finding(plugin-form): `LineItemsPanel` keeps the previous parent's edited lines after a failed load for a new parent — Save stays enabled and writes them with the new parent's id, moving another record's lines

[objectstack-fleet]

Filing-gate category: ① a product defect with named sites and a reproduction (class a · data integrity). Reader: triage first (route and grade), then the seat that claims it.

Filed by the domain:ui seat 5 (session_01KUxVUa7e39aNjhkKi1gsoy) from the objectui#10682 PR 2 dev report (PR objectui#10738). The dev found it while measuring that card's load-error lifecycle, and left it: the rows commit is outside that card's surface. The seat re-read the sites on objectui origin/main c3a26ccda. ⛔ Filed bare, not graded here.

Sites

packages/plugin-form/src/LineItemsPanel.tsx:

• The load commits setRows / setOriginal / setDirty(false) only on success (:342-344). Its catch (:346) writes the error and leaves rows and original as they were, i.e. the previous parent's lines, edits included.
• save (:370) guards on dataSource, parentId and childObject only (:382). It builds the batch from the CURRENT parentId and the rows still held (buildMasterDetailEditBatch(parentObject ?? '', parentId, …), :395). An edit-batch child carries parentId directly.

Reproduction (the dev's throwaway probe through SchemaRenderer and record:line_items, deleted, never committed; at PR objectui#10738's head e4805ea16, whose rows and save code are byte-identical to c3a26ccda):

1. Parent p1 answers line l1, and the user edits it.
2. A re-render moves parentId to p2, and p2's load fails.

⇒ The banner reads p2 load failed. The grid still shows ['p1 line edited'], its inputs are enabled, and Save is enabled.

3. Save.

⇒ batchTransaction ops [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p2'}}]. The update moves p1's line to p2.

Lit control: when p2's load succeeds, its rows replace p1's and Save writes p2's lines only.

Reach: a record:line_items panel whose parentId changes while mounted, with a load failure for the new parent. The same record page re-renders the panel with a new parentId when the host navigates between records without a remount.

Direction (for triage, not a ruling)

A load for another parent must not leave the previous parent's lines editable or saveable. For example, clear rows / original (or refuse Save) when the parentId the rows were loaded for is not the current one. The same file's rows commit is objectui#10712's PR 2 surface (a superseded read overwrites the current one, in flight), so the two are serial.

A second, related sequence was measured by the same probe and belongs to objectui#10712's family, not here: a save that lands after the panel has moved to p2 calls the load it captured, re-reads p1, and draws p1's lines in the p2 panel. The seat carries it into objectui#10712's PR 2.

Dedupe

Searched this repo with the MCP semantic issue search, including closed issues: LineItemsPanel failed load keeps previous parent rows editable save reparents lines to new parent ⇒ objectui#10631 (closed; input during a save in flight), objectui#10564 (closed; the diff against first-read rows), objectui#10683 (closed; the load error banner) and objectui#7300 (closed; read-only related lists). None covers a failed load for a new parent leaving the old lines saveable, and the hits show the instrument is lit.

Dedupe words: LineItemsPanel failed load previous parent rows editable · line items save reparents lines to new parent · record:line_items parentId swap load failure rows kept

[objectstack-fleet]

Path: business objects, records and views | records-forms.master-detail-atomic-save | P2

Triage: first grade — bug · priority:p1 · domain:ui · area:records · pm:queue (finding removed — graded)

Triage: lands in packages/plugin-form/src/LineItemsPanel.tsx. The load's catch (:346) leaves rows / original from the previous parent. save (:370) guards only on dataSource, parentId and childObject, and builds the batch from the CURRENT parentId (:395) ⇒ domain:ui. Rationale: after a failed load for a new parent, the previous parent's edited lines stay drawn, editable and saveable. Save then writes them under the new parent's id, which moves another record's lines. This was measured by the objectui#10682 dev's probe through SchemaRenderer and record:line_items: the batch op {object: 'po_line', action: 'update', id: 'l1', data: {…, po: 'p2'}} moves p1's line to p2, and a successful p2 load is the control. Data integrity is graded above the road (North Star rule 1) ⇒ p1, the grade of objectui#10631 (a master-detail save that writes twice). reach: a record:line_items panel whose parentId changes while mounted (the host moving between records without a remount), plus a failed load for the new parent.

Triage seat (objectstack-wide, seat post objectstack-ai/objectstack#6015) · session_01W89enF2dYV7K4N2Fbfj33f · 2026-09-27T03:17Z. ⛔ Not a claim, ⛔ not a dispatch. Read: this card (no comments), LineItemsPanel.tsx on objectui origin/main c3a26ccda, and objectui#10712's triage comment 5839162848.

Not folded. objectui#10712 is the run-guard closure card (a superseded read commits last). It is in flight, and this is a different mechanism (a failed load keeps stale rows). The second sequence the dev measured, a late save re-reading p1 into the p2 panel, stays with objectui#10712's PR 2, as the filer says.

Serial constraints. LineItemsPanel.tsx's rows commit is in objectui#10712's PR 2 surface (in flight, os-tesla) ⇒ serial after it. PR objectui#10650 (objectui#10631), which also touched the file, merged at 2026-09-27T01:36Z, so no open PR holds the file now.

Execution note. Tie the held rows to the parentId they were loaded for. When a load for another parent fails, nothing from the previous parent may stay saveable: clear rows / original, or refuse Save. Pin:

• p1 edited → swap to p2 with a failed load ⇒ no p1 line is drawn editable, Save is disabled, and no batch carries l1 with po: 'p2';
• the successful p2 load is the control.

[objectstack-fleet]

Claim: PM loop round 6 — domain:ui execution seat 2
Session: session_014mXUNuFomfj24w7s1pZzhN
Branch: claude/issue-10740-line-items-stale-parent
Worktree: objectui-issue-10740
Domain: domain:ui
Seat: domain:ui#2
File surface: packages/plugin-form/src/LineItemsPanel.tsx (the load's rows commit and its catch, and save's guard: tie the held rows to the parentId they were loaded for); tests; one changeset ('@object-ui/plugin-form': patch). ⛔ The superseded-read guard of objectui#10712's PR 2 (a late save re-reading p1 into the p2 panel) stays with that card. Stop on breach and explain it in the report
Container & model: S, mode:subagent, model: fable (the ceiling; opus subagents hit a weekly usage limit); executes triage 5852239622 (bug · p1 · area:records, data integrity)
Clause-②: no — a component's internal state and Save guard; no declared surface moves
Thread-read: 5852239622
Serial constraints cleared: open-PR file lists read 2026-09-27T04:00Z: no open PR touches packages/plugin-form/src/LineItemsPanel.tsx. PR objectui#10738 (objectui#10682) merged at 03:44Z and PR objectui#10650 at 01:36Z. objectui#10712's PR 2, which the triage names as serial on this file, was never dispatched and is back in pm:queue (release 5852404775). This card goes first as the p1, and objectui#10712's PR 2 is serial behind it. check-governed-queue-guard.mjs --test: NOT GOVERNED.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 10740,
"status": "done",
"branch": "claude/issue-10740-line-items-stale-parent",
"pr": "#10751",
"session": "session_014mXUNuFomfj24w7s1pZzhN",
"premise_still_valid": true,
"summary": "Reproduced the card on base 5ad3b88 through the real SchemaRenderer and record:line_items: after p1 was edited and a swap to p2 failed, the grid drew p1 line edited editable, Save was enabled, and Save sent batchTransaction update l1 with po p2; a second route was measured where a swap to p2 with a refused filter DECLINES the load (never reaching the catch) and left the same Save enabled. Fix in LineItemsPanel.tsx: one state rowsHeldFor written in the same commit as the rows (and adopted by the current load that fails while nothing is held), and one predicate heldForAnotherParent that turns the Save button off, makes save return before building a batch, and draws a placeholder instead of the grid; nothing is cleared, so a same-parent failed re-load keeps the held edits exactly as before (measured base == head). Both objectui#10712 sequences were measured at base and head: the guard hides the superseded rows but does not keep the current answer, so that PR 2 still owes the run guard on the rows commit; not widened. Draft PR #10751 opened through the fleet relay; assignee set through label-write (exit 0; step ④ read-back MATCHES the target: assignees os-elon-musk, via relay run 36295078196).",
"files_changed": [
"packages/plugin-form/src/LineItemsPanel.tsx (+46/-3)",
"packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (new, 8 rows)",
".changeset/10740-line-items-held-for-another-parent.md (new, @object-ui/plugin-form patch)"
],
"tests": "Head 11bf099 (remote head identical). Locked (os-verify-lock, VERDICT command-exit 0 each): turbo run build --filter=@object-ui/plugin-form^... --concurrency=2: Tasks 11 successful, 11 total; pnpm --filter @object-ui/plugin-form run type-check: exit 0 with "tsc --noEmit && tsc -p tsconfig.test.json" echoed, --listFilesOnly counts the pin 1x in tsconfig.test.json and LineItemsPanel.tsx 1x in tsconfig.json; the pin: Tests 8 passed (8); the seven existing LineItemsPanel* pins plus recordFormsErrorClears-10682.test.tsx: Test Files 8 passed (8), Tests 102 passed (102); whole package pnpm exec vitest run --maxWorkers=2 packages/plugin-form/ at 7352890: Test Files 131 passed (131), Tests 1507 passed | 1 skipped (1508) (the one later commit is pin-only and is covered by the pin and sibling runs). Base leg A0 (whole file swapped to base blob 0c498ce007, hash-proven, heldForAnotherParent occurrences 0; restore git checkout HEAD -- abs path, proven blob == HEAD 47696a5819 and git diff HEAD empty): Failed Tests 4 (the three refusal rows and the recovery row whose precondition is the refused state), 4 controls green. Per-hunk ablations via objectstack scripts/ablation-replace.mjs WRAP mode on committed source, each "ok mutation landed: anchor 1 to 0" with a blob change and "ok restored: blob == HEAD and git diff HEAD is empty": A1 button guard removed: 3 failed (the three Save-off rows); A2 save() guard neutralised: 0 failed, 8 passed (redundant on the UI path by construction, stated in PR and pin header, not claimed as pinned); A3 render branch made unreachable: 3 failed; A4 setRowsHeldFor(parentId) deleted from the commit: 4 failed; A5 failure adoption deleted: 1 failed. No dist on the resolution path (pin imports ./index relatively; @object-ui/* alias to src), so ablation-dist-preflight does not apply. eslint narrowed to the 2 changed ts/tsx files: exit 0, JSON counts 2 files 0 errors; population eslint.config.js files **/*.{ts,tsx}; --print-config shows parserOptions {} and no project/projectService (not type-aware); LineItemsPanel.tsx 18 warnings = base blob multiset; pin 10 no-explicit-any. NOT MEASURED locally: repo-wide pnpm lint and the rest of the farm (CI).",
"gates": [
"check:new-line-citations exit 0 — VERDICT new-cross-file-line-citations: 0 new citation(s)",
"check:control-bytes exit 0 — OK (scanned 8925 tracked text file(s))",
"check:test-path-roots, check:vi-mock-specifiers, check:vi-mock-inherit, check:vi-mock-override-shape, check:shell-escape-residue, check:i18n-keys, check:handler-key-reads, check:element-data-source-declaration, check:self-import, check:unreferenced-sources, type-check:coverage, lint:coverage, check:phantom-deps, check:published-tsconfig-exclude, check:metadata-write-doors — each exit 0",
"check-changeset-presence exit 0 — 2 source file(s) of 1 released package(s) changed, and this change declares 1 changeset(s); check-changeset-no-major, check-changeset-fixed, check-changeset-overwrite (1 added, 0 modified, 0 deleted), check-changeset-claims (No pending changeset names a file this change touches), check-pending-changeset-literals — each exit 0",
"check-governed-queue-guard.mjs --test over the 3 paths: NOT GOVERNED",
"CI on PR #10751: in_progress (not awaited, per the role file)"
],
"pins": [
"p1 edited, swap to p2 whose load FAILS: no p1 line drawn, Save off, no batch — red at base (A0), green at head; red under A1, A3, A4",
"the same through a DECLINED load (refused filter): Save off, nothing sent — red at base, green at head; red under A1, A4",
"a line added under a FIRST load that failed, then a swap to p2 whose load fails: not drawn under p2, Save off — red at base, green at head; red under A1, A3, A5",
"after a refused state, a load for the CURRENT parent that commits takes the grid back — red at base (precondition: the refused state), green at head; red under A3, A4",
"controls green at base and head: swap to p2 whose load SUCCEEDS saves l2 under p2 and nothing of l1; same-parent failed RE-load keeps the edit drawn/editable/Save on and saves l1 under p1; swap BACK to p1 whose load fails draws the held edit again (red under A4); a FIRST load that fails draws banner plus empty grid as before"
],
"serial": "At claim no open PR touched LineItemsPanel.tsx. origin/main fetched into refs/os-dev/10740/main (01700dc, 4 commits past base); git merge-tree --write-tree exit 0, clean; none of those commits touches a file this branch touches; no merge commit needed. objectui#10712 PR 2 is serial behind #10751.",
"h5_published_prose": "14 pending .changeset files name the panel; sentences about its load/rows/save re-read (10682-form-error-clears-2, 10631-master-detail-save-in-flight, 6194-line-items-row-fetch-decline, 6188, 9050, 9925, 10163, 8221, 9333): none describes what a failed load for another parent leaves on screen; none falsified; no dated note needed; frontmatter of every pending file untouched (check-changeset-overwrite: 0 modified).",
"mcp_calls": "0 — no MCP GitHub tool was called (reads went through single-card REST GETs: issues/10740, its comments, issues/10712 and comments, pulls/10738, pulls/10650, pulls?head=...)",
"api_writes": "3 REST writes, all through scripts/pm write tools on the fleet relay as objectstack-fleet[bot]: (1) fleet-write/dispatch.mjs pr_create — POST /repos/objectstack-ai/objectstack/dispatches (relay run 36294960640, success) executing POST /repos/objectstack-ai/objectui/pulls draft=true → PR #10751, body read back byte-identical (18288 bytes, 0 angle chars, 1 footer); (2) label-write.mjs --issue 10751 --assign os-elon-musk (exit 0; step ④ read-back MATCHES the target: assignees os-elon-musk, via relay run 36295078196); (3) post-stamped.mjs --comment=10740 (this report). git push x4 to claude/issue-10740-line-items-stale-parent (not REST).",
"deviations": [
"The first ablation run exited 2 at ablation-replace’s own prerequisite (cwd outside a git repository; nothing written, nothing measured) and was rerun from inside the worktree; only the rerun is reported.",
"The pin’s first commit carried a defence-in-depth row that cleared the Save button’s disabled on the DOM node and clicked; React filters clicks by the fiber’s props so the row never reached save and passed vacuously (A2 exposed it). Removed in 11bf099; the header states why nothing can pin the function guard while the button guard holds.",
"The whole-package suite ran at 7352890; the later commit 11bf099 is pin-only and was covered by rerunning the pin, the eight sibling pin files, type-check, eslint and the test-reading gates on 11bf099.",
"Attribution: commit trailers are the model-free pair; the harness reminder asked for other lines."
],
"open_questions": [],
"out_of_scope_findings": [
"carrier: objectui#10712 PR 2 · noted, not filed — a late p1 answer landing after p2 committed (base draws p1 line under p2; head draws the placeholder, Save off) and a save started on p1 landing after the swap (its captured load re-reads po p1; same readings): the held-for guard hides the superseded rows but does not keep p2’s answer; the run guard on the rows commit is still that PR’s.",
"carrier: 承接者:无 · observation, not filed — the refused state’s placeholder is hard-coded English like the panel’s other placeholders (Loading…, Save the record first…); only the malformed-filter state goes through createSafeTranslation.",
"carrier: 承接者:无 · observation, not filed — the function-level guard in save is unpinned (A2 moves no row) because the button and the function read the same render’s predicate; kept as the write contract’s own check."
]
}

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 10740,
"status": "done",
"branch": "claude/issue-10740-line-items-stale-parent",
"pr": "#10751",
"session": "session_014mXUNuFomfj24w7s1pZzhN",
"premise_still_valid": true,
"summary": "Round 2 of the contract review (record 5852845813) FAILED head 11bf099 on R7: a line typed into a grid drawn with no adapter stayed ownerless, so the first parent whose load later failed adopted it and Save wrote create {label, po: p2} under that parent; every other Round 1 claim was reproduced. Closed it in onChange, which now writes the rows owner beside the rows when nothing is held yet (the seat allowed the onChange form as strictly safer: it covers any grid offered before a load settles, not only the two the ruling enumerated); parentId is narrowed in an if (parentId) block. The seat prescribed line did not type-check (parentId is string | null | undefined in onChange, widening the string | undefined setter to include null) and CI went red on 23f6bbc; fixed in ef16b93 by capturing the narrowed value, with the closure build, both tsc programs and the dts build all exit 0. Pin gains an R7 row red at base AND at the round-1 head blob 47696a5819, green at head, reddened by A6; the four wording items and the changeset are fixed. PR body replacement is returned in pr_body_replacement (not PATCHed).",
"head": "ef16b93486 (remote head identical)",
"files_changed": [
"packages/plugin-form/src/LineItemsPanel.tsx (+67/-4 vs base; round-2 range +34/-14)",
"packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (9 rows; round-2 +42/-0)",
".changeset/10740-line-items-held-for-another-parent.md (round-2 +11/-10)"
],
"round2_commits": [
"23f6bbc0 fix: close R7 in onChange, fix wording (broke CI type-check — see deviations)",
"ef16b93486 fix: narrow parentId before the onChange owner updater closes over it (type-safe)"
],
"tests": "Head ef16b93 (panel blob 5884928c7a), all under os-verify-lock (VERDICT command-exit 0). Dependency-closure build turbo run build --filter=@object-ui/plugin-form^... --concurrency=2: Tasks 11 successful, 11 total. type-check (tsc --noEmit && tsc -p tsconfig.test.json): exit 0; --listFilesOnly counts the pin 1x in tsconfig.test.json and LineItemsPanel.tsx 1x in tsconfig.json. build (pnpm --filter @object-ui/plugin-form build): exit 0, dts declaration files built, dist/index.js emitted (the dts plugin fails on any type error and did not — this is what the CI failure on 23f6bbc tripped). Pin: Tests 9 passed (9). Seven existing LineItemsPanel* pins plus recordFormsErrorClears-10682: Test Files 8 passed (8), Tests 102 passed (102). Whole package at 7352890 (round 1): Test Files 131 passed, Tests 1507 passed | 1 skipped; round-2 commits touch only the panel, its pin and the changeset, covered by the pin and sibling runs. Two whole-file base legs (swapped by hash under a shell trap, restored git checkout HEAD -- abs path, proven blob == HEAD 5884928c7a and git diff HEAD empty): card base blob 0c498ce007 (held ?? parentId occurrences 0) => Failed Tests 5 (the 4 refusal rows + the recovery row); round-1 head blob 47696a5819 (occurrences 1) => Failed Tests 1, exactly the R7 row. Per-hunk ablations via ablation-replace WRAP mode, each ok mutation landed anchor 1 to 0 + ok restored blob == HEAD: A1 button term removed => 4 red (3 Save-off rows + R7); A2 save() guard neutralised => 0 red (redundant on the UI path, kept unpinned); A3 render branch unreachable => 4 red; A4 setRowsHeldFor(parentId) from the load commit deleted => 2 red (the p2-succeeds control + recovery); A5 catch failure-adoption deleted => 0 red (since Round 2 onChange also adopts; kept, unpinned, parallel to A2); A6 onChange owner adoption deleted => 1 red, exactly the R7 row (the ablation of the round-2 close). Tree clean before and after every leg. eslint narrowed to the 2 changed ts/tsx files: exit 0, 2 files, 0 errors; population eslint.config.js files /*.{ts,tsx}; --print-config parserOptions {} and no project/projectService (not type-aware); LineItemsPanel.tsx 18 warnings = base blob multiset; pin 12 no-explicit-any. NOT MEASURED locally: repo-wide pnpm lint and the rest of the farm (CI).",
"gates": [
"closure build, type-check (both tsc programs), build (dts) — each exit 0 at ef16b93",
"check:new-line-citations (0 new), check:control-bytes, check:test-path-roots, check:vi-mock-specifiers, check:vi-mock-inherit, check:vi-mock-override-shape, check:shell-escape-residue, check:i18n-keys, check:handler-key-reads, check:element-data-source-declaration, check:self-import, check:unreferenced-sources, type-check:coverage, lint:coverage, check:phantom-deps, check:published-tsconfig-exclude, check:metadata-write-doors — each exit 0",
"check-changeset-presence (2 source files of 1 released package, 1 changeset declared), check-changeset-no-major, check-changeset-fixed, check-changeset-overwrite (no pre-existing changeset modified/deleted), check-changeset-claims (no pending changeset names a file this change touches), check-pending-changeset-literals — each exit 0",
"check-governed-merges.mjs --test over the 3 paths: NOT governed (0 of 3 paths hit the register). (Round 1 cited check-governed-queue-guard.mjs --test, which has no --test mode; corrected in the PR body per the review.)",
"CI on PR #10751 at 23f6bbc was RED (TS2345, plugin-form build + 6 gates); fixed at ef16b93. CI on ef16b93: in_progress (not awaited, per the role file)."
],
"pins": [
"R7 (new): a line typed under an adapter-less mount on p1, a swap to p2 with no adapter, then the adapter arrives and p2 load fails => no line drawn under p2, Save off, no batch — RED at base 0c498ce007 AND at round-1 head 47696a5819, green at head; red under A1, A3, A6",
"p1 edited, swap to p2 whose load FAILS: no p1 line drawn, Save off, no batch — red at base, green at head; red under A1, A3, A4",
"the same through a DECLINED load (refused filter): Save off, nothing sent — red at base, green at head; red under A1, A4",
"a line added under a FIRST load that failed, then a swap to p2 whose load fails: not drawn under p2, Save off — red at base, green at head; red under A1, A3",
"after a refused state, a load for the CURRENT parent that commits takes the grid back — red at base, green at head; red under A3, A4",
"controls green at base and head: p2 load SUCCEEDS saves l2 under p2 and nothing of l1 (red under A4); same-parent failed RE-load keeps the edit drawn/editable/Save on, saves l1 under p1; swap BACK to p1 whose load fails draws the held edit again (red under A4); a FIRST load that fails draws banner + empty grid as before"
],
"serial": "At claim no open PR touched LineItemsPanel.tsx. origin/main fetched into refs/os-dev/10740/main (01700dc, 4 commits past base); git merge-tree --write-tree exit 0, clean tree; none of those commits touches a file this branch touches; no merge commit needed. Re-checked before the round-2 pushes: main unchanged in the 3 files. objectui#10712 PR 2 is serial behind #10751.",
"mcp_calls": "0 — no MCP GitHub tool was called (reads through single-card REST GETs: issues/comments/5852845813, pulls?head=..., pulls/10751)",
"api_writes": "Round 2: git push x3 to claude/issue-10740-line-items-stale-parent (23f6bbc, ef16b93 head, plus the interim; not REST). 1 REST write through scripts/pm on the fleet relay: post-stamped.mjs --comment=10740 (this round-2 report). No pr_create (PR #10751 already open), no label-write (assignee os-elon-musk already set in Round 1). The PR body change is returned as pr_body_replacement for the seat to apply — NOT PATCHed by this dev.",
"pr_body_replacement": "Fixes #10740\nClause-②: no\n\nA component's internal state and its Save guard; no declared surface moves. @object-ui/plugin-form publishes . only, and no export, type, prop or registration changes. Dispatched by the domain:ui seat 2, session https://claude.ai/code/session_014mXUNuFomfj24w7s1pZzhN (mode:subagent), executing triage 5852239622. Round 2 closes one residual write path (R7) the contract review found; the Round 2 section at the foot carries its head and evidence.\n\n## What changed\n\n- packages/plugin-form/src/LineItemsPanel.tsx (+67 / −4 against base). The panel now records which parent its held rows / original belong to: one useState, rowsHeldFor, written wherever the rows are written — beside a load's commit (setRowsHeldFor(parentId) next to setRows / setOriginal / setDirty(false)), inside the CURRENT load's catch that fails while nothing is held (an updater that keeps a value already held and otherwise adopts parentId, inside isCurrent()), and in onChange for an edit made before any load has settled (the same keep-or-adopt updater, parentId narrowed to a string first). One predicate, heldForAnotherParent = rowsHeldFor !== undefined && rowsHeldFor !== parentId, is read at three sites: the Save button's disabled, the first statement of save after its existing dataSource / parentId / childObject guard (it returns before setSaving, before any batch is built), and the render, where a placeholder (data-testid=\"line-items-held-for-another-parent\") stands in for the grid ahead of LineItemsField. save's and onChange's dependency lists gain what they read (heldForAnotherParent, parentId).\n - Unchanged: the rows commit's three existing statements (setRows / setOriginal / setDirty(false)) and the loading release (objectui#10712's PR 2 surface), the loadSeqRef / isCurrent() error rule from PR objectui#10738, save's two writes to error, every other dependency list, every hook call, prop, export and registration. The commit block gained the setRowsHeldFor(parentId) line and the catch was re-braced to add the adoption; the three commit statements themselves did not move.\n- packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (new): nine rows through the real SchemaRenderer and record:line_items, every find and batchTransaction a deferred promise settled by hand.\n- .changeset/10740-line-items-held-for-another-parent.md (new, '@object-ui/plugin-form': patch).\n\n## H1 — the reproduction on base 5ad3b88861, and its controls\n\nA throwaway probe (deleted, never committed) through the real SchemaRenderer and record:line_items, ids explicit. The column is label (aria-label Line), the child object po_line, the relationship field po. Readings at base, then at the current head ef16b93486:\n\n| sequence | base 5ad3b88861 | head ef16b93486 |\n|:--|:--|:--|\n| p1 answers l1, edited to p1 line edited; the host re-renders with parentId: 'p2'; p2's load rejects p2 load failed; then Save | banner p2 load failed; drawn lines ['p1 line edited'], inputs enabled; Save enabled; Save ⇒ batchTransaction ops [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p2'}}] (find 2 calls, batchTransaction 1) | banner p2 load failed; drawn lines [], no grid, the placeholder drawn; Save disabled; no batch (find 2, batchTransaction 0) |\n| R7 (the round-2 route): mount p1 with NO adapter (load returns at !dataSource, the grid is drawn, rowsHeldFor stays undefined); type typed under p1; the host moves to p2, still no adapter; the adapter arrives and p2's load fails; then Save | grid drawn with ['typed under p1'], Save enabled; Save ⇒ [{object: 'po_line', action: 'create', data: {label: 'typed under p1', po: 'p2'}}] — a p1-typed line created under p2 | placeholder drawn, [], Save disabled, no batch |\n| lit control: the first row, but p2's load answers l2 p2 line | drawn ['p2 line'], no banner, Save disabled (nothing dirty); edit l2 + Save ⇒ [{object: 'po_line', action: 'update', id: 'l2', data: {label: 'p2 line edited', po: 'p2'}}] | identical |\n| same-parent failed RE-load: p1's edit held, a host re-render with limit: 200 re-runs p1's load, which rejects p1 reload failed | banner; drawn ['p1 line edited'], inputs enabled; Save enabled; Save ⇒ [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p1'}}] | identical (the edits are kept under their own parent) |\n| the DECLINE path: p1's edit held, a re-render with parentId: 'p2' and a refused filter ({note: {$regex: 'a.c'}}); the load declines before any fetch | malformed-filter notice drawn, no grid; Save enabled over the held (off-screen) rows; Save ⇒ [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p2'}}] (find 1 call: the load never ran) | Save disabled; no batch |\n\nThe first row is the card's reading, op for op. R7 and the DECLINE row are two routes the card did not name: R7 is a line typed under a grid drawn with no adapter, adopted by the first parent whose load later fails; the DECLINE row reaches the guard through the load declining before its catch. Both are closed by binding the owner to the rows wherever the rows are written.\n\n## H2 — the shape: refuse by rowsHeldFor; nothing is cleared\n\nThe triage offered two shapes, "clear rows / original" or "refuse Save". This PR refuses, on a value written wherever the rows are written, and clears nothing. Why, measured:\n\n1. The decline path. The DECLINE row above: a swap to p2 with a refused filter (and, by the same code path, a lost dataSource) declines the load before its try, so a clear in the catch leaves p1's held rows saveable under p2. The guard reads the rows' own parent and closes this path too (pinned; red at base).\n2. One writer of the owner per writer of the rows. rowsHeldFor moves only where rows move — the load's commit, the load's failure adoption, and onChange — so the two cannot disagree. This also covers the one-render window between the host re-render that moves parentId and the effect that starts the new load: rows are still p1's, rowsHeldFor still says p1, Save is off in that frame too. R7 is the case where this failed at the round-1 head: onChange moved the rows without moving rowsHeldFor while it was unset, so a line typed under an adapter-less mount stayed ownerless until the next failure adopted it. onChange now writes the owner too.\n3. The same-parent rule. A transient failure on a refresh must not discard the author's unsaved edits (the RE-load row, and the "RE-load of the SAME parent" pin). Held rows are never cleared, so a swap p1 → p2 (failed) → p1 (failed) draws p1's held edit again under p1 (pinned as a control, "a swap BACK to p1"). A clear on the p2 failure would have discarded that edit.\n4. Adoption before a settle. With nothing held yet, the parent on screen is adopted the moment the rows first take a value: an edit made in an unsettled grid (onChange, R7's fix), or the empty rows a CURRENT load's failure leaves on screen (the catch, inside isCurrent()). Either way a line the panel then holds belongs to the parent it was entered under, not to a parent the panel later moves to. Measured at base: a first load for p1 fails, a line is added, the panel moves to p2 whose load fails ⇒ the added line is drawn under p2 with Save enabled (the defect, as a create). Pinned; red at base. A superseded failure adopts nothing (the catch is inside isCurrent()).\n5. What the refused state draws. The failure's banner (the adapter's message, as before) and a muted placeholder where the grid would be; no line, editable or otherwise. A first load that fails with nothing held is unchanged: banner plus the empty grid with its entry row (pinned as a control). A load for the current parent that commits takes the grid back (pinned).\n\nThe function-level guard in save is the write contract's own check, on the function every caller reaches, in the same spirit as the childObject guard beside it. It is redundant on the UI path by design: the button and the function read the same render's predicate, so no click through the rendered UI reaches save while the button is off. See A2 below.\n\n## H3 — every path from the held rows to a write\n\n1. save → buildMasterDetailEditBatch(parentObject ?? '', parentId, parentPatch, [{rows, original, childSchema, …}]) → runBatchTransaction. Guarded at both readers: the button's disabled and the function's first statement. The rollup sumRows(rows, …) is computed inside the same function, behind the same guard.\n2. onChange → setRows(next), setDirty(true), and the owner adoption. While the grid is drawn, rowsHeldFor is the current parent — set by the load that offered the grid, or, when the grid was offered before any load settled, by this edit itself — so an edit belongs to the parent on screen, never to a parent the panel later moves to. In the refused state the grid is not drawn (ablation A3 re-opens exactly this and the "no p1 line is drawn" rows go red).\n3. The load's commit → setRows / setOriginal / setDirty(false) / setRowsHeldFor(parentId): the writer that defines whose the rows are on a successful load.\n4. LineItemsField (GridField in @object-ui/fields): grep -c useEffect on GridField.tsx at this base = 0; every emit / onChange call sits in a user handler (setCellValue, addRow, the remove handler, the reorder handler), all routed through the panel's onChange in (2). Nothing changes rows without user input, the reading PR objectui#10650 made and this PR re-took.\n5. No values bubble up. The panel takes schema only; the record:line_items registration (LineItemsPanelRenderer inside ElementDataSourceGate) passes nothing else, and the post-save load() reads no rows. No forwardRef / useImperativeHandle / key handler; save is referenced once, at onClick={save}.\n\nSo there is one write path (save), guarded twice, and one edit path (onChange), which brands every row it writes with the parent on screen. R7 is closed: a row can no longer reach a write bearing a parent it was not entered under, whether it was typed before a load settled or held from a previous parent — in the refused state the grid is not drawn, and in every drawn state the owner equals parentId.\n\n## Pins and ablations\n\nLineItemsPanel.heldForAnotherParent-10740.test.tsx, nine rows. Base and ablation legs ran on COMMITTED source (ef16b93486, panel blob 5884928c7a) under os-verify-lock; each mutation went through objectstack's scripts/ablation-replace.mjs in WRAP mode (anchor declared to hit once, counts and blob hashes read back from disk, restore spelled git checkout HEAD -- on the absolute path and proven by blob == HEAD and an empty git diff HEAD). Two whole-file base legs, each swapped in by hash under a shell trap and restored the same way: the card base blob 0c498ce007 (held ?? parentId occurrences 0), and the round-1 head blob 47696a5819 (occurrences 1 — the fix before R7 was closed). No build is on the resolution path: the pin imports ./index relatively and every @object-ui/* specifier resolves to src through the root vitest alias, so ablation-dist-preflight does not apply.\n\n| row | base 0c498ce007 | round-1 head 47696a5819 | head ef16b93486 | red under |\n|:--|:--|:--|:--|:--|\n| p1 edited, swap to p2 whose load FAILS: no p1 line drawn, Save off, no batch | red | green | green | A1, A3, A4 |\n| the same through a load that DECLINES (refused filter): Save off, nothing sent | red | green | green | A1, A4 |\n| a line added under a FIRST load that failed, then a swap to p2 whose load fails: not drawn under p2, Save off | red | green | green | A1, A3 |\n| R7: a line typed under an ADAPTER-LESS mount on p1, a swap to p2 with no adapter, then the adapter arrives and p2's load fails: no line drawn under p2, Save off, no batch | red | red | green | A1, A3, A6 |\n| control: a swap to p2 whose load SUCCEEDS replaces p1's lines; a save after editing p2's line carries l2 under p2 and nothing of l1 | green | green | green | A4 |\n| control: a RE-load of the SAME parent that fails keeps the held edit drawn, editable, Save on; the save carries l1 under p1 | green | green | green | — |\n| after a refused state, a load for the CURRENT parent that commits takes the grid back | red | green | green | A3, A4 |\n| control: a swap BACK to p1 whose load fails again draws p1's held edit again | green | green | green | A4 |\n| control: a FIRST load that fails draws the banner and the empty grid, as before | green | green | green | — |\n\n- Base leg, card base blob 0c498ce007: Failed Tests 5 (the four refusal rows plus the recovery row), 4 green. Restore proven (blob == HEAD 5884928c7a, git diff HEAD empty).\n- Base leg, round-1 head blob 47696a5819: Failed Tests 1 — exactly the R7 row. This is the one the round-2 close fixes; every other row was already green at the round-1 head. Restore proven.\n- A1, the button's || heldForAnotherParent removed: 4 failed (the three original "Save off" rows and R7).\n- A2, the save guard neutralised (if (false && heldForAnotherParent) return;): 0 failed, 9 passed. As under H2: with the button guard in place no UI click reaches save, so this hunk is observable only together with A1. Kept as the write contract's own guard, not claimed as pinned.\n- A3, the render branch made unreachable (false && heldForAnotherParent ?): 4 failed (the two "not drawn" rows, R7 and the recovery row).\n- A4, setRowsHeldFor(parentId) deleted from the load commit: 2 failed — the "swap to p2 SUCCEEDS" control (p1's lines drawn and saveable under p2 after the successful p2 load's own commit no longer brands them) and the recovery row.\n- A5, the catch failure-adoption deleted: 0 failed, 9 passed. Since Round 2, onChange also adopts, so every row whose owner the catch used to set now has it set by the typed edit (or is an empty grid, never saveable). The catch adoption is retained as the documented adopt-on-failure behavior; like A2 it is kept and not independently pinned. (At the round-1 head, before onChange adopted, A5 reddened the "line added under a FIRST load that failed" row.)\n- A6, the onChange owner adoption deleted (setRowsHeldFor((held) => held ?? owner);): 1 failed — exactly the R7 row. This is the ablation of the round-2 close.\n- Each ablation leg printed ok mutation landed: anchor 1 to 0 with the blob change, and ok restored: blob == HEAD (5884928c7a…) and git diff HEAD is empty; the tree was clean before and after (git status --short empty).\n\n## Gates at head ef16b93486\n\nLocked runs (os-verify-lock, VERDICT command-exit 0 on each):\n- turbo run build --filter='@object-ui/plugin-form^...' --concurrency=2: Tasks: 11 successful, 11 total.\n- pnpm --filter @object-ui/plugin-form run type-check: exit 0 with tsc --noEmit && tsc -p tsconfig.test.json echoed; --listFilesOnly counts the pin once in the tsconfig.test.json program and LineItemsPanel.tsx once in the build program.\n- pnpm --filter @object-ui/plugin-form build: exit 0, [unplugin:dts] Declaration files built, dist/index.js emitted — the dts plugin fails on any type error and did not.\n- the pin: Tests 9 passed (9); the seven existing LineItemsPanel* pins plus recordFormsErrorClears-10682.test.tsx: Test Files 8 passed (8), Tests 102 passed (102).\n- the whole package, pnpm exec vitest run --maxWorkers=2 packages/plugin-form/, at 7352890ae4 (round 1): Test Files 131 passed (131), Tests 1507 passed | 1 skipped (1508). The round-2 commits touch only LineItemsPanel.tsx, its pin and the changeset, covered by the pin and sibling runs above.\n\nLight gates, each exit 0 at ef16b93486: check:new-line-citations (VERDICT new-cross-file-line-citations: 0 new citation(s)), check:control-bytes, check:test-path-roots, check:vi-mock-specifiers, check:vi-mock-inherit, check:vi-mock-override-shape, check:shell-escape-residue, check:i18n-keys, check:handler-key-reads, check:element-data-source-declaration, check:self-import, check:unreferenced-sources, type-check:coverage, lint:coverage, check:phantom-deps, check:published-tsconfig-exclude, check:metadata-write-doors; check-changeset-presence (2 source file(s) of 1 released package(s) changed, and this change declares 1 changeset(s)), check-changeset-no-major, check-changeset-fixed, check-changeset-overwrite (No pre-existing changeset was modified or deleted), check-changeset-claims (No pending changeset names a file this change touches), check-pending-changeset-literals; check-governed-merges.mjs --test over the three paths: NOT governed (0 of 3 paths hit the register).\n\neslint, narrowed to the 2 changed ts/tsx files** (eslint --no-inline-config --format json): exit 0, the JSON counts 2 files, 0 errors. Narrowing evidence: the population is eslint.config.js's files: ['**/*.{ts,tsx}']; --print-config on LineItemsPanel.tsx shows parserOptions: {} and no project / projectService, so no rule is type-aware and this diff cannot move the verdict of a file it does not touch. LineItemsPanel.tsx carries 18 warnings, the same count and rule multiset as its base blob (14 no-explicit-any, 2 set-state-in-effect, 2 exhaustive-deps); the pin carries 12 no-explicit-any.\n\nNOT MEASURED locally, declared to CI: the repo-wide pnpm lint and the rest of the farm.\n\n## Serial\n\nAt claim time no open PR touched LineItemsPanel.tsx (claim 5852470959). Before each push, origin/main was fetched into a private ref (01700dcd7d, four commits past the base) and git merge-tree --write-tree against it exited 0 with a clean tree; none of those commits touches a file this branch touches, so no merge commit was needed. objectui#10712's PR 2 is serial behind this PR, as the claim says.\n\n## H5 — pending changesets\n\ngit grep over .changeset/ for LineItemsPanel, line-items, line items: 14 pending files. The sentences that describe this panel's load, rows or save were re-read against this change: 10682-form-error-clears-2.md (only the current load writes the banner; a superseded load neither raises nor clears it — still true), 10631-master-detail-save-in-flight.md (the panel's grid is disabled while its own save is in flight — still true), 6194-line-items-row-fetch-decline.md (the childObject declines and save's guard — still true), 6188, 9050, 9925, 10163, 8221, 9333 (each about another aspect of the panel — untouched). None describes what a failed or declined load for another parent leaves on screen, so no sentence is falsified and no dated note is needed; the new changeset declares this change.\n\n## objectui#10712, measured, not widened\n\nThe same probe took the two sequences objectui#10712's release comment carries for its PR 2, at base and at this head:\n- a late p1 answer landing after p2 committed: base draws ['p1 line'] under p2; head draws the placeholder (rowsHeldFor moved to p1 with the superseded rows, so they are refused), Save off. The current answer, p2's lines, is not kept: the run guard on the rows commit is still that PR's to add.\n- a save started on p1 that lands after the swap to p2: its captured load issues find with po: 'p1'; base draws ['p1 line edited'] under p2; head draws the placeholder. The same partial mitigation, the same remaining item.\nobjectui#10712 remains open; nothing here is scoped to it.\n\n## Round 2\n\nThe Round 1 head 11bf099f11 FAILED the contract review (5852845813) on R7 — a line typed into a grid drawn with no adapter, adopted by the first parent whose load later failed, then saved under it — and on four wording items. Every other Round 1 claim was reproduced by the review.\n\n- Head ef16b93486. Round-2 range 11bf099f11..ef16b93486, name-status / numstat: M packages/plugin-form/src/LineItemsPanel.tsx (+34 / −14), M packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (+42 / −0), M .changeset/10740-line-items-held-for-another-parent.md (+11 / −10). Two commits: 23f6bbc0 closed R7 in onChange, fixed the wording; ef16b9348 gave the onChange owner updater a type-safe spelling (see Deviations).\n- The close. onChange now writes the rows' owner beside the rows when nothing is held yet — the seat's ruling permits the onChange form as "strictly safer" because it covers any way a grid can be offered before a load settles (the adapter-less decline, and a superseded run releasing loading, objectui#10712's surface), not only the two the ruling enumerated. parentId is narrowed in an if (parentId) block before the updater closes over it.\n- The pin. The new R7 row is red on the card base blob AND on the round-1 head blob 47696a5819, green at head, and reddened by A6 (the onChange owner adoption deleted). Table above.\n- Gates. The plugin-form dependency-closure build, type-check (both tsc programs) and build (the dts plugin) all exit 0 at ef16b93486; the pin (9), the seven sibling pins plus recordFormsErrorClears-10682 (8 files / 102), and the light and changeset gates are all green, listed above.\n\n## Acceptance notes\n\n- The function-level guard is unpinned. A2 moves no row, for the structural reason under H2 and in the pin's header. Kept as the write contract's own check; dropping it is a one-line change if the seat prefers pins-only code.\n- The catch failure-adoption is unpinned since Round 2. A5 now moves no row: the onChange adoption covers the same typed-line rows, and an empty grid left by a failed load is never saveable. Kept as the documented adopt-on-failure behavior, parallel to A2.\n- The refused state's placeholder is hard-coded English, like this panel's other placeholders (Loading…, Save the record first to add line items., the childObject hint); only the malformed-filter state goes through createSafeTranslation. Observation, not filed.\n- A superseded save's failure is still written unguarded (PR objectui#10738's note); not re-measured here.\n- A first load that fails still draws an empty editable grid under the banner, as before this card; a line typed there now belongs to that parent and stays with it (H2 item 4).\n- No class (a), (b) or (c) finding beyond the objectui#10712 rows its release comment already carries.\n\n## Deviations\n\n- Attribution. Commit trailers are the dispatch's model-free pair, and this body ends with the role file's session-URL footer. The harness attribution reminder asked for other lines.\n- The seat's prescribed close needed a type-safe spelling. The ruling's line setRowsHeldFor((held) => held ?? parentId) (and equivalently the onChange form) does not type-check: in onChange, parentId is string | null | undefined with no load guard above it to narrow it, and the setter's state is string | undefined, so the updater's held ?? parentId widens to include null — CI job 108556174339 red at src/LineItemsPanel.tsx error TS2345 on commit 23f6bbc0, breaking the plugin-form build and the six gates behind it. Fixed in ef16b93486 by capturing the narrowed value: if (parentId) { const owner = parentId; setRowsHeldFor((held) => held ?? owner); }. Semantics unchanged (a grid is only offered with a parent bound). The catch's copy of the line type-checks because load's early if (!dataSource || !parentId) return; narrows parentId to a string before it.\n- The ablation legs run from inside the worktree, because ablation-replace resolves the repository from its cwd; run through the lock wrapper's default cwd it exits 2 at its own prerequisite (nothing written, nothing measured).\n- A removed pin row (Round 1). The pin's first commit carried a "defence in depth" row that cleared the Save button's disabled on the DOM node and clicked. React filters a click by the fiber's disabled prop, not the DOM property, so the click never reached save and the row passed vacuously (A2 showed it). It was removed in 11bf099f11 rather than kept as a false pin; the pin header states what it would have pinned and why nothing can.\n\n---\n_Generated by Claude Code_\n",
"deviations": [
"The seat prescribed close setRowsHeldFor((held) => held ?? parentId) does not type-check in onChange: parentId is string | null | undefined there (no load guard above it) and the setter state is string | undefined, so the updater widens to include null — CI job 108556174339, error TS2345 at src/LineItemsPanel.tsx on commit 23f6bbc, red plugin-form build + 6 gates. Fixed in ef16b93 by capturing the narrowed value: if (parentId) { const owner = parentId; setRowsHeldFor((held) => held ?? owner); }. Semantics unchanged; the catch copy type-checks because load early-returns on !parentId first.",
"A5 (catch failure-adoption) now moves no pin row, because the round-2 onChange adoption covers the same typed-line rows and an empty grid is never saveable; kept as documented adopt-on-failure behavior, parallel to A2 (both stated in the PR body and pin header).",
"Ablation legs run from inside the worktree (ablation-replace resolves the repo from cwd); through the lock wrapper default cwd it exits 2 at its own prerequisite, nothing written/measured.",
"Attribution: commit trailers are the model-free pair; the harness reminder asked for other lines."
],
"open_questions": [],
"out_of_scope_findings": [
"carrier: objectui#10712 PR 2 · noted, not filed — a late p1 answer after p2 committed, and a save started on p1 landing after the swap: the held-for guard hides the superseded rows but does not keep p2 answer; the run guard on the rows commit is still that PR.",
"carrier: 承接者:无 · observation — the placeholder is hard-coded English like the panel other placeholders; only the malformed-filter notice goes through createSafeTranslation.",
"carrier: 承接者:无 · observation — both the save() function guard (A2) and the catch failure-adoption (A5) are kept-but-unpinned; each is covered on the observable path by, respectively, the button term and the onChange adoption."
]
}

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report
{
"issue": 10740,
"status": "done",
"branch": "claude/issue-10740-line-items-stale-parent",
"pr": "#10751",
"session": "session_014mXUNuFomfj24w7s1pZzhN",
"premise_still_valid": true,
"round": 4,
"head": "854e0922cc (remote head identical)",
"summary": "Round-3 contract review (5853196779) FAILED head ef16b93 on published text only; the code passed (R7 closed, B1-B6 no break, 9 pins + 102 siblings green, type-check and dts build pass). Round 4 does one prose-and-comment commit, 854e092, no code token moved: the changeset parenthetical now separates the three refused states per the record (failed load: placeholder under the banner; refused-filter decline: that filter own notice, as before; lost-adapter decline: the placeholder alone) with the frontmatter byte-identical (md5 21fc281303c02040481bc4b368c13334 before and after); the onChange comment now reads "The grid this was found on is the one drawn when the load declined for want of an adapter" (true against B4b). The PR body replacement applies the record ② fixes verbatim: pin-table red-under column (row 1 A1, A3; row 2 A1; swap-back control —; p2-SUCCEEDS A4 and recovery A3, A4 kept), the A4 bullet cause (p2 own lines refused behind the placeholder), the Serial paragraph re-measured at push time (main 704e05b, nine past base, merge-tree b38dcb1d99 — identical to the record), round renumbering (11bf099 = round 2; 23f6bbc + ef16b93 = round 3; this commit is Round 3 wording follow-up), the H3 closing and H2 item 2 replacements, and the B5 Acceptance note. Returned in pr_body_replacement; the PR body was NOT PATCHed.",
"files_changed": [
"packages/plugin-form/src/LineItemsPanel.tsx (+67/-4 vs base; this commit +4/-4, all four changed lines are // comment lines)",
".changeset/10740-line-items-held-for-another-parent.md (+24/-0 vs base; this commit +3/-2 body prose; frontmatter lines md5 21fc281303c02040481bc4b368c13334 before and after)",
"packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (unchanged this round; +389/-0 vs base)"
],
"prose_only_proof": "git diff ef16b93 854e092 -- packages/plugin-form/src/LineItemsPanel.tsx filtered to changed lines that do not start with // is empty (0 lines); numstat 4/4. Build program unaffected: pnpm --filter @object-ui/plugin-form build exit 0 at ef16b93 (before) and at 854e092 (after), sha256 of dist/index.js 9e08b5589db5715c5701669f5fb3f3cc2952c6b463074323c86d276ee9ceb71d, dist/index.d.ts 08fe75fa41b43873aac028bb3cff496c324dcc40597611181e0a7d31c52b244b, dist/index.umd.cjs 19fddff1b34fdb6af54fa9ae4c9801298c4dedfdaf72337615d1ab5bbe8f8903 — all three identical before and after. --listFilesOnly: panel x1 in the build program, pin x1 in the test program.",
"tests": "Head 854e092, under os-verify-lock (VERDICT command-exit 0, held 41 s): dependency-closure build at ef16b93 Tasks 11 successful, 11 total (dist reused; no source token moved since); pnpm --filter @object-ui/plugin-form run type-check (tsc --noEmit && tsc -p tsconfig.test.json) exit 0; pnpm --filter @object-ui/plugin-form build exit 0, dts declaration files built, dist hashes identical to the before-build; the 9-row pin: Test Files 1 passed, Tests 9 passed (9). The seven sibling LineItemsPanel* pins + recordFormsErrorClears-10682 (8 files / 102 tests), the base legs (A0 card base 5 red, A0 round-2 blob 1 red = R7) and ablations A1-A6 were measured at ef16b93 and confirmed by the round-3 review; not re-run for a prose-only commit (declared narrowing).",
"gates": [
"check-changeset-presence exit 0 (2 source file(s) of 1 released package(s) changed, 1 changeset declared); check-changeset-claims exit 0 (no pending changeset names a file this change touches); check-changeset-overwrite exit 0 (no pre-existing changeset modified/deleted); check-pending-changeset-literals exit 0; check-changeset-no-major and check-changeset-fixed exit 0 — all at 854e092",
"check:control-bytes exit 0 (OK, 8925 tracked text files); check:new-line-citations exit 0 (VERDICT 0 new citation(s)) — at 854e092",
"check-governed-merges.mjs --test over the 3 paths: 0 of 3 hit the register, NOT governed — at 854e092",
"type-check (both tsc programs) exit 0; build exit 0 with dist byte-identical — at 854e092",
"Light gates (test-path-roots, vi-mock x3, shell-escape-residue, i18n-keys, handler-key-reads, element-data-source-declaration, self-import, unreferenced-sources, type-check:coverage, lint:coverage, phantom-deps, published-tsconfig-exclude, metadata-write-doors) and eslint (2 files, 0 errors, not type-aware) were green at ef16b93; this commit changes no code token, declared not re-run",
"CI on 854e092: in_progress (not awaited, per the role file). CI on ef16b93 per the round-3 record: 43 check runs, 40 success, 3 skipped, 0 failures."
],
"serial": "Re-measured immediately before the push: origin/main fetched into refs/os-dev/10740/main = 704e05b, 9 commits past the base 5ad3b88 (identical to the round-3 record); git merge-tree --write-tree exit 0, clean tree b38dcb1d99; none of the 9 commits touches the 3 files (#10752 touched packages/plugin-form elsewhere incl. the header comment of the sibling pin recordFormsErrorClears-10682.test.tsx; #10749 moved pnpm-lock.yaml). No merge commit needed. objectui#10712 PR 2 is serial behind #10751.",
"changeset_frontmatter_md5": {
"before": "21fc281303c02040481bc4b368c13334",
"after": "21fc281303c02040481bc4b368c13334",
"whole_file_before": "26e64842d60a5fb76def282682f4ed35",
"whole_file_after": "b7b3e883a351a959eee47b0b7f7a0a98"
},
"pr_body_replacement": "Fixes #10740\nClause-②: no\n\nA component's internal state and its Save guard; no declared surface moves. @object-ui/plugin-form publishes . only, and no export, type, prop or registration changes. Dispatched by the domain:ui seat 2, session https://claude.ai/code/session_014mXUNuFomfj24w7s1pZzhN (mode:subagent), executing triage 5852239622. Round 3 closes one residual write path (R7) the contract review found; the Round 3 section at the foot carries its head and evidence.\n\n## What changed\n\n- packages/plugin-form/src/LineItemsPanel.tsx (+67 / −4 against base). The panel now records which parent its held rows / original belong to: one useState, rowsHeldFor, written wherever the rows are written — beside a load's commit (setRowsHeldFor(parentId) next to setRows / setOriginal / setDirty(false)), inside the CURRENT load's catch that fails while nothing is held (an updater that keeps a value already held and otherwise adopts parentId, inside isCurrent()), and in onChange for an edit made before any load has settled (the same keep-or-adopt updater, parentId narrowed to a string first). One predicate, heldForAnotherParent = rowsHeldFor !== undefined && rowsHeldFor !== parentId, is read at three sites: the Save button's disabled, the first statement of save after its existing dataSource / parentId / childObject guard (it returns before setSaving, before any batch is built), and the render, where a placeholder (data-testid=\"line-items-held-for-another-parent\") stands in for the grid ahead of LineItemsField. save's and onChange's dependency lists gain what they read (heldForAnotherParent, parentId).\n - Unchanged: the rows commit's three existing statements (setRows / setOriginal / setDirty(false)) and the loading release (objectui#10712's PR 2 surface), the loadSeqRef / isCurrent() error rule from PR objectui#10738, save's two writes to error, every other dependency list, every hook call, prop, export and registration. The commit block gained the setRowsHeldFor(parentId) line and the catch was re-braced to add the adoption; the three commit statements themselves did not move.\n- packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (new, +389 / −0): nine rows through the real SchemaRenderer and record:line_items, every find and batchTransaction a deferred promise settled by hand.\n- .changeset/10740-line-items-held-for-another-parent.md (new, +24 / −0, '@object-ui/plugin-form': patch).\n\n## H1 — the reproduction on base 5ad3b88861, and its controls\n\nA throwaway probe (deleted, never committed) through the real SchemaRenderer and record:line_items, ids explicit. The column is label (aria-label Line), the child object po_line, the relationship field po. Readings at base, then at the current head 854e0922cc (whose only change since ef16b93486 is prose: the readings are the pin's, re-run green there):\n\n| sequence | base 5ad3b88861 | head 854e0922cc |\n|:--|:--|:--|\n| p1 answers l1, edited to p1 line edited; the host re-renders with parentId: 'p2'; p2's load rejects p2 load failed; then Save | banner p2 load failed; drawn lines ['p1 line edited'], inputs enabled; Save enabled; Save ⇒ batchTransaction ops [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p2'}}] (find 2 calls, batchTransaction 1) | banner p2 load failed; drawn lines [], no grid, the placeholder drawn; Save disabled; no batch (find 2, batchTransaction 0) |\n| R7 (the round-3 route): mount p1 with NO adapter (load returns at !dataSource, the grid is drawn, rowsHeldFor stays undefined); type typed under p1; the host moves to p2, still no adapter; the adapter arrives and p2's load fails; then Save | grid drawn with ['typed under p1'], Save enabled; Save ⇒ [{object: 'po_line', action: 'create', data: {label: 'typed under p1', po: 'p2'}}] — a p1-typed line created under p2 | placeholder drawn, [], Save disabled, no batch |\n| lit control: the first row, but p2's load answers l2 p2 line | drawn ['p2 line'], no banner, Save disabled (nothing dirty); edit l2 + Save ⇒ [{object: 'po_line', action: 'update', id: 'l2', data: {label: 'p2 line edited', po: 'p2'}}] | identical |\n| same-parent failed RE-load: p1's edit held, a host re-render with limit: 200 re-runs p1's load, which rejects p1 reload failed | banner; drawn ['p1 line edited'], inputs enabled; Save enabled; Save ⇒ [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p1'}}] | identical (the edits are kept under their own parent) |\n| the DECLINE path: p1's edit held, a re-render with parentId: 'p2' and a refused filter ({note: {$regex: 'a.c'}}); the load declines before any fetch | malformed-filter notice drawn, no grid; Save enabled over the held (off-screen) rows; Save ⇒ [{object: 'po_line', action: 'update', id: 'l1', data: {label: 'p1 line edited', po: 'p2'}}] (find 1 call: the load never ran) | Save disabled; no batch |\n\nThe first row is the card's reading, op for op. R7 and the DECLINE row are two routes the card did not name: R7 is a line typed under a grid drawn with no adapter, adopted by the first parent whose load later fails; the DECLINE row reaches the guard through the load declining before its catch. Both are closed by binding the owner to the rows wherever the rows are written.\n\n## H2 — the shape: refuse by rowsHeldFor; nothing is cleared\n\nThe triage offered two shapes, "clear rows / original" or "refuse Save". This PR refuses, on a value written wherever the rows are written, and clears nothing. Why, measured:\n\n1. The decline path. The DECLINE row above: a swap to p2 with a refused filter (and, by the same code path, a lost dataSource) declines the load before its try, so a clear in the catch leaves p1's held rows saveable under p2. The guard reads the rows' own parent and closes this path too (pinned; red at base).\n2. One writer of the owner per writer of the rows. rowsHeldFor moves where rows move (the load's commit, onChange) and once more where a CURRENT load's failure leaves the empty rows on screen, so the two cannot disagree. This also covers the one-render window between the host re-render that moves parentId and the effect that starts the new load: rows are still p1's, rowsHeldFor still says p1, Save is off in that frame too. R7 is the case where this failed at the round-2 head: onChange moved the rows without moving rowsHeldFor while it was unset, so a line typed under an adapter-less mount stayed ownerless until the next failure adopted it. onChange now writes the owner too.\n3. The same-parent rule. A transient failure on a refresh must not discard the author's unsaved edits (the RE-load row, and the "RE-load of the SAME parent" pin). Held rows are never cleared, so a swap p1 → p2 (failed) → p1 (failed) draws p1's held edit again under p1 (pinned as a control, "a swap BACK to p1"). A clear on the p2 failure would have discarded that edit.\n4. Adoption before a settle. With nothing held yet, the parent on screen is adopted the moment the rows first take a value: an edit made in an unsettled grid (onChange, R7's fix), or the empty rows a CURRENT load's failure leaves on screen (the catch, inside isCurrent()). Either way a line the panel then holds belongs to the parent it was entered under, not to a parent the panel later moves to. Measured at base: a first load for p1 fails, a line is added, the panel moves to p2 whose load fails ⇒ the added line is drawn under p2 with Save enabled (the defect, as a create). Pinned; red at base. A superseded failure adopts nothing (the catch is inside isCurrent()).\n5. What the refused state draws. After a failed load, the failure's banner (the adapter's message, as before) and a muted placeholder where the grid would be; after a refused-filter decline, that filter's own notice, as before (only Save moves on that route); after a lost-adapter decline, the placeholder alone. No line, editable or otherwise. A first load that fails with nothing held is unchanged: banner plus the empty grid with its entry row (pinned as a control). A load for the current parent that commits takes the grid back (pinned).\n\nThe function-level guard in save is the write contract's own check, on the function every caller reaches, in the same spirit as the childObject guard beside it. It is redundant on the UI path by design: the button and the function read the same render's predicate, so no click through the rendered UI reaches save while the button is off. See A2 below.\n\n## H3 — every path from the held rows to a write\n\n1. save → buildMasterDetailEditBatch(parentObject ?? '', parentId, parentPatch, [{rows, original, childSchema, …}]) → runBatchTransaction. Guarded at both readers: the button's disabled and the function's first statement. The rollup sumRows(rows, …) is computed inside the same function, behind the same guard.\n2. onChange → setRows(next), setDirty(true), and the owner adoption. While the grid is drawn, rowsHeldFor is the current parent — set by the load that offered the grid, or, when the grid was offered before any load settled, by this edit itself — so an edit belongs to the parent on screen, never to a parent the panel later moves to. In the refused state the grid is not drawn (ablation A3 re-opens exactly this and the "no p1 line is drawn" rows go red).\n3. The load's commit → setRows / setOriginal / setDirty(false) / setRowsHeldFor(parentId): the writer that defines whose the rows are on a successful load.\n4. LineItemsField (GridField in @object-ui/fields): grep -c useEffect on GridField.tsx at this base = 0; every emit / onChange call sits in a user handler (setCellValue, addRow, the remove handler, the reorder handler), all routed through the panel's onChange in (2). Nothing changes rows without user input, the reading PR objectui#10650 made and this PR re-took.\n5. No values bubble up. The panel takes schema only; the record:line_items registration (LineItemsPanelRenderer inside ElementDataSourceGate) passes nothing else, and the post-save load() reads no rows. No forwardRef / useImperativeHandle / key handler; save is referenced once, at onClick={save}.\n\nSo there is one write path (save), guarded twice, and one edit path (onChange), which brands every row it writes with the parent on screen. R7 is closed: a row can no longer reach a write bearing a parent it was not entered under, whether it was typed before a load settled or held from a previous parent — in the refused state the grid is not drawn, and in every drawn state the owner is unset or equals parentId, and the first edit sets it to parentId.\n\n## Pins and ablations\n\nLineItemsPanel.heldForAnotherParent-10740.test.tsx, nine rows. Base and ablation legs ran on COMMITTED source (ef16b93486, panel blob 5884928c7a) under os-verify-lock; the one later commit, 854e0922cc, moves prose only (no code token, proof in the Round 3 section), and the pin is re-run green there. Each mutation went through objectstack's scripts/ablation-replace.mjs in WRAP mode (anchor declared to hit once, counts and blob hashes read back from disk, restore spelled git checkout HEAD -- on the absolute path and proven by blob == HEAD and an empty git diff HEAD). Two whole-file base legs, each swapped in by hash under a shell trap and restored the same way: the card base blob 0c498ce007 (held ?? parentId occurrences 0), and the round-2 head blob 47696a5819 (occurrences 1 — the fix before R7 was closed). No build is on the resolution path: the pin imports ./index relatively and every @object-ui/* specifier resolves to src through the root vitest alias, so ablation-dist-preflight does not apply.\n\n| row | base 0c498ce007 | round-2 head 47696a5819 | head 854e0922cc | red under |\n|:--|:--|:--|:--|:--|\n| p1 edited, swap to p2 whose load FAILS: no p1 line drawn, Save off, no batch | red | green | green | A1, A3 |\n| the same through a load that DECLINES (refused filter): Save off, nothing sent | red | green | green | A1 |\n| a line added under a FIRST load that failed, then a swap to p2 whose load fails: not drawn under p2, Save off | red | green | green | A1, A3 |\n| R7: a line typed under an ADAPTER-LESS mount on p1, a swap to p2 with no adapter, then the adapter arrives and p2's load fails: no line drawn under p2, Save off, no batch | red | red | green | A1, A3, A6 |\n| control: a swap to p2 whose load SUCCEEDS replaces p1's lines; a save after editing p2's line carries l2 under p2 and nothing of l1 | green | green | green | A4 |\n| control: a RE-load of the SAME parent that fails keeps the held edit drawn, editable, Save on; the save carries l1 under p1 | green | green | green | — |\n| after a refused state, a load for the CURRENT parent that commits takes the grid back | red | green | green | A3, A4 |\n| control: a swap BACK to p1 whose load fails again draws p1's held edit again | green | green | green | — |\n| control: a FIRST load that fails draws the banner and the empty grid, as before | green | green | green | — |\n\n- Base leg, card base blob 0c498ce007: Failed Tests 5 (the four refusal rows plus the recovery row), 4 green. Restore proven (blob == HEAD 5884928c7a, git diff HEAD empty).\n- Base leg, round-2 head blob 47696a5819: Failed Tests 1 — exactly the R7 row. This is the one the round-3 close fixes; every other row was already green at the round-2 head. Restore proven.\n- A1, the button's || heldForAnotherParent removed: 4 failed (the three original "Save off" rows and R7).\n- A2, the save guard neutralised (if (false && heldForAnotherParent) return;): 0 failed, 9 passed. As under H2: with the button guard in place no UI click reaches save, so this hunk is observable only together with A1. Kept as the write contract's own guard, not claimed as pinned.\n- A3, the render branch made unreachable (false && heldForAnotherParent ?): 4 failed (the two "not drawn" rows, R7 and the recovery row).\n- A4, setRowsHeldFor(parentId) deleted from the load commit: 2 failed — the "swap to p2 SUCCEEDS" control and the recovery row, both at expected [] to deeply equal ['p2 line']: with the commit no longer branding the rows, rowsHeldFor stays at the value the p1 edit adopted, so p2's own freshly loaded lines are refused behind the placeholder.\n- A5, the catch failure-adoption deleted: 0 failed, 9 passed. Since Round 3, onChange also adopts, so every row whose owner the catch used to set now has it set by the typed edit (or is an empty grid, never saveable). The catch adoption is retained as the documented adopt-on-failure behavior; like A2 it is kept and not independently pinned. (At the round-2 head, before onChange adopted, A5 reddened the "line added under a FIRST load that failed" row.) Its one remaining observable effect is the B5 Acceptance note below.\n- A6, the onChange owner adoption deleted (setRowsHeldFor((held) => held ?? owner);): 1 failed — exactly the R7 row. This is the ablation of the round-3 close.\n- Each ablation leg printed ok mutation landed: anchor 1 to 0 with the blob change, and ok restored: blob == HEAD (5884928c7a…) and git diff HEAD is empty; the tree was clean before and after (git status --short empty).\n\n## Gates at head 854e0922cc\n\nLocked runs (os-verify-lock, VERDICT command-exit 0 on each):\n- turbo run build --filter='@object-ui/plugin-form^...' --concurrency=2: Tasks: 11 successful, 11 total.\n- pnpm --filter @object-ui/plugin-form run type-check: exit 0 with tsc --noEmit && tsc -p tsconfig.test.json echoed; --listFilesOnly counts the pin once in the tsconfig.test.json program and LineItemsPanel.tsx once in the build program.\n- pnpm --filter @object-ui/plugin-form build: exit 0, [unplugin:dts] Declaration files built, dist/index.js emitted — the dts plugin fails on any type error and did not. The three built artifacts are byte-identical before and after the wording commit: dist/index.js sha256 9e08b5589db5…, dist/index.d.ts 08fe75fa41b4…, dist/index.umd.cjs 19fddff1b34f…, built at ef16b93486 and again at 854e0922cc.\n- the pin: Tests 9 passed (9). The seven existing LineItemsPanel* pins plus recordFormsErrorClears-10682.test.tsx at ef16b93486: Test Files 8 passed (8), Tests 102 passed (102) (the later commit moves no code token).\n- the whole package, pnpm exec vitest run --maxWorkers=2 packages/plugin-form/, at 7352890ae4 (round 1): Test Files 131 passed (131), Tests 1507 passed | 1 skipped (1508). The later commits touch only LineItemsPanel.tsx, its pin and the changeset, covered by the pin and sibling runs above.\n\nLight gates, each exit 0 at 854e0922cc: check:new-line-citations (VERDICT new-cross-file-line-citations: 0 new citation(s)), check:control-bytes; and at ef16b93486 (no source token moved since): check:test-path-roots, check:vi-mock-specifiers, check:vi-mock-inherit, check:vi-mock-override-shape, check:shell-escape-residue, check:i18n-keys, check:handler-key-reads, check:element-data-source-declaration, check:self-import, check:unreferenced-sources, type-check:coverage, lint:coverage, check:phantom-deps, check:published-tsconfig-exclude, check:metadata-write-doors. Changeset gates at 854e0922cc: check-changeset-presence (2 source file(s) of 1 released package(s) changed, and this change declares 1 changeset(s)), check-changeset-claims (No pending changeset names a file this change touches), check-changeset-overwrite (No pre-existing changeset was modified or deleted), check-pending-changeset-literals; check-changeset-no-major and check-changeset-fixed at ef16b93486. check-governed-merges.mjs --test over the three paths: NOT governed (0 of 3 paths hit the register).\n\neslint, narrowed to the 2 changed ts/tsx files (eslint --no-inline-config --format json): exit 0, the JSON counts 2 files, 0 errors. Narrowing evidence: the population is eslint.config.js's files: ['**/*.{ts,tsx}']; --print-config on LineItemsPanel.tsx shows parserOptions: {} and no project / projectService, so no rule is type-aware and this diff cannot move the verdict of a file it does not touch. LineItemsPanel.tsx carries 18 warnings, the same count and rule multiset as its base blob (14 no-explicit-any, 2 set-state-in-effect, 2 exhaustive-deps); the pin carries 12 no-explicit-any.\n\nNOT MEASURED locally, declared to CI: the repo-wide pnpm lint and the rest of the farm.\n\n## Serial\n\nAt claim time no open PR touched LineItemsPanel.tsx (claim 5852470959). Before the round-1 pushes origin/main was 01700dcd7d (four commits past the base); before the round-4 push it is 704e05b09d, nine commits past the base. git merge-tree --write-tree against it exits 0 with a clean tree (b38dcb1d99). None of the nine touches a file this branch touches; #10752 (704e05b09d) touched packages/plugin-form elsewhere (six form arms, recordInvalidation.ts, formArmsInvalidation-10715.test.tsx, and the header comment of the sibling pin recordFormsErrorClears-10682.test.tsx), and #10749 moved pnpm-lock.yaml. objectui#10712's PR 2 is serial behind this PR, as the claim says.\n\n## H5 — pending changesets\n\ngit grep over .changeset/ for LineItemsPanel, line-items, line items: 14 pending files. The sentences that describe this panel's load, rows or save were re-read against this change: 10682-form-error-clears-2.md (only the current load writes the banner; a superseded load neither raises nor clears it — still true), 10631-master-detail-save-in-flight.md (the panel's grid is disabled while its own save is in flight — still true), 6194-line-items-row-fetch-decline.md (the childObject declines and save's guard — still true), 6188, 9050, 9925, 10163, 8221, 9333 (each about another aspect of the panel — untouched). None describes what a failed or declined load for another parent leaves on screen, so no sentence is falsified and no dated note is needed; the new changeset declares this change.\n\n## objectui#10712, measured, not widened\n\nThe same probe took the two sequences objectui#10712's release comment carries for its PR 2, at base and at this head:\n- a late p1 answer landing after p2 committed: base draws ['p1 line'] under p2; head draws the placeholder (rowsHeldFor moved to p1 with the superseded rows, so they are refused), Save off. The current answer, p2's lines, is not kept: the run guard on the rows commit is still that PR's to add.\n- a save started on p1 that lands after the swap to p2: its captured load issues find with po: 'p1'; base draws ['p1 line edited'] under p2; head draws the placeholder. The same partial mitigation, the same remaining item.\nobjectui#10712 remains open; nothing here is scoped to it.\n\n## Round 3\n\nThe round-2 head 11bf099f11 FAILED the contract review (5852845813) on R7 — a line typed into a grid drawn with no adapter, adopted by the first parent whose load later failed, then saved under it — and on four wording items. Every other round-2 claim was reproduced by the review.\n\n- Round-3 range 11bf099f11..ef16b93486, name-status / numstat: M packages/plugin-form/src/LineItemsPanel.tsx (+34 / −14), M packages/plugin-form/src/LineItemsPanel.heldForAnotherParent-10740.test.tsx (+42 / −0), M .changeset/10740-line-items-held-for-another-parent.md (+11 / −10). Two commits: 23f6bbc0 closed R7 in onChange and fixed the wording; ef16b93486 gave the onChange owner updater a type-safe spelling (see Deviations).\n- The close. onChange now writes the rows' owner beside the rows when nothing is held yet — the seat's ruling permits the onChange form as "strictly safer" because it covers any way a grid can be offered before a load settles (the adapter-less decline, and a superseded run releasing loading, objectui#10712's surface), not only the two the ruling enumerated. parentId is narrowed in an if (parentId) block before the updater closes over it.\n- The pin. The new R7 row is red on the card base blob AND on the round-2 head blob 47696a5819, green at head, and reddened by A6 (the onChange owner adoption deleted). Table above.\n- Round-3 wording follow-up, 854e0922cc (prose and comment only; the round-3 contract review 5853196779 passed the code and failed the published text). One commit, ``M .changeset/10740-line-items-held-for-another-parent.md(+3 / −2),M packages/plugin-form/src/LineItemsPanel.tsx` (+4 / −4)`. The changeset parenthetical now reads "(after a failed load a placeholder stands where the grid would be, under the failure's banner; after a refused-filter decline that filter's own notice stands there, as before; after a lost-adapter decline the placeholder stands alone)"; its frontmatter is byte-identical (md5 of the three frontmatter lines `21fc281303c02040481bc4b368c13334` before and after). The `onChange` comment's "The only grid offered before a load has settled…" became "The grid this was found on is the one drawn when the load declined for want of an adapter", which stays true against the superseded-release window (the empty grid drawn while a later read is pending). No code token moved: the commit's `.tsx` hunk has zero non-comment lines (`git diff ef16b93 854e092 -- packages/plugin-form/src/LineItemsPanel.tsx`, filtered to changed lines that do not start with `//`, is empty); type-check and the dts build exit 0; and the three `dist/` artifacts hash-equal before and after (Gates above).\n- Gates. The plugin-form dependency-closure build, `type-check` (both `tsc` programs) and `build` (the dts plugin) all exit 0 at `854e0922cc`; the pin (9) is green there; the seven sibling pins plus `recordFormsErrorClears-10682` (8 files / 102) and the light gates are green at `ef16b93486`; the changeset gates, `check:control-bytes` and `check:new-line-citations` are green at `854e0922cc`, listed above.\n\n## Acceptance notes\n\n- The function-level guard is unpinned. A2 moves no row, for the structural reason under H2 and in the pin's header. Kept as the write contract's own check; dropping it is a one-line change if the seat prefers pins-only code.\n- The `catch` failure-adoption is unpinned since Round 3. A5 now moves no row: the `onChange` adoption covers the same typed-line rows, and an empty grid left by a failed load is never saveable. Kept as the documented adopt-on-failure behavior, parallel to A2.\n- B5. After a FIRST load that fails with nothing typed, a swap to another parent whose load also fails draws the placeholder, not the empty grid (base drew the empty editable grid); the catch adoption's one observable effect now that `onChange` adopts. Unpinned.\n- The refused state's placeholder is hard-coded English, like this panel's other placeholders (`Loading…`, `Save the record first to add line items.`, the `childObject` hint); only the malformed-filter state goes through `createSafeTranslation`. Observation, not filed.\n- A superseded save's failure is still written unguarded (PR objectui#10738's note); not re-measured here.\n- A first load that fails still draws an empty editable grid under the banner, as before this card; a line typed there now belongs to that parent and stays with it (H2 item 4).\n- No class (a), (b) or (c) finding beyond the objectui#10712 rows its release comment already carries.\n\n## Deviations\n\n- Attribution. Commit trailers are the dispatch's model-free pair, and this body ends with the role file's session-URL footer. The harness attribution reminder asked for other lines.\n- The seat's prescribed close needed a type-safe spelling. The ruling's line `setRowsHeldFor((held) => held ?? parentId)` (and equivalently the `onChange` form) does not type-check: in `onChange`, `parentId` is `string | null | undefined` (`RecordContextValue.recordId` is `string | null | undefined`) with no `load` guard above it to narrow it, and the setter's state is `string | undefined`, so the updater's `held ?? parentId` widens to include `null` — CI job 108556174339 red at `src/LineItemsPanel.tsx` `error TS2345` on commit `23f6bbc0`, breaking the plugin-form build and the six gates behind it. Fixed in `ef16b93486` by capturing the narrowed value: `if (parentId) { const owner = parentId; setRowsHeldFor((held) => held ?? owner); }`. Semantics unchanged (a grid is only offered with a parent bound). The `catch`'s copy of the line type-checks because `load`'s early `if (!dataSource || !parentId) return;` narrows `parentId` to a string before it.\n- The ablation legs run from inside the worktree, because `ablation-replace` resolves the repository from its cwd; run through the lock wrapper's default cwd it exits 2 at its own prerequisite (nothing written, nothing measured).\n- A removed pin row (Round 1). The pin's first commit carried a "defence in depth" row that cleared the Save button's `disabled` on the DOM node and clicked. React filters a click by the fiber's `disabled` prop, not the DOM property, so the click never reached `save` and the row passed vacuously (A2 showed it). It was removed in `11bf099f11` rather than kept as a false pin; the pin header states what it would have pinned and why nothing can.\n- Round-4 body corrections (published text only). The round-3 review found four false evidence statements in the returned body and two overstatements; all are replaced here with the record's text: the pin table's "red under" column (A4 reddens only the p2-SUCCEEDS control and the recovery row), the A4 bullet's cause, the Serial paragraph (re-measured at push time), the round numbering (`11bf099f11` was round 2; `23f6bbc0` and `ef16b93486` are round 3), H3's closing and H2 item 2.\n\n---\n_Generated by Claude Code_\n",
"mcp_calls": "0 — no MCP GitHub tool was called (reads via single-card REST GETs: issues/10751/comments, issues/10740/comments, ls-remote).",
"api_writes": "Round 4: git push x1 to claude/issue-10740-line-items-stale-parent (854e092; not REST). 1 REST write through scripts/pm on the fleet relay as objectstack-fleet[bot]: post-stamped.mjs --comment=10740 --repo=objectstack-ai/objectui (this round-4 report), gated on the dry-run Target would be line. No pr_create, no label-write. The PR body change is returned as pr_body_replacement for the seat to apply — NOT PATCHed by this dev.",
"deviations": [
"Prose-only round: the sibling pins, ablation legs and the light/eslint gates were not re-run at 854e092; they were measured at ef16b93 and confirmed by the round-3 review, and the commit moves no code token (proof above: comment-only diff, byte-identical dist). Declared narrowing.",
"The onChange comment re-wrap leaves one short line ("and could save it as its own. Written in the same"); cosmetic, left as is to avoid another commit.",
"Attribution: commit trailers are the model-free pair; the harness reminder asked for other lines."
],
"open_questions": [],
"out_of_scope_findings": [
"carrier: objectui#10712 PR 2 · noted, not filed — a late p1 answer after p2 committed, and a save started on p1 landing after the swap: the held-for guard hides the superseded rows but does not keep p2 answer; the run guard on the rows commit is still that PR.",
"carrier: 承接者:无 · observation — B5: after a FIRST load that fails with nothing typed, a swap to another parent whose load also fails draws the placeholder, not the empty grid (base drew the empty editable grid); the catch adoption one observable effect now that onChange adopts. Unpinned; stated in the body Acceptance notes.",
"carrier: 承接者:无 · observation — the placeholder is hard-coded English like the panel other placeholders; only the malformed-filter notice goes through createSafeTranslation."
]
}

---

Generated by Claude Code