{localResult.message}
+ {localResult.protocolNote ?
: null}
{/* ADR-0131 D6 — each protection lock the unmanaged copy dropped, as
the answer states it: the item, the lock and the package's reason
verbatim, so the operator reads why the vendor locked an item
diff --git a/ui/packages/app-shell/src/console/marketplace/MarketplacePage.tsx b/ui/packages/app-shell/src/console/marketplace/MarketplacePage.tsx
index d0ec1afc1d2..8035064a8f8 100644
--- a/ui/packages/app-shell/src/console/marketplace/MarketplacePage.tsx
+++ b/ui/packages/app-shell/src/console/marketplace/MarketplacePage.tsx
@@ -52,6 +52,8 @@ import { appRouteSegment, filterActiveApps } from '../../utils/index.js';
import { waitForServedApp, type ServedApp } from './waitForServedApp.js';
import { splitPackageSuffix } from './middleTruncate.js';
import { useDependencyMissingText } from './dependencyMissing.js';
+import { useProtocolCheckSkippedText } from './protocolCheckSkipped.js';
+import { ProtocolCheckSkippedNote } from './ProtocolCheckSkippedNote.js';
import { ConnectorCredentialsStep } from './ConnectorCredentialsStep.js';
import { packagesHref } from '../../views/metadata-admin/packageSource.js';
@@ -310,6 +312,7 @@ export function MarketplacePage() {
const { isAdmin, isResolved } = useWorkspaceAdminStatus();
const { t, language } = useObjectTranslation();
const dependencyMissingText = useDependencyMissingText();
+ const protocolCheckSkippedText = useProtocolCheckSkippedText();
const { appLabel } = useServedAppLabel();
// The adapter `MetadataProvider` reads through: the deploy wait asks the
// same `GET /meta/app` the cache would, without the cache persisting it.
@@ -356,6 +359,8 @@ export function MarketplacePage() {
ok: boolean;
text: string;
credentials?: { packageId: string; note?: string };
+ // objectstack#30326 — the answer's `protocolCheckSkipped`, drawn.
+ protocolNote?: string;
} | null>(null);
const [orgDeploy, setOrgDeploy] = useState
(null);
const [installedIds, setInstalledIds] = useState>(new Set());
@@ -491,6 +496,8 @@ export function MarketplacePage() {
try {
if (getRuntimeConfig().features.installLocal) {
const result = await installLocal({ packageId: pkg.manifest_id || pkg.id, versionId: 'latest' });
+ // objectstack#30326 — installed, its platform protocol range unchecked.
+ const protocolNote = protocolCheckSkippedText(result);
// objectui#12098 — `hotLoaded: false` is the runtime's lenient path
// (objectstack#22695): installed, loaded at its next restart. Nothing
// of it is served until then, so the strip says so and nothing is
@@ -501,6 +508,7 @@ export function MarketplacePage() {
? t('marketplace.org.installed', { defaultValue: `Installed ${pkg.display_name}`, name: pkg.display_name })
: t('marketplace.install.localLoadsAtRestart', { version: result.version, name: pkg.display_name }),
...(result.hotLoaded ? { credentials: { packageId: result.manifestId, note: result.credentialNote } } : {}),
+ ...(protocolNote ? { protocolNote } : {}),
});
await load();
// On `hotLoaded` the runtime registered the package before it answered,
@@ -738,6 +746,7 @@ export function MarketplacePage() {
{orgMsg && (
{orgMsg.text}
+ {orgMsg.protocolNote ?
: null}
{orgMsg.ok && orgMsg.credentials ? (
+
+ {text}
+
+ );
+}
diff --git a/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePackagePage.protocolCheckSkipped-30326.test.tsx b/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePackagePage.protocolCheckSkipped-30326.test.tsx
new file mode 100644
index 00000000000..ecea7dca144
--- /dev/null
+++ b/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePackagePage.protocolCheckSkipped-30326.test.tsx
@@ -0,0 +1,155 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * The package page's Install result says when the install door admitted the
+ * package WITHOUT checking its platform protocol range: the answer's
+ * `data.protocolCheckSkipped` (objectstack#30326), drawn under the success
+ * sentence. Managed (loaded now, loaded at restart) and unmanaged answers all
+ * carry it.
+ *
+ * `marketplaceApi` is NOT mocked: one stubbed `fetch` answers by path, so the
+ * notice the page draws is the one that crossed the wire. `t` echoes the KEY
+ * and the notice's facts.
+ */
+
+import '@testing-library/jest-dom/vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { act, cleanup, fireEvent, render, screen } from '@testing-library/react';
+
+vi.mock('react-router-dom', () => ({
+ useNavigate: () => vi.fn(),
+ useParams: () => ({ packageId: 'pkg_psa' }),
+}));
+
+vi.mock('@object-ui/auth', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ useWorkspaceAdminStatus: () => ({ isAdmin: true, isResolved: true }),
+}));
+
+vi.mock('@object-ui/i18n', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ useObjectTranslation: () => ({
+ t: (key: string, o?: Record) => {
+ const facts = ['packageId', 'protocolVersion', 'requiredRange'].filter((k) => o?.[k] !== undefined).map((k) => `${k}=${String(o?.[k])}`);
+ return facts.length > 0 ? `«${key}|${facts.join('|')}»` : `«${key}»`;
+ },
+ language: 'en',
+ }),
+}));
+
+vi.mock('../../../assistant/assistantBus', () => ({ emitMetadataRefresh: () => {} }));
+vi.mock('../../../providers/MetadataProvider', () => ({ useMetadata: () => ({ refresh: async () => {} }) }));
+vi.mock('../../../components/SuggestedBindingsPanel', () => ({
+ SuggestedBindingsPanel: () => ,
+}));
+vi.mock('../ConnectorCredentialsStep', () => ({
+ ConnectorCredentialsStep: () => ,
+}));
+
+import { initRuntimeConfig, resetRuntimeConfigForTesting } from '../../../runtime-config';
+import { MarketplacePackagePage } from '../MarketplacePackagePage';
+
+const INSTALL_PATH = '/api/v1/marketplace/install-local';
+const MANIFEST_PATH = '/api/v1/marketplace/packages/pkg_psa/versions/latest/manifest';
+const CATALOG_PACKAGE = {
+ package: { id: 'pkg_psa', manifest_id: 'com.acme.psa', display_name: 'PSA', latest_version: { id: 'ver_1', version: '1.0.0' } },
+ versions: [{ id: 'ver_1', version: '1.0.0' }],
+};
+const SERVER_MESSAGE = 'SERVER-ENGLISH sentinel: installed without a compatibility check.';
+const NO_RANGE = { reason: 'no-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0', message: SERVER_MESSAGE };
+
+const answer = (status: number, body: unknown) => ({
+ ok: status >= 200 && status < 300,
+ status,
+ statusText: '',
+ headers: new Headers({ 'content-type': 'application/json' }),
+ json: async () => body,
+ text: async () => JSON.stringify(body),
+});
+
+async function boot(installData: Record, installModes?: string[]) {
+ resetRuntimeConfigForTesting();
+ vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: { method?: string }) => {
+ const path = new URL(String(input), 'http://console.test').pathname;
+ const method = (init?.method ?? 'GET').toUpperCase();
+ if (path === '/api/v1/runtime/config') {
+ return answer(200, {
+ cloudUrl: '', singleEnvironment: true,
+ features: { installLocal: true, marketplace: true, aiStudio: true, autoPublishAiBuilds: true },
+ branding: { productName: 'ObjectOS', productShortName: 'ObjectOS' },
+ });
+ }
+ if (path === INSTALL_PATH && method === 'GET') return answer(200, { success: true, data: { items: [], total: 0 } });
+ if (path === INSTALL_PATH && method === 'POST') return answer(200, { success: true, data: installData });
+ if (path === MANIFEST_PATH) {
+ return answer(200, {
+ success: true,
+ data: { manifest: { id: 'com.acme.psa', version: '1.0.0', type: 'app', ...(installModes ? { installModes } : {}) }, version: '1.0.0', version_id: 'ver_1' },
+ });
+ }
+ if (path === '/api/v1/marketplace/packages/pkg_psa') return answer(200, { success: true, data: CATALOG_PACKAGE });
+ return answer(404, { success: false, error: { code: 'NOT_FOUND', message: `no route ${method} ${path}` } });
+ }));
+ await initRuntimeConfig();
+}
+
+async function install() {
+ render();
+ const button = await screen.findByRole('button', { name: '«marketplace.action.install»' });
+ await act(async () => {});
+ fireEvent.click(button);
+}
+
+const MANAGED = { manifestId: 'com.acme.psa', version: '1.0.0', versionId: 'ver_1', installedAt: '2026-11-05T00:00:00Z', upgradedFrom: null };
+
+afterEach(() => {
+ cleanup();
+ vi.unstubAllGlobals();
+ resetRuntimeConfigForTesting();
+});
+
+describe('the package page\'s Install result draws protocolCheckSkipped (objectstack#30326)', () => {
+ it('a managed install the kernel loaded: the success sentence, then the unchecked-protocol line', async () => {
+ await boot({ ...MANAGED, hotLoaded: true, protocolCheckSkipped: NO_RANGE });
+ await install();
+
+ expect(await screen.findByText('«marketplace.install.localSuccess»')).toBeInTheDocument();
+ expect(screen.getByTestId('protocol-check-skipped')).toHaveTextContent(
+ '«marketplace.install.protocolCheckSkipped.noRange|packageId=com.acme.psa|protocolVersion=18.1.0|requiredRange=»',
+ );
+ expect(screen.queryByText(SERVER_MESSAGE)).not.toBeInTheDocument();
+ });
+
+ it('a managed install loaded at restart carries it too', async () => {
+ await boot({ ...MANAGED, hotLoaded: false, protocolCheckSkipped: NO_RANGE });
+ await install();
+
+ expect(await screen.findByText('«marketplace.install.localLoadsAtRestart»')).toBeInTheDocument();
+ expect(screen.getByTestId('protocol-check-skipped')).toHaveTextContent('marketplace.install.protocolCheckSkipped.noRange');
+ });
+
+ it('an unmanaged copy with an unreadable range: the range it declared', async () => {
+ await boot({
+ installMode: 'unmanaged', manifestId: 'com.acme.psa', version: '1.0.0', versionId: 'ver_1', installedAt: '2026-11-05T00:00:00Z',
+ installedFrom: { packageId: 'com.acme.psa' }, targetPackageId: 'com.acme.psa_copy', namespace: 'psa', copiedCount: 0, copied: [], strippedLocks: [],
+ protocolCheckSkipped: {
+ reason: 'unparsed-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0',
+ requiredRange: 'latest', rangeSource: 'engines.protocol', message: SERVER_MESSAGE,
+ },
+ }, ['unmanaged']);
+ await install();
+
+ expect(await screen.findByText('«marketplace.install.unmanagedSuccess»')).toBeInTheDocument();
+ expect(screen.getByTestId('protocol-check-skipped')).toHaveTextContent(
+ '«marketplace.install.protocolCheckSkipped.unparsedRange|packageId=com.acme.psa|protocolVersion=18.1.0|requiredRange=latest»',
+ );
+ });
+
+ it('CONTROL: an install whose range was checked draws no such line', async () => {
+ await boot({ ...MANAGED, hotLoaded: true });
+ await install();
+
+ expect(await screen.findByText('«marketplace.install.localSuccess»')).toBeInTheDocument();
+ expect(screen.queryByTestId('protocol-check-skipped')).not.toBeInTheDocument();
+ });
+});
diff --git a/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePage.orgInstallProtocolCheckSkipped-30326.test.tsx b/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePage.orgInstallProtocolCheckSkipped-30326.test.tsx
new file mode 100644
index 00000000000..d7aedd28d57
--- /dev/null
+++ b/ui/packages/app-shell/src/console/marketplace/__tests__/MarketplacePage.orgInstallProtocolCheckSkipped-30326.test.tsx
@@ -0,0 +1,133 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * The catalog page's org install on a self-hosted runtime (`installLocal`)
+ * says when the install door admitted the package WITHOUT checking its
+ * platform protocol range: the answer's `data.protocolCheckSkipped`
+ * (objectstack#30326), drawn under the installed sentence.
+ *
+ * The catalog lists are stubbed; `installLocal` is the REAL client, so the
+ * notice the strip draws is the one that crossed the wire.
+ */
+
+import '@testing-library/jest-dom/vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { cleanup, fireEvent, render, screen, within } from '@testing-library/react';
+
+vi.mock('react-router-dom', () => ({
+ useNavigate: () => vi.fn(),
+ useParams: () => ({}),
+}));
+
+vi.mock('@object-ui/auth', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ useWorkspaceAdminStatus: () => ({ isAdmin: true, isResolved: true }),
+ useAuth: () => ({ activeOrganization: { id: 'org_1' } }),
+}));
+
+vi.mock('@object-ui/i18n', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ useObjectTranslation: () => ({
+ t: (key: string, o?: Record) => {
+ const facts = ['packageId', 'protocolVersion', 'requiredRange'].filter((k) => o?.[k] !== undefined).map((k) => `${k}=${String(o?.[k])}`);
+ return facts.length > 0 ? `«${key}|${facts.join('|')}»` : `«${key}»`;
+ },
+ language: 'en',
+ }),
+}));
+
+vi.mock('../ConnectorCredentialsStep', () => ({
+ ConnectorCredentialsStep: () => ,
+}));
+vi.mock('../../../assistant/assistantBus', () => ({ emitMetadataRefresh: () => {} }));
+
+const PKG = 'com.acme.psa';
+const ORG_ROW = {
+ id: 'pkg_psa',
+ manifest_id: PKG,
+ display_name: 'Acme PSA',
+ description: 'A PSA.',
+ category: null,
+ icon_url: null,
+ visibility: 'org',
+ latest_version: '1.0.0',
+};
+
+vi.mock('../marketplaceApi', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ listMarketplacePackages: async () => ({ items: [] }),
+ listLocalInstalls: async () => [],
+ listOrgPackages: async () => ({ connected: true, items: [ORG_ROW] }),
+ listInstalledPackages: async () => ({ connected: true, items: [] }),
+}));
+
+import { ActiveOrganizationStorage } from '@object-ui/auth';
+import { initRuntimeConfig, resetRuntimeConfigForTesting } from '../../../runtime-config';
+import { MarketplacePage } from '../MarketplacePage';
+
+const INSTALL_PATH = '/api/v1/marketplace/install-local';
+const SERVER_MESSAGE = 'SERVER-ENGLISH sentinel: installed without a compatibility check.';
+const MANAGED = { manifestId: PKG, version: '1.0.0', versionId: 'ver_1', installedAt: '2026-11-05T00:00:00Z', upgradedFrom: null };
+
+const answer = (status: number, body: unknown) => ({
+ ok: status >= 200 && status < 300,
+ status,
+ statusText: '',
+ headers: new Headers({ 'content-type': 'application/json' }),
+ json: async () => body,
+ text: async () => JSON.stringify(body),
+});
+
+async function boot(installData: Record) {
+ resetRuntimeConfigForTesting();
+ ActiveOrganizationStorage.set('org_1');
+ vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: { method?: string }) => {
+ const path = new URL(String(input), 'http://console.test').pathname;
+ const method = (init?.method ?? 'GET').toUpperCase();
+ if (path === INSTALL_PATH && method === 'POST') return answer(200, { success: true, data: installData });
+ if (path === '/api/v1/runtime/config') {
+ return answer(200, {
+ cloudUrl: 'https://cloud.example', singleEnvironment: true, defaultEnvironmentId: 'env_1',
+ features: { installLocal: true, marketplace: true, aiStudio: true, autoPublishAiBuilds: true },
+ branding: { productName: 'ObjectOS', productShortName: 'ObjectOS' },
+ });
+ }
+ return answer(404, { success: false, error: { code: 'NOT_FOUND', message: `no route ${method} ${path}` } });
+ }));
+ await initRuntimeConfig();
+}
+
+async function installFromOrgCard() {
+ render();
+ const card = await screen.findByTestId(`org-card-${PKG}`);
+ fireEvent.click(within(card).getByRole('button', { name: '«marketplace.org.install»' }));
+}
+
+afterEach(() => {
+ cleanup();
+ vi.unstubAllGlobals();
+ resetRuntimeConfigForTesting();
+});
+
+describe('the catalog page\'s org install draws protocolCheckSkipped (objectstack#30326)', () => {
+ it('installed, its range unchecked: the installed sentence, then the unchecked-protocol line', async () => {
+ await boot({
+ ...MANAGED, hotLoaded: true,
+ protocolCheckSkipped: { reason: 'no-range', packageId: PKG, protocolVersion: '18.1.0', message: SERVER_MESSAGE },
+ });
+ await installFromOrgCard();
+
+ const line = await screen.findByTestId('protocol-check-skipped');
+ expect(line).toHaveTextContent('«marketplace.install.protocolCheckSkipped.noRange|packageId=com.acme.psa|protocolVersion=18.1.0|requiredRange=»');
+ expect(screen.getByText('«marketplace.org.installed»')).toBeInTheDocument();
+ expect(screen.queryByText(SERVER_MESSAGE)).not.toBeInTheDocument();
+ });
+
+ it('CONTROL: an install whose range was checked draws no such line', async () => {
+ await boot({ ...MANAGED, hotLoaded: true });
+ await installFromOrgCard();
+
+ expect(await screen.findByText('«marketplace.org.installed»')).toBeInTheDocument();
+ expect(screen.queryByTestId('protocol-check-skipped')).not.toBeInTheDocument();
+ });
+});
diff --git a/ui/packages/app-shell/src/console/marketplace/__tests__/protocolCheckSkipped-30326.test.ts b/ui/packages/app-shell/src/console/marketplace/__tests__/protocolCheckSkipped-30326.test.ts
new file mode 100644
index 00000000000..2ce7f5254c5
--- /dev/null
+++ b/ui/packages/app-shell/src/console/marketplace/__tests__/protocolCheckSkipped-30326.test.ts
@@ -0,0 +1,54 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * The install answer's `protocolCheckSkipped` (objectstack#30326), drawn from
+ * its facts: one key per `reason`, the facts interpolated; an unknown `reason`
+ * draws the server's own `message`; an answer without the field draws nothing.
+ * `t` echoes the key and the facts, so the claim is WHICH sentence and WHAT
+ * facts, not the wording.
+ */
+
+import { describe, expect, it } from 'vitest';
+import { protocolCheckSkippedText } from '../protocolCheckSkipped';
+
+const t = (key: string, o?: Record) =>
+ `«${key}|${['packageId', 'protocolVersion', 'requiredRange'].map((k) => `${k}=${String(o?.[k])}`).join('|')}»`;
+
+const SERVER_MESSAGE = 'SERVER-ENGLISH sentinel: installed without a compatibility check.';
+
+describe('protocolCheckSkippedText (objectstack#30326)', () => {
+ it('no-range: the package and the protocol it was installed under', () => {
+ expect(protocolCheckSkippedText({
+ manifestId: 'com.acme.psa',
+ protocolCheckSkipped: { reason: 'no-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0', message: SERVER_MESSAGE },
+ }, t)).toBe('«marketplace.install.protocolCheckSkipped.noRange|packageId=com.acme.psa|protocolVersion=18.1.0|requiredRange=»');
+ });
+
+ it('unparsed-range: the range it declared, too', () => {
+ expect(protocolCheckSkippedText({
+ protocolCheckSkipped: {
+ reason: 'unparsed-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0',
+ requiredRange: 'latest', rangeSource: 'engines.protocol', message: SERVER_MESSAGE,
+ },
+ }, t)).toBe('«marketplace.install.protocolCheckSkipped.unparsedRange|packageId=com.acme.psa|protocolVersion=18.1.0|requiredRange=latest»');
+ });
+
+ it('a reason this reader does not know: the server\'s message as given', () => {
+ expect(protocolCheckSkippedText({
+ protocolCheckSkipped: { reason: 'some-later-reason', packageId: 'com.acme.psa', protocolVersion: '18.1.0', message: SERVER_MESSAGE },
+ }, t)).toBe(SERVER_MESSAGE);
+ });
+
+ it('an unparsed-range without its range: the server\'s message, not a sentence with a hole', () => {
+ expect(protocolCheckSkippedText({
+ protocolCheckSkipped: { reason: 'unparsed-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0', message: SERVER_MESSAGE },
+ }, t)).toBe(SERVER_MESSAGE);
+ });
+
+ it('CONTROL: a checked install (no field), an empty answer and a notice with nothing readable draw nothing', () => {
+ expect(protocolCheckSkippedText({ manifestId: 'com.acme.psa', hotLoaded: true }, t)).toBeNull();
+ expect(protocolCheckSkippedText(null, t)).toBeNull();
+ expect(protocolCheckSkippedText(undefined, t)).toBeNull();
+ expect(protocolCheckSkippedText({ protocolCheckSkipped: { reason: 'later' } }, t)).toBeNull();
+ });
+});
diff --git a/ui/packages/app-shell/src/console/marketplace/marketplaceApi.ts b/ui/packages/app-shell/src/console/marketplace/marketplaceApi.ts
index f90f05c1e7b..157410caad6 100644
--- a/ui/packages/app-shell/src/console/marketplace/marketplaceApi.ts
+++ b/ui/packages/app-shell/src/console/marketplace/marketplaceApi.ts
@@ -147,6 +147,7 @@ export type { PluginRuntime } from '@objectstack/spec/kernel';
import type { MetadataLock, PluginPermissions, PluginRuntime } from '@objectstack/spec/kernel';
import { isPlainRecord } from '@objectstack/spec/data';
+import type { ProtocolCheckSkipped } from './protocolCheckSkipped.js';
export interface MarketplacePackageVersion {
id: string;
@@ -770,6 +771,12 @@ export interface LocalManagedInstallResult {
* as under a walled tenancy posture, which this sentence names the remedy for.
*/
credentialNote?: string;
+ /**
+ * Present only when the install door's protocol handshake admitted the
+ * package WITHOUT checking its range (objectstack#30326): it declares no
+ * `engines.protocol`, or one the runtime cannot read. Omitted when checked.
+ */
+ protocolCheckSkipped?: ProtocolCheckSkipped;
}
/**
@@ -806,6 +813,8 @@ export interface LocalUnmanagedInstallResult {
copied: Array<{ type: string; name: string }>;
strippedLocks: LocalInstallStrippedLock[];
note?: string;
+ /** As on the managed answer ({@link LocalManagedInstallResult.protocolCheckSkipped}). */
+ protocolCheckSkipped?: ProtocolCheckSkipped;
}
export type LocalInstallResult = LocalManagedInstallResult | LocalUnmanagedInstallResult;
diff --git a/ui/packages/app-shell/src/console/marketplace/protocolCheckSkipped.ts b/ui/packages/app-shell/src/console/marketplace/protocolCheckSkipped.ts
new file mode 100644
index 00000000000..1700af14036
--- /dev/null
+++ b/ui/packages/app-shell/src/console/marketplace/protocolCheckSkipped.ts
@@ -0,0 +1,74 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * The install answer's `data.protocolCheckSkipped` (objectstack#30326), in the
+ * reader's locale: the package IS installed, but the ADR-0087 D1 handshake
+ * admitted it without checking its platform protocol range, so it may not work
+ * on this platform version.
+ *
+ * `POST /api/v1/marketplace/install-local` carries it on a success answer only
+ * then (managed, unmanaged and paired installs alike), omitted when the range
+ * was checked:
+ *
+ * { reason: 'no-range', packageId, protocolVersion, message }
+ * { reason: 'unparsed-range', packageId, protocolVersion, requiredRange, rangeSource, message }
+ *
+ * `message` is the server's English sentence. The Console draws its own
+ * sentence from the facts instead, one key per `reason`; a `reason` this
+ * reader does not know draws the server's `message` as given, and an answer
+ * without the field draws nothing.
+ */
+
+import { useCallback } from 'react';
+import { useObjectTranslation } from '@object-ui/i18n';
+
+/** The two verdicts the handshake admits a package unchecked under. */
+export type ProtocolCheckSkippedReason = 'no-range' | 'unparsed-range';
+
+/** `data.protocolCheckSkipped`, as the install door answers it. */
+export type ProtocolCheckSkipped =
+ | { reason: 'no-range'; packageId: string; protocolVersion: string; message: string }
+ | {
+ reason: 'unparsed-range';
+ packageId: string;
+ protocolVersion: string;
+ requiredRange: string;
+ rangeSource: string;
+ message: string;
+ };
+
+const LINE_KEY: Record = {
+ 'no-range': 'marketplace.install.protocolCheckSkipped.noRange',
+ 'unparsed-range': 'marketplace.install.protocolCheckSkipped.unparsedRange',
+};
+
+const isText = (v: unknown): v is string => typeof v === 'string' && v !== '';
+
+type Translate = (key: string, options?: Record) => string;
+
+/**
+ * The notice's sentence for an install answer, or `null` when the answer
+ * carries none (the range was checked, or an older runtime answered).
+ */
+export function protocolCheckSkippedText(answer: unknown, t: Translate): string | null {
+ const notice = (answer as { protocolCheckSkipped?: unknown } | null | undefined)?.protocolCheckSkipped;
+ if (!notice || typeof notice !== 'object') return null;
+ const n = notice as Record;
+ const known = typeof n.reason === 'string' && n.reason in LINE_KEY
+ && isText(n.packageId) && isText(n.protocolVersion)
+ && (n.reason !== 'unparsed-range' || isText(n.requiredRange));
+ if (known) {
+ return t(LINE_KEY[n.reason as ProtocolCheckSkippedReason], {
+ packageId: n.packageId,
+ protocolVersion: n.protocolVersion,
+ requiredRange: isText(n.requiredRange) ? n.requiredRange : '',
+ });
+ }
+ return isText(n.message) ? n.message : null;
+}
+
+/** {@link protocolCheckSkippedText} in the current locale. */
+export function useProtocolCheckSkippedText(): (answer: unknown) => string | null {
+ const { t } = useObjectTranslation();
+ return useCallback((answer: unknown) => protocolCheckSkippedText(answer, t as Translate), [t]);
+}
diff --git a/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.importProtocolCheckSkipped-30326.test.tsx b/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.importProtocolCheckSkipped-30326.test.tsx
new file mode 100644
index 00000000000..d3d58b1b069
--- /dev/null
+++ b/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.importProtocolCheckSkipped-30326.test.tsx
@@ -0,0 +1,101 @@
+// Copyright (c) 2026 ObjectStack. Licensed under the Apache-2.0 license.
+
+/**
+ * Packages → Import says when the install door admitted the imported package
+ * WITHOUT checking its platform protocol range: the answer's
+ * `data.protocolCheckSkipped` (objectstack#30326), drawn under the success
+ * sentence. The REAL locale packs are mounted (`I18nProvider`), so the zh case
+ * asserts the sentence an administrator reads, not a key.
+ */
+
+import '@testing-library/jest-dom/vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { cleanup, fireEvent, render, screen } from '@testing-library/react';
+import { MemoryRouter } from 'react-router-dom';
+import { I18nProvider } from '@object-ui/i18n';
+
+vi.mock('@object-ui/auth', async (importOriginal) => ({
+ ...(await importOriginal>()),
+ useWorkspaceAdminStatus: () => ({ isAdmin: true, isResolved: true }),
+}));
+
+import { PackagesPage } from './PackagesPage';
+import { initRuntimeConfig, resetRuntimeConfigForTesting } from '../../runtime-config';
+
+const reply = (status: number, body: unknown) =>
+ new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
+
+const SERVER_MESSAGE = 'SERVER-ENGLISH sentinel: installed without a compatibility check.';
+const PSA = { id: 'com.acme.psa', name: 'PSA', version: '1.0.0', type: 'app' };
+const MANAGED = { manifestId: 'com.acme.psa', version: '1.0.0', versionId: 'ver_1', installedAt: '2026-11-05T00:00:00Z', hotLoaded: true, upgradedFrom: null };
+
+async function serve(installData: Record) {
+ resetRuntimeConfigForTesting();
+ vi.stubGlobal('fetch', vi.fn(async () => reply(200, { features: { installLocal: true } })));
+ await initRuntimeConfig();
+ vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: { method?: string }) => {
+ const path = new URL(String(input), 'http://console.test').pathname;
+ const method = (init?.method ?? 'GET').toUpperCase();
+ if (path === '/api/v1/packages') return reply(200, { success: true, data: { packages: [] } });
+ if (path === '/api/v1/cloud-connection/installed') return reply(404, {});
+ if (path === '/api/v1/marketplace/install-local' && method === 'GET') return reply(200, { success: true, data: { items: [] } });
+ if (path === '/api/v1/marketplace/install-local' && method === 'POST') return reply(200, { success: true, data: installData });
+ return reply(404, { success: false, error: { code: 'NOT_FOUND', message: `no route ${method} ${path}` } });
+ }));
+}
+
+async function importFile(lang: 'en' | 'zh') {
+ render(
+
+
+
+
+ ,
+ );
+ const input = await vi.waitFor(() => {
+ const el = document.querySelector('input[type="file"]');
+ if (!el) throw new Error('no import input yet');
+ return el as HTMLInputElement;
+ });
+ const file = new File([JSON.stringify(PSA)], 'psa.json', { type: 'application/json' });
+ fireEvent.change(input, { target: { files: [file] } });
+}
+
+afterEach(() => {
+ cleanup();
+ vi.unstubAllGlobals();
+ resetRuntimeConfigForTesting();
+});
+
+describe('Packages → Import draws protocolCheckSkipped (objectstack#30326)', () => {
+ it('zh: no range — the package, the protocol it was installed under, in place of the server\'s English', async () => {
+ await serve({ ...MANAGED, protocolCheckSkipped: { reason: 'no-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0', message: SERVER_MESSAGE } });
+ await importFile('zh');
+
+ const line = await screen.findByTestId('protocol-check-skipped');
+ expect(line).toHaveTextContent(/^com\.acme\.psa 未声明它支持的平台协议版本，因此已在平台协议 18\.1\.0 下安装，未做兼容性检查/);
+ expect(screen.queryByText(SERVER_MESSAGE)).not.toBeInTheDocument();
+ });
+
+ it('en: an unreadable range — the range it declared', async () => {
+ await serve({
+ ...MANAGED,
+ protocolCheckSkipped: {
+ reason: 'unparsed-range', packageId: 'com.acme.psa', protocolVersion: '18.1.0',
+ requiredRange: 'latest', rangeSource: 'engines.protocol', message: SERVER_MESSAGE,
+ },
+ });
+ await importFile('en');
+
+ const line = await screen.findByTestId('protocol-check-skipped');
+ expect(line).toHaveTextContent(/^com\.acme\.psa states its platform protocol as latest, which this runtime cannot read, so it was installed under protocol 18\.1\.0 without a compatibility check/);
+ });
+
+ it('CONTROL: an import whose range was checked draws no such line', async () => {
+ await serve({ ...MANAGED });
+ await importFile('en');
+
+ await screen.findByText(/com\.acme\.psa/);
+ expect(screen.queryByTestId('protocol-check-skipped')).not.toBeInTheDocument();
+ });
+});
diff --git a/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.tsx b/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.tsx
index 9e267095a7c..617d1078962 100644
--- a/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.tsx
+++ b/ui/packages/app-shell/src/views/metadata-admin/PackagesPage.tsx
@@ -90,6 +90,8 @@ import { getRuntimeConfig } from '../../runtime-config.js';
import { readMarketplaceInstalls, type LocalInstallEntry } from '../../console/marketplace/marketplaceApi.js';
import { MarketplaceNotLoaded, MarketplaceRowActions } from '../../console/marketplace/MarketplaceRowActions.js';
import { useDependencyMissingText } from '../../console/marketplace/dependencyMissing.js';
+import { useProtocolCheckSkippedText } from '../../console/marketplace/protocolCheckSkipped.js';
+import { ProtocolCheckSkippedNote } from '../../console/marketplace/ProtocolCheckSkippedNote.js';
import type { InstalledPackageAtEitherStage } from '@objectstack/spec/api-assembled';
import type { PackagePublishResult } from '@objectstack/spec/system';
import type { ReassignOrphanedMetadataResponse } from '@objectstack/spec/api';
@@ -1376,6 +1378,7 @@ export function PackagesPage() {
// ADR-0141 D2 — the import door's `DEPENDENCY_MISSING` refusal, one line per
// unmet dependency, from the locale packs (the `engine.*` table is en/zh only).
const dependencyMissingText = useDependencyMissingText();
+ const protocolCheckSkippedText = useProtocolCheckSkippedText();
const { pathname } = useLocation();
// App base = path up to (and excluding) `/component/...`, so links to
// `/apps/:app/metadata/...` work regardless of nesting.
@@ -1394,7 +1397,9 @@ export function PackagesPage() {
const [detailOpen, setDetailOpen] = React.useState(false);
const fileRef = React.useRef(null);
const [importing, setImporting] = React.useState(false);
- const [importMsg, setImportMsg] = React.useState<{ kind: 'ok' | 'err'; text: string } | null>(
+ // `protocolNote`: the import answer's `protocolCheckSkipped`, drawn
+ // (objectstack#30326) — imported, its platform protocol range unchecked.
+ const [importMsg, setImportMsg] = React.useState<{ kind: 'ok' | 'err'; text: string; protocolNote?: string } | null>(
null,
);
// objectui#12675 — every row with its Source; objectui#12790 — that Source is
@@ -1560,9 +1565,11 @@ export function PackagesPage() {
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ manifest }),
});
+ const protocolNote = protocolCheckSkippedText(res);
setImportMsg({
kind: 'ok',
text: tFormat('engine.packages.import.success', locale, { id: res?.manifestId ?? manifest.id }),
+ ...(protocolNote ? { protocolNote } : {}),
});
await load();
} catch (err: any) {
@@ -1663,6 +1670,7 @@ export function PackagesPage() {
}`}
>
{importMsg.text}
+ {importMsg.protocolNote ? : null}