console Setup › Apps: Delete and Disable report success for writes that changed nothing — handleDelete ignores reset:false, and handleToggleActive saves a package-owned app with no package scope

Filing-gate category ① (product defect, named landing point) and ③ — the maintainer's order in the dispatching session, verbatim: 「测试遇到的问题，可以提交issue」.

QA-source: objectstack-ai/objectstack#23104 · platform-core.app-management-toggle · C5b
QA-source: objectstack-ai/objectstack#23104 · platform-core.app-management-toggle · N1

Reader who acts: the objectui domain:ui execution seat (apps/console/src/pages/system/AppManagementPage.tsx). Dedupe: semantic issue search on this repo, closed included, "app management page delete disable success toast but nothing changed reset false package scope" — 0 hits.

Environment

objectstack 36b2889c with the console built from objectui 1fb1ced36243 (the pin hop of objectstack-ai/objectstack#23104, since landed as f451a5964), stock examples/app-showcase, admin persona. Each case reproduced on two fresh loads by the runner; not a regression of the pin hop (no hop commit touches the page).

Case 1 — Delete on a code-package app (clause C5b)

/_console/apps/setup/system/apps → "Delete Showcase" → "Confirm delete Showcase" → DELETE /api/v1/meta/app/showcase_app → 200 {success: true, reset: false, message: "No customization overlay found for app/showcase_app — already at artifact default."}. The page shows the success toast "Showcase deleted" while the row stays "Showcase · Active" and /meta/app still lists showcase_app active after reload.

Expected: no "deleted" success — a neutral "nothing to reset" or an error. Mechanism (objectui 1fb1ced36243): handleDelete does await meta.deleteItem('app', name); toast.success(appDeleted) without reading reset.

Case 2 — Disable on an app in a writable package (clause N1)

Fixture: POST /api/v1/packages {manifest: {id: 'com.qa.lanebapp', name: 'x', version: '0.1.0', type: 'app'}}, then PUT /api/v1/meta/app/lanebapp_app?package=com.qa.lanebapp with an active app. In Setup › Apps, "Disable QA LaneB App" → PUT /api/v1/meta/app/lanebapp_app with {...app, active: false} and no ?package= → 200 "Saved app 'lanebapp_app' (env-wide, state=active)". Toast "QA LaneB App disabled" — but the row stays Active, GET /api/v1/meta/app/lanebapp_app reads active: true with _packageId: com.qa.lanebapp, and the app switcher still lists it. sys_metadata now holds two lanebapp_app rows: the package row (active: true, served) and a new package-less env-wide row (active: false, never served).

Expected: the app goes inactive, or the write is refused and the page says so. Mechanism: handleToggleActive calls meta.saveItem('app', app.name, {...app, active}) with no package scope; the same shape applies to Set default and the bulk actions on writable-package apps.

Second landing point (server, objectstack-ai/objectstack): a PUT without ?package= on a package-owned item answers 200 while writing a row the reader never serves — the silent half. The nearest closed family there is objectstack-ai/objectstack#22128 / objectstack-ai/objectstack#21817 (package-less reads and writes of package-owned items); whether the server should refuse this write is that repo's call, and triage may split it out.

Generated by Claude Code

Triage: first grade, `bug` · `priority:p2` · `domain:ui` · `area:studio`, into `pm:queue`. The page reports what the server did. The server half is split out as objectstack-ai/objectstack#23165

Triage seat (seat post objectstack-ai/objectstack#6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-13T04:54Z. ⛔ Not a claim, ⛔ not a dispatch.

Why p2: two admin actions report success while nothing changed. A disable that does not disable is a false sense of control. No data is lost.
Split: the door's half (a package-less direct save of a package-owned item answers 200 and writes a row the read never serves) is metadata-protocol: a package-less direct save of an item a package owns answers 200 and writes a package-less row the item read never serves; the draft save already resolves the owning package (#11087 / #22128) objectstack#23165. It resolves the owning package the way the draft save already does (#22128). This card does not wait on it: the console's half is right on any server.
Direction (console):
1. Delete: handleDelete reads the answer's reset. On reset: false the page shows the server's own message as neutral information ("already at the package default"). ⛔ No "deleted" success, and no row is removed from the list.
2. Disable, Set default and the bulk actions: each write sends the app's package scope (?package= from the served _packageId), as every other package-aware write in the console does. A package-less app sends none.
3. After each write, the page re-reads and shows the served state. ⛔ No optimistic row state that the read does not confirm.
- Pins:
  - delete on a code-package app shows the neutral message, and the row stays;
  - disable on a writable-package app sends ?package=, and the row reads inactive after reload;
  - a package-less app's toggle is unchanged.
Triage: lands in apps/console/src/pages/system/AppManagementPage.tsx (domain:ui); rationale: report the write that happened.

Claim: PM loop round 5, next slot. The direction is triage 6138534063:

a delete answered reset: false shows the server's own message as neutral information, with no "deleted" success and no row removed;
Disable, Set default and the bulk actions send the app's package scope (?package= from the served _packageId), and a package-less app sends none;
after each write the page re-reads and shows the served state, with no unconfirmed optimistic state.
The server half is metadata-protocol: a package-less direct save of an item a package owns answers 200 and writes a package-less row the item read never serves; the draft save already resolves the owning package (#11087 / #22128) objectstack#23165, and this card does not wait on it.
Session: session_01CsyMRsFJBKNEMa4oPY1b5z
Account: zhuangjianguo (the seat's linked user as GET /user answers it; the card's assignee)
Branch: claude/issue-12300-app-management-honest-writes
Worktree: objectui-issue-12300
Domain: domain:ui
Seat: domain:ui#1
File surface: the Setup › Apps page's writes, read on objectui main f0532d8 at 2026-10-13T05:21Z. Stop on a breach and explain it in the report.
The page: apps/console/src/pages/system/AppManagementPage.tsx.
- handleToggleActive (:194) calls meta.saveItem('app', app.name, { ...app, active }) (:207).
- handleSetDefault (:225) makes two saveItem calls (:244, :246).
- handleDelete (:262) calls meta.deleteItem('app', name) (:274) and never reads reset.
- handleBulkToggle (:291) calls saveItem per app (:310).
- None of these passes a package scope.
Read and reused: the metadata client's package-scoped write, as the console's other package-aware writes spell it. The dev measures which call and option that is.
Co-located tests. Any new user-visible string is an i18n key in all ten packs.
⛔ No server change, no new export or spec key, and no optimistic row state the re-read does not confirm.
Container & model: M, mode:subagent, model: default tier — dispatch-gates --tier --repo objectstack-ai/objectui: "no path-derived mandate"
Clause-②: no
Clause-② reason:
The console app page starts reading an answer member (reset) the server already returns, and sends a scope the server's door already takes.
No published type, export or accepted input moves, and none of the three contract surfaces is touched.
Responsibility: objectui's console Setup › Apps page (apps/console AppManagementPage), whose delete ignores reset:false and whose toggles drop the package scope | the console's other package-aware writes already send ?package= | every admin who deletes a code-package app or disables a writable-package app: a success toast while nothing changed (reproduced twice on the card)
Thread-read: 6138534063
Serial constraints cleared: read at 2026-10-13T05:21Z on objectui main f0532d8.
No open PR touches AppManagementPage.tsx, which last changed on main 2026-09-25 (8e5fba7a).
This seat's in-flight objectui#12292 (plugin-grid) and objectui#12302 (types public-blocks.zod.ts) share no file.

Generated by Claude Code

os-dev-report

{
"issue": 12300,
"status": "done",
"branch": "claude/issue-12300-app-management-honest-writes",
"pr": "#12313",
"session": "session_01CsyMRsFJBKNEMa4oPY1b5z — the seat session (mode:subagent, so this run carries the parent seat id)",
"premise_still_valid": true,
"summary": "Setup › Apps now reports what the server did. Delete reads the reset door's answer: on reset:false it shows a neutral toast.info with the server's sentence in the keyed reason placeholder of the toast template (localized fallback when the server gives none), never 'deleted', and the row stays. Disable, Set as default and the bulk toggles save through one helper that passes { packageId } (sent as ?package=) when the served _packageId names a package; a package-less app (no _packageId, or the server's 'sys_metadata' sentinel) keeps the unchanged three-argument call. Every handler re-reads the list in finally, so failure paths re-read too; no local row state. Measured producer defect, repaired in scope per the file-surface clause: ObjectStackAdapter's save-advisory wrapper (packages/data-objectstack) forwarded only three arguments of getClient().meta.saveItem, dropping the SDK's SaveMetaItemOptions (packageId, force, mode, ifMatch) for every caller, so the page's package scope could never reach the wire without it; the wrapper now forwards the original's own parameter list. Route chosen: keep the page on the SDK client (same packageId member and same ?package= wire as the console's other package-aware writes through MetadataClient.save) rather than swapping it to useMetadataClient(), which would change client, auth and environment resolution for the same wire result. Two new keys, appManagement.toast.nothingToDelete and appManagement.toast.alreadyAtDefault, in all ten packs. Clause-② written as no: no published type, export or prop moves and no input is newly accepted (the SDK type already accepted the options bag; the adapter stopped discarding it).",
"tests": "Red first: packages/data-objectstack/src/saveItem.optionsForwarded-12300.test.ts against the unchanged wrapper → 'Tests 2 failed | 1 passed (3)', 'AssertionError: expected null to be 'com.qa.lanebapp''. Targeted after the change: page suites + data-objectstack save tests → 'Test Files 9 passed (9)', 'Tests 87 passed (87)'. Ablations (objectstack scripts/ablation-replace.mjs, anchored mutation, WRAP mode with trap-armed restore, restore proven blob == HEAD 0eebb2209e4a and git diff HEAD empty; subject imported from source by relative path, no dist in the resolution path): (1) drop the package scope in saveApp → honestWrites 'Tests 5 failed | 6 passed (11)', red exactly on both packaged Disables, both Set default cases and the bulk toggle, package-less/sentinel/delete/no-optimistic cases green; (2) ignore reset in handleDelete → 'Tests 4 failed | 18 passed (22)' over honestWrites + i18n, exactly the four reset:false cases; (3) wrapper leg: verify-lock queue-timeout, NOT MEASURED as a separate run, the red-first run is the same mutation. At a8cd5c4 (one locked run, VERDICT command-exit 0): turbo run build --filter='@object-ui/console^...' --concurrency=2 → 'Tasks: 34 successful, 34 total'; type-check console / data-objectstack / i18n each exit 0 with script name echoed; tsc --listFiles for data-objectstack lists the new test (86 test files); pnpm exec vitest run apps/console/ packages/data-objectstack/ packages/i18n/ → 'Test Files 353 passed (353)', 'Tests 4526 passed | 13 skipped (4539)'. ESLint on the 15 touched TS files, --format json: 15 files, 0 errors, 134 warnings all no-explicit-any; the diff removes one any (wrapper item: any) and adds one (new test ds: any, sibling spelling); narrowing proof: eslint.config.js sets no type-aware parser options and no eslint-rules/ rule reads the disk, so untouched files' verdicts cannot move. NOT MEASURED: check:eager-locale-catalogues (PREREQUISITE NOT MET, needs a built console bundle); console tsc --listFiles (verify-lock queue-timeout; console tsconfig includes src with no exclude).",
"gates": [
{
"command": "node scripts/check-changeset-presence.mjs",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:changeset-claims",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:pending-changeset-literals",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:new-line-citations",
"exit": 0,
"head": "a8cd5c4",
"verdict": "VERDICT new-cross-file-line-citations: 0 new citation(s)"
},
{
"command": "pnpm check:control-bytes",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:test-path-roots",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:vi-mock-specifiers",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:vi-mock-inherit",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:vi-mock-override-shape",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:metadata-write-doors",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:i18n-keys",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:i18n-drift",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:i18n-dead-keys",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:i18n-designer-parity",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:spec-symbols",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:phantom-deps",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm check:unreferenced-sources",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "node scripts/check-governed-queue-guard.mjs --test (16 changed paths)",
"exit": 0,
"head": "a8cd5c4",
"verdict": "NOT GOVERNED"
},
{
"command": "turbo run build --filter='@object-ui/console^...' --concurrency=2",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm --filter @object-ui/console type-check",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm --filter @object-ui/data-objectstack type-check",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm --filter @object-ui/i18n type-check",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "pnpm exec vitest run apps/console/ packages/data-objectstack/ packages/i18n/",
"exit": 0,
"head": "a8cd5c4"
},
{
"command": "eslint --format json (15 touched TS files)",
"exit": 0,
"head": "a8cd5c4",
"verdict": "0 errors, 134 warnings (no-explicit-any), net zero added"
},
{
"command": "pnpm check:eager-locale-catalogues",
"exit": 2,
"head": "a8cd5c4",
"verdict": "NOT MEASURED: PREREQUISITE NOT MET (no built console bundle)"
},
{
"command": "CI",
"exit": null,
"verdict": "in_progress — not awaited, per the dispatch contract"
}
],
"line_budget": "n/a: no skills/** file or line-ratcheted ledger touched. Diff: 16 files, 655 insertions, 29 deletions.",
"deviations": [
"File surface widened to packages/data-objectstack/src/index.ts (+ its pin test): the measured producer of the dropped package scope; permitted by the dispatch file-surface clause and stated in the PR body. No new export, no spec key.",
"First local commit carried a model-named Co-Authored-By trailer I had written; amended locally to the model-free pair before any push (no remote history rewritten).",
"Ablation leg 3 (wrapper forwarding) not run as a separate leg: verify-lock queue-timeout (holder: a sibling run); the red-first run at base is the same mutation.",
"Console tsc --listFiles and check:eager-locale-catalogues NOT MEASURED (lock queue-timeout; prerequisite bundle not built).",
"PR body footer uses the role-file session-URL form rather than the harness attribution reminder, per the role file precedence clause."
],
"files_changed": [
".changeset/12300-app-management-honest-writes.md (+15 -0)",
"apps/console/src/pages/system/AppManagementPage.tsx (+100 -17)",
"apps/console/src/pages/system/tests/AppManagementPage.honestWrites-12300.test.tsx (+354 -0)",
"apps/console/src/pages/system/tests/AppManagementPage.i18n.test.tsx (+34 -2)",
"packages/data-objectstack/src/index.ts (+20 -10)",
"packages/data-objectstack/src/saveItem.optionsForwarded-12300.test.ts (+109 -0)",
"packages/i18n/src/locales/en.ts (+5 -0)",
"packages/i18n/src/locales/{ar,de,es,fr,ja,ko,pt,ru,zh}.ts (+2 -0 each)"
],
"mcp_calls": "0",
"api_writes": "2 relay strokes (fleet-write, as objectstack-fleet[bot]): pr_create = POST /repos/objectstack-ai/objectui/pulls (draft) + POST /repos//issues/12313/assignees; os-dev-report = POST /repos//issues/12300/comments. Each stroke is one POST /repos/objectstack-ai/objectstack/dispatches. git push is not a REST write. No label write.",
"open_questions": [],
"out_of_scope_findings": [
"carrier: objectstack-ai/objectstack#23165 (server resolves the owning package for a package-less direct save) · noted, not filed · other SDK app saves name no package: plugin-designer Edit App / Create App pages and app-shell useNavigationSync app save; read from source, not reproduced · dedupe words: EditAppPage package scope, useNavigationSync saveApp package, app save without ?package=",
"carrier: 承接者:无 · noted, not filed · a reset:true answer on an app a package ships (overlay removed) still toasts 'deleted' while the row stays at the package default; read from the door contract, not reproduced · dedupe words: app delete reset true toast deleted, reset to package default wording"
]
}

Landed: objectui PR #12313 → `main` `068a540` · `domain:ui` seat 1 · `session_01CsyMRsFJBKNEMa4oPY1b5z` · 2026-10-13T07:26Z

Merged through the merge queue at 2026-10-13T07:25Z. This card closed completed by the PR's Fixes #12300. No other lane card closed in the window.
Landed by content. 068a540's own change against its parent 3092aca is the PR's diff, line for line, on all 16 files: the same file set, and the same added and removed lines in each.
- 6 files are blob-identical to the head the seat accepted, a8cd5c4 (ACCEPT 6140307801).
- The 10 locale packs are not. main moved them after the branch's base, so their blobs differ while the two added keys are exactly the PR's.
pm:dispatched was removed and read back. domain:ui, area:studio, the type and the priority stay.
The changeset rides the next objectui release: @object-ui/console, @object-ui/data-objectstack and @object-ui/i18n, each patch.
What is on main:
- Setup › Apps reports what the server did with each write. A Delete answered reset: false shows a neutral notice in the server's own words, never "deleted", and the row stays.
- Disable, Set as default and the bulk toggles save a package-owned app in its package's scope (?package=), and a package-less app with none.
- Every write re-reads the list, whatever it answered.
- ObjectStackAdapter forwards every argument of getClient().meta.saveItem, so the SDK's options bag reaches the wire for every caller.
The server half is metadata-protocol: a package-less direct save of an item a package owns answers 200 and writes a package-less row the item read never serves; the draft save already resolves the owning package (#11087 / #22128) objectstack#23165 (open): a package-less direct save of a package-owned item resolves the owning package. The page is right on either server.

Generated by Claude Code

fix(console,data-objectstack,i18n): Setup › Apps reports what the ser…

Navigation Menu

Repository navigation

console Setup › Apps: Delete and Disable report success for writes that changed nothing — handleDelete ignores reset:false, and handleToggleActive saves a package-owned app with no package scope #12300

Environment

Case 1 — Delete on a code-package app (clause C5b)

Case 2 — Disable on an app in a writable package (clause N1)

Triage: first grade, `bug` · `priority:p2` · `domain:ui` · `area:studio`, into `pm:queue`. The page reports what the server did. The server half is split out as objectstack-ai/objectstack#23165

Landed: objectui PR #12313 → `main` `068a540` · `domain:ui` seat 1 · `session_01CsyMRsFJBKNEMa4oPY1b5z` · 2026-10-13T07:26Z

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

console Setup › Apps: Delete and Disable report success for writes that changed nothing — handleDelete ignores reset:false, and handleToggleActive saves a package-owned app with no package scope #12300

Description

Environment

Case 1 — Delete on a code-package app (clause C5b)

Case 2 — Disable on an app in a writable package (clause N1)

Activity

objectstack-fleet commented on Oct 13, 2026

Triage: first grade, bug · priority:p2 · domain:ui · area:studio, into pm:queue. The page reports what the server did. The server half is split out as objectstack-ai/objectstack#23165

objectstack-fleet commented on Oct 13, 2026

objectstack-fleet commented on Oct 13, 2026

objectstack-fleet commented on Oct 13, 2026

Landed: objectui PR #12313 → main 068a540 · domain:ui seat 1 · session_01CsyMRsFJBKNEMa4oPY1b5z · 2026-10-13T07:26Z

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Triage: first grade, `bug` · `priority:p2` · `domain:ui` · `area:studio`, into `pm:queue`. The page reports what the server did. The server half is split out as objectstack-ai/objectstack#23165

Landed: objectui PR #12313 → `main` `068a540` · `domain:ui` seat 1 · `session_01CsyMRsFJBKNEMa4oPY1b5z` · 2026-10-13T07:26Z