[xgo-work]

In short, (claude extract)

In wegas-app/src/main/node/wegas-react/src/Editor/Components/EntityEditor.tsx.

1. getEntity() (l.393-398), for a VariableCreate edition, returns a bare shell { '@Class', parentId, parentType }. It has no id and no visibility.
2. overrideSchema() (l.165-176) runs for every scenario (gameModel.type === 'SCENARIO') and calls _overrideSchema, which calls getVisibility('PRIVATE', undefined, entity) (l.72-95).
3. The shell has no own visibility and no inherited value, so getVisibility falls into its parent walk (Helper.getParent, which resolves parentType/parentId). It returns the folder's 'PROTECTED'.
4. readOnly = PROTECTION_LEVELS.indexOf('PROTECTED') <= PROTECTION_LEVELS.indexOf('PROTECTED'), which is true. view.readOnly is then set recursively on the whole schema, except for fields that declare a lower protectionLevel such as defaultInstance.
5. After the first save the server returns visibility: 'PRIVATE', so the "own visibility" branch wins and the form is editable.

Implemented solution

Edit getVisibility in EntityEditor.tsx so that an unsaved variable descriptor never inherits visibility from its parent. It uses the defaultValue ('PRIVATE'), as the legacy client and the server do: