@@ -0,0 +1,14 @@
+---
+'@object-ui/app-shell': patch
+---
+
+perf(app-shell): a platform admin reads the package list once per session for the app → Studio entries, not on every app page
+
+Clause-②: no
+Metadata-protocol: none
+
+The app bar's Edit app pencil (and the app switcher's Studio row), the sidebar's Design entry and a page's Edit in studio pencil decide whether to draw by reading `GET /api/v1/packages`. That read was repeated on every app page a platform admin opened, and twice on one page when a reader mounted after the first read had settled, although the list is the largest response such a page reads. Those entries now hold the list for the session (the signed-in user and the active organization): an admin's session reads it once, and moving between apps reads nothing. Non-admins still send no such request.
+
+Only these entries hold the list. Studio's own package reads (the switcher, the landing page, the writability gates) still read the server every time.
+
+A held answer stays correct when the list changes: every package write the Console sends forgets it (create and edit, duplicate, the customization pair, the Packages page's publish, revert, discard, delete, adopt, enable/disable and import, and the marketplace install and uninstall), and a package id the held list does not name, such as a package an agent created on the server, is read again once. A writable verdict that changes outside this tab shows its previous posture until this tab writes a package, the session changes or the page reloads; Studio still opens on the verdict it reads itself, and the server's write gate is unchanged.
@@ -14,6 +14,7 @@
  */
 
 import { getCloudBase } from '../../runtime-config.js';
+import { forgetPackageListReads } from '../../views/studio-design/packages-io.js';
 import { TokenStorage } from '@object-ui/auth';
 
 const SERVER_URL = (import.meta.env.VITE_SERVER_URL || '').replace(/\/$/, '');
@@ -334,6 +335,8 @@ export async function installPackage(input: {
   // by hostname on the server. See
   // docs/design/cloud-account-binding-marketplace-install.md (cloud repo).
   if (cloudBase) {
+    // objectstack#29119 — the install lands in THIS environment, so its
+    // package list reads from before it are forgotten however it ends.
     const res = await fetch(`/api/v1/cloud-connection/install`, {
       method: 'POST',
       credentials: 'include',
@@ -342,7 +345,7 @@ export async function installPackage(input: {
         package_id: input.packageId,
         seed_sample_data: !!input.seedSampleData,
       }),
-    });
+    }).finally(forgetPackageListReads);
     let payload: any = null;
     try { payload = await res.json(); } catch { /* empty */ }
     if (!res.ok || payload?.success === false) {
@@ -871,6 +874,7 @@ export async function installLocal(input: {
   versionId?: string;
   installMode?: LocalInstallMode;
 }): Promise<LocalInstallResult> {
+  // objectstack#29119 — an install changes this environment's package list.
   const res = await fetch(`${API_BASE}/install-local`, {
     method: 'POST',
     credentials: 'include',
@@ -880,7 +884,7 @@ export async function installLocal(input: {
       ...(input.versionId ? { versionId: input.versionId } : {}),
       ...(input.installMode ? { installMode: input.installMode } : {}),
     }),
-  });
+  }).finally(forgetPackageListReads);
   let payload: any = null;
   try { payload = await res.json(); } catch { /* empty */ }
   if (!res.ok) {
@@ -1000,11 +1004,12 @@ export async function readMarketplaceInstalls(): Promise<{ source: 'cloud' | 'lo
 }
 
 export async function uninstallLocal(manifestId: string): Promise<void> {
+  // objectstack#29119 — an uninstall changes this environment's package list.
   const res = await fetch(`${API_BASE}/install-local/${encodeURIComponent(manifestId)}`, {
     method: 'DELETE',
     credentials: 'include',
     headers: { 'Accept': 'application/json' },
-  });
+  }).finally(forgetPackageListReads);
   if (!res.ok) {
     const payload: any = await res.json().catch(() => ({}));
     throw new Error(readApiError(payload, res).message);