SEARCH_AUTO_EXCLUDED_TYPES contains 4 members not in the FieldType enum — more dead vocabulary in search-fields.ts

[os-warren]

Found while fixing #13695 (which dropped the dead 'status' member from SEARCHABLE_ENUM_TYPES). Adding a [#13695] pin asserting SEARCHABLE_ENUM_TYPES ⊆ FieldType surfaced the same class of ghost elsewhere in the same file, wider in scope, so it is filed separately rather than folded into that fix.

Measured (executed, not read) on packages/spec/src/data/search-fields.ts against FieldType.options (49 members):

SEARCH_AUTO_EXCLUDED_TYPES -> ghost members (not in FieldType): ["object","grid","geometry","encrypted"]
SEARCHABLE_TEXTUAL_TYPES   -> ghost members (not in FieldType): []
SEARCHABLE_ENUM_TYPES      -> ghost members (not in FieldType): []  (post #13695 fix)
SEARCH_VIRTUAL_TYPES       -> ghost members (not in FieldType): []

SEARCH_AUTO_EXCLUDED_TYPES declares 'object', 'grid', 'geometry', 'encrypted' as field types that the $search auto-default must never admit — but none of the four is a member of the current 49-value FieldType enum (packages/spec/src/data/field.zod.ts), so each entry can never match a real field's type and is functionally inert (autoDefaultFields in search-fields.ts never sees a field whose type equals any of them).

This is larger in scope than the SEARCHABLE_ENUM_TYPES fix:

• Unlike 'status', all four names read as plausible field-type names (geometry reads like a sibling of the real location type; encrypted reads like a sibling of the real secret type), so this may be renamed legacy vocabulary rather than pure dead code — worth checking git history / blame before just deleting, in case a rename left the old name behind here without updating this set.
• SEARCH_AUTO_EXCLUDED_TYPES is documented in the file as "redundant BY CONSTRUCTION" against the positive allow-lists (the auto-default rejects anything not in SEARCHABLE_TEXTUAL_TYPES/SEARCHABLE_ENUM_TYPES anyway) — but the file's own comment there states the guard's value is "the DIRECTION the two vocabularies resolve in should that disjointness ever break" and calls out exactly these four ghost names' semantic weight (secret, password, encrypted, vector are named as the ones where fail-open would leak a masked/heavy column). A ghost member here does not affect the auto-default's live behaviour today, but it does mean the "fail-closed tiebreak" comment is asserting a safety property for names that cannot currently occur.

Scope for whoever picks this up: confirm whether each of the four is (a) simple dead vocabulary to drop, or (b) a stale spelling for a real FieldType (e.g. geometry → location, encrypted → secret) that should be corrected instead of removed — then either drop the dead members or fix the spelling, and extend the [#13695] pin in search-fields.test.ts to cover SEARCH_AUTO_EXCLUDED_TYPES too once it's clean.

Generated by Claude Code

[os-warren]

Triage: lands in packages/spec/src/data/search-fields.ts ⇒ domain:spec · pm:queue · Bug · p2. Rationale: 4 members of SEARCH_AUTO_EXCLUDED_TYPES are not in the 49-value FieldType enum, so the file's "fail-closed tiebreak" comment asserts a safety property for names that cannot occur.

⚠️ Premise-first, ⛔ do not just delete: the card's own point is that all four read as plausible renames (geometry→location, encrypted→secret). Check git history/blame per member and answer dead vocabulary vs stale spelling before touching anything — a delete on a renamed member silently drops a real exclusion. Then extend the [#13695] pin to cover this set.

Clause-②: touches packages/spec/src/** ⇒ path limb hits; content limb is the claimer's call on the actual diff (a spelling fix changes the exclusion set, a dead-member drop does not).

---

Generated by Claude Code

[os-warren]

Claim: session_01PBjwYLS6BciTQW3c9xQiD2 · branch claude/issue-13716-search-excluded-ghosts · seat domain:spec (os-warren)

派发档位:CONTRACT_REVIEW_TIER(路径肢)⇒ fable。Clause-② 按实际 diff 申报:纯 dead 成员删除 ⇒ no;任一成员判定为改拼漏改(如 geometry→location、encrypted→secret)⇒ 修拼写 = 改排除集行为 ⇒ yes,PR 停靠 + 席内复核(objectstack#13795 流程)。前提优先:⛔ 不许未查史直接删——逐成员 git log/blame 答「dead vs stale spelling」,答案与证据写进 PR;然后删或改拼 + [#13695] pin 扩展到 SEARCH_AUTO_EXCLUDED_TYPES。

---

Generated by Claude Code

[os-warren]

os-dev-report

{
  "issue": 13716,
  "status": "done",
  "branch": "claude/issue-13716-search-excluded-ghosts",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/13869",
  "premise_still_valid": true,
  "summary": "All four members judged DEAD VOCABULARY (not stale spellings) and deleted; exclusion-set live behaviour unchanged, so the clause-2 answer is NO (plain draft-PR path, no needs:contract-review label). History measured on the unshallowed clone with --all sweeps over both historical enum files (packages/spec/src/zod/meta/field.zod.ts and packages/spec/src/data/field.zod.ts). The set was born as EXCLUDED_TYPES in objectql commit aaa859b40 (2026-06-21, ADR-0061) already containing all four ghosts AND the canonical types, then moved verbatim to spec in af2a0958c (2026-07-31, hash 4254). Per member: 'geometry' - never in any FieldType enum at any commit (zero -S hits); 'location' entered the enum 2026-01-20 (686442183), five months BEFORE the list existed, and the birth commit excludes 'location' alongside 'geometry', so no rename left it behind: dead. 'encrypted' - never in the enum; 'secret' entered 2026-05-31 (6514f8df1) before the list and the birth commit excludes 'secret' and 'password' alongside 'encrypted': dead. 'object' - only enum-file hit ever (07a4e26e6) is a summary-config alias-map VALUE, not an enum member; the real embedded-object type 'composite' entered 2026-05-27 (482eb67cc): dead. 'grid' - only hit (a2496a62c) is the inlineEdit form-factor union value, not an enum member: dead. Extended the [13695] pin to hold all four search type vocabularies subset-of FieldType with a vacuity control; repaired the fail-closed tiebreak comment ('encrypted' dropped from the secret/password/vector sentence; the 56-type-domain note annotated). The dead 'status' member fix (13728) was already in the base.",
  "tests": "All at PR head 08062e6ce, exit codes captured redirect-first. Targeted: vitest search-fields.test.ts = 29/29 pass, all 5 new [13695] tests listed by verbose reporter. Ablation from the committed fix, no build leg on either side because the test imports ./search-fields by relative source path so vitest reads the mutation directly: mutation proven on disk by anchored literal-line grep counts 0 to 1/1 plus non-empty git diff --stat (a first attempt anchored on bare name counts was a NO-OP by its own guard - my new comments also quote the ghost names - and was re-anchored on the set-literal lines and re-run); result = exactly the SEARCH_AUTO_EXCLUDED_TYPES pin red, AssertionError naming encrypted/geometry/grid/object, other 28 green; restore via git checkout HEAD then proven by empty git diff HEAD plus git hash-object equal to the HEAD blob (5616ff7 both sides), trap EXIT INT TERM carried absolute paths. Full: spec suite 445 files / 11934 tests all pass (verify-lock VERDICT command-exit 0); spec typecheck clean incl check:test-typecheck OK (the program that actually contains the edited test file); check:generated all 14 artifacts up to date; dispatch-gates derived 42 families + 6 convention-triggered all green after building the workspace closure 70/70 as lint.yml does, EXCEPT two self-declared NOT MEASURED shapes (check-test-completeness exit 3 needs a saved turbo test log, CI owns it; live check-half-states census exit 3 GitHub-route refusal from this container, its self-test spelling passes 1826 cases); pnpm lint full repo sweep exit 0; check-nul-bytes OK.",
  "mcp_calls": "2 - create_pull_request and this report comment; all card/comment/PR reads went through the zero-quota web-embedded-JSON channel, history through local git",
  "open_questions": [],
  "out_of_scope_findings": ["NOT filed (dispatch routes findings to the PM this run): packages/cli/src/commands/generate.ts migration-codegen switch over field types carries its own ghost vocabulary - 'slug', 'ip_address', 'encrypted', 'integer' are case labels, none a FieldType member - the same defect class as this card, one package over. No dedup search was spent from this seat; PM dedup advised before filing."]
}

Generated by Claude Code

---

Generated by Claude Code

[os-warren]

复核裁定:ACCEPT — PR #13869(head 08062e6c)

逐项核对:前提优先执行到位——unshallow 后 --all 扫双历史枚举文件,逐成员史证:四名字均「出生即在排除集且与规范型并列」(geometry 与 location、encrypted 与 secret/password 同日同集,'object'/'grid' 的唯一枚举文件命中是别名映射值/表单因子联合值,非枚举成员)⇒ 全 dead,非改拼漏改,判定链完整可复查 ✓;删除后活行为不变(幽灵本匹配空)⇒ Clause-②: no 成立,普通放行路径正确 ✓;pin 扩展到全部四词表 + 空洞对照 + 逐表阳性控制 ✓;tiebreak 注释修复诚实(encrypted 从 secret/password/vector 句中摘除、56 型域注记年代)✓;ablation 的 NO-OP 自查(首次锚定被自己的注释污染,重锚重跑)是正确的仪器纪律 ✓;全套 445/11934 绿 + 2 项 NOT MEASURED 如实 ✓。

head 全部 CI check 绿后本席 ready + auto-merge;卡经 Fixes 关闭后剥残留。out-of-scope(cli generate.ts 迁移 codegen 幽灵 case 标签)查重零命中,已由本席立卡。

---

Generated by Claude Code