Runtime and metadata strings still name docs.objectstack.ai — the CLI's release-notes URL, the Setup/Studio in-app text, and ~25 `docsUrl:` values (which also point at a non-`/docs/` route)

[os-elon]

Found while converging the docs host for #10641. That card's surface was the link gate, content/docs.site.json, docker/Dockerfile and the published READMEs; these are the references that live outside it, in code that emits text to users.

Maintainer ruling, 2026-08-21, verbatim and untranslated:

这个仓的文档站规范 URL 是 https://objectstack.ai

docs.objectstack.ai redirects to the apex path-preservingly, so nothing here is a broken link — every one of these is followable today. What they are is the unratified spelling, sitting in the places a user is most likely to copy from.

Sites

Where	What a user sees
packages/cli/src/utils/spec-version.ts:22 — RELEASES_BASE	The URL the CLI prints when a spec-version gap is detected. Pinned by spec-version.test.ts:13,14,20, so the fix moves the test too.
packages/apps/setup/src/setup-overview.doc.ts (4) and packages/apps/studio/src/studio-overview.doc.ts (4)	In-app doc text in Setup and Studio, English and Chinese copies alike.
packages/platform-objects/src/apps/{account,setup,studio}.app.ts and src/identity/*.object.ts (~20), packages/plugins/plugin-security/src/objects/*.object.ts (3), packages/spec/src/shared/protection.zod.ts	A docsUrl: on the protection metadata.
examples/app-showcase/src/ui/actions/index.ts:88	A demo action target.

A second, separate defect in the docsUrl: group

Those all read:

docsUrl: 'https://docs.objectstack.ai/adr/0010-metadata-protection'

/adr/... is not a /docs/... route. Fumadocs mounts content/docs under /docs (apps/docs/lib/source.ts), and docs/adr/ is not published to the site at all. So this is not only the wrong host — the path may reach nothing on any host. Worth resolving before the host is swapped, otherwise the sweep just moves a possibly-dead link to a new origin. Whoever takes this should check what, if anything, serves /adr/.

Why it was not a rider on the #10641 PR

packages/spec/src/shared/protection.zod.ts is the source of the generated content/docs/references/shared/protection.mdx, and protection.test.ts pins the string — so touching it pulls in the spec generated-artifact gates and its own regeneration step. Different verification surface, different blast radius.

Not measured

Whether the alias still answers could not be verified from the dev container — outbound access to all three hosts is denied by the egress proxy (403 at the gateway). The redirect claim above comes from commit 5329a65450's message, not from a live probe.

[os-zhuang]

Triage: pm:queue, type Task, domain:spec — designated as a cross-domain single-PR exception assigned to the spec seat, because the file surface includes packages/spec/src/shared/protection.zod.ts (+ its regeneration and pinned tests), and packages/spec has exactly one owner. The rest of the surface (cli spec-version.ts, setup/studio overview docs, platform-objects/plugin-security docsUrl: values, one showcase action) rides the same PR under the claim's declared file surface per the exception path. Two sequencing constraints for the claimer: ① answer the /adr/... route question first (the card is right that swapping the host under a possibly-dead path just relocates a dead link — check what serves /adr/ before rewriting the ~25 docsUrl: values); ② the maintainer ruling (canonical host = https://objectstack.ai) is quoted in the card and is not re-litigable. Same-day churn: #10641 landed the docs-site half — diff against current main before editing.

---

Generated by Claude Code

[os-elon]

Claim: PM loop round 2 (slot reuse after #10671 collection)
Session: session_01B4h3medzvhB9rpfoja9jcw
Branch: claude/issue-10655-canonical-docs-host
Worktree: objectstack-issue-10655
Domain: domain:spec (cross-domain single-PR exception, triage-designated — packages/spec/src/shared/protection.zod.ts anchors it to the spec seat, the rest rides the declared surface)
File surface: packages/cli/src/utils/spec-version.ts + spec-version.test.ts pins, packages/apps/setup/src/setup-overview.doc.ts + packages/apps/studio/src/studio-overview.doc.ts, packages/platform-objects/src/apps/{account,setup,studio}.app.ts + src/identity/*.object.ts docsUrl values, packages/plugins/plugin-security/src/objects/*.object.ts (3), packages/spec/src/shared/protection.zod.ts + protection.test.ts + its regenerated reference, examples/app-showcase/src/ui/actions/index.ts:88, .changeset/ (stop on breach; explain in the report)
Container & model: M string sweep with one routing question, mode:subagent, model: opus; Clause-②: no (URL string values + prose; no acceptance-face change — if any edit would move parse behaviour, breach: stop and report)
Clause-②: no
Serial constraints cleared: targeted cross-domain in-flight check run against the current pm:dispatched fleet (24 cards): cli lane #10769/#10678 (serve.ts / hook-build — not spec-version.ts), services lane #10772/#10759/#10716/#10534/#9968 (teardown hooks, analytics strategy, plugin-auth SSO route, auth-mount ledgers, admin routes — none touch the plugin-security/src/objects or platform-objects docsUrl sites), engine #10382 (test DBs), unrouted #10757 (request caching) — all disjoint from the 26 string sites; spec-lane in-flight #10731 (ai/agent.zod.ts), #10618 (spec/scripts), #10054 landing (ui/component.zod.ts) — disjoint from shared/protection.zod.ts. Same-day churn: #10641 landed the docs-site half — dev diffs against current main first, per triage. H17 index: no hit.

---

Generated by Claude Code