test(filter-parity): re-anchor the two filter-operator parity guards on pivots vocabulary growth cannot cancel (#3641)

[yinlianghui]

Fixes#3641

Test-only. mapOperator and FILTER_OPERATOR_ALIASES are byte for byte as they are on main — verified with git diff --quiet origin/main on both production files.

Premise re-measured before implementing

Re-measured against the workspace's resolved @objectstack/spec@17.0.0-rc.5, since the vocabularies could have moved again since the card was filed. They had not:

spec version: 17.0.0-rc.5
VIEW_FILTER_OPERATORS count: 19
VALID_AST_OPERATORS size: 51
view ops ABSENT from VALID_AST_OPERATORS: 0 []

So the header claim "8 of the 19 canonical view operators are absent from the AST set" is measured at 0 of 19, and both guards were satisfiable by doing nothing. VALID_AST_OPERATORS is derived upstream from AST_OPERATOR_MAP, and it grew until it spelled every canonical view operator verbatim — before and after among them, which is the exact pair whose missing bridge entries caused the silent full-table read these files were written for (objectstack#3948).

What changed

packages/plugin-list/src/__tests__/filter-operator-ast-parity.test.ts — the spine is now EXPECTED_AST_TARGET, one row per canonical view operator naming the exact spelling mapOperator must emit. Each row is justified by naming the switch arm that produces it, read off ListView.tsx rather than captured from output (a capture would fossilise a bug if one existed). Two rows are pinned as identity (is_empty / is_not_empty) because they fall through default: return op; that is only safe while the AST gate accepts those spellings, so it is asserted rather than assumed — and asserting a fixed pair of literals can only go red, never be cancelled by growth.

A totality ratchet fails in both directions when the pinned rows and the spec vocabulary stop lining up: a spec addition lands red instead of as quiet slack (the growth direction this card is about), and so does a retirement (#3628 / #3601, the mirror image). The legacy-alias sweep is re-anchored on the same table with no second hand-written list — an alias the spec folds to a canonical operator must reach the wire as whatever that canonical operator does.

packages/data-objectstack/src/filter-operator-ast-parity.test.ts — the coverage sweep no longer mirrors production's ?? op tail. That tail is correct in production and stays there; reproducing it in the assertion is what cancelled it, because the value it falls back to is the raw view spelling and those are all AST-valid now. The sweep asserts the mapping row exists, resolving exactly as normalizeFilterOperator does minus that tail.

Header notes — the stale count is replaced by what the guarantee now rests on. No count of the overlap is stated anywhere in either file, deliberately: a hand-written number beside a vocabulary that moves is what rotted here in the first place.

The membership and isFilterAST() sweeps are kept as a secondary check, per the card's scope note. They still name why a wrong target matters; they are just no longer what gives the files their teeth. Nothing was retired.

Reverse verification

Both degradations were applied in-worktree and reverted; the direction was predicted before running.

1. mapOperator degraded to identity — 16 failed / 44 passed. The 14 non-identity pin rows went red, before and after among them:

mapOperator(equals) emits exactly =
mapOperator(not_equals) emits exactly !=
... mapOperator(before) emits exactly <
... mapOperator(after) emits exactly >
also bridges every legacy alias the spec still folds, onto the same target
emits `nin`, never the spaced `not in`, which no spec vocabulary defines

Both membership-based sweeps (%s maps to an AST-valid operator and the isFilterAST gate) stayed green under the identity function — the card's claim demonstrated empirically rather than by inspection.

2. One FILTER_OPERATOR_ALIASES row deleted — starts_with chosen deliberately over before, which the dedicated date-comparison test already pins, so the proof is unconfounded. New assertion: red with exactly ["starts_with"]. Then, with the same row still deleted, the old?? op assertion body was temporarily restored: 5 passed (5), fully green. That is the blindness proven directly rather than argued.

Restored state re-verified: production files identical to origin/main, both suites green.

Upstream probe (out of scope, reported not acted on)

The card asks whether before / after actually compile to WHERE clauses, or whether this is another silent full-table. Verdict: they compile. Not a silent full-table, so no objectstack-side card is warranted.

@objectstack/driver-sql@17.0.0-rc.5 was pulled from npm and inspected. The driver no longer compiles the array form at all — parseFilterAST() lowers it at the engine and protocol doors (objectstack#5158), and a filter array reaching the driver anyway is refused with a 400 rather than skipped. Measuring the lowering directly on the workspace spec:

canonicalAstOperator(before) = "<" parseFilterAST([["close_date","before","2024-01-01"]]) = {"close_date":{"$lt":"2024-01-01"}}
canonicalAstOperator(after) = ">" parseFilterAST([["close_date","after","2024-01-01"]]) = {"close_date":{"$gt":"2024-01-01"}}

and the driver's own compiler, package/dist/index.mjs:4709:

case ">":case "$gt":
returnbinary(">");
...
case"<":
case"$lt":
returnbinary("<");

End to end: before becomes $lt becomes a real < predicate. This confirms by runtime measurement what the triage comment read statically, and it does not make the objectui bridge redundant — the adapter still emits the array form, and an unmapped operator is still a broken query.

One consequence worth recording: the driver's 400 refusal means the historical "no WHERE clause, no error, every row returned" framing may no longer describe today's cost of a missing row. What the protocol door does with an array the AST gate rejects is not measurable from this repo, so both file headers now state that openly and leave it open rather than asserting either outcome — the point being that both are a broken query.

Verification

pnpm exec vitest run packages/plugin-list/... packages/data-objectstack/... -> 2 files, 65 tests passed
pnpm exec vitest run packages/data-objectstack packages/plugin-list -> 50 files, 793 tests passed
pnpm --filter @object-ui/plugin-list --filter @object-ui/data-objectstack type-check -> Done, Done
pnpm exec eslint (the two test files) -> exit 0
BASE=origin/main node scripts/check-changeset-presence.mjs -> exit 0

All vitest runs are from the repo root with repo-root paths (objectui#3378).

Changeset

check-changeset-presence.mjs arbitrated and it does not treat test-only as exempt by default — it flagged both files and demanded a declaration. Its sanctioned pass for "this releases nothing" is a changeset with an EMPTY frontmatter, which is what .changeset/filter-operator-parity-discrimination-3641.md carries; the gate then reports Every one of them has an EMPTY frontmatter — declared as releasing nothing, which is the explicit exemption and a complete answer to this gate.

No skip-changeset label was applied: per scripts/__tests__/ci-cd-pipeline-doc.test.ts:184 (objectui#3724) that label and its workflow "never [were] real" in this repo.

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
objectui	Ignored		Aug 10, 2026 9:33am

[github-actions]

✅ Console Performance Budget

Metric	Value	Budget
Main entry (gzip)	28.3 KB	350 KB
Entry file	index-CF5C3utx.js	—
Status	PASS	—

---

📦 Bundle Size Report

Package	Size	Gzipped
app-shell (index.js)	8.66KB	3.13KB
app-shell (runtime-config.js)	7.42KB	2.32KB
app-shell (types.js)	0.01KB	0.04KB
app-shell (urlParams.js)	7.57KB	2.97KB
auth (AuthContext.js)	0.31KB	0.24KB
auth (AuthGuard.js)	1.17KB	0.53KB
auth (AuthProvider.js)	22.10KB	4.37KB
auth (AuthShell.js)	3.49KB	1.40KB
auth (ForgotPasswordForm.js)	12.21KB	3.45KB
auth (LoginForm.js)	18.13KB	5.39KB
auth (PreviewBanner.js)	0.90KB	0.50KB
auth (RegisterForm.js)	6.64KB	2.21KB
auth (SocialSignInButtons.js)	9.60KB	3.89KB
auth (UserMenu.js)	3.40KB	1.22KB
auth (auth-gate-events.js)	1.29KB	0.66KB
auth (authStyles.js)	5.04KB	1.72KB
auth (createAuthClient.js)	35.76KB	9.11KB
auth (createAuthenticatedFetch.js)	4.37KB	1.69KB
auth (index.js)	2.35KB	1.07KB
auth (org-roles.js)	6.66KB	2.78KB
auth (phone-identifier.js)	1.11KB	0.66KB
auth (types.js)	0.59KB	0.35KB
auth (useAuth.js)	4.91KB	0.87KB
auth (useIsWorkspaceAdmin.js)	1.61KB	0.85KB
collaboration (CommentThread.js)	26.07KB	7.56KB
collaboration (LiveCursors.js)	3.17KB	1.27KB
collaboration (PresenceAvatars.js)	6.49KB	2.64KB
collaboration (PresenceProvider.js)	2.79KB	1.13KB
collaboration (index.js)	1.65KB	0.73KB
collaboration (useCollaborationTranslation.js)	6.05KB	2.52KB
collaboration (useCommentSearch.js)	1.98KB	0.88KB
collaboration (useConflictResolution.js)	7.75KB	1.86KB
collaboration (useMentionNotifications.js)	1.81KB	0.68KB
collaboration (usePresence.js)	6.33KB	1.84KB
collaboration (useRealtimeSubscription.js)	7.91KB	2.01KB
components (index.js)	484.15KB	106.78KB
core (index.js)	3.04KB	1.15KB
create-plugin (index.js)	10.08KB	3.26KB
data-objectstack (index.js)	140.66KB	36.25KB
fields (index.js)	229.40KB	56.93KB
i18n (LocalizationContext.js)	1.76KB	0.96KB
i18n (currency.js)	1.22KB	0.64KB
i18n (i18n.js)	4.32KB	1.77KB
i18n (index.js)	2.65KB	1.06KB
i18n (pickLocalized.js)	1.70KB	0.83KB
i18n (provider.js)	9.48KB	3.27KB
i18n (useObjectLabel.js)	27.59KB	6.63KB
i18n (useSafeTranslation.js)	4.52KB	1.96KB
layout (index.js)	38.87KB	10.80KB
mobile (MobileProvider.js)	0.92KB	0.49KB
mobile (ResponsiveContainer.js)	0.94KB	0.38KB
mobile (breakpoints.js)	1.51KB	0.70KB
mobile (createOfflineDataSource.js)	5.61KB	1.74KB
mobile (index.js)	1.50KB	0.62KB
mobile (offlineQueue.js)	3.91KB	1.35KB
mobile (pwa.js)	0.97KB	0.49KB
mobile (serviceWorker.js)	1.48KB	0.62KB
mobile (serviceWorkerSource.js)	3.41KB	1.48KB
mobile (useBreakpoint.js)	1.54KB	0.65KB
mobile (useGesture.js)	6.96KB	1.98KB
mobile (useOfflineSync.js)	1.99KB	0.72KB
mobile (usePullToRefresh.js)	2.53KB	0.85KB
mobile (useResponsive.js)	0.71KB	0.42KB
mobile (useResponsiveConfig.js)	1.36KB	0.63KB
mobile (useSpecGesture.js)	4.32KB	1.64KB
mobile (useTouchTarget.js)	1.01KB	0.54KB
permissions (MePermissionsProvider.js)	8.75KB	3.06KB
permissions (PermissionContext.js)	0.31KB	0.25KB
permissions (PermissionGuard.js)	0.89KB	0.45KB
permissions (PermissionProvider.js)	3.67KB	1.12KB
permissions (evaluator.js)	4.41KB	1.44KB
permissions (index.js)	0.91KB	0.41KB
permissions (store.js)	0.91KB	0.42KB
permissions (useFieldPermissions.js)	1.28KB	0.52KB
permissions (usePermissions.js)	1.55KB	0.71KB
plugin-ai (index.js)	15.71KB	3.79KB
plugin-calendar (index.js)	45.23KB	12.45KB
plugin-charts (index.js)	61.49KB	17.48KB
plugin-chatbot (index.js)	180.33KB	42.79KB
plugin-dashboard (index.js)	118.50KB	30.66KB
plugin-designer (index.js)	210.51KB	42.51KB
plugin-detail (index.js)	237.80KB	59.48KB
plugin-editor (index.js)	2.46KB	1.10KB
plugin-form (index.js)	114.58KB	27.68KB
plugin-gantt (index.js)	162.81KB	39.67KB
plugin-grid (index.js)	187.85KB	49.83KB
plugin-kanban (index.js)	48.60KB	13.41KB
plugin-list (index.js)	109.96KB	26.64KB
plugin-map (index.js)	17.00KB	5.32KB
plugin-markdown (index.js)	13.72KB	4.69KB
plugin-report (index.js)	40.58KB	10.58KB
plugin-timeline (index.js)	26.21KB	7.52KB
plugin-tree (index.js)	8.50KB	2.88KB
plugin-view (index.js)	84.03KB	20.55KB
providers (DataSourceProvider.js)	0.75KB	0.39KB
providers (MetadataProvider.js)	1.37KB	0.59KB
providers (ThemeProvider.js)	1.90KB	0.85KB
providers (UploadProvider.js)	11.71KB	3.53KB
providers (index.js)	0.44KB	0.22KB
providers (types.js)	0.01KB	0.04KB
react-runtime (index.js)	5.67KB	2.37KB
react (LazyPluginLoader.js)	3.77KB	1.33KB
react (SchemaRenderer.js)	23.71KB	7.95KB
react (data-invalidation.js)	5.05KB	2.08KB
react (index.js)	1.23KB	0.66KB
react (spec-input.js)	0.20KB	0.18KB
sdui-parser (codegen.js)	4.09KB	1.74KB
sdui-parser (index.js)	4.47KB	2.03KB
sdui-parser (parse.js)	10.04KB	2.82KB
sdui-parser (types.js)	0.29KB	0.24KB
sdui-parser (validate.js)	4.69KB	1.48KB
types (ai.js)	0.20KB	0.17KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	2.87KB	0.99KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	0.20KB	0.18KB
types (crud.js)	0.20KB	0.18KB
types (data-display.js)	0.20KB	0.18KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (designer.js)	1.87KB	0.85KB
types (disclosure.js)	0.20KB	0.18KB
types (error-code.js)	1.54KB	0.88KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (http-retry.js)	4.32KB	2.02KB
types (index.js)	2.71KB	1.34KB
types (layout.js)	0.20KB	0.18KB
types (managed-by.js)	0.19KB	0.18KB
types (mobile.js)	2.59KB	1.31KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (permissions.js)	0.20KB	0.18KB
types (plugin-scope.js)	0.20KB	0.18KB
types (record-components.js)	0.20KB	0.19KB
types (record-semantics.js)	1.28KB	0.67KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (spec-report.js)	5.05KB	1.93KB
types (system-fields.js)	3.33KB	1.54KB
types (theme.js)	0.20KB	0.18KB
types (ui-action.js)	3.40KB	1.71KB
types (views.js)	0.20KB	0.18KB
types (widget.js)	0.20KB	0.18KB

Size Limits

• ✅ Core packages should be < 50KB gzipped
• ✅ Component packages should be < 100KB gzipped
• ⚠️ Plugin packages should be < 150KB gzipped