lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

Description

@claude

Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

The three sites

filelinewhat it judges
packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

Why the claim looks stale

All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

  • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
  • a flow node's fields map is likewise handed to the engine as caller data.

The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

Why it matters

The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

Not verified here

I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

Suggested scope

Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


Generated by Claude Code

Metadata

Metadata

Assignees

Type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
     blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
    }
    } catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
    })();
    (function(){
    try {
    var __m = "github.com";
    var __re = new RegExp('^' + "github\\.com" + '
    
    Skip to content

    lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

    Description

    @claude

    Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

    Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

    The three sites

    filelinewhat it judges
    packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
    packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
    packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

    Why the claim looks stale

    All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

    • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
    • a flow node's fields map is likewise handed to the engine as caller data.

    The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

    Why it matters

    The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

    Not verified here

    I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

    Suggested scope

    Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


    Generated by Claude Code

    Metadata

    Metadata

    Assignees

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
      Skip to content

      lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

      Description

      @claude

      Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

      Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

      The three sites

      filelinewhat it judges
      packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
      packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
      packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

      Why the claim looks stale

      All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

      • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
      • a flow node's fields map is likewise handed to the engine as caller data.

      The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

      Why it matters

      The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

      Not verified here

      I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

      Suggested scope

      Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


      Generated by Claude Code

      Metadata

      Metadata

      Assignees

      Type

      Projects

      No projects

        Milestone

        No milestone

        Relationships

        None yet

        Development

        No branches or pull requests

        Issue actions

        , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
        Skip to content

        lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

        Description

        @claude

        Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

        Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

        The three sites

        filelinewhat it judges
        packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
        packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
        packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

        Why the claim looks stale

        All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

        • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
        • a flow node's fields map is likewise handed to the engine as caller data.

        The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

        Why it matters

        The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

        Not verified here

        I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

        Suggested scope

        Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


        Generated by Claude Code

        Metadata

        Metadata

        Assignees

        Type

        Projects

        No projects

          Milestone

          No milestone

          Relationships

          None yet

          Development

          No branches or pull requests

          Issue actions

          , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
          Skip to content

          lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

          Description

          @claude

          Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

          Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

          The three sites

          filelinewhat it judges
          packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
          packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
          packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

          Why the claim looks stale

          All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

          • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
          • a flow node's fields map is likewise handed to the engine as caller data.

          The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

          Why it matters

          The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

          Not verified here

          I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

          Suggested scope

          Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


          Generated by Claude Code

          Metadata

          Metadata

          Assignees

          Type

          Projects

          No projects

            Milestone

            No milestone

            Relationships

            None yet

            Development

            No branches or pull requests

            Issue actions

            , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
            Skip to content

            lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

            Description

            @claude

            Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

            Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

            The three sites

            filelinewhat it judges
            packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
            packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
            packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

            Why the claim looks stale

            All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

            • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
            • a flow node's fields map is likewise handed to the engine as caller data.

            The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

            Why it matters

            The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

            Not verified here

            I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

            Suggested scope

            Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


            Generated by Claude Code

            Metadata

            Metadata

            Assignees

            Type

            Projects

            No projects

              Milestone

              No milestone

              Relationships

              None yet

              Development

              No branches or pull requests

              Issue actions

              , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
              Skip to content

              lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

              Description

              @claude

              Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

              Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

              The three sites

              filelinewhat it judges
              packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
              packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
              packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

              Why the claim looks stale

              All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

              • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
              • a flow node's fields map is likewise handed to the engine as caller data.

              The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

              Why it matters

              The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

              Not verified here

              I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

              Suggested scope

              Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


              Generated by Claude Code

              Metadata

              Metadata

              Assignees

              Type

              Projects

              No projects

                Milestone

                No milestone

                Relationships

                None yet

                Development

                No branches or pull requests

                Issue actions

                , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
                Skip to content

                lint: three write-set rule messages still describe a driver-dependent outcome for CALLER-supplied undeclared keys, which the #8682/#8738 door already refuses #13858

                Description

                @claude

                Three lint rule messages still tell authors that an undeclared field write has a driver-dependent outcome — "on a SQL driver the whole call fails with a driver-level error; on a schemaless driver (memory, MongoDB) the stray key is persisted". For the paths those three rules actually judge, that has not been true since #8682 / #8738.

                Found while implementing #13657 (the post-hook half of the declared-field door). #13657 fixes the one message this claim was still true for — a hook body's own ctx.input write — and deliberately did not widen to these three, because they are a different, older staleness.

                The three sites

                filelinewhat it judges
                packages/lint/src/validate-hook-body-writes.ts~858ctx.api.object('x').update({ ... })inside a hook body
                packages/lint/src/validate-action-body-writes.ts~419the same ctx.api write inside an action body
                packages/lint/src/validate-flow-node-writes.ts~298a flow create_record / update_record node's fields map

                Why the claim looks stale

                All three describe a fresh engine operation whose payload is CALLER-supplied, not a mutation of an in-flight ctx.input:

                • ctx.api is a ScopedContext over the triggering execution context (buildHookApi), so ctx.api.object('deal').update({ stagee: 'won' }) arrives at ObjectQL.update as an ordinary caller payload;
                • a flow node's fields map is likewise handed to the engine as caller data.

                The pre-hook declared-field door (#8682 insert, #8738 update) refuses a caller-named undeclared key from the object's field map, before the hooks and before any statement — so no driver is reached and there is no split to observe. That is already pinned, on both driver families, by the a CALLER-supplied undeclared key — the schema refuses, on both families block in packages/runtime/src/sandbox/undeclared-field-write-driver-split.integration.test.ts, which asserts INVALID_FIELD / 400 on SQL and on memory alike.

                Why it matters

                The rule file's own header states the reason this prose is governed: "a lint that misdescribes the failure it is warning about teaches the wrong debugging instinct". An author told to expect a driver-level column error, or a silently persisted key, will not connect the INVALID_FIELD / 400 they actually get to the typo that caused it — and on the schemaless side the message promises a persisted value that no longer exists.

                Not verified here

                I measured the hook-body ctx.input path end to end (real QuickJS sandbox, real engine, real driver-sql and driver-memory) because that was #13657's subject. I did not boot the ctx.api or flow-node paths — the claim above is derived from the call shape plus the existing caller-payload pin, so it wants a reproduction before the prose is rewritten.

                Suggested scope

                Re-measure the three paths, then rewrite the three messages to whatever they answer. Note that unprovisionedAnchorWriteConsequence() in the same file is a different case and appears still correct: an ADR-0015 external object's injected anchor IS declared in the registered schema, so it passes the door by construction and the remote database really is what refuses it.


                Generated by Claude Code

                Metadata

                Metadata

                Assignees

                Type

                Projects

                No projects

                  Milestone

                  No milestone

                  Relationships

                  None yet

                  Development

                  No branches or pull requests

                  Issue actions