fix(app-shell)!: SchemaForm resolves a { group } form section instead of crashing, and the form-section types match the spec (objectui#8725)

[objectstack-fleet]

Fixes #8725
Clause-②: yes

Implements the PM ruling on objectui#8725 (comment 5594804560), relayed by triage 5858999555 and claimed by the domain:ui seat 2 claim 5863212314. Session: https://claude.ai/code/session_014mXUNuFomfj24w7s1pZzhN.

What changed

• Part 1. FormSectionSpec.fields is optional in form-spec.ts, matching @objectstack/spec's FormSection. In the spec, group is the other way to declare a section's members.
• Arm B. SchemaForm resolves a form's sections once, in a new module-private resolveFormSections, before any read of fields. The pre-flight for…of in SchemaFormBody is one of those reads, and it was the one that threw first. A { group } section goes through @object-ui/plugin-form's resolveSectionGroupReferences, the resolver ObjectForm and the console FormPage already use. SectionedSchemaForm now takes the resolved sections, typed ResolvedFormSection (fields present), so the simple and tabbed reads cannot see an unresolved section. A section declaring neither fields nor group still throws, now as a TypeError that names the section. ⛔ No ?? [] on any section's fields.
• Behaviour change beyond the crash. A section carrying both fields and group (a shape @objectstack/spec 17.4.0 refuses at parse, re-measured) now takes the resolver's answer for its group. In a metadata-type editor that is an empty section plus the same console.error, where it used to render its enumerated fields. Forms none of whose sections carries a group key are unchanged: the resolver returns such a list by identity.
• Arm C, last. RichMetadataTypeEntry.form is FormViewSpec instead of Record OF (string, unknown). Its JSDoc says this is a TYPE on an unvalidated server document, not a check of it, and names the measured shape gaps (below). The as any casts at the three ResourceEditPage reads and the one EmbeddedItemEditor read are gone. EmbeddedItemEditor's fallback form slot takes the same type; no fallback entry declares a form.
• Pins. The test(app-shell): measure whether a { group } form section reaches SchemaForm (#8725) #8739 crash pins went red with the fix and were rewritten in the same commit (arm C's type pin moved with arm C). Type-level collateral: FormSectionSpec['fields'][number] is now read through NonNullable in form-spec.containers.test.tsx PIN D and in the console's FormPage.fieldSpec.test.ts, and four mergeServerFields.test.ts reads use !. The ! throws; ?? [] would have made their not.toContain legs vacuous.
• Changesets. .changeset/8725-formsection-group-resolves.md bumps @object-ui/app-shell minor with a BREAKING (types) banner (see the consumer sweep). The pending measurement entry .changeset/quiet-pans-repeat.md gets a dated note, in the objectui#10533 form, with byte-identical (empty) frontmatter.

What object definition SchemaForm resolves against, measured

The resolver resolves group against the bound object's fieldGroups. SchemaForm's 13 production call sites are all metadata-type editors: forms carrying data: { provider: 'schema', schemaId }. The /meta/types entry carries a schema and a form but no field groups: RichMetadataTypeEntry declares none, and objectstack's metadata-protocol, objectql and rest sources have zero fieldGroups hits. No host hands SchemaForm an object definition. So the resolver is called with objectDef: null, resolvable: false. The second is its own documented flag for "this form can never load an object definition". Every { group } section here is therefore the ruling's "group that names no declared field group", and it gets the resolver's defined answer for that case.

⚠️ This departs from the dispatch's first suggested pin ("renders the resolver's fields, matching FormPage for the same document"). That pin presupposes an object definition this component never has. Adding an objectDef prop would put an input with zero producers on the published component. The pin is written instead against the resolver called with SchemaForm's own inputs. That is the same answer FormPage gives for the same section over an object that does not declare the group (H2 b).

H1 to H3

H1 (confirmed on base 45dbf1cba). A server-shaped form { type: 'simple', data: { provider: 'schema', schemaId }, sections: [{ group: 'contact_info' }] } makes SchemaForm throw TypeError: s.fields is not iterable. The { fields: ['a'] } control renders BasicsField A.

H2 (measured, resolver and FormPage.buildSections over a ticket object declaring contact_info and billing).

case	resolveSectionGroupReferences	FormPage.buildSections
(a) { group: 'billing' }	{ name: 'billing', label: 'Billing Details', fields: ['invoice_no','po_number'] }, no diagnostic	label Billing Details, fields invoice_no, po_number
(b) { group: 'no_such_group' }	{ fields: [] } plus one console.error naming the group, the object and fieldGroups	no label, zero fields, one console.error
(b) no objectDef, resolvable default	{ fields: [] }, no diagnostic (read as a load in flight)	n/a
(b) no objectDef, resolvable: false	{ fields: [] } plus the same console.error	n/a (the arm SchemaForm takes)
(c) { fields: ['channel'], group: 'billing' }	the billing section; authored channel dropped, no diagnostic	Billing Details with invoice_no, po_number
neither, { label: 'X' }	returned untouched, by identity	label X, zero fields, silent (FormPage's own ?? [])

H3 (reader census).

• Typed reads of FormSectionSpec.fields, found by the compiler. With part 1 alone, the app-shell src program reports three TS18048 errors, all in SchemaForm.tsx: the pre-flight for…of, the renderSection .map and the tabbed .some. All three now read ResolvedFormSection (arm B). The test programs report PIN D (TS2537) plus four TS18048 in mergeServerFields.test.ts. The console test program reports TS2537 on the FormPage.fieldSpec.test.ts element path, which cascades into its excess-key directive. All are fixed as above.
• Guarded or untyped reads, found by grep. mergeServerFields.formDeclaredFields, and the dashboard-schema / page-schema / report-schema / view-schema adapters, read s.fields ?? [] over the BUNDLED spec forms. These predate this change. Measured against installed spec 17.4.0, 17 bundled metadata forms (75 sections, 222 field rows) carry no group section and no section without fields, so these adapters see only enumerated sections. ResourceEditPage's issue-label lookup is Array.isArray-guarded. For a { group } section it falls back to the schema title, the same thing SchemaForm shows after resolving the section empty. FormPage's later sec.fields reads take its RenderableSection rows, which buildSections builds from the resolver's output. ObjectForm resolves first (objectui#7051). metadata-form-i18n and ViewPreview guard with Array.isArray. ViewPreview spreads the section, so group survives and ObjectForm's resolver still resolves it.
• RichMetadataTypeEntry.form. It has four reads, in ResourceEditPage (two SchemaForm handoffs and the label lookup) and EmbeddedItemEditor (one). All are typed now. SchemaForm is the only renderer.

Arm C's server-shape check. The spec's parsed FormView type is not assignable to FormViewSpec. A per-key probe finds 12 incompatible positions. Section level: label, visibleWhen, visibleOn, fields. Field level: options, label, placeholder, helpText, colSpan, visibleWhen, visibleOn, fields. These are the narrowings form-spec.ts already declares: I18nLabel versus string, ExpressionInput versus VisibilityPredicate, and the 26-key converged leaf. The values measured on the 17 bundled forms stay within FormViewSpec. Every label is a string, every predicate is a string or has source, and every colSpan is 1 to 4. The exceptions are keys FormFieldSpec does not declare: span (the parse default 'auto', on all 222 rows) and keyField (one objectForm row). Reported per the ruling, not widened. Whether a live /meta/types response ever carries a locale-map label is NOT MEASURED (no server in this run).

Pins and ablation

The pin file SchemaForm.groupSectionReachability-8725.test.tsx has two parts. Runtime (vitest, per-test JSON reporter):

• CONTROL (fields section renders)
• ORDER (resolver's fields, resolver's order, siblings intact)
• DIAGNOSTIC (a group naming no declared group renders empty AND console.error names the group, the schemaId and fieldGroups)
• TABBED (the tabbed arm resolves and keeps its other tabs)
• REFUSAL ×2 (a section with neither key throws a TypeError naming it, simple and tabbed)

Type-level (judged by tsc -p packages/app-shell/tsconfig.test.json):

• T1: { group } compiles as FormSectionSpec, with a @ts-expect-error negative control on { group: 42 }.
• T2: RichMetadataTypeEntry['form'] equals FormViewSpec and refuses an undeclared key.

leg	tree	result
head	496c63c061	6/6 passed; app-shell type-check exit 0
base: the five changed sources checked out at 45dbf1cba, head pins kept	proved on disk (5 blobs equal BASE, not HEAD); restored by state (git diff HEAD empty, 5 blobs equal HEAD)	runtime 1 passed / 5 failed: CONTROL green; ORDER, DIAGNOSTIC and TABBED fail on expected TypeError: s.fields is not iterable to be undefined; both REFUSAL pins fail on expected 's.fields is not iterable' to contain '"Contact"'; 0 suite deaths. tsc: T1 TS2322 plus TS2344, T2 TS2344 plus TS2578
leg 1: arm B's resolution reverted (the mapping reads form.sections instead of the resolver's output)	anchor 1→0, injected 0→1, blob changed, restored	exactly ORDER, DIAGNOSTIC and TABBED red; CONTROL and both REFUSAL pins green
leg 2: the report silenced (resolvable: false becomes true)	same proof	first run NEGATIVE: all green, because the test's own resolver call also reported and the console was read after it. The pin was fixed to read the console right after render (b392cbd44f). Rerun: DIAGNOSTIC alone red
leg 3: arm-A caricature (a memberless section becomes fields: [])	first attempt VOID: the replacement contained the anchor, and ablation-replace.mjs refused it (anchor 1→1). Rerun with a disjoint anchor landed	both REFUSAL pins alone red

Each leg ran from a committed tree through ablation-replace.mjs WRAP mode, with EXIT/INT/TERM restore on absolute paths and restore proven by blob hash plus git diff HEAD. No build is needed: the pin imports ./SchemaForm relatively, and vitest aliases @object-ui/plugin-form to its src, so no dist is on the path. Base leg and leg 1 were rerun on the final head.

Consumer sweep (a gate)

git grep for FormSectionSpec|FormViewSpec|RichMetadataTypeEntry|resolveSectionGroupReferences|\bSchemaForm\b over packages/*/src/* and apps/*/src/* returns 113 files. The population is 5230 files; the control is metadata-admin/SchemaForm.tsx, 1 hit. Of the 113, 56 are tests. Outside src, the hits are changesets, CHANGELOGs, docs and one script test. Every hit test was run, plus every FormPage.* test and the whole metadata-admin/ (inspectors included) and studio-design/ directories. All ran at 496c63c061, under the verify lock, JSON reporter, requested-versus-reported file counts reconciled:

chunk	files	tests	result
console FormPage.* (23), plugin-form (2), core ratchet (1), scripts/__tests__/one-authority-per-exported-name-6273 (1)	27	219	219 passed, 0 suite deaths
packages/app-shell/src/views/metadata-admin/ (3 chunks)	329	3935	3934 passed, 1 skipped (a pre-existing flow-node-config.spec-reconciliation case), 0 suite deaths
packages/app-shell/src/views/studio-design/	67	365	365 passed, 0 suite deaths

Type-checks, after building the dependency closure pnpm --filter '@object-ui/console^...' build (33 packages), all at 496c63c061:

• @object-ui/app-shell exit 0.
• @object-ui/console exit 0.
• @object-ui/plugin-form exit 0.

The importers of these types are app-shell and the console. The core and react hits name SchemaForm in comments only.

Reverse verification (console reads the REBUILT .d.ts): a temporary console file typed { group: 'contact_info' } as FormSectionSpec, which compiled, and gave RichMetadataTypeEntry['form'] an undeclared key, which was refused with TS2353 (does not exist in type 'FormViewSpec'). The file was then removed.

Semver. Outside SchemaForm, whose three reads (TS18048 under part 1) are what this change fixes, no published source had to change to compile. The other readers that changed were tests: two type-level test pins (app-shell PIN D, console FormPage.fieldSpec.test.ts) and four mergeServerFields assertions. That is exactly what an external reader of section.fields faces, hence minor plus the BREAKING (types) banner and the !. ⛔ Not major.

Gates

All verdict lines were read with the exit code captured before any pipe, at 496c63c061:

• check-changeset-presence exit 0: "9 source file(s) of 2 released package(s) changed, and this change declares 1 changeset(s)".
• check-changeset-no-major exit 0.
• check-changeset-overwrite exit 0. It reports quiet-pans-repeat.md as modified (the dated note: case 2, prose correction, frontmatter empty before and after).
• check-changeset-claims exit 0. Five pending changesets name touched files (6247, 5596, 5542, 5040, 5595). Each paragraph was re-read and none became false.
• check-changeset-fixed exit 0.
• check:pending-changeset-literals exit 0.
• check:control-bytes exit 0 (9149 files), plus a manual control-byte scan of the 11 changed files: no hits.
• check:new-line-citations: "0 new citation(s)".
• check:phantom-deps and check:unused-deps exit 0. @object-ui/plugin-form was already declared; AppContent and MetadataProvider already import it statically, so the eager closure gains no module.
• check:spec-symbols exit 0.
• check:vi-mock-inherit exit 0. Every app-shell vi.mock of @object-ui/plugin-form spreads importOriginal.
• check:test-path-roots, check:unreferenced-sources and check-type-check-coverage exit 0.
• check-governed-queue-guard --test on the 11 paths: NOT GOVERNED.

ESLint, declared narrowing: the 9 changed TS files, counted from --format json, gave 0 errors and 90 warnings, all on pre-existing lines. The four removed as any casts take their warnings with them. The population is eslint.config.js's **/*.{ts,tsx} blocks. Type-aware linting is not configured there (no parserOptions.project or projectService), so this diff cannot move a verdict on an untouched file. The repo-wide pnpm lint is CI's.

NOT MEASURED:

• check:eager-closure, which needs a console vite build. performance-budget.yml runs it.
• check:readme-exports: no export changed.
• The full @object-ui/app-shell suite outside metadata-admin/ and studio-design/: declared to CI. Every file that names these symbols is inside the swept set.

Serial

The open-PR file lists were re-read before the first edit (9 open PRs, no overlap) and before the final push (5 open PRs). Nothing touches metadata-admin/form-spec.ts, SchemaForm* or packages/plugin-form/src, or any other file here. The one exception is the release PR #5400 (changeset-release/main), which deletes pending changesets, quiet-pans-repeat.md among them. If it lands first, the dated-note hunk becomes a modify/delete conflict, resolved by taking the deletion. git merge-tree --write-tree against a fresh origin/main (244d516df4) is clean. None of main's 226 files changed since the base names a swept symbol. The merge queue was empty at branch time.

Fix round 1 (contract review), head e8422e785e

One text-only commit, e8422e785e, on top of 496c63c061:

• Changeset, closing line. Replaced. The "spec refuses at parse" clause was re-measured on installed @objectstack/spec 17.4.0: FormSectionSchema REJECTS { fields, group } ("mutually exclusive"), and FormViewSchema rejects it at sections.0.group. Controls: { group } alone and { fields } alone both ACCEPT.
• Changeset, BREAKING paragraph. It now says SchemaForm's three reads were the published source part 1 broke. The frontmatter is byte-identical.
• RichMetadataTypeEntry.form JSDoc. Comment lines only; the typed line form?: FormViewSpec; is byte-identical. FormViewSpec is not widened.
• REFUSAL pin. expect(html).toBe('') is dropped. It could only pass, because html was assigned only when nothing threw. html is gone from the helper. The pin stays red on base for its stated reason and red under the arm-A caricature.

Verdicts at e8422e785e, under the verify lock:

• Pin file: 6/6 passed.
• Base leg (the five changed sources at 45dbf1cba, restored by state): 1 passed, 5 failed. Both REFUSAL pins fail on expected 's.fields is not iterable' to contain '"Contact"'. 0 suite deaths.
• Ablation leg 3 (arm-A caricature): both REFUSAL pins, and only they, go red with expected undefined to be an instance of TypeError.
• Changeset-reading tests: 11 scripts/__tests__ files, 369/369 passed. They are check-changeset-claims, -presence, -overwrite, -no-major, -fixed, check-pending-changeset-literals, changeset-polarity-census, changeset-release-action-ref-pin, render-changeset-claims-comment, check-spec-range-floors and quick-reference-current-release-4143.
• @object-ui/app-shell type-check: exit 0, after rebuilding its dependency closure.
• Gates, all exit 0:
  • check-changeset-claims: same 5 pending changesets named, none false.
  • check-changeset-presence: "9 source file(s) of 2 released package(s) changed, and this change declares 1 changeset(s)".
  • check-changeset-overwrite: reports the quiet-pans-repeat.md dated note.
  • check-changeset-no-major: "No changeset declares a major bump".
  • check-changeset-fixed, check:pending-changeset-literals, check:control-bytes and check:new-line-citations (0 new).

Acceptance notes

• Scope grew by three files beyond the claim's list. Arm C's retype lives in useMetadata.ts, and dropping its casts touches ResourceEditPage.tsx and EmbeddedItemEditor.tsx. The console's FormPage.fieldSpec.test.ts took the type collateral.
• resolveSectionGroupReferences silently drops authored fields beside a group that resolves (H2 c). The resolver's own header says it refuses "the shapes the spec refuses, out loud rather than silently", and GROUP_OWNED_SECTION_KEYS does not list fields. The spec door refuses that shape at parse. No reach was measured, so this is not filed. In SchemaForm the group never resolves, so the dangling-group console.error fires regardless. Carrier: none.
• FormPage.buildSections renders a section with neither fields nor group as a silent empty card (its own ?? []). The spec door refuses that shape. Not touched here (app-shell FormSectionSpec re-declares fields as REQUIRED, so the spec-legal { group } section does not compile — and SchemaForm's three unguarded s.fields reads are a fourth form-section consumer #8725's ruling covers SchemaForm). Carrier: none.
• The bundled-form adapters (view-schema and its three siblings) would drop a { group } section of a BUNDLED spec form silently, because they filter out sections whose fields ?? [] is empty. No bundled form authors one (measured above). Carrier: none.
• requiredInGatedSection.sectionMemberNames reads enumerated members only, so that advisory does not examine a { group } section's members. This is a read-only inference; carrier: none.
• SchemaForm gains a module-level diagnostic: one console.error per (schemaId, group) pair, from the resolver's own reportOnce.

---

Generated by Claude Code

[github-actions]

changeset-claim-re-read

⚠️ 5 pending changeset(s) describe a file this change touches

Their bodies publish verbatim into the CHANGELOG at the next release, so this is a request to re-read them against your diff — addressed here because you are the one seat that can answer it without re-deriving anything.

⛔ Nothing here blocks, and nothing here is a verdict on your change. This gate exits 0, is not a required context, and judges name resolution, never meaning: it asked whether a pending body names a file you touched. "Is this sentence still true?" is the one question it will not answer, and the one you are being asked to answer.

.changeset/6247-option-visiblewhen-metadata-admin.md

• names SchemaForm.tsx → packages/app-shell/src/views/metadata-admin/SchemaForm.tsx — edited by this change

  Three consuming controls now filter, and each has a pin asserting an option absent on a false predicate: the builtin Select in SchemaForm.tsx, MultiSelectWidget, and colorPaletteOptions → ColorSwatchGroupWidget. Asserting absence is the whole of the test design — this evaluator fails OPEN, so "the option is shown" is equally the outcome of predicate-true, predicate-never-arrived and predicate-faulted, and a positive-only pin passes against the unfixed renderer.

.changeset/console-form-container-specs-one-declaration-5596.md

• names SchemaForm.tsx → packages/app-shell/src/views/metadata-admin/SchemaForm.tsx — edited by this change

  objectui#5542 converged the LEAF of this contract — the field spec — and left the two containers above it untouched, because converging them was a bigger call than a mechanical import. FormSectionSpec and FormViewSpec were each hand-declared twice under the same names, once in packages/app-shell's SchemaForm.tsx and once in apps/console's FormPage.tsx. Unlike the leaf — whose console copy was a clean subset — these two had already drifted, in both directions, so neither copy was a subset of the other and there were two live answers to "what may an author write":

• names form-spec.containers.test.tsx → packages/app-shell/src/views/metadata-admin/form-spec.containers.test.tsx — edited by this change

  The pins are what make future drift loud, and each half is pinned on both sides. form-spec.containers.test.tsx and FormPage.viewSpec.test.ts compare the non-narrowed half of each type against the spec's own symbol, so re-hand-writing either declaration fails type-check the day the spec moves rather than years later when someone reads two files side by side — and the console's pins read both types back out of the exported buildSections signature rather than naming them, so a re-inlined local copy fails even if it agrees on every key on the day it is written. Their liveness controls are what stop them being phantom checks: the removed copies are pinned NOT equal to the shared types (proving the Equal helper still discriminates), the renderer's honoured RenderableSection is pinned not equal either (so the authored-document and honoured-row types cannot be collapsed again), and an undeclared key is still rejected (so the derivation smuggled in no index signature or any). Every narrowing carries a matching negative pin, so "derived" cannot quietly become "widened to whatever the spec says".

.changeset/console-form-field-spec-one-declaration-5542.md

• names views/metadata-admin/form-spec.ts → packages/app-shell/src/views/metadata-admin/form-spec.ts — edited by this change

  objectui#5040 was not a missing key. It was that two hand-written descriptions of one contract drifted, and nothing could notice, because each was only ever checked against itself. PR metadata-admin: FormFieldSpec declares dependsOn, one declaration for both halves #5537 converged the two app-shell descriptions into views/metadata-admin/form-spec.ts. A third survived in apps/console: FormPage.tsx declared its own nine-key interface FormFieldSpec, under the same name, in a different package — so the same failure mode stayed fully available.

• names form-spec.ts → packages/app-shell/src/views/metadata-admin/form-spec.ts — edited by this change

  @object-ui/app-shell therefore re-exports FormFieldSpec from its package root (type-only, erased at build — nothing is added to the bundle), and FormPage.tsx imports it and deletes the local declaration. Reachability is the load-bearing half: a type that cannot be imported is a type that gets retyped, and retyped copies drift. form-spec.ts itself is untouched.

• names FormPage.fieldSpec.test.ts → apps/console/src/components/FormPage.fieldSpec.test.ts — edited by this change

  FormPage.fieldSpec.test.ts is the pin that makes future drift loud. It reads the field-spec type back out of the exported buildSections signature rather than naming it, so re-inlining a local interface FormFieldSpec fails type-check even if the copy agrees on every key on the day it is written — which is exactly what did not happen to the copy this change removes. Its liveness controls are what stop it being a phantom check: the removed nine-key shape is pinned NOT equal to the shared type (so the Equal helper is proven to still discriminate), RenderableField is pinned not equal to it either (so the honoured-row and authored-document types cannot be collapsed again), and an undeclared key is still rejected (so the import did not smuggle in an index signature). Behaviour is unchanged: the runtime always accepted these keys, and the vitest half proves the same rows are built.

.changeset/formfieldspec-dependson-5040.md

• names views/metadata-admin/form-spec.ts → packages/app-shell/src/views/metadata-admin/form-spec.ts — edited by this change

  No runtime behaviour changes: MetadataField already handed dependsOn through and both widgets already read it. What changes is the type face — it now admits what the runtime has always accepted. The two descriptions are one declaration, extracted to a leaf module (views/metadata-admin/form-spec.ts) that both halves import, because SchemaForm.tsx imports ./widgets.js and a back-edge would close a cycle. SchemaForm.tsx re-exports FormFieldSpec and VisibilityPredicate, so every existing importer is unaffected.

• names SchemaForm.tsx → packages/app-shell/src/views/metadata-admin/SchemaForm.tsx — edited by this change

  No runtime behaviour changes: MetadataField already handed dependsOn through and both widgets already read it. What changes is the type face — it now admits what the runtime has always accepted. The two descriptions are one declaration, extracted to a leaf module (views/metadata-admin/form-spec.ts) that both halves import, because SchemaForm.tsx imports ./widgets.js and a back-edge would close a cycle. SchemaForm.tsx re-exports FormFieldSpec and VisibilityPredicate, so every existing importer is unaffected.

.changeset/formpage-maxlength-override-5595.md

• names FormPage.fieldSpec.test.ts → apps/console/src/components/FormPage.fieldSpec.test.ts — edited by this change

  The pin #5542 left behind — expect(row.maxLength).toBeUndefined() in FormPage.fieldSpec.test.ts, which recorded the old answer explicitly rather than assuming it — is inverted to toBe(40) rather than deleted. It was the pre-registered evidence for this fix, and it is what made the gap findable in the first place, so it keeps its place and names the honoured answer.

Read the paragraph, not the line: both false halves of the objectui#8617 claim sat in one paragraph, and correcting either alone would have left it asserting the same wrong thing.

If a claim did go false, correct the body. That is precedented and prose-only, frontmatter untouched; check-changeset-overwrite.mjs will report the correction as its own case 2 ("correcting a declaration on purpose … legitimate"), which is the intended shape — one gate asks for the read, the other records the write.

Not covered, stated so nobody reads this as more: a born-false claim that spells no line address at all (objectui#9495 coordinated one by ORDINAL — "a grep finds that member first" — and deciding that means reading what the sentence means), a claim spelled as a symbol or a package rather than a backticked file name, and a file named ambiguously.

Compared the checked-out tree with 9f0c84a44 (merge-base with origin/main): 9 file(s) changed outside .changeset/, read against 1667 pending declaration(s) that publish a body (2260 pending in total). · run

[github-actions]

✅ Console Performance Budget

Metric	Value	Budget
Eager closure (gzip, 329 chunks)	3095.9 KB	3104.5 KB
Main entry chunk (gzip)	148.5 KB	350 KB
Entry file	index-CDF4JOsl.js	—
Status	PASS	—

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.

---

📦 Bundle Size Report

Package	Size	Gzipped
app-shell (consoleActionDispatch.js)	0.20KB	0.19KB
app-shell (index.js)	16.58KB	6.17KB
app-shell (runtime-config.js)	20.68KB	7.36KB
app-shell (types.js)	0.01KB	0.04KB
app-shell (urlParams.js)	10.06KB	3.86KB
auth (ActiveOrganizationStorage.js)	27.95KB	10.04KB
auth (AuthContext.js)	0.31KB	0.24KB
auth (AuthGuard.js)	2.07KB	1.00KB
auth (AuthProvider.js)	40.17KB	10.58KB
auth (AuthShell.js)	3.49KB	1.40KB
auth (ForgotPasswordForm.js)	12.21KB	3.45KB
auth (LoginForm.js)	18.15KB	5.39KB
auth (PreviewBanner.js)	0.90KB	0.50KB
auth (RegisterForm.js)	6.65KB	2.22KB
auth (SocialSignInButtons.js)	9.61KB	3.89KB
auth (UserMenu.js)	3.39KB	1.21KB
auth (auth-gate-events.js)	1.29KB	0.66KB
auth (authStyles.js)	5.04KB	1.72KB
auth (createAuthClient.js)	40.21KB	10.80KB
auth (createAuthenticatedFetch.js)	8.52KB	3.45KB
auth (index.js)	3.63KB	1.64KB
auth (invitation-status.js)	1.22KB	0.70KB
auth (org-roles.js)	6.66KB	2.78KB
auth (phone-identifier.js)	1.11KB	0.66KB
auth (types.js)	0.59KB	0.35KB
auth (useAuth.js)	5.30KB	1.02KB
auth (useWorkspaceAdminStatus.js)	11.08KB	4.58KB
collaboration (CommentThread.js)	27.13KB	7.95KB
collaboration (LiveCursors.js)	3.17KB	1.27KB
collaboration (PresenceAvatars.js)	6.49KB	2.64KB
collaboration (PresenceProvider.js)	2.79KB	1.13KB
collaboration (index.js)	1.68KB	0.73KB
collaboration (useCollaborationTranslation.js)	6.05KB	2.52KB
collaboration (useCommentSearch.js)	1.98KB	0.88KB
collaboration (useConflictResolution.js)	7.75KB	1.86KB
collaboration (useMentionNotifications.js)	1.81KB	0.68KB
collaboration (usePresence.js)	6.33KB	1.84KB
collaboration (useRealtimeSubscription.js)	7.91KB	2.01KB
components (index.js)	557.59KB	133.60KB
core (index.js)	9.93KB	3.94KB
create-plugin (index.js)	27.94KB	9.51KB
data-objectstack (index.js)	226.44KB	63.00KB
fields (index.js)	261.01KB	66.28KB
i18n (LocalizationContext.js)	1.76KB	0.96KB
i18n (builtinAggregateLabels.js)	0.86KB	0.49KB
i18n (currency.js)	2.59KB	1.22KB
i18n (fallbackInterpolation.js)	6.25KB	2.77KB
i18n (i18n.js)	8.87KB	3.64KB
i18n (index.js)	5.24KB	2.27KB
i18n (pickLocalized.js)	9.86KB	3.95KB
i18n (provider.js)	39.40KB	12.91KB
i18n (translateFn.js)	0.20KB	0.18KB
i18n (useDisplayLocale.js)	3.52KB	1.76KB
i18n (useObjectLabel.js)	34.34KB	9.17KB
i18n (useSafeTranslation.js)	5.60KB	2.33KB
layout (index.js)	39.32KB	11.09KB
mobile (MobileProvider.js)	0.92KB	0.49KB
mobile (ResponsiveContainer.js)	0.94KB	0.38KB
mobile (breakpoints.js)	1.51KB	0.70KB
mobile (createOfflineDataSource.js)	5.61KB	1.75KB
mobile (index.js)	1.99KB	0.87KB
mobile (offlineQueue.js)	3.91KB	1.35KB
mobile (pwa.js)	0.97KB	0.49KB
mobile (serviceWorker.js)	1.48KB	0.62KB
mobile (serviceWorkerSource.js)	3.41KB	1.48KB
mobile (useBreakpoint.js)	1.54KB	0.65KB
mobile (useGesture.js)	6.96KB	1.98KB
mobile (useOfflineSync.js)	1.99KB	0.72KB
mobile (usePullToRefresh.js)	6.62KB	2.45KB
mobile (useResponsive.js)	0.72KB	0.42KB
mobile (useSpecGesture.js)	5.52KB	2.10KB
mobile (useTouchTarget.js)	1.01KB	0.54KB
permissions (MePermissionsProvider.js)	13.52KB	4.88KB
permissions (PermissionContext.js)	0.31KB	0.25KB
permissions (PermissionGuard.js)	0.89KB	0.45KB
permissions (PermissionProvider.js)	6.24KB	2.16KB
permissions (discardProofCache.js)	1.04KB	0.55KB
permissions (evaluator.js)	8.33KB	3.07KB
permissions (index.js)	0.93KB	0.41KB
permissions (store.js)	0.91KB	0.42KB
permissions (useFieldPermissions.js)	1.28KB	0.53KB
permissions (usePermissions.js)	4.83KB	2.27KB
plugin-ai (index.js)	16.01KB	3.93KB
plugin-calendar (index.js)	51.96KB	14.83KB
plugin-charts (index.js)	83.99KB	22.86KB
plugin-chatbot (index.js)	197.67KB	46.90KB
plugin-dashboard (index.js)	136.93KB	36.48KB
plugin-designer (index.js)	215.03KB	44.21KB
plugin-detail (index.js)	233.48KB	61.79KB
plugin-editor (index.js)	2.23KB	1.05KB
plugin-form (index.js)	161.21KB	41.41KB
plugin-gantt (index.js)	170.35KB	42.19KB
plugin-grid (index.js)	228.33KB	62.59KB
plugin-kanban (index.js)	48.43KB	15.11KB
plugin-list (index.js)	115.86KB	28.64KB
plugin-map (index.js)	22.90KB	7.62KB
plugin-markdown (index.js)	13.88KB	4.80KB
plugin-report (index.js)	44.17KB	12.20KB
plugin-timeline (index.js)	31.00KB	9.09KB
plugin-tree (index.js)	11.21KB	3.89KB
plugin-view (index.js)	88.55KB	22.21KB
providers (DataSourceProvider.js)	0.75KB	0.39KB
providers (MetadataProvider.js)	1.37KB	0.59KB
providers (ThemeProvider.js)	1.90KB	0.85KB
providers (UploadProvider.js)	11.81KB	3.58KB
providers (index.js)	0.45KB	0.23KB
providers (types.js)	0.01KB	0.04KB
react-runtime (index.js)	5.62KB	2.34KB
react (LazyPluginLoader.js)	4.47KB	1.63KB
react (SchemaRenderer.js)	119.16KB	39.05KB
react (data-invalidation.js)	5.05KB	2.08KB
react (index.js)	4.03KB	1.86KB
react (schema-input.js)	4.25KB	2.04KB
react (spec-input.js)	0.20KB	0.18KB
sdui-parser (body-dialect.js)	4.78KB	2.09KB
sdui-parser (codegen.js)	7.50KB	3.05KB
sdui-parser (dashboard-widget-options.js)	3.08KB	1.30KB
sdui-parser (index.js)	6.16KB	2.71KB
sdui-parser (input-type.js)	2.84KB	1.40KB
sdui-parser (kanban-quick-add.js)	3.89KB	1.87KB
sdui-parser (parse.js)	25.28KB	7.80KB
sdui-parser (provenance.js)	3.84KB	1.90KB
sdui-parser (types.js)	0.28KB	0.23KB
sdui-parser (validate.js)	18.27KB	6.22KB
types (ai.js)	4.39KB	2.17KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	3.83KB	1.49KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	2.93KB	1.49KB
types (crud.js)	0.20KB	0.18KB
types (dashboard-filter-alias.js)	6.23KB	2.74KB
types (data-display.js)	3.75KB	1.85KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (designer.js)	1.85KB	0.85KB
types (disclosure.js)	0.20KB	0.18KB
types (error-code.js)	1.54KB	0.88KB
types (expression.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (http-inflight.js)	8.87KB	3.73KB
types (http-retry.js)	4.32KB	2.02KB
types (icon-key-migration.js)	4.26KB	1.63KB
types (index.js)	4.74KB	2.26KB
types (layout.js)	0.20KB	0.18KB
types (managed-by.js)	0.19KB	0.18KB
types (mobile.js)	5.00KB	2.39KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (permissions.js)	2.52KB	1.31KB
types (plugin-scope.js)	0.20KB	0.18KB
types (record-components.js)	0.20KB	0.19KB
types (record-semantics.js)	1.28KB	0.67KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (select-option.js)	0.20KB	0.19KB
types (spec-report.js)	5.05KB	1.93KB
types (spec-ui-namespace.js)	0.20KB	0.19KB
types (strict-authoring-face.js)	17.15KB	6.32KB
types (system-fields.js)	3.33KB	1.54KB
types (theme.js)	6.27KB	2.87KB
types (ui-action.js)	8.11KB	3.32KB
types (views.js)	0.20KB	0.18KB
types (widget.js)	0.20KB	0.18KB

Size Limits

• ✅ Core packages should be < 50KB gzipped
• ✅ Component packages should be < 100KB gzipped
• ⚠️ Plugin packages should be < 150KB gzipped

[objectstack-fleet]

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 496c63c061ad3f0a44e0727dd48c7c7173deb954

① Derived judgments

• Fidelity to the ruling: holds.
  • Every section fields read in SchemaForm.tsx goes through resolveFormSections first: the pre-flight for…of, the renderSection .map and the tabbed .some.
  • SectionedSchemaForm takes ResolvedFormSection only.
  • The diff's one ?? [] is on the resolver's returned list, behind a form?.sections?.length guard; it is not arm A.
• { group } parity with the resolver and FormPage: holds.
  • SchemaForm passes objectDef: null, resolvable: false, the resolver's documented flag for "can never load an object definition". It yields the resolver's own answer (fields: [] plus one reportOnce console.error), not a second one.
  • The premise was checked: objectstack's metadata-protocol / objectql / rest have 0 fieldGroups hits, and all 13 hosts are metadata-type editors.
  • The seat ruled open question A (no object-definition input).
• Visibility: compliant with the ruling as worded. Neither FormPage nor SchemaForm shows the user a notice; the console.error is the report that separates this from the fenced ?? []. The residual cost (a form of only { group } sections renders a blank editor) is stated in the changeset.
• Neither fields nor group: the divergence from FormPage is required by the ruling. SchemaForm throws a TypeError naming the section, as main threw, while FormPage's silent sec.fields ?? [] is the fenced pattern.
• Arm C is a type, with no runtime validation, reported rather than widened, per the ruling. Non-blocking: the form JSDoc's "an honest one only because…" overclaims, given the 12 incompatible positions the dev's probe found.
• Pins: sound.
  • They were rewritten in the fix commit, not deleted.
  • Red on base for the stated reasons.
  • ORDER asserts literals.
  • DIAGNOSTIC alone discriminates arm B from ?? [], and the repaired ablation leg 2 reddens it alone.
  • Nit: REFUSAL's expect(html).toBe('') is tautological.
• The dated note on quiet-pans-repeat.md: in the objectui#10533 form, frontmatter byte-identical, every sentence true.
• Blocking: two changeset sentences are false.
  1. "No change for any form whose sections all enumerate fields: the resolver returns such a list by identity." A section carrying both fields and group now takes the resolver's answer for its group (the dev's own H2 c).
  2. "No published source in this repository had to change." Part 1 broke SchemaForm.tsx's three reads (TS18048).

② Semver level

'@object-ui/app-shell': minor plus the BREAKING (types) banner, ! in the title, Clause-②: yes: correct. RichMetadataTypeEntry, FormSectionSpec and FormViewSpec are exported. ⛔ Not major.

③ Boundary flags

• CI on head: 39 success, 3 skipped, 0 failure; final, including all 8 test shards.
• git merge-tree against main 9f0c84a44: clean.
• The release PR objectui#5400 deletes .changeset/quiet-pans-repeat.md. If it lands first, take the deletion.
• NOT GOVERNED (0 of 11 paths).
• Draft, assigned to os-elon-musk.
• needs:contract-review was not on the PR at review time. The seat applies it now: a seat error, recorded.

Implemented-by: claude/issue-8725-formsection-group-resolves
Reviewed-by: session_014mXUNuFomfj24w7s1pZzhN

VERDICT: FAIL

The fixes are wording, in .changeset/8725-formsection-group-resolves.md: the closing line and the BREAKING paragraph's "no published source" sentence. The form JSDoc, the REFUSAL tautology and the PR body's "No ?? [] anywhere" ride the same commit.

[github-actions]

✅ Console Performance Budget

Metric	Value	Budget
Eager closure (gzip, 329 chunks)	3095.9 KB	3104.5 KB
Main entry chunk (gzip)	148.5 KB	350 KB
Entry file	index-CDF4JOsl.js	—
Status	PASS	—

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.

---

📦 Bundle Size Report

Package	Size	Gzipped
app-shell (consoleActionDispatch.js)	0.20KB	0.19KB
app-shell (index.js)	16.58KB	6.17KB
app-shell (runtime-config.js)	20.68KB	7.36KB
app-shell (types.js)	0.01KB	0.04KB
app-shell (urlParams.js)	10.06KB	3.86KB
auth (ActiveOrganizationStorage.js)	27.95KB	10.04KB
auth (AuthContext.js)	0.31KB	0.24KB
auth (AuthGuard.js)	2.07KB	1.00KB
auth (AuthProvider.js)	40.17KB	10.58KB
auth (AuthShell.js)	3.49KB	1.40KB
auth (ForgotPasswordForm.js)	12.21KB	3.45KB
auth (LoginForm.js)	18.15KB	5.39KB
auth (PreviewBanner.js)	0.90KB	0.50KB
auth (RegisterForm.js)	6.65KB	2.22KB
auth (SocialSignInButtons.js)	9.61KB	3.89KB
auth (UserMenu.js)	3.39KB	1.21KB
auth (auth-gate-events.js)	1.29KB	0.66KB
auth (authStyles.js)	5.04KB	1.72KB
auth (createAuthClient.js)	40.21KB	10.80KB
auth (createAuthenticatedFetch.js)	8.52KB	3.45KB
auth (index.js)	3.63KB	1.64KB
auth (invitation-status.js)	1.22KB	0.70KB
auth (org-roles.js)	6.66KB	2.78KB
auth (phone-identifier.js)	1.11KB	0.66KB
auth (types.js)	0.59KB	0.35KB
auth (useAuth.js)	5.30KB	1.02KB
auth (useWorkspaceAdminStatus.js)	11.08KB	4.58KB
collaboration (CommentThread.js)	27.13KB	7.95KB
collaboration (LiveCursors.js)	3.17KB	1.27KB
collaboration (PresenceAvatars.js)	6.49KB	2.64KB
collaboration (PresenceProvider.js)	2.79KB	1.13KB
collaboration (index.js)	1.68KB	0.73KB
collaboration (useCollaborationTranslation.js)	6.05KB	2.52KB
collaboration (useCommentSearch.js)	1.98KB	0.88KB
collaboration (useConflictResolution.js)	7.75KB	1.86KB
collaboration (useMentionNotifications.js)	1.81KB	0.68KB
collaboration (usePresence.js)	6.33KB	1.84KB
collaboration (useRealtimeSubscription.js)	7.91KB	2.01KB
components (index.js)	557.59KB	133.60KB
core (index.js)	9.93KB	3.94KB
create-plugin (index.js)	27.94KB	9.51KB
data-objectstack (index.js)	226.44KB	63.00KB
fields (index.js)	261.01KB	66.28KB
i18n (LocalizationContext.js)	1.76KB	0.96KB
i18n (builtinAggregateLabels.js)	0.86KB	0.49KB
i18n (currency.js)	2.59KB	1.22KB
i18n (fallbackInterpolation.js)	6.25KB	2.77KB
i18n (i18n.js)	8.87KB	3.64KB
i18n (index.js)	5.24KB	2.27KB
i18n (pickLocalized.js)	9.86KB	3.95KB
i18n (provider.js)	39.40KB	12.91KB
i18n (translateFn.js)	0.20KB	0.18KB
i18n (useDisplayLocale.js)	3.52KB	1.76KB
i18n (useObjectLabel.js)	34.34KB	9.17KB
i18n (useSafeTranslation.js)	5.60KB	2.33KB
layout (index.js)	39.32KB	11.09KB
mobile (MobileProvider.js)	0.92KB	0.49KB
mobile (ResponsiveContainer.js)	0.94KB	0.38KB
mobile (breakpoints.js)	1.51KB	0.70KB
mobile (createOfflineDataSource.js)	5.61KB	1.75KB
mobile (index.js)	1.99KB	0.87KB
mobile (offlineQueue.js)	3.91KB	1.35KB
mobile (pwa.js)	0.97KB	0.49KB
mobile (serviceWorker.js)	1.48KB	0.62KB
mobile (serviceWorkerSource.js)	3.41KB	1.48KB
mobile (useBreakpoint.js)	1.54KB	0.65KB
mobile (useGesture.js)	6.96KB	1.98KB
mobile (useOfflineSync.js)	1.99KB	0.72KB
mobile (usePullToRefresh.js)	6.62KB	2.45KB
mobile (useResponsive.js)	0.72KB	0.42KB
mobile (useSpecGesture.js)	5.52KB	2.10KB
mobile (useTouchTarget.js)	1.01KB	0.54KB
permissions (MePermissionsProvider.js)	13.52KB	4.88KB
permissions (PermissionContext.js)	0.31KB	0.25KB
permissions (PermissionGuard.js)	0.89KB	0.45KB
permissions (PermissionProvider.js)	6.24KB	2.16KB
permissions (discardProofCache.js)	1.04KB	0.55KB
permissions (evaluator.js)	8.33KB	3.07KB
permissions (index.js)	0.93KB	0.41KB
permissions (store.js)	0.91KB	0.42KB
permissions (useFieldPermissions.js)	1.28KB	0.53KB
permissions (usePermissions.js)	4.83KB	2.27KB
plugin-ai (index.js)	16.01KB	3.93KB
plugin-calendar (index.js)	51.96KB	14.83KB
plugin-charts (index.js)	83.99KB	22.86KB
plugin-chatbot (index.js)	197.67KB	46.90KB
plugin-dashboard (index.js)	136.93KB	36.48KB
plugin-designer (index.js)	215.03KB	44.21KB
plugin-detail (index.js)	233.48KB	61.79KB
plugin-editor (index.js)	2.23KB	1.05KB
plugin-form (index.js)	161.21KB	41.41KB
plugin-gantt (index.js)	170.35KB	42.19KB
plugin-grid (index.js)	228.33KB	62.59KB
plugin-kanban (index.js)	48.43KB	15.11KB
plugin-list (index.js)	115.86KB	28.64KB
plugin-map (index.js)	22.90KB	7.62KB
plugin-markdown (index.js)	13.88KB	4.80KB
plugin-report (index.js)	44.17KB	12.20KB
plugin-timeline (index.js)	31.00KB	9.09KB
plugin-tree (index.js)	11.21KB	3.89KB
plugin-view (index.js)	88.55KB	22.21KB
providers (DataSourceProvider.js)	0.75KB	0.39KB
providers (MetadataProvider.js)	1.37KB	0.59KB
providers (ThemeProvider.js)	1.90KB	0.85KB
providers (UploadProvider.js)	11.81KB	3.58KB
providers (index.js)	0.45KB	0.23KB
providers (types.js)	0.01KB	0.04KB
react-runtime (index.js)	5.62KB	2.34KB
react (LazyPluginLoader.js)	4.47KB	1.63KB
react (SchemaRenderer.js)	119.16KB	39.05KB
react (data-invalidation.js)	5.05KB	2.08KB
react (index.js)	4.03KB	1.86KB
react (schema-input.js)	4.25KB	2.04KB
react (spec-input.js)	0.20KB	0.18KB
sdui-parser (body-dialect.js)	4.78KB	2.09KB
sdui-parser (codegen.js)	7.50KB	3.05KB
sdui-parser (dashboard-widget-options.js)	3.08KB	1.30KB
sdui-parser (index.js)	6.16KB	2.71KB
sdui-parser (input-type.js)	2.84KB	1.40KB
sdui-parser (kanban-quick-add.js)	3.89KB	1.87KB
sdui-parser (parse.js)	25.28KB	7.80KB
sdui-parser (provenance.js)	3.84KB	1.90KB
sdui-parser (types.js)	0.28KB	0.23KB
sdui-parser (validate.js)	18.27KB	6.22KB
types (ai.js)	4.39KB	2.17KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	3.83KB	1.49KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	2.93KB	1.49KB
types (crud.js)	0.20KB	0.18KB
types (dashboard-filter-alias.js)	6.23KB	2.74KB
types (data-display.js)	3.75KB	1.85KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (designer.js)	1.85KB	0.85KB
types (disclosure.js)	0.20KB	0.18KB
types (error-code.js)	1.54KB	0.88KB
types (expression.js)	0.20KB	0.18KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (http-inflight.js)	8.87KB	3.73KB
types (http-retry.js)	4.32KB	2.02KB
types (icon-key-migration.js)	4.26KB	1.63KB
types (index.js)	4.74KB	2.26KB
types (layout.js)	0.20KB	0.18KB
types (managed-by.js)	0.19KB	0.18KB
types (mobile.js)	5.00KB	2.39KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (permissions.js)	2.52KB	1.31KB
types (plugin-scope.js)	0.20KB	0.18KB
types (record-components.js)	0.20KB	0.19KB
types (record-semantics.js)	1.28KB	0.67KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (select-option.js)	0.20KB	0.19KB
types (spec-report.js)	5.05KB	1.93KB
types (spec-ui-namespace.js)	0.20KB	0.19KB
types (strict-authoring-face.js)	17.15KB	6.32KB
types (system-fields.js)	3.33KB	1.54KB
types (theme.js)	6.27KB	2.87KB
types (ui-action.js)	8.11KB	3.32KB
types (views.js)	0.20KB	0.18KB
types (widget.js)	0.20KB	0.18KB

Size Limits

• ✅ Core packages should be < 50KB gzipped
• ✅ Component packages should be < 100KB gzipped
• ⚠️ Plugin packages should be < 150KB gzipped

[objectstack-fleet]

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: e8422e785ecb285c1097e6736493001dc62473ff

This is an in-seat delta review of fix round 1 (496c63c06 to e8422e785, one text-only commit), against record 5864444942 (FAIL, wording only).

① Derived judgments

• Changeset closing line: fixed, verbatim. Its "a shape @objectstack/spec refuses at parse" clause is true against the installed 17.4.0:
  • FormSectionSchema rejects { fields, group } with "group and fields are mutually exclusive on this form section", and FormViewSchema rejects it at sections.0.group;
  • controls: { group } alone and { fields } alone both accept.
• The BREAKING paragraph: fixed, verbatim. It reads "Outside SchemaForm, whose three reads are what this change fixes, no published source in this repository had to change." The frontmatter is byte-identical.
• The RichMetadataTypeEntry.form JSDoc now calls the retype a TYPE on an unvalidated server document, not a check. It names the measured gaps: the I18nLabel locale map, ExpressionInput versus VisibilityPredicate, the wider colSpan / options, and the undeclared span / keyField. Only comment lines changed: form?: FormViewSpec; is byte-identical, and FormViewSpec is not widened.
• The REFUSAL pin's tautological html assertion is removed. The pin stays red on base for its named reason. The arm-A caricature ablation still reddens exactly the two REFUSAL pins.
• The PR body r2 (applied with this landing):
  • "No ?? [] on any section's fields";
  • a What-changed bullet for the fields-plus-group change;
  • the Semver paragraph mirrors the changeset;
  • Fixes #8725 is the only closing keyword, with no path:line references.
• Gates at head:
  • the pin file: 6 of 6;
  • the changeset-reading script tests: 369 of 369;
  • app-shell type-check exit 0;
  • the changeset gates, control-bytes and new-line-citations all exit 0.

② Semver level

'@object-ui/app-shell': minor plus the BREAKING (types) banner, with Clause-②: yes. ⛔ Not major.

③ Boundary flags

• CI: the landing waits for every check on this head to be final and green, and re-runs git merge-tree against current main.
• The release PR objectui#5400 deletes .changeset/quiet-pans-repeat.md; if it lands first, take the deletion.
• NOT GOVERNED.
• Draft, assigned to os-elon-musk, with needs:contract-review.

Implemented-by: claude/issue-8725-formsection-group-resolves
Reviewed-by: session_014mXUNuFomfj24w7s1pZzhN

VERDICT: PASS