fix(shell): compose the runtime manifest instead of replacing the app's own

[rubenvdlinde]

Reproduced, not reasoned about

I stood up a clean Nextcloud with launchpad and openregister and compared the commit before tier 3 (#551's parent) against development, on the same instance. The finding is worse than the 13 failing tests suggested:

build	#workspace-vue contents	console errors
before tier 3 (5aacaf1)	43,564 bytes, app renders	0
development with tier 3	7 bytes (an empty comment)	12

With tier 3, launchpad rendered nothing at all on a fresh install.

⚠️ The first control run said "the old build fails identically" — because Nextcloud's ?v= cache-buster is unchanged by swapping app files, so the browser re-ran the new bundle both times. Bumping <version> in appinfo/info.xml and running occ upgrade is what made the comparison real.

The cause

GET /api/manifest is not this app's manifest. ManifestController says so in its own docblock: it assembles a document from the user's OpenRegister dashboard objects, one page and one menu entry per dashboard, and "when the user has no dashboards the manifest returns empty pages/menu".

App.vue read runtimeManifest?.value ?? this.manifest. An empty object is truthy, so a user with no dashboards got a manifest with no pages and no menu — and tier 3 builds both the router and the nav from the manifest.

A user with dashboards was no better off, only less obviously: the runtime document still replaced the nine declared pages, the ADR-114 footer and the walkthrough. That is what the chrome and routing specs have been failing on.

The two are now composed, which is what each is for. The bundled manifest owns the declared surfaces; the runtime one contributes the dashboards only the server knows about.

The setup wizard came with CnAppRoot

CnAppRoot opens CnSetupWizard while any step is outstanding, optional or not (nextcloud-vue#806). This app had no wizard at all until tier 3 rooted it on CnAppRoot, so nothing in the e2e accounted for one.

completed is not settled. GET /api/setup/status answered "completed": true while still reporting demo-data and load-demo-data as done: false.

cn-wizard-dialog is an aria-modal that intercepts pointer events. Measured locally:

	result
wizard up	dashboard-sharing 4 of 4 failed, cn-wizard-dialog named as the interceptor
choice recorded	runtime-shell-canEdit + add-widget-modal 10 passed, 0 failed — both of which fail on CI

globalSetup records the choice once. Per-spec dismissal would make the suite order-dependent, because the marker is per user.

Three manifest references could never resolve

The dashboards menu entry and two walkthrough steps pointed at dashboard-detail, whose path is /dashboards/:id — so vue-router threw Missing required param "id" on every render. They were inert until tier 3 gave the manifest a real router. A third step named the Flows page where a menu-entry id belongs.

Six labels were raw i18n keys

launchpad.menu.dashboards and five others render as the key itself in all 36 locales but Dutch, the only one carrying them. They are plain English now, like every other entry in this menu already was (Flows, Store, Reports).

Dutch loses a translation it only ever had for these six. That is the same position its siblings are already in, and worth one follow-up for all of them rather than a special case here.

Verification

682 unit tests pass, eslint and prettier clean, webpack build clean, and the render is measured above. The development push run is the E2E proof, since that leg does not run on a pull request.

🤖 Generated with Claude Code

[github-actions]

Quality Report — ConductionNL/launchpad @ 1f9c934

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		✅
check-schema-l10n		✅
composer			✅	✅ 104/104
npm			✅	✅ 527/527
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					❌

---

Quality workflow — 2026-09-05 20:09 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/launchpad @ b2a09d4

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		✅
check-schema-l10n		✅
composer			✅	✅ 104/104
npm			✅	✅ 527/527
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					❌

---

Quality workflow — 2026-09-05 20:18 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/launchpad @ 2f0c34a

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		✅
check-schema-l10n		✅
composer			✅	✅ 104/104
npm			✅	✅ 527/527
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					✅

---

Quality workflow — 2026-09-05 20:28 UTC

Download the full PDF report from the workflow artifacts.