Skip to content
This repository was archived by the owner on Nov 4, 2026. It is now read-only.

chore(packages): declare sideEffects on every published package (objectui#13464) - #13495

Merged
objectstack-fleet[bot] merged 2 commits into
mainfrom
claude/project-thread-q1we3g
Oct 25, 2026
Merged

objectstack-fleet[bot] merged 2 commits into
mainfrom
claude/project-thread-q1we3g

Conversation

@objectstack-fleet

Copy link
Copy Markdown
Contributor

Requested by Elon · project thread

Part of objectstack-ai/objectstack#25913. This PR does the card's first task item (declare sideEffects on every published package). The longer-term item, explicit register*() so every package can say false, stays on the card for its own decision, so merging this should not close it.

Clause-②: no
Metadata-protocol: none

What changes

29 published manifests that had no sideEffects now declare one. apps/console is out of scope per the claim. Only the sideEffects field moves in each manifest.

Value Packages The read behind it
false react, auth, collaboration, data-objectstack, mobile, permissions, providers Every non-test module under src/ scanned with the array gate's own scanModule (a superset of what any import reaches, lazy targets included): no registration, no bare import (CSS or otherwise), no global or window write. The only top-level statements are X.displayName = 'X' on a binding the same module declares: react 6, auth 1, mobile 1, permissions 1, the other three none. collaboration's one top-level call, createSafeTranslation(...), is a pure factory (read: it builds a closure and touches nothing outside).
array plugin-calendar, plugin-charts, plugin-designer, plugin-detail, plugin-editor, plugin-form, plugin-gantt, plugin-kanban, plugin-list, plugin-map, plugin-markdown, plugin-report, plugin-timeline, plugin-tree, plugin-view Each array is exactly what scripts/check-side-effects-array.mjs derives: the entry forms plus every module that registers at load time, in both spellings. The gate passes on all 15 (plus the existing app-shell and layout).
true plugin-ai, plugin-chatbot, plugin-dashboard, plugin-grid Each registers on import, and for each no array satisfies every guard: plugin-ai has no bundler alias to its source, so the consistency test reads its src/index.tsx as a phantom path; plugin-chatbot's barrels are pure and register through export * from ./renderer, so the consistency test refuses them as named entries while the array gate requires them; plugin-dashboard registers retired node types in a loop, so check-sdui-registration-pins cannot read the keys; plugin-grid's ObjectGrid imports hooks/useRecordCrudVerdicts (top-level subscribeDataChanges), and the gate's reachability rule rejects that chain without naming ObjectGrid, which it would then call STALE.
true cli, create-plugin, runner Executables: the bin entry (cli, create-plugin) or the app entry (runner's main.tsx, ReactDOM.createRoot(...)) runs on load. Nothing bundles them as a library, so true is the honest, free answer.

The consistency test

scripts/__tests__/side-effects-declaration-consistency.test.ts changes in the two ways the amended claim allows:

  1. Its census by name grows to the new population of false and array packages, and the anti-vacuity floors move with it.
  2. Its scan learns the carve-out the array gate already makes as local-binding-write: X.prop = ... where X is declared in the same module and the right-hand side calls or constructs nothing. A new describe pins both directions: a function, class or const of the module is pure; an imported binding, a namespace import, window and globalThis writes, a right-hand side with a call or new, and an element write stay findings.

Reverse check, on c16787a with the carve-out line removed: no sideEffects: false package has a load-time side effect and the new pure-direction pin go red (Tests 2 failed / 113 passed); restored from HEAD, git diff HEAD empty.

Measured

Console production build (pnpm turbo run build --filter='./packages/*' then pnpm --filter @object-ui/console build, the same two steps as performance-budget.yml), apps/console/dist/eager-closure.json:

head eager closure, gzipped eager / total chunks
before 6f629a7 (main) 3,106,386 B 85 / 2291
after fcfc372 3,106,204 B 85 / 2291

A 182 B drop: no real saving for the console, which imports almost every package and whose arrays name each barrel. The gain is for external hosts that bundle only some @object-ui/* packages. No ceiling moves, as the claim asked. The build's other plugin lines (declared-lazy-views, assert-types-zod-stays-lazy) read the same before and after.

node scripts/check-sdui-registration-pins.mjs on the fcfc372 build: all 68 registrations the arrays promise are present in the built console.

Tests and gates (local, head fcfc372 unless noted)

  • pnpm exec vitest run scripts/__tests__/side-effects-declaration-consistency.test.ts scripts/__tests__/check-side-effects-array.test.ts scripts/__tests__/check-sdui-registration-pins.test.ts: Test Files 3 passed (3), Tests 172 passed (172).
  • node scripts/check-side-effects-array.mjs: exit 0, 17 packages green.
  • node scripts/check-eager-closure-budget.mjs: exit 0 (3033.4 KB, budget 3496.0 KB).
  • On c16787a (before the plugin-dashboard switch): pnpm exec vitest run --maxWorkers=2 scripts/ gave 1 failed of 5857, check-sdui-registration-pins.test.ts reading the dashboard loop as unreadable, which fcfc372 fixes and the run above re-checks; packages/vscode-extension export-to-react-preamble and app-shell tenancyPostureWall.parity tests (the other two that read sideEffects): 9 passed.
  • node scripts/check-changeset-presence.mjs, node scripts/check-changeset-no-major.mjs, node scripts/check-changeset-fixed.mjs, pnpm check:new-line-citations, eslint on the changed test: exit 0 each.
  • NOT MEASURED locally: the full pnpm test matrix and pnpm lint, which CI runs.

Acceptance notes

  • The two sideEffects guards disagree about a pure barrel: check-side-effects-array.mjs requires every entry form in an array, and the consistency test refuses a named source entry with no load-time effect. That is why plugin-chatbot is true instead of an array. Not filed: it is a reading, with no consumer-visible defect today.
  • plugin-grid's and plugin-detail's top-level subscribeDataChanges(...) calls invalidate module-local caches. The gate counts them as registrations, which is the conservative reading.

Checklist

  • Adds no product-specific widget, dialog, hook or string (see AGENTS.md › Product-neutral renderer)

Session: https://claude.ai/code/session_01Q4K9dtZAX6vw67etsxBeuP

🤖 Generated with Claude Code

https://claude.ai/code/session_01Q4K9dtZAX6vw67etsxBeuP


Generated by Claude Code

The 29 published manifests that did not declare the field now do, each
from a read of its own modules:

- `false` for react, auth, collaboration, data-objectstack, mobile,
  permissions and providers: no module registers, imports CSS or writes a
  global at load time.
- An array, derived by `scripts/check-side-effects-array.mjs`, for the
  plugins whose registrations the gate can enumerate exactly.
- `true` for plugin-ai, plugin-chatbot, plugin-grid, cli, create-plugin
  and runner.

The consistency test learns the array gate's module-local write
carve-out (`X.displayName = 'X'` on a binding the module declares), with
pins in both directions, and its census grows to the new population.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Q4K9dtZAX6vw67etsxBeuP
plugin-dashboard registers its retired node types in a loop, so the key
set is not statically readable and check-sdui-registration-pins cannot
pin it. `true` is the conservative claim for it.

Co-authored-by: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Q4K9dtZAX6vw67etsxBeuP
@github-actions

Copy link
Copy Markdown
Contributor

✅ Console Performance Budget

Metric Value Budget
Eager closure (gzip, 85 chunks) 3033.4 KB 3496.0 KB
Main entry chunk (gzip) 80.8 KB 350 KB
Entry file index-UyGXg0u2.js —
Status PASS —

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.


📦 Bundle Size Report

Package Size Gzipped
app-shell (buildIdentity.js) 0.80KB 0.49KB
app-shell (consoleActionDispatch.js) 0.20KB 0.19KB
app-shell (index.js) 21.41KB 7.90KB
app-shell (runtime-config.js) 24.52KB 8.48KB
app-shell (types.js) 0.01KB 0.04KB
app-shell (urlParams.js) 10.11KB 3.87KB
auth (ActiveOrganizationStorage.js) 27.95KB 10.04KB
auth (AuthContext.js) 0.31KB 0.24KB
auth (AuthGuard.js) 2.07KB 1.00KB
auth (AuthProvider.js) 45.59KB 12.03KB
auth (AuthShell.js) 3.49KB 1.40KB
auth (ForgotPasswordForm.js) 12.21KB 3.45KB
auth (LoginForm.js) 20.67KB 6.12KB
auth (PreviewBanner.js) 0.90KB 0.50KB
auth (RegisterForm.js) 6.72KB 2.24KB
auth (SocialSignInButtons.js) 9.74KB 3.94KB
auth (UserMenu.js) 3.39KB 1.21KB
auth (auth-gate-events.js) 1.62KB 0.83KB
auth (authStyles.js) 5.27KB 1.86KB
auth (createAuthClient.js) 42.84KB 11.66KB
auth (createAuthenticatedFetch.js) 8.54KB 3.46KB
auth (index.js) 3.63KB 1.64KB
auth (invitation-status.js) 1.22KB 0.70KB
auth (org-roles.js) 8.84KB 3.61KB
auth (phone-identifier.js) 1.11KB 0.66KB
auth (types.js) 0.59KB 0.35KB
auth (useAuth.js) 5.30KB 1.02KB
auth (useWorkspaceAdminStatus.js) 11.08KB 4.58KB
collaboration (CommentThread.js) 27.26KB 8.03KB
collaboration (LiveCursors.js) 3.17KB 1.27KB
collaboration (PresenceAvatars.js) 6.28KB 2.60KB
collaboration (PresenceProvider.js) 2.79KB 1.13KB
collaboration (commentAuthorship.js) 1.39KB 0.78KB
collaboration (index.js) 1.93KB 0.85KB
collaboration (useCollaborationTranslation.js) 6.50KB 2.52KB
collaboration (useCommentSearch.js) 1.98KB 0.88KB
collaboration (useConflictResolution.js) 7.75KB 1.86KB
collaboration (useMentionNotifications.js) 1.81KB 0.68KB
collaboration (usePresence.js) 6.33KB 1.84KB
collaboration (useRealtimeSubscription.js) 7.91KB 2.01KB
components (index.js) 614.94KB 150.52KB
core (index.js) 10.51KB 4.16KB
create-plugin (index.js) 27.92KB 9.50KB
data-objectstack (index.js) 253.04KB 70.68KB
fields (index.js) 295.90KB 75.88KB
i18n (LocalizationContext.js) 2.92KB 1.42KB
i18n (builtinAggregateLabels.js) 0.86KB 0.49KB
i18n (currency.js) 2.59KB 1.22KB
i18n (fallbackInterpolation.js) 6.25KB 2.77KB
i18n (i18n.js) 8.87KB 3.64KB
i18n (index.js) 5.52KB 2.39KB
i18n (pickLocalized.js) 9.86KB 3.95KB
i18n (provider.js) 39.35KB 12.88KB
i18n (translateFn.js) 0.20KB 0.18KB
i18n (useDisplayLocale.js) 3.52KB 1.76KB
i18n (useObjectLabel.js) 36.87KB 9.88KB
i18n (useSafeTranslation.js) 7.14KB 2.92KB
layout (index.js) 41.17KB 11.96KB
mobile (MobileProvider.js) 0.92KB 0.49KB
mobile (ResponsiveContainer.js) 0.94KB 0.38KB
mobile (breakpoints.js) 1.51KB 0.70KB
mobile (createOfflineDataSource.js) 5.61KB 1.75KB
mobile (index.js) 1.99KB 0.87KB
mobile (offlineQueue.js) 3.91KB 1.35KB
mobile (pwa.js) 0.97KB 0.49KB
mobile (serviceWorker.js) 1.48KB 0.62KB
mobile (serviceWorkerSource.js) 3.41KB 1.48KB
mobile (useBreakpoint.js) 1.54KB 0.65KB
mobile (useGesture.js) 6.96KB 1.98KB
mobile (useOfflineSync.js) 1.99KB 0.72KB
mobile (usePullToRefresh.js) 6.62KB 2.45KB
mobile (useResponsive.js) 0.72KB 0.42KB
mobile (useSpecGesture.js) 5.52KB 2.10KB
mobile (useTouchTarget.js) 1.01KB 0.54KB
permissions (MePermissionsProvider.js) 15.35KB 5.51KB
permissions (PermissionContext.js) 0.31KB 0.25KB
permissions (PermissionGuard.js) 0.89KB 0.45KB
permissions (PermissionProvider.js) 6.82KB 2.38KB
permissions (ServerReadScope.js) 4.03KB 1.82KB
permissions (discardProofCache.js) 1.04KB 0.55KB
permissions (evaluator.js) 8.33KB 3.07KB
permissions (index.js) 0.99KB 0.43KB
permissions (store.js) 0.91KB 0.42KB
permissions (useFieldPermissions.js) 1.28KB 0.53KB
permissions (usePermissions.js) 4.83KB 2.27KB
plugin-ai (index.js) 16.01KB 3.91KB
plugin-calendar (index.js) 55.31KB 16.16KB
plugin-charts (index.js) 88.30KB 24.33KB
plugin-chatbot (core.js) 5.22KB 2.18KB
plugin-chatbot (index.js) 237.93KB 56.26KB
plugin-dashboard (index.js) 147.15KB 39.95KB
plugin-designer (index.js) 232.83KB 50.01KB
plugin-detail (index.js) 268.92KB 71.56KB
plugin-editor (index.js) 2.21KB 1.04KB
plugin-form (index.js) 185.46KB 48.48KB
plugin-gantt (index.js) 178.19KB 45.06KB
plugin-grid (index.js) 277.62KB 77.39KB
plugin-kanban (index.js) 64.27KB 19.81KB
plugin-list (index.js) 149.51KB 39.15KB
plugin-map (index.js) 27.54KB 9.10KB
plugin-markdown (index.js) 13.79KB 4.79KB
plugin-report (index.js) 46.42KB 13.06KB
plugin-timeline (index.js) 39.74KB 12.00KB
plugin-tree (index.js) 15.25KB 5.38KB
plugin-view (index.js) 93.37KB 24.00KB
providers (DataSourceProvider.js) 0.75KB 0.39KB
providers (MetadataProvider.js) 1.37KB 0.59KB
providers (ThemeProvider.js) 1.90KB 0.85KB
providers (UploadProvider.js) 12.07KB 3.68KB
providers (index.js) 0.45KB 0.23KB
providers (types.js) 0.01KB 0.04KB
react-runtime (index.js) 5.62KB 2.34KB
react (LazyPluginLoader.js) 4.47KB 1.63KB
react (SchemaRenderer.js) 129.13KB 42.23KB
react (data-invalidation.js) 5.05KB 2.08KB
react (index.js) 4.71KB 2.11KB
react (schema-input.js) 4.31KB 2.07KB
react (spec-input.js) 0.20KB 0.18KB
sdui-parser (body-dialect.js) 4.50KB 1.99KB
sdui-parser (codegen.js) 9.45KB 3.76KB
sdui-parser (dashboard-widget-options.js) 3.07KB 1.30KB
sdui-parser (index.js) 7.30KB 3.12KB
sdui-parser (input-type.js) 2.84KB 1.40KB
sdui-parser (parse.js) 25.28KB 7.81KB
sdui-parser (provenance.js) 3.84KB 1.90KB
sdui-parser (types.js) 0.29KB 0.24KB
sdui-parser (validate.js) 23.87KB 7.83KB
types (ai.js) 4.39KB 2.17KB
types (api-types.js) 0.20KB 0.18KB
types (app.js) 4.12KB 1.61KB
types (authoring-nodes.js) 0.20KB 0.19KB
types (base.js) 0.20KB 0.18KB
types (blocks.js) 0.20KB 0.18KB
types (cloud.js) 0.20KB 0.18KB
types (complex.js) 4.44KB 2.07KB
types (crud.js) 0.20KB 0.18KB
types (dashboard-filter-alias.js) 6.23KB 2.74KB
types (dashboard-widget-layout.js) 2.06KB 0.96KB
types (data-display.js) 3.75KB 1.85KB
types (data-protocol.js) 0.20KB 0.19KB
types (data.js) 0.20KB 0.18KB
types (designer.js) 1.85KB 0.85KB
types (disclosure.js) 0.20KB 0.18KB
types (error-code.js) 1.54KB 0.88KB
types (expression.js) 0.20KB 0.18KB
types (feedback.js) 0.20KB 0.18KB
types (field-types.js) 1.13KB 0.65KB
types (form.js) 0.20KB 0.18KB
types (http-inflight.js) 8.87KB 3.73KB
types (http-retry.js) 4.32KB 2.02KB
types (icon-key-migration.js) 4.26KB 1.63KB
types (index.js) 5.78KB 2.70KB
types (layout.js) 0.20KB 0.18KB
types (managed-by.js) 0.19KB 0.18KB
types (mobile.js) 5.00KB 2.39KB
types (navigation.js) 0.20KB 0.18KB
types (node-slots.js) 7.18KB 2.34KB
types (objectql.js) 0.20KB 0.18KB
types (overlay.js) 0.20KB 0.18KB
types (permissions.js) 2.52KB 1.31KB
types (plugin-scope.js) 0.20KB 0.18KB
types (product-blocks.js) 0.20KB 0.19KB
types (record-approval-decision.js) 0.20KB 0.20KB
types (record-components.js) 0.20KB 0.19KB
types (record-panels.js) 0.20KB 0.19KB
types (record-semantics.js) 1.28KB 0.67KB
types (registry.js) 0.20KB 0.18KB
types (reports.js) 0.20KB 0.18KB
types (select-option.js) 0.20KB 0.19KB
types (spec-report.js) 4.99KB 1.96KB
types (spec-ui-namespace.js) 0.20KB 0.19KB
types (strict-authoring-face.js) 19.93KB 7.26KB
types (system-fields.js) 3.33KB 1.54KB
types (theme.js) 6.28KB 2.87KB
types (ui-action.js) 8.48KB 3.50KB
types (views.js) 0.20KB 0.18KB
types (widget.js) 0.20KB 0.18KB

Size Limits

  • ✅ Core packages should be < 50KB gzipped
  • ✅ Component packages should be < 100KB gzipped
  • ⚠️ Plugin packages should be < 150KB gzipped

@objectstack-fleet

Copy link
Copy Markdown
Contributor Author

席位核对 — ACCEPT · PR #13495 @ fcfc372400f201d568c92d6139e8a4c7ab06db3a · domain:ui#4 · 2026-10-25T03:10Z

Reviewer of record: session_01XWGTsmqrtrt1Zqh1ioWqsT (seat 4). Implemented-by: session_01Q4K9dtZAX6vw67etsxBeuP on claude/project-thread-q1we3g. Card objectui#13464, claim 6392391793, amendment 6392496025, report 6392688954.

  1. Shape: draft, base main, body says Part of objectstack-ai/objectstack#25913 (the register*() half stays on the card). 31 files: one sideEffects line or array in 29 published manifests (apps/console excluded), the consistency test as amended, one changeset naming all 29 packages.
  2. Premise measured: 30 of 39 published manifests had no field; every published package now declares one.
    • false (7 new; 12 in all): react, auth, collaboration, data-objectstack, mobile, permissions, providers. A full-source read found no register, CSS import or global write; their only top-level statements are displayName writes on local bindings.
    • Gate-derived arrays (15 plugins; 17 array packages in all): the gate is green on every one, and all 68 array-promised registrations are present in the built console.
    • true: cli, create-plugin and runner, which are executables. Also plugin-ai, plugin-chatbot, plugin-dashboard and plugin-grid, where no array satisfies every guard (reasons in the report). true is the conservative claim and cannot drop a registration.
    • The consistency test learns the gate's local-binding-write carve-out. The seat read it: it applies only to a member write on a binding declared in this module, with a right-hand side that calls nothing. It is pinned both ways, so an imported or global target, or a calling right-hand side, is still a finding. The dev's reverse run turned 2 red.
  3. Gates on this head: 33 check-runs success and 3 skipped (coverage jobs, dependabot). mergeable_state: clean. Console eager closure, real production builds: 3,106,386 → 3,106,204 B gz. That is the console, which imports these packages whole, so it shows no drop; the gain is for external hosts that tree-shake. No ceiling moved.
  4. Accepted deviations: plugin-ai, plugin-chatbot and plugin-dashboard moved from "array" to true against the dev's first reading, still inside the claim's "array or true".
  5. Out of scope: explicit register*() and deleting check-side-effects-array.mjs stay on the card.
  6. Landing: not governed. Changeset: 29 packages patch, Clause-② no / Metadata-protocol none. The seat read it against the diff and it matches. PRs fix(console, app-shell): localise API Console, Public Forms, Integrations, AI Approvals and the datasource page (objectui#13460) #13489, fix(app-shell): show a position's label in a permission set's Assigned users (objectui#13477) #13493 and fix(a11y): name icon-only buttons and give clickable div/span controls a keyboard path (objectui#13461) #13494 are in the merge queue and touch no manifest. The maintainer's standing landing word was given in this seat's project thread at 2026-10-25T01:48Z, so the seat lands it. After merge the card returns to pm:queue with the register*() item.

Generated by Claude Code

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants