fix(app-shell): compute the sidebar's pruned trees inline, without new lint findings

The two useMemo wrappers drew react-hooks/exhaustive-deps and
preserve-manual-memoization on the lines they added. A tree with nothing to
prune comes back as the array it was, so the memo bought nothing and nothing
downstream keys on a pruned tree's identity. Also drops two new explicit
anys (an annotation on ObjectView's listActions, a test cast).

Claude-Session: https://claude.ai/code/session_01AswpQDLCKiZos2jCXknwKz
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/app-shell/src/layout/UnifiedSidebar.tsx

@@ -237,19 +237,18 @@ export function UnifiedSidebar({ activeAppName }: UnifiedSidebarProps) {
   // because no callback the layout asks answers "may this member read this
   // object" (see `withoutUnreadableObjectEntries`). Every area's tree and the
   // flat tree are pruned the same way, so the area election below and the drawn
-  // menu read the same tree.
-  const readableAreas = React.useMemo(
-    () => areas.map((area) => {
-      if (!area.navigation) return area;
-      const navigation = withoutUnreadableObjectEntries(area.navigation, can);
-      return navigation === area.navigation ? area : { ...area, navigation };
-    }),
-    [areas, can],
-  );
-  const readableAppNavigation = React.useMemo(
-    () => (activeApp?.navigation ? withoutUnreadableObjectEntries(activeApp.navigation, can) : activeApp?.navigation),
-    [activeApp?.navigation, can],
-  );
+  // menu read the same tree. Not memoised: a tree with nothing to prune comes
+  // back as the very array it was, so a caller who may read everything hands
+  // the layout the authored tree, and nothing downstream keys on the identity
+  // of a pruned one (AGENTS.md #10).
+  const readableAreas = areas.map((area) => {
+    if (!area.navigation) return area;
+    const navigation = withoutUnreadableObjectEntries(area.navigation, can);
+    return navigation === area.navigation ? area : { ...area, navigation };
+  });
+  const readableAppNavigation: NavigationItem[] | undefined = activeApp?.navigation
+    ? withoutUnreadableObjectEntries(activeApp.navigation, can)
+    : activeApp?.navigation;
   // A `doc` entry the member may not read is not drawn (objectui#10188) —
   // defence in depth behind the server's app read, which already drops it
   // (objectstack#19790). Asked only in an app: on Home `activeApp` is merely

packages/app-shell/src/views/ObjectView.listActionsReadGate-12109.test.tsx

@@ -121,7 +121,7 @@ function makeDataSource() {
     create: vi.fn(async () => ({})),
     update: vi.fn(async () => ({})),
     delete: vi.fn(async () => ({})),
-  } as any;
+  } as never;
 }
 
 const USER = { id: 'u_agent', name: 'Agent' };

packages/app-shell/src/views/ObjectView.tsx

@@ -2003,7 +2003,7 @@ function ObjectViewInner({ dataSource, objects, onEdit, externalRefreshKey }: Co
     // and its list actions go together. A boolean, read each render from the
     // provider's verdict, so the memo below keys on a primitive (AGENTS.md #10).
     const listActionsReadable = mayReadObject(perms.can, objectDef.name);
-    const listActions: any[] | undefined = listActionsReadable ? objectDef.actions : undefined;
+    const listActions = listActionsReadable ? objectDef.actions : undefined;
     // Localized `list_toolbar` actions, shared by the generic action bar and the
     // environment-aware toolbar (the action:bar renderer filters by location).
     const localizedToolbarActions = useMemo(