Skip to content

fix(data-objectstack): a view's own filter no longer vanishes when the user adds one - #3072

Merged
os-zhuang merged 1 commit into
mainfrom
claude/filter-entry-name-tolerance
Jul 30, 2026
Merged

fix(data-objectstack): a view's own filter no longer vanishes when the user adds one#3072
os-zhuang merged 1 commit into
mainfrom
claude/filter-entry-name-tolerance

Conversation

@os-zhuang

Copy link
Copy Markdown
Contributor

Started as the one-line cleanup left over from the framework-followup audit — deleting a dead ?? entry.name tolerance. Removing it properly meant consolidating the duplicated shape check that made it dead, and that turned up a live defect underneath.

The main bug

ObjectStackAdapter translated object-form filter entries ([{ field, operator, value }, ...]) only at the top level of a $filter. The moment a list has both a stored view filter and a user filter, ListView.tsx:1064 builds:

['and', [{ field: 'stage', operator: 'eq', value: 'won' }], [['amount', '>', 1]]]

The head is the string and, so the old top-level-only check called the whole thing "already AST" and sent the rules on untranslated. Both server answers to that are wrong — measured, not inferred:

result
isFilterAST(above) false — a bare rule object is not an AST child
parseFilterAST(above) {"amount":{"$gt":1}}stage = won is simply gone
after this PR {"$and":[{"stage":"won"},{"amount":{"$gt":1}}]}

So on a server with objectstack#4121 the isFilterAST gate turns it into a 400 and the list fails to load. Before that — or anywhere parseFilterAST is reached without the gate — the view's own condition is dropped silently and the list returns records the view exists to exclude.

Translation is now recursive through and/or nodes and legacy flat child arrays.

Three related fixes in the same code

An untranslatable entry is now an error, not an omission. Entries that failed to translate were dropped, and dropping one conjunct of an and returns a superset of the rows asked for — dropping the last one sent no filter= at all, so the whole table came back. That is the silent over-fetch the drivers stopped doing in objectstack#3948, one layer up. find() now throws MalformedFilterError carrying code: 'INVALID_FILTER' / httpStatus: 400, which is exactly what classifyLoadError needs to render "the filter is malformed" instead of "check your connection" (#3066). A rule with a blank field passes ViewFilterRuleSchema (z.string() admits ''), so this is reachable from real stored metadata.

A mixed array ([{ field, operator, value }, ['amount', '>', 1]]) keeps both halves rather than dropping the tuple — that case was a lost condition, not a malformed one.

The two find() routes can no longer disagree. The "is this object form?" test existed twice — once in translateFilterToAST, once inline in convertQueryParams — and the copies had already drifted: the inline one omitted a !== null guard, so $filter: [null] threw a TypeError on the plain route while the same value was handled on the $expand route. Same stored filter, different outcome, decided by whether the view happened to expand a lookup. One definition now serves both.

The dead tolerance itself. objectFilterEntryToAST read entry.field ?? entry.name while the shape check keyed on field alone, so the name half was unreachable from the commit that introduced it (4b93db4e6 added both in one diff). The spec agrees it is not a real shape: ViewFilterRuleSchema.field is required, so a name-keyed rule cannot be saved as view metadata at all. Removing it is enforce-or-remove, not a narrowing — nothing in either repo produces that shape.

Verification

  • 44 new tests, every case driven down both find() routes.
  • The emitted filter is asserted against the server's own isFilterAST rather than a restated shape — the contract is "the server accepts this", so the test derives from the spec instead of duplicating it.
  • Reverting index.ts fails 19 of the 44, including the real pre-existing crash (Cannot read properties of null (reading 'field')) and the silent drop (expected null to be an instance of Error).
  • Full repo suite: 752 files / 8745 tests green. tsc clean; eslint 0 errors (111 pre-existing no-explicit-any warnings in this file, untouched).

Note on the dead-code deletion

It has no failing-on-revert test, and cannot: it was dead, so removing it changes no behavior. The test that pins a name-keyed entry as passed through pins the decision instead — re-widening the sniff to accept name would fail it.

Refs objectstack#3948, objectstack#4121, #2945

🤖 Generated with Claude Code

…e user adds one

Object-form filter entries (`[{ field, operator, value }, ...]`) were
translated only at the TOP level of a `$filter`. The moment a list has both a
stored view filter and a user filter it builds

    ['and', [{ field: 'stage', operator: 'eq', value: 'won' }], [['amount', '>', 1]]]

whose head is the string `and`, so the old check called the whole thing
"already AST" and shipped the rules untranslated. Both server answers to that
are wrong:

    isFilterAST(above)    // false — a bare rule object is not an AST child
    parseFilterAST(above) // { amount: { $gt: 1 } }   ← `stage = won` is GONE

Since objectstack#4121 the `isFilterAST` gate makes it a 400 and the list fails
to load; before it — or anywhere `parseFilterAST` is reached without that gate
— the view's own condition is dropped without a word and the list returns
records the view exists to exclude. Translation is now recursive through
`and`/`or` nodes and legacy flat child arrays.

Three related fixes in the same code:

- An untranslatable entry is an error, not an omission. Entries that failed to
  translate were dropped, and dropping one conjunct of an `and` returns a
  superset of the rows asked for — dropping the last one sent no `filter=` at
  all, so the whole table came back. `find()` now throws MalformedFilterError
  carrying `code: 'INVALID_FILTER'` / `httpStatus: 400`, so a failed list
  renders "the filter is malformed" rather than "check your connection".
  A rule with a blank `field` passes ViewFilterRuleSchema (`z.string()` admits
  ''), so this is reachable from real stored metadata. A mixed rule/tuple array
  now keeps both halves — that case was a lost condition, not a malformed one.

- The two `find()` routes can no longer disagree. The "is this object form?"
  test existed twice — in `translateFilterToAST` and inline in
  `convertQueryParams` — and the copies had already drifted: the inline one
  omitted a `!== null` guard, so `$filter: [null]` threw a TypeError on the
  plain route while the same value was handled on the `$expand` route.

- Dropped an unreachable `entry.name` fallback. `objectFilterEntryToAST` read
  `entry.field ?? entry.name` while the shape check keyed on `field` alone, so
  the `name` half was dead from the commit that introduced it (4b93db4). The
  spec agrees it is not a real shape — `ViewFilterRuleSchema.field` is
  required, so such a rule cannot be saved as view metadata.

44 tests, driving both `find()` routes; the emitted filter is asserted against
the server's own `isFilterAST` rather than a restated shape. Reverting
index.ts fails 19 of them.

Refs objectstack#3948, objectstack#4121, #2945

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Jul 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectui Ignored Ignored Jul 30, 2026 4:01pm

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

✅ Console Performance Budget

Metric Value Budget
Main entry (gzip) 27.9 KB 350 KB
Entry file index-PRRmm8mD.js
Status PASS

📦 Bundle Size Report

Package Size Gzipped
app-shell (index.js) 8.20KB 2.97KB
app-shell (runtime-config.js) 7.42KB 2.32KB
app-shell (types.js) 0.01KB 0.04KB
app-shell (urlParams.js) 7.57KB 2.97KB
auth (AuthContext.js) 0.31KB 0.24KB
auth (AuthGuard.js) 1.17KB 0.53KB
auth (AuthProvider.js) 22.10KB 4.37KB
auth (AuthShell.js) 3.49KB 1.40KB
auth (ForgotPasswordForm.js) 12.12KB 3.41KB
auth (LoginForm.js) 17.86KB 5.29KB
auth (PreviewBanner.js) 0.90KB 0.50KB
auth (RegisterForm.js) 6.43KB 2.09KB
auth (SocialSignInButtons.js) 9.60KB 3.89KB
auth (UserMenu.js) 3.40KB 1.22KB
auth (auth-gate-events.js) 1.29KB 0.66KB
auth (authStyles.js) 5.04KB 1.72KB
auth (createAuthClient.js) 35.76KB 9.11KB
auth (createAuthenticatedFetch.js) 4.37KB 1.69KB
auth (index.js) 2.35KB 1.07KB
auth (org-roles.js) 6.66KB 2.78KB
auth (phone-identifier.js) 1.11KB 0.66KB
auth (types.js) 0.59KB 0.35KB
auth (useAuth.js) 4.91KB 0.87KB
auth (useIsWorkspaceAdmin.js) 1.61KB 0.85KB
collaboration (CommentThread.js) 18.38KB 4.49KB
collaboration (LiveCursors.js) 3.17KB 1.27KB
collaboration (PresenceAvatars.js) 3.65KB 1.42KB
collaboration (PresenceProvider.js) 2.79KB 1.13KB
collaboration (index.js) 1.25KB 0.53KB
collaboration (useCommentSearch.js) 1.98KB 0.88KB
collaboration (useConflictResolution.js) 7.75KB 1.86KB
collaboration (useMentionNotifications.js) 1.81KB 0.68KB
collaboration (usePresence.js) 6.33KB 1.84KB
collaboration (useRealtimeSubscription.js) 7.91KB 2.01KB
components (index.js) 471.08KB 102.76KB
core (index.js) 2.16KB 0.78KB
create-plugin (index.js) 9.28KB 2.98KB
data-objectstack (index.js) 135.63KB 34.47KB
fields (index.js) 222.07KB 54.35KB
i18n (LocalizationContext.js) 1.76KB 0.96KB
i18n (currency.js) 1.22KB 0.64KB
i18n (i18n.js) 4.32KB 1.77KB
i18n (index.js) 2.46KB 0.96KB
i18n (pickLocalized.js) 1.70KB 0.83KB
i18n (provider.js) 5.37KB 1.72KB
i18n (useObjectLabel.js) 25.17KB 5.80KB
i18n (useSafeTranslation.js) 3.26KB 1.44KB
layout (index.js) 38.45KB 10.67KB
mobile (MobileProvider.js) 0.92KB 0.49KB
mobile (ResponsiveContainer.js) 0.94KB 0.38KB
mobile (breakpoints.js) 1.51KB 0.70KB
mobile (createOfflineDataSource.js) 5.61KB 1.74KB
mobile (index.js) 1.50KB 0.62KB
mobile (offlineQueue.js) 3.91KB 1.35KB
mobile (pwa.js) 0.97KB 0.49KB
mobile (serviceWorker.js) 1.48KB 0.62KB
mobile (serviceWorkerSource.js) 3.41KB 1.48KB
mobile (useBreakpoint.js) 1.54KB 0.65KB
mobile (useGesture.js) 6.96KB 1.98KB
mobile (useOfflineSync.js) 1.99KB 0.72KB
mobile (usePullToRefresh.js) 2.53KB 0.85KB
mobile (useResponsive.js) 0.71KB 0.42KB
mobile (useResponsiveConfig.js) 1.36KB 0.63KB
mobile (useSpecGesture.js) 4.05KB 1.53KB
mobile (useTouchTarget.js) 1.01KB 0.54KB
permissions (MePermissionsProvider.js) 8.76KB 3.06KB
permissions (PermissionContext.js) 0.31KB 0.25KB
permissions (PermissionGuard.js) 0.89KB 0.45KB
permissions (PermissionProvider.js) 3.67KB 1.12KB
permissions (evaluator.js) 4.41KB 1.44KB
permissions (index.js) 0.91KB 0.41KB
permissions (retry.js) 3.48KB 1.61KB
permissions (store.js) 0.91KB 0.42KB
permissions (useFieldPermissions.js) 1.28KB 0.52KB
permissions (usePermissions.js) 1.55KB 0.71KB
plugin-ai (index.js) 15.71KB 3.79KB
plugin-calendar (index.js) 44.90KB 12.35KB
plugin-charts (index.js) 60.52KB 17.11KB
plugin-chatbot (index.js) 180.09KB 42.72KB
plugin-dashboard (index.js) 111.59KB 28.74KB
plugin-designer (index.js) 210.51KB 42.50KB
plugin-detail (index.js) 221.81KB 54.28KB
plugin-editor (index.js) 2.46KB 1.10KB
plugin-form (index.js) 110.71KB 26.67KB
plugin-gantt (index.js) 162.26KB 39.53KB
plugin-grid (index.js) 184.77KB 48.50KB
plugin-kanban (index.js) 47.82KB 13.18KB
plugin-list (index.js) 104.07KB 24.88KB
plugin-map (index.js) 16.80KB 5.24KB
plugin-markdown (index.js) 13.65KB 4.67KB
plugin-report (index.js) 40.32KB 10.53KB
plugin-timeline (index.js) 25.75KB 7.32KB
plugin-tree (index.js) 8.36KB 2.81KB
plugin-view (index.js) 85.95KB 21.02KB
providers (DataSourceProvider.js) 0.75KB 0.39KB
providers (MetadataProvider.js) 1.37KB 0.59KB
providers (ThemeProvider.js) 1.90KB 0.85KB
providers (UploadProvider.js) 11.71KB 3.53KB
providers (index.js) 0.44KB 0.22KB
providers (types.js) 0.01KB 0.04KB
react-runtime (index.js) 5.67KB 2.37KB
react (LazyPluginLoader.js) 3.77KB 1.33KB
react (SchemaRenderer.js) 19.28KB 6.38KB
react (data-invalidation.js) 5.05KB 2.08KB
react (index.js) 1.02KB 0.55KB
sdui-parser (codegen.js) 4.09KB 1.74KB
sdui-parser (index.js) 3.47KB 1.54KB
sdui-parser (parse.js) 10.04KB 2.82KB
sdui-parser (types.js) 0.29KB 0.24KB
sdui-parser (validate.js) 4.69KB 1.48KB
types (ai.js) 0.20KB 0.17KB
types (api-types.js) 0.20KB 0.18KB
types (app.js) 2.87KB 0.99KB
types (base.js) 0.20KB 0.18KB
types (blocks.js) 0.20KB 0.18KB
types (complex.js) 0.20KB 0.18KB
types (crud.js) 0.20KB 0.18KB
types (data-display.js) 0.20KB 0.18KB
types (data-protocol.js) 0.20KB 0.19KB
types (data.js) 0.20KB 0.18KB
types (designer.js) 1.87KB 0.85KB
types (disclosure.js) 0.20KB 0.18KB
types (error-code.js) 1.54KB 0.88KB
types (feedback.js) 0.20KB 0.18KB
types (field-types.js) 0.20KB 0.18KB
types (form.js) 0.20KB 0.18KB
types (index.js) 2.07KB 0.99KB
types (layout.js) 0.20KB 0.18KB
types (managed-by.js) 0.19KB 0.18KB
types (mobile.js) 0.20KB 0.18KB
types (navigation.js) 0.20KB 0.18KB
types (objectql.js) 0.20KB 0.18KB
types (overlay.js) 0.20KB 0.18KB
types (permissions.js) 0.20KB 0.18KB
types (plugin-scope.js) 0.20KB 0.18KB
types (record-components.js) 0.20KB 0.19KB
types (record-semantics.js) 1.28KB 0.67KB
types (registry.js) 0.20KB 0.18KB
types (reports.js) 0.20KB 0.18KB
types (spec-report.js) 5.05KB 1.93KB
types (system-fields.js) 3.33KB 1.54KB
types (theme.js) 0.20KB 0.18KB
types (ui-action.js) 1.08KB 0.64KB
types (views.js) 0.20KB 0.18KB
types (widget.js) 0.20KB 0.18KB

Size Limits

  • ✅ Core packages should be < 50KB gzipped
  • ✅ Component packages should be < 100KB gzipped
  • ⚠️ Plugin packages should be < 150KB gzipped

@os-zhuang
os-zhuang merged commit 7d35010 into main Jul 30, 2026
16 checks passed
@os-zhuang
os-zhuang deleted the claude/filter-entry-name-tolerance branch July 30, 2026 16:08
os-zhuang added a commit that referenced this pull request Jul 30, 2026
… downloads the unsearched superset (#3078)

The server-streamed export mirrored the view's `filter` and `sort`, and the
code comment claimed that made the file match the screen:

    Mirrors the active view's filter + sort so the exported file matches
    what the user sees.

It mirrored one half. There was no way to carry the term a user had typed into
the search box — `ExportDownloadRequest` had no field for one — so exporting
during a search produced MORE ROWS than the list showed, in a file that looks
authoritative, with nothing indicating the difference. The client-side fallback
was always correct (it serializes the already-searched `data`); only the server
path was wrong, and it is the one that handles xlsx.

Same family as a dropped filter (objectstack#3948, objectstack#4181): a
plausible answer that is quietly broader than the one asked for.

- `ExportDownloadRequest` gains `search` / `searchFields`.
- `ObjectStackAdapter.exportDownload` sends them as `search=` / `searchFields=`,
  trimming the term and omitting both when it is blank (`searchFields` alone
  means nothing).
- `ListView` passes the active `searchTerm` and the view's `searchableFields`,
  and both are now in the export callback's dependency array — a stale closure
  would export the wrong row set.

Requires a server with objectstack#4230. Older servers ignore unknown query
params on this route, so they keep today's behaviour rather than erroring.

Also: the filter merge is no longer written twice. The three filter sources
(view filter, filter-panel group, per-field user filters) were merged by
verbatim copies in the data fetch and in the export — two copies that must
agree, deciding respectively what the user SEES and what they DOWNLOAD. Both
now call `buildEffectiveFilter`.

That half is a PURE EXTRACTION, and the tests say so: the four parity tests
added for it pass against the old duplicated code too. They exist to keep it
that way — the adapter's duplicated filter-shape check had already drifted
apart unnoticed (#3072). The parity tests compare the arguments of the two real
calls rather than asserting an expected AST twice, which would go on passing if
both copies drifted the same wrong way.

Verification: 9 new tests (4 ListView export/search, 4 fetch-vs-export parity,
5 adapter query params). Reverting ListView.tsx fails the 2 search tests and
passes the 4 parity ones; reverting the adapter fails 4. Full suite 758 files /
8819 tests green; tsc clean across types, data-objectstack, plugin-list;
eslint 0 errors.

Co-authored-by: Jack Zhuang <277994282+os-zhuang@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
os-zhuang added a commit that referenced this pull request Jul 31, 2026
…ther the query expands a lookup (#3084)

#3072 single-sourced the ARRAY branch of the adapter's two `find()` routes. The
object branch was left as it was: `convertQueryParams` converted a MongoDB-style
filter to AST while `translateFilterToAST` returned it verbatim — so the same
`$filter` went out in two formats, decided by whether the query happened to
expand a lookup.

Measured across 21 operator shapes, four diverged. Most of the gap turned out to
be harmless, which is worth recording because it was not obvious: `{$and: […]}`
survives the plain route as a `['$and','=',[…]]` comparison that `parseFilterAST`
reads back as a real `$and`, and `$exists` vs `$null` is a difference the server
treats identically. Two were not harmless:

- THE UNKNOWN-OPERATOR GUARD ONLY RAN ON ONE ROUTE. `convertFiltersToAST` throws
  on an unrecognised operator, with a comment saying it does so "to avoid silent
  failure" — but the expanded route never called it, so a typo'd operator threw
  on a plain read and shipped silently whenever a lookup was expanded.

- `$regex` WAS SILENTLY REWRITTEN TO `contains`. The existing test's own example
  makes the case: `$regex: '^John'` means "starts with John", while
  `contains '^John'` looks for a literal caret — so "John Smith" does not match.
  A different question, not a weaker version of the same one, and neither result
  looks wrong on screen. The rewrite sat behind a `console.warn`, which is not
  an error channel in a deployed app, and the function's own unknown-operator
  message never listed `$regex` among the supported set. The spec has no
  `$regex` (`FILTER_OPERATORS`, data/filter.zod.ts), so there is nothing to
  translate it into: it is refused now, the same treatment the neighbouring
  unknown operator already got. Nothing in the repo depended on the conversion.

Both refusals throw `FilterOperatorError` carrying `code: 'INVALID_FILTER'` /
`httpStatus: 400`. The pre-existing unknown-operator throw was a bare `Error`,
which `classifyLoadError` reads as a network fault — so a malformed filter told
the user to check their connection (#3066), the one thing it was not.

`filter-converter.test.ts`'s `$regex` case asserted the old behaviour and is
rewritten to assert the refusal, keeping the `'^John'` example because it
demonstrates the harm better than any prose.

Verification: 9 new/changed tests; reverting the two source files fails 9 of
them. Full suite 762 files / 8875 tests green; tsc clean; eslint 0 errors.

Co-authored-by: Jack Zhuang <277994282+os-zhuang@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant