os-hourly-full-run-ci — machine-findable marker for this generated card. ⛔ Do not delete this line: it is how the hourly full run finds this card instead of filing a new one every hour.

hourly full run: red on main (CI)

Swept 2026-10-12T23:25:18.870Z · run log · commit 36b2889cddc5e38acf7f85b8e186b02e6ef786c6 · conclusion failure.
CI runs the FULL battery on main every hour (#16467). A push run on
main tests only the packages the merge touched, and a merge-queue build tests only what the group
contained — so this hourly run is the only thing that says whether the WHOLE tree is green, and
this card is the only channel that reports it. Nothing is blocked by it.
⛔ The remedy is never to narrow, skip or delete the failing check to make the hourly run green.
Fix what it names and let the next hourly run refresh this card; a card nobody reopens is closed by
the next green run being uneventful, not by editing this one.

What landed since the last green hourly run

Range: 275ad4229a (run 38281387358, the last green CI schedule run) .. 36b2889cdd — compare

• 038d4c9588 feat(metadata-protocol): one language of an email template is addressed by name — the by-name /meta doors accept a bundle member selector ([finding] email_template: a Studio save of the same template in a second locale replaces the first locale's overlay at the next boot (sys_metadata keeps one overlay row per type and name) #22877, stage 2) (feat(metadata-protocol): one language of an email template is addressed by name — the by-name /meta doors accept a bundle member selector (#22877, stage 2) #23070)
• 9b37edbd7c feat(spec)!: a type:'url' action's target declares its closed scheme set — http(s)://, mailto: and in-app paths — at both url-action doors (feat(spec)!: a type:'url' action's target declares its closed scheme set — http(s)://, mailto: and in-app paths — at both url-action doors #23076)
• 7f2f081e8a fix(cli,runtime): a host-config os serve composes a MetadataPlugin, so its declared apis are served; a matcher-less composition warns once (fix(cli,runtime): a host-config os serve composes a MetadataPlugin, so its declared apis are served; a matcher-less composition warns once #23078)
• 62ce45d140 feat(spec): a page element dataSource can name an API endpoint (provider: 'api') (feat(spec): a page element dataSource can name an API endpoint (provider: 'api') #23079)
• 0aef788816 fix(plugin-hono-server): /auth/me/permissions outer catch answers the closed body (fix(plugin-hono-server): /auth/me/permissions outer catch answers the closed body #23081)
• a22e67b3c1 feat(spec): a record:details section heading can show how many values a multi-value field holds (sections[].count and the {{ count }} hole) (feat(spec): a record:details section heading can show how many values a multi-value field holds (sections[].count and the {{ count }} hole) #23080)
• 8c10776152 fix(metadata-protocol): a migrate-stored pass records the user who ran it, or nobody — never a label (fix(metadata-protocol): a migrate-stored pass records the user who ran it, or nobody — never a label #23085)
• 968acc8956 feat(spec,service-automation,lint)!: an http node's url and headers are text slots, its body a value slot, the rest literals — the {…} token refused ([v18] retire the {var} template dialect in flow assignment slots: refuse at registration with per-spelling remedies (the C half of #11182 ruling D, on the v18 train) #19939 pass 4, S5) (feat(spec,service-automation,lint)!: an http node's url and headers are text slots, its body a value slot, the rest literals — the {…} token refused (#19939 pass 4, S5) #23062)
• 0511341408 fix(rest): openapi.json documents a valid declared endpoint the served read decorated (finding(rest): openapi.json omits a VALID declared api item and logs "fix the declaration" — its closed re-parse refuses the read-time _diagnostics decoration (the #15591 shape) #23083) (fix(rest): openapi.json documents a valid declared endpoint the served read decorated (#23083) #23087)
• 6662e3f590 fix(runtime): AppPlugin's job scheduling and datasource readers take the boot's converted copy (fix(runtime): AppPlugin's job scheduling and datasource readers take the boot's converted copy #23089)
• 1badd31838 docs(spec): branding.logo is the app's one square icon (1:1, SVG preferred, at least 64 px) (docs(spec): branding.logo is the app's one square icon (1:1, SVG preferred, at least 64 px) #23095)
• 2d21b9c891 feat(metadata-protocol): an unmanaged install copies no protection lock, and names each one it drops (feat(metadata-protocol): an unmanaged install copies no protection lock, and names each one it drops #23075)
• 63d5db24b1 fix(lint): one-line fix lines for 17 more author-time rule ids; os explain RULE_ID carries what they explained (fix(lint): one-line fix lines for 17 more author-time rule ids; os explain RULE_ID carries what they explained #23097)
• 56986e9dc2 ci(timing gates): the two timing steps report-only on every event, schedule included (ci: merge-queue Test Core reds on the new suite-duration ceiling — @objectstack/cloud-connection measured 177.5 s and 200.3 s vs its 163.89 s ceiling, in two groups of PRs that do not touch it (live since 1bd612bd6) #22949 ruling E, item 1) (ci(timing gates): the two timing steps report-only on every event, schedule included (#22949 ruling E, item 1) #23063)
• d0f1c5bfb9 ci(refresh lane): each refresh diffs its window against the previous dataset, density-guarded, and lists test files over 10 s; the lane's seat files the cards (ci(refresh lane): each refresh diffs its window against the previous dataset, density-guarded, and lists test files over 10 s; the lane's seat files the cards #23066)
• abf86554c9 fix(metadata-protocol): the artifact envelope is stamped only on the bundle member the package ships (registry: an unshipped bundle member overlay wears the bundle artifact envelope, so isCodeArtifactBody reads it as packaged code; measure every reader and fix the graft at its root #23074) (fix(metadata-protocol): the artifact envelope is stamped only on the bundle member the package ships (#23074) #23094)
• 55828c5145 feat(spec): an empty state names its one next step (link: { label, url }), and a list page carries its own emptyState (feat(spec): an empty state names its one next step (link: { label, url }), and a list page carries its own emptyState #23098)
• 36b2889cdd test(plugin-security): retire the declared-permission seeder suites (refactor(plugin-security,platform-objects,spec): retire the catalog seeders, the per-organization catalog machinery and the four catalog objects; Setup creation is an environment write under single and refused under a wall (ADR-0131 D2/D3/D5/D13) #15204 stage 6b-2, T1) (test(plugin-security): retire the declared-permission seeder suites (#15204 stage 6b-2, T1) #22897)
  Filed by .github/workflows/scheduled-full-run-card.yml. Generated by Claude Code