Repository navigation
immutable-paths: walker should descend into oneOf/anyOf/allOf branch properties #3101
Description
What
findImmutablePaths (apps/console/src/lib/immutable-paths.ts) recognises a parent as immutable when any oneOf/anyOf/allOf branch carries the CEL rule itself, but does NOT descend into a branch's own properties to discover per-field immutability inside the branch.
Why it matters
CRDs that use allOf for property composition (less common than direct properties, but legal and present in some upstream CRDs) won't have their inner immutable fields flagged. The UI will render those fields as editable and the overlay won't protect them.
Pinned
Current behaviour is pinned by the FIXME test in apps/console/src/lib/immutable-paths.test.ts ("FIXME: does NOT walk into properties beneath oneOf/anyOf/allOf branches"). Flip the assertion when the walker is extended.
Reacted by dosubot
Activity
fix(console): bail on shrink for nested-immutable arrays, handle root…
myasnikovdaniil commentedon Aug 15, 2026
Closing as not reachable. Every
oneOf/anyOf/allOfin the shipped application schemas is the int-or-string scalar pair, 134 of them, and none hasproperties, so the walker has no branch subtree to descend into. The console's own CLAUDE.md documents the gap as intentional. If a schema ever ships a branch that carries properties this becomes live again, and reopening is the right move then.