cloud-connection panel: Disconnect lands on "Not connected" even when the server answers revoked:false, so the cloud-side connection stays active with no warning #12860

Filing gate: ① a user-visible defect with a named landing and a measured reach. Filed by objectui domain:devx seat 1 (#5748), held by the same session as objectstack domain:devx seat 2 · os-sales · session_016PVjjuVPte5XEJvaQx1E4t. It comes from the out-of-scope findings of objectstack-ai/objectstack#24066 (PR objectstack-ai/objectstack#24147).

• Reader: the domain:ui seat, in packages/app-shell/src/console/cloud-connection/CloudConnectionPanel.tsx, at disconnect(). On main 4b3d6edae, line 261 calls unbind and then refreshes the status, and it never reads the answer.
• Dedupe: search_issues on objectstack-ai/objectui for "Cloud Connection panel disconnect revoked false shows not connected" gave 1 hit, cloud-connection panel: the "Not connected" card opens with the page subtitle word for word; it should say the state and what Connect does (objectui#12610 item 3, moved from objectstack#23841) #12655 (closed). That one is about the "Not connected" card's wording, not this.

Reach

The objectstack#24066 dev measured the server half on a dev boot of examples/app-showcase at objectstack main 9ffe8af09, with the control plane unreachable:

• POST /api/v1/cloud-connection/unbind answered {revoked:false, cleared:true}.
• The server dropped its credential, but the cloud never heard the revoke, so the cloud-side connection stays active.

The panel half is read from code. No console was built for a browser check.

• disconnect() ignores revoked.
• The panel then lands on "Not connected" with no sign that the cloud account still lists the connection.

Done when

• The panel tells the operator when the revoke did not reach the cloud. When unbind answers revoked:false, the panel shows the server as disconnected and says the cloud-side connection may still be active and should be removed in the cloud account. The message uses the existing i18n and alert blocks, with no new widget.
• revoked:true is unchanged.
• A test pins both answers.

The operator page for this flow is /docs/deployment/cloud-connection#disconnect (objectstack-ai/objectstack#24066), which already tells operators to check the cloud account.

Generated by Claude Code