chore: sync origin/main + 整体重生成 spec 基线;补 #5279 fixture 的落地路径

`git merge origin/main`(至 5aae790,无冲突),生成物按 os-regen 四步互保:
generated 文件整体 checkout 回合并基线,再 wholesale 重生成,最后断言兄弟 PR
的条目仍在。

两处过程中发现并纠正的坑,记下来免得下一个人重踩:

1. `gen:api-surface` 读的是**构建产物**,不是源码。合并后没重建就重生成,会把
   #5021(PR #5289)刚退役的 `AnimationSchema` / `ZIndexSchema` 四行**重新加
   回去** —— 正是 AGENTS.md §9 的陈旧产物陷阱。重建 spec 后重生成才对
   (4422 → 4418 exports)。
2. 第 2 步的 `git checkout origin/main -- <generated>` 必须用**你实际合并的那个
   tip**,不是 `origin/main` 的当前值。main 在我合并与 checkout 之间又前进了,
   于是把 #4938 的 http-server 生成文档拉了进来 —— 而我的源码里没有那个改动,
   等于提交了一份源码产不出的生成物。改用合并基线 5aae790 后归零。

最终生成物 delta 相对合并基线只有 7 行,纯增量(ApiEndpoint 的保护信封键);
#5021 的退役完好(Animation/ZIndex 确认缺席)。

`protocol-publish-drafts-endpoint-gate.test.ts`(#5279,已合入 main)的
ENDPOINT_SCHEMA 用例改了**落地路径**而非断言:该 draft 现在过不了 saveMetaItem
的 422(这正是 #5206「一处修,两面得」要的结果),所以 fixture 改为先按真实写
路径存一条合法 draft、再只污染其 body —— 让那条 backstop 分支仍然被真实覆盖,
而不是删掉用例留一条无测试的活分支。未改该 PR 的任何生产代码。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ErbEDVAg1No9gdg1pgDAGB

Author: claude

packages/metadata-protocol/src/protocol-publish-drafts-endpoint-gate.test.ts

@@ -318,11 +318,30 @@ describe('publishPackageDrafts — the ADR-0121 endpoint publish gate (#5206 ste
         const { engine, rows } = makeStubEngine('showcase');
         const protocol = new ObjectStackProtocolImplementation(engine);
 
-        // `api` has no entry in BUILTIN_METADATA_TYPE_SCHEMAS (that half is
-        // #5271, the spec lane), so the direct-write path stores arbitrary JSON
-        // verbatim. Parsing is the gate's precondition: an unparseable
-        // declaration cannot be judged and could never be served either.
-        await saveApiDraft(protocol, 'garbage', { name: 'garbage', totally: 'not an endpoint' });
+        // [#5271] This comment used to read "`api` has no entry in
+        // BUILTIN_METADATA_TYPE_SCHEMAS (that half is #5271, the spec lane), so
+        // the direct-write path stores arbitrary JSON verbatim" — and it minted
+        // the garbage draft through `saveMetaItem`. That half has now landed:
+        // `api` resolves `ApiEndpointSchema`, so this body is refused with a
+        // 422 at the EARLIEST door and the draft can no longer be created at
+        // all. That is the "一处修,两面得" outcome #5206 asked for, and it is
+        // asserted on the spec lane's side (packages/objectql
+        // /src/protocol-meta.test.ts, "refuses a spec-INVALID `api` item").
+        //
+        // The `ENDPOINT_SCHEMA` branch this case pins is therefore no longer
+        // reachable from the Studio write path — it is exactly what the module
+        // header calls it, a BACKSTOP, for a row that reached the store some
+        // other way: a direct `metadata.register()`, a migration, or a row
+        // written before #5271. Deleting the case would leave a live branch
+        // with no test; re-spelling the body would only re-test the 422. So the
+        // fixture PLANTS such a row instead of minting one — it saves a valid
+        // draft through the real write path (so every bookkeeping column is
+        // byte-for-byte what production writes) and then corrupts only the
+        // stored body, which is the one thing the earlier door cannot police.
+        await saveApiDraft(protocol, 'garbage', validEndpoint({ name: 'garbage' }));
+        const planted = Array.from(rows.values()).find((r) => r.name === 'garbage' && r.state === 'draft');
+        expect(planted, 'the valid draft must exist before it is corrupted').toBeDefined();
+        planted!.metadata = JSON.stringify({ name: 'garbage', totally: 'not an endpoint' });
 
         const res = await protocol.publishPackageDrafts({ packageId: PKG });
         expect(res).toMatchObject({ success: false, publishedCount: 0 });

packages/spec/authorable-surface.json

@@ -6930,8 +6930,6 @@
     "ui/AddRecordConfig:formView",
     "ui/AddRecordConfig:mode",
     "ui/AddRecordConfig:position",
-    "ui/Animation:duration",
-    "ui/Animation:timing",
     "ui/App:_lock",
     "ui/App:_lockDocsUrl",
     "ui/App:_lockReason",
@@ -7901,7 +7899,7 @@
     "ui/SyncConfig:maxRetries",
     "ui/SyncConfig:retryInterval",
     "ui/SyncConfig:strategy",
-    "ui/Theme:animation",
+    "ui/Theme:animation [RETIRED]",
     "ui/Theme:borderRadius",
     "ui/Theme:colors",
     "ui/Theme:customVars",
@@ -7912,7 +7910,7 @@
     "ui/Theme:name",
     "ui/Theme:shadows",
     "ui/Theme:typography",
-    "ui/Theme:zIndex",
+    "ui/Theme:zIndex [RETIRED]",
     "ui/TimelineConfig:colorField",
     "ui/TimelineConfig:endDateField",
     "ui/TimelineConfig:groupByField",
@@ -7940,10 +7938,10 @@
     "ui/TreeConfig:labelField",
     "ui/TreeConfig:parentField",
     "ui/Typography:fontFamily",
-    "ui/Typography:fontSize",
-    "ui/Typography:fontWeight",
-    "ui/Typography:letterSpacing",
-    "ui/Typography:lineHeight",
+    "ui/Typography:fontSize [RETIRED]",
+    "ui/Typography:fontWeight [RETIRED]",
+    "ui/Typography:letterSpacing [RETIRED]",
+    "ui/Typography:lineHeight [RETIRED]",
     "ui/UrlNavItem:badge",
     "ui/UrlNavItem:badgeVariant",
     "ui/UrlNavItem:icon",
@@ -8044,14 +8042,6 @@
     "ui/WidgetProperty:name",
     "ui/WidgetProperty:required",
     "ui/WidgetProperty:type",
-    "ui/WidgetProperty:validation",
-    "ui/ZIndex:base",
-    "ui/ZIndex:dropdown",
-    "ui/ZIndex:fixed",
-    "ui/ZIndex:modal",
-    "ui/ZIndex:modalBackdrop",
-    "ui/ZIndex:popover",
-    "ui/ZIndex:sticky",
-    "ui/ZIndex:tooltip"
+    "ui/WidgetProperty:validation"
   ]
 }