fix(app-shell): the delegated-admin scope facet shows the spec default for an unset key - #26990

Fixes #26706

Clause-②: no
Metadata-protocol: none

维护者速读

• 改了什么:Studio › Access › 权限集 › 委派管理(Delegated admin)里的开关,对范围里没有设置的键显示协议(AdminScopeSchema)的默认值;管理员切换开关时才写入显式的布尔值。
• 为什么改:委派管理是大客户安全下放管理权的方式,屏幕上显示的委派范围必须和服务端实际执行的一致,管理员才能正确判断自己授出了什么。
• 风险与回滚:只改前端显示,不改存储数据、保存载荷和服务端校验;回滚即 revert 本 PR。
• 先看:PermissionAdvancedFacets.tsx 的 ADMIN_SCOPE_SWITCH_DEFAULTS 与 scopeSwitchOn(风险 hunk:两个 Switch 的 checked);新测试 PermissionAdvancedFacets.adminScopeDefault-26706.test.tsx;PermissionAdvancedFacets.adminScopeAnchor.test.tsx 里两处期望值的更新。
• 两分钟验证:pnpm --dir ui exec vitest run packages/app-shell/src/views/metadata-admin/PermissionAdvancedFacets.adminScopeDefault-26706.test.tsx(先 build @objectstack/spec),预期 Tests 6 passed (6)。
• 需要你做的:无,席位落地。

What changes

The delegated-admin scope facet shows the spec default for an unset key.

• Each switch in the Delegated admin facet now draws scopeSwitchOn(scope, key): the scope's own boolean when it sets one, and otherwise the spec default for that key from ADMIN_SCOPE_SWITCH_DEFAULTS. That is the value AdminScopeSchema parses the key to and the value the server enforces.
• Drawing a default writes nothing. The draft keeps an untouched key unset, so a save keeps it unset. A flip writes an explicit boolean, as before. The write paths (setScope / setScopeDetail) and the business-unit gate are unchanged.
• The two defaults are restated, not imported, for the reason useTenancyPosture gives (the @objectstack/spec/security value entry adds its schema modules to the console bundle). They are typed against the spec's AdminScope, and the new test reads every expected value from the installed spec, so a default the spec moves fails CI here.
• Landing site: ui/packages/app-shell/src/views/metadata-admin/PermissionAdvancedFacets.tsx, the site the card expected. A grep of ui/ for the two keys finds no other surface that draws them.

Tests

• New PermissionAdvancedFacets.adminScopeDefault-26706.test.tsx, 6 cases: a CONTROL that the installed spec parses each unset switch key to a boolean default; an unset key draws the spec default (with a business unit, and while the switches wait for one); naming the business unit writes that key alone; a flip writes an explicit boolean and draws it, and flipping back keeps the key written; an explicit boolean draws as itself.
• PermissionAdvancedFacets.adminScopeAnchor.test.tsx: two expectations updated. Each asserted the boolean a single flip writes from the drawn state, and that value follows what the switch draws.
• Ablation, one time, through scripts/ablation-replace.mjs: one switch's checked reading was put back to its pre-change expression (anchor 1 to 0, replacement 0 to 1, blob cabc1416e0fd to c5282ce2ba31). Result: Tests 6 failed | 12 passed (18) across the two facet files, in the direction declared in advance (red). Restored: the blob equals HEAD and git diff HEAD is empty. The test imports the component by relative path, so the run read src/ and no dist/ leg applies. Run on 3592965f; the merge of main since then does not touch the facet or its tests.

Acceptance notes

• None. No out-of-scope finding.

Verification

All readings below were taken on head 394213f2 (a merge of origin/main at f1cd529d).

pnpm --dir ui exec vitest run --maxWorkers=2 (the 7 PermissionAdvancedFacets.*.test.tsx files + src/__tests__/spec-symbol-parity.test.ts)
 Test Files  8 passed (8)
      Tests  113 passed (113)

Not run locally, and owned by CI: pnpm lint, the test:repo project, and the workspace type-check lanes.

Generated by Claude Code