@@ -0,0 +1,14 @@
+---
+'@object-ui/app-shell': patch
+---
+
+fix(app-shell): the notify node's recipients editor writes and keeps an email-field recipient, `{ emailField }`
+
+Clause-②: no
+Metadata-protocol: none
+
+- **A stored `{ emailField }` is kept.** The Studio recipients editor read `recipients: { emailField: 'FIELD' }` as no recipients, so the first edit of the node replaced it. It now reads as one Email field row, and reading the flow and saving it again writes it back unchanged.
+- **An Email field row.** A recipient can be picked as "Email field": an `email`-typed field of the trigger record, stored as `{ emailField: 'FIELD' }`, the whole `recipients` value. Only `email`-typed fields are suggested. The row is offered only while it is the node's sole recipient, and no recipient can be added beside it. The commit that stores it also writes `channels: ['email']` when the node does not already name email alone; a stored one on a node that names other channels says so and offers a one-click fix.
+- **The Record field row on a node that sends email.** It no longer suggests an `email`-typed field there: the platform refuses, at run time, an address that row computes when no user holds it. A stored Record field row over such a field keeps its value and says the address must belong to a user.
+
+What to do: nothing. To mail a person who is not a user, pick "Email field" as the recipient type.
@@ -1330,6 +1330,13 @@ const ENGINE_STRINGS_EN: Record<string, string> = {
   'engine.inspector.recipients.remove': 'Remove recipient',
   'engine.inspector.recipients.empty': 'No recipients yet.',
   'engine.inspector.recipients.notEmail': 'Not an email address — the messaging service would read it as a user id.',
+  'engine.inspector.recipients.kind.emailField': 'Email field',
+  'engine.inspector.recipients.placeholder.emailField': 'Email field of the trigger record',
+  'engine.inspector.recipients.emailFieldHint': 'Mails the address in this field of the trigger record, by email only — for a person who is not a user. It is the node\u2019s only recipient.',
+  'engine.inspector.recipients.emailFieldNotEmail': 'Not an email field — this recipient must name an email-typed field of the trigger record.',
+  'engine.inspector.recipients.emailFieldChannels': 'This recipient is sent by email only: the node\u2019s channels must be email alone, or the node is refused.',
+  'engine.inspector.recipients.emailFieldChannelsFix': 'Send by email only',
+  'engine.inspector.recipients.fieldOnEmailNode': 'This node sends email: the address in this field must belong to a user, or the run fails. To mail the address itself, use the Email field type.',
   // objectui#11788 — the create/update record nodes' field-value keys, picked from the target object.
   'engine.inspector.fieldMap.chooseObject': 'Choose the Object above to list its fields.',
   // objectui#11783 — the shared object picker (inspectors/ObjectPicker.tsx).
@@ -5013,6 +5020,13 @@ const ENGINE_STRINGS_ZH: Record<string, string> = {
   'engine.inspector.recipients.remove': '移除收件人',
   'engine.inspector.recipients.empty': '还没有收件人。',
   'engine.inspector.recipients.notEmail': '这不是邮箱地址 —— 消息服务会把它当作用户 id。',
+  'engine.inspector.recipients.kind.emailField': '邮箱字段',
+  'engine.inspector.recipients.placeholder.emailField': '触发记录的邮箱字段',
+  'engine.inspector.recipients.emailFieldHint': '向触发记录该字段中的地址发送邮件，仅走邮件渠道 —— 用于不是用户的人。它是本节点唯一的收件人。',
+  'engine.inspector.recipients.emailFieldNotEmail': '这不是邮箱类型的字段 —— 这种收件人必须指向触发记录的邮箱类型字段。',
+  'engine.inspector.recipients.emailFieldChannels': '这种收件人只走邮件渠道：本节点的渠道必须只有 email，否则节点会被拒收。',
+  'engine.inspector.recipients.emailFieldChannelsFix': '只走邮件',
+  'engine.inspector.recipients.fieldOnEmailNode': '本节点会发邮件：该字段中的地址必须属于某个用户，否则运行失败。要直接给该地址发邮件，请改用「邮箱字段」类型。',
   // objectui#11788 — 新建/更新记录节点的字段值键,从目标对象中选取。
   'engine.inspector.fieldMap.chooseObject': '请先在上方选择对象，才能列出它的字段。',
   // objectui#11783 — the shared object picker (inspectors/ObjectPicker.tsx).
 
@@ -430,7 +430,13 @@ function FlowSecretControl({
 export interface FlowNodeConfigFieldProps {
   field: FlowConfigField;
   value: unknown;
-  onCommit: (value: unknown) => void;
+  /**
+   * Writes the field's value. `alongside` names sibling keys (beside the
+   * field's own key, under the same parent) written in the same patch — the
+   * recipients editor's `channels` for an email-field recipient
+   * (objectstack#25900). Most fields never pass it.
+   */
+  onCommit: (value: unknown, alongside?: Readonly<Record<string, unknown>>) => void;
   disabled?: boolean;
   locale?: string;
   /** Draft + node context so `reference` fields can resolve their options. */
@@ -651,7 +657,7 @@ export function FlowNodeConfigField({ field, value, onCommit, disabled, locale,
           <FlowRecipientsField
             label={field.label}
             value={value}
-            onCommit={(v) => onCommit(v)}
+            onCommit={(v, alongside) => onCommit(v, alongside)}
             disabled={disabled}
             locale={locale}
             context={context}
 
@@ -481,7 +481,7 @@ export function FlowNodeInspector({ selection, draft, onPatch, onClearSelection,
   // Screen nodes (and the `user_task` alias) get a live end-user preview.
   const isScreen = node.type === 'screen' || node.type === 'user_task';
 
-  const setField = (field: FlowConfigField, value: unknown) => {
+  const setField = (field: FlowConfigField, value: unknown, alongside?: Readonly<Record<string, unknown>>) => {
     if (!loc) return;
     const path = field.path;
     let stored = value;
@@ -544,6 +544,13 @@ export function FlowNodeInspector({ selection, draft, onPatch, onClearSelection,
     if (switched && isBareSwitchedOffBlock(nextNode, switched)) {
       nextNode = setAtPath(nextNode, [...switched.block], undefined);
     }
+    // objectstack#25900 — sibling keys the field writes in the SAME patch (the
+    // recipients editor's `channels` beside an email-field recipient). Two
+    // commits would each start from the node this render closed over, and the
+    // second would drop the first.
+    for (const [key, sibling] of Object.entries(alongside ?? {})) {
+      nextNode = setAtPath(nextNode, [...path.slice(0, -1), key], sibling);
+    }
     // Migrate-on-edit: writing the canonical path drops any looser fallback
     // location, so the node never carries a stale duplicate (engine + designer agree).
     if (field.fallbackPath) nextNode = setAtPath(nextNode, field.fallbackPath, undefined);
@@ -805,7 +812,7 @@ export function FlowNodeInspector({ selection, draft, onPatch, onClearSelection,
             <FlowNodeConfigField
               field={effField}
               value={value}
-              onCommit={(v) => setField(field, v)}
+              onCommit={(v, alongside) => setField(field, v, alongside)}
               disabled={readOnly || !!cadence}
               locale={locale}
               context={{ draft, node }}