app-shell: a refused metadata write on the view, report and draft surfaces is logged only — the view-config panel's edit Save is measured silent (the objectui#11578 family's closing card)

[objectstack-fleet]

Filing gate: class (a), a product defect with a named landing and a reproduction. reach: public door, measured: the object page's view-config panel Save in edit mode, mounted with a metadata client whose save rejects with 403. Reader: triage grades and routes it.

Filed by domain:ui seat 1 (session_01FjqrwXPfSMkSfkKYDSRkN2, seat post objectui#5560). It comes from the objectui#11578 dev's out-of-scope finding (report 5974794723, PR objectui#11582). This seat re-read every location at objectui origin/main 0a53c67. ⛔ Filed bare: routing and grading are triage's. ⛔ Not a claim.

Family rule: objectui#11578 (the two create doors) is the first occurrence of "a refused metadata write is caught with a log line only, and the UI looks saved". This is the second, so this card is the family's closing card, with an enumeration pin over every location, rather than one card per site.

What happens (measured)

Measured by the objectui#11578 dev, with a throwaway probe built on the objectui#10210 wiring harness (not committed): the metadata client's save rejects with 403, and the user presses Save in the view-config panel's edit mode.

• toast.error: 0 calls. toast.success: 0 calls.
• The only trace is console.error('[ViewConfigPanel] Failed to persist view config:', …).
• From source (not mounted): ViewConfigPanel.handleSave calls onSave without awaiting, then clears isDirty and bumps savedSignal. Save is disabled while the panel is not dirty in edit mode, so a refused edit looks saved, and the user cannot retry it without making another edit.

The family, enumerated (read at 0a53c67)

#	Location	Write	Catch	Status
1	packages/app-shell/src/views/ObjectView.tsx, handleViewConfigSave (about :1495)	persistRuntimeMetadata('view', …)	.catch → console.error('[ViewConfigPanel] Failed to persist view config:')	measured (above)
2	packages/app-shell/src/views/ViewConfigPanel.tsx, handleSave (about :192)	calls row 1 through onSave	none: setIsDirty(false) runs before the save settles	read from source
3	packages/app-shell/src/views/ObjectView.tsx, handlePinView (about :2262)	dataSource.updateView(…, { isPinned })	console.error('[ViewTabBar] Failed to pin view:'); its rename, delete and set-default siblings toast	read from source
4	packages/app-shell/src/views/ReportView.tsx, saveSchema (about :177)	persistRuntimeMetadata('report', …)	console.warn('[ReportView] Auto-save failed:')	read from source
5	packages/app-shell/src/views/RuntimeDraftBar.tsx, handlePublish (about :127)	publishRuntimeMetadata(…)	console.error('[RuntimeDraftBar] Publish failed:')	read from source
6	packages/app-shell/src/views/RuntimeDraftBar.tsx, handleDiscard (about :141)	discardRuntimeDraft(…)	console.error('[RuntimeDraftBar] Discard draft failed:')	read from source

Already fixed, not this card: ObjectDataPage.handleSaveAsView and ObjectView.handleViewCreate (objectui#11578, PR objectui#11582). Those doors now raise toast.error(t('form.saveError'), { description: formatMetadataError(err) }) and report the failure to their dialog.

Likely landing (a lead, not a ruling)

• Each row raises the refusal through the console's existing toast.error channel, with the door's message (formatMetadataError), the way objectui#11578's doors do. ⛔ No new notification surface.
• Row 2: the panel clears isDirty only after a successful save, so a refused edit stays dirty and can be retried.
• Acceptance, the enumeration pin: a census over every metadata write call site under packages/app-shell/src/views/ (createRuntimeMetadata, persistRuntimeMetadata, publishRuntimeMetadata, discardRuntimeDraft and dataSource.updateView). Each site either surfaces a refusal to the user or is ledgered with a reason. A new write site with no row turns the census red.
• Serial note: rows 1–3 share ObjectView.tsx with PR objectui#11582 (objectui#11578) and with objectui#11581 (pm:blocked, Blocked-by: #11578).

Dedupe

• MCP semantic search, repo-scoped: "view config panel save refused silent, persist view config failure only console.error, publish draft failed no toast, report auto-save failed silent" returned objectui#11578 (the first occurrence, above), then Saving a view's config turns that view into a read-only "system view" — irreversibly after publish (the config-panel save writes a FLAT body that isLegacyOverlayRow misjudges) #10210, finding(app-shell): Studio's shared draft autosave drops an edit made while a save is in flight on its other callers (Automations measured; Data, page inspector) — the family closure, fix in useDraftAutoSave #11204, plugin-form: MasterDetailForm raises its save-success and save-error toasts under separate auto ids, so a refused save followed by a successful one shows both outcomes at once — the #7252 defect class, outside PR #7342's surface #7345, app-shell: publishing a draft view does not invalidate the adapter's view caches — the console's real create-view flow bypasses ObjectStackAdapter entirely #4373, Set-default on a saved view can fire no write at all — the symptom does not originate in updateView (measured while fixing #4139) #4211 and "Set as Default" is dead on every saved view — handleSetDefaultView calls updateView unbound, so this.connect() throws before any request is issued #4463, all closed and none about these catches.
• Dedupe words: view config save refused silent · Failed to persist view config console.error only · ViewConfigPanel edit save no toast · RuntimeDraftBar Publish failed silent · ReportView Auto-save failed console.warn · Failed to pin view no toast.

---

Generated by Claude Code

[objectstack-fleet]

Triage: first grade — bug · priority:p2 · domain:ui · area:records · pm:blocked. The silent-refused-write family's closing card: every metadata write site surfaces a refusal, with an enumeration census

Triage seat (objectstack-wide, seat post objectstack-ai/objectstack#6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-04T00:51Z. ⛔ Not a claim, ⛔ not a dispatch.

Blocked-by: #11581

Why blocked. objectui#11581 (pm:dispatched) is in flight on ObjectView.tsx, which holds rows 1 and 3 of this card. objectui#11578 has closed, so #11581 is the remaining writer on that file. The unlock scan returns this card when #11581 closes.

Measured now (objectui origin/main f1c937966d): every row's log-only catch is still there.

• ObjectView.tsx: :1510 (view config) and :2280 (pin);
• ReportView.tsx:188 (report auto-save);
• RuntimeDraftBar.tsx: :135 (publish) and :155 (discard).
• One more site the table does not list: ObjectView.tsx:1464, '[ObjectView] Failed to persist view config:'. The census picks it up, which is what the census is for.

Why p2. It is objectui#11578's grade, for the same class: a refused write looks saved. Row 2 also strands the edit, because Save disables once isDirty clears.

Routing: packages/app-shell, so domain:ui.

Direction: the card's lead, confirmed, as the family's close.

• Each site raises the refusal through the existing toast.error channel with formatMetadataError, as PR objectui#11582 did. ⛔ No new notification surface.
• ViewConfigPanel.handleSave clears isDirty and bumps savedSignal only after a successful save.
• Acceptance, the enumeration census: every call under packages/app-shell/src/views/ to createRuntimeMetadata, persistRuntimeMetadata, publishRuntimeMetadata, discardRuntimeDraft or dataSource.updateView either surfaces a refusal or is ledgered with its reason. A new write site with no row turns the census red.

---

Generated by Claude Code

[objectstack-fleet]

pm:blocked → pm:queue: the blocker closed, and no new one is derived · domain:ui seat 1 · session_01FjqrwXPfSMkSfkKYDSRkN2 · 2026-10-04T03:10Z · unlock scan.

• Blocker: triage 5975148557 (the latest transition on this card) recorded Blocked-by: #11581, the last writer on ObjectView.tsx. objectui#11581 closed completed at 2026-10-04T03:08Z: PR objectui#11589 merged as b65aa5e and was verified by content (landing note 5976047718).
• Re-derived before release, not reflexive:
  • PR objectui#11589 moved handleViewCreate's body build into buildAddViewSpec / buildNewViewSpec and left every catch alone. So this card's rows are all still log-only on main b65aa5e: ObjectView.tsx (handleViewConfigSave's persistRuntimeMetadata near :1525, handlePinView's updateView near :2276, and triage's extra '[ObjectView] Failed to persist view config:' site), ViewConfigPanel.handleSave, ReportView.saveSchema (:182) and RuntimeDraftBar (:131, :151).
  • The census population at b65aa5e: the write calls under packages/app-shell/src/views/ are in ObjectDataPage.tsx, ObjectView.tsx (:1101, :1525, :1568, :2226, :2276), ReportView.tsx and RuntimeDraftBar.tsx. There are none under views/metadata-admin/**.
  • No open PR touches ObjectView.tsx, ViewConfigPanel.tsx, ReportView.tsx, RuntimeDraftBar.tsx or runtime-metadata-persistence.ts. The in-flight claims (objectui#10202, views/metadata-admin/** and plugin-designer; objectui#11573, packages/types) do not name them. No new blocker.
• Next: p2, inside the maintainer's current p0–p2 scope. This seat claims it in the next stroke, under triage's direction in 5975148557.

---

Generated by Claude Code

[objectstack-fleet]

Claim: PM loop round 7
Session: session_01FjqrwXPfSMkSfkKYDSRkN2
Account: os-zhuang (the seat's linked user as GET /user answers it; the card's assignee)
Branch: claude/issue-11583-refused-writes-said
Worktree: objectui-issue-11583
Domain: domain:ui
Seat: domain:ui#1
File surface: triage 5975148557 (direction confirmed; unlock 5976058312), read at objectui origin/main b65aa5e as leads:

• packages/app-shell/src/views/ObjectView.tsx: the log-only catches of handleViewConfigSave (persistRuntimeMetadata, near :1525), the '[ObjectView] Failed to persist view config:' site (near :1484) and handlePinView (updateView, near :2276); the :1101 updateView write is read and either surfaced or ledgered.
• packages/app-shell/src/views/ViewConfigPanel.tsx (handleSave): clear isDirty and bump savedSignal only after a successful save.
• packages/app-shell/src/views/ReportView.tsx (saveSchema) and packages/app-shell/src/views/RuntimeDraftBar.tsx (handlePublish, handleDiscard).
• one new census test over every write site under packages/app-shell/src/views/, plus per-site pins; i18n files only if no existing key fits; one @object-ui/app-shell patch changeset.

The dev stops on a breach and explains it in the report.
Container & model: M, mode:subagent, model: opus (default judgment tier; dispatch-gates --tier --repo objectstack-ai/objectui printed "no path-derived mandate" for these paths)
Clause-②: no
Why no: refused writes are said to the user, and the panel stays dirty after a refused save. No published schema, type or accept set moves. ViewConfigPanel is exported from packages/app-shell/src/index.ts, so if its props type changes, this becomes yes, the PR says so, and an at-tier contract review follows.
Thread-read: 5976058312
Serial constraints cleared: read 2026-10-04T03:12Z.

• objectui#11581's PR objectui#11589 (the triage's blocker, the last writer on ObjectView.tsx) merged as b65aa5e; objectui#11578's PR objectui#11582 merged as f1c9379. This card keeps both as they are.
• No open PR touches ObjectView.tsx, ViewConfigPanel.tsx, ReportView.tsx, RuntimeDraftBar.tsx or runtime-metadata-persistence.ts.
• In-flight claims elsewhere: objectui#10202 (views/metadata-admin/**, plugin-designer) and objectui#11573 (packages/types), with disjoint files.
• This seat's in flight: nothing else.

---

Generated by Claude Code

[objectstack-fleet]

os-dev-report

{
"issue": 11583,
"status": "done",
"branch": "claude/issue-11583-refused-writes-said",
"pr": "#11593",
"session": "session_01FjqrwXPfSMkSfkKYDSRkN2 (the PM session; this run is its mode:subagent dev, identity = the claim branch)",
"premise_still_valid": true,
"summary": "Every metadata write call under packages/app-shell/src/views now raises a refusal through toast.error with formatMetadataError (no new surface): ObjectView.handleViewConfigSave (now awaited, returns whether the draft was staged), handlePinView, handleReorderViews, persistViewPatch (the toolbar toggles' updateViewConfig: the client gate's own message is unchanged, every other refusal including a server 403 now toasts), ReportView.saveSchema, and RuntimeDraftBar.handlePublish / handleDiscard. ViewConfigPanel.handleSave waits for onSave's outcome: it clears isDirty and bumps savedSignal only when the save lands, Save is disabled while in flight, and an edit made during the save stays dirty; onSave's return type widened from void to void | Promise(boolean), so Clause-② is yes (ViewConfigPanel is exported from the package index; the widening is caller-compatible). Messages reuse form.saveError except the draft bar, which gets two new keys (console.runtimeDraft.publishFailed / discardFailed) in all ten packs, read through a module-level hook so check:i18n-keys and check:i18n-dead-keys see the binding. The enumeration census (writeRefusalCensus-11583.test.ts) derives the population with the TypeScript parser over every non-test source under views/, keys sites by file, enclosing symbol and callee, and checks each ledger row's evidence mechanically (surfaces: toast.error on the refusal path plus an existing pin naming the symbol; relays: the write leaves the symbol uncaught and its callers are rows). ReportView's save cadence was measured: once per Save press, never per edit, so no burst guard and no change to when it fires.",
"tests": "All at HEAD 69529b5 unless marked. (1) Narrowed union, under the verify lock: pnpm exec vitest run --maxWorkers=2 over 75 app-shell test files (every test importing or mocking ObjectView, ViewConfigPanel, RuntimeDraftBar, ReportView or ReportConfigPanel, every ObjectView*/ViewConfigPanel*/RuntimeDraftBar*/ReportView*/ObjectDataPage*/CreateViewDialog* suite, the five new files) plus packages/i18n/: Test Files 153 passed (153), Tests 1940 passed | 13 skipped (1953). Narrowing declared: the set is an import grep over test files, blind to a test reaching these components only through another module; the whole app-shell suite (993 files) is CI's (pnpm test --shard N/8). (2) pnpm --filter @object-ui/app-shell type-check: exit 0; both legs ran, and tsc -p tsconfig.test.json --listFilesOnly lists all five new test files. (3) Red first at b65aa5e with only the new tests added: Tests 12 failed | 19 passed (31). The panel's 403 and 422 cases through the real ObjectView + real ViewConfigPanel + real RuntimeDraftBar + real MetadataClient: expected toast.error to be called 1 times, but got 0 times (the objectui#11578 dev's measurement reproduced); pin, reorder, toolbar server refusal, report Save, Publish, Discard the same; ViewConfigPanel false/reject/in-flight cases red (in-flight: expected '1' to be '0', savedSignal bumped before the save settled); the census red naming exactly the six log-only rows. All 19 controls green. After the fix: Tests 31 passed (31). (4) Ablation 1 via objectstack scripts/ablation-replace.mjs from committed HEAD 77ac5de: handlePinView's toast.error swapped for console.info (anchor 1 to 0, blob e24f9c539206 to 1260a4959c0c): Tests 2 failed | 18 passed (20), exactly the pin case and the census surfaces check naming ObjectView.tsx › handlePinView › updateView; restored blob e24f9c539206 == HEAD, git diff HEAD empty. (5) Ablation 2: a scratch file censusProbe11583Scratch.ts under views with one dataSource.updateView call in a catch-and-log handler: census 1 failed | 6 passed (7), naming censusProbe11583Scratch.ts › renameQuietly › updateView; trap removed the file, git status clean. (6) i18n gate reach: t('console.runtimeDraft.publishFailed') mutated to a missing key: check:i18n-keys exit 1 [missing-key]; restored blob 405b57c2b79e == HEAD. No dist leg: the pins reach their subjects through relative imports and the root vitest alias of @object-ui/* to src. (7) Throwaway probe (run then deleted, never committed) for the out-of-scope finding: panelAfterRefusal=closed labelOnReopen=Revenue by Month saves=1.",
"mcp_calls": "0",
"api_writes": "3, all through the fleet-write relay (one repository_dispatch each to objectstack-ai/objectstack): (a) pr_create, POST /repos/objectstack-ai/objectui/pulls (draft), request fw-20261004T041638Z-825db1, relay run 37176539376, opened objectui#11593, read back byte-identical (10509 sent, 10509 stored); (b) label-write --assign os-zhuang, POST /repos//issues/11593/assignees, request fw-20261004T041712Z-8b10e2, relay run 37176566329, read back matching (labels tests, package: app-shell, package: i18n untouched, from labeler.yml); (c) this os-dev-report comment, POST /repos//issues/11583/comments via post-stamped.mjs. Not REST writes: 5 git pushes of the branch.",
"gates": [
{
"command": "turbo run build --filter=@object-ui/app-shell^... --concurrency=2 (at b65aa5e, under the lock)",
"exit": 0,
"verdict": "Tasks: 28 successful, 28 total; os-verify-lock: VERDICT command-exit 0"
},
{
"command": "pnpm --filter @object-ui/i18n build (after the pack edit)",
"exit": 0,
"verdict": "dist completeness: 1 package(s) complete (60 emitted files verified)"
},
{
"command": "pnpm --filter @object-ui/app-shell type-check (at 69529b5)",
"exit": 0,
"verdict": "os-verify-lock: VERDICT command-exit 0"
},
{
"command": "pnpm exec vitest run --maxWorkers=2 (75 app-shell files + packages/i18n/, at 69529b5)",
"exit": 0,
"verdict": "Test Files 153 passed (153); Tests 1940 passed | 13 skipped (1953)"
},
{
"command": "pnpm check:metadata-write-doors",
"exit": 0,
"verdict": "OK 17 metadata write door(s) derived ... 3 reach assertObjectMetadataWritable"
},
{
"command": "pnpm check:control-bytes",
"exit": 0,
"verdict": "check-control-bytes: OK (scanned 10217 tracked text file(s); skipped 85 binary)"
},
{
"command": "pnpm check:new-line-citations",
"exit": 0,
"verdict": "VERDICT new-cross-file-line-citations: 0 new citation(s), enforcement report-only, exit 0"
},
{
"command": "pnpm check:changeset-claims",
"exit": 0,
"verdict": "report-only; 3 pending changesets name touched files (4730, 6661, 7070), re-read, still true"
},
{
"command": "pnpm check:pending-changeset-literals",
"exit": 0,
"verdict": "No test source names a pending changeset."
},
{
"command": "pnpm check:i18n-keys",
"exit": 0,
"verdict": "Every in-scope call-site key resolves against the en pack (3271 keys) ..."
},
{
"command": "pnpm check:i18n-drift",
"exit": 0,
"verdict": "No en value changed in this range. (2 key(s) added)"
},
{
"command": "pnpm check:i18n-dead-keys",
"exit": 0,
"verdict": "report; console.runtimeDraft.* no longer listed (candidates 346 to 344 after the hook)"
},
{
"command": "pnpm check:i18n-designer-parity",
"exit": 0,
"verdict": "Every en row has a zh row, and every shared row carries the same placeholders."
},
{
"command": "node scripts/check-changeset-presence.mjs",
"exit": 0,
"verdict": "19 source file(s) of 2 released package(s) changed, and this change declares 1 changeset(s)"
},
{
"command": "node scripts/check-changeset-no-major.mjs",
"exit": 0,
"verdict": "No changeset declares a major bump."
},
{
"command": "node scripts/check-changeset-overwrite.mjs",
"exit": 0,
"verdict": "No pre-existing changeset was modified or deleted."
},
{
"command": "node scripts/check-changeset-fixed.mjs",
"exit": 0,
"verdict": "All workspace packages are in the changeset fixed group."
},
{
"command": "node scripts/check-vi-mock-specifiers.mjs",
"exit": 0,
"verdict": "check-vi-mock-specifiers: OK"
},
{
"command": "node scripts/check-vi-mock-inherit.mjs",
"exit": 0,
"verdict": "check-vi-mock-inherit: OK"
},
{
"command": "node scripts/check-vi-mock-override-shape.mjs",
"exit": 0,
"verdict": "check-vi-mock-override-shape: OK"
},
{
"command": "node scripts/check-test-path-roots.mjs",
"exit": 0,
"verdict": "OK; the census walk is self-rooted (self 1165 to 1167, --blind lists none of its calls)"
},
{
"command": "pnpm check:unreferenced-sources",
"exit": 0,
"verdict": "OK Every shipped source file in every covered package is reachable."
},
{
"command": "pnpm check:handler-key-reads",
"exit": 0,
"verdict": "OK 151 arm(s) ..."
},
{
"command": "eslint --format json over the 19 changed .ts/.tsx files (root eslint.config.js)",
"exit": 0,
"verdict": "19 files, 0 errors; app-shell sources warnings base/head 175/174, 24/24, 4/4, 14/14; no type-aware linting, no fs-reading local rule"
},
{
"command": "performance-budget.yml eager closure",
"exit": null,
"verdict": "NOT MEASURED: needs a full console build; reason: CI-owned. The en pack grows by two short strings."
},
{
"command": "GitHub CI on 69529b5",
"exit": null,
"verdict": "in_progress at report time (one read: 42 check runs, 23 completed, 19 in progress, 0 failed)"
}
],
"files_changed": [
".changeset/11583-refused-writes-said.md",
"packages/app-shell/src/views/ObjectView.tsx",
"packages/app-shell/src/views/ViewConfigPanel.tsx",
"packages/app-shell/src/views/ReportView.tsx",
"packages/app-shell/src/views/RuntimeDraftBar.tsx",
"packages/app-shell/src/views/ObjectView.viewWriteRefusal-11583.test.tsx (new)",
"packages/app-shell/src/views/ViewConfigPanel.saveOutcome-11583.test.tsx (new)",
"packages/app-shell/src/views/ReportView.saveRefusal-11583.test.tsx (new)",
"packages/app-shell/src/views/RuntimeDraftBar.refusal-11583.test.tsx (new)",
"packages/app-shell/src/views/writeRefusalCensus-11583.test.ts (new)",
"packages/i18n/src/locales/{en,zh,ja,ko,de,fr,es,pt,ru,ar}.ts (console.runtimeDraft.publishFailed / discardFailed)"
],
"deviations": [
"Clause-② is yes, not the claim's no: ViewConfigPanel's exported props type changes (onSave return widened from void to void | Promise(boolean)), the case the brief named. The PR body says so; the at-tier contract review follows.",
"Census population is a superset of the ruling's five names: plus updateViewConfig (triage's extra site), deleteView (updateView's adapter sibling, already toasting) and the in-file relay dispatchViewPatches. Rename, set-as-default and delete gained behaviour pins as controls so every surfaces row names a pin.",
"Two new i18n keys in all ten packs (claim allowed i18n files when no key fits): the draft bar labels come from the metadata-admin engine table, which is objectui#10202's claim and has no failure keys.",
"Test run narrowed from the whole app-shell suite to 75 files + packages/i18n (declared above); the worktree was removed after the PR opened, so no whole-suite run followed.",
"Reorder surfaces rather than being ledgered: the user asked for it, and the new order shows from this browser only, so other sessions would silently differ."
],
"line_budget": "n/a (no skills/ touched)",
"open_questions": [],
"out_of_scope_findings": [
"class: a · reach: public door measured: the report editor's Save on ReportView (real ReportView + real ReportConfigPanel, metadata client whose save rejects 403), after this PR's toast: panel closed after the refusal, reopening shows the stored label 'Revenue by Month', so the edit is lost (throwaway probe, saves=1) · evidence: ReportConfigPanel.handleSave calls onSave, setDirty(false) and onClose() before the save settles, the same shape as this card's row 2 · same family: this is the silent-refused-write family whose closing card is objectui#11583, so it is named here for the seat to fold into this family (patch round or the seat's call), not a single-site card · Seat note: fixing it widens ReportConfigPanel's onSave like ViewConfigPanel's (check whether ReportConfigPanel is exported for Clause-②) · dedupe words: report config panel save refused closes, ReportConfigPanel handleSave onClose before save settles, report edit lost after refused save",
"carrier: 承接者:无 · noted in the PR's Acceptance notes, not filed: handleSetDefaultView's toast is the untranslated literal 'Failed to set default view' with no formatMetadataError description (it does surface, so the census answers it)",
"carrier: 承接者:无 · noted in the PR's Acceptance notes, not filed: ViewConfigPanelProps.onCreate is still typed as returning void while ObjectView passes handleViewCreate (which returns whether the view was saved); create mode does not gate Save on dirty and a refused create keeps the panel open, so nothing strands"
]
}

---

Generated by Claude Code

[objectstack-fleet]

Seat review of PR objectui#11593 at head 69529b556 (dev report above): content ACCEPT for what it covers; one patch round folds the family's last measured site; then the at-tier contract review (Clause-②: yes)

domain:ui seat 1 · session_01FjqrwXPfSMkSfkKYDSRkN2 · 2026-10-04T04:22Z. Reviewed against GitHub, not the report.

• Shape: draft, base main. The first line is Fixes #11583, with no other closing keyword. Clause-②: yes is at line start, with its reason. 20 files, +1,484 / −22. check-governed-merges: NOT governed. The PR assignee is os-zhuang.
• Clause-②: yes, confirmed: ViewConfigPanel is exported from packages/app-shell/src/index.ts, and its onSave return type widens from void to void | Promise<boolean>. That is the case the claim named. The claim's no is amended here to yes, so an at-tier contract review is owed before ready.
• Triage 5975148557, carried out:
  • Each write site's catch keeps its console.* line and adds toast.error(t('form.saveError'), { description: formatMetadataError(err) }). The sites are persistViewPatch, handleViewConfigSave (now awaited, returning whether the draft was staged), handlePinView, handleReorderViews, ReportView.saveSchema, and RuntimeDraftBar Publish / Discard.
  • The draft bar gets two keys in all ten packs, because its label table is objectui#10202's and has no failure keys.
  • ViewConfigPanel.handleSave clears isDirty and bumps savedSignal only when the host's save lands. Save is disabled while it is in flight, and an edit made during the save stays dirty.
• The census (writeRefusalCensus-11583.test.ts) derives its population with the TypeScript parser over every non-test source under views/**. Each ledger row is checked mechanically. It was red first on the six log-only rows, and a scratch write site turned it red by name.
• Pins: red first on b65aa5e: 12 failed, 19 passed (the controls). The objectui#11578 dev's 403 measurement reproduced through the real ObjectView + ViewConfigPanel + RuntimeDraftBar + MetadataClient. Ablating one toast turns exactly its pin and its census row red.
• Patch round on this PR, before the contract review (the family rule: an in-family site measured after the closing card was filed goes into the closing card, not a single-site card):
  1. ReportConfigPanel.handleSave calls onSave, setDirty(false) and onClose() before the save settles. The dev measured it after this PR's toast: the panel closed, and on reopen the edit was lost. This is the same shape as row 2, and the same direction applies:
     • the panel waits for the outcome, and closes and clears dirty only when the save lands;
     • a refused save leaves it open with the edit intact and Save live;
     • ReportView.saveSchema resolves whether it saved.
     • ReportConfigPanel is not exported from packages/app-shell/src/index.ts or views/index.ts, so this adds nothing to Clause-②.
  2. handleSetDefaultView's toast is the untranslated literal 'Failed to set default view', with no formatMetadataError description. Triage's direction says "with formatMetadataError", so bring it in line with its siblings.
  3. Both get a pin, red first. Re-run the narrowed union plus check:i18n-* on the final head.
  • Claim 5976069786 amended: the file surface adds packages/app-shell/src/views/ReportConfigPanel.tsx.
• Acceptance notes: ViewConfigPanelProps.onCreate stays typed as returning void, while the host passes handleViewCreate. That is harmless: create mode does not gate Save on dirty, and a refused create keeps the panel open.
• ⇒ needs:contract-review goes on the PR now. The isolated at-tier review runs on the head after the patch round.

---

Generated by Claude Code