spec: `ActionParam` carry-over declaration — carried from the row, rendered read-only, submitted verbatim (#11753 ruling, spec half)

[os-support-ai]

Spec half of the #11753 ruling (maintainer, 2026-08-25, verbatim 「同意」 on recommendation A; full record = #11753 comment 5404887360). Filed by PM session session_01KWRU3s15AJz7PGW7a7wdCh per the confirmed checklist. Parent: #11753 (tracking).

Pre-measurements FIRST — both named by the parent card, and they gate the design:

1. Can objectui's ActionParamDialog carry a read-only-summary render for a param it must still submit? Measure before fixing the key's shape. If this needs renderer surgery beyond honouring a declaration, ⛔ stop and report — fallback B (objectui-only collapsed summary) is decided on The Clone dialog for a permission set now offers five raw JSON blobs as editable inputs — defaultFromRow has no non-editable carry-over #11753, never taken silently.
2. Sweep every shipped action's defaultFromRow params bound to JSON-serialized columns — the population this key serves. Report identities, not counts.

Content: add the authorable key to ActionParamSchema (packages/spec/src/ui/action.zod.ts) expressing carry this value through: seed from the row, render as a non-editable summary, submit verbatim. Naming/shape is this leg's design. Measured constraint from the parent: visible is NOT the answer — it omits the param from submission entirely. Exemplar usage: the five clone_permission_set facet params in packages/plugins/plugin-security/src/objects/sys-permission-set.object.ts declare the key.

Discipline: Clause-②: yes (widens the authorable public surface) — contract-review tier; ⛔ spec seat only (packages/spec sole owner; the plugin-security exemplar edit rides the same PR or splits per the seat's judgment).

Acceptance criterion: the schema accepts the new key; the five clone params declare it; a pin asserts a declared carry-over param is still submitted verbatim (#11703's pin 6 — the send-side contract — stays green).

Downstream: the objectui renderer leg is Blocked-by: this card. Cross-repo unlock criterion: the consumer repo must be able to install the change (objectui refresh/pin flow picks it up), not merely see it merged.

[os-trump]

Triage (half-label repair, daily full round): the ActionParam carry-over declaration lands in packages/spec — domain:spec (single-owner surface); ruled spec half of #11753. Clause-② applies at dispatch (spec contract surface, declared carry-over semantics). Type Task.

---

Generated by Claude Code

[os-zhuang]

Claim: PM loop round R8, wave 5 — ruled spec half of #11753 (maintainer 2026-08-25, verbatim 「同意」 on recommendation A; full record = #11753 comment 5404887360)
Session: session_012xGvxcwPRTJfA7RfjXEYA4
Branch: claude/issue-11992-actionparam-carryover-key
Worktree: objectstack-issue-11992
Domain: domain:spec
File surface: packages/spec/src/ui/action.zod.ts (the carry-over authorable key, name/shape = this leg's design), packages/plugins/plugin-security/src/objects/sys-permission-set.object.ts (the five clone_permission_set exemplar params declare it — riding the same PR per the card's option), tests incl. the #11703 pin-6 stay-green assertion, generated baselines the gates demand, one changeset. Pre-measurements FIRST per the card (objectui ActionParamDialog render feasibility — read-only cross-repo measurement in the local objectui checkout; defaultFromRow-on-JSON-columns population sweep, identities not counts). Stop conditions: renderer surgery needed ⇒ stop and report (fallback B is #11753's to decide, never taken silently).
Container & model: M, mode:subagent, model: claude-fable-5 — clause-② per the card's own discipline line (widens the authorable public surface, contract-review tier); path limb also fires
Clause-②: yes
Serial constraints cleared: batch sibling #12007 (kernel/cli-extension.zod.ts + ADR-0087 registries) — disjoint files. Landing-watch PRs #12611 (contracts + error-code-ledger) and #12612 (identity/eval-user.zod.ts + plugin-security/objects/default-permission-sets.*) — disjoint files; note #12612 touches the SAME plugin-security objects/ directory, different file — merge current origin/main immediately before PR and re-merge if #12612 lands mid-flight. Parked PR #12606 (data/object.zod.ts) disjoint. H17 — no intersection. Downstream objectui renderer leg unlocks on consumer-installable (pin/refresh), not on merge — recorded for the unlock scan.

---

Generated by Claude Code

[os-zhuang]

Dev claim: running as mode:subagent inside PM session session_012xGvxcwPRTJfA7RfjXEYA4 (R8 wave 5, per PM claim comment 5430643723).
Branch: claude/issue-11992-actionparam-carryover-key
Worktree: objectstack-issue-11992
Plan: pre-measurements first (objectui ActionParamDialog read-only-summary feasibility — read-only measurement in the local objectui checkout, zero objectui edits; defaultFromRow-on-JSON-columns population sweep, identities); then the authorable carry-over key on ActionParamSchema (packages/spec/src/ui/action.zod.ts), the five clone_permission_set facet params in packages/plugins/plugin-security/src/objects/sys-permission-set.object.ts declaring it, pins (key parse + describe; #11703 pin 6 stays green untouched), generated baselines, one changeset. Stop conditions honoured: renderer surgery needed ⇒ needs_decision (fallback B is #11753's to decide). Draft PR only (Clause-② contract-review tier).

---

Generated by Claude Code

---

Generated by Claude Code