skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

Description

@claude

Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
scope there, filed unassigned for triage.

The contradiction, both halves inside one published file

skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
### Filtering section:

filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

followed by the note:

$currentUser is a runtime variable — the logged-in user's ID.

Roughly 1400 lines further down, the same file's ## Context Tokens section says the
opposite, and says it exhaustively:

Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
that resolve inside a filter value

naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
in @object-ui/core, and adding that os validate fails the build on an unresolvable
placeholder in any filter (rule filter-token-unknown) precisely because the runtime
failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
surface renders empty.

Both claims cannot be true. One of the two sections is teaching a filter that does not work.

What the tree says

Repo-wide grep for the literal $currentUser (excluding node_modules):

  • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
    Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
  • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
    not a query filter);
  • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

Nothing in packages/spec declares $currentUser as a filter token. The declared filter
vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
tests reject near-miss spellings.

Why it matters

This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
first place in the file that shows a "records assigned to me" filter — writes
value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
the value slips past authoring, a list that silently renders nothing. The Context Tokens
section exists to prevent exactly that failure, and the Filtering section above it walks the
reader into it.

Decision the fix needs

Which half is wrong is not something this finding can settle from the docs alone:

  1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
    example and its note to {current_user_id}, and the "only two tokens" claim stands.
  2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
    the query layer) — then the Context Tokens section's "only two" is the false claim, and
    under contract-first the alias is what should go, with the declaration made to match.

Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
here is size-neutral at best.

Generated by Claude Code


Generated by Claude Code

Metadata

Metadata

Assignees

Labels

bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

Type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

    , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
     blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
    }
    } catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
    })();
    (function(){
    try {
    var __m = "github.com";
    var __re = new RegExp('^' + "github\\.com" + '
    
    Skip to content

    skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

    Description

    @claude

    Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
    scope there, filed unassigned for triage.

    The contradiction, both halves inside one published file

    skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
    ### Filtering section:

    filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

    followed by the note:

    $currentUser is a runtime variable — the logged-in user's ID.

    Roughly 1400 lines further down, the same file's ## Context Tokens section says the
    opposite, and says it exhaustively:

    Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
    that resolve inside a filter value

    naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
    in @object-ui/core, and adding that os validate fails the build on an unresolvable
    placeholder in any filter (rule filter-token-unknown) precisely because the runtime
    failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
    surface renders empty.

    Both claims cannot be true. One of the two sections is teaching a filter that does not work.

    What the tree says

    Repo-wide grep for the literal $currentUser (excluding node_modules):

    • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
      Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
    • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
      not a query filter);
    • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

    Nothing in packages/spec declares $currentUser as a filter token. The declared filter
    vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
    tests reject near-miss spellings.

    Why it matters

    This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
    first place in the file that shows a "records assigned to me" filter — writes
    value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
    the value slips past authoring, a list that silently renders nothing. The Context Tokens
    section exists to prevent exactly that failure, and the Filtering section above it walks the
    reader into it.

    Decision the fix needs

    Which half is wrong is not something this finding can settle from the docs alone:

    1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
      example and its note to {current_user_id}, and the "only two tokens" claim stands.
    2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
      the query layer) — then the Context Tokens section's "only two" is the false claim, and
      under contract-first the alias is what should go, with the declaration made to match.

    Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
    this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
    here is size-neutral at best.

    Generated by Claude Code


    Generated by Claude Code

    Metadata

    Metadata

    Assignees

    Labels

    bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
      Skip to content

      skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

      Description

      @claude

      Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
      scope there, filed unassigned for triage.

      The contradiction, both halves inside one published file

      skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
      ### Filtering section:

      filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

      followed by the note:

      $currentUser is a runtime variable — the logged-in user's ID.

      Roughly 1400 lines further down, the same file's ## Context Tokens section says the
      opposite, and says it exhaustively:

      Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
      that resolve inside a filter value

      naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
      in @object-ui/core, and adding that os validate fails the build on an unresolvable
      placeholder in any filter (rule filter-token-unknown) precisely because the runtime
      failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
      surface renders empty.

      Both claims cannot be true. One of the two sections is teaching a filter that does not work.

      What the tree says

      Repo-wide grep for the literal $currentUser (excluding node_modules):

      • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
        Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
      • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
        not a query filter);
      • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

      Nothing in packages/spec declares $currentUser as a filter token. The declared filter
      vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
      tests reject near-miss spellings.

      Why it matters

      This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
      first place in the file that shows a "records assigned to me" filter — writes
      value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
      the value slips past authoring, a list that silently renders nothing. The Context Tokens
      section exists to prevent exactly that failure, and the Filtering section above it walks the
      reader into it.

      Decision the fix needs

      Which half is wrong is not something this finding can settle from the docs alone:

      1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
        example and its note to {current_user_id}, and the "only two tokens" claim stands.
      2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
        the query layer) — then the Context Tokens section's "only two" is the false claim, and
        under contract-first the alias is what should go, with the declaration made to match.

      Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
      this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
      here is size-neutral at best.

      Generated by Claude Code


      Generated by Claude Code

      Metadata

      Metadata

      Assignees

      Labels

      bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

      Type

      Projects

      No projects

        Milestone

        No milestone

        Relationships

        None yet

        Development

        No branches or pull requests

        Issue actions

        , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
        Skip to content

        skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

        Description

        @claude

        Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
        scope there, filed unassigned for triage.

        The contradiction, both halves inside one published file

        skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
        ### Filtering section:

        filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

        followed by the note:

        $currentUser is a runtime variable — the logged-in user's ID.

        Roughly 1400 lines further down, the same file's ## Context Tokens section says the
        opposite, and says it exhaustively:

        Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
        that resolve inside a filter value

        naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
        in @object-ui/core, and adding that os validate fails the build on an unresolvable
        placeholder in any filter (rule filter-token-unknown) precisely because the runtime
        failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
        surface renders empty.

        Both claims cannot be true. One of the two sections is teaching a filter that does not work.

        What the tree says

        Repo-wide grep for the literal $currentUser (excluding node_modules):

        • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
          Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
        • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
          not a query filter);
        • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

        Nothing in packages/spec declares $currentUser as a filter token. The declared filter
        vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
        tests reject near-miss spellings.

        Why it matters

        This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
        first place in the file that shows a "records assigned to me" filter — writes
        value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
        the value slips past authoring, a list that silently renders nothing. The Context Tokens
        section exists to prevent exactly that failure, and the Filtering section above it walks the
        reader into it.

        Decision the fix needs

        Which half is wrong is not something this finding can settle from the docs alone:

        1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
          example and its note to {current_user_id}, and the "only two tokens" claim stands.
        2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
          the query layer) — then the Context Tokens section's "only two" is the false claim, and
          under contract-first the alias is what should go, with the declaration made to match.

        Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
        this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
        here is size-neutral at best.

        Generated by Claude Code


        Generated by Claude Code

        Metadata

        Metadata

        Assignees

        Labels

        bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

        Type

        Projects

        No projects

          Milestone

          No milestone

          Relationships

          None yet

          Development

          No branches or pull requests

          Issue actions

          , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
          Skip to content

          skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

          Description

          @claude

          Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
          scope there, filed unassigned for triage.

          The contradiction, both halves inside one published file

          skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
          ### Filtering section:

          filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

          followed by the note:

          $currentUser is a runtime variable — the logged-in user's ID.

          Roughly 1400 lines further down, the same file's ## Context Tokens section says the
          opposite, and says it exhaustively:

          Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
          that resolve inside a filter value

          naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
          in @object-ui/core, and adding that os validate fails the build on an unresolvable
          placeholder in any filter (rule filter-token-unknown) precisely because the runtime
          failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
          surface renders empty.

          Both claims cannot be true. One of the two sections is teaching a filter that does not work.

          What the tree says

          Repo-wide grep for the literal $currentUser (excluding node_modules):

          • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
            Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
          • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
            not a query filter);
          • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

          Nothing in packages/spec declares $currentUser as a filter token. The declared filter
          vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
          tests reject near-miss spellings.

          Why it matters

          This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
          first place in the file that shows a "records assigned to me" filter — writes
          value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
          the value slips past authoring, a list that silently renders nothing. The Context Tokens
          section exists to prevent exactly that failure, and the Filtering section above it walks the
          reader into it.

          Decision the fix needs

          Which half is wrong is not something this finding can settle from the docs alone:

          1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
            example and its note to {current_user_id}, and the "only two tokens" claim stands.
          2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
            the query layer) — then the Context Tokens section's "only two" is the false claim, and
            under contract-first the alias is what should go, with the declaration made to match.

          Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
          this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
          here is size-neutral at best.

          Generated by Claude Code


          Generated by Claude Code

          Metadata

          Metadata

          Assignees

          Labels

          bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

          Type

          Projects

          No projects

            Milestone

            No milestone

            Relationships

            None yet

            Development

            No branches or pull requests

            Issue actions

            , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
            Skip to content

            skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

            Description

            @claude

            Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
            scope there, filed unassigned for triage.

            The contradiction, both halves inside one published file

            skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
            ### Filtering section:

            filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

            followed by the note:

            $currentUser is a runtime variable — the logged-in user's ID.

            Roughly 1400 lines further down, the same file's ## Context Tokens section says the
            opposite, and says it exhaustively:

            Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
            that resolve inside a filter value

            naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
            in @object-ui/core, and adding that os validate fails the build on an unresolvable
            placeholder in any filter (rule filter-token-unknown) precisely because the runtime
            failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
            surface renders empty.

            Both claims cannot be true. One of the two sections is teaching a filter that does not work.

            What the tree says

            Repo-wide grep for the literal $currentUser (excluding node_modules):

            • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
              Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
            • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
              not a query filter);
            • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

            Nothing in packages/spec declares $currentUser as a filter token. The declared filter
            vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
            tests reject near-miss spellings.

            Why it matters

            This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
            first place in the file that shows a "records assigned to me" filter — writes
            value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
            the value slips past authoring, a list that silently renders nothing. The Context Tokens
            section exists to prevent exactly that failure, and the Filtering section above it walks the
            reader into it.

            Decision the fix needs

            Which half is wrong is not something this finding can settle from the docs alone:

            1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
              example and its note to {current_user_id}, and the "only two tokens" claim stands.
            2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
              the query layer) — then the Context Tokens section's "only two" is the false claim, and
              under contract-first the alias is what should go, with the declaration made to match.

            Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
            this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
            here is size-neutral at best.

            Generated by Claude Code


            Generated by Claude Code

            Metadata

            Metadata

            Assignees

            Labels

            bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

            Type

            Projects

            No projects

              Milestone

              No milestone

              Relationships

              None yet

              Development

              No branches or pull requests

              Issue actions

              , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
              Skip to content

              skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

              Description

              @claude

              Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
              scope there, filed unassigned for triage.

              The contradiction, both halves inside one published file

              skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
              ### Filtering section:

              filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

              followed by the note:

              $currentUser is a runtime variable — the logged-in user's ID.

              Roughly 1400 lines further down, the same file's ## Context Tokens section says the
              opposite, and says it exhaustively:

              Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
              that resolve inside a filter value

              naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
              in @object-ui/core, and adding that os validate fails the build on an unresolvable
              placeholder in any filter (rule filter-token-unknown) precisely because the runtime
              failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
              surface renders empty.

              Both claims cannot be true. One of the two sections is teaching a filter that does not work.

              What the tree says

              Repo-wide grep for the literal $currentUser (excluding node_modules):

              • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
                Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
              • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
                not a query filter);
              • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

              Nothing in packages/spec declares $currentUser as a filter token. The declared filter
              vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
              tests reject near-miss spellings.

              Why it matters

              This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
              first place in the file that shows a "records assigned to me" filter — writes
              value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
              the value slips past authoring, a list that silently renders nothing. The Context Tokens
              section exists to prevent exactly that failure, and the Filtering section above it walks the
              reader into it.

              Decision the fix needs

              Which half is wrong is not something this finding can settle from the docs alone:

              1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
                example and its note to {current_user_id}, and the "only two tokens" claim stands.
              2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
                the query layer) — then the Context Tokens section's "only two" is the false claim, and
                under contract-first the alias is what should go, with the declaration made to match.

              Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
              this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
              here is size-neutral at best.

              Generated by Claude Code


              Generated by Claude Code

              Metadata

              Metadata

              Assignees

              Labels

              bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

              Type

              Projects

              No projects

                Milestone

                No milestone

                Relationships

                None yet

                Development

                No branches or pull requests

                Issue actions

                , 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
                Skip to content

                skills/objectstack-ui teaches $currentUser as a filter value, contradicting its own "only two tokens resolve in a filter" contract #14139

                Description

                @claude

                Found while funding the token budget for the Navigation Item Types rows (PR #14138); out of
                scope there, filed unassigned for triage.

                The contradiction, both halves inside one published file

                skills/objectstack-ui/SKILL.md teaches $currentUser as a filter value in its
                ### Filtering section:

                filter: [{field: 'status',operator: 'not_equals',value: 'closed'},{field: 'assigned_to',operator: 'equals',value: '$currentUser'},]

                followed by the note:

                $currentUser is a runtime variable — the logged-in user's ID.

                Roughly 1400 lines further down, the same file's ## Context Tokens section says the
                opposite, and says it exhaustively:

                Contract: CONTEXT_TOKENS in @objectstack/spec/data. These are the only two tokens
                that resolve inside a filter value

                naming {current_user_id} and {current_org_id}, resolved by resolveFilterPlaceholders
                in @object-ui/core, and adding that os validate fails the build on an unresolvable
                placeholder in any filter (rule filter-token-unknown) precisely because the runtime
                failure is silent: an unresolved token reaches SQL as a literal, matches nothing, and the
                surface renders empty.

                Both claims cannot be true. One of the two sections is teaching a filter that does not work.

                What the tree says

                Repo-wide grep for the literal $currentUser (excluding node_modules):

                • skills/objectstack-ui/SKILL.md — the example and the note above (a third site, in
                  Common Pitfalls, is deleted by PR docs(skills): document the action and component nav item types #14138 as ceiling funding);
                • packages/cli/src/commands/explain.ts — an { type: 'assignment', field: 'assigned_to', value: '$currentUser' } sample, i.e. a different surface (a default/assignment value,
                  not a query filter);
                • docs/adr/0017-object-has-many-view.md — inside SQL-shaped prose, not a metadata example.

                Nothing in packages/spec declares $currentUser as a filter token. The declared filter
                vocabulary is CONTEXT_TOKENS (packages/spec/src/data/context-tokens.zod.ts), and its own
                tests reject near-miss spellings.

                Why it matters

                This is a published, customer-loaded catalog. An AI author who reads ### Filtering — the
                first place in the file that shows a "records assigned to me" filter — writes
                value: '$currentUser' and gets either a red os validate (filter-token-unknown) or, if
                the value slips past authoring, a list that silently renders nothing. The Context Tokens
                section exists to prevent exactly that failure, and the Filtering section above it walks the
                reader into it.

                Decision the fix needs

                Which half is wrong is not something this finding can settle from the docs alone:

                1. $currentUser is dead in filters — then the fix is to rewrite the ### Filtering
                  example and its note to {current_user_id}, and the "only two tokens" claim stands.
                2. $currentUser really does resolve in some filter path (a legacy alias somewhere in
                  the query layer) — then the Context Tokens section's "only two" is the false claim, and
                  under contract-first the alias is what should go, with the declaration made to match.

                Route 2 would be an ADR-0087 conversion-layer question rather than a docs edit, which is why
                this is filed rather than fixed in passing. Note the file is at its token ceiling: any fix
                here is size-neutral at best.

                Generated by Claude Code


                Generated by Claude Code

                Metadata

                Metadata

                Assignees

                Labels

                bugSomething isn't workingdocumentationImprovements or additions to documentationdomain:skillspriority:p2Medium: important, M3

                Type

                Projects

                No projects

                  Milestone

                  No milestone

                  Relationships

                  None yet

                  Development

                  No branches or pull requests

                  Issue actions