Skip to content

fix(platform-objects): sys_session.token stops serializing on the data API — internal: true (#7823) #18309

fix(platform-objects): sys_session.token stops serializing on the data API — internal: true (#7823)

fix(platform-objects): sys_session.token stops serializing on the data API — internal: true (#7823) #18309

Triggered via pull request August 12, 2026 10:23
Status Failure
Total duration 11m 32s
Artifacts 2

ci.yml

on: pull_request
Matrix: dogfood
Matrix: test
Dogfood Verify CLI
3m 19s
Dogfood Verify CLI
Temporal Conformance (live PG + MySQL)
4m 0s
Temporal Conformance (live PG + MySQL)
Build Core
3m 51s
Build Core
Build Docs
Build Docs
Console Pin Gate
Console Pin Gate
Test Core
8s
Test Core
Dogfood Regression Gate
9s
Dogfood Regression Gate
Fit to window
Zoom out
Zoom in

Annotations

48 errors
Dogfood Verify CLI
Process completed with exit code 1.
[isolated] test/bulk-widener-probe.dogfood.test.ts > [#6736 PROBE] app-authored RLS wideners on the bulk write path: packages/qa/dogfood/test/bulk-widener-probe.dogfood.test.ts#L176
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/bulk-widener-probe.dogfood.test.ts:176:5
[isolated] test/attachments-permission-matrix.dogfood.test.ts > attachments permission matrix (#2755): packages/qa/dogfood/test/attachments-permission-matrix.dogfood.test.ts#L120
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/attachments-permission-matrix.dogfood.test.ts:120:16
[isolated] test/api-key-revoke-lifecycle.dogfood.test.ts > #7727: sys_api_key revoke/restore through the declared product route: packages/qa/dogfood/test/api-key-revoke-lifecycle.dogfood.test.ts#L77
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/api-key-revoke-lifecycle.dogfood.test.ts:77:13
[isolated] test/admin-identity-audit-trail.dogfood.test.ts > #4940: what an admin identity operation leaves in sys_audit_log: packages/qa/dogfood/test/admin-identity-audit-trail.dogfood.test.ts#L103
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/admin-identity-audit-trail.dogfood.test.ts:103:18
[shared-showcase] test/showcase-readonly-when-parent.dogfood.test.ts > showcase: parent-scoped readonlyWhen is server-enforced (#4889): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-readonly-when-parent.dogfood.test.ts:44:13
[shared-showcase] test/showcase-public-read-owd.dogfood.test.ts > showcase: public-read OWD (ADR-0056): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-agent-intersection.dogfood.test.ts:38:13
[shared-showcase] test/showcase-permission-zoo.dogfood.test.ts > showcase: ADR-0090 permission-model zoo: packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-permission-zoo.dogfood.test.ts:31:13
[shared-showcase] test/showcase-declarative-rbac-seeding.dogfood.test.ts > showcase: declarative RBAC seeding (ADR-0057 D6 / #2077): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-agent-intersection.dogfood.test.ts:38:13
[shared-showcase] test/showcase-anonymous-deny.dogfood.test.ts > showcase: anonymous default-deny (ADR-0056 D2): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-agent-intersection.dogfood.test.ts:38:13
[shared-showcase] test/showcase-agent-intersection.dogfood.test.ts > showcase: ADR-0090 D10 agent intersection (served engine): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-agent-intersection.dogfood.test.ts:38:13
[isolated] test/delegation-of-duty.dogfood.test.ts > delegation of duty (ADR-0091 D3) — end to end: packages/qa/dogfood/test/delegation-of-duty.dogfood.test.ts#L63
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/delegation-of-duty.dogfood.test.ts:63:5
[isolated] test/authored-row-write-scope.dogfood.test.ts > [#7281] checkAuthoredRowWrite answers the declaration, not the caller read scope: packages/qa/dogfood/test/authored-row-write-scope.dogfood.test.ts#L214
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/authored-row-write-scope.dogfood.test.ts:214:5
[isolated] test/analytics-rls.dogfood.test.ts > dogfood: engine-side RLS scopes analytics even with the analytics belt off (#3602): packages/qa/dogfood/test/analytics-rls.dogfood.test.ts#L176
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/analytics-rls.dogfood.test.ts:176:24
[isolated] test/analytics-rls.dogfood.test.ts > dogfood: analytics aggregates are RLS-scoped to the caller (#3597): packages/qa/dogfood/test/analytics-rls.dogfood.test.ts#L74
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/analytics-rls.dogfood.test.ts:74:18
[isolated] test/action-params-contract.dogfood.test.ts > dogfood: action param contract enforced at dispatch (ADR-0104 D2): packages/qa/dogfood/test/action-params-contract.dogfood.test.ts#L34
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/action-params-contract.dogfood.test.ts:34:13
[shared-showcase] test/showcase-search.dogfood.test.ts > showcase: $search over the HTTP API (ADR-0061 conformance proof): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-search.dogfood.test.ts:28:13
[shared-showcase] test/showcase-private-owd.dogfood.test.ts > showcase: declarative private OWD (ADR-0056): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-private-owd.dogfood.test.ts:26:13
[shared-showcase] test/form-self-auth.dogfood.test.ts > ADR-0056 Option A — public-form grant (declaration-derived): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/form-self-auth.dogfood.test.ts:24:13
[isolated] test/flow-function-effect.dogfood.test.ts > objectstack verify FLOW: a function's declared effect reaches the run summary (#4396): packages/qa/dogfood/test/flow-function-effect.dogfood.test.ts#L35
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/flow-function-effect.dogfood.test.ts:35:13
[isolated] test/field-zoo-roundtrip.dogfood.test.ts > dogfood: field-type capability matrix round-trips over HTTP (#2004): packages/qa/dogfood/test/field-zoo-roundtrip.dogfood.test.ts#L33
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/field-zoo-roundtrip.dogfood.test.ts:33:19
[isolated] test/delegated-admin-invite.dogfood.test.ts > #3697: delegated_admin may invite — as `member` only: packages/qa/dogfood/test/delegated-admin-invite.dogfood.test.ts#L66
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/delegated-admin-invite.dogfood.test.ts:66:18
[isolated] test/api-key-hash-not-serialized.dogfood.test.ts > #7728: sys_api_key.key (hash) never serializes on the generic read path: packages/qa/dogfood/test/api-key-hash-not-serialized.dogfood.test.ts#L74
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/api-key-hash-not-serialized.dogfood.test.ts:74:13
[isolated] test/analytics-timezone.dogfood.test.ts > dogfood: org timezone drives analytics date bucketing (#1982/#2018): packages/qa/dogfood/test/analytics-timezone.dogfood.test.ts#L66
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/analytics-timezone.dogfood.test.ts:66:13
[isolated] test/analytics-label-scope.dogfood.test.ts > dogfood: dimension-label lookup is RLS-scoped to the referenced object (#3602): packages/qa/dogfood/test/analytics-label-scope.dogfood.test.ts#L41
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/analytics-label-scope.dogfood.test.ts:41:18
[shared-showcase] test/two-doors-permission.dogfood.test.ts > two-doors permission separation (ADR-0086 P2): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/two-doors-permission.dogfood.test.ts:30:13
[shared-showcase] test/showcase-static-readonly.dogfood.test.ts > showcase: static readonly write enforcement (#2948 / #3003 / #3043): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-static-readonly.dogfood.test.ts:43:13
[shared-showcase] test/showcase-anonymous-deny-surfaces.dogfood.test.ts > showcase: anonymous posture is uniform across surfaces (#2567): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/showcase-anonymous-deny-surfaces.dogfood.test.ts:152:13
[shared-showcase] test/showcase-agent-scope-ceiling.dogfood.test.ts > showcase: ADR-0090 D10 agent scope ceiling (served engine): packages/qa/dogfood/test/shared-showcase.ts#L87
Error: verify signIn: no token in response ❯ Object.signIn ../../verify/src/harness.ts:635:28 ❯ test/shared-showcase.ts:87:5 ❯ test/two-doors-permission.dogfood.test.ts:30:13
Dogfood Regression Gate
Process completed with exit code 1.
Dogfood Regression Gate
Dogfood Regression Gate: leg dogfood-verify reported result 'failure' — a declared negative is never overridden by a full roster.
Dogfood Regression Gate
Dogfood Regression Gate: 1 of 1 declared shard(s) of dogfood-verify published no positive attestation (dogfood-verify-1-of-1). A shard that never ran cannot be counted as passing — see #6082.
Dogfood Regression Gate
Dogfood Regression Gate: leg dogfood reported result 'failure' — a declared negative is never overridden by a full roster.
Dogfood Regression Gate
Dogfood Regression Gate: 3 of 3 declared shard(s) of dogfood published no positive attestation (dogfood-1-of-3, dogfood-2-of-3, dogfood-3-of-3). A shard that never ran cannot be counted as passing — see #6082.
Test Core (1/3)
Process completed with exit code 1.
Test Core (1/3)
command (/home/runner/work/objectstack/objectstack/packages/verify) /opt/hostedtoolcache/node/22.23.1/x64/bin/pnpm run test exited (1)
src/harness.org-context.test.ts > bootStack orgContext (#7762) > the DEFAULT boot is unchanged — no organization, no active org on the session: packages/verify/src/harness.ts#L635
Error: verify signIn: no token in response ❯ Object.signIn src/harness.ts:635:28 ❯ sessionOrgId src/harness.org-context.test.ts:79:3 ❯ src/harness.org-context.test.ts:170:16
src/harness.org-context.test.ts > bootStack orgContext (#7762) > binds the admin to a real organization, and their session carries it: packages/verify/src/harness.ts#L635
Error: verify signIn: no token in response ❯ Object.signIn src/harness.ts:635:28 ❯ sessionOrgId src/harness.org-context.test.ts:79:3 ❯ src/harness.org-context.test.ts:149:23
src/harness.app-default-profile.test.ts > bootStack honours the app-declared default permission set (#7001) > and that profile is load-bearing: a fresh member holds the declared grants: packages/verify/src/harness.ts#L635
Error: verify signIn: no token in response ❯ Object.signIn src/harness.ts:635:28 ❯ src/harness.app-default-profile.test.ts:144:7
Test Core (3/3)
Process completed with exit code 1.
Test Core (3/3)
command (/home/runner/work/objectstack/objectstack/packages/cli) /opt/hostedtoolcache/node/22.23.1/x64/bin/pnpm run test exited (1)
test/serve-mcp-stdio-answers.e2e.test.ts > #7645: the stdio MCP transport answers over a spawned CLI process: packages/cli/test/serve-mcp-stdio-answers.e2e.test.ts#L196
AssertionError: expected undefined to be truthy - Expected: true + Received: undefined ❯ test/serve-mcp-stdio-answers.e2e.test.ts:196:19
test/serve-mcp-capability-collision.e2e.test.ts > #7652: an app loading the MCP client connector still gets the MCP server: packages/cli/test/serve-mcp-capability-collision.e2e.test.ts#L229
AssertionError: expected undefined to be truthy - Expected: true + Received: undefined ❯ test/serve-mcp-capability-collision.e2e.test.ts:229:19
Test Core
Process completed with exit code 1.
Test Core
Test Core: leg test reported result 'failure' — a declared negative is never overridden by a full roster.
Test Core
Test Core: 2 of 3 declared shard(s) of test published no positive attestation (test-1-of-3, test-3-of-3). A shard that never ran cannot be counted as passing — see #6082.

Artifacts

Produced during runtime
Name Size Digest
build-output
27.1 MB
sha256:7e34da77dfe98fb021bc21d93868531f6b26847a63c521703ecb30cdda48368c
shard-attest-test-2-of-3
312 Bytes
sha256:285844cd40365370ece72f1d74db71e6f824ed65d65ad7cc33179786268fac5f