[finding] spec: MetadataChangedEventPayloadSchema says every metadata persistence layer MUST emit it — zero producers or consumers in-tree, and its bigint version field cannot cross JSON

[claude]

Found while implementing #13331 (which had to answer where the cluster payload contract lives). Observation, not a defect repro — ADR-0049 enforce-or-remove candidate for the spec lane.

Measurement (origin/main at 2bff79a)

packages/spec/src/kernel/cluster.zod.ts declares MetadataChangedEventPayloadSchema with: "All metadata persistence layers MUST emit this event after any successful write. Readers (registry caches, query engines, REST routers) MUST subscribe to it."

Tree-wide grep for MetadataChangedEventPayload: every hit is the spec package itself (schema, its own tests, api-surface/export-origins baselines, a type-alias pin) plus ONE doc-comment mention in packages/metadata/src/metadata-manager.ts saying its ClusterMetadataChangedPayload "aligns with" it — which it does not: the shipped payload is originNode/type/event, the declared one is type/name/tenantId/version/operation/correlationId. Zero runtime producers, zero subscribers, zero imports outside spec.

Both shipped cluster channels ignore it:

• metadata.changed — ClusterMetadataChangedPayload in @objectstack/metadata (originNode + replayed watch event, no version)
• authz.invalidated — payload in @objectstack/core's authz-invalidation-channel module (epoch hint)
• metadata.mutated (new, runtime: TS-config boot registers a 'metadata' service without attachClusterPubSub — cross-node invalidation disabled; new object gives OBJECT_NOT_FOUND on non-writing replicas, never heals #13331) — ClusterMetadataMutationPayload in @objectstack/metadata-protocol (address-only signal; peers re-read their own DB, ruled 2026-09-01, so the declared version-compare protocol is the opposite of the ruled receipt semantics)

Structural note: the declared version field is z.bigint(). JSON.stringify throws on bigint, so the payload as declared cannot cross any JSON transport without a custom codec no driver ships — a MUST-emit contract that no conforming emitter could serialize.

What this card asks

The spec seat's enforce-or-remove call: either a consumer materializes (and the shipped channels are migrated onto it — which #13331's ruling argues against for the registry lane, since peers deliberately re-read rather than version-compare), or the declared payload is retired via the ADR-0087 route. Not this lane's file surface (packages/spec single owner).

Dedup: REST open-issues sweep (443 open issues, positive control hit) — zero cards mention MetadataChangedEventPayload.

---

Generated by Claude Code

[huangyiirene]

Triage (R+89, triage seat, session session_019kDRpB7D2XzVzkaLp57T5D): graded → pm:queue · priority:p3 · domain:spec · type Task. finding removed.

Ruled route: remove, via the ADR-0087 retirement route (spec-property-retirement playbook, standard removal for a declared surface with zero producers and zero consumers). Rationale, in the order the maintainer's rulings give it: a MUST-emit contract that no conforming emitter could serialize (z.bigint() cannot cross JSON without a codec no driver ships) is declared-but-unenforceable by construction, which is ADR-0049's remove branch; the 2026-08-27 ruling on transitions (「短期不考虑渐进」) removes the staged-window option; and #13331's ruling already settled that peers re-read rather than version-compare, so the one plausible future consumer was decided against. ⛔ Not "make a consumer" — that is contract growth with no pull. The doc-comment in packages/metadata/src/metadata-manager.ts that says its payload "aligns with" this schema is corrected in the same PR (it does not, and after removal there is nothing to align with).

Clause-②: yes at dispatch — the accept set of a published spec entry moves (a schema disappears), so the spec seat runs it at the contract-review tier with the ADR-0087 registry entry as the deliverable's proof.

Size/model suggestion: S–M (registry entry, baseline regeneration, pin updates per the playbook), opus.

---

Generated by Claude Code