gates: ADR-0122 alias form + Iso850 pin; translate the new maskingRule form strings (#8993)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01225pUjnCKWqxcc1PeqKFUq

Author: claude

packages/platform-objects/src/apps/translations/en.metadata-forms.generated.ts

@@ -86,6 +86,10 @@ export const enMetadataForms: NonNullable<TranslationData['metadataForms']> = {
         label: "Hidden",
         helpText: "Hidden from default UI"
       },
+      "fields.maskingRule": {
+        label: "Masking Rule",
+        helpText: "Partial masking: preset ('phone', 'id_card', 'bank_account', 'email', 'name') or {\"keepHead\": n, \"keepTail\": m}. Masked unless the caller holds this field's requiredPermissions"
+      },
       "fields.searchable": {
         label: "Searchable",
         helpText: "Include in full-text search"
@@ -449,6 +453,10 @@ export const enMetadataForms: NonNullable<TranslationData['metadataForms']> = {
       sortable: {
         label: "Sortable",
         helpText: "Allow sorting lists by this field"
+      },
+      maskingRule: {
+        label: "Masking Rule",
+        helpText: "Partial masking: preset ('phone', 'id_card', 'bank_account', 'email', 'name') or {\"keepHead\": n, \"keepTail\": m}. Masked for callers not holding this field's requiredPermissions"
       }
     }
   },

packages/platform-objects/src/apps/translations/es-ES.metadata-forms.generated.ts

@@ -86,6 +86,10 @@ export const esESMetadataForms: NonNullable<TranslationData['metadataForms']> =
         label: "Oculto",
         helpText: "Oculto en la UI predeterminada"
       },
+      "fields.maskingRule": {
+        label: "Regla de enmascaramiento",
+        helpText: "Enmascaramiento parcial: preset ('phone', 'id_card', 'bank_account', 'email', 'name') o {\"keepHead\": n, \"keepTail\": m}. Enmascarado salvo que el llamante tenga los requiredPermissions del campo"
+      },
       "fields.searchable": {
         label: "Buscable",
         helpText: "Incluir en búsqueda de texto completo"
@@ -449,6 +453,10 @@ export const esESMetadataForms: NonNullable<TranslationData['metadataForms']> =
       sortable: {
         label: "Ordenable",
         helpText: "Permite ordenar listas por este campo"
+      },
+      maskingRule: {
+        label: "Regla de enmascaramiento",
+        helpText: "Enmascaramiento parcial: preset ('phone', 'id_card', 'bank_account', 'email', 'name') o {\"keepHead\": n, \"keepTail\": m}. Enmascarado salvo que el llamante tenga los requiredPermissions del campo"
       }
     }
   },

packages/platform-objects/src/apps/translations/ja-JP.metadata-forms.generated.ts

@@ -86,6 +86,10 @@ export const jaJPMetadataForms: NonNullable<TranslationData['metadataForms']> =
         label: "非表示",
         helpText: "既定 UI では非表示"
       },
+      "fields.maskingRule": {
+        label: "マスキングルール",
+        helpText: "部分マスキング:プリセット('phone'、'id_card'、'bank_account'、'email'、'name')または {\"keepHead\": n, \"keepTail\": m}。フィールドの requiredPermissions を持たない呼び出し元にはマスク値が表示されます"
+      },
       "fields.searchable": {
         label: "検索可能",
         helpText: "全文検索に含める"
@@ -449,6 +453,10 @@ export const jaJPMetadataForms: NonNullable<TranslationData['metadataForms']> =
       sortable: {
         label: "並び替え可能",
         helpText: "このフィールドでリストの並べ替えを許可"
+      },
+      maskingRule: {
+        label: "マスキングルール",
+        helpText: "部分マスキング:プリセット('phone'、'id_card'、'bank_account'、'email'、'name')または {\"keepHead\": n, \"keepTail\": m}。フィールドの requiredPermissions を持たない呼び出し元にはマスク値が表示されます"
       }
     }
   },

packages/platform-objects/src/apps/translations/zh-CN.metadata-forms.generated.ts

@@ -86,6 +86,10 @@ export const zhCNMetadataForms: NonNullable<TranslationData['metadataForms']> =
         label: "隐藏",
         helpText: "在默认界面中隐藏"
       },
+      "fields.maskingRule": {
+        label: "脱敏规则",
+        helpText: "部分脱敏:预设('phone'、'id_card'、'bank_account'、'email'、'name')或 {\"keepHead\": n, \"keepTail\": m}。未持有该字段 requiredPermissions 的调用者将看到脱敏值"
+      },
       "fields.searchable": {
         label: "可搜索",
         helpText: "纳入全文搜索"
@@ -449,6 +453,10 @@ export const zhCNMetadataForms: NonNullable<TranslationData['metadataForms']> =
       sortable: {
         label: "可排序",
         helpText: "允许按此字段排序"
+      },
+      maskingRule: {
+        label: "脱敏规则",
+        helpText: "部分脱敏:预设('phone'、'id_card'、'bank_account'、'email'、'name')或 {\"keepHead\": n, \"keepTail\": m}。未持有该字段 requiredPermissions 的调用者将看到脱敏值"
       }
     }
   },

packages/spec/src/data/field.zod.ts

@@ -534,8 +534,8 @@ export const FieldMaskingKeepSchema = lazySchema(() => strictObject({
   keepTail: z.number().int().min(0).describe('Number of trailing characters to leave readable'),
 }));
 
-/** @see FieldMaskingKeepSchema */
-export type FieldMaskingKeep = z.infer<typeof FieldMaskingKeepSchema>;
+/** @see FieldMaskingKeepSchema (ADR-0122: bare alias = the AUTHOR state; input and parsed coincide here — no transform, no defaults) */
+export type FieldMaskingKeep = z.input<typeof FieldMaskingKeepSchema>;
 
 /**
  * A field's declared partial-masking rule — a named preset or the

packages/spec/src/type-alias-convention.pin.test.ts

@@ -264,7 +264,7 @@ import type * as M167 from './ui/view.zod.js';
 import type * as M170 from './ui/component.zod.js';
 
 // ---------------------------------------------------------------------------
-// 836 isomorphic aliases: `z.input` === `z.infer`, so no `XParsed` is declared.
+// 837 isomorphic aliases: `z.input` === `z.infer`, so no `XParsed` is declared.
 //
 // That number is machine-checked, not hand-kept. The runtime companion at the
 // bottom of this file recomputes the pin count from the source and asserts that
@@ -756,6 +756,9 @@ export type Iso338 = Assert<Eq< z.input< typeof M66.FieldType >, z.infer< typeof
 export type Iso339 = Assert<Eq< z.input< typeof M66.LocationCoordinatesSchema >, z.infer< typeof M66.LocationCoordinatesSchema > >>;
 export type Iso340 = Assert<Eq< z.input< typeof M66.AddressSchema >, z.infer< typeof M66.AddressSchema > >>;
 export type Iso341 = Assert<Eq< z.input< typeof M66.CurrencyValueSchema >, z.infer< typeof M66.CurrencyValueSchema > >>;
+// #8993 partial masking: keepHead/keepTail are plain optional-free ints — no
+// transform, no defaults, so input === infer and the bare alias needs no Parsed.
+export type Iso850 = Assert<Eq< z.input< typeof M66.FieldMaskingKeepSchema >, z.infer< typeof M66.FieldMaskingKeepSchema > >>;
 
 // data/filter.zod.ts
 export type Iso342 = Assert<Eq< z.input< typeof M67.FieldReferenceSchema >, z.infer< typeof M67.FieldReferenceSchema > >>;
@@ -1651,7 +1654,7 @@ describe('ADR-0122 type-alias convention', () => {
   // this title and the section header above the pin list — are now asserted
   // against the recomputed count below, so neither can go stale without a red
   // test naming it.
-  it('still declares all 836 isomorphic pins', () => {
+  it('still declares all 837 isomorphic pins', () => {
     // The truth of each pin is proved by tsc, not here — an `Assert<Eq<...>>`
     // that stops holding is a compile error with the alias named. What tsc
     // cannot notice is a pin that was DELETED: removing the assertion removes
@@ -1879,9 +1882,13 @@ describe('ADR-0122 type-alias convention', () => {
     // `Iso847`-`Iso849`. `RecordAlertProps` is deliberately unpinned: its
     // `visible` carries `ExpressionInputSchema`, whose bare-string arm
     // transforms to the canonical envelope, so input ≠ infer by construction.
+    //
+    // 836 -> 837 is #8993 — partial masking's `FieldMaskingKeepSchema`
+    // ({keepHead, keepTail}, both plain non-negative ints, no defaults, no
+    // transform), pinned as `Iso850`.
     const self = readFileSync(fileURLToPath(import.meta.url), 'utf8');
     const pins = self.match(/^export type Iso\d+ = Assert</gm) ?? [];
-    expect(pins).toHaveLength(836);
+    expect(pins).toHaveLength(837);
 
     // The count is stated in PROSE twice as well — this case's title and the
     // section header above the pin list — and until #6605 nothing read either