Skip to content

fix(app-shell): every CelPredicateField binds its label — useId fallback when no id is passed (#4533) - #4561

Merged
yinlianghui merged 1 commit into
mainfrom
claude/issue-4533-cel-field-label-binding
Aug 13, 2026
Merged

fix(app-shell): every CelPredicateField binds its label — useId fallback when no id is passed (#4533)#4561
yinlianghui merged 1 commit into
mainfrom
claude/issue-4533-cel-field-label-binding

Conversation

@yinlianghui

Copy link
Copy Markdown
Collaborator

Fixes #4533

CelPredicateField renders both halves of its own label association — the Label htmlFor and the Textarea id — but id was an optional prop with no fallback, so a call site that omitted it left both undefined: a label that reads correctly on screen and resolves to nothing, and an editor with no accessible name.

The RLS USING (read filter) and CHECK (write filter) clauses on the permission-set editor were mounted that way, so the row-filter authoring surface of a permission set had no accessible name. It surfaced from the authoring side rather than from review — writing #4302's wire pins, the obvious selector was refused verbatim:

TestingLibraryElementError: Found a label with the text of: USING (read filter),
however no form control was found associated to that label. Make sure you're using
the "for" attribute or "aria-labelledby" attribute correctly.

The fix is at the contract, not the call sites

id now falls back to React.useId(), used for both halves. The association becomes a property of mounting the component instead of every caller remembering a prop, so a future call site cannot silently reintroduce an unlabelled control. An explicit id still wins unchanged.

Per the ruling's second point, no call site is edited. The measurement for "concrete need" — stable ids asserted by existing tests — finds four such assertions, all document.getElementById('cf-condition-0') in ConditionalFormattingEditor.test.tsx, i.e. against a site that already passes an explicit id. Zero existing tests assert an id at either RLS site, so the fallback is the whole fix and the surface stays at one component, one new test, one changeset.

One deliberate consequence, pinned rather than left unremarked: listId was id ? id-ac : undefined, so an id-less mount also had no aria-controls — the combobox never announced its own popup. It is derived from the resolved id now, closing the same association hole in the same mechanism.

Two corrections to the card's table

Both measured on origin/main before any edit:

site card says measured verdict
PermissionAdvancedFacets.tsx RLS USING omits id omits id valid
PermissionAdvancedFacets.tsx RLS CHECK omits id omits id valid
ConditionalFormattingEditor.tsx omits id passes cf-condition-{i} premise false
inspectors/ConditionBuilder.tsx not listed omits id 4th omitting site
ObjectFieldInspector.tsx (x4) passes id passes id valid (pinned)

ConditionalFormattingEditor has passed an explicit id since the feature landed — git log -S "cf-condition-" has exactly one commit, the original #2558. At the card's own filing revision, line 272 is the mount's opening tag and line 287 is the id prop; the line number of the mount was recorded as the defect.

Meanwhile inspectors/ConditionBuilder.tsx genuinely omits id and was not in the table. It belongs to another in-flight change and is not edited here — the component-level fallback repairs it with no call-site edit, which is the sharpest argument for fixing the contract rather than the callers.

Red-first

Predictions were written before the suite ran. The six id-less cases were predicted red and failed with the refusal byte-identical to the one quoted in the card (6/6); the seven explicit-id pins were predicted green on unfixed main and were. After the fix: 13/13.

Reverse-verified by extracting the fix to a patch and git checkout -- on the component (never git stash — the stash stack is shared across worktrees), re-running the final suite against a tree whose component hashed to origin/main's exact sha256:75b1f1b4…, then restoring to a byte-identical sha256:78f6bbfd….

Verification

  • Family suites — CelPredicateField, PermissionAdvancedFacets.cel / .retiredKeys, ConditionalFormattingEditor + .celGate, celAuthoring, and fix(app-shell): package-door permission save carries every editor-authorable facet (#4302) #4534's PermissionMatrixEditor.packageDoorFacets (untouched): 8 files, 101 passed
  • All inspectors + DataPillar.celGate: 47 files, 532 passed, 1 skipped
  • type-check (both passes: tsc --noEmit and tsc -p tsconfig.test.json): clean
  • ESLint: 0 errors, 1 warning — react-hooks/set-state-in-effect on an effect this PR does not touch, present identically on the origin/main baseline; zero new findings
  • check:control-bytes, changeset:check, check:phantom-deps, check:i18n-keys, check:i18n-drift, type-check:coverage: all green
  • .d.ts measured both ways with dist/ + tsconfig.tsbuildinfo cleared between builds: all 415 declaration files byte-identical, and CelPredicateField is absent from dist/index.d.ts — module-local, zero type-surface change, hence patch

Must-not-change, all green: ObjectFieldInspector's four explicit ids assert verbatim on a real mount; cf-condition-0 still resolves; #4534's placeholder-based selection is untouched; lint / onLintChange behavior unchanged.


Generated by Claude Code

…ack when no id is passed (#4533)

CelPredicateField renders BOTH halves of its own label association — the
`Label htmlFor` and the `Textarea id` — but `id` was an optional prop with no
fallback, so a call site that omitted it left both `undefined`: a label that
read correctly on screen and resolved to nothing, and an editor with no
accessible name.

The RLS `USING (read filter)` and `CHECK (write filter)` clauses on the
permission-set editor were mounted that way, so the row-filter authoring
surface was unreachable by label. It surfaced from the authoring side: writing
objectui#4302's wire pins, `getByLabelText('USING (read filter)')` was refused
outright and that test had to select by placeholder instead.

Fixed at the component rather than the callers: `id` falls back to `useId()`,
so the association is a property of mounting the component instead of every
caller remembering the prop. An explicit `id` still wins unchanged. The
autocomplete listbox is named off the same resolved id, closing the same
association hole on `aria-controls`.

Two corrections to the card's table, both measured on origin/main:
ConditionalFormattingEditor was listed as omitting `id` but has passed
`cf-condition-{i}` since #2558; and inspectors/ConditionBuilder.tsx DOES omit
it and was not listed — the component-level fallback repairs it with no
call-site edit, which is the argument for fixing the contract.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017Qqyix2QcnpUC9XeYVDzx3
@vercel

vercel Bot commented Aug 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectui Ignored Ignored Aug 13, 2026 9:16am

Request Review

@github-actions github-actions Bot added the tests label Aug 13, 2026
@github-actions

Copy link
Copy Markdown
Contributor

✅ Console Performance Budget

Metric Value Budget
Main entry (gzip) 24.7 KB 350 KB
Entry file index-mZdtLPL3.js
Status PASS

📦 Bundle Size Report

Package Size Gzipped
app-shell (index.js) 9.56KB 3.59KB
app-shell (runtime-config.js) 7.42KB 2.32KB
app-shell (types.js) 0.01KB 0.04KB
app-shell (urlParams.js) 8.92KB 3.41KB
auth (AuthContext.js) 0.31KB 0.24KB
auth (AuthGuard.js) 1.17KB 0.53KB
auth (AuthProvider.js) 25.13KB 5.40KB
auth (AuthShell.js) 3.49KB 1.40KB
auth (ForgotPasswordForm.js) 12.21KB 3.45KB
auth (LoginForm.js) 18.13KB 5.39KB
auth (PreviewBanner.js) 0.90KB 0.50KB
auth (RegisterForm.js) 6.64KB 2.21KB
auth (SocialSignInButtons.js) 9.60KB 3.89KB
auth (UserMenu.js) 3.40KB 1.22KB
auth (auth-gate-events.js) 1.29KB 0.66KB
auth (authStyles.js) 5.04KB 1.72KB
auth (createAuthClient.js) 38.46KB 10.17KB
auth (createAuthenticatedFetch.js) 6.34KB 2.43KB
auth (index.js) 2.35KB 1.07KB
auth (org-roles.js) 6.66KB 2.78KB
auth (phone-identifier.js) 1.11KB 0.66KB
auth (types.js) 0.59KB 0.35KB
auth (useAuth.js) 5.02KB 0.88KB
auth (useIsWorkspaceAdmin.js) 1.61KB 0.85KB
collaboration (CommentThread.js) 26.07KB 7.56KB
collaboration (LiveCursors.js) 3.17KB 1.27KB
collaboration (PresenceAvatars.js) 6.49KB 2.64KB
collaboration (PresenceProvider.js) 2.79KB 1.13KB
collaboration (index.js) 1.65KB 0.73KB
collaboration (useCollaborationTranslation.js) 6.05KB 2.52KB
collaboration (useCommentSearch.js) 1.98KB 0.88KB
collaboration (useConflictResolution.js) 7.75KB 1.86KB
collaboration (useMentionNotifications.js) 1.81KB 0.68KB
collaboration (usePresence.js) 6.33KB 1.84KB
collaboration (useRealtimeSubscription.js) 7.91KB 2.01KB
components (index.js) 489.32KB 108.45KB
core (index.js) 3.37KB 1.34KB
create-plugin (index.js) 10.08KB 3.26KB
data-objectstack (index.js) 158.47KB 43.13KB
fields (index.js) 230.18KB 57.13KB
i18n (LocalizationContext.js) 1.76KB 0.96KB
i18n (currency.js) 1.22KB 0.64KB
i18n (i18n.js) 4.32KB 1.77KB
i18n (index.js) 3.35KB 1.38KB
i18n (pickLocalized.js) 3.69KB 1.73KB
i18n (provider.js) 23.12KB 7.62KB
i18n (useDisplayLocale.js) 2.84KB 1.45KB
i18n (useObjectLabel.js) 27.59KB 6.63KB
i18n (useSafeTranslation.js) 7.77KB 3.13KB
layout (index.js) 38.98KB 10.85KB
mobile (MobileProvider.js) 0.92KB 0.49KB
mobile (ResponsiveContainer.js) 0.94KB 0.38KB
mobile (breakpoints.js) 1.51KB 0.70KB
mobile (createOfflineDataSource.js) 5.61KB 1.74KB
mobile (index.js) 1.50KB 0.62KB
mobile (offlineQueue.js) 3.91KB 1.35KB
mobile (pwa.js) 0.97KB 0.49KB
mobile (serviceWorker.js) 1.48KB 0.62KB
mobile (serviceWorkerSource.js) 3.41KB 1.48KB
mobile (useBreakpoint.js) 1.54KB 0.65KB
mobile (useGesture.js) 6.96KB 1.98KB
mobile (useOfflineSync.js) 1.99KB 0.72KB
mobile (usePullToRefresh.js) 2.53KB 0.85KB
mobile (useResponsive.js) 0.71KB 0.42KB
mobile (useResponsiveConfig.js) 1.36KB 0.63KB
mobile (useSpecGesture.js) 4.32KB 1.64KB
mobile (useTouchTarget.js) 1.01KB 0.54KB
permissions (MePermissionsProvider.js) 8.75KB 3.06KB
permissions (PermissionContext.js) 0.31KB 0.25KB
permissions (PermissionGuard.js) 0.89KB 0.45KB
permissions (PermissionProvider.js) 3.67KB 1.12KB
permissions (evaluator.js) 4.41KB 1.44KB
permissions (index.js) 0.91KB 0.41KB
permissions (store.js) 0.91KB 0.42KB
permissions (useFieldPermissions.js) 1.28KB 0.52KB
permissions (usePermissions.js) 1.55KB 0.71KB
plugin-ai (index.js) 15.75KB 3.80KB
plugin-calendar (index.js) 46.86KB 12.91KB
plugin-charts (index.js) 62.10KB 17.67KB
plugin-chatbot (index.js) 181.21KB 43.14KB
plugin-dashboard (index.js) 120.95KB 31.53KB
plugin-designer (index.js) 212.58KB 42.83KB
plugin-detail (index.js) 239.88KB 59.99KB
plugin-editor (index.js) 2.46KB 1.10KB
plugin-form (index.js) 114.58KB 27.68KB
plugin-gantt (index.js) 164.28KB 40.02KB
plugin-grid (index.js) 189.36KB 50.33KB
plugin-kanban (index.js) 52.74KB 14.53KB
plugin-list (index.js) 111.13KB 27.12KB
plugin-map (index.js) 18.16KB 5.81KB
plugin-markdown (index.js) 13.72KB 4.69KB
plugin-report (index.js) 41.16KB 10.96KB
plugin-timeline (index.js) 26.68KB 7.66KB
plugin-tree (index.js) 8.50KB 2.88KB
plugin-view (index.js) 84.08KB 20.55KB
providers (DataSourceProvider.js) 0.75KB 0.39KB
providers (MetadataProvider.js) 1.37KB 0.59KB
providers (ThemeProvider.js) 1.90KB 0.85KB
providers (UploadProvider.js) 11.71KB 3.53KB
providers (index.js) 0.44KB 0.22KB
providers (types.js) 0.01KB 0.04KB
react-runtime (index.js) 5.67KB 2.37KB
react (LazyPluginLoader.js) 3.77KB 1.33KB
react (SchemaRenderer.js) 23.73KB 7.96KB
react (data-invalidation.js) 5.05KB 2.08KB
react (index.js) 1.23KB 0.66KB
react (spec-input.js) 0.20KB 0.18KB
sdui-parser (codegen.js) 4.09KB 1.74KB
sdui-parser (index.js) 4.47KB 2.03KB
sdui-parser (parse.js) 10.04KB 2.82KB
sdui-parser (types.js) 0.29KB 0.24KB
sdui-parser (validate.js) 4.69KB 1.48KB
types (ai.js) 0.20KB 0.17KB
types (api-types.js) 0.20KB 0.18KB
types (app.js) 2.87KB 0.99KB
types (base.js) 0.20KB 0.18KB
types (blocks.js) 0.20KB 0.18KB
types (complex.js) 0.20KB 0.18KB
types (crud.js) 0.20KB 0.18KB
types (dashboard-filter-alias.js) 6.23KB 2.74KB
types (data-display.js) 0.20KB 0.18KB
types (data-protocol.js) 0.20KB 0.19KB
types (data.js) 0.20KB 0.18KB
types (designer.js) 1.87KB 0.85KB
types (disclosure.js) 0.20KB 0.18KB
types (error-code.js) 1.54KB 0.88KB
types (feedback.js) 0.20KB 0.18KB
types (field-types.js) 0.20KB 0.18KB
types (form.js) 0.20KB 0.18KB
types (http-retry.js) 4.32KB 2.02KB
types (index.js) 3.05KB 1.52KB
types (layout.js) 0.20KB 0.18KB
types (managed-by.js) 0.19KB 0.18KB
types (mobile.js) 2.59KB 1.31KB
types (navigation.js) 0.20KB 0.18KB
types (objectql.js) 0.20KB 0.18KB
types (overlay.js) 0.20KB 0.18KB
types (permissions.js) 0.20KB 0.18KB
types (plugin-scope.js) 0.20KB 0.18KB
types (record-components.js) 0.20KB 0.19KB
types (record-semantics.js) 1.28KB 0.67KB
types (registry.js) 0.20KB 0.18KB
types (reports.js) 0.20KB 0.18KB
types (spec-report.js) 5.05KB 1.93KB
types (system-fields.js) 3.33KB 1.54KB
types (theme.js) 0.20KB 0.18KB
types (ui-action.js) 3.40KB 1.71KB
types (views.js) 0.20KB 0.18KB
types (widget.js) 0.20KB 0.18KB

Size Limits

  • ✅ Core packages should be < 50KB gzipped
  • ✅ Component packages should be < 100KB gzipped
  • ⚠️ Plugin packages should be < 150KB gzipped

Copy link
Copy Markdown
Collaborator Author

PM step-7 复核 — ACCEPT (session_017Qqyix2QcnpUC9XeYVDzx3)

  • The premise corrections are the definition of measurement paying for itself: ConditionalFormattingEditor has passed an explicit id since its original commit (proven by git log -S and by four pre-existing getElementById assertions that could not otherwise pass — the filer read the mount's opening-tag line), and a FOURTH omitting site the card never listed (inspectors/ConditionBuilder:227) sits inside a file this card was forbidden to touch. The contract-level useId fallback repairs all three REAL sites in 21 lines with zero call-site edits and zero cross-card coordination — the exact outcome the ruling's rejection of per-site patching was betting on.
  • Ruling 2's measurement came back negative (no test anywhere asserts an id at the omitting sites) and was honored: no call site edited. The listId/aria-controls hole closed by the same resolved id is a deliberate, pinned consequence — the combobox now names its own popup on id-less mounts.
  • Red-first 6/7 exactly as predicted BOTH ways, all six reds carrying the byte-identical testing-library refusal from the issue; reverse verification against origin/main's sha-verified copy, restore hash-identical.
  • Explicit-id pins asserted on REAL mounts (ObjectFieldInspector's four, cf-condition-0); fix(app-shell): package-door permission save carries every editor-authorable facet (#4302) #4534's placeholder-based test untouched and green; 415 .d.ts byte-identical → patch as expected. CI 20/20 on per-job conclusions.
  • A correcting note is going on [a11y] The RLS USING/CHECK predicate editors render a label bound to nothing — CelPredicateField's id is optional and three call sites omit it #4533 so the false CF-editor claim doesn't get chased by a future reader; nothing is expected of the landed CEL blocking errors are dropped on the floor in ConditionBuilder and ConditionalFormattingEditor too — same ungated-Save family as #4306 #4527 work — the fallback covers its ConditionBuilder site by construction.

Auto-merge armed (squash) — landing verified per the merge-queue discipline.


Generated by Claude Code


Generated by Claude Code

@yinlianghui
yinlianghui marked this pull request as ready for review August 13, 2026 09:32
@yinlianghui
yinlianghui added this pull request to the merge queue Aug 13, 2026
Merged via the queue into main with commit 609820d Aug 13, 2026
21 checks passed
@yinlianghui
yinlianghui deleted the claude/issue-4533-cel-field-label-binding branch August 13, 2026 09:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[a11y] The RLS USING/CHECK predicate editors render a label bound to nothing — CelPredicateField's id is optional and three call sites omit it

2 participants