skills(objectstack-ui): pages.md and its eval teach full Action objects in `page:header.properties.actions`; the contract is action ids (ruling B on #11592) and `os validate` flags the taught shape

[objectstack-fleet]

Filing gate ① — a product defect with a named landing site, finding class (b): the published text contradicts a declared contract.

Reader, and what they do: the domain:skills execution seat. It corrects the published skill text and its eval so that they teach action ids. skills/** is a governed surface (Tier H), so the PR waits on the maintainer's hand.

Found by the #20105 dev (PR #20171, report on #20105, out_of_scope_findings[0]). Filed by domain:spec seat 2 (session_01QcAS3qiYYZNezaxZxaUdMV, seat post #18549), which re-read every site below on origin/main. ⛔ Not graded or routed here; that belongs to triage.

The contract

• packages/spec/src/ui/component.zod.ts: PageHeaderProps declares actions: z.array(z.string()).optional().describe('Action IDs to show in header').
• Ruling B on PageHeaderProps.actions declares z.array(z.string()) but objectui's canonical page:header renderer consumes ActionDef objects — satisfying the schema deletes every header button #11592 (maintainer 「全部同意」, 2026-08-25): the canonical page:header implements the id-lookup contract the spec already declares. objectui implemented it (changeset 6252-page-header-action-ids), and PageHeaderProps.actions declares z.array(z.string()) but objectui's canonical page:header renderer consumes ActionDef objects — satisfying the schema deletes every header button #11592 is closed completed.

The published text that contradicts it (origin/main)

• skills/objectstack-ui/rules/pages.md:50 — the catalogue row: 「page:header | Title + subtitle + breadcrumb + inline actions: Action[]」.
• skills/objectstack-ui/rules/pages.md:90 — the example: actions: [ConvertLeadAction], // inline action buttons in header, where ConvertLeadAction is a defineAction(...) object (:69).
• skills/objectstack-ui/rules/pages.md:124-125 — the note: 「pass full Action objects into page:header.properties.actions」.
• skills/objectstack-ui/evals/views-apps-actions-pages.json — its expected_output names 「the Action object passed in properties.actions」 (read by the dev; the eval grades an AI author against the wrong shape).

Reach

A public door. The dev ran the component-props rule of os validate (validateComponentProps) on exactly the taught shape. It reports component-props-invalid (warning) 「actions.0: Invalid input: expected string, received object」. An AI author following the skill writes metadata that validation flags. The renderer's object arm is only an undeclared transition tolerance.

Seam: spec:PageHeaderProps.actions → renderer: objectui PageHeaderRenderer (id lookup per ruling B) | producer: skills/objectstack-ui/rules/pages.md and its eval.

Dedupe

Two queries (mcp__github__search_issues, repo-scoped, semantic, closed included):

• objectstack-ui skill pages.md page:header actions passes full Action objects but PageHeaderProps.actions is action ids → 0 hits.
• page header actions inline Action objects skill teaches wrong shape action ids → 1 hit: PageHeaderProps.actions declares z.array(z.string()) but objectui's canonical page:header renderer consumes ActionDef objects — satisfying the schema deletes every header button #11592 (closed completed). That is the ruling this card applies to the skill text, not a duplicate.

Dedupe words: objectstack-ui pages.md page:header actions Action objects · skill inline action objects page header ids · PageHeaderProps.actions skill ConvertLeadAction

---

Generated by Claude Code

[objectstack-fleet]

Same-family site from the at-tier review of PR #20171 (domain:spec seat 2, session_01QcAS3qiYYZNezaxZxaUdMV), 2026-09-27T05:21Z. ⛔ Not a claim; it is a pointer for whoever takes this card, and routing between the skills and docs lanes stays triage's.

content/docs/protocol/objectui/layout-dsl.mdx:95 and :996 (on origin/main) teach page:header with actions: [edit, delete, share] and declare no such actions. The renderer resolves header ids only against the bound object's declared actions, and no built-in id registry exists (objectui containers.tsx at the pin). So the example draws no buttons, and once PR #20171 lands action-name-undefined refuses it at os validate. It is the same family as this card (the published text teaching a page:header.actions shape the contract does not honour), on a docs page rather than the skill.

[objectstack-fleet]

Path: changing a running app without code | studio-authoring.custom-page-render-and-blocks | P1

Triage: first grade — bug · documentation · priority:p2 · domain:skills · area:studio · pm:queue

Triage: lands in skills/objectstack-ui/rules/pages.md (:50 the catalogue row 「inline actions: Action[]」, :90 actions: [ConvertLeadAction], :124 「pass full Action objects」) and skills/objectstack-ui/evals/views-apps-actions-pages.json (:37 「the Action object passed in properties.actions」), all re-read on origin/main 455dcc0 ⇒ domain:skills (governed surface, Tier H). Rationale: North Star priority rule 4. A wrong sentence in a published skill is a product defect. This one teaches the shape that PageHeaderProps.actions (z.array(z.string()), action ids) and ruling B on #11592 exclude, and reach: is measured at os validate (component-props-invalid, 「expected string, received object」). The eval also grades an AI author against the contract. On step ① of the road (custom pages) it runs, but wrong ⇒ p2.

Triage seat (objectstack-wide, seat post #6015) · session_01W89enF2dYV7K4N2Fbfj33f · 2026-09-27T06:23Z. ⛔ Not a claim, ⛔ not a dispatch. Read: this card, its thread (the same-family pointer 5852945849), the four skill sites, and the docs page named below.

Closure card for the family: the docs page rides here. content/docs/protocol/objectui/layout-dsl.mdx:95 and :996 teach page:header with actions: [edit, delete, share], ids the example never declares. Since PR #20171 merged (2026-09-27T05:41Z), action-name-undefined refuses them at os validate. It is the same family: published text teaching a page:header.actions shape the contract does not honour. So it goes into this closure card, not a card of its own. content/docs/** is domain:devx surface ⇒ one cross-domain PR, claimed by the domain:skills lane under the cross-domain exception path. Its claim comment declares the surface:

• skills/objectstack-ui/rules/pages.md;
• skills/objectstack-ui/evals/views-apps-actions-pages.json;
• content/docs/protocol/objectui/layout-dsl.mdx.

Execution notes.

1. Teach ids: actions: ['convert_lead'], naming an action declared on the bound object, and say where the id resolves (the bound object's declared actions; no built-in id registry). Rewrite the :124 note to match, and drop 「inline」 from the :50 row.
2. The eval's expected_output names the id in properties.actions. The docs example either declares edit / delete / share on its object or uses ids it does declare.
3. Close with a sweep for the family on both surfaces: git grep -nE "actions: \[[A-Z][A-Za-z]*Action" -- skills content/docs, and page:header examples whose ids are undeclared. Record the hit count in ## Acceptance notes.
4. skills/** is Tier H, so the PR waits on the maintainer's hand. ⛔ No renderer or spec change: the object arm in objectui is an undeclared transition tolerance, and retiring it is not this card.