[objectstack-fleet]

domain:server#4 · os-elon-musk · session_016WV4d1Np3hU7RQnA13YZcL

Refs #27738

维护者速读

• 改了什么：scripts/check-route-envelope.mjs 里 actions.ts 账本条目的说明文字和旁边的注释，现在写明 api 转发的非 2xx 回应在目标已有信封时由 apiErrorResponse 构建，否则仍是 deps.error。只改文字。
• 为什么改：PR fix(runtime): a forwarded api action keeps the target's whole refusal, and decision outputs pass the param check #27915（action door: forwarding a type:api action drops the target's error.details and userMessage, and the ADR-0104 param check refuses approval decision outputs (outputs.KEY), so console step 3 (#27611) would regress #27738）让带信封的拒绝改走 apiErrorResponse，原句「the non-2xx relay (deps.error spread)」因此只说对一半。seat 2 在 fix(runtime): a forwarded api action keeps the target's whole refusal, and decision outputs pass the param check #27915 上提出（6517332525），席位答应合并后补上（6517352523）。
• 风险与回滚：无行为变化；handBuilt: 3 不变，检查逻辑未动。回滚即还原本 PR。
• 先看：scripts/check-route-envelope.mjs 的 DISPATCHER_DOMAINS['actions.ts']。
• 两分钟验证：pnpm check:route-envelope 退出 0。
• 需要你做的：无。

Clause-②: no — a comment and a ledger note string change; no gate verdict, count or runtime path moves.
Metadata-protocol: none

What changes

• The actions.ts entry's note now reads "the non-2xx relay (apiErrorResponse for an enveloped refusal, else deps.error, spread)".
• The block comment above it says the enveloped refusal is built by apiErrorResponse, which takes no headers either, and is spread the same way.

Verification

• Not run locally: this worktree has no node_modules, and check-route-envelope.mjs imports typescript (it exits 3, prerequisite not met, measuring nothing). CI's lint job runs check:route-envelope and ESLint on this head.
• check-empty-changeset --base origin/main and check-commit-card-trailers --range origin/main..HEAD: exit 0. No changeset: no package changes.

🤖 Generated with Claude Code

https://claude.ai/code/session_016WV4d1Np3hU7RQnA13YZcL

[objectstack-fleet]

domain:server#4 · os-elon-musk · session_016WV4d1Np3hU7RQnA13YZcL

维护者速读

• 改了什么：check-route-envelope.mjs 中 actions.ts 账本条目的说明和注释写明非 2xx 回应在带信封时由 apiErrorResponse 构建，否则是 deps.error。只改文字。
• 为什么改：PR fix(runtime): a forwarded api action keeps the target's whole refusal, and decision outputs pass the param check #27915（action door: forwarding a type:api action drops the target's error.details and userMessage, and the ADR-0104 param check refuses approval decision outputs (outputs.KEY), so console step 3 (#27611) would regress #27738）合并后原句只说对一半；seat 2 提出（6517332525），席位答应补上（6517352523）。
• 风险与回滚：无行为变化，handBuilt: 3 不变。回滚即还原本 PR。
• 先看：scripts/check-route-envelope.mjs 的 DISPATCHER_DOMAINS['actions.ts']。
• 两分钟验证：CI 的 Lint · repo & tooling gates（含 check:route-envelope）在本 head 为 success。
• 需要你做的：无（非受管；不需契约复审；席位按本任落地授权落地）。

席位意见：ACCEPT。

席位核对

Head-sha: f8037ab21f728df75a8603dbb3c4f44ad5e02cc9

• Shape: one ledger note string and one block comment in scripts/check-route-envelope.mjs; before: "the non-2xx relay (deps.error spread)"; after: "the non-2xx relay (apiErrorResponse for an enveloped refusal, else deps.error, spread)". The comment adds that apiErrorResponse takes no headers either and is spread the same way. check-governed-merges --pr 28013: NOT governed, 5 changed lines.
• Premise measured: on main after PR fix(runtime): a forwarded api action keeps the target's whole refusal, and decision outputs pass the param check #27915, packages/runtime/src/domains/actions.ts builds an enveloped non-2xx refusal with apiErrorResponse and the rest with deps.error, both spread with the relayed headers.
• Gate check-runs on the head: Lint · repo & tooling gates success; Check Changeset failed before skip-changeset was applied (nothing is released) and its re-run after the label is the current result; mergeable_state clean.
• Contract review: not owed (comment and note text in a repo script; no package, spec or protocol surface).
• Accepted deviations: none. The PR body says the gate was not run locally (no node_modules in the worktree); CI ran it.
• Landing: under the maintainer's landing grant for this seat term (seat 4 thread, 2026-10-29 22:04Z): pr_ready + automerge_enable through the relay.