fix(platform-objects): decide the action body/ai en-echoes per leaf, and close the one-schema-two-forms blind spot (#19509)

Part of #19403

Clause-②: no

## What this is

Round 5 of this card. One panel family, decided **leaf by leaf**. The
deliverable is a per-leaf judgement with its reason recorded, not twelve
translations; every leaf below was decided on its own evidence, and the
verdicts with their reasons live in a ledger the suite reads
(`action-body-panel-echo-decisions.test.ts`), not only in this body.

**The family: the five children of `action.fields.body` plus
`action.fields.ai`** — the `body` composite on the action metadata form,
and the AI-exposure block one section over. Both string leaves of each
key are decided.

Not `Fixes` — this is one family of the card's population, and the card
outlives this round. **Four families remain** (23 label keys / 39
decidable sibling leaves), tabled at the foot of this body.

## The tie at the top of round 5's table, and how it was broken

Round 4 fixed the sizing rule as **largest by LEAVES**. Re-derived on
this branch's base `4045781fa`, two rows tie at 12:

| family | keys | leaves |
|:--|--:|--:|
| **`action.fields.body.*` + `action.fields.ai`** — what this round took
| 6 | **12** |
| six bare type-display pairs
(`seed`·`mapping`·`api`·`doc`·`book`·`capability`) | 6 | **12** |
| `object.fields.enable.*` (+`validations`) | 9 | 11 |
| `hook.fields.retryPolicy.*` + `body.memoryMb` + `timeoutMs` | 5 | 10 |
| `report.fields.drilldown` + `runtimeFilter` +
`sections.dataset_binding` | 3 | 6 |

The tie-break is written into the ledger's header, four reasons, none of
them preference:

1. **The instrument survives only one of them.** The card's second
property is a population DERIVED from `en` with a dark control. `action`
is one panel: one derivation over one metadata type, and the dark
control has something to exclude (it asserts `retryPolicy`,
`valueDomain`, `drilldown`, `enable` and the `hook` section headings are
*not* action leaves). The six type-display pairs are six unrelated types
with no panel around them — the derivation degenerates into six
one-entry lookups and the control has nothing to be dark about.
2. **Evidence density forces per-leaf work.** Four of the six keys have
an authored twin at a byte-identical `en` one metadata type over; one
has a twin that is ITSELF an echo; one has no twin at all.
3. **The #19430 trap is live here, on three of the twelve leaves**, and
is discharged at the schema below rather than deferred.
4. **Leaving it costs more.** A bare type-display pair has no siblings,
so deferring it leaves nothing half-done. Deferring this one leaves the
action panel's Behavior and Advanced sections reading half Chinese and
half English around a single composite.

## The census — this branch's own reading, base `4045781fa`

| reading | base | this branch |
|:--|--:|--:|
| `en` string leaves / `.label` leaves | 893 / 538 | 893 / 538 — same
population |
| label keys echoing in ALL THREE locales | **29** | **23** |
| ⇒ as `.label` leaves | 87 | 69 |
| ⇒ as decidable sibling leaves (label + its `helpText`/`description`) |
51 | 39 |
| POSITIVE CONTROL — labels genuinely translated (`zh-CN`) | 509 |
**515** |
| POSITIVE CONTROL (`ja-JP` · `es-ES`) | 493 · 493 | **499 · 499** |

Echoes fall 6 while the control rises 6 in each locale, same population,
same run. A parser matching too broadly cannot produce that agreement.
**87 and 69 count `.label` leaves; 51 and 39 count decidable sibling
leaves** — two questions, two right answers, and this body states which
it means at every number.

## The evidence, per key — and the one key that had none

`actionForm` and `hookForm` declare the **same composite over the same
schema**: `HookBodySchema` (`packages/spec/src/data/hook-body.zod.ts`),
five children, identical field names, byte-identical `helpText` sources.
So the precedent is not a same-string match found elsewhere in the
catalog — it is the other rendering of this very schema key.

| key | evidence | verdict |
|:--|:--|:--|
| `body.language` | authored twin, byte-identical `en`, **and it names
both tokens** | translate ×3 |
| `body.source` | authored twin; the bare word `Source` has three
authored senses in this catalog and the twin picks the code one |
translate ×3 |
| `body.capabilities` | authored twin, byte-identical `en`, keeps all
four enum members | translate ×3 |
| `body.timeoutMs` | authored twin; the `en` is the extractor's humanize
of `timeoutMs`, and the twin renders the concept | translate ×3 |
| `body.memoryMb` | ⛔ **NO TWIN — the hook twin is itself an echo in all
three locales.** Composed from the sibling key's authored twin instead,
and the row says so | translate ×3 |
| `ai` | no twin of any kind (`hookForm` declares no `ai`); the authored
**section description one entry up the same panel** names the concept,
the **schema** settles the tokens | translate ×3 |

⭐ **Round 4's lesson, read the other way round.** Round 4 recorded that
a precedent answers only the question it actually contains: its twin
settled the prose and named no token, so the schema had to settle the
tokens. Here the twin settles **both** halves for `language` and
`capabilities` — `hook.fields.body.language.helpText` is authored AND
names `expression` and `js` AND keeps both English. Same rule, opposite
reading: the twin is sufficient *precisely because the question is
inside it*. For `ai.helpText` there is no twin at all and only the
schema answers. Each row says which half its evidence covers.

⭐ **And one leaf shows why a wholesale answer is refused.**
`action.fields.ai.label` reads `Ai` — the extractor's humanize of the
two-letter key. The obvious repair is the case fix `Ai` to `AI`, which
differs from the source in bytes, **passes the echo predicate in every
locale, and tells a zh-CN author exactly as much as the echo did**.
Rejected as a phantom translation; the label takes the concept the
panel's own authored section description already names, with `es-ES`
rendering the acronym `IA` and the other two keeping `AI`, exactly as
that description does.

## The #19430 trap was live on three leaves, and every one was read at
the schema first

`#19430 is not addressed here` and remains open — this is the discipline
it asked for, applied before a word was rendered.

| leaf | tokens named in prose | what the schema says | done |
|:--|:--|:--|:--|
| `body.language.helpText` | `expression`, `js` | the two `z.literal`
discriminators of `HookBodySchema` | kept English |
| `body.capabilities.helpText` | `api.read`, `api.write`, `crypto.uuid`,
`log` | four of the five `HookBodyCapability` `z.enum` members
(`api.transaction` is the fifth and the prose names it not at all) |
kept English |
| `ai.helpText` | `ai.exposed=true`, `ai.description` |
`ActionAiSchema`'s two canonical keys — a `strictObject` that declares
`enabled`/`enable`/`aiEnabled`/`expose`/`visible` as **aliases** of
`exposed`, so a rendered spelling is a spelling the schema refuses |
kept English |

Also kept: `ctx` and `import` (the sandbox binding and the reserved word
`ScriptBodySchema` forbids), and the schema bounds `256` (`.max(256)`)
and `40` (`.min(40)`). All of it is **asserted**, not described — a
machine-token guard reds when any of them stops being carried verbatim,
and ablation C reds it specifically.

## ⭐ The blind spot's FIFTH shape: one schema, two forms, invisible in
OPPOSITE ways

Rounds 1–4 measured `record`, `composite`, a pin green one level **up**
from what it walks, and a pin's own vacuity control passing **to the
side**. This round measured it across two forms.

`repeater-row-properties.test.ts` derives a row property for every child
of a `type: 'repeater'` field. Measured on this base:

| form | covered by that pin | invisible to it | state before this round
|
|:--|--:|--:|:--|
| `actionForm` | **18** (`params.*`) | **5** (`body.*`, a `composite`) |
all 18 authored · all 5 echoing |
| `hookForm` | **0** | **7** (`body.*` + `retryPolicy.*`) | 4 of 5
`body` children authored · `memoryMb` and both `retryPolicy` children
echoing |

⇒ the same composite is invisible to the same pin **in two opposite
ways**. On `action` it is the **lit** vacuity control
`carrying.has('action') === true` that passes — supplied by `params`,
the repeater that was never broken (round 4's shape, reproduced). On
`hook` it is the **dark** control `carrying.has('hook') === false`,
which is **true and correct** — `hookForm` enumerates no repeater at all
— while seven children sit enumerated and outside it. A correct control
and a passing control produce the same green, and neither can be
repaired by deriving harder on one panel.

⭐ **Because the half that matters lives BETWEEN the two derivations.**
Before this round `action.fields.body.*` echoed on 5 of 5 children and
`hook.fields.body.*` on 1 of 5: the same five schema keys, the same five
`en` sources, two different states, and no assertion anywhere that they
should agree. This PR adds one — wherever the `hook` twin is authored,
`action` renders it identically in every locale — with its own lit
control proving it compared real leaves (30 pairs, 6 excluded because
`memoryMb` carries no authored twin in any locale), and the exclusion
set asserted to be exactly `['memoryMb']`. When the `hook` family lands
in a later round, this assertion starts covering `memoryMb` too and reds
if that round renders it differently from this one.

`ablation D` is the one worth reading: it makes `action` disagree with
its authored twin and **only** that assertion reds. Every echo rule
stays green, because the mutated string is not the `en` source.

## The instrument — five independent assertions, proven by four
ablations

Mutation, run and restore inside **one** `ablation-replace.mjs` process
per ablation. Every restore verified: `git diff HEAD` empty and the blob
back to `HEAD`'s, checked independently afterwards as well.

| ablation | what it mutates | reds |
|:--|:--|:--|
| A | a decided leaf reverted to its `en` source in one locale | the
enumerated verdict **and** the derived panel pin — **2**, independently
|
| B | a provenance row re-pointed at a decided leaf | a **third** — the
second witness |
| C | a kept spec key rendered as words | a **fourth** — the
machine-token guard |
| D | the `action` rendering made to disagree with its authored `hook`
twin | a **fifth** — the new cross-panel invariant, and nothing else |

⇒ 2 + 1 + 1 + 1 = **five assertions that fail on five different
triggers**, not five spellings of one. All four dark controls carried
from the earlier rounds are present and fire: the echo predicate flags
all 12 rows when fed `en`; the derived predicate flags all 79 panel
leaves when fed `en`; the provenance lookup is proved to be able to say
"still a fill", matched by **pattern** so a later round cannot red it by
fixing a family; and the machine-token guard's negative uses
`api.transaction` — a **real** `HookBodyCapability` member this prose
deliberately does not name — so a green cannot come from an `includes`
that matches anything.

## ⛔ The silent-loss hazard: values only, measured with a discriminating
control

`*.metadata-forms.generated.ts` is generator-owned but `git check-attr
merge` reads `unspecified`, so it is NOT routed to `merge=os-regen`.
Regenerated with **`pnpm i18n:extract`**, never by hand, and no key was
added or removed:

```
en / zh-CN / ja-JP / es-ES:  base 893 keys | head 893 | added 0 | removed 0
values changed per bundle:   en 0 | zh-CN 12 | ja-JP 12 | es-ES 12   (exactly the decided leaves)
provenance rows:             12 removed per locale, 0 added   (exactly the decided leaves)
NEGATIVE CONTROL (drop one key by hand): removed 1 => the comparator CAN see a 1-key delta
```

⚠️ One measurement worth recording: the anchor for `body.memoryMb`
occurs **twice** in each translated bundle — once under `action`, once
under `hook`, byte-identical — so the edit was scoped to the top-level
`action` block and refused on any count other than one. An unscoped
replacement would have exited 0 having silently translated a leaf
belonging to a family this round does not own.

## The changeset, measured

`@objectstack/platform-objects` has no `private` key and ships `files:
["dist", …]`, and the decided leaves reach `dist` — so `skip-changeset`
would be measurably wrong and a **`patch`** changeset is included. Dist
probe over all three entry points that carry the catalogs (`index.mjs`,
`plugin.mjs`, `metadata-translations/index.mjs`), with controls:

```
zh  内存（MB）  as 内存（MB）   1 1 1      lower-case hex spelling   0 0 0
ja  メモリ（MB） as メモリ（MB）  1 1 1
es  Exposici\xF3n a IA                          3 3 3      lower-case hex spelling   0 0 0
ai.exposed=true kept verbatim                   4 4 4
NEGATIVE CONTROL  raw un-escaped 内存（MB）      0 0 0      raw un-escaped メモリ     0 0 0
NEGATIVE CONTROL  an invented string            0 0 0
```

⇒ the raw un-escaped control reads **0 including for the positive
controls**, so a zero here means "escaped", not "absent", and esbuild's
UPPER-CASE hex is confirmed by its lower-case spelling reading 0.

## Gates

- `pnpm --filter @objectstack/platform-objects test` — **48 files / 690
passed** (47/668 on the base: +1 file, +22 tests); `typecheck` exit 0;
`pnpm check:i18n` exit 0; repo-wide `pnpm lint` exit 0 at `6f249d952`.
- **Gate reconciliation: 60 derived / 60 run green / 0 NOT-MEASURED / 0
UNRUN**, derived with `scripts/pm/dispatch-gates.mjs --repo
objectstack-ai/objectstack` and reconciled with `--ran` carrying every
exit code captured **before any pipe**, so the zero is DERIVED rather
than claimed.
- `check:dual-build-cjs-loads` first exited **3** — PREREQUISITE NOT
MET, 14 packages with no `dist/`. **Discharged, not reported as a 3**:
the closure the gate names was built and the gate re-run clean (104
published require entry points across 67 packages, 620 CJS files
parsed).
- `origin/main` moved three commits (one of them a `packages/spec`
change) while this ran; merged, build state refreshed per AGENTS.md §9,
`check:generated` for spec exit 0, the package suite re-run green, and
the gate derivation re-taken on the merged tree — **byte-identical**.

## Acceptance notes

Everything below is noted, not filed. This round files **zero cards**,
and that is a reading rather than an absence:

- **The known trap was checked, not assumed.**
`action.fields.ai.helpText` is the leaf on this panel that could have
carried #19430 without a precedent to catch it — no twin exists anywhere
in either catalog. It was taken to `ActionAiSchema` in
`packages/spec/src/ui/action.zod.ts` and read there: two canonical keys,
five declared aliases of `exposed`, a `.min(40)` bound. Nothing about it
is a defect in this repo's code; it is a leaf that needed a schema read,
and got one. ⇒ no card.
- **`hook.fields.body.capabilities.label` reads 功能 / 機能 ("feature") for
a value that is a capability TOKEN**, and this round copied that word
rather than improving it, because one schema key must have one rendering
across the two panels that declare it and rewording it is an edit to the
hook family. It is a wording preference on a landed authored string, not
a reproducible defect, not a contract violation and not a
metadata-authoring trap — none of the three classes. **承接者: the round of
this card that takes the `hook` family**, which will hold both panels to
whichever word it picks, because the assertion this PR adds makes
divergence red.
- **Keys echoing in only one or two locales are outside this card's
population by definition** (the card counts the all-three intersection;
its own filing note records 83 · 99 · 99 per locale at filing).
`object.fields.lifecycle.retention.maxAge.label` is one such: 最长保留 in
`zh-CN`, still `Max Age` in `ja-JP` and `es-ES`. Recorded so the next
reader does not mistake the intersection for the whole. **承接者: 无** — no
queued issue covers it and this round does not widen the card to reach
it.
- **A toolchain reading, for whoever runs a closure build next.** `pnpm
--filter PKG build --concurrency=2` forwards `--concurrency=2` into each
package's build script; tsup ignores it, but `@objectstack/cli`'s
shell-script build dies on `sh: 1: Syntax error: word unexpected`. The
working spelling is `pnpm exec turbo run build --concurrency=2
--filter=PKG`. Pre-existing tooling behaviour, already documented in the
agent rules' toolchain traps, reproduced here as a fact rather than
filed. **承接者: 无**.

## What is left — in keys AND leaves, re-measured on this branch

| family | keys | leaves |
|:--|--:|--:|
| six bare type-display pairs
(`seed`·`mapping`·`api`·`doc`·`book`·`capability`) | 6 | **12** |
| `object.fields.enable.*` (+`validations`) | 9 | 11 |
| `hook.fields.retryPolicy.*` + `body.memoryMb` + `timeoutMs` | 5 | 10 |
| `report.fields.drilldown` + `runtimeFilter` +
`sections.dataset_binding` | 3 | 6 |
| **total** | **23** | **39** |

⇒ as `.label` leaves that same remainder is **69**. The tie at the top
is gone: the six type-display pairs are now uniquely largest by leaves.
⚠️ Whoever takes them inherits the warning round 5's order carried —
they are a different shape from every family so far, bare `TYPE.label` +
`TYPE.description` with no panel around them, so the "authored twin one
entry down the same panel" evidence has no analogue there and something
must stand in for it. ⚠️ And the `hook` family now carries a second
obligation: the cross-panel assertion this PR adds means its
`body.memoryMb` rendering must match the one landed here.

---
_Generated by [Claude
Code](https://claude.ai/code/session_01NcPSwnmJHczmTu6FG7NMjE)_

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: huangyiirene

.changeset/19403-action-body-panel-en-echo-decisions.md

@@ -0,0 +1,13 @@
+---
+"@objectstack/platform-objects": patch
+---
+
+The `action` metadata-form panel no longer prints English field names and tooltips to a Chinese, Japanese or Spanish author: six keys — twelve string leaves — were decided leaf by leaf and rendered in `zh-CN`, `ja-JP` and `es-ES` (#19403).
+
+The five children of the `body` composite (`Language`, `Source`, `Capabilities`, `Timeout Ms`, `Memory Mb`) and the `Ai` exposure block read their English source in all three locales, `helpText` included. An en-echo is not automatically a defect, so each leaf carries a recorded reason in `action-body-panel-echo-decisions.test.ts` rather than a bulk rewrite — and four of the six keys had an **authored twin at the same schema key**: `hookForm` and `actionForm` declare the same composite over `HookBodySchema`, rendered on the hook panel and echoing here, byte-identical in `en`. `memoryMb` echoes on both panels, so that row records that it has no twin evidence and composes from the sibling key instead.
+
+- **Machine tokens stay English, checked at the schema before a word was rendered.** `body.language.helpText` names `expression` and `js` — the two `z.literal` discriminators of `HookBodySchema`. `body.capabilities.helpText` names `api.read`, `api.write`, `crypto.uuid` and `log` — four of the five `HookBodyCapability` enum members. `ai.helpText` names `ai.exposed=true` and `ai.description`, the two canonical keys of `ActionAiSchema`, a `strictObject` that declares five aliases of `exposed`. Rendering any of them would tell an author in their own language to write a value the schema refuses. All kept, alongside `import`, `ctx` and the schema bounds `256` and `40`.
+- **Values only.** No key was added or removed: each translated bundle changes 12 values, the full flattened key sets are identical on all four bundles (893 keys, 0 added, 0 removed), and `en` is untouched. Regenerated with `pnpm i18n:extract`, which dropped the 12 provenance rows per locale that recorded these leaves as unauthored extractor fills and added none.
+- **The panel is now pinned by a derived population**, and a new cross-panel assertion holds the five shared `HookBodySchema` children to ONE rendering across both forms that declare them — a disagreement no single-panel pin can see, because it lives between two derivations.
+
+Measured on the metadata-form catalogs: label keys echoing in all three locales fall **29 → 23** while the genuinely-translated control rises **509 → 515** (`zh-CN`) and **493 → 499** (`ja-JP`, `es-ES`), same population, same run.

packages/platform-objects/src/apps/translations/action-body-panel-echo-decisions.test.ts

@@ -1239,24 +1239,24 @@ export const esESMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "Una expresión L1 o un body JS L2 en sandbox"
       },
       "body.language": {
-        label: "Language",
-        helpText: "expression = pure formula; js = sandboxed JavaScript"
+        label: "Idioma",
+        helpText: "expression = fórmula pura; js = JavaScript en sandbox"
       },
       "body.source": {
-        label: "Source",
-        helpText: "Function body source — no top-level imports"
+        label: "Código fuente",
+        helpText: "Código fuente del body de la función — sin imports de nivel superior"
       },
       "body.capabilities": {
-        label: "Capabilities",
-        helpText: "Allowed ctx APIs (api.read, api.write, crypto.uuid, log, …)"
+        label: "Capacidades",
+        helpText: "API ctx permitidas (api.read, api.write, crypto.uuid, log, …)"
       },
       "body.timeoutMs": {
-        label: "Timeout Ms",
-        helpText: "Per-invocation timeout (ms)"
+        label: "Tiempo de espera (ms)",
+        helpText: "Tiempo de espera por invocación (ms)"
       },
       "body.memoryMb": {
-        label: "Memory Mb",
-        helpText: "Per-invocation memory cap (MB, max 256)"
+        label: "Memoria (MB)",
+        helpText: "Límite de memoria por invocación (MB, máx. 256)"
       },
       params: {
         label: "Parámetros",
@@ -1345,8 +1345,8 @@ export const esESMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "Expresión CEL: desactivar cuando la condición sea true"
       },
       ai: {
-        label: "Ai",
-        helpText: "AI exposure (opt-in): set ai.exposed=true and write ai.description (≥40 chars) to make this callable by agents."
+        label: "Exposición a IA",
+        helpText: "Exposición a IA (voluntaria): establece ai.exposed=true y escribe ai.description (≥40 caracteres) para que los agentes puedan llamarla."
       },
       recordIdParam: {
         label: "Parámetro de ID de registro",

packages/platform-objects/src/apps/translations/es-ES.metadata-forms.generated.ts

@@ -18,18 +18,6 @@
  */
 
 export const esESGeneratedSourceHashes: Readonly<Record<string, string>> = {
-  "metadataForms.action.fields.ai.helpText": "e8c9a5009eb96ef6",
-  "metadataForms.action.fields.ai.label": "17ad12a926c9f22d",
-  "metadataForms.action.fields.body.capabilities.helpText": "2db3f83342bd3fa1",
-  "metadataForms.action.fields.body.capabilities.label": "0b59005e10add41f",
-  "metadataForms.action.fields.body.language.helpText": "b0ad78a396675964",
-  "metadataForms.action.fields.body.language.label": "012664c233fc15b0",
-  "metadataForms.action.fields.body.memoryMb.helpText": "f53c826ce3c94ad9",
-  "metadataForms.action.fields.body.memoryMb.label": "a1e1612eff7f82ea",
-  "metadataForms.action.fields.body.source.helpText": "3a066e75948ec72c",
-  "metadataForms.action.fields.body.source.label": "8fe786e8e29c8cec",
-  "metadataForms.action.fields.body.timeoutMs.helpText": "47042e57f537d281",
-  "metadataForms.action.fields.body.timeoutMs.label": "2b887c62238d3532",
   "metadataForms.api.description": "62421e8039e013f5",
   "metadataForms.api.label": "589af3fe4aab4af5",
   "metadataForms.book.description": "45e72c8c74617530",

packages/platform-objects/src/apps/translations/es-ES.source-hashes.generated.ts

@@ -1239,24 +1239,24 @@ export const jaJPMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "L1 式または L2 サンドボックス JS body"
       },
       "body.language": {
-        label: "Language",
-        helpText: "expression = pure formula; js = sandboxed JavaScript"
+        label: "言語",
+        helpText: "expression = 純粋な数式; js = サンドボックス化 JavaScript"
       },
       "body.source": {
-        label: "Source",
-        helpText: "Function body source — no top-level imports"
+        label: "ソース",
+        helpText: "関数 body ソース — トップレベル import 不可"
       },
       "body.capabilities": {
-        label: "Capabilities",
-        helpText: "Allowed ctx APIs (api.read, api.write, crypto.uuid, log, …)"
+        label: "機能",
+        helpText: "許可する ctx API（api.read, api.write, crypto.uuid, log, …）"
       },
       "body.timeoutMs": {
-        label: "Timeout Ms",
-        helpText: "Per-invocation timeout (ms)"
+        label: "タイムアウト（ms）",
+        helpText: "呼び出しごとのタイムアウト（ms）"
       },
       "body.memoryMb": {
-        label: "Memory Mb",
-        helpText: "Per-invocation memory cap (MB, max 256)"
+        label: "メモリ（MB）",
+        helpText: "呼び出しごとのメモリ上限（MB、最大 256）"
       },
       params: {
         label: "パラメーター",
@@ -1345,8 +1345,8 @@ export const jaJPMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "CEL 式: 条件が true の場合に無効化"
       },
       ai: {
-        label: "Ai",
-        helpText: "AI exposure (opt-in): set ai.exposed=true and write ai.description (≥40 chars) to make this callable by agents."
+        label: "AI 公開",
+        helpText: "AI 公開（オプトイン）: ai.exposed=true を設定し、ai.description（≥40 文字）を記述すると、エージェントから呼び出せるようになります。"
       },
       recordIdParam: {
         label: "レコード ID パラメーター",

packages/platform-objects/src/apps/translations/ja-JP.metadata-forms.generated.ts

@@ -18,18 +18,6 @@
  */
 
 export const jaJPGeneratedSourceHashes: Readonly<Record<string, string>> = {
-  "metadataForms.action.fields.ai.helpText": "e8c9a5009eb96ef6",
-  "metadataForms.action.fields.ai.label": "17ad12a926c9f22d",
-  "metadataForms.action.fields.body.capabilities.helpText": "2db3f83342bd3fa1",
-  "metadataForms.action.fields.body.capabilities.label": "0b59005e10add41f",
-  "metadataForms.action.fields.body.language.helpText": "b0ad78a396675964",
-  "metadataForms.action.fields.body.language.label": "012664c233fc15b0",
-  "metadataForms.action.fields.body.memoryMb.helpText": "f53c826ce3c94ad9",
-  "metadataForms.action.fields.body.memoryMb.label": "a1e1612eff7f82ea",
-  "metadataForms.action.fields.body.source.helpText": "3a066e75948ec72c",
-  "metadataForms.action.fields.body.source.label": "8fe786e8e29c8cec",
-  "metadataForms.action.fields.body.timeoutMs.helpText": "47042e57f537d281",
-  "metadataForms.action.fields.body.timeoutMs.label": "2b887c62238d3532",
   "metadataForms.api.description": "62421e8039e013f5",
   "metadataForms.api.label": "589af3fe4aab4af5",
   "metadataForms.book.description": "45e72c8c74617530",

packages/platform-objects/src/apps/translations/ja-JP.source-hashes.generated.ts

@@ -1239,24 +1239,24 @@ export const zhCNMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "L1 表达式或 L2 沙箱 JS 体"
       },
       "body.language": {
-        label: "Language",
-        helpText: "expression = pure formula; js = sandboxed JavaScript"
+        label: "语言",
+        helpText: "expression = 纯公式；js = 沙箱 JavaScript"
       },
       "body.source": {
-        label: "Source",
-        helpText: "Function body source — no top-level imports"
+        label: "源码",
+        helpText: "函数体源码——禁止顶层 import"
       },
       "body.capabilities": {
-        label: "Capabilities",
-        helpText: "Allowed ctx APIs (api.read, api.write, crypto.uuid, log, …)"
+        label: "功能",
+        helpText: "可用的 ctx API（api.read、api.write、crypto.uuid、log 等）"
       },
       "body.timeoutMs": {
-        label: "Timeout Ms",
-        helpText: "Per-invocation timeout (ms)"
+        label: "超时（毫秒）",
+        helpText: "单次调用超时时间（毫秒）"
       },
       "body.memoryMb": {
-        label: "Memory Mb",
-        helpText: "Per-invocation memory cap (MB, max 256)"
+        label: "内存（MB）",
+        helpText: "单次调用内存上限（MB，最大 256）"
       },
       params: {
         label: "参数",
@@ -1345,8 +1345,8 @@ export const zhCNMetadataForms: NonNullable<TranslationData['metadataForms']> =
         helpText: "CEL 表达式：满足条件时禁用"
       },
       ai: {
-        label: "Ai",
-        helpText: "AI exposure (opt-in): set ai.exposed=true and write ai.description (≥40 chars) to make this callable by agents."
+        label: "AI 暴露",
+        helpText: "AI 暴露（需显式开启）：设置 ai.exposed=true 并填写 ai.description（≥40 个字符），此操作即可被代理调用。"
       },
       recordIdParam: {
         label: "记录 ID 参数",

packages/platform-objects/src/apps/translations/zh-CN.metadata-forms.generated.ts

@@ -18,18 +18,6 @@
  */
 
 export const zhCNGeneratedSourceHashes: Readonly<Record<string, string>> = {
-  "metadataForms.action.fields.ai.helpText": "e8c9a5009eb96ef6",
-  "metadataForms.action.fields.ai.label": "17ad12a926c9f22d",
-  "metadataForms.action.fields.body.capabilities.helpText": "2db3f83342bd3fa1",
-  "metadataForms.action.fields.body.capabilities.label": "0b59005e10add41f",
-  "metadataForms.action.fields.body.language.helpText": "b0ad78a396675964",
-  "metadataForms.action.fields.body.language.label": "012664c233fc15b0",
-  "metadataForms.action.fields.body.memoryMb.helpText": "f53c826ce3c94ad9",
-  "metadataForms.action.fields.body.memoryMb.label": "a1e1612eff7f82ea",
-  "metadataForms.action.fields.body.source.helpText": "3a066e75948ec72c",
-  "metadataForms.action.fields.body.source.label": "8fe786e8e29c8cec",
-  "metadataForms.action.fields.body.timeoutMs.helpText": "47042e57f537d281",
-  "metadataForms.action.fields.body.timeoutMs.label": "2b887c62238d3532",
   "metadataForms.api.description": "62421e8039e013f5",
   "metadataForms.api.label": "589af3fe4aab4af5",
   "metadataForms.book.description": "45e72c8c74617530",