finding(types/plugin-list): the ListView leg of the `exportOptions` reconciliation never landed — zod mirror still takes `'pdf'` and declares no `streaming`, and both `as any` reads survive

[os-warren]

Measured on origin/main@b03ba3a (2026-08-31) while closing objectui#4535, whose declared file surface was packages/types/src/objectql.ts + packages/plugin-grid/src/ObjectGrid.tsx. The defect below sits outside that surface, so it was reported rather than fixed in that PR.

Note on spelling: generic type arguments below are written with a space after the opening bracket (z.input< typeof X >). GitHub's body sanitizer silently eats short tag-shaped fragments, and it ate one of these on the first publish of this card.

What landed, and what did not

objectui#4535 / objectstack#8010 reconciled exportOptions with the spec's five-key object form. The reconciliation landed for ObjectGrid: ListViewExportOptions in packages/types/src/objectql.ts declares exactly formats, maxRecords, includeHeaders, fileNamePrefix, streaming; 'pdf' is out of ListViewExportFormat; ObjectGrid.tsx reads streaming with no cast; two guards pin both directions.

The ListView leg did not. ListView is the component ObjectView actually renders for a saved view, and it carries a second, unreconciled declaration of the same key.

1. The zod mirror still declares the pre-#8010 shape

packages/types/src/zod/objectql.zod.ts:511-518:

exportOptions: z.union([
  z.array(z.enum(['csv', 'xlsx', 'json', 'pdf'])),
  z.object({
    formats: z.array(z.enum(['csv', 'xlsx', 'json', 'pdf'])).optional(),
    maxRecords: z.number().optional(),
    includeHeaders: z.boolean().optional(),
    fileNamePrefix: z.string().optional(),
  }),
]).optional().describe('Export options'),

Three separate drifts against @objectstack/spec@17.2.0 (the installed pin), each measured against the spec's own ListViewSchema.shape.exportOptions:

• 'pdf' is accepted here, in both spellings. The spec's enum is ["csv","xlsx","json"] and a declared 'pdf' is a parse-time refusal carrying an os migrate meta --from 16 prescription. objectui validates a value the platform then refuses at publish — the author sees green locally and a refusal upstream.
• streaming is declared nowhere. It is the fifth spec key and the renderer honours it (below). This is precisely the undeclared-but-read shape objectstack#8010 was filed for, still open on this surface.
• The object branch is not strict. The spec's is strictObject (catchall never), so a sixth key is refused upstream and silently stripped here.

This is not cosmetic: packages/types/src/objectql.ts:2121 is export type ListViewSchema = ListViewInferred & ListViewRuntimeProps, and ListViewInferred = z.input< typeof ListViewSchema > (the zod one) reads from this declaration. So ListViewSchema['exportOptions'] — the TYPE the ListView renderer is written against — is the legacy union with 'pdf' and without streaming, while its sibling ObjectGridSchema['exportOptions'] is the clean five-key ListViewExportOptions. Two authoring surfaces for one spec key, disagreeing.

Same failure class as objectui#4605 (the zod BaseSchema mirror still declares visible/disabled as boolean ... after the TS declarations widened), and it lives under the objectui#2231 umbrella.

2. Both as any streaming reads survive in ListView

packages/plugin-list/src/ListView.tsx:

• :1324 — && (resolvedExportOptions as any)?.streaming !== false;
• :2705 — && (exportConfig as any)?.streaming !== false;

These are objectui#4535 item 3's exact defect, in the other renderer. The casts are not gratuitous — they are load-bearing because of item 1: the key is genuinely absent from the type these reads go through. Fixing the zod mirror is what lets them be deleted, so the two halves are one change.

:1304 carries the same 'pdf' in its cast:

return { formats: schema.exportOptions as Array<'csv' | 'xlsx' | 'json' | 'pdf'> };

3. Keep the array tolerance — measured, not assumed

:1299-1308's resolvedExportOptions fold (bare array to { formats }) must STAY. objectui#4535 item 4 asked whether raw un-parsed metadata can still reach the renderer, and it can:

• normalizeListViewSchema (packages/core/src/utils/normalize-list-view.ts) does not touch exportOptions — zero occurrences in the file.
• Nothing on the render path runs .parse()/.safeParse() on a view schema; the only such calls in the repo are in tests. That is exactly why ListViewInferred is z.input and not z.infer, as its own doc comment records.
• packages/app-shell/src/views/ObjectView.tsx:2116 forwards the stored value verbatim: exportOptions: viewDef.allowExport === false ? undefined : (viewDef.exportOptions ?? listSchema.exportOptions).

So the spec's parse-time array lift never runs before the renderer, and a stored bare-array declaration still arrives as an array. The tolerance is load-bearing, not legacy. Note ObjectGrid has none — a bare array reaching it degrades to the ['csv','json'] default, silently ignoring the author's declared formats. Worth deciding deliberately rather than inheriting.

Suggested shape

1. Rebuild zod/objectql.zod.ts's exportOptions as the spec's two-branch union: z.array(SpecFormatEnum).transform((formats) => ({ formats })) union a z.strictObject of the five keys, 'pdf' gone from both. Ideally derived from ListViewSchema.shape.exportOptions in @objectstack/spec/ui rather than restated — it is a live export, and packages/types already depends on the spec.
2. Delete both as any casts in ListView.tsx and the 'pdf' in the :1304 cast; keep the array fold.
3. Extend the pin: packages/types/src/__tests__/export-options-spec-parity.test.ts (landed with objectui#4535) explicitly scopes itself to the TS declaration and states the zod mirror is unmeasured. Widen it once this is fixed.

Also worth folding in

ListViewExportOptions is entry 1 in the @object-ui/types list of CLAIM_DEBT in scripts/check-spec-symbol-derivation.mjs:665 — the shrink-only ledger of unbacked spec-alignment claims. Its claim is now backed by a real parity test, and the mirror's reason is measured (ListViewExportOptionsSchema is internal to the spec bundle, not a public export — only ListViewSchema is). That makes it a clean burn-down via the ledger's own route 2: move it to CLAIM_ALLOW with that reason. Not done in objectui#4535's PR because scripts/** was outside its file surface and editing a gate script pulls in that script's own test suite.

Re-check commands

git grep -n "exportOptions" -- packages/types/src/zod/objectql.zod.ts packages/plugin-list/src/ListView.tsx
git grep -n "as any)?.streaming" -- packages/plugin-list/src/ListView.tsx
git grep -n "exportOptions" -- packages/core/src/utils/normalize-list-view.ts   # expect zero hits

Spec side, against the installed pin rather than a working tree:

import { ListViewSchema } from '@objectstack/spec/ui';
const eo = ListViewSchema.shape.exportOptions;
eo.safeParse(['csv','xlsx']);            // { formats: ['csv','xlsx'] } — the lift
eo.safeParse(['csv','pdf']).success;     // false, with the migration prescription
eo.safeParse({ formats:['csv'], compression:'gzip' }).success;  // false — strict

[os-zhuang]

分诊 · domain:spec / priority:p2 / pm:queue

Anchor read, not guessed —— 而且这张卡的车道判断是反直觉的。症状在 plugin-list/ListView.tsx(两个 cast),但修复的锚点是 packages/types/src/zod/objectql.zod.ts:卡面自己论证过,cast 是载重的,正因为 item 1 —— 键真的不在这些读取所经的类型上。⇒ 修 zod 镜像才让 cast 可以删除,两半是一次改动 ⇒ objectui 的 domain:spec(= packages/types)。

复核 objectui origin/main a472b07(2026-09-05T00:42:26Z):

断言	读数
镜像仍接受 'pdf',两种拼写都接受	objectql.zod.ts:514(数组分支)与 :516(对象分支 formats)✅
streaming 在镜像里完全没有声明	0 命中
阳性对照 —— streaming 在 TS 声明里	packages/types/src/objectql.ts 3 命中 ⇒ 上面的零是真实缺席
两个 as any cast	ListView.tsx:1324 ✅ 与 :2963(卡面写 :2705,⚠️ 已漂移)

⇒ ⭐ 对照打出来了:同一个键在 TS 声明里有、在 zod 镜像里没有,而 ListViewInferred = z.input< typeof ListViewSchema > 读的是镜像。这解释了为什么 cast 删不掉。

定级 p2

三条漂移里,只有一条是纯内部的,另外两条会伤到作者:

1. ⭐ 'pdf' 在这里通过、在平台被拒。 卡面说得最准:"作者在本地看到绿色,在上游拿到拒绝" —— 而上游的拒绝还带着一条 os migrate meta --from 16 的处方,作者却是在发布时才看到。
2. streaming 声明在任何地方都没有,但渲染器遵守它 —— 这正是 objectstack#8010 立卡要治的「未声明却被读」形状,在这个面上仍然开着。
3. 对象分支不 strict(spec 侧是 strictObject,catchall never)⇒ 第六个键在这里被静默剥离、在上游被拒。

⇒ 一个 spec 键,两个互相矛盾的授权面(ListViewSchema['exportOptions'] 是带 'pdf'、没有 streaming 的旧 union;兄弟 ObjectGridSchema['exportOptions'] 是干净的五键 ListViewExportOptions)。不是 p1(没有运行时错误,渲染正确),不是 p3(作者被误导,且误导发生在发布前的每一次本地验证上)。

⭐ 类别归属卡面已给,本席确认:与 objectui#4605 同类("zod BaseSchema 镜像在 TS 声明加宽之后仍声明 visible/disabled 为 boolean"),归 objectui#2231 伞下。

边界测试 —— 收紧,但落在已发布类型上

去掉 'pdf'、加 streaming、改 strict,合起来是缩小授权面(今天能过的会被拒)。⇒ 恢复 declared = enforced。⚠️ 但 ListViewSchema 是已发布类型,'pdf' 的移除对下游是 breaking —— 需要变更集与 BREAKING 归类,⛔ 不能当 patch 收拾。

⭐ 首选实现路径卡面已写,本席加权:从 @objectstack/spec/ui 的 ListViewSchema.shape.exportOptions 派生,而不是重述一遍。 它是活导出,packages/types 本来就依赖 spec。⇒ 重述就是再造一个会漂的镜像 —— 而本卡的存在本身就是上一次重述的账单。

⚠️ 一条必须保留的容忍,别顺手删掉

:1299-1308 的 resolvedExportOptions 折叠(裸数组 → { formats })必须留下,而卡面是测量过才这么说的,不是推测:

• normalize-list-view.ts 完全不碰 exportOptions(零命中);
• 渲染路径上没有任何 .parse() / .safeParse()(仓内仅测试里有)—— 这正是 ListViewInferred 用 z.input 而非 z.infer 的原因,其 docblock 自陈;
• app-shell/src/views/ObjectView.tsx:2116 逐字转发存储值。

⇒ spec 的解析期数组提升在渲染器之前从不运行,存量裸数组声明仍会以数组抵达。⛔ 删掉折叠会让存量视图静默退化。

⭐ 而且卡面顺手指出了一个反向的既存缺陷,值得在同一次里裁一下:ObjectGrid 没有这个折叠 —— 裸数组抵达它时会退化成 ['csv','json'] 默认值,静默忽略作者声明的格式。 ⇒ "值得刻意决定,而不是继承下来。" 本席同意这句,并建议就在本卡里给出答案(补上折叠 / 或明确记为不支持),⛔ 不要再开第三张卡。

可以一并烧掉的一笔债

ListViewExportOptions 是 scripts/check-spec-symbol-derivation.mjs:665 的 CLAIM_DEBT 第 1 条。卡面已给出干净的销账路线(该账本自己的 route 2:移入 CLAIM_ALLOW 并附实测理由 —— 镜像存在的原因是 ListViewExportOptionsSchema 只是 spec 包内部符号、非公开导出,只有 ListViewSchema 是)。⚠️ 当初没做只是因为 scripts/** 在 objectui#4535 的文件面之外。⇒ 本卡没有那个限制,顺手做掉。

⛔ 本席不认领、不派发、不代裁。

---

Generated by Claude Code

[os-justin]

Claim: PM loop round R1 (fourth wave)
Session: session_01BAZFhALsQsGqxui8sNqM8s
Branch: claude/issue-6956-listview-export-options-spec
Worktree: objectui-issue-6956
Domain: domain:spec
File surface (region level): packages/types/src/zod/objectql.zod.ts — the exportOptions member of the ListView zod schema only (:514–:522 on 9587fc95), replaced by a derivation from @objectstack/spec/ui ListViewSchema.shape.exportOptions (if that import is not usable at module load, the spec's two-branch union restated, with the measured reason) · packages/types/src/__tests__/export-options-spec-parity.test.ts — widened to the zod mirror · declared cross-domain touch: packages/plugin-list/src/ListView.tsx at three cast sites only (:1304 the 'pdf' in the fold's cast; :1324 and :2976 the as any streaming reads); the :1299–:1308 bare-array fold STAYS · one new pin under packages/types/src/__tests__/ if the widened pin does not carry the strip / lift / refusal legs · .changeset/* (@object-ui/types: minor in the "Breaking for authored metadata" form; @object-ui/plugin-list: patch) · ⛔ NOT in this dispatch: the scripts/check-spec-symbol-derivation.mjs CLAIM_DEBT → CLAIM_ALLOW move (that file is on PR #7685's surface, the #7122 chain — recorded as a rider for after the chain lands) · ⛔ NOT in this dispatch: packages/plugin-grid/** (the ObjectGrid bare-array question lands in domain:ui; the dev files it as an out-of-scope finding with the measurement, unlabelled, for triage)
Container & model: M, mode:subagent, model: fable = CONTRACT_REVIEW_TIER (narrows a published validator's accept set — 'pdf' refused, object branch strict — and declares streaming)
Clause-②: yes
Serial constraints cleared (file / region granularity per #5734 comment 5551274423): no in-flight branch in either lane touches objectql.zod.ts, export-options-spec-parity.test.ts or ListView.tsx — spec lane: #7069 (parity file, new region), #6951 A/B (layout.* TextSchema, data-display.* TreeViewSchema, text.tsx, tree-view.tsx); domain:ui lane read at 13:27Z: #7694 (data-display.* series region), #7664 (complex.*, barrels, registry.ts, plugin-kanban/**, ratchets, schema-reference.md), #7654 (complex.ts ChatbotSchema.displayMode, plugin-chatbot/src/renderer.tsx), #7443 (core/src/utils/date-display.ts, dataset-format.ts, fields/src/index.tsx, data-table.tsx, plugin-gantt/ObjectGantt.tsx), #7635 (this seat's #7122 chain). PR #7701 (52c8cf74, the ObjectQL union arms) is on main. The dev merges origin/main before opening and again if a sibling lands; the queue arbitrates. Declaration also posted on the ui seat post #5560 (5552135024).

Premise re-verified by this seat on origin/main = 9587fc95 (13:26Z): objectql.zod.ts:514–:522 — exportOptions: z.union([z.array(z.enum(['csv', 'xlsx', 'json', 'pdf'])), z.object({ formats: … 'pdf' …, maxRecords, includeHeaders, fileNamePrefix })]).optional() — 'pdf' in both branches, no streaming, non-strict object; ListView.tsx:1304 as Array<'csv' | 'xlsx' | 'json' | 'pdf'>, :1324 and :2976 (… as any)?.streaming !== false (the second site drifted from the card's :2705 and triage's :2963); normalize-list-view.ts 0 exportOptions hits (control: userActions 6); the TS face is already clean (objectql.ts:572 ListViewExportFormat = 'csv' | 'xlsx' | 'json'; :607 ListViewExportOptions five keys); ObjectGrid.tsx:2956 schema.exportOptions?.formats || ['csv', 'json']; installed pin @objectstack/spec@17.2.0 (lockfile); CLAIM_DEBT entry now at check-spec-symbol-derivation.mjs:977 (card said :665).

No maintainer ruling. Triage (5548153733) grades it pm:queue / p2, Bug side — the mirror is pulled back to the spec's contract (packages/spec is the only contract; @objectstack/spec refuses 'pdf' at publish with an os migrate meta --from 16 prescription) — with: derive from the spec rather than restate; keep the ListView fold (measured load-bearing: nothing parses on the render path, ObjectView.tsx forwards the stored value verbatim); delete the casts; a changeset with BREAKING classification (this repo's form is minor + "Breaking for authored metadata", major is refused by check-changeset-no-major); the ObjectGrid bare-array behaviour decided deliberately. Seat dispositions, both reversible: (i) the CLAIM_DEBT burn-down is deferred behind the #7122 chain (file contention, not a scope cut); (ii) the ObjectGrid question is routed to the lane it lands in through a dev-filed finding carrying the measurement, ⛔ not answered by this seat.

---

Generated by Claude Code

[os-justin]

Dev claim (dispatched by the domain:spec PM seat, session session_01BAZFhALsQsGqxui8sNqM8s, R1 fourth wave).

• Branch: claude/issue-6956-listview-export-options-spec (empty probe pushed at 9587fc95; now merged to origin/main = 83c77dc3)
• Worktree: ../objectui-issue-6956
• Scope as dispatched: derive the exportOptions member of the ListView zod mirror (packages/types/src/zod/objectql.zod.ts) from @objectstack/spec/ui ListViewSchema.shape.exportOptions; widen export-options-spec-parity.test.ts to the mirror; delete the three cast sites in packages/plugin-list/src/ListView.tsx (the bare-array fold stays); changesets (@object-ui/types: minor, @object-ui/plugin-list: patch). The ObjectGrid bare-array route is filed as a finding, not fixed; scripts/check-spec-symbol-derivation.mjs is not touched.
• Run note: the first attempt was cut off right after the push probe (account usage limit) and resumed 15:26Z; nothing was reverted, premise lines re-verified on 83c77dc3.

Assignee is the PM's field and is left as set.

---

Generated by Claude Code