-CN label) · .objectui-sha 89cad75d55702cc4f267bead5bf267de575d5842 (pnpm objectui:build exit 0) · objectstack dev --ui --seed-admin, port 41873, own file DB, stock seed · Playwright via /opt/pw-browsers/chromium · 2026-10-03T16:11Z",
"scope": "selector records-forms.script-action-hook-refusal-toast, revision 1; sequential, one runner",
"clauses": [
"c0 network PASS: action POST answered 400 VALIDATION_ERROR, error.message contains the sentence (both attempts)",
"c1 dom PASS: baseline 0, then 1 live toast, data-type error, text contains the sentence; observer saw 1 node added in 6s (both attempts)",
"c2 network PASS: the only non-GET between the baseline and toast reads was that POST, and the toast text equals its error.message",
"c3 api PASS: done/progress/updated_at unchanged before vs after"
],
"derived": "item pass; no fixture gaps"
},
"tests": "pnpm --filter @objectstack/example-showcase run typecheck: exit 0 (tsc --listFiles includes the new test). pnpm --filter @objectstack/example-showcase exec vitest run --maxWorkers=2 (under os-verify-lock): 32 files, 399 tests passed, VERDICT command-exit 0. New test file verbose: 5/5 passed, including the REVERSE leg (hooks unbound means the write lands). pnpm check:platform-checklist exit 0. node scripts/pm/dispatch-gates.mjs --commands derived 45 commands at ff3d71c; all 45 exit 0; --ran reconcile: 45 derived, 45 run, 0 unrun. The first pass at 4a428c1 had check:i18n-coverage red (414 to 415, the action label untranslated for zh-CN); fixed in ff3d71c, now green. pnpm build (72/72) and pnpm objectui:build both exited 0 under the lock. Integration and CI lanes are left to CI.",
"checks_run": [
{
"cmd": "pnpm check:platform-checklist",
"result": "exit 0: 15 areas, 270 items (266 active, 2 planned), 39 kinds mapped, 2 waived"
},
{
"cmd": "pnpm --filter @objectstack/example-showcase run typecheck",
"result": "exit 0"
},
{
"cmd": "pnpm --filter @objectstack/example-showcase exec vitest run --maxWorkers=2",
"result": "32 files, 399 tests passed"
},
{
"cmd": "node scripts/pm/dispatch-gates.mjs --commands (45 derived commands, run sequentially)",
"result": "45/45 exit 0 at ff3d71c; --ran reconcile 0 unrun"
},
{
"cmd": "pnpm check:i18n-coverage",
"result": "exit 0 (red 414 to 415 at 4a428c1, fixed by the zh-CN label)"
},
{
"cmd": "pnpm check:nul-bytes",
"result": "exit 0"
}
],
"changeset": "none owed: the only package touched is @objectstack/example-showcase, which is private:true (prior showcase-only fixes 393ae87 and 9939854 carried none); docs/qa does not publish. The PM applies skip-changeset; stated in the PR body.",
"mcp_calls": "0",
"api_writes": "2 relay strokes (repository_dispatch to objectstack-ai/objectstack): pr_create (PR 21609, body read back identical, 5733 bytes) and this report comment. git push to my branch only, new commits only. No label or assignee writes (the brief allotted none, so the PR assignee is unset).",
"open_questions": [
{
"question": "The action route carries the sandbox debug wrapper into the user-facing toast: "hook 'showcase_guard_task_reopen' threw: Error: SENTENCE". /data answers the bare sentence for the same refusal. Is the action-route wire message meant to be wrapper-free like /data?",
"options": [
"A: yes. File it as a contract defect against the runtime action door, which strips the wrapper as /data does, plus a pin on the live shape. #17679's unit pin built its SandboxError without the "Error: " the real chain carries.",
"B: no. The action route deliberately stays message-neutral (#17679's stated choice). Record that, and narrow the hook-error-format dogfood header to /data."
],
"recommendation": "A, because the dogfood contract text names exactly this toast ("the console shows the REST body error string verbatim in its toast, so that string must be ONLY the author's message"), and one refusal should not read two ways on two doors."
},
{
"question": "RUNNER says every completed run files one qa-run issue as its durable record. The brief allotted no issue write, so the record lives git-ignored in the worktree and its title and body ride in this report (qa_run_record). Should the seat file it?",
"options": [
"A: the seat files the qa-run issue from qa_run_record",
"B: this report comment serves as the record"
],
"recommendation": "A, because qa-rollup parses only qa-run issue titles, and objectui#9151 Restart-when reads the record."
}
],
"out_of_scope_findings": [
"class: b · reach: public door. POST /api/v1/actions/showcase_task/showcase_reopen_task answers 400 with error.message "hook 'showcase_guard_task_reopen' threw: Error: A finished task cannot be reopened. Create a follow-up task instead."; the same refusal on PATCH /api/v1/data/showcase_task/ID answers 400 {"error":"A finished task cannot be reopened. Create a follow-up task instead."}. Measured live on the run boot at 4a428c1. Contract: packages/qa/dogfood/test/hook-error-format.dogfood.test.ts header says "that string must be ONLY the author's message — not the sandbox debug wrapper (hook 'x' threw: Error: …, which belongs in server logs)". Seam: spec:none (consumer: none) → runtime:packages/runtime/src/sandbox/quickjs-runner.ts sandboxRefusalMessage + packages/runtime/src/domains/actions.ts handleActionsRequest | renderer:objectui ActionRunner toast sink. The unit pin nested-hook-refusal-is-a-rejection.test.ts asserts innerMessage equals the wrapper without "Error: ", so it does not see the live shape. Dedupe words: action route hook threw wrapper toast; sandbox debug wrapper innerMessage actions; refusal message Error prefix action",
"carrier: none · noted in PR Acceptance notes, not filed. The fixture action declares list_item only because the showcase Task Detail page is kind full and renders no record_header bar, so showcase_mark_done's record_header is equally inert there (it reaches the page through record_section). Observation only; not filed."
],
"deviations": [
"Worktree /home/user/objectstack-issue-21596 was NOT removed: RUNNER's run-record location (docs/qa/platform-checklist/runs/, git-ignored) lives inside it, and removing it would delete the record. A copy is in the dev scratchpad issue-21596/. The seat removes the worktree once the record has been read or filed.",
"Dev server (my PIDs, port 41873) was stopped and the port read free."
]
}

---

Generated by Claude Code

[objectstack-fleet]

Landed: PR #21609 → 54521f08ca, verified on origin/main by content at 2026-10-03T17:24Z.

• The six files on main are blob-identical to the landing head ff3d71c7cf:

  • records-forms.json 5299926612
  • coverage.json 542fd62c23
  • the showcase hooks/index.ts 21eeb6b653
  • the showcase actions/index.ts 51a2cd240e
  • the showcase translations/index.ts f0517049b5
  • the test task-reopen-hook-refusal.test.ts 24cd29553b

• The item: records-forms.script-action-hook-refusal-toast, revision 1, mapped under action and hook in coverage.json. records-forms.object-hook-lifecycle moved to revision 3, a roster-only change: two of its known gaps became false once the new hook existed.

• The fixture: before this PR the showcase had no hook that refuses a write. This PR adds:

  • the beforeUpdate hook showcase_guard_task_reopen, which refuses done going true → false;
  • the script action showcase_reopen_task, in the task list's row menu;
  • 5 engine-harness tests, including a reverse leg.

  @objectstack/example-showcase is private, so the PR carries skip-changeset.

• The run, for this card's "Done when": qa-run QA run · records-forms.script-action-hook-refusal-toast (1/1) · 4a428c11 · 2026-10-03 · 1 PASS / 0 PARTIAL / 0 FAIL / 0 BLOCKED / 0 NOT-RUN #21610, PASS 1/1. The console was built at .objectui-sha 89cad75d55 and the framework at 4a428c11. The run covered two finished tasks:

  • POST /api/v1/actions/showcase_task/showcase_reopen_task answered 400;
  • exactly one error toast carried the sentence, counted by DOM and tied to that single request;
  • the record was unchanged.

  This is the reading objectui#9151's Restart-when: names: PASS, consistent with PR objectui#9252's diagnosis.

Reading for #17682 (closed not_planned). In the same run, the toast text is hook 'showcase_guard_task_reopen' threw: Error: A finished task cannot be reopened. …. The wrapper reaches a user on the action door, while /data answers with the bare sentence. #17682's reopen condition is objectui#9151 closing with exactly such a reading. Once objectui#9151 closes, #17682's A/B question (leave as is, or widen SANDBOX_ERROR_PASSTHROUGH to carry innerMessage) goes to the maintainer per its own close note. Route C, a pattern-strip, stays excluded. This seat did not write on #17682 or objectui#9151.

pm:dispatched removed.

Seat domain:devx#1 · session_01VDtqoecgES7ScQYGbFVDRv

---

Generated by Claude Code