docs(studio): sync capability-flag comments and restore label with spec #2377 removals (#2799)

framework#2377 (ADR-0049 enforce-or-remove, closed by framework#3414) removed
enable.trash / enable.mru from the spec entirely — ObjectCapabilities is now
.strict(), so authoring them is a parse error — and corrected enable.searchable
to LIVE (global-search opt-out). objectui never rendered these toggles or
shipped i18n keys for them, so only the surrounding prose had drifted:

- ObjectSettingsPanel comment no longer calls searchable/trash/mru 'dead';
  it now states trash/mru are removed (strict-rejected) and searchable is
  live but not yet surfaced.
- The capabilities test keeps its absence assertions (they now also guard
  against authoring strict-rejected keys) with an updated rationale.
- perm.action.restore label stops promising a recycle bin that never
  existed: 'Restore deleted records (reserved — deletes are hard today)'
  (en + zh), matching the platform's real hard-delete contract.

ObjectSettingsPanel (12) + PermissionMatrixEditor.basics + studio-locale
i18n tests green.


Claude-Session: https://claude.ai/code/session_01RRCHNGhKw8uVhA3ghXKDpA

Co-authored-by: Claude <noreply@anthropic.com>

Author: os-zhuang

packages/app-shell/src/views/metadata-admin/i18n.ts

@@ -866,7 +866,7 @@ const ENGINE_STRINGS_EN: Record<string, string> = {
   'perm.action.edit': 'Edit',
   'perm.action.delete': 'Delete',
   'perm.action.transfer': 'Transfer ownership',
-  'perm.action.restore': 'Restore from trash',
+  'perm.action.restore': 'Restore deleted records (reserved — deletes are hard today)',
   'perm.action.purge': 'Hard delete (purge)',
   'perm.action.viewAll': 'View All Records (bypass sharing)',
   'perm.action.modifyAll': 'Modify All Records (bypass sharing)',
@@ -2401,7 +2401,7 @@ const ENGINE_STRINGS_ZH: Record<string, string> = {
   'perm.action.edit': '编辑',
   'perm.action.delete': '删除',
   'perm.action.transfer': '转移所有者',
-  'perm.action.restore': '从回收站恢复',
+  'perm.action.restore': '恢复已删除记录（预留 — 当前为硬删除）',
   'perm.action.purge': '彻底删除',
   'perm.action.viewAll': '查看所有记录（绕过共享规则）',
   'perm.action.modifyAll': '修改所有记录（绕过共享规则）',

packages/app-shell/src/views/studio-design/ObjectSettingsPanel.test.tsx

@@ -105,7 +105,9 @@ describe('ObjectSettingsPanel — capabilities (enable.*, framework#2707/#2727)'
     expect((screen.getByTestId('cap-feeds') as HTMLInputElement).checked).toBe(true);
     expect((screen.getByTestId('cap-activities') as HTMLInputElement).checked).toBe(true);
     expect((screen.getByTestId('cap-clone') as HTMLInputElement).checked).toBe(true);
-    // Dead flags must NOT be offered (Studio only exposes enforced switches).
+    // trash/mru no longer exist in the spec (removed, framework#2377 — a
+    // rendered toggle would author a key the strict schema rejects);
+    // searchable is live but not yet surfaced here.
     expect(screen.queryByTestId('cap-searchable')).toBeNull();
     expect(screen.queryByTestId('cap-trash')).toBeNull();
     expect(screen.queryByTestId('cap-mru')).toBeNull();

packages/app-shell/src/views/studio-design/ObjectSettingsPanel.tsx

@@ -29,8 +29,10 @@
  *     switches. Only LIVE flags are exposed (every toggle is enforced at
  *     runtime — writer gates, 403s, or UI surfaces): trackHistory & files
  *     are opt-IN (spec default false), feeds/activities/clone are opt-OUT
- *     (spec default true, explicit false disables). Dead flags
- *     (searchable/trash/mru) are deliberately NOT rendered.
+ *     (spec default true, explicit false disables). `trash`/`mru` were
+ *     REMOVED from the spec (framework#2377 — ObjectCapabilities is now
+ *     .strict(), authoring them is a parse error); `searchable` is LIVE
+ *     (global-search opt-out) but not yet surfaced here.
  */
 
 import React from 'react';