`MetadataProtocol` declares no `historyMetaItem` member, so the REST history door's request literal is compiled against nothing — the last undeclared read door of the audit/history pair

[claude]

Found while implementing #11678 (the auditMetaItem declaration; PR #12003) — the history door is the audit door's explicitly named twin (rest-server.ts: "Same Number(...) -> NaN -> dropped-limit shape as the history twin above"; the audit route serves the Studio 审计日志 tab, this one serves the History tab) and it is now in exactly the state the audit door just left. Filed rather than touched: same packages/spec contract decision, one door over, outside the #11678+#11679 fold's declared scope.

Measured on the PR #12003 merge head 2c8a3183 (base d63b0143)

historyMetaItem appears zero times in packages/spec/src/api/protocol.zod.ts (grep -c → 0; positive control: auditMetaItem now returns 5 there via PR #12003).

The REST door (GET /meta/:type/:name/history, packages/rest/src/rest-server.ts ~:5779-5817 on that head) reaches the verb through casts twice — guard if (!(p as any).historyMetaItem) and call await (p as any).historyMetaItem({ ... }) — sending type, name, and conditionally environmentId, sinceSeq, limit.

The implementation (ObjectStackProtocolImplementation.historyMetaItem, packages/metadata-protocol/src/protocol.ts:14585) declares { type, name, organizationId?, sinceSeq?, limit? } and returns { events: MetadataEvent[] }.

Two secondary facts a future card should weigh, both measured on the same head:

• The door spreads environmentId into the payload while the implementation's parameter type never declares or reads it — the same dead-weight member the audit door shed in auditMetaItem's organizationId is dead on both ends — the audit read returns every org's rows for a (type, name), while its comment describes a scope filter that is not in the query #8747; under the [finding] Meta-read request schemas still omit previewDrafts / state / environmentId, so the REST call-site casts survive the organizationId catch-up #9741 ruling it is transport-level either way.
• The implementation reads organizationId but this door never sends it — the audit door's auditMetaItem's organizationId is dead on both ends — the audit read returns every org's rows for a (type, name), while its comment describes a scope filter that is not in the query #8747 tenant-scoping question may or may not apply to history rows; that is a measurement for the card, not an assumption.
• The door's 501 refusal is the BARE-STRING envelope dialect (error: 'History query not supported by protocol implementation', no code) — the finding: rest-server.ts 里三个相邻 /meta handler 的错误信封是三种不同形状,其中两种不符合 ADR-0112 #7035-family drift the sibling /meta 501s converged off; check:route-envelope carries it as ratcheted debt. Declaring the member is the natural moment to converge it, but that is a behaviour change the declaration itself must not smuggle.

Precedents: #11006 (maintainer ruling 2026-08-22, option B) · #11426 (publish) · PR #12003 (#11678 audit — the twin — and #11679 delete).

⛔ Nothing about this door is addressed in PR #12003; its casts and payload are byte-identical there.

---

Generated by Claude Code

[os-steve]

Triage: domain:spec, pm:blocked, type Task.

Blocked-by: #11678

Sibling-inheritance grading (no new decision): this door is the audit door's named twin, in exactly the pre-#12003 state the audit door just left; the per-member protocol-vs-transport walk is the #11006 (2026-08-22, option B) ruled pattern already executed by #11426 and PR #12003. Same two files (protocol.zod.ts, rest-server.ts) as in-flight PR #12003 ⇒ hard serial behind #11678; unlock returns this on its close — re-verify on the merged ref.

Fold-or-serial (pre-answer for the spec seat): fold candidate with #12004 — same defect shape, same two files, both ruled-inherited, one worktree/changeset, per-member independently checkable. Named exclusions if folded: the 501 bare-string envelope convergence is a behaviour change the declaration must NOT smuggle (this card's own words); environmentId is transport-ruled (#9741) — out. Clause-②: yes — declared public face changes, contract-review tier applies.

---

Generated by Claude Code