@stalfh233/omc-cli 0.0.0-stage → 0.4.0

package/dist/lanes/workflow-contract.js

@@ -0,0 +1,223 @@
+import { z } from "zod";
+import { assertDescriptionCarries, assertLaneContract, behaviorBinding, CONTRACT_FAMILY, CONTRACT_REFERENCE_VERSION, emitterBinding } from "./contract-support.js";
+import { LANES } from "./lane-ids.js";
+/**
+ * W7 greenfield workflow authoring + the runtime work-item query face
+ * (live-proven). The template head/bind points and the search_workitems
+ * decoding are the single source for the handler descriptions, the arg schema,
+ * and the coverage declarations.
+ */
+/**
+ * The four WorkflowTemplateModel event handlers keyed by the `handler` value
+ * workflow.bindRule accepts. All four are the same ActivityEventHandler DTO
+ * carrying `bizActions:[<ruleCode>]` + `bizActionType:"BIZ_RULE"`.
+ */
+export const WORKFLOW_EVENT_HANDLER_FIELDS = Object.freeze({
+    start: "startEventHandler",
+    cancel: "cancelEventHandler",
+    activate: "activateEventHandler",
+    end: "endEventHandler",
+});
+export const WORKFLOW_WIRE = Object.freeze({
+    templateShape: '{"workflowCode":"<code>","activities":[{"id":"start","type":"START"},{"id":"approve","type":"PARTICIPANT","participant":"<user>"},{"id":"end","type":"END"}],"routes":[{"preNode":"start","postNode":"approve"}]}（ticket 112：routes 会被工具映射为平台 DTO 的 rules[preActivityCode/postActivityCode]；templateType 勿传 "BusinessProcess"——非 WorkflowTemplateStatus 枚举成员，转换被吞成残缺模型后 50000；工具会把模板合并到 get_draft 全量行再上送，未给字段回显草稿）。条件分支连线见 routeBranch。',
+    /**
+     * Conditional branch lines. The platform's `Rule` DTO (Rule.java:28-59) — the
+     * wire element `routes[]` maps to — carries `ruleConditionGroup`
+     * (List<List<RuleConditionItem>>): outer list OR, inner list AND. Evaluation
+     * (ActivityContext.getNextFormulaActivities:82-99 + ConditionVerification
+     * .verify:82-154): a rule fires when popupType is EXPRESSION (default) and
+     * verify(bizObj, ruleConditionGroup, childMatchType) is true, else it falls
+     * back to `formula`. A rule with utilizeElse=true is the else/fallback line.
+     */
+    routeBranch: '条件分支连线（平台 Rule.java:28-59，routes[] 映射的目标 DTO）：routes[] 条目可带 ruleConditionGroup = List<List<RuleConditionItem>>，外层 OR、内层 AND，满足才走该连线。RuleConditionItem = {"currentDataItem":"<fieldCode 或 childSchemaCode.fieldCode>","bizPropertyType":<BizPropertyType 的数字索引>,"conditionType":"<ConditionType 枚举名>","value":<任意>}；**bizPropertyType 必须用数字索引**（平台 BizPropertyTypeDeserializer 读的是 int：SHORT_TEXT=0/NUMERICAL=2/DATE=3/LOGICAL=4/RADIO=12/DROPDOWN_BOX=14/STAFF_SELECTOR=50/DEPARTMENT_SELECTOR=60/WORK_SHEET=9/CHILD_TABLE=8…），写枚举名会被 castToInt 吞成 0 并让模板转换失败（真机报误导性的「流程名称为空！」）；工具接受枚举名并自动转索引。**RuleConditionItem 只接受这 4 个键；多一个未知键（如照抄业务规则的 ruleValueType/targetDataItem）会让平台 workflow/update 返回误导性的 `401001 流程不存在！`**（真机 2026-09-25），工具写前拒绝未知键。conditionType 取值 EQ/NEQ/GT/LT/GTEQ/LTEQ/CT(包含)/NCT/EP(为空)/NEP(非空)/BETWEEN/NOTBETWEEN/OF/NOF/CT_ALL/NCT_ALL/CT_ANY/NCT_ANY/EQ_ANY/NEQ_ANY。子表字段（currentDataItem 含 "."）的行匹配由同级 childMatchType 决定：ALL=每行都满足，ANY=任一行满足（缺省 ANY）。连线另可带 text（显示名）、utilizeElse:true（else/兜底连线：其余条件不满足时走）、alternativeFlag:true（审批人可选分支）、formula（字符串表达式，与 ruleConditionGroup 二选一；两者都存在时结构化组先判，未命中再判 formula）。',
+    authoringChain: "workflow.create (header) → workflow.update (write draft template) → workflow.publish",
+    bindPoint: "startEventHandler|cancelEventHandler|activateEventHandler|endEventHandler{bizActions:[<ruleCode>], bizActionType:\"BIZ_RULE\"}",
+    bindRuleChain: "workflow.bindRule reads the draft, merges the handler selected by `handler` (start|cancel|activate|end, default end), workflow/update, then workflow/publish + published-face readback",
+    renderCompat: "workflow.update/publish/bindRule fail closed on 8.6.26 ActivityType values, unique non-empty activityCode values, rules references, and non-empty `x, y` points; missing points are derived from activity geometry and every write readback carries workflowRenderCompat with activities, rules, START/END, points, and danglingViolations",
+    bindRuleScope: "all four WorkflowTemplateModel event handlers (startEventHandler/cancelEventHandler/activateEventHandler/endEventHandler), each an ActivityEventHandler carrying bizActions + bizActionType=BIZ_RULE; `handler` defaults to end",
+    boundRuleMustBeEnabled: "流程事件绑定的规则**必须启用**：禁用/未发布的规则（rule.save 落 DRAFT/DISABLED 态）绑到事件处理器后设计器显示「失效·未启用」且事件不会执行它（真机 2026-10-08 SCM 沙盒）。workflow.bindRule 会先把绑定的自定义规则 publish+enable（rule.enable 链，回读 enabledRuleCodes/alreadyEnabledRuleCodes），并对不存在的 code 报 workflow-bind-rule-absent",
+    deleteAbsence: "workflow.delete posts /workflow/delete then confirms absence via workflow/get_header",
+    workItemPage: "GET /api/api/runtime/workflow/search_workitems returns PageVO<WorkItemVO> { totalPages, totalElements, content } directly (a page/data wrapper is tolerated)",
+    workItemIdentity: "item.id=workItemId, item.instanceId=workflowInstanceId, item.activityName, item.state",
+    workItemFilter: "WorkItemSearchVO.filterWorkflowInstanceId is a NOT-equal exclusion (BizWorkitemServiceImpl.toSearchWorkItemsCriterion:400-402), so exact instance filtering is client-side",
+    bizObjectResolution: "GET /api/api/runtime/workflow/getBizObjectByWfInstanceId resolves bizObjectId/schemaCode; a failed lookup leaves the identity null and never drops the todo",
+    mutuallyExclusiveBinding: "同一处理器绑定多条规则时它们**全部执行、无互斥**：审批通过/驳回这类互斥结果不要用两条各自 FIXED 赋值都绑 end（bench22 病灶）——通过绑 end（endEventHandler）或规则 Available，驳回绑 cancel（cancelEventHandler）或规则 Cancel，或用一条多分支图（生产 case_info_update 只在 endEventHandler 绑一条 updateData 多分支图）；workflow.bindRule 回读在 bizActions.length>1 时给 advisory",
+    userSearch: "POST /api/api/organization/user/search，@RequestBody {wd (关键字，必填), page, size, filterType?} → PageVO<UserVO>{totalElements,totalPages,content[{id,name,username,userId,departmentId,corpId,status}]}（UserController.search:337-341；缺 wd 报 10005 关键字不能为空）。用于把姓名解析成真实用户，构造参与者对象 type 3=用户（type 2=角色）",
+});
+/** Workflow template object (workflow/update|publish raw body). */
+export const workflowTemplateArg = z
+    .record(z.string(), z.unknown())
+    .describe(`workflow template object. Minimal valid shape (create via workflow.create first, then workflow.update with this, then workflow.publish): ${WORKFLOW_WIRE.templateShape}. Add approval activities between start/end (each with id/type/participant) and routes[] as needed. **参与人解析陷阱（r5-crm 实证 2026-10-10）**：内置 FindUserByRole({Originator.OU},code,...) 按部门范围找人——目标角色**不挂部门**（如全公司唯一的总监）时 ParticipantActivityRuntime.initParticipants 抛 EngineRuntimeException、流程卡 PROCESSING 无待办；跨部门/全局角色用不依赖 OU 的解析（二开 FindUsersSpecByRoleFunction(code) 全局找人，或参与人挂 OU 树可覆盖的部门）。 **START 之后必须保留发起节点**（如「填写申请单」participant={Originator}，删掉/缺失则 publish 401035——r5-crm 实证 2026-10-09）；流程模型的数据入口=直接 data.submit（创建+启流程+单据号生成，勿用 save+submit 两步）。 A route entry MAY carry the platform's structured branch condition ruleConditionGroup (outer OR / inner AND) plus childMatchType/utilizeElse/alternativeFlag/text — see the workflow contract's routeBranch: ${WORKFLOW_WIRE.routeBranch}. endEventHandler{bizActions,bizActionType} binds business rules — prefer workflow.bindRule instead of replacing the whole template.`);
+const WORKFLOW_SCOPE = "greenfield workflow authoring";
+export const WORKFLOW_LANE_CONTRACT = Object.freeze({
+    lane: LANES.workflow,
+    family: CONTRACT_FAMILY,
+    referenceVersion: CONTRACT_REFERENCE_VERSION,
+    endpoints: Object.freeze({
+        create: "workflowCreate",
+        getHeader: "workflowGetHeader",
+        getDraft: "workflowGetDraft",
+        getPublished: "workflowGetPublished",
+        update: "workflowUpdate",
+        publish: "workflowPublish",
+        delete: "workflowDelete",
+        searchWorkItems: "workflowSearchWorkItems",
+        getBizObjectByWfInstanceId: "workflowGetBizObjectByWfInstanceId",
+    }),
+    wire: Object.freeze({
+        templateShape: WORKFLOW_WIRE.templateShape,
+        routeBranch: WORKFLOW_WIRE.routeBranch,
+        authoringChain: WORKFLOW_WIRE.authoringChain,
+        bindPoint: WORKFLOW_WIRE.bindPoint,
+        bindRuleChain: WORKFLOW_WIRE.bindRuleChain,
+        renderCompat: WORKFLOW_WIRE.renderCompat,
+        bindRuleScope: WORKFLOW_WIRE.bindRuleScope,
+        boundRuleMustBeEnabled: WORKFLOW_WIRE.boundRuleMustBeEnabled,
+        eventHandlerFields: "handler start→startEventHandler, cancel→cancelEventHandler, activate→activateEventHandler, end→endEventHandler (WorkflowTemplateModel.java:48-55)",
+        deleteAbsence: WORKFLOW_WIRE.deleteAbsence,
+        workItemPage: WORKFLOW_WIRE.workItemPage,
+        workItemIdentity: WORKFLOW_WIRE.workItemIdentity,
+        workItemFilter: WORKFLOW_WIRE.workItemFilter,
+        bizObjectResolution: WORKFLOW_WIRE.bizObjectResolution,
+        mutuallyExclusiveBinding: WORKFLOW_WIRE.mutuallyExclusiveBinding,
+        userSearch: WORKFLOW_WIRE.userSearch,
+    }),
+    wireBindings: Object.freeze({
+        templateShape: Object.freeze([behaviorBinding("test/ticket-112-workflow-template-merge.test.ts#workflow.update merges onto the draft", assertWorkflowContract)]),
+        routeBranch: Object.freeze([behaviorBinding("test/round7-workflow-branch-conditions.test.ts#workflow route ruleConditionGroup rides the rules wire and reads back", assertWorkflowContract)]),
+        authoringChain: Object.freeze([behaviorBinding("test/ticket-112-workflow-template-merge.test.ts#workflow.publish also merges onto the draft", assertWorkflowContract)]),
+        bindPoint: Object.freeze([emitterBinding("lanes/workflow-contract.WORKFLOW_EVENT_HANDLER_FIELDS", assertWorkflowContract)]),
+        bindRuleChain: Object.freeze([behaviorBinding("test/issue-14-workflow-bind-rule.test.ts#workflow.bindRule merges endEventHandler", assertWorkflowContract)]),
+        renderCompat: Object.freeze([behaviorBinding("test/ticket-112-workflow-template-merge.test.ts#workflow shorthand maps legal activities and derives points into workflowRenderCompat", assertWorkflowContract)]),
+        bindRuleScope: Object.freeze([behaviorBinding("test/issue-14-workflow-bind-rule.test.ts#workflow.bindRule binds start/cancel/end handlers independently", assertWorkflowContract)]),
+        boundRuleMustBeEnabled: Object.freeze([behaviorBinding("test/issue-14-workflow-bind-rule.test.ts#workflow.bindRule ENABLES a bound custom rule", assertWorkflowContract)]),
+        eventHandlerFields: Object.freeze([emitterBinding("lanes/workflow-contract.WORKFLOW_EVENT_HANDLER_FIELDS", assertWorkflowContract)]),
+        deleteAbsence: Object.freeze([behaviorBinding("test/round2-bug05-workflow-absent.test.ts#workflow.get_published on a missing workflow answers exists:false", assertWorkflowContract)]),
+        workItemPage: Object.freeze([emitterBinding("workflow-support.decodeWorkItemPage", assertWorkflowContract)]),
+        workItemIdentity: Object.freeze([emitterBinding("workflow-support.decodeWorkItemPage", assertWorkflowContract)]),
+        workItemFilter: Object.freeze([emitterBinding("workflow-support.searchWorkItems", assertWorkflowContract)]),
+        bizObjectResolution: Object.freeze([emitterBinding("workflow-support.resolveBizObjectIdByInstance", assertWorkflowContract)]),
+        mutuallyExclusiveBinding: Object.freeze([behaviorBinding("test/issue-14-workflow-bind-rule.test.ts#workflow.bindRule merges endEventHandler", assertWorkflowContract)]),
+        userSearch: Object.freeze([behaviorBinding("test/round4-org-user-search.test.ts#org.user.search resolves a user by name into participant fields", assertWorkflowContract)]),
+    }),
+    evidence: Object.freeze([
+        ".scratch/omc-approval-workflow/acceptance/s29-probe-20260910012330184.md",
+        "packages/omc-cli/src/lanes/workflow.ts",
+        ".scratch/omc-app-management/issues/06-workitem-list-capability.md",
+    ]),
+    tools: Object.freeze({
+        "workflow.get_draft": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "Read the current DRAFT workflow template (`/api/api/workflow/get_draft`). **默认返回 workflowSummary（activities 节点清单 code/type/name/participant + edges 连线 + ruleBindings），不是整份 30–75KB 正文**——**改流程或复核更新结果都用这个默认面即可（activities+edges 足够传给 workflow.update）；只有要看通知/字段权限等完整节点正文时才加 --full**。用于确认绑定点（如 endEventHandler）而无需猜其它字段。",
+        }),
+        "workflow.get_published": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "Read the current PUBLISHED workflow template (`/api/api/workflow/get_published`). **默认返回 workflowSummary（activities + ruleBindings），不是整份正文**；完整正文加 --full 或用 `artifact get --summary/--keys/--jq`。在 workflow.publish / workflow.bindRule 之后用它确认发布后的绑定点。",
+        }),
+        "workflow.create": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "创建工作流模板头（`/api/api/workflow/create`）。随后用 `workflow.update` 写入模板 JSON，再 `workflow.publish` 发布。**平台会自动生成含发起节点的草稿**（START → PARTICIPANT「填写申请单」participant={Originator} → PARTICIPANT「审批」participant 空 → END）——审批参与人必须显式补平台关键字（如 `{Originator}`=发起人），留空行为未知；get_draft 可核对自动草稿形状。",
+        }),
+        "workflow.update": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "写入工作流模板草稿（`/api/api/workflow/update`，raw template JSON body）。cli 以当前草稿为基线做 merge，未列出的既有节点保留：**模板缺 START 或 END 时自动按增量 merge（部分模板），给全 START..END 才整模板替换**；也可显式 `merge:true/false`。**节点字段权限也走这里**：不必读 `get_draft --full`——直接发 `activities:[{activityCode, activityType:\"PARTICIPANT\", propertyPermissions:[{propertyCode, visible, editable, required, summary, subPropertyPermissions}]}]`，工具按 propertyCode 合并到草稿对应节点（未列的字段权限保留；`merge:true` 也可同用）——没有单独的权限工具，别把「找不到入口」当成不支持（dogfood 实测该误判会假阻塞）。**`summary:true` 才会进运行时的 `activitySummaries`**，否则 `form/load` 的 `formPermission.dataPermissions` 会回退默认（编辑权读不到你的 `editable:false`）；子表字段用 `subPropertyPermissions`。用 `npm run test:live-permission`（非管理员参与者）验收，管理员会被后端强制 `e:true` 掩盖。",
+        }),
+        "workflow.publish": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "发布工作流模板（`/api/api/workflow/publish`，raw template JSON body）。`template` **必填**（2026-09-22 实测：省略被拒 tool-input-invalid: template Required；早期'可省'的说法不对）。",
+        }),
+        "workflow.bindRule": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "Bind a business rule to one of a workflow's event handlers (BIZ_RULE). `handler` selects the target: `start`→startEventHandler, `cancel`→cancelEventHandler, `activate`→activateEventHandler, `end`→endEventHandler (default `end`). Reads the current draft, merges `{ bizActions:[<ruleCode>], bizActionType:\"BIZ_RULE\" }` into the selected handler, writes via `/api/api/workflow/update`, then publishes the template and reads back the published face to confirm the binding without overwriting the rest of the template. **A workflow-bound rule MUST be enabled**（真机 2026-10-08）：禁用/未发布（rule.save 落 DRAFT/DISABLED）的规则绑上后设计器显示「失效·未启用」且事件不执行它；本工具先把绑定的自定义规则 publish+enable（回读 `enabledRuleCodes`/`alreadyEnabledRuleCodes`），不存在的 code 报 `workflow-bind-rule-absent`。The four handlers are isomorphic ActivityEventHandler fields on WorkflowTemplateModel, so when `handler` is omitted the behaviour is identical to the original endEventHandler binding. Pass `publish:false` to leave the template draft-only.",
+        }),
+        "workflow.delete": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "删除工作流模板（`/api/api/workflow/delete`），回读确认缺失。",
+        }),
+        "workflow.validate": Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "只读预检（`POST /api/api/workflow/validate`）：合成草稿模板（或可选 `template` 按 merge 语义）后返回 ValidateMessage[]，拆出 errors/warnings，`valid = 无 ERROR`。用于 publish 前先看平台会不会拒——平台对 publish 常回 errcode:0 但 ValidateMessage[] 里带 ERROR，本工具把它显式暴露，避免「publish 看似成功却没落库」。不写任何状态。",
+        }),
+        configure_workflow: Object.freeze({
+            scope: WORKFLOW_SCOPE,
+            description: "High-level greenfield：一次走完 `workflow.create → workflow.update(template) → workflow.publish`，可选 `bindRules:[{handler?,ruleCodes[]}]` 在发布后经 `workflow.bindRule` 绑定业务规则。复用各原子工具自身的写执行，因此门禁与权威读回与逐条调用完全一致；首败即停并返回已完成步骤与失败点。每条 bindRules 的 handler 取 start|cancel|activate|end（缺省 end）。",
+        }),
+        "org.role.list": Object.freeze({
+            scope: "workflow participant resolution",
+            description: "列出组织角色（`GET /api/api/organization/role/list`），扁平化为 {id,name,code,roleType,corpId}。用于把审批节点的参与者解析成平台认识的引用。**真实参与者语法**（2026-09-23 生产观察）：`participant` 只能是 (a) 关键字 `{Originator}`；(b) 参与者对象数组 JSON `[{\"code\":\"<roleCode>\",\"corpId\":\"<corpId|other>\",\"id\":\"<roleId>\",\"name\":\"<角色名>\",\"type\":2}]`（type 2=角色，3=用户；多个用 `+` 连接）；(c) 函数表达式如 `FindUserByRole({Originator.OU},\"<roleCode>\",\"random\")`。**自由文本角色名（如 `部门负责人`）能 publish 但解析不到人、不生成待办**——先用本工具拿到 `code`/`id` 再构造对象数组。",
+        }),
+        "org.department.list": Object.freeze({
+            scope: "workflow participant resolution",
+            description: "列出组织结构（`GET /api/api/organization/department/tree`），扁平化为 {id,name,code,corpId,parentId}。用于需要按部门解析审批人（配合 `FindUserByRole({Originator.OU},\"<roleCode>\",\"random\")` 或部门引用）时取得真实 code/id。",
+        }),
+        "org.user.search": Object.freeze({
+            scope: "workflow participant resolution",
+            description: "按关键字搜索用户（`POST /api/api/organization/user/search`，body `{wd,page,size,filterType?}`；`wd` 必填，缺失报 10005 关键字不能为空），返回 {id,name,username,userId,departmentId,corpId,status}。用于把「张三」这类姓名解析成真实用户 id/username 再构造参与者对象（`[{\"code\":\"<username|userId>\",\"corpId\":\"<corpId|other>\",\"id\":\"<userId>\",\"name\":\"<姓名>\",\"type\":3}]`，type 3=用户 / 2=角色 / 多个用 `+` 连接）；角色用 org.role.list、部门用 org.department.list。",
+        }),
+        "workitem.list": Object.freeze({
+            scope: "runtime workflow work-item query",
+            description: "查询当前登录人的待办（`GET /api/api/runtime/workflow/search_workitems`）。WorkItemSearchVO 经 @ModelAttribute 传参，服务端以登录态注入 userId，故无需传处理人——结果天然是「我的待办」。返回每项 workItemId(id) + workflowInstanceId(instanceId) + activityName + state；并尽力经 `GET /api/api/runtime/workflow/getBizObjectByWfInstanceId` 解析 bizObjectId/schemaCode 供 data.submit 审批。`workflowInstanceId` 为客户端精确过滤（服务端 WorkItemSearchVO.filterWorkflowInstanceId 实为 notEqualsTo 排除，不能用于命中实例）。",
+        }),
+    }),
+});
+export function assertWorkflowContract() {
+    assertLaneContract(WORKFLOW_LANE_CONTRACT);
+    if (!WORKFLOW_WIRE.templateShape.includes("routes"))
+        throw new Error("workflow contract must document the routes->rules mapping in the template shape (ticket 112)");
+    if (!WORKFLOW_WIRE.routeBranch.includes("ruleConditionGroup") || !WORKFLOW_WIRE.routeBranch.includes("childMatchType"))
+        throw new Error("workflow contract must document the ruleConditionGroup branch shape (round7)");
+    if (!WORKFLOW_WIRE.templateShape.includes("routeBranch"))
+        throw new Error("workflow template shape must point at routeBranch for conditional lines");
+    if (!WORKFLOW_WIRE.bindPoint.includes("BIZ_RULE"))
+        throw new Error("workflow contract pins the rule bind point to bizActionType BIZ_RULE");
+    if (!WORKFLOW_WIRE.renderCompat.includes("workflowRenderCompat"))
+        throw new Error("workflow contract must pin workflow render compatibility readback");
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.get_draft", ["get_draft", "endEventHandler"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.get_published", ["get_published", "workflow.publish"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.create", ["workflow/create", "workflow.update", "workflow.publish"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.update", ["workflow/update", "template"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.publish", ["workflow/publish", "template"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.bindRule", ["startEventHandler", "cancelEventHandler", "activateEventHandler", "endEventHandler", "bizActions", "bizActionType", "BIZ_RULE", "publish:false", "enabledRuleCodes", "workflow-bind-rule-absent"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "org.role.list", ["organization/role/list", "type", "Originator"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "org.department.list", ["organization/department/tree", "parentId"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "org.user.search", ["organization/user/search", "wd", "type 3"]);
+    for (const [key, field] of Object.entries(WORKFLOW_EVENT_HANDLER_FIELDS)) {
+        if (!WORKFLOW_WIRE.bindRuleChain.includes(key))
+            throw new Error(`workflow contract bind-rule chain must mention the ${key} handler key`);
+        if (!(field.length > 0))
+            throw new Error("workflow event handler field names must be non-empty");
+    }
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.delete", ["workflow/delete", "缺失"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workflow.validate", ["workflow/validate", "ValidateMessage", "valid"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "configure_workflow", ["workflow.create", "workflow.update", "workflow.publish", "workflow.bindRule", "bindRules"]);
+    assertDescriptionCarries(WORKFLOW_LANE_CONTRACT, "workitem.list", ["search_workitems", "workItemId", "workflowInstanceId", "bizObjectId", "getBizObjectByWfInstanceId", "filterWorkflowInstanceId"]);
+    if (!workflowTemplateArg.description?.includes("routes"))
+        throw new Error("workflow template arg must document the routes->rules mapping");
+    if (workflowTemplateArg.description?.includes('\\"templateType\\":\\"BusinessProcess\\"') || workflowTemplateArg.description?.includes('"templateType":"BusinessProcess"'))
+        throw new Error("workflow template arg must not teach the illegal templateType BusinessProcess as a shape to send (ticket 112)");
+    if (!WORKFLOW_WIRE.templateShape.includes("rules[preActivityCode/postActivityCode]"))
+        throw new Error("workflow contract must pin the routes->rules mapping");
+    if (!WORKFLOW_WIRE.authoringChain.includes("workflow.publish"))
+        throw new Error("workflow contract must pin the authoring chain ending in publish");
+    if (!WORKFLOW_WIRE.bindRuleChain.includes("workflow/update"))
+        throw new Error("workflow contract must pin the bind-rule write step");
+    if (!WORKFLOW_WIRE.bindRuleScope.includes("startEventHandler") || !WORKFLOW_WIRE.bindRuleScope.includes("endEventHandler"))
+        throw new Error("workflow contract must pin the full event-handler scope");
+    if (!WORKFLOW_WIRE.boundRuleMustBeEnabled.includes("必须启用") || !WORKFLOW_WIRE.boundRuleMustBeEnabled.includes("rule.enable"))
+        throw new Error("workflow contract must pin that a workflow-bound rule is enabled");
+    if (WORKFLOW_EVENT_HANDLER_FIELDS.start !== "startEventHandler" || WORKFLOW_EVENT_HANDLER_FIELDS.end !== "endEventHandler")
+        throw new Error("workflow contract must pin the handler field names");
+    if (!WORKFLOW_WIRE.deleteAbsence.includes("workflow/delete") || !WORKFLOW_WIRE.deleteAbsence.includes("get_header"))
+        throw new Error("workflow contract must pin the delete absence readback");
+    if (!WORKFLOW_WIRE.workItemPage.includes("search_workitems"))
+        throw new Error("workflow contract must pin the work-item query endpoint");
+    if (!WORKFLOW_WIRE.workItemIdentity.includes("workItemId"))
+        throw new Error("workflow contract must pin the work-item identity mapping");
+    if (!WORKFLOW_WIRE.workItemFilter.includes("toSearchWorkItemsCriterion"))
+        throw new Error("workflow contract must pin the server-side work-item filter semantics");
+    if (!WORKFLOW_WIRE.bizObjectResolution.includes("getBizObjectByWfInstanceId"))
+        throw new Error("workflow contract must pin the work-item bizObject resolution");
+    if (!WORKFLOW_WIRE.mutuallyExclusiveBinding.includes("endEventHandler") || !WORKFLOW_WIRE.mutuallyExclusiveBinding.includes("cancelEventHandler"))
+        throw new Error("workflow contract must pin the mutually-exclusive end/cancel binding guidance");
+}
+//# sourceMappingURL=workflow-contract.js.map

package/dist/lanes/workflow-coverage.js

@@ -0,0 +1,40 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { WORKFLOW_LANE_CONTRACT } from "./workflow-contract.js";
+const T = WORKFLOW_LANE_CONTRACT.tools;
+export const WORKFLOW_COVERAGE = declareLaneCoverage(WORKFLOW_LANE_CONTRACT.lane, [
+    {
+        capability: "W7 S29 greenfield workflow authoring",
+        evidence: [
+            ".scratch/omc-approval-workflow/acceptance/s29-probe-20260910012330184.md",
+            "packages/omc-cli/src/lanes/workflow.ts",
+        ],
+        tools: [
+            claim("workflow.get_draft", T["workflow.get_draft"].scope),
+            claim("workflow.get_published", T["workflow.get_published"].scope),
+            claim("workflow.create", T["workflow.create"].scope),
+            claim("workflow.update", T["workflow.update"].scope),
+            claim("workflow.publish", T["workflow.publish"].scope),
+            claim("workflow.bindRule", T["workflow.bindRule"].scope),
+            claim("workflow.delete", T["workflow.delete"].scope),
+            claim("configure_workflow", T["configure_workflow"].scope),
+            claim("workflow.validate", T["workflow.validate"].scope),
+        ],
+    },
+    {
+        capability: "W7 S29 runtime workflow work-item query (search_workitems)",
+        evidence: [
+            "packages/omc-cli/src/lanes/workflow.ts",
+            ".scratch/omc-app-management/issues/06-workitem-list-capability.md",
+        ],
+        tools: [claim("workitem.list", T["workitem.list"].scope)],
+    },
+    {
+        capability: "workflow participant resolution (org roles/departments)",
+        evidence: [
+            ".scratch/omc-context-cost-round4/evidence/real-env-observation.md",
+            "packages/omc-cli/src/lanes/workflow.ts",
+        ],
+        tools: [claim("org.role.list", T["org.role.list"].scope), claim("org.department.list", T["org.department.list"].scope), claim("org.user.search", T["org.user.search"].scope)],
+    },
+]);
+//# sourceMappingURL=workflow-coverage.js.map