fix(plugin-gantt): resolve a locale-map label in the gantt export filename

[yinlianghui]

Fixes#6052

What was wrong

ObjectGantt builds the exportFileName it hands GanttView from a ?? chain whose
second link is schema.label, wrapped in a bare String(...). BaseSchema.label is
string | I18nLabel since #4580's revised Q1-A ruling — I18nLabel being the spec's
INLINE locale MAP — so a gantt authored as

{ "type": "object-gantt", "objectName": "task",
"label": { "en": "Shift Plan", "zh-CN": "排班计划" } }

exported [object Object]-20260825-0256.png. That filename is not a reconstruction: it is
the literal string this branch's ablation run produced (below).

Premise re-verified on the merged ref, as triage asked

• PR feat(types,plugin-gantt): declare the ten gantt keys ObjectGantt reads through a cast #6053 merged as 00f3eb5b9. Its only touch at this call site was dropping the cast:
  (schema as any).label → schema.label — measured with git log -L 1504,1512, the diff
  is that one token. Behaviour-preserving, exactly as the card asserts; the defect is
  live and pre-existing, and nothing here is already-resolved.
• The chain on merged main is verbatim what the card quoted.
• useDisplayLocale() is in scope at ObjectGantt.tsx:438 — feat(types,plugin-gantt): declare the ten gantt keys ObjectGantt reads through a cast #6053 did not move it.
• resolveI18nLabel(label, locale) is exported from @objectstack/spec/ui; verified
  against the installed package, not the card's prose:
  resolveI18nLabel({en:'Shift Plan','zh-CN':'排班计划'},'zh-CN') → 排班计划.

The fix

resolveI18nLabel from @objectstack/spec/ui — the producer's own resolver for that
vocabulary — against the display locale already in scope. Imported aliased as
resolveInlineI18nLabel, following PR #4169's convention, because this repo has its own
resolveI18nLabel over the KEYED vocabulary and neither accepts the other's shape.

The resolver answers undefined on an absent label or a total miss, which is why it sits
inside the ?? chain rather than around it: a missing label falls through to the next
link exactly as it always did. No lenient coercion is added — the chain resolves the
declared vocabulary, it does not accept a second one (AGENTS.md #0.1).

objectSchema?.label — measured together, deliberately treated differently

The card asked for the next link to be measured with this one rather than after it. It was,
and it needs the opposite treatment, which is why it is untouched:

objectSchema is the DATA object's metadata, and the spec declares
label: z.string().optional() on ObjectSchemaBase
(packages/spec/src/data/object.zod.ts:1560) — which is a strictObject. A locale map in
that slot is rejected by the producer at parse, not something this consumer should learn
to resolve. Wrapping it in resolveI18nLabel would be accepting a second vocabulary at a
read site, i.e. the exact shape #0.1 rules out, and it would make the consumer tolerant of
metadata the producer refuses. If that slot ever needs locale maps, it widens in the spec
first and this link follows. A CONTROL test pins that the link still passes its declared
plain string through untouched.

Filename sanitisation — the chain already does it, no finding filed

The PM advisory asked whether a resolved locale map can carry filename-hostile characters.
It can, and the chain already sanitises, downstream of this call site:
GanttView.tsx:3065 strips [\\/:*?"<>|\s]+ from the name before appending the timestamp.
A resolved map entry goes through the identical strip a plain string does, so this change
adds no sanitisation and needs none. Nothing to file.

Which assertions would still pass on a revert

Stated plainly, because most of this file is deliberately revert-green. The produced name is
BASE-yyyyMMdd-HHmm.png, so the rows below name the BASE and match the stamp:

Assertion	On a revert
locale map → base 排班计划 for a zh-CN audience	FAILS — [object Object]-20260825-0256.png
the same map → base Shift Plan for an en audience	FAILS — [object Object]-20260825-0256.png
CONTROL: plain-string label names the file itself	still passes
CONTROL: explicit exportFileName wins the chain	still passes
CONTROL: no label falls through to objectName	still passes
CONTROL: no view label falls through to objectSchema.label	still passes

Four of the six are must-not-change pins by construction: the defect only exists for a MAP,
so a plain-string pin is a phantom assertion, green on both sides. They are here so the fix
cannot pass by breaking the string path or by collapsing another link of the chain.

Verification

All at 3bc4d5852, from the repo root (the canonical Vitest invocation the repo's
vitest-invocation-guard requires).

pnpm exec vitest run packages/plugin-gantt --maxWorkers=2
Test Files 46 passed (46)
Tests 397 passed (397)
pnpm --filter @object-ui/plugin-gantt type-check # tsc --noEmit && tsc -p tsconfig.test.json
exit 0 (after pnpm --filter '@object-ui/plugin-gantt^...' build — without the
dependency closure built, tsc reports 17 phantom TS2307s)
pnpm --filter @object-ui/plugin-gantt lint
✖ 264 problems (0 errors, 264 warnings) # all pre-existing, none in changed files
check:control-bytes ✅ OK (scanned 5140 tracked text file(s))
check:vi-mock-specifiers ✅ OK
check:phantom-deps ✅ Every in-scope import is declared by the package that publishes it.
check:self-import ✅ No package names itself inside its own src/.
check-changeset-no-major ✅ No changeset declares a `major` bump.
check-changeset-presence ✅ 2 source file(s) of 1 released package(s) changed, 1 changeset

Ablation — red measured, not asserted

The fix was committed first, then the single resolved call was reverted to ?? schema.label
under a trap … EXIT INT TERM. The mutation was proved on disk before the run — the injected
text grepped present (1), the removed text grepped absent (0), landing site printed
(ObjectGantt.tsx:1536), git diff --stat showing 1 insertion(+), 1 deletion(-):

 × a locale-map label exports under the zh-CN entry, not "[object Object]"
× the same map exports under the en entry for an en audience
AssertionError: expected '[object Object]-20260825-0256.png' not to contain '[object Object]'
Test Files 1 failed (1)
Tests 2 failed | 4 passed (6)

Predicted before running: two map cases red, four controls green. That is what happened.
The trap restored the file and git diff HEAD --stat was empty afterwards.

Why the pin reads the produced filename, not the prop

The harm is the name of the downloaded file, and the exportFileName prop is one
indirection short of it. The test renders the realGanttView, clicks its real export
button, and reads download off the transient anchor downloadBlob creates — so the
assertion covers GanttView's own character strip and its -yyyyMMdd-HHmm stamp. Image
and canvas.toBlob are stubbed to the minimum the raster path reads, because happy-dom
decodes neither; the filename is under test, the pixels are not.

Scope

packages/plugin-gantt only, plus its changeset. #6051 (24 further undeclared gantt keys)
and #6050 (README basePath) are out of scope here and remain open. No out-of-scope
findings surfaced.

---

Generated by Claude Code

[github-actions]

✅ Console Performance Budget

Metric	Value	Budget
Eager closure (gzip, 52 chunks)	3222.6 KB	3990.2 KB
Main entry chunk (gzip)	153.8 KB	350 KB
Entry file	index-Bwat6EU6.js	—
Status	PASS	—

The eager closure is every chunk the entry reaches through static imports — what the browser fetches and parses before the app renders. The entry chunk on its own is a small fraction of it.

---

📦 Bundle Size Report

Package	Size	Gzipped
app-shell (consoleActionDispatch.js)	0.20KB	0.19KB
app-shell (index.js)	10.38KB	3.90KB
app-shell (runtime-config.js)	18.10KB	6.51KB
app-shell (types.js)	0.01KB	0.04KB
app-shell (urlParams.js)	10.06KB	3.86KB
auth (ActiveOrganizationStorage.js)	25.05KB	9.16KB
auth (AuthContext.js)	0.31KB	0.24KB
auth (AuthGuard.js)	2.07KB	1.00KB
auth (AuthProvider.js)	40.18KB	10.59KB
auth (AuthShell.js)	3.49KB	1.40KB
auth (ForgotPasswordForm.js)	12.21KB	3.45KB
auth (LoginForm.js)	18.15KB	5.39KB
auth (PreviewBanner.js)	0.90KB	0.50KB
auth (RegisterForm.js)	6.65KB	2.22KB
auth (SocialSignInButtons.js)	9.61KB	3.89KB
auth (UserMenu.js)	3.41KB	1.23KB
auth (auth-gate-events.js)	1.29KB	0.66KB
auth (authStyles.js)	5.04KB	1.72KB
auth (createAuthClient.js)	40.21KB	10.80KB
auth (createAuthenticatedFetch.js)	8.46KB	3.43KB
auth (index.js)	3.19KB	1.44KB
auth (invitation-status.js)	1.22KB	0.70KB
auth (org-roles.js)	6.66KB	2.78KB
auth (phone-identifier.js)	1.11KB	0.66KB
auth (types.js)	0.59KB	0.35KB
auth (useAuth.js)	5.30KB	1.02KB
auth (useWorkspaceAdminStatus.js)	5.13KB	2.35KB
collaboration (CommentThread.js)	26.08KB	7.56KB
collaboration (LiveCursors.js)	3.17KB	1.27KB
collaboration (PresenceAvatars.js)	6.49KB	2.64KB
collaboration (PresenceProvider.js)	2.79KB	1.13KB
collaboration (index.js)	1.68KB	0.73KB
collaboration (useCollaborationTranslation.js)	6.05KB	2.52KB
collaboration (useCommentSearch.js)	1.98KB	0.88KB
collaboration (useConflictResolution.js)	7.75KB	1.86KB
collaboration (useMentionNotifications.js)	1.81KB	0.68KB
collaboration (usePresence.js)	6.33KB	1.84KB
collaboration (useRealtimeSubscription.js)	7.91KB	2.01KB
components (index.js)	505.28KB	114.58KB
core (index.js)	5.30KB	2.13KB
create-plugin (index.js)	10.08KB	3.26KB
data-objectstack (index.js)	171.74KB	47.48KB
fields (index.js)	238.40KB	59.89KB
i18n (LocalizationContext.js)	1.76KB	0.96KB
i18n (currency.js)	1.22KB	0.64KB
i18n (i18n.js)	4.28KB	1.75KB
i18n (index.js)	3.44KB	1.39KB
i18n (pickLocalized.js)	7.62KB	3.26KB
i18n (provider.js)	23.13KB	7.63KB
i18n (useDisplayLocale.js)	2.85KB	1.45KB
i18n (useObjectLabel.js)	33.40KB	8.71KB
i18n (useSafeTranslation.js)	7.77KB	3.13KB
layout (index.js)	38.95KB	10.97KB
mobile (MobileProvider.js)	0.92KB	0.49KB
mobile (ResponsiveContainer.js)	0.94KB	0.38KB
mobile (breakpoints.js)	1.51KB	0.70KB
mobile (createOfflineDataSource.js)	5.61KB	1.75KB
mobile (index.js)	1.55KB	0.62KB
mobile (offlineQueue.js)	3.91KB	1.35KB
mobile (pwa.js)	0.97KB	0.49KB
mobile (serviceWorker.js)	1.48KB	0.62KB
mobile (serviceWorkerSource.js)	3.41KB	1.48KB
mobile (useBreakpoint.js)	1.54KB	0.65KB
mobile (useGesture.js)	6.96KB	1.98KB
mobile (useOfflineSync.js)	1.99KB	0.72KB
mobile (usePullToRefresh.js)	2.53KB	0.85KB
mobile (useResponsive.js)	0.72KB	0.42KB
mobile (useResponsiveConfig.js)	1.37KB	0.63KB
mobile (useSpecGesture.js)	4.32KB	1.64KB
mobile (useTouchTarget.js)	1.01KB	0.54KB
permissions (MePermissionsProvider.js)	9.53KB	3.38KB
permissions (PermissionContext.js)	0.31KB	0.25KB
permissions (PermissionGuard.js)	0.89KB	0.45KB
permissions (PermissionProvider.js)	4.64KB	1.50KB
permissions (evaluator.js)	5.12KB	1.74KB
permissions (index.js)	0.93KB	0.41KB
permissions (store.js)	0.91KB	0.42KB
permissions (useFieldPermissions.js)	1.28KB	0.53KB
permissions (usePermissions.js)	1.93KB	0.88KB
plugin-ai (index.js)	15.75KB	3.80KB
plugin-calendar (index.js)	46.62KB	12.83KB
plugin-charts (index.js)	64.66KB	18.32KB
plugin-chatbot (index.js)	188.21KB	44.67KB
plugin-dashboard (index.js)	133.35KB	34.45KB
plugin-designer (index.js)	212.32KB	42.81KB
plugin-detail (index.js)	244.13KB	61.93KB
plugin-editor (index.js)	2.46KB	1.10KB
plugin-form (index.js)	126.07KB	30.78KB
plugin-gantt (index.js)	164.17KB	39.89KB
plugin-grid (index.js)	201.14KB	54.40KB
plugin-kanban (index.js)	52.89KB	14.59KB
plugin-list (index.js)	111.94KB	27.24KB
plugin-map (index.js)	20.11KB	6.64KB
plugin-markdown (index.js)	13.72KB	4.69KB
plugin-report (index.js)	43.49KB	11.93KB
plugin-timeline (index.js)	26.49KB	7.59KB
plugin-tree (index.js)	9.26KB	3.13KB
plugin-view (index.js)	84.57KB	20.74KB
providers (DataSourceProvider.js)	0.75KB	0.39KB
providers (MetadataProvider.js)	1.37KB	0.59KB
providers (ThemeProvider.js)	1.90KB	0.85KB
providers (UploadProvider.js)	11.66KB	3.50KB
providers (index.js)	0.45KB	0.23KB
providers (types.js)	0.01KB	0.04KB
react-runtime (index.js)	5.62KB	2.34KB
react (LazyPluginLoader.js)	4.47KB	1.63KB
react (SchemaRenderer.js)	54.84KB	18.43KB
react (data-invalidation.js)	5.05KB	2.08KB
react (index.js)	1.35KB	0.70KB
react (schema-input.js)	2.32KB	1.24KB
react (spec-input.js)	0.20KB	0.18KB
sdui-parser (codegen.js)	5.41KB	2.34KB
sdui-parser (dashboard-widget-options.js)	3.08KB	1.30KB
sdui-parser (index.js)	4.93KB	2.24KB
sdui-parser (input-type.js)	2.84KB	1.40KB
sdui-parser (parse.js)	12.13KB	3.65KB
sdui-parser (provenance.js)	3.66KB	1.82KB
sdui-parser (types.js)	0.28KB	0.23KB
sdui-parser (validate.js)	7.54KB	2.63KB
types (ai.js)	0.20KB	0.17KB
types (api-types.js)	0.20KB	0.18KB
types (app.js)	2.87KB	0.99KB
types (base.js)	0.20KB	0.18KB
types (blocks.js)	0.20KB	0.18KB
types (complex.js)	2.74KB	1.41KB
types (crud.js)	0.20KB	0.18KB
types (dashboard-filter-alias.js)	6.23KB	2.74KB
types (data-display.js)	0.20KB	0.18KB
types (data-protocol.js)	0.20KB	0.19KB
types (data.js)	0.20KB	0.18KB
types (designer.js)	1.87KB	0.85KB
types (disclosure.js)	0.20KB	0.18KB
types (error-code.js)	1.54KB	0.88KB
types (feedback.js)	0.20KB	0.18KB
types (field-types.js)	0.20KB	0.18KB
types (form.js)	0.20KB	0.18KB
types (http-inflight.js)	8.87KB	3.73KB
types (http-retry.js)	4.32KB	2.02KB
types (icon-key-migration.js)	4.26KB	1.63KB
types (index.js)	4.49KB	2.14KB
types (layout.js)	0.20KB	0.18KB
types (managed-by.js)	0.19KB	0.18KB
types (mobile.js)	2.59KB	1.31KB
types (navigation.js)	0.20KB	0.18KB
types (objectql.js)	0.20KB	0.18KB
types (overlay.js)	0.20KB	0.18KB
types (permissions.js)	0.20KB	0.18KB
types (plugin-scope.js)	0.20KB	0.18KB
types (record-components.js)	0.20KB	0.19KB
types (record-semantics.js)	1.28KB	0.67KB
types (registry.js)	0.20KB	0.18KB
types (reports.js)	0.20KB	0.18KB
types (spec-report.js)	5.05KB	1.93KB
types (spec-ui-namespace.js)	0.20KB	0.19KB
types (system-fields.js)	3.33KB	1.54KB
types (theme.js)	6.28KB	2.87KB
types (ui-action.js)	3.40KB	1.71KB
types (views.js)	0.20KB	0.18KB
types (widget.js)	0.20KB	0.18KB

Size Limits

• ✅ Core packages should be < 50KB gzipped
• ✅ Component packages should be < 100KB gzipped
• ⚠️ Plugin packages should be < 150KB gzipped