marketplace: on a runtime that proxies to a control plane, the load-error hint says "This runtime serves the marketplace catalog itself" — the runtime config reports cloudUrl '' on the cloud-connected arm too

[objectstack-fleet]

Filing gate ①, class (b), with reach: measured at a public door: a published runtime contract and its reader disagree, and the user reads the wrong cause.

Reader: the objectstack-wide triage seat's first touch. It grades the card and routes the fix to one of two repos: the consumer's reading in objectui, or the producer's payload in objectstack. Then the execution seat that claims it acts.

Dedupe: mcp__github__search_issues, closed included:

• objectstack-ai/objectstack, for "runtime config cloudUrl empty same origin while marketplace proxy forwards to cloud.objectos.ai controlPlaneUrl RUNTIME_CONFIG_OPTIONS resolveCloudUrl" and "MarketplaceProxyPlugin cloudUrl same-origin hint wrong marketplace catalog cloud connection": 6 and 3 hits. All of them are closed, and each is a different defect on this surface: fix(app-shell): stop emitting the third kanban lane spelling groupBy #8356 (features.marketplace asserted unconditionally), docs-gates: bring docs/adr/** and docs/audits/** into the doc-snippet walk, ledger-first (objectui#7856 card 2) #8357, refactor(app-shell): drop the redundant unknown[] assertion in useReconcileOnError #8389, finding(plugin-calendar): the ObjectCalendar renderer carries a lenient alias ladder (dateField / startField) that no published declaration spells — decide whether the aliases stay, are declared, or are refused #8355, #14514 and #15353. Those are the positive control for the query.
• objectstack-ai/objectui: objectui#11688 (PR objectui#11724) is the card that surfaced this. It fixes the error text and stops showing the hint under an answered refusal. It does not touch the hint's wording or what cloudUrl: '' means.

What happens

On the 2026-10-06 console dogfood sweep's CLI showcase runtime (objectui#11672), Browse Marketplace showed this hint under a load error:

This runtime serves the marketplace catalog itself. Check that the runtime is online.

The same request had been forwarded to cloud.objectos.ai: the error named that host, 403 Host not in allowlist: cloud.objectos.ai. The runtime does not serve the catalog itself. It proxies a control plane.

• The producer, objectstack main at f0022c46: packages/cli/src/commands/serve.ts. Serve.RUNTIME_CONFIG_OPTIONS is one frozen object (about :1712–:1720) with controlPlaneUrl: ''. Both arms mount it, the cloud-connected one included (new RuntimeConfigPlugin({ ...Serve.RUNTIME_CONFIG_OPTIONS }), about :3845 and :3901). On the cloud-connected arm, MarketplaceProxyPlugin is mounted with the resolved marketplaceUrl (about :3829). With no explicit URL, resolveCloudUrl resolves to DEFAULT_CLOUD_URL = 'https://cloud.objectos.ai' (packages/cloud-connection/src/cloud-url.ts about :12, :39–:44). The block's own docblock says '' is the deliberate "stay on this origin" spelling for RuntimeConfigPlugin.
• The reader, objectui: packages/app-shell/src/console/marketplace/MarketplacePage.tsx draws marketplace.load.failedHintSameOrigin when cloudUrl is ''. objectui's runtime-config.ts documents '' as "same-origin (i.e. the runtime we're attached to is the cloud)". That reading is stronger than the producer's ("stay on this origin" describes where requests go, not who serves the catalog).
• After PR objectui#11724 (in flight), the hint no longer shows under an answered refusal such as the 403. It still shows on such a runtime for a network failure or a 502 / 503 / 504, and there it still names the wrong server.

Done when

• On a runtime whose marketplace proxy forwards to a control plane, the load-error hint names that plane (or names none), and never says the runtime serves the catalog itself. On a runtime that really is the control plane, or an air-gapped one, it is unchanged.
• The runtime-config contract's cloudUrl (or whatever key triage picks) means one thing on both sides, written in both repos' docs.
• Pins: the cloud-connected CLI arm, with the default plane, gets a hint that names cloud.objectos.ai (or no same-origin claim). The air-gapped arm and a configured plane keep their current hints.

Not this card: the proxy forwarding a foreign hop's text/plain refusal verbatim instead of in its own error envelope. That is recorded in PR objectui#11724's Acceptance notes.

Dedupe words: failedHintSameOrigin · cloudUrl empty same origin · serves the marketplace catalog itself · RUNTIME_CONFIG_OPTIONS controlPlaneUrl · MarketplaceProxyPlugin default cloud

Filed by the domain:ui execution seat 2 (session_01FngvPpdrnhHMdHHq6vwwju), from the out-of-scope findings of objectui#11688's dev report. ⛔ Not graded or routed here; ⛔ not a claim.

---

Generated by Claude Code

[objectstack-fleet]

Path: ② the capabilities an end user meets in the app — installing from the marketplace | 缺项 | P3

Triage: first grade — bug · priority:p3 · domain:ui · area:devpath · pm:blocked. The fix is the consumer's reading, not the producer's payload

Blocked-by: #11688

Triage seat (objectstack-wide, seat post objectstack-ai/objectstack#6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-06T15:54Z. ⛔ Not a claim, ⛔ not a dispatch.

Triage: lands in packages/app-shell/src/console/marketplace/MarketplacePage.tsx (the failedHintSameOrigin branch) and runtime-config.ts's doc of '' ⇒ domain:ui; rationale: the producer's '' means "requests stay on this origin" (its own docblock), and that is true here, because the runtime proxies. The console reads more into it ("this runtime serves the catalog itself") than the contract says.

• Why objectui and not objectstack: making the producer report the upstream would add or overload a runtime-config field. That is a widening, and new surface defaults to no. Reading '' as the producer defines it fixes the hint with no contract change.
• Direction:
  • the hint states only what '' means (the catalog is reached through this runtime), and, where the error names an upstream host, names that host;
  • runtime-config.ts's comment drops "the runtime we're attached to is the cloud".
  • ⛔ No new runtime-config key. If the lane measures that the console truly needs to know an upstream exists, it returns needs_decision.
• Why blocked: PR objectui#11724 (objectui#11688) edits the same page's error and hint branch.
• Why p3: wrong advice in an error hint. Nothing breaks, and the error text itself names the real host.

---

Generated by Claude Code

[objectstack-fleet]

Triage: unlocked, pm:blocked → pm:queue. The blocker objectui#11688 closed completed through PR objectui#11724, and this card's premise still reads true on main

Triage seat (objectstack-wide, seat post objectstack-ai/objectstack#6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-06T16:20Z. ⛔ Not a claim, ⛔ not a dispatch.

The blocker is released:

• objectui#11688 closed completed at 2026-10-06T15:56:04Z, by PR objectui#11724 (Fixes #11688).
• That PR merged at 15:56:03Z as 9cf08d94c3, an ancestor of objectui origin/main (read at this write).

The premise still holds on main (read at this write):

• MarketplacePage.tsx:363 still takes marketplace.load.failedHintSameOrigin on the cloudUrl: '' arm.
• The English string still says "This runtime serves the marketplace catalog itself" (packages/i18n/src/locales/en.ts:3988), and the other locales say the same.
• runtime-config.ts still says the runtime "is the cloud" (:281 and :499).
• PR objectui#11724 left the hint's wording and the meaning of '' alone, as this card's body said it would.
• Two tests name the hint key: MarketplacePage.loadFailureCause-11688.test.tsx (:182, and its header quotes the current wording at :10) and MarketplacePage.disabledState.test.tsx (:207). The fix updates them in the same PR.

The grade 6020125348 stands as written: bug · priority:p3 · domain:ui · area:devpath, with its direction and its ⛔ on a new runtime-config key. The Blocked-by: line in that grade is spent.

[objectstack-fleet]

Claim: PM loop round 1
Session: session_01FngvPpdrnhHMdHHq6vwwju
Account: os-justin
Branch: claude/issue-11726-marketplace-hint-same-origin
Worktree: objectui-issue-11726
Domain: domain:ui
Seat: domain:ui#2
File surface:

• packages/app-shell/src/console/marketplace/MarketplacePage.tsx: the load-error hint branch (about :345–:365 at 834c559), plus toLoadFailure / LoadFailure (about :88–:110) if the upstream host is read there.
• packages/app-shell/src/runtime-config.ts: the docblocks only, AppShellRuntimeConfig.cloudUrl (about :281) and getCloudBase (about :499). The type, the field and the resolver's behaviour are unchanged.
• packages/i18n/src/locales/*.ts, all ten packs: only the value of marketplace.load.failedHintSameOrigin.
• The tests beside them: MarketplacePage.loadFailureCause-11688.test.tsx, MarketplacePage.disabledState.test.tsx, the docblock of packages/i18n/src/__tests__/marketplace-failedHint-retired-5504.test.ts, and new pins. Plus .changeset/11726-*.md.

Stop on breach; explain in the report.
Container & model: M, mode:subagent, model: opus (dispatch-gates --tier --repo objectstack-ai/objectui over the surface: no path-derived mandate; default tier)
Clause-②: no
Thread-read: 6020604800
Ruling-ref: 6020125348 (triage: the fix is the consumer's reading. The hint states only what '' means, that the catalog is reached through this runtime, and names the upstream host where the error names it. runtime-config.ts drops "the runtime we're attached to is the cloud". ⛔ No new runtime-config key; needs_decision if the console truly needs to know an upstream exists), and 6020604800 (unlocked, premise re-read on main). Both retrieved this round.
Serial constraints cleared: none blocking.

• No open PR touches packages/app-shell/src/console/marketplace/** or runtime-config.ts. Read: objectui#11728, feat(i18n): render instants in the served display zone (objectui#11693) #11729, fix(console): drop the three retired /api/v1/ai/assistant try-it rows from the Developer API console (objectui#11704) #11730 and fix(plugin-view,console,layout,components,fields): name and nest the controls axe flagged on the list and settings pages (objectui#11690) #11732 (other seats), fix(fields,plugin-detail,plugin-grid,app-shell,i18n): read-only booleans, the boolean list face and the Home greeting follow the locale (objectui#11689) #11731 (this seat, in the merge queue), feat(cli): objectui validate and objectui check judge through the strict authoring face (objectui#5250, slice A) #11069, and the release PR objectui#11600.
• objectui#11731 edits all ten locale packs, at fields.boolean.* and home.* only. If it lands first, this branch merges main.

Read 2026-10-06T16:39Z.

Why Clause-②: no:

• The fix rewords one existing value and reuses marketplace.load.failedHintConfigured ({{url}}) to name a host. No key, export, prop or schema key is added or removed. This follows the objectui#11688 precedent: no locale key added or moved means no.
• If the dev measures that a new key is unavoidable, it reports the built @object-ui/i18n locales/en.d.ts delta. The seat then amends this line to yes and runs the at-tier contract review before enqueue.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 11726,
"status": "done",
"branch": "claude/issue-11726-marketplace-hint-same-origin",
"pr": "#11740",
"session": "session_01FngvPpdrnhHMdHHq6vwwju — subagent run, the parent PM session's id (the Claude-Session trailer on 1a1bdd3 and 4658b17)",
"premise_still_valid": true,
"summary": "marketplace.load.failedHintSameOrigin now says only what cloudUrl '' means, that the catalog is reached through this runtime, plus the advice to check that the runtime is online and can reach the catalog. All ten packs changed. In en: 'The marketplace catalog is reached through this runtime. Check that the runtime is online and can reach the catalog.' No key is added, removed or moved. The hint names no host, because a probe of the real MarketplaceProxyPlugin handler (bundled from objectstack 803764a36f, driven with a stubbed upstream) shows no failure carries the upstream host in a structured place: the proxy's own failure is 502 with code MARKETPLACE_PROXY_FAILED and message 'fetch failed', and it drops the error cause that names cloud.objectos.ai; an upstream 502/503/504 is forwarded with the upstream's own body and only content-type, cache-control, etag, last-modified and vary, plus x-cache. So failedHintConfigured is not reused, and it is unchanged for a configured plane. runtime-config.ts's two docblocks (AppShellRuntimeConfig.cloudUrl, getCloudBase) and MarketplacePage.tsx's two comments stop reading '' as 'this runtime is the cloud'; the rendering logic is unchanged. The two tests that name the key and the retired-5504 docblock are updated, and a new pin reads the real en and zh packs over the measured proxy shapes. The branch merged main 02a3896 after objectui#11731 landed in the same ten packs, as the claim asked.",
"tests": "Full suite at 1a1bdd3 (the change before the merge): 'pnpm exec vitest run --maxWorkers=2 packages/app-shell/ packages/i18n/', 'Test Files 1115 passed | 1 skipped (1116)', 'Tests 11511 passed | 22 skipped (11533)', lock VERDICT command-exit 0 (held 31m14s on a shared box). After the merge, at 4658b17, a declared narrowing: 'pnpm exec vitest run --maxWorkers=2 packages/i18n/ packages/app-shell/src/console/marketplace/ packages/app-shell/src/tests/', 'Test Files 116 passed (116)', 'Tests 1809 passed | 13 skipped (1822)', exit 0. The narrowing rests on 'git diff 02a3896 HEAD' being exactly this change's 17 files. New pin MarketplacePage.sameOriginHint-11726.test.tsx, 12 of 12 green: per language (en, zh) under cloudUrl '', the proxy's 502 envelope, a forwarded 503, an empty 504, no answer, and a host in the server prose (cause line yes, hint no); plus the configured plane verbatim in en and zh. Build and type-check at 4658b17: 'pnpm --workspace-concurrency=2 --filter @object-ui/app-shell^... run build' exit 0; 'pnpm --filter @object-ui/i18n type-check' exit 0; 'pnpm --filter @object-ui/app-shell type-check' exit 0. Both type-checks echoed 'tsc --noEmit && tsc -p tsconfig.test.json', and --listFilesOnly shows the 3 touched app-shell tests (of 5042 files) and the touched i18n test in those programs. Built i18n locales/en.d.ts: one literal type changes ('readonly failedHintSameOrigin' now carries the new sentence); key set unchanged. Ablation, from the committed tree, with objectstack scripts/ablation-replace.mjs (anchor hit 1 time, blob changed, restore proven). Leg 1, old value restored in en and zh, predicted 8 red and 4 green: observed 'Tests 8 failed | 4 passed (12)', red on 'expected ... to match /through this runtime/i' and '... to match /通过本运行时/'. Restore: en.ts blob 2305b97065cb == HEAD, zh.ts blob 94c6684df880 == HEAD, git diff HEAD empty, status clean. Leg 2, en keeps 'through this runtime' and adds 'which serves it itself', predicted 4 red (the en claim cases only): observed 'Tests 4 failed | 8 passed (12)', red on the not-to-match serving-claim regex; restore blob == HEAD, diff empty. i18n resolves to packages/i18n/src via the root vitest alias, so no dist rebuild sat between mutation and measurement. Lint, narrowed to the 16 touched ts/tsx files at 4658b17: eslint --format json reports 16 files, 0 errors, 2 warnings. Both warnings are in MarketplacePage.tsx (react-hooks/set-state-in-effect on 'void load()'; no-explicit-any on 'catch (e: any)'), and the same 2 appear when the base blob is linted under the same filename. Population: the config's '/*.{ts,tsx}' block. Invariance: type-aware linting is not enabled (tseslint.configs.recommended, no parserOptions.project) and no custom rule reads another file. NOT MEASURED: check:eager-locale-catalogues, reason PREREQUISITE NOT MET, it needs a built console bundle; this diff changes no import, which is the composition it weighs. NOT MEASURED: the eager-closure byte budget, which belongs to CI (performance-budget.yml).",
"mcp_calls": "0 — no MCP GitHub tool called",
"api_writes": "2 relay writes as objectstack-fleet[bot], each one POST /repos/objectstack-ai/objectstack/dispatches executed by fleet-write.yml: (1) pr_create, i.e. POST /repos/objectstack-ai/objectui/pulls (draft, PR #11740; read-back 9618 bytes sent, 9618 stored, identical, then re-read over REST: draft, base main, head 4658b17, Clause line and session-URL footer intact); (2) this os-dev-report comment via post-stamped, i.e. POST /repos//issues/11726/comments. label-write --assign was refused by the classifier before it sent anything (see deviations), so 0 writes there. git push (empty branch, 1a1bdd3, 4658b17) is not REST. The PR's labels tests / package: app-shell / package: i18n were set by labeler, not by me.",
"gates": [
{
"cmd": "pnpm exec vitest run --maxWorkers=2 packages/app-shell/ packages/i18n/",
"exit": 0,
"head": "1a1bdd3"
},
{
"cmd": "pnpm exec vitest run --maxWorkers=2 packages/i18n/ packages/app-shell/src/console/marketplace/ packages/app-shell/src/tests/",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm exec vitest run --reporter=verbose packages/app-shell/src/console/marketplace/tests/MarketplacePage.sameOriginHint-11726.test.tsx",
"exit": 0,
"head": "1a1bdd3"
},
{
"cmd": "ablation leg 1 (old en+zh value) on the new pin: 8 failed | 4 passed, as predicted",
"exit": 1,
"head": "1a1bdd3"
},
{
"cmd": "ablation leg 2 (en adds a serving claim) on the new pin: 4 failed | 8 passed, as predicted",
"exit": 1,
"head": "1a1bdd3"
},
{
"cmd": "pnpm --workspace-concurrency=2 --filter @object-ui/app-shell^... run build",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm --filter @object-ui/i18n type-check",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm --filter @object-ui/app-shell type-check",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm exec eslint --format json (16 touched ts/tsx files)",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:i18n-keys",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:i18n-drift",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:i18n-dead-keys",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:i18n-designer-parity",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:new-line-citations",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:control-bytes",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:changeset-claims",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:pending-changeset-literals",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "node scripts/check-changeset-no-major.mjs",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "node scripts/check-changeset-presence.mjs",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "node scripts/check-changeset-fixed.mjs",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "node scripts/check-changeset-overwrite.mjs",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:vi-mock-specifiers",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:vi-mock-inherit",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:vi-mock-override-shape",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:test-path-roots",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "node scripts/check-governed-queue-guard.mjs --test (17 paths): NOT GOVERNED",
"exit": 0,
"head": "4658b17"
},
{
"cmd": "pnpm check:eager-locale-catalogues: NOT MEASURED, PREREQUISITE NOT MET (needs a built console)",
"exit": 2,
"head": "1a1bdd3"
}
],
"line_budget": "n/a — no skills/ file and no line-ratcheted ledger in the diff",
"files_changed": [
"packages/i18n/src/locales/{en,zh,ja,ko,de,es,fr,pt,ru,ar}.ts (+1/-1 each; only the value of marketplace.load.failedHintSameOrigin)",
"packages/app-shell/src/runtime-config.ts (+10/-5; the AppShellRuntimeConfig.cloudUrl and getCloudBase docblocks only)",
"packages/app-shell/src/console/marketplace/MarketplacePage.tsx (+9/-2; comments only, at the cloudBase read and on the hint branch)",
"packages/app-shell/src/console/marketplace/tests/MarketplacePage.sameOriginHint-11726.test.tsx (+213, new pin)",
"packages/app-shell/src/console/marketplace/tests/MarketplacePage.disabledState.test.tsx (+11/-4; header payload list, the cloudUrl '' case renamed and its comment)",
"packages/app-shell/src/console/marketplace/tests/MarketplacePage.loadFailureCause-11688.test.tsx (+5/-2; header note on the reworded hint, one it.each label)",
"packages/i18n/src/tests/marketplace-failedHint-retired-5504.test.ts (+5/-3; docblock only)",
".changeset/11726-marketplace-hint-same-origin.md (+9; '@object-ui/i18n': patch)"
],
"deviations": [
"PR assignee NOT written. The auto-mode classifier refused 'node scripts/pm/label-write.mjs --repo objectstack-ai/objectui --issue 11740 --assign os-justin' with reason [External System Writes]. Per the role file it was not retried by another route. Seat to set the PR #11740 assignee to os-justin; the PR currently has no assignee.",
"Zone 2.3, measured: the advice reads 'check that the runtime is online and can reach the catalog', not only 'that it is online'. On the proxying runtime every hint-showing failure except no-answer is a 502/503/504 the runtime itself answered, so 'is the runtime online' alone points at a server that just replied. The added clause names no hop and claims none exists. No key added.",
"Zone 2.2: no structured host field exists (measured shapes in tests/summary), so the claim's 'reuses failedHintConfigured to name a host' is not exercised. Clause-② stays no: no key, export or prop moved. The en.d.ts delta is one literal type value.",
"Surface, same files, a little past the claim's named line ranges: MarketplacePage.tsx's comment at the cloudBase read (it carried the 'this runtime IS the catalog host' reading the hint branch depends on); disabledState.test.tsx's header payload list (it said OS_CLOUD_URL unset gives cloudUrl https://cloud.objectos.ai, which is false for the CLI's cloud arm); loadFailureCause-11688's it.each label ('reporting no upstream' became 'names no upstream'). No file outside the claim's surface was edited.",
"Zone 2.4: no objectui doc (content/docs/**, package READMEs) carries the 'is the cloud' reading. packages/app-shell/README.md says 'names no upstream cloud', which is accurate. No doc edited.",
"Merged main 02a3896 into the branch (merge commit 4658b17, clean, merge-tree checked first) because objectui#11731 landed in the ten packs, as the claim directs. The post-merge test run is a declared narrowing (see tests); the full app-shell + i18n suite ran at 1a1bdd3.",
"Harness attribution: commits carry the model-free pair (Claude-Session + Co-authored-by: Claude) per objectui AGENTS.md, not the harness's model-named Co-Authored-By. The PR body ends with the session-URL footer per the role file, not the harness's line."
],
"open_questions": [],
"out_of_scope_findings": [
"class: b · reach: named real producer: Serve.RUNTIME_CONFIG_OPTIONS in objectstack packages/cli serve.ts, on the cloud-connected arm, passes controlPlaneUrl '' to RuntimeConfigPlugin while MarketplaceProxyPlugin forwards to resolveCloudUrl(), which resolved to https://cloud.objectos.ai in the probe at 803764a36f. Evidence: @objectstack/cloud-connection RuntimeConfigPluginConfig.controlPlaneUrl's docblock says 'Pass an explicit empty string to declare "this runtime IS the cloud" (same-origin for marketplace + install)', while the same file's constructor comment says 'An explicit empty string means "stay on this origin"', and so do the package README's composition (which also mounts the proxy beside '') and Serve.RUNTIME_CONFIG_OPTIONS's own docblock. objectui now reads '' as 'stay on this origin'. Seat to file in objectstack; not edited here. Seam: spec:RuntimeConfigPluginConfig.controlPlaneUrl → runtime:Serve.RUNTIME_CONFIG_OPTIONS (cloud-connected arm) | renderer:MarketplacePage failedHintSameOrigin · dedupe words: RuntimeConfigPluginConfig controlPlaneUrl · this runtime IS the cloud · stay on this origin docblock · controlPlaneUrl empty string",
"carrier: 承接者:无 · noted, not filed (inference, not measured) · objectui sites outside this card that carry the same reading and gate other behaviour: marketplaceApi.ts installPackage docblock ('When the runtime is the cloud'); cloudConsoleUrl() ('empty when this runtime has no upstream cloud'); MarketplacePackagePage.tsx reseed/purge gate comment ('Only offer them when the runtime IS the cloud (same-origin)'). Whether install and sample-data behaviour is right on a proxying '' runtime was not measured. Listed in the PR's Acceptance notes.",
"carrier: 承接者:无 · noted, not filed (observation) · MarketplaceProxyPlugin's MARKETPLACE_PROXY_FAILED message is undici's 'fetch failed'; the error cause that names the host is dropped, so the cause line on the console reads only 'fetch failed'. Listed in the PR body's measured table."
]
}

[objectstack-fleet]

ACCEPT: PR objectui#11740 at 4658b17 (Fixes #11726). No contract review is owed; it lands when CI is green

domain:ui execution seat 2 · session_01FngvPpdrnhHMdHHq6vwwju (os-justin) · 2026-10-06T18:06Z. Dev report: os-dev-report 6022315316 on this card. Claim 6020937004.

• Shape:

  • The PR is a draft on base main (merge-base 02a3896, merged in as 4658b17 after objectui#11731 landed in the same ten packs, as the claim asked).
  • Its first line is Fixes #11726, and Clause-②: no starts a line.
  • It has 17 files, +272/−26. git merge-tree against main at 5a2a6ab is clean. NOT GOVERNED.

• Surface, accepted. It edits three comments past the claim's named line ranges, in files the claim names:

  • MarketplacePage.tsx's comment at the cloudBase read, which carried the "this runtime IS the catalog host" reading;
  • disabledState.test.tsx's header payload list, which claimed OS_CLOUD_URL unset gives https://cloud.objectos.ai, false for the CLI's cloud arm;
  • one it.each label in loadFailureCause-11688.

  No file outside the surface is touched.

• Measured by the dev. The real MarketplaceProxyPlugin handler was bundled from objectstack 803764a36f and driven over a stubbed upstream:

  • the proxy's own failure is 502 MARKETPLACE_PROXY_FAILED with the message fetch failed, and the error cause that names cloud.objectos.ai is dropped;
  • a forwarded upstream 502 / 503 / 504 keeps the upstream's body and only content-type, cache-control, etag, last-modified, vary and x-cache.

  So no failure carries the upstream host in a structured place, and the hint names none. This is Zone 2's second outcome. Prose is never parsed for a host, and failedHintConfigured is not reused and is unchanged.

• Seat's own reading of the diff:

  • marketplace.load.failedHintSameOrigin gets a new value in all ten packs. In en it reads "The marketplace catalog is reached through this runtime. Check that the runtime is online and can reach the catalog."; in zh, "应用市场目录通过本运行时访问。请检查运行时是否在线、能否访问该目录。"
  • "and can reach the catalog" is measured advice. On a proxying runtime, every hint-showing failure except no-answer is a 502 / 503 / 504 the runtime itself answered, so "is the runtime online" alone points at a server that just replied. The new clause names no hop and claims none exists.
  • runtime-config.ts's AppShellRuntimeConfig.cloudUrl and getCloudBase docblocks now read '' as "requests stay on this origin": neither "this runtime is the cloud" nor "there is no upstream". The rendering logic is unchanged.
  • These are the ruling's two lines (6020125348). The Done-when condition holds: on every '' runtime, serving or proxying, the hint is true.

• Clause-②: no. The key set is unchanged, with no key, export or prop added or moved. The built en.d.ts changes one literal value type, failedHintSameOrigin's sentence, which is a copy change. That is the objectui#11688 precedent: no locale key added or moved means no. The changeset is @object-ui/i18n: patch. The app-shell changes are comments and tests only, and check-changeset-presence exits 0.

• Changeset: the seat checked it sentence by sentence against the diff. It covers the false sentence and why, the new en value, "names no host" with its measured reason, and the configured-plane hint unchanged. patch fits.

• Done-when, both repos' docs. The card asks that '' mean one thing in both repos' docs. objectui's half lands here. Objectstack's half is not in this repo: the dev found RuntimeConfigPluginConfig.controlPlaneUrl's exported docblock and cloud-url.ts saying "this runtime IS the cloud", against the constructor, the README and serve.ts. The seat filed it this stroke as cloud-connection: controlPlaneUrl's docblock says '' declares "this runtime IS the cloud"; the constructor, README and serve.ts say "stay on this origin", and the CLI's cloud-connected arm passes '' while proxying a control plane objectstack#22028, which carries that half. Fixes stays, with the remainder named there.

• Tests and gates (dev, measured):

  • At 1a1bdd3: packages/app-shell/ + packages/i18n/, 1115 files and 11511 tests, green.
  • At 4658b17, after the merge: a declared narrowing to i18n, the marketplace and the app-shell root tests, 116 files and 1809 tests, green, over the change's 17 files.
  • The new pin MarketplacePage.sameOriginHint-11726.test.tsx: 12 of 12 green. It covers en and zh under '' over the measured proxy shapes, plus the configured plane.
  • Two ablation legs went 8 red and 4 red exactly as predicted, each restored by blob.
  • type-check (both programs) is clean; lint on the touched files is 0 errors, and its 2 warnings were already present at base. The i18n and changeset gates all exit 0.

• Raised to the maintainer, not redone by the seat: the dev's PR-assignee write (label-write --assign os-justin on objectui#11740) was refused by its session's permission classifier. The PR has no assignee. It joins objectui#11702, feat(i18n,plugin-calendar,plugin-timeline): the calendar and the timeline start the week on the locale's first day (objectui#11675) #11710 and fix(components): size an auto-width column from what its cells draw, and stack right-pinned columns (objectui#11682) #11725.

• Out-of-scope findings:

  • Filed: cloud-connection: controlPlaneUrl's docblock says '' declares "this runtime IS the cloud"; the constructor, README and serve.ts say "stay on this origin", and the CLI's cloud-connected arm passes '' while proxying a control plane objectstack#22028, above.
  • Noted, not filed: three other objectui sites carry the same "is the cloud" reading in comments that gate behaviour (marketplaceApi.ts installPackage, cloudConsoleUrl(), MarketplacePackagePage.tsx's reseed and purge gate). Whether install and sample-data behaviour is right on a proxying '' runtime is not measured; this is an inference.
  • Noted, not filed: the proxy's fetch failed message drops the host-naming cause.

• CI on 4658b17: in progress at this read (29 success, 3 skipped, 10 running, 0 failed).

---

Generated by Claude Code