fix(spec,app-shell): zh-CN view panel reads Chinese on every row of its collapsed sections - #30356

📓 Docs Drift Check

This PR changes 2 package(s): @objectstack/platform-objects, @objectstack/spec, touching 30 documentable anchor(s).

17 hand-written doc(s) name something this change touched — list omitted above 15 rows. Re-derive on the tree named below: node scripts/docs-audit/affected-docs.mjs --json 1013ef11617b578c6525e50300f74f2e0b072b3c.

⛔ 11 release-owned page(s) also affected — read-only, see AGENTS.md Documentation Guardrails.

# while this PR is open — GitHub drops the merge commit once it closes
git fetch origin 39cf8e9e9420870b402c0cc6127db6f6336693ac && git checkout 39cf8e9e9420870b402c0cc6127db6f6336693ac
# afterwards, rebuild it from the two parents, which stay fetchable
git fetch origin 1013ef11617b578c6525e50300f74f2e0b072b3c fa3694dfa37337f8d125d75bcdde5a9d4c7bbcdd && git checkout -B drift-repro 1013ef11617b578c6525e50300f74f2e0b072b3c && git merge --no-ff fa3694dfa37337f8d125d75bcdde5a9d4c7bbcdd

node scripts/docs-audit/affected-docs.mjs --json 1013ef11617b578c6525e50300f74f2e0b072b3c

Advisory only, and a precision-first one (#9192): a page is listed because it names a
symbol, wire route or SDK method this diff touched — not because it mentions a changed
package. Each row says which anchor put it there, so a wrong row is reportable rather than
merely annoying. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs 1013ef11617b578c6525e50300f74f2e0b072b3c → pass the list as
args.docs, on the commit named under Which tree this was computed on.

domain:ui#1 · os-support-ai · session_01WGufzfE4V9fzZgJLrLDmMC

维护者速读（席位终稿）

• 改了什么：中文控制台下，Studio 视图属性面板展开「表格选项 / 分页 / 终端用户控制 / 导航与共享」后，里面的各行名称和说明都显示中文（实测英文行从 70 行降到 9 行）。日文、西班牙文目录也一并补齐。
• 为什么改：Studio on zh-CN still mixes languages and terms: view properties panel, flow nodes, publish sheet labels, and 仪表板 beside 仪表盘 #30039 核验时发现，展开这些区块会冒出大量英文，根因是 spec 的视图表单没有声明这些子字段，翻译目录无从覆盖（On a zh-CN console the view properties panel's expanded sections (表格选项, 分页, 终端用户控制, 导航与共享) still show about 60 English rows #30267）。
• 风险与回滚：低。只增加表单声明、提示文字和翻译，英文界面文字不变；面板不再显示两个已退役的键，已存的值保存时原样保留。不改接口和数据。回滚即 revert 本 PR。
• 先看：packages/spec/src/ui/view.form.ts 新声明的子字段，metadata-form-zh-cn.ts 的中文行。
• 两分钟验证：pnpm --dir ui exec vitest run packages/app-shell/src/views/metadata-admin/metadata-form-i18n.test.ts。
• 需要你做的：无。不是受管面，席位直接落地。
• 席位意见：ACCEPT。剩下 9 行是「允许的可视化」选项名，目录没有承载选项名的通道，另立卡。

席位核对 · ACCEPT · head f5483a169f · 2026-11-05T07:25Z

1. Shape: draft, base main, Fixes #30267. One changeset: @objectstack/spec, @objectstack/platform-objects, @object-ui/app-shell patch, Clause-②: no / Metadata-protocol: none. 13 files, +1024/−74 (four generated catalogs ~580 of it). check-governed-merges --pr 30356: NOT governed. git merge-tree vs main 8c9f48f8 clean.
2. Read by the seat: route (a) of the Step 1 seam report: view.form.ts declares the seven composites' children with labels/hints equal to the current English screen text; the extractor emits metadataForms.view.fields['<parent>.<child>']; catalogs regenerated via check-i18n-bundles --write; zh rows in the platform bundle, copied by the console overlay. UserFilterFieldSchema gains six .meta({ title }) (English column heads, unchanged on screen). Retired navigation.view / sharing.type are no longer offered; the seat's condition is met: a stored value survives a panel save (the composite editor spreads the block). Shot 30267-after-zh-CN-panel.png reads Chinese through all four sections.
3. Accepted deviations: file surface beyond the Claim: view.zod.ts (six .meta titles), metadata-form-zod-reconciliation.test.ts (three omit rows), object-lifecycle-panel-echo-decisions.test.ts (ledger 701 → 731), and the ja-JP / es-ES catalogs (translated, not left as en fills). Claim surface amended here.
4. Evidence: spec + ui pins green; dispatch-gates 84/84 exit 0 with --ran zero NOT-MEASURED. Live zh-CN probe on the example CRM: English rows 70 → 9. CI on this head running at review time; auto-merge waits on it.
5. Out of scope: the nine allowedVisualizations option chips (Grid / Kanban / …) stay English: the metadata-forms catalog has no channel for a field's option labels; filed separately. Serial with draft PR feat(spec): an action param can name the widget that draws it (permission-ref picker) #30321 on the same four catalogs: whichever lands second merges main and regenerates. Skills-docs: n/a.
6. Landing: ordinary queue, now: relay pr_ready + automerge_enable, follow to MERGED, landing record on On a zh-CN console the view properties panel's expanded sections (表格选项, 分页, 终端用户控制, 导航与共享) still show about 60 English rows #30267.

domain:ui#1 · os-support-ai · session_01WGufzfE4V9fzZgJLrLDmMC

Re-queued once: the ejection was main's own liveness red (#30367), fixed by #30368 (merged 38717d34a4). No change to this PR; git merge-tree against current main is clean.

domain:ui#1 · os-support-ai · session_01WGufzfE4V9fzZgJLrLDmMC

Contract-review-claim: session_01WGufzfE4V9fzZgJLrLDmMC · head fa3694d · 2026-11-05T11:23Z

Seat correction: this PR touches published schema (packages/spec/src/ui/view.form.ts, packages/spec/src/ui/view.zod.ts), so the clause-② path leg owes an at-tier contract review (CONTRACT_REVIEW_TIER) before it is queued. The seat's ACCEPT of 07:25Z armed auto-merge without one; that was a miss. Auto-merge is off on the current head; needs:contract-review added in the same stroke. The at-tier review of fa3694df is running now. Delta since the ACCEPT head f5483a16: a merge of main 6fa842af1e whose only hand-resolved hunk is the echo-ledger positive control (main's 702 + this branch's 30 = 732); catalogs auto-merged and check-i18n-bundles --write reproduces them byte for byte.

domain:ui#1 · os-support-ai · session_01WGufzfE4V9fzZgJLrLDmMC

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: fa3694dfa37337f8d125d75bcdde5a9d4c7bbcdd
Local-runs: none
Scope: packages/spec/src/ui/view.form.ts, packages/spec/src/ui/view.zod.ts + packages/spec/src/ui/view-form-composite-children.test.ts, packages/spec/src/system/metadata-form-zod-reconciliation.test.ts, packages/spec/src/kernel/repeater-item-titles.test.ts, packages/spec/src/system/i18n-resolver.ts (translateFormField, resolveMetadataFormSchemaTitles), packages/cli/src/utils/i18n-extract.ts (walkFormField), ui/packages/app-shell/src/views/metadata-admin/SchemaForm.tsx (CompositeField, RepeaterField, resolveFieldFace, inferWidget), ui/packages/app-shell/src/views/metadata-admin/view-schema.ts, ui/packages/app-shell/src/views/metadata-admin/metadata-form-i18n.ts, ui/packages/app-shell/src/views/metadata-admin/metadata-form-zh-cn.ts, packages/platform-objects/src/apps/translations/en.metadata-forms.generated.ts, .changeset/30267-view-panel-zh-composite-rows.md

Inputs read: card #30267 (body, triage 6650062714, claim 6650537881, os-dev-report 6652270137), PR #30356 body and 13-file list, the net diff origin/main...fa3694dfa (+1024 / -74), the head's check-runs. The dispatching seat's own notes were not input.

Check-runs on the head as read at the time of this record: Lint & Repo Gates success (so check:generated, check:api-surface, check:authorable-surface, check:i18n, check:i18n-stale-fill, check:issue-citations, check:adr-0087-registration, check:changeset-no-major are green), Governed Surface Queue Guard success, Check Changeset success, Spec property liveness success, Live E2E UI success, Build UI Deps success, Type Check · debt ledger success, Type Check · source gates success, PR-body guards success, Flag docs affected success. Still in_progress: Build Core, Test Core (1-8/8), Test UI (1-16/16), Lint UI, Type Check UI, Type Check · workspace, Type Check · consumer gates, Build & E2E UI. The pins this record relies on (view-form-composite-children.test.ts, the repeater-title guard, the reconciliation ledger, view-composite-children.test.ts, the ui i18n group) are answered by Test Core / Test UI, which have not concluded; this verdict is on the tree, and the landing waits for those contexts to read success.

① Derived judgments

1. Accept-set: unchanged — right. No authorable key, value or metadata type is added, removed or narrowed. view.zod.ts adds .meta({ title }) to the six properties of UserFilterFieldSchema (view.zod.ts L2017-2051); a title is JSON-Schema presentation, not an accept-set change, and matches the standing pattern on ViewTabSchema and ListColumnSchema. .meta() clones in zod 4, so I18nLabelSchema.optional().describe().meta() does not mutate the shared I18nLabelSchema (same spelling as ViewTabSchema.label).
2. Public surface: no export change — right. viewForm is an existing export whose runtime value changes shape; its declared type is FormViewParsed (defineForm, view.zod.ts L7991) and is unchanged, and the api-surface snapshot records existence, not value. No committed generated artifact carries schema titles (a tree-wide grep for an existing title, Primary Link, hits only the two sources and the en catalog), so nothing under authorable-surface/, json-schema.manifest/ or api-surface/ went stale; Lint & Repo Gates is green on the head and agrees.
3. The panel stops offering navigation.view and sharing.type — right, and not a capability removal. Both are retiredKey() tombstones (view.zod.ts L2961 and L1875); the schema-derived child list rendered them as editable rows, which is the false-compliant UI half the form already removed for addRecord.mode / formView ([Decision] A list view's addRecord defaults (enabled true, position bottom, mode inline) are not what the renderer does: enforce the spec, or make the spec say what renders (objectui#13099) #24692). A stored value is carried through a panel save untouched: CompositeField writes { ...obj, [spec.field]: v } (SchemaForm.tsx L2730), and the parse already refused the key before this PR.
4. New translation keys are derived, not hand-listed — right. walkFormField (i18n-extract.ts L2512-2528) recurses field.fields with dot-path accumulation and humanizes a missing label, so every declared child becomes metadataForms.view.fields['parent.child'] (and the userFilters.fields.ROW keys three deep); the en catalog diff matches that derivation row for row, navigation.mode with a label and no hint.
5. userFilters declares exactly the object-view arm's live keys — right. Studio renders ViewSchema.properties.list (view-schema.ts getListVariantSchema), which is ObjectListViewSchema (view.zod.ts L5700-5705) whose userFilters is ObjectUserFiltersSchema = { element, fields } (L5623-5652). The element hint copied is that arm's description, byte for byte. The reconciliation walk resolves the view union across arms and so sees the page-shaped tabs / showAllRecords / allowAddTab; the three ledger rows are the right instrument (zod-only direction is ledgerable with a reason), and the reason given is true of the tree.
6. Row component changes from the auto-inferred master-detail widget to RepeaterField's grid — right, and the reason the titles alone would not have done. Before: a composite with no declared children got derivePropertyNames(schema) and the array-of-object child fell to inferWidget → 'master-detail' (SchemaForm.tsx L517), a per-cell table whose heads are items.properties[k].title ?? humanizeKey(k); the console does not run resolveMetadataFormSchemaTitles on this bundled form, so those heads could only ever be English. After: type: 'repeater' short-circuits resolveFieldFace (L839) before any widget lookup, widget: 'grid' selects the table layout (RepeaterField useGrid), and the heads are the declared labels (s.label || prettify(s.field)), which the overlay translates. required: true on field mirrors field: z.string() (required in the item schema) and renders as the header marker plus cell aria-required. 'grid' is a free widget string on FormFieldSchema with no spec registry to register in; the ui's own grid-naming tests already exercise widget: 'grid' on repeaters.
7. The server path serves the same rows — right. translateFormField (i18n-resolver.ts L5491-5538) prefers a declared fields array and recurses with the same dot paths; synthesis from bundle children runs only when none is declared. So /meta/types serves the seven composites with their declared children and the platform zh-CN leaves, the same rows the console overlay gives.
8. Serial constraint with feat(spec): an action param can name the widget that draws it (permission-ref picker) #30321 — cleared. Its merge commit c7d1367a is an ancestor of this head (merged 10:04Z, head is a merge of origin/main), and check:i18n inside the green Lint & Repo Gates reads the four catalogs in sync.

② Semver level

Changeset .changeset/30267-view-panel-zh-composite-rows.md: @objectstack/spec patch, @objectstack/platform-objects patch, @object-ui/app-shell patch — the three packages the diff moves, each named. Body carries Clause-②: no and Metadata-protocol: none, line-initial, matching the PR body's two lines. Judgment: correct. Nothing an author can write changed (a form layout, hint text, catalog rows and a presentation title are not protocol; the two tombstones were already refused), so none and patch are the level the rule gives; no narrowing arm, so no BREAKING banner or ADR-0087 marker is owed. Check Changeset success; the changeset gates inside Lint & Repo Gates success.
Clause-②: no

③ Boundary flags

• open_questions: none declared — nothing to answer.
• Out-of-scope (a), appearance.allowedVisualizations option chips still English (9 rows left live): correctly left out — the extractor emits label / helpText / placeholder only (i18n-extract.ts L2520-2522) and no catalog channel exists for a form field's option labels, so fixing it here would be a new channel, not this card. It is a reproducible defect with a named location, so under Prime Directive chore: version packages #10 it is a card, not a note: escalated to the seat to file (the report records it with dedupe words; no issue number is cited in the tree).
• Out-of-scope (seat note), the read-only package's table offering an add control: observation only, no write reproduced; stays a note.
• "File surface beyond the claim" (view.zod.ts six titles, two ledger tests, ja-JP / es-ES catalogs): all within the dispatch's stop conditions — no governed path hit (Governed Surface Queue Guard success, file list has none), Metadata-protocol: none holds (①.1), and the catalogs are regenerated output the echo ledgers require, not hand-edited.
• Dispatch's Step 1 seam reading (does the extractor already walk declared children?) was measured and reported (reading a); the tree agrees (①.4).
• PR body says the catalogs' "provenance companions lose rows"; no such file is in the file list or the tree (packages/platform-objects/src/apps/translations/ holds the four catalogs and tests only). Body inaccuracy, no tree effect; not reviewed.

④ Design judgment

packages/spec/src/ui/view.form.ts — against view.zod.ts on this head and the zh-CN Studio panel it is accepted against.

• Each declared child list equals the schema's live keys, checked by hand against the head: selection {type}; pagination {pageSize, pageSizeOptions}; userFilters {element, fields} on the object arm (①.5); appearance {showDescription, allowedVisualizations}; userActions all eleven (sort, search, filter, refresh, rowHeight, group, addRecordForm, editInline, hideFields, rowColor, buttons); addRecord {enabled, position}; navigation {mode, preventNavigation, openNewTab, size, width}; sharing {lockedBy}. Every declared hint is the property's .describe() text byte for byte (the long pageSize, editInline and hideFields strings included); navigation.mode declares none because NavigationModeSchema is a bare enumWithRetiredValues with no .describe() and the property adds none (view.zod.ts L2904-2909, L2957), so an English console reads what it read before. The top-level rows that gained a hint copy the ListViewShapeSchema descriptions (resizable L3468, compactToolbar L3469, rowHeight L3526, selection L3472, pagination L3478, addRecord L3677, showRecordCount L3680, navigation L3475, sharing L3509 — the colon form, not ViewSharingSchema's own dash form).
• The cost of declaring (a key added to a block tomorrow silently leaving the panel) is paid: view-form-composite-children.test.ts holds each list equal to the live keys and each hint equal to the description, deriving the schema the way view-schema.ts does (z.toJSONSchema(ViewSchema, { io: 'input' }).properties.list); the repeater guard now derives view:userFilters.fields as a carrier with all six row properties titled and its LEDGER still empty; the reconciliation walk gets three reasoned omit rows instead of a silent pass.
• Break attempts: a stored navigation.view survives a panel save (①.3); a page-shaped userFilters cannot reach this form (the form is laid out for the object arm, and the page list has its own inspector); the options column inside the grid is an array of objects and renders as a nested object-rows repeater in a cell — the same shape the master-detail cell had, so no new hole; the catalog overlay in metadata-form-zh-cn.ts names every child of every declared composite (checked row by row), so the all-or-none composite rule cannot bite.
• The header comment cites the card number in a code comment, which this repo's code comments do throughout ([#24692], [#20301]); check:issue-citations is inside the green Lint & Repo Gates.
• should-fix (low; pre-existing wording the PR leaves beside a child that now contradicts it): the userFilters composite's own hint still reads "element style (dropdown / tabs / toggle) + exposed fields or tab presets" while its new element child says "tabs" is page-only — use listViews, and the object arm refuses tabs (ObjectUserFiltersSchema, L5623). The zh-CN overlay copies the same sentence. One row's text; a follow-up edit, not a blocker.
• Boundary, not a finding: the type-specific composites (kanban, calendar, gantt, gallery, timeline, chart) stay bare and so stay on the schema-derived, untranslatable path; the card names the four shared sections only.

packages/spec/src/ui/view.zod.ts — against the repeater-title guard (kernel/repeater-item-titles.test.ts) and its first consumer, the grid head.

• The six titles are exactly what the master-detail table printed from humanizeKey (Field, Label, Type, Options, Show Count, Default Values), so the English column heads are unchanged; view.form.ts repeats them as row labels, and the composite-children test holds the two equal, so they cannot drift. The guard requires every row property of an enumerated repeater to carry a title, and the schema now does; no LEDGER entry was added.
• The doc comment states the mechanism correctly (the title is the English head; the form's label repeats it so the extractor emits a key per column) — the same note columns carries.
• Break attempts: the titles ride both io: 'input' and 'output' derivations identically; UserFilterFieldSchema is also the item schema under the page-shaped UserFiltersSchema, where the titles are harmless. No committed artifact reads them (①.2). Nothing found.

must-fix: none.

Implemented-by: claude/project-thread-nq73a8
Reviewed-by: session_01WGufzfE4V9fzZgJLrLDmMC

VERDICT: PASS

domain:ui#1 · os-support-ai · session_01WGufzfE4V9fzZgJLrLDmMC

席位核对 · ACCEPT · head fa3694dfa3 · 2026-11-05T11:37Z

1. Shape: unchanged from the ACCEPT on f5483a169f (comment 6652294698), plus one merge of main 6fa842af1e. check-governed-merges --pr 30356: NOT governed; size under 3000.
2. Read by the seat (delta): the net diff against main differs from the old head's only in object-lifecycle-panel-echo-decisions.test.ts: main's positive control 701 → 702 (spec: an action param can name the widget its picker draws (permission-ref), so Create User asks for a permission set by picker (#30117 slice 1) #30259) plus this branch's thirty rows = 732. Catalogs auto-merged; the dev reports check-i18n-bundles --write on the merged tree reproduces them byte for byte.
3. Contract review: owed by the clause-② path leg (packages/spec/src/ui/view.form.ts, view.zod.ts) and missed at the first ACCEPT. At-tier record on this head: comment 6656995702, Served-tier: CONTRACT_REVIEW_TIER, PASS, no must-fix. needs:contract-review removed.
4. Accepted deviations: none new. The reviewer's one should-fix (the userFilters composite hint still lists "tabs" though its new element child says tabs is page-only) is pre-existing wording and goes to a follow-up row in the seat's hand-off, not this PR.
5. Evidence: dev's merged-tree runs: build, spec / platform-objects / ui pins, check:generated, dispatch-gates 84/84 exit 0 with --ran clean. Check-runs on fa3694df still running at this record; the seat arms only after every check reads success or an expected skip.
6. Landing: ordinary queue once CI is green: relay automerge_enable, follow to MERGED, landing record on On a zh-CN console the view properties panel's expanded sections (表格选项, 分页, 终端用户控制, 导航与共享) still show about 60 English rows #30267.