feat(templates): immutable records disable Edit up front - GET /{id}/mutable pre-check + read-only pages

[delchev]

What

immutable: / immutableWhen: entities used to offer Edit → Save in every generated view and only refuse on the write (PUT/DELETE → 409 "immutable in its current status"). The 409 stays exactly as it was — the authoritative guard — but the generated UI now knows up front:

1. Utility API. Each generated controller — power EntityController, EntityPartnerController, EntityMyController — exposes GET /{id}/mutable → {"mutable": true|false}, backed by a shared isMutable(entity) extracted from requireMutable (single source of truth, no duplicated logic). The partner/my variants resolve the record through requireMine(id), so a foreign record stays the same 404. Emitted only when the entity declares immutability.

2. All Harmonia templates consume it (not only the document layout):

• manage form + document pages ask the pre-check on edit/preview load; an immutable record opened via a directly typed /edit URL is forced into the existing read-only preview mode, a warning Read-only badge appears in the title bar (tooltip: "corrections go through the workflow"), and the preview footer's Edit button hides. The pre-check fails open — an outage must not lock the UI; the server still refuses the write.
• manage list + master browse views hide row-menu Edit/Delete and disable the details-pane Edit/Delete via a baked isRowImmutable(row) computed from the row's status FK against the generation-time immutable status ids — no per-row API calls, and no drift (generated from the same model attrs as the server gate, the validationSchema precedent). Preview always stays — the record remains readable.
• partner + my form/document pages wrap their controls in fieldset :disabled, hide Save/Delete, item Add/Edit/Delete and the chat composer, and show the same badge.

Entities without immutability generate byte-identical output (all additions are Velocity-guarded).

Tests

IntentEmissionCoverageIT extended on both layers per the emission-testing contract:

• tokens: /{id}/mutable + isMutable( in the generated controllers, the pre-check in EntryFormPage.js, isRowImmutable in EntryMasterPage.js;
• behavior: mutable=false over REST for the POSTED entry and the append-only snapshot, mutable=true while DRAFT.

Docs

engine-intent/CLAUDE.md immutability bullet updated with the pre-check contract. A dirigible.io note (help page for immutableWhen) follows after merge; no intentfile.org change — the DSL grammar is untouched.

🤖 Generated with Claude Code