@@ -0,0 +1,12 @@
+---
+'@object-ui/app-shell': patch
+'@object-ui/i18n': patch
+---
+
+fix(ui): Setup's everyone note and header tags speak to an administrator
+
+Clause-②: no
+Metadata-protocol: none
+
+- **Assigned users of a permission set:** a set the everyone position distributes now says 「所有登录成员都持有此权限集。」 / "Every signed-in member holds this set." It no longer names the everyone anchor.
+- **Setup list header tags:** three tags now say what they mean for the administrator reading the page, in all ten language packs. Admin config becomes "Configured here" (zh 「在此配置」), Platform schema becomes "Built in · editable" (zh 「平台预置 · 可编辑」), and Identity becomes "Via identity service" (zh 「经身份服务写入」). The tooltip text and the rule for when a tag is drawn do not change.
@@ -41,11 +41,16 @@ import { useCanAuthorMetadata } from '../hooks/useCanAuthorMetadata.js';
  * via `resolveEffectiveCrudAffordances()`. This badge purely *labels* the bucket;
  * the detailed explanation lives in the tooltip.
  *
+ * The short label says what the bucket means to the administrator reading the
+ * page ("Configured here", "Built in · editable", "Via identity service"),
+ * never the engine's name for it ("config", "schema", the identity table):
+ * it is the one word they see without opening the tooltip (objectstack#30208).
+ *
  * ## An authoring aid: it draws for an authoring caller only (objectui#12194)
  *
  * The bucket is a fact about how the object is BUILT, so the label speaks to
  * whoever can author it. To an end user it is an implementation word — the
- * `better-auth` variant reads 「身份」 / "Identity" on a workspace page a host
+ * `better-auth` variant names the identity service on a workspace page a host
  * authored, with no meaning to them — and the record page draws it outside
  * the page tree, so no page could leave it out. Triage's ruling on
  * objectui#12194 (option a): the badge renders only for a caller who can
@@ -112,7 +117,7 @@ const VARIANTS: Record<VariantKey, Variant> = {
   config: {
     icon: Settings2,
     i18nKey: 'config',
-    short: 'Admin config',
+    short: 'Configured here',
     title: 'Administrator configuration',
     body: () =>
       'These rows define how the platform behaves at runtime. Author them here; the runtime data they produce lives in a separate table.',
@@ -140,7 +145,7 @@ const VARIANTS: Record<VariantKey, Variant> = {
   'system-data': {
     icon: Settings2,
     i18nKey: 'systemWritable',
-    short: 'Platform schema',
+    short: 'Built in · editable',
     title: 'Platform-defined, admin-writable',
     body: () =>
       "This object's schema is defined by the platform, but its rows are yours to create and edit here. Who may write is governed by delegated administration and record-level security, not by this badge.",
@@ -162,7 +167,7 @@ const VARIANTS: Record<VariantKey, Variant> = {
   'better-auth': {
     icon: ShieldAlert,
     i18nKey: 'betterAuth',
-    short: 'Identity',
+    short: 'Via identity service',
     title: 'Written through the built-in identity service',
     body: (display) =>
       `This object's schema belongs to ${display}, the platform's built-in identity service. Create and change these records with the actions on this page, or through sign-in, invitation and security flows; every one of them goes through that service. Editing the table directly would bypass password hashing, session validation, two-factor checks and audit hooks.`,
 
@@ -64,3 +64,43 @@ describe('ManagedByBadge — the identity note is true of a team made here (obje
     expect(note).not.toContain('身份提供方');
   });
 });
+
+/**
+ * objectstack#30208 row 9 — the Setup list header tags read 「管理配置」,
+ * 「平台架构」 and 「身份」: the engine's names for how an object is built, which
+ * tell an administrator nothing until they open the tooltip. Each tag now says
+ * what it means for them: configure it here, built in but editable, written
+ * through the identity service.
+ */
+describe('ManagedByBadge — the tag word speaks to an administrator (objectstack#30208)', () => {
+  const tagText = (managedBy: string, language?: string) => {
+    const tag = language ? (
+      <I18nProvider config={{ defaultLanguage: language, detectBrowserLanguage: false }}>
+        <ManagedByBadge managedBy={managedBy} />
+      </I18nProvider>
+    ) : (
+      <ManagedByBadge managedBy={managedBy} />
+    );
+    const { unmount } = render(tag);
+    const text = screen.getByTestId('managed-by-badge').textContent;
+    unmount();
+    return text;
+  };
+
+  it('Chinese: config, system-data and better-auth read what the administrator can do', () => {
+    expect(tagText('config', 'zh')).toBe('在此配置');
+    expect(tagText('system-data', 'zh')).toBe('平台预置 · 可编辑');
+    expect(tagText('better-auth', 'zh')).toBe('经身份服务写入');
+  });
+
+  it('English: the same three tags', () => {
+    expect(tagText('config')).toBe('Configured here');
+    expect(tagText('system-data')).toBe('Built in · editable');
+    expect(tagText('better-auth')).toBe('Via identity service');
+  });
+
+  it('CONTROL: the tags the walkthrough did not name keep their words', () => {
+    expect(tagText('engine-owned', 'zh')).toBe('系统管理');
+    expect(tagText('append-only', 'zh')).toBe('只读 · 审计日志');
+  });
+});
@@ -37,6 +37,12 @@ vi.mock('@object-ui/fields', async (importOriginal) => {
   };
 });
 const pickedUsers = [{ id: 'u_new', name: 'New Nora' }];
+// The section picks its copy by the console locale; English unless a case sets it.
+let localeFixture: 'en-US' | 'zh-CN' = 'en-US';
+vi.mock('./i18n', async (importOriginal) => ({
+  ...(await importOriginal<Record<string, unknown>>()),
+  useMetadataLocale: () => localeFixture,
+}));
 
 // The registry's position definitions — the binding is part of the definition.
 const registryPositions = [
@@ -217,3 +223,39 @@ describe('AssignedUsersSection — reports each holders read to its host (object
     expect(onHoldersRead).not.toHaveBeenCalled();
   });
 });
+
+/**
+ * objectstack#30208 row 4 — a set the everyone position distributes said
+ * 「已绑定到 everyone 锚点」: a position's machine name and an engine word, on a
+ * page a business administrator reads. The note says who holds the set.
+ */
+describe('AssignedUsersSection — the everyone note says who holds the set (objectstack#30208)', () => {
+  it('zh-CN: names every signed-in member, not the everyone anchor', async () => {
+    localeFixture = 'zh-CN';
+    try {
+      const { container } = render(<AssignedUsersSection permissionSetName="showcase_contributor" />);
+      await waitFor(() => expect(screen.getByText('所有登录成员都持有此权限集。')).toBeTruthy());
+      expect(container.textContent).not.toContain('锚点');
+      expect(container.textContent).not.toContain('everyone');
+    } finally {
+      localeFixture = 'en-US';
+    }
+  });
+
+  it('English: the same note, with no anchor word', async () => {
+    const { container } = render(<AssignedUsersSection permissionSetName="showcase_contributor" />);
+    await waitFor(() => expect(screen.getByText('Every signed-in member holds this set.')).toBeTruthy());
+    expect(container.textContent).not.toMatch(/anchor/i);
+  });
+
+  it('CONTROL: a set the everyone position does not distribute draws no note', async () => {
+    localeFixture = 'zh-CN';
+    try {
+      render(<AssignedUsersSection permissionSetName="showcase_auditor" />);
+      await waitFor(() => expect(screen.getByText(/还没有分配任何用户/)).toBeTruthy());
+      expect(screen.queryByText('所有登录成员都持有此权限集。')).toBeNull();
+    } finally {
+      localeFixture = 'en-US';
+    }
+  });
+});
@@ -158,7 +158,7 @@ function useCopy() {
             countOf: (n: number) => n + ' 人',
             direct: '直授',
             viaPosition: (p: string) => '经岗位 ' + p,
-            everyoneNote: '已绑定到 everyone 锚点 — 所有登录成员都持有此权限集。',
+            everyoneNote: '所有登录成员都持有此权限集。',
             positionHeldHint: '经岗位持有 — 在岗位的指派中移除。',
           }
         : {
@@ -186,7 +186,7 @@ function useCopy() {
             countOf: (n: number) => String(n),
             direct: 'direct',
             viaPosition: (p: string) => 'via position ' + p,
-            everyoneNote: 'Bound to the everyone anchor — every signed-in member holds this set.',
+            everyoneNote: 'Every signed-in member holds this set.',
             positionHeldHint: 'Held via a position — remove it on the position’s assignments.',
           },
     [zh],
 
@@ -996,12 +996,12 @@ const ar = {
   },
   managedByBadge: {
     systemWritable: {
-      short: "مخطط المنصة",
+      short: "مضمَّن · قابل للتعديل",
       title: "تحدده المنصة وقابل للكتابة من المسؤول",
       body: "تحدد المنصة مخطط هذا الكائن، لكن صفوفه لك تنشئها وتحررها هنا. ومن يحق له الكتابة تحدده الإدارة المفوَّضة والأمان على مستوى السجل، لا هذه الشارة.",
     },
     config: {
-      short: "إعدادات المسؤول",
+      short: "يُضبط هنا",
       title: "تكوين المسؤول",
       body: "تحدد هذه الصفوف سلوك المنصة أثناء التشغيل. أنشئها هنا؛ وتُخزَّن بيانات التشغيل الناتجة في جدول منفصل.",
     },
@@ -1016,7 +1016,7 @@ const ar = {
       body: "سجل تدقيق غير قابل للتغيير. لا يمكن إنشاء الصفوف أو تعديلها أو حذفها من الواجهة — تكتبها المنصة عند وقوع الأحداث. استخدم التصدير للتنزيل لمراجعة الامتثال.",
     },
     betterAuth: {
-      short: "الهوية",
+      short: "عبر خدمة الهوية",
       title: "يُكتب عبر خدمة الهوية المدمجة",
       body: "مخطط هذا الكائن مملوك لـ {{provider}}، خدمة الهوية المدمجة في المنصة. أنشئ هذه السجلات وعدّلها بالإجراءات في هذه الصفحة أو عبر تدفقات تسجيل الدخول والدعوة والأمان؛ فكلها تمر عبر هذه الخدمة. أما تعديل الجدول مباشرة فيتجاوز تجزئة كلمات المرور والتحقق من الجلسات وفحوصات المصادقة الثنائية وخطافات التدقيق.",
     },
 
@@ -887,12 +887,12 @@ const de = {
   },
   managedByBadge: {
     systemWritable: {
-      short: "Plattform-Schema",
+      short: "Integriert · bearbeitbar",
       title: "Plattformdefiniert, für Admins beschreibbar",
       body: "Das Schema dieses Objekts wird von der Plattform definiert, seine Zeilen können Sie hier jedoch selbst anlegen und bearbeiten. Wer schreiben darf, regeln die delegierte Administration und die Datensatzsicherheit — nicht dieses Abzeichen.",
     },
     config: {
-      short: "Admin-Konfiguration",
+      short: "Hier konfiguriert",
       title: "Administrator-Konfiguration",
       body: "Diese Zeilen definieren das Laufzeitverhalten der Plattform. Erstellen Sie sie hier; die erzeugten Laufzeitdaten liegen in einer separaten Tabelle.",
     },
@@ -907,7 +907,7 @@ const de = {
       body: "Unveränderliches Audit-Log. Zeilen können in der UI nicht erstellt, bearbeitet oder gelöscht werden – die Plattform schreibt sie bei Ereignissen. Nutzen Sie Export für Compliance-Prüfungen.",
     },
     betterAuth: {
-      short: "Identität",
+      short: "Über den Identitätsdienst",
       title: "Über den integrierten Identitätsdienst geschrieben",
       body: "Das Schema dieses Objekts gehört {{provider}}, dem integrierten Identitätsdienst der Plattform. Legen Sie diese Datensätze mit den Aktionen auf dieser Seite oder über Anmelde-, Einladungs- und Sicherheitsabläufe an und ändern Sie sie dort; alle laufen über diesen Dienst. Direkte Änderungen an der Tabelle würden Passwort-Hashing, Sitzungsvalidierung, Zwei-Faktor-Prüfungen und Audit-Hooks umgehen.",
     },
 
@@ -1155,7 +1155,7 @@ const en = {
   },
   managedByBadge: {
     config: {
-      short: 'Admin config',
+      short: 'Configured here',
       title: 'Administrator configuration',
       body: 'These rows define how the platform behaves at runtime. Author them here; the runtime data they produce lives in a separate table.',
     },
@@ -1165,7 +1165,7 @@ const en = {
       body: 'Rows here are created automatically when actions run on the source record. The list below is a read-only monitoring surface — row-level actions (Approve, Recall, Resend, …) live on each row.',
     },
     systemWritable: {
-      short: 'Platform schema',
+      short: 'Built in · editable',
       title: 'Platform-defined, admin-writable',
       body: "This object's schema is defined by the platform, but its rows are yours to create and edit here. Who may write is governed by delegated administration and record-level security, not by this badge.",
     },
@@ -1175,7 +1175,7 @@ const en = {
       body: "Immutable audit log. Rows cannot be created, edited, or deleted from the UI — they're written by the platform when events occur. Use Export to download for compliance review.",
     },
     betterAuth: {
-      short: 'Identity',
+      short: 'Via identity service',
       title: 'Written through the built-in identity service',
       body: "This object's schema belongs to {{provider}}, the platform's built-in identity service. Create and change these records with the actions on this page, or through sign-in, invitation and security flows; every one of them goes through that service. Editing the table directly would bypass password hashing, session validation, two-factor checks and audit hooks.",
     },
 
@@ -917,12 +917,12 @@ const es = {
   },
   managedByBadge: {
     systemWritable: {
-      short: "Esquema de la plataforma",
+      short: "Integrado · editable",
       title: "Definido por la plataforma, editable por el administrador",
       body: "El esquema de este objeto lo define la plataforma, pero sus filas son suyas: puede crearlas y editarlas aquí. Quién puede escribir lo determinan la administración delegada y la seguridad a nivel de registro, no esta insignia.",
     },
     config: {
-      short: "Configuración",
+      short: "Se configura aquí",
       title: "Configuración del administrador",
       body: "Estas filas definen el comportamiento de la plataforma en tiempo de ejecución. Créelas aquí; los datos de tiempo de ejecución que producen viven en una tabla separada.",
     },
@@ -937,7 +937,7 @@ const es = {
       body: "Registro de auditoría inmutable. Las filas no se pueden crear, editar ni eliminar desde la interfaz: las escribe la plataforma cuando ocurren eventos. Use Exportar para descargarlas para revisión de cumplimiento.",
     },
     betterAuth: {
-      short: "Identidad",
+      short: "Vía el servicio de identidad",
       title: "Escrito a través del servicio de identidad integrado",
       body: "El esquema de este objeto pertenece a {{provider}}, el servicio de identidad integrado de la plataforma. Cree y modifique estos registros con las acciones de esta página o mediante los flujos de inicio de sesión, invitación y seguridad; todos pasan por ese servicio. Editar la tabla directamente omitiría el hash de contraseñas, la validación de sesiones, las comprobaciones de dos factores y los hooks de auditoría.",
     },
 
@@ -912,12 +912,12 @@ const fr = {
   },
   managedByBadge: {
     systemWritable: {
-      short: "Schéma de la plateforme",
+      short: "Intégré · modifiable",
       title: "Défini par la plateforme, modifiable par l'administrateur",
       body: "Le schéma de cet objet est défini par la plateforme, mais ses lignes vous appartiennent : vous pouvez les créer et les modifier ici. Qui peut écrire est déterminé par l'administration déléguée et la sécurité au niveau des enregistrements, pas par ce badge.",
     },
     config: {
-      short: "Config admin",
+      short: "Configuré ici",
       title: "Configuration administrateur",
       body: "Ces lignes définissent le comportement de la plateforme à l'exécution. Créez-les ici ; les données d'exécution produites résident dans une table séparée.",
     },
@@ -932,7 +932,7 @@ const fr = {
       body: "Journal d'audit immuable. Les lignes ne peuvent pas être créées, modifiées ni supprimées depuis l'interface : la plateforme les écrit lors des événements. Utilisez Exporter pour les télécharger à des fins de conformité.",
     },
     betterAuth: {
-      short: "Identité",
+      short: "Via le service d'identité",
       title: "Écrit via le service d'identité intégré",
       body: "Le schéma de cet objet appartient à {{provider}}, le service d'identité intégré de la plateforme. Créez et modifiez ces enregistrements avec les actions de cette page ou via les flux de connexion, d'invitation et de sécurité ; tous passent par ce service. Modifier la table directement contournerait le hachage des mots de passe, la validation des sessions, les contrôles à deux facteurs et les hooks d'audit.",
     },