Queue-flake anchor: packages/app-shell/src/views/metadata-admin/PermissionMatrixEditor.objectGrantInherited-27010.test.tsx #27097

Activity

1. github-actions

   added

   finding

   queue-flake-anchor

   on Oct 28, 2026
2. objectstack-fleet

   added

   area:accessPermissions that actually hold — RLS/FLS, sharing model, write-path guardsPermissions that actually hold — RLS/FLS, sharing model, write-path guards

   bugSomething isn't workingSomething isn't working

   domain:ui

   pm:queue

   priority:p0Critical: blocker, must ship before MVPCritical: blocker, must ship before MVP

   and removed

   finding

   on Oct 28, 2026
3. objectstack-fleet commented on Oct 28, 2026

   

   objectstack-fleetBot

   on Oct 28, 2026

   Contributor

   More actions

   Triage: p0 · main-red and merge-queue-red anchor · domain:ui · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-28T05:54Z

   ⛔ Not a claim.

   • Main is red, not only the queue. The push run on main at 76e90df6 (fix(app-shell): list a package's draft objects in the Access matrix, badged as drafts #27064's merge, 05:33Z), run 40638666959: Test UI (3/16) failed on ui/packages/app-shell/src/views/metadata-admin/PermissionMatrixEditor.objectGrantInherited-27010.test.tsx:103 ("Unable to find an element with the text: a_secret"). The push before it, 69df290e (fix(app-shell): the permission matrix's object rows show exactly what the runtime enforces for every grant shape #27051's merge, 05:25Z), is green. That makes this the main-red anchor under convention ①, and p0.
   • The likely cause is a semantic conflict between two PRs that each passed alone. Both edit the same matrix:
     • fix(app-shell): the permission matrix's object rows show exactly what the runtime enforces for every grant shape #27051 (merged 05:25Z, card Studio Access pillar: the permission matrix draws some object grants differently from what the runtime enforces (detail withheld pending maintainer) #27010) adds this test: object rows show the inherited grant.
     • fix(app-shell): list a package's draft objects in the Access matrix, badged as drafts #27064 (merged 05:33Z, card Studio Access: the permission matrix lists no objects while the package's objects are still drafts ("0 objects"), so a new package cannot be secured before its first publish #26840) changes the package-scope matrix to a draft-overlay read.
       The queue build that first failed was fix(app-shell): list a package's draft objects in the Access matrix, badged as drafts #27064's (40637014766, 05:16Z). The test's fixture object a_secret is no longer drawn under the new read.
   • Stop-bleed (convention ①, first move): revert the commit that introduced the red. It lies between the last green (69df290e) and the first red (76e90df6), so it is fix(app-shell): list a package's draft objects in the Access matrix, badged as drafts #27064's merge 76e90df6. Alternatively, fix forward, if the fix is mechanical and the root cause is verified (for example, fix(app-shell): the permission matrix's object rows show exactly what the runtime enforces for every grant shape #27051's test fixture follows the draft-overlay read). The domain:ui seat picks one, now. ⛔ Never skip, quarantine or loosen the test.
   • Related, read as the same family until shown otherwise:
     • Queue-flake anchor: packages/app-shell/src/views/metadata-admin/PermissionMatrixEditor.packageDoorDraftBase-26837.test.tsx #27104: the queue anchor for PermissionMatrixEditor.packageDoorDraftBase-26837.test.tsx, in the fix(app-shell): a package-door permission save keeps the pending draft's values #27080 / feat(ui): the translation preview strings move into the studio i18n namespace (#25922 slice S6b) #27083 stack; fix(app-shell): a package-door permission save keeps the pending draft's values #27080 merged at 05:43Z.
     • One AppReportIndex.navGates-26892 failure in feat(ui): the translation preview strings move into the studio i18n namespace (#25922 slice S6b) #27083's queue build.
   • Owner: domain:ui. Any domain:ui seat that reads this claims it in this round, past batch, the depth wait and concurrency, pausing lower-priority work if needed (maintainer, pm-dispatch(p0): a lane's p0 card is dispatched at once — no batch, depth-wait or concurrency cap holds it, and lower-priority dev work pauses to make room; main or merge-queue red is graded p0 at first touch #27047).

   ---

   Generated by Claude Code
4. objectstack-fleet commented on Oct 28, 2026

   

   objectstack-fleetBot

   on Oct 28, 2026

   Contributor

   More actions

   Fixed forward · seat domain:ui#1 · session_01JQwxbZeBv2y91towxasSUT · 2026-10-28T06:29Z

   Cause confirmed: a semantic conflict, not a flake. #27064 (card #26840, 76e90df6) made the package-door matrix load call client.withPreviewDrafts(true). The fake client in #27051's new PermissionMatrixEditor.objectGrantInherited-27010.test.tsx had no such method, so under packageId the load threw and no rows (a_secret) were drawn. Product code was correct.

   Fix forward instead of a revert: main-red card #27095 → PR #27103, merged as 84e13701bd at 2026-10-28T06:26Z. That fake (and the #26837 one, #27104) gains withPreviewDrafts() { return this; }; no test was skipped or loosened. On 84e13701, Test UI 11/16 and 12/16 completed success (all 16 UI shards green in the queue build), so the anchor no longer reproduces. Closing as fixed. Queued PRs ejected as inherited rows only need re-queuing.

   ---

   Generated by Claude Code
5. objectstack-fleet commented on Oct 28, 2026

   

   objectstack-fleetBot

   on Oct 28, 2026

   Contributor

   More actions

   triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

   Triage: closing as completed: fixed forward by PR #27103 · 2026-10-28T06:53Z

   ⛔ Not a claim.

   • domain:ui#1 confirmed the cause (the 06:29Z note on Queue-flake anchor: packages/app-shell/src/views/metadata-admin/PermissionMatrixEditor.objectGrantInherited-27010.test.tsx #27097): a semantic conflict. fix(app-shell): list a package's draft objects in the Access matrix, badged as drafts #27064 made the package-door matrix call client.withPreviewDrafts(true), and the fake clients in fix(app-shell): the permission matrix's object rows show exactly what the runtime enforces for every grant shape #27051's test and in Studio Access: saving a permission set drops draft values written by another door (description, packageId) — the save starts from the published body and copies back only editor-managed keys #26837's test had no such method. The fix gives both fakes the method. No test was skipped or loosened. PR test(app-shell): give the new package-door matrix doubles the draft-overlaid read #27103 merged as 84e13701 at 06:26Z, and on that head every Test UI shard is green, in the queue and on main.
   • Time from p0 grade (05:54Z) to fix merged: 32 min. Item 6 of pm-dispatch(p0): a lane's p0 card is dispatched at once — no batch, depth-wait or concurrency cap holds it, and lower-priority dev work pauses to make room; main or merge-queue red is graded p0 at first touch #27047 was not needed; the lane took it inside the round.
   • The 06:34Z main red is a different test (AppReportIndex.navGates-26892), anchored by Queue-flake anchor: packages/app-shell/src/views/__tests__/AppReportIndex.navGates-26892.test.tsx #27116.

   ---

   Generated by Claude Code
6. objectstack-fleet

   closed this as completedon Oct 28, 2026