@@ -0,0 +1,17 @@
+---
+'@object-ui/app-shell': patch
+'@object-ui/i18n': patch
+---
+
+fix(app-shell): pending changes folds what the platform wrote into one collapsed line
+
+Clause-②: no
+Metadata-protocol: none
+
+Publishing a new object from Studio listed the platform's injected system columns (`created_at`, `created_by`, `owner_id`, `updated_at`, `updated_by`) as fields the author added, and the object's derived `nameField` under "Also changed", beside the one field the author typed.
+
+- A field the publish adds or removes whose every definition carries `system: true` (the spec's mark for an auto-injected system/audit column), and a `nameField` equal to the registry's own `provisionPrimary` derivation, now fold into one collapsed "Generated by the platform (N)" line; opening it shows those rows. A system field whose definition differs between the published and draft bodies is an edit and stays an author row, as does a `nameField` the derivation would not pick.
+- A new item's top-level keys are headed "Includes:" rather than "Also changed:": every key of an item that does not exist yet is part of it.
+- The columns the platform injects and hides (`__search`, `organization_id`, `owning_business_unit_id`) are still not listed at all.
+
+New strings `preview.changes.detailNewKeys` and `preview.changes.generatedGroup` ship in all ten locale packs.
@@ -49,6 +49,6 @@
       "ui/packages/types"
     ],
     "registrySources": 922,
-    "registrySourcesSha256": "3fe916234f1b5346bff70f6f99322077630b851ebef81c9ae6ba8c4ac08e2063"
+    "registrySourcesSha256": "0e127be18a1104d857822dc5c71a6380e4f00b0db729cd8b8a230a11c120fe78"
   }
 }
@@ -14,7 +14,9 @@
  * Each entry expands into the fields (objects) and top-level keys it adds,
  * changes and removes, lazily fetched on first expand. An entry whose drill-in
  * finds the draft equal to its published version drops the UPDATE mark
- * (objectui#11807): publishing still promotes it, but it changes nothing. This
+ * (objectui#11807): publishing still promotes it, but it changes nothing. What
+ * the platform wrote rather than the author — the system columns it provisions,
+ * the keys it derives — folds into one collapsed line (objectstack#25890). This
  * is the review surface that turns Publish from a leap of faith into an
  * informed click.
  *
@@ -83,7 +85,7 @@ import { MetadataProtectionFields, stripReadDecorations } from '@objectstack/spe
 // objectui#12929 — the ONE discriminator of an authored default's shape, the
 // same function the batch door's backfill judgement calls. Moves nothing onto
 // the eager graph for the reason recorded above (`vendor-objectstack`).
-import { discriminateDefaultValueShape } from '@objectstack/spec/data';
+import { discriminateDefaultValueShape, provisionPrimary } from '@objectstack/spec/data';
 import { diffFields, readFields } from '../views/metadata-admin/previews/object-fields-io.js';
 // objectui#13125 — the Data pillar's rule for a column the platform injected
 // and hides (objectui#11780), reused rather than restated. A leaf module with
@@ -285,20 +287,68 @@ export interface EntryChangeDetail {
     changed: string[];
     removed: string[];
   };
+  /**
+   * What publishing installs that the PLATFORM wrote, not the author: the
+   * system columns it provisions for the object and the keys it derives
+   * (objectstack#25890). Listed once, in a collapsed group of its own, never in
+   * `fields` or `keys` above. Field rows sort before key rows; each sorts by
+   * name. A generated field's label, when it declares one, is in
+   * `fields.labels`.
+   */
+  generated: Array<{ name: string; kind: 'added' | 'changed' | 'removed'; scope: 'field' | 'key' }>;
+  /**
+   * True when there is no published body, so publishing ADDS the item
+   * (objectstack#25890). Every key it lists is then something the new item
+   * includes, not something else that changed, and the drill-in heads them so.
+   */
+  isNew: boolean;
 }
 
 /** Stable equality for metadata values (small JSON — order-sensitive is fine). */
 function valueEqual(a: unknown, b: unknown): boolean {
   return JSON.stringify(a ?? null) === JSON.stringify(b ?? null);
 }
 
-/** True when the detail lists nothing: no field row and no key row. */
+/** True when the detail lists nothing: no field row, no key row and no generated row. */
 function isEmptyChangeDetail(detail: EntryChangeDetail): boolean {
-  const { fields, keys } = detail;
+  const { fields, keys, generated } = detail;
   const fieldRows = fields ? fields.added.length + fields.changed.length + fields.removed.length : 0;
-  return fieldRows + keys.added.length + keys.changed.length + keys.removed.length === 0;
+  return fieldRows + keys.added.length + keys.changed.length + keys.removed.length + generated.length === 0;
+}
+
+/**
+ * Did the platform write this field definition (objectstack#25890)? The spec's own
+ * mark: `system: true`, which `FieldSchema` declares as the auto-injected
+ * system/audit field and tells tools that surface system fields apart from the
+ * author's to branch on. Read as a boolean and nothing else, as the spec
+ * declares it.
+ */
+function isPlatformSystemField(def: Record<string, unknown> | undefined): boolean {
+  return def?.system === true;
 }
 
+/**
+ * Is `body.nameField` the pointer the registry DERIVES, rather than one the
+ * author chose (objectstack#25890)? The `/meta` reads replay the registry's
+ * materialization seam, which stamps `nameField` through `provisionPrimary` in
+ * designate-only mode. The answer is that same function over the body without
+ * the pointer — the registry's own write-side test for the same question — so
+ * no derivation rule is restated here. A pointer naming any other field is the
+ * author's choice and stays an author row; an absent pointer is no stamp.
+ */
+function isDerivedNameField(body: Record<string, unknown>): boolean {
+  const present = body.nameField;
+  if (typeof present !== 'string' || present === '') return false;
+  const withoutPointer = { ...body };
+  delete withoutPointer.nameField;
+  return provisionPrimary(withoutPointer, { synthesize: false }).nameField === present;
+}
+
+/** Top-level keys whose every present value is platform-derived (objectstack#25890). */
+const DERIVED_KEY_TESTS: Readonly<Record<string, (body: Record<string, unknown>) => boolean>> = {
+  nameField: isDerivedNameField,
+};
+
 /**
  * The ADR-0010 protection envelope (`_lock`, `_packageId`, `_provenance`, …),
  * read off the spec's own declaration so no key list lives here. The review
@@ -351,9 +401,17 @@ function fieldLabelOf(def: Record<string, unknown> | undefined): string | undefi
  * the Data pillar's own test (`isStudioHiddenSystemField`, objectui#11780).
  * The `/meta` reads serve an object with the platform's columns already
  * stamped on, so a NEW object's drill-in listed the search companion
- * `__search` as a field the author added. Only that rule decides: a column
- * the platform injects but does not hide (the audit columns, `owner_id`) is
- * still listed.
+ * `__search` as a field the author added. Only that rule drops a row
+ * outright.
+ *
+ * A column the platform injects but does NOT hide — the audit columns,
+ * `owner_id` — is a row, but not the author's (objectstack#25890): a field this
+ * publish adds or removes whose every definition carries `system: true` moves
+ * to `generated`, the collapsed group of what the platform wrote. So does a
+ * top-level key whose value is the platform's derivation (`nameField`, see
+ * {@link isDerivedNameField}). A system field CHANGED between two bodies stays
+ * an author row: the platform injects the same definition on both reads, so a
+ * difference there is an edit someone made.
  *
  * Why not `computeDiffRows` from `LayeredDiff.tsx`, which splits top-level keys
  * the same way: that module imports the metadata-admin string table
@@ -368,6 +426,7 @@ export function computeChangeDetail(
   const pub = withoutProtectionEnvelope(published ?? {});
   const cur = withoutProtectionEnvelope(draft ?? {});
   let fields: EntryChangeDetail['fields'] = null;
+  const generatedFields: EntryChangeDetail['generated'] = [];
   if (pub.fields != null || cur.fields != null) {
     const d = diffFields(pub.fields, cur.fields);
     const pubDefs = fieldDefsByName(pub.fields);
@@ -376,38 +435,55 @@ export function computeChangeDetail(
       const defs = [pubDefs.get(name), curDefs.get(name)].filter((def) => def !== undefined);
       return !(defs.length > 0 && defs.every((def) => isStudioHiddenSystemField(def)));
     };
-    const added = Object.values(d.byName)
+    // objectstack#25890 — added or removed, and the platform's on every side.
+    const platformWrote = (name: string): boolean =>
+      [pubDefs.get(name), curDefs.get(name)].every((def) => def === undefined || isPlatformSystemField(def));
+    const addedAll = Object.values(d.byName)
       .filter((e) => e.status === 'added' && listed(e.name))
       .map((e) => e.name)
       .sort();
     const changed = Object.values(d.byName)
       .filter((e) => e.status === 'changed' && listed(e.name))
       .map((e) => ({ name: e.name, keys: e.changedKeys }))
       .sort((a, b) => a.name.localeCompare(b.name));
-    const removed = d.removed
+    const removedAll = d.removed
       .map((e) => e.name)
       .filter(listed)
       .sort();
+    const added = addedAll.filter((name) => !platformWrote(name));
+    const removed = removedAll.filter((name) => !platformWrote(name));
+    for (const name of addedAll) if (platformWrote(name)) generatedFields.push({ name, kind: 'added', scope: 'field' });
+    for (const name of removedAll) {
+      if (platformWrote(name)) generatedFields.push({ name, kind: 'removed', scope: 'field' });
+    }
+    generatedFields.sort((a, b) => a.name.localeCompare(b.name));
     const labels = new Map<string, string>();
-    for (const name of [...added, ...changed.map((f) => f.name), ...removed]) {
+    for (const name of [...addedAll, ...changed.map((f) => f.name), ...removedAll]) {
       // The draft's definition where there is one: it is what publishing installs.
       const label = fieldLabelOf(curDefs.get(name) ?? pubDefs.get(name));
       if (label !== undefined) labels.set(name, label);
     }
     fields = { added, changed, removed, labels };
   }
+  const isNew = published === null;
   const names = new Set([...Object.keys(pub), ...Object.keys(cur)]);
   names.delete('fields');
   const keys: EntryChangeDetail['keys'] = { added: [], changed: [], removed: [] };
+  const generatedKeys: EntryChangeDetail['generated'] = [];
   for (const k of [...names].sort()) {
     const before = (pub as Record<string, unknown>)[k];
     const after = (cur as Record<string, unknown>)[k];
     if (valueEqual(before, after)) continue;
-    if (before == null) keys.added.push(k);
-    else if (after == null) keys.removed.push(k);
-    else keys.changed.push(k);
+    const kind = before == null ? 'added' : after == null ? 'removed' : 'changed';
+    const derived = Object.prototype.hasOwnProperty.call(DERIVED_KEY_TESTS, k) ? DERIVED_KEY_TESTS[k] : undefined;
+    // Derived only when every body that carries the key carries the derivation.
+    if (derived && [before == null ? null : pub, after == null ? null : cur].every((b) => b === null || derived(b))) {
+      generatedKeys.push({ name: k, kind, scope: 'key' });
+      continue;
+    }
+    keys[kind].push(k);
   }
-  return { fields, keys };
+  return { fields, keys, generated: [...generatedFields, ...generatedKeys], isNew };
 }
 
 /**
@@ -678,7 +754,7 @@ function EntryDetail({
     );
   }
 
-  const { fields, keys } = detail;
+  const { fields, keys, generated, isNew } = detail;
   const hasKeyRows = keys.added.length > 0 || keys.changed.length > 0 || keys.removed.length > 0;
   if (isEmptyChangeDetail(detail)) {
     return (
@@ -737,7 +813,10 @@ function EntryDetail({
       ))}
       {hasKeyRows && (
         <p className="text-xs text-muted-foreground">
-          {t('preview.changes.detailChangedKeys', { defaultValue: 'Also changed:' })}
+          {isNew
+            ? // objectstack#25890 — every key of a NEW item is new: what it includes, not what else changed.
+              t('preview.changes.detailNewKeys', { defaultValue: 'Includes:' })
+            : t('preview.changes.detailChangedKeys', { defaultValue: 'Also changed:' })}
         </p>
       )}
       {keys.added.map((name) => (
@@ -755,6 +834,55 @@ function EntryDetail({
           − {name}
         </p>
       ))}
+      {generated.length > 0 && <GeneratedGroup rows={generated} labels={fields?.labels} />}
+    </div>
+  );
+}
+
+/**
+ * objectstack#25890 — what the platform wrote into this publish, folded into
+ * one line: the system columns it provisions and the keys it derives. Collapsed
+ * on every open, the confirm posture's too (that posture expands the item rows,
+ * not this group); the toggle shows the rows, read-only, in the same shape as
+ * the author's.
+ */
+function GeneratedGroup({
+  rows,
+  labels,
+}: {
+  rows: EntryChangeDetail['generated'];
+  labels: ReadonlyMap<string, string> | undefined;
+}) {
+  const { t } = useObjectTranslation();
+  const [open, setOpen] = useState(false);
+  return (
+    <div data-testid="draft-generated-group">
+      <button
+        type="button"
+        className="flex items-center gap-1 text-xs text-muted-foreground hover:text-foreground"
+        aria-expanded={open}
+        data-testid="draft-generated-toggle"
+        onClick={() => setOpen((v) => !v)}
+      >
+        {open ? <ChevronDown className="h-3 w-3" /> : <ChevronRight className="h-3 w-3" />}
+        {t('preview.changes.generatedGroup', {
+          n: rows.length,
+          defaultValue: 'Generated by the platform ({{n}})',
+        })}
+      </button>
+      {open && (
+        <div className="ml-4 flex flex-col gap-0.5 opacity-80">
+          {rows.map((row) =>
+            row.scope === 'field' ? (
+              <FieldRow key={`g${row.kind}${row.name}`} kind={row.kind} name={row.name} label={labels?.get(row.name)} />
+            ) : (
+              <p key={`gk${row.kind}${row.name}`} className={`font-mono text-xs ${FIELD_ROW_TONE[row.kind]}`}>
+                {FIELD_ROW_MARK[row.kind]} {row.name}
+              </p>
+            ),
+          )}
+        </div>
+      )}
     </div>
   );
 }
 
@@ -30,9 +30,13 @@
  *
  * - `internal_note` — an author field with `hidden: true` and no `system`:
  *   listed.
- * - `owner_id` — `system: true` without `hidden`: listed.
- * - `created_at` — an audit column, `system` without `hidden`: listed. The
- *   rule does not hide it, and this card does not widen the rule.
+ * - `owner_id` — `system: true` without `hidden`: not dropped.
+ * - `created_at` — an audit column, `system` without `hidden`: not dropped.
+ *   The rule does not hide it, and this card does not widen the rule. Both are
+ *   rows of the collapsed group of what the platform wrote, not the author's
+ *   field rows (objectstack#25890, pinned in the generatedGroup test beside
+ *   this one); here they are the controls that the drop rule leaves them in
+ *   the detail at all.
  */
 
 import '@testing-library/jest-dom/vitest';
@@ -95,17 +99,19 @@ const VISIT_DRAFT = {
     code: { type: 'text', label: 'code' },
     // Control: author-hidden, not system — listed.
     internal_note: { type: 'text', label: 'Internal Note', hidden: true },
-    // Control: system, not hidden — listed.
+    // Control: system, not hidden — not dropped (a generated row, objectstack#25890).
     owner_id: { type: 'lookup', reference: 'sys_user', label: 'Owner', required: false, readonly: false, system: true },
-    // Control: audit column — listed; the rule does not hide it.
+    // Control: audit column — not dropped; the rule does not hide it (a generated row).
     created_at: CREATED_AT_DEF,
     owning_business_unit_id: OWNING_BUSINESS_UNIT_DEF,
     __search: SEARCH_COMPANION_DEF,
   },
 };
 
 const HIDDEN_SYSTEM = ['__search', 'owning_business_unit_id'] as const;
-const VISIT_LISTED = ['bare', 'code', 'created_at', 'internal_note', 'owner_id', 'visit_date'];
+const VISIT_LISTED = ['bare', 'code', 'internal_note', 'visit_date'];
+/** The system columns the drop rule keeps: rows of the generated group (objectstack#25890). */
+const VISIT_GENERATED = ['created_at', 'owner_id'];
 
 afterEach(() => {
   cleanup();
@@ -116,6 +122,7 @@ describe('computeChangeDetail — a column the platform injected and hides is no
   it("a NEW object's added fields leave out the injected-and-hidden columns, and keep every control", () => {
     const d = computeChangeDetail(null, VISIT_DRAFT);
     expect(d.fields?.added).toEqual(VISIT_LISTED);
+    expect(d.generated.filter((g) => g.scope === 'field').map((g) => g.name)).toEqual(VISIT_GENERATED);
   });
 
   it('an UPDATE lists no changed or removed row for one either, and lists the author rows beside it', () => {
@@ -254,7 +261,11 @@ describe('the drill-in of a NEW object (objectui#13125)', () => {
     for (const name of HIDDEN_SYSTEM) expect(text).not.toContain(name);
     expect(text).not.toContain(SEARCH_COMPANION_DEF.label);
     expect(text).not.toContain(OWNING_BUSINESS_UNIT_DEF.label);
-    for (const label of ['Internal Note', 'Owner', 'Created At']) fieldRow(detail, `+ ${label}`);
+    fieldRow(detail, '+ Internal Note');
+    // The two system controls are in the detail, behind the generated group's toggle.
+    fireEvent.click(within(detail).getByTestId('draft-generated-toggle'));
+    for (const label of ['Owner', 'Created At']) fieldRow(detail, `+ ${label}`);
+    for (const name of HIDDEN_SYSTEM) expect(detail.textContent ?? '').not.toContain(name);
   });
 
   it('CONTROL: a field with no label reads as its name alone, once, in monospace', async () => {
Original file line number	Diff line number	Diff line change
`@@ -49,6 +49,6 @@`
`49`	`49`	`"ui/packages/types"`
`50`	`50`	`],`
`51`	`51`	`"registrySources": 922,`
`52`		`- "registrySourcesSha256": "3fe916234f1b5346bff70f6f99322077630b851ebef81c9ae6ba8c4ac08e2063"`
	`52`	`+ "registrySourcesSha256": "0e127be18a1104d857822dc5c71a6380e4f00b0db729cd8b8a230a11c120fe78"`
`53`	`53`	`}`
`54`	`54`	`}`