@stalfh233/omc-cli 0.0.0-stage → 0.4.10

package/dist/fake/app.js

@@ -0,0 +1,45 @@
+import { NOT_HANDLED } from "./state.js";
+/** app-management lane: application package CRUD. Twin of src/lanes/app.ts. */
+export const appRoute = (ctx, input) => {
+    const q = input.query ?? {};
+    const body = (input.body ?? {});
+    switch (input.path) {
+        case "/api/api/app/apppackage/list":
+            return ctx.options.applicationList ?? [...ctx.state.apps.values()].map((app) => ({ appCode: app.code, appName: app.name, id: app.id, groupId: app.groupId, published: app.published !== false }));
+        case "/api/api/app/apppackage/list_all_group":
+            return [...ctx.state.appGroups.values()].map((group) => ({
+                id: group.id,
+                code: group.code,
+                name: group.name,
+                children: [...ctx.state.apps.values()].filter((app) => app.groupId === group.id).map((app) => ({ id: app.id, code: app.code, name: app.name, groupId: app.groupId })),
+            }));
+        case "/api/api/app/apppackage/create": {
+            const code = String(body.code);
+            ctx.state.apps.set(code, { id: `app-${ctx.state.apps.size + 1}`, code, name: String(body.name ?? code), groupId: String(body.groupId ?? [...ctx.state.appGroups.keys()][0] ?? "group-1") });
+            return null;
+        }
+        case "/api/api/app/apppackage/get": {
+            const app = [...ctx.state.apps.values()].find((row) => row.code === q.appCode);
+            return app ? { id: app.id, code: app.code, name: app.name, name_i18n: JSON.stringify({ "zh-CN": app.name }), groupId: app.groupId, enabled: true } : null;
+        }
+        case "/api/api/app/apppackage/update": {
+            // AppIntegrationFacadeImpl.updateAppPackage: id-required whole-record
+            // update; explicit groupId honored; blank groupId would be forced to
+            // the "default" group; enabled !== true wipes workflow favorites.
+            const target = [...ctx.state.apps.values()].find((row) => row.id === body.id);
+            if (target) {
+                if (typeof body.groupId === "string" && body.groupId)
+                    target.groupId = body.groupId;
+                if (typeof body.name === "string" && body.name)
+                    target.name = body.name;
+            }
+            return null;
+        }
+        case "/api/api/app/apppackage/delete":
+            ctx.state.apps.delete(String(q.appCode));
+            return null;
+        default:
+            return NOT_HANDLED;
+    }
+};
+//# sourceMappingURL=app.js.map

package/dist/fake/b2-registration.js

@@ -0,0 +1,594 @@
+import { businessRefusal, NOT_HANDLED, rawResponse } from "./state.js";
+import { decryptBizServiceMethodConfigJson } from "omc-core";
+import { buildZip, readZipEntries, zipEntryByBasename } from "../zip.js";
+/**
+ * B2-registration lane: business integration service registry. Twin of
+ * src/lanes/b2-registration.ts. Ticket 35 fidelity: paths match ENDPOINTS
+ * exactly (`/api/api/bizservice/service/*`, `/api/api/bizservice/method/*`),
+ * service rows carry id/code/name/adapterCode (the delete path resolves the id
+ * via get_by_code first), the method-create body keys are {serviceCode,code,
+ * name,configJson?,inputParametersJson?,outputParametersJson?} and the declared
+ * parameter face round-trips through list_by_service_code, an empty
+ * adapterCode is refused 500005 (live 2026-09-12), and a missing service
+ * answers the live 500001 envelope instead of errcode 0 + null data.
+ *
+ * Ticket 92 fidelity: the platform's method-config AES entry is simulated —
+ * BizServiceMethodController create/create_list/update decrypt configJson
+ * (AES-128-ECB, static key) and persist the PLAINTEXT; a plaintext payload
+ * silently decrypts to NULL and is stored NULL. Service configJson stays
+ * plaintext on both the write and the read face (BizServiceController).
+ */
+function decryptMethodConfig(configJson) {
+    if (typeof configJson !== "string" || !configJson)
+        return null;
+    try {
+        const plain = decryptBizServiceMethodConfigJson(configJson);
+        JSON.parse(plain);
+        return plain;
+    }
+    catch {
+        return null;
+    }
+}
+/** Parse a parameters column into the transient model-array readback face. */
+function parseParamArray(json) {
+    if (!json)
+        return [];
+    try {
+        const parsed = JSON.parse(json);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * BizServiceMethodModel.setXxxParameterModels fidelity: when the update body
+ * carries the transient model array, the setter re-serializes it (dropping
+ * entries without bizPropertyType/externParameterType) and overwrites the
+ * JSON column. Returns the overwritten string, or undefined when the body
+ * carries no such transient key (the plain column string then applies).
+ */
+function applyTransientParameterOverwrite(body, key) {
+    if (!Array.isArray(body[key]))
+        return undefined;
+    const kept = body[key].filter((entry) => entry.bizPropertyType != null || entry.externParameterType != null);
+    return JSON.stringify(kept);
+}
+export const b2Route = (ctx, input) => {
+    const q = input.query ?? {};
+    const body = (input.body ?? {});
+    switch (input.path) {
+        case "/api/api/bizservice/category/list":
+            // Live: the list face prepends the virtual「全部」row with an empty id.
+            return [{ id: "", name: "全部" }, ...ctx.state.categories];
+        case "/api/api/bizservice/category/create": {
+            // Live: category/create {name} (BizServiceCategoryController.java:43-176).
+            const name = String(body.name ?? "");
+            if (!name.trim())
+                return businessRefusal(500005, "分类名称不能为空");
+            if (!ctx.state.categories.some((row) => row.name === name))
+                ctx.state.categories.push({ id: `fakecat_${name}`, name });
+            return null;
+        }
+        case "/api/api/bizservice/category/update": {
+            // Live (BizServiceCategoryController.java:109-140 +
+            // BizServiceCategoryServiceImpl.save:54-63): a missing id answers
+            // 501052; a duplicate name answers 501004 业务服务目录名称已存在.
+            const category = ctx.state.categories.find((row) => row.id === body.id);
+            if (!category)
+                return businessRefusal(501052, "第三方数据源服务目录不存在");
+            const name = String(body.name ?? "");
+            if (!name.trim())
+                return businessRefusal(500005, "分类名称不能为空");
+            if (ctx.state.categories.some((row) => row.name === name && row.id !== category.id))
+                return businessRefusal(501004, "业务服务目录名称已存在");
+            category.name = name;
+            return null;
+        }
+        case "/api/api/bizservice/category/delete": {
+            // Live (BizServiceCategoryController.java:142-165 +
+            // BizServiceFacadeImpl.java:196-207): a category still holding
+            // services answers 501003 — blocked, no cascade.
+            const index = ctx.state.categories.findIndex((row) => row.id === q.id);
+            if (index === -1)
+                return businessRefusal(501052, "第三方数据源服务目录不存在");
+            const referenced = [...ctx.state.services.values()].some((service) => service.serviceCategoryId === q.id);
+            if (referenced)
+                return businessRefusal(501003, "业务服务目录下存在集成服务，不可删除！");
+            ctx.state.categories.splice(index, 1);
+            return null;
+        }
+        case "/api/api/bizservice/dbconnpool/list": {
+            // Ticket 104 platform fidelity: the raw list face does NOT mask the
+            // password column (BizDatabaseConnectionPoolController.list only
+            // decorates creator names) — the TOOL layer strips it from readback.
+            return [...ctx.state.dbConnPools.values()].map((pool) => ({ ...pool }));
+        }
+        case "/api/api/bizservice/dbconnpool/create": {
+            // Live fidelity (BizDatabaseConnectionPoolServiceImpl.save:103-130 +
+            // ErrorCode.java:615-621): name empty → 502004, code invalid → 502003,
+            // duplicate code → 502002; datasourceType defaults to "DATABASE".
+            const code = String(body.code ?? "");
+            const name = String(body.name ?? "");
+            if (!name.trim())
+                return businessRefusal(502004, "数据库连接池名称不能为空");
+            if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(code))
+                return businessRefusal(502003, `数据库连接池编码无效：${code}`);
+            if (ctx.state.dbConnPools.has(code))
+                return businessRefusal(502002, `数据库连接池已存在：${code}`);
+            if (typeof body.jdbcUrl !== "string" || !body.jdbcUrl)
+                return businessRefusal(500005, "jdbcUrl 不能为空");
+            ctx.state.dbConnPools.set(code, {
+                id: `fakepool_${code}`,
+                code,
+                name,
+                description: typeof body.description === "string" ? body.description : undefined,
+                databaseType: String(body.databaseType ?? "MySQL"),
+                datasourceType: String(body.datasourceType ?? "DATABASE"),
+                jdbcUrl: body.jdbcUrl,
+                username: typeof body.username === "string" ? body.username : undefined,
+                password: typeof body.password === "string" ? body.password : undefined,
+                externInfo: typeof body.externInfo === "string" ? body.externInfo : undefined,
+            });
+            return null;
+        }
+        case "/api/api/bizservice/dbconnpool/update": {
+            // Live fidelity (BizDatabaseConnectionPoolServiceImpl.update:135-168):
+            // a FULL-ROW overwrite — only createdTime is carried from the stored
+            // row; the tool must echo untouched columns or they are wiped.
+            const pool = [...ctx.state.dbConnPools.values()].find((row) => row.id === body.id || row.code === body.code);
+            if (!pool)
+                return businessRefusal(502001, "数据库连接池不存在");
+            if (typeof body.name === "string" && !body.name.trim())
+                return businessRefusal(502004, "数据库连接池名称不能为空");
+            pool.name = typeof body.name === "string" && body.name ? body.name : pool.name;
+            pool.description = body.description !== undefined ? (typeof body.description === "string" ? body.description : undefined) : pool.description;
+            pool.databaseType = typeof body.databaseType === "string" && body.databaseType ? body.databaseType : pool.databaseType;
+            pool.datasourceType = typeof body.datasourceType === "string" && body.datasourceType ? body.datasourceType : "DATABASE";
+            pool.jdbcUrl = typeof body.jdbcUrl === "string" && body.jdbcUrl ? body.jdbcUrl : pool.jdbcUrl;
+            pool.username = body.username !== undefined ? (typeof body.username === "string" ? body.username : undefined) : pool.username;
+            pool.password = body.password !== undefined ? (typeof body.password === "string" ? body.password : undefined) : pool.password;
+            pool.externInfo = body.externInfo !== undefined ? (typeof body.externInfo === "string" ? body.externInfo : undefined) : pool.externInfo;
+            return { ...pool };
+        }
+        case "/api/api/bizservice/dbconnpool/delete": {
+            // Live fidelity (BizServiceFacadeImpl delete:173-189): a pool referenced
+            // by any service config's dbConnPoolCode answers 502006 — blocked.
+            const entry = [...ctx.state.dbConnPools.values()].find((row) => row.id === q.id || row.code === q.id);
+            if (!entry)
+                return businessRefusal(502001, "数据库连接池不存在");
+            const referenced = [...ctx.state.services.values()].some((service) => {
+                if (typeof service.configJson !== "string")
+                    return false;
+                try {
+                    const config = JSON.parse(service.configJson);
+                    return Array.isArray(config.commonlist) && config.commonlist.some((item) => item.code === "databaseConnectionPoolCode" && item.value === entry.code);
+                }
+                catch {
+                    return false;
+                }
+            });
+            if (referenced)
+                return businessRefusal(502006, `数据库连接池已经被业务服务引用：${entry.code}`);
+            ctx.state.dbConnPools.delete(entry.code);
+            return null;
+        }
+        case "/api/api/bizservice/service/adapter_config": {
+            // Ticket 105 platform fidelity (BizServiceController.java:329-344 +
+            // BizServiceFacadeImpl.java:322-328): a JSON STRING of the registered
+            // protocol adapters, each {code,name,config:{authList,commonList,
+            // serviceActionList,methodActionList}} (AdapterConfigParam.java:16-181).
+            // Faces mirror RestProtocolAdapterServiceImpl.java:50-90 (RESTFUL) and
+            // DataSqlProtocolAdapterServiceImpl.java:43-57 (DATA_SQL).
+            const adapterConfig = [
+                {
+                    code: "RESTFUL",
+                    name: "RESTful服务",
+                    config: {
+                        authList: [
+                            { code: "basic", name: "Basic Authentication", description: "根据username、password来进行鉴权", parameterlist: [
+                                    { code: "username", name: "用户名", description: "请输入用户名", required: true },
+                                    { code: "password", name: "密码", description: "请输入密码", required: true },
+                                ] },
+                            { code: "oauth_password", name: "OAuth2 Password", description: "根据客户端凭证，以及username、password来进行鉴权", parameterlist: [
+                                    { code: "client_id", name: "客户端ID", description: "", required: true },
+                                    { code: "client_secret", name: "客户端凭证", description: "", required: true },
+                                    { code: "username", name: "用户名", description: "请输入用户名", required: true },
+                                    { code: "password", name: "密码", description: "请输入密码", required: true },
+                                    { code: "oauth_path", name: "获取token地址", description: "", required: true },
+                                ] },
+                            { code: "oauth_client", name: "OAuth2 Client Credentials", description: "根据客户端凭证进行鉴权", parameterlist: [
+                                    { code: "client_id", name: "客户端ID", description: "", required: true },
+                                    { code: "client_secret", name: "客户端凭证", description: "", required: true },
+                                    { code: "oauth_path", name: "获取token地址", description: "", required: true },
+                                ] },
+                            { code: "customer", name: "无鉴权", description: "提供url即可", parameterlist: [] },
+                        ],
+                        commonList: [{ code: "url", name: "地址URL", description: "HTTP请求路径", required: true }],
+                        serviceActionList: [
+                            { code: "edit", name: "编辑", description: "编辑", visible: true },
+                            { code: "add", name: "新增", description: "新增", visible: true },
+                            { code: "sync", name: "同步", description: "同步", visible: false },
+                            { code: "delete", name: "删除", description: "删除", visible: true },
+                        ],
+                        methodActionList: [
+                            { code: "edit", name: "编辑", description: "编辑", visible: true },
+                            { code: "run", name: "运行", description: "运行", visible: true },
+                            { code: "quote", name: "查看引用", description: "查看引用", visible: true },
+                            { code: "delete", name: "删除", description: "删除", visible: true },
+                        ],
+                    },
+                },
+                {
+                    code: "DATA_SQL",
+                    name: "数据服务SQL",
+                    config: {
+                        authList: [],
+                        commonList: [{ code: "databaseConnectionPoolCode", name: "数据库连接池编码", description: "数据库连接池", required: true }],
+                        serviceActionList: [
+                            { code: "edit", name: "编辑", description: "编辑", visible: true },
+                            { code: "add", name: "新增", description: "新增", visible: true },
+                            { code: "sync", name: "同步", description: "同步", visible: false },
+                            { code: "delete", name: "删除", description: "删除", visible: true },
+                        ],
+                        methodActionList: [
+                            { code: "edit", name: "编辑", description: "编辑", visible: true },
+                            { code: "run", name: "运行", description: "运行", visible: true },
+                            { code: "quote", name: "查看引用", description: "查看引用", visible: true },
+                            { code: "delete", name: "删除", description: "删除", visible: true },
+                        ],
+                    },
+                },
+            ];
+            return JSON.stringify(adapterConfig);
+        }
+        case "/api/api/bizservice/method/get_tablename_list": {
+            // Ticket 105 platform fidelity (BizServiceMethodController.java:503-537):
+            // service must exist (500001) AND be DATA_TABLE (501010
+            // 业务服务不为DataTable类型 — the research doc's "DATA_SQL discovery"
+            // reading was wrong); answers the pool's table names.
+            const service = ctx.state.services.get(q.serviceCode);
+            if (!service)
+                return businessRefusal(500001, "业务服务不存在");
+            if (service.adapterCode !== "DATA_TABLE")
+                return businessRefusal(501010, "业务服务不为DataTable类型");
+            return ["h_biz_schema", "h_biz_service"];
+        }
+        case "/api/api/bizservice/method/get_table_column": {
+            // Ticket 105 platform fidelity (BizServiceMethodController.java:538-560
+            // + BizServiceFacadeImpl.getDataTableSql:889-910): answers GENERATED SQL
+            // TEMPLATES (DataTableSqlModel{sql,sqlType}, SqlType
+            // SELECT/UPDATE/DELETE/INSERT/UPSERT) — not column metadata.
+            const service = ctx.state.services.get(q.serviceCode);
+            if (!service)
+                return businessRefusal(500001, "业务服务不存在");
+            if (service.adapterCode !== "DATA_TABLE")
+                return businessRefusal(501010, "业务服务不为DataTable类型");
+            const table = String(q.tableName ?? "");
+            return [
+                { sql: `SELECT * FROM ${table}`, sqlType: "SELECT" },
+                { sql: `INSERT INTO ${table} (...) VALUES (...)`, sqlType: "INSERT" },
+                { sql: `UPDATE ${table} SET ... WHERE ...`, sqlType: "UPDATE" },
+                { sql: `DELETE FROM ${table} WHERE ...`, sqlType: "DELETE" },
+            ];
+        }
+        case "/api/api/bizservice/service/create": {
+            // Live: create with an empty adapterCode → 500005 业务服务关联适配器编码为空.
+            if (typeof body.adapterCode !== "string" || !body.adapterCode)
+                return businessRefusal(500005, "业务服务关联适配器编码为空");
+            const code = String(body.code ?? "");
+            ctx.state.services.set(code, {
+                id: `fakesvc_${code}`,
+                code,
+                serviceCode: code,
+                name: body.name,
+                adapterCode: body.adapterCode,
+                serviceCategoryId: typeof body.serviceCategoryId === "string" ? body.serviceCategoryId : undefined,
+                configJson: typeof body.configJson === "string" ? body.configJson : undefined,
+                methods: [],
+            });
+            return null;
+        }
+        case "/api/api/bizservice/service/update": {
+            // Live: update requires the row id (BizServiceController.java:103-128);
+            // the tool always resolves it via get_by_code first. Fidelity note
+            // (live incident 2026-09-14): the platform update is a FULL-ROW
+            // overwrite — body keys that are absent/typed-out null the stored
+            // column. The fake mirrors that overwrite semantics (no merge), so an
+            // update body that forgets configJson fails the readback here exactly
+            // like it would on the platform.
+            if (typeof body.id !== "string" || !body.id)
+                return businessRefusal(500001, "业务服务不存在");
+            let updated = null;
+            for (const service of ctx.state.services.values()) {
+                if (service.id === body.id) {
+                    service.name = body.name;
+                    service.configJson = typeof body.configJson === "string" ? body.configJson : null;
+                    service.serviceCategoryId = typeof body.serviceCategoryId === "string" ? body.serviceCategoryId : undefined;
+                    service.shared = body.shared === true;
+                    service.userIdList = Array.isArray(body.userIdList) ? body.userIdList : [];
+                    service.modifierList = Array.isArray(body.modifierList) ? body.modifierList : [];
+                    updated = { id: service.id, code: service.code, name: service.name, adapterCode: service.adapterCode ?? "", ...(service.configJson !== undefined && service.configJson !== null ? { configJson: service.configJson } : {}) };
+                }
+            }
+            return updated;
+        }
+        case "/api/api/bizservice/service/get_by_code": {
+            const service = ctx.state.services.get(q.serviceCode);
+            // Live: get_by_code throws PortalException 500001 业务服务不存在.
+            return service
+                ? { id: service.id, code: service.code, name: service.name, adapterCode: service.adapterCode ?? "", ...(service.serviceCategoryId !== undefined ? { serviceCategoryId: service.serviceCategoryId } : {}), ...(service.configJson !== undefined ? { configJson: service.configJson } : {}) }
+                : businessRefusal(500001, "业务服务不存在");
+        }
+        case "/api/api/bizservice/method/create": {
+            const service = ctx.state.services.get(String(body.serviceCode));
+            if (service)
+                service.methods.push({
+                    id: `fakemethod_${String(body.serviceCode)}_${String(body.code ?? "")}`,
+                    code: String(body.code ?? ""),
+                    name: body.name,
+                    // Platform entry: decrypt then persist plaintext; NULL on failure.
+                    configJson: decryptMethodConfig(body.configJson),
+                    inputParametersJson: typeof body.inputParametersJson === "string" ? body.inputParametersJson : undefined,
+                    outputParametersJson: typeof body.outputParametersJson === "string" ? body.outputParametersJson : undefined,
+                });
+            return null;
+        }
+        case "/api/api/bizservice/method/get": {
+            const method = [...ctx.state.services.values()].flatMap((service) => service.methods).find((candidate) => candidate.id === q.id);
+            return method ? { ...method, configJson: method.configJson ?? null, inputParametersJson: method.inputParametersJson ?? null, outputParametersJson: method.outputParametersJson ?? null } : businessRefusal(500001, "业务方法不存在");
+        }
+        case "/api/api/bizservice/method/update": {
+            const service = [...ctx.state.services.values()].find((candidate) => candidate.methods.some((method) => method.id === body.id));
+            const method = service?.methods.find((candidate) => candidate.id === body.id);
+            if (!method)
+                return businessRefusal(500001, "业务方法不存在");
+            method.code = String(body.code ?? method.code);
+            method.name = body.name;
+            if (body.configJson !== undefined)
+                method.configJson = decryptMethodConfig(body.configJson);
+            // Live 2026-09-15 fidelity (BizServiceMethodModel.java:88-146): the
+            // transient inputParameterModels/outputParameterModels setters
+            // RE-SERIALIZE and overwrite the JSON columns, filtering out entries
+            // without bizPropertyType/externParameterType (an untyped face becomes
+            // "[]"). The plain *ParametersJson string setters persist verbatim.
+            method.inputParametersJson = applyTransientParameterOverwrite(body, "inputParameterModels") ?? (typeof body.inputParametersJson === "string" ? body.inputParametersJson : method.inputParametersJson);
+            method.outputParametersJson = applyTransientParameterOverwrite(body, "outputParameterModels") ?? (typeof body.outputParametersJson === "string" ? body.outputParametersJson : method.outputParametersJson);
+            return null;
+        }
+        case "/api/api/bizservice/method/delete": {
+            // Live fidelity: delete keys on the row id (comma-separated on the
+            // platform face); a method still referenced by a business-rule mapping
+            // answers 500108 业务方法已绑定默认方法，不可删除.
+            let removed = false;
+            for (const targetId of String(q.id ?? "").split(",").filter(Boolean)) {
+                for (const service of ctx.state.services.values()) {
+                    const method = service.methods.find((candidate) => candidate.id === targetId);
+                    if (!method)
+                        continue;
+                    if (method.referenced)
+                        return businessRefusal(500108, "业务方法已绑定默认方法，不可删除");
+                    service.methods = service.methods.filter((candidate) => candidate.id !== targetId);
+                    removed = true;
+                }
+            }
+            if (!removed)
+                return businessRefusal(500001, "业务方法不存在");
+            return null;
+        }
+        case "/api/api/bizservice/method/list_by_service_code":
+            return (ctx.state.services.get(q.serviceCode)?.methods ?? []).map((method) => ({
+                id: method.id,
+                code: method.code,
+                name: method.name,
+                serviceCode: q.serviceCode,
+                configJson: method.configJson ?? null,
+                inputParametersJson: method.inputParametersJson ?? null,
+                outputParametersJson: method.outputParametersJson ?? null,
+                // Live readback also parses the columns into the transient model
+                // arrays (inputParameterModels/outputParameterModels on the model).
+                inputParameterModels: parseParamArray(method.inputParametersJson),
+                outputParameterModels: parseParamArray(method.outputParametersJson),
+                referenced: method.referenced === true,
+            }));
+        case "/api/api/bizservice/service/delete": {
+            for (const [code, service] of ctx.state.services) {
+                if (service.id === q.id || code === q.id)
+                    ctx.state.services.delete(code);
+            }
+            return null;
+        }
+        // -----------------------------------------------------------------------
+        // Ticket 106 — the IE (import/export) face
+        // -----------------------------------------------------------------------
+        case "/api/api/runtime/query/upload_file": {
+            // QueryRuntimeController.java:2414-2428: multipart field `file`, the
+            // body answers a PLAIN STRING refId (not an envelope).
+            if (!input.multipart)
+                return businessRefusal(10005, "非法的参数");
+            ctx.state.ieUploadSeq += 1;
+            const refId = `fakeref_${ctx.state.ieUploadSeq}`;
+            ctx.state.ieUploads.set(refId, Buffer.from(input.multipart.content));
+            return rawResponse(refId);
+        }
+        case "/api/api/bizservice/service/export": {
+            // BizServiceIEController.java:110-148 + BizServiceIEFacadeImpl:135-148:
+            // the package copies the stored rows VERBATIM (service configJson
+            // plaintext incl. auth values; method configJson stored plaintext) and
+            // never touches the connection pools. Unknown codes are silently
+            // skipped (the tool preflights them away).
+            const services = [];
+            const methodsMap = {};
+            for (const code of (Array.isArray(body.serviceCodes) ? body.serviceCodes : [])) {
+                const service = ctx.state.services.get(code);
+                if (!service)
+                    continue;
+                services.push({
+                    code: service.code,
+                    name: service.name,
+                    adapterCode: service.adapterCode,
+                    serviceCategoryId: service.serviceCategoryId,
+                    configJson: service.configJson ?? null,
+                    shared: service.shared === true,
+                    userIdList: service.userIdList ?? [],
+                    modifierList: service.modifierList ?? [],
+                });
+                methodsMap[code] = service.methods.map((method) => ({
+                    code: method.code,
+                    name: method.name,
+                    serviceCode: code,
+                    // Live 2026-09-15 fidelity: the serialized model carries BOTH the
+                    // transient decoded `config` object and the plaintext `configJson`
+                    // string column (bizService-<uuid>/manifest.json).
+                    ...(method.configJson ? { config: JSON.parse(method.configJson), configJson: method.configJson } : { configJson: method.configJson ?? null }),
+                    inputParametersJson: method.inputParametersJson ?? null,
+                    outputParametersJson: method.outputParametersJson ?? null,
+                    referenced: method.referenced === true,
+                }));
+            }
+            const manifest = { systemVersion: "8.6.26", services, methodsMap };
+            // Live fidelity: the controller compresses the staging DIRECTORY, so
+            // every entry carries a bizService-<uuid>/ prefix.
+            const staging = `bizService-${String(Math.random().toFixed(32)).replaceAll(".", "")}`;
+            const zip = buildZip([
+                { name: `${staging}/manifest.json`, data: Buffer.from(JSON.stringify(manifest), "utf8") },
+                { name: `${staging}/version.md`, data: Buffer.from("8.6.26", "utf8") },
+            ]);
+            return rawResponse(zip);
+        }
+        case "/api/api/bizservice/service/check":
+        case "/api/api/bizservice/service/import": {
+            // Both faces consume their OWN uploaded refId (one-shot:
+            // FileOperateHelper2.java:43-57 removes the cache entry on download).
+            const refId = String(body.fileName ?? "");
+            const uploaded = ctx.state.ieUploads.get(refId);
+            ctx.state.ieUploads.delete(refId);
+            if (uploaded === undefined)
+                return businessRefusal(10005, "非法的参数");
+            let manifest;
+            try {
+                const entries = readZipEntries(uploaded);
+                const manifestEntry = zipEntryByBasename(entries, "manifest.json");
+                if (manifestEntry === undefined)
+                    throw new Error("no manifest");
+                manifest = JSON.parse(manifestEntry.toString("utf8"));
+                if (!Array.isArray(manifest.services) || manifest.services.length === 0)
+                    throw new Error("empty services");
+            }
+            catch {
+                return businessRefusal(10005, "格式校验错误");
+            }
+            const modifyCodes = (Array.isArray(body.modifyServiceCodes) ? body.modifyServiceCodes : []);
+            const overWrite = body.overWrite === true;
+            const isCheck = input.path.endsWith("/check");
+            if (isCheck) {
+                // BizServiceIEFacadeImpl.checkBizService: flag repeated codes, fill
+                // serviceName/groupName, validate renames, report misses.
+                const reported = [...modifyCodes];
+                for (const service of manifest.services) {
+                    const code = String(service.code ?? "");
+                    const local = ctx.state.services.get(code);
+                    if (!local)
+                        continue;
+                    const category = ctx.state.categories.find((row) => row.id === local.serviceCategoryId);
+                    const modify = reported.find((row) => row.oldServiceCode === code);
+                    if (!modify) {
+                        reported.push({ serviceName: local.name, groupName: category?.name ?? "", isRepeated: true, oldServiceCode: code });
+                    }
+                    else {
+                        modify.serviceName = local.name;
+                        modify.groupName = category?.name ?? "";
+                        const newCode = String(modify.newServiceCode ?? "");
+                        if (!/^[a-zA-Z][a-zA-Z0-9_]{0,27}$/.test(newCode))
+                            return businessRefusal(580001, `${newCode}编码命名不合法`);
+                        modify.isRepeated = ctx.state.services.has(newCode);
+                    }
+                }
+                return { fileName: refId, modifyServiceCodes: reported, missedDataSourceCodes: [], missedUserList: [] };
+            }
+            // import (BizServiceIEFacadeImpl.importBizServices, @Transactional)
+            if (overWrite)
+                modifyCodes.length = 0;
+            for (const service of manifest.services) {
+                const packagedCode = String(service.code ?? "");
+                if (typeof body.groupId === "string" && body.groupId)
+                    service.serviceCategoryId = body.groupId;
+                const local = ctx.state.services.get(packagedCode);
+                const modify = modifyCodes.find((row) => row.oldServiceCode === packagedCode);
+                if (local != null && modify == null && !overWrite)
+                    return businessRefusal(309008, `${packagedCode}服务编码重复未解决`);
+                const finalCode = local != null && (overWrite || modify == null) ? packagedCode : String(modify?.newServiceCode ?? packagedCode);
+                const methods = manifest.methodsMap?.[packagedCode] ?? [];
+                if (local != null && overWrite) {
+                    local.name = service.name;
+                    local.adapterCode = service.adapterCode;
+                    local.serviceCategoryId = service.serviceCategoryId;
+                    local.configJson = service.configJson;
+                }
+                else {
+                    ctx.state.services.set(finalCode, {
+                        id: `fakesvc_${finalCode}`,
+                        code: finalCode,
+                        serviceCode: finalCode,
+                        name: service.name,
+                        adapterCode: service.adapterCode,
+                        serviceCategoryId: service.serviceCategoryId,
+                        configJson: service.configJson,
+                        methods: [],
+                    });
+                    for (const method of methods)
+                        method.serviceCode = finalCode;
+                }
+                const target = ctx.state.services.get(finalCode);
+                for (const method of methods) {
+                    const existing = target.methods.find((row) => row.code === method.code);
+                    const row = {
+                        id: existing?.id ?? `fakemethod_${finalCode}_${method.code}`,
+                        code: method.code,
+                        name: method.name,
+                        // The IE path persists the package verbatim — no AES anywhere.
+                        configJson: method.configJson ?? null,
+                        inputParametersJson: method.inputParametersJson ?? undefined,
+                        outputParametersJson: method.outputParametersJson ?? undefined,
+                        referenced: false,
+                    };
+                    if (existing)
+                        Object.assign(existing, row);
+                    else
+                        target.methods.push(row);
+                }
+            }
+            return { fileName: refId, modifyServiceCodes: [], missedDataSourceCodes: [], missedUserList: [] };
+        }
+        case "/api/api/bizservice/method/service_test": {
+            // Ticket 107 (BizServiceMethodController.java:398-412 +
+            // BizServiceFacadeImpl.java:426-464): resolve the method, dispatch to
+            // the (simulated) adapter runtime, answer the INNER result map
+            // {success,msg,data}. ZERO config writes — the route only reads the
+            // stored rows (the tool's readback proves the config survived).
+            const service = ctx.state.services.get(String(body.serviceCode ?? ""));
+            if (!service)
+                return businessRefusal(500001, "业务服务不存在");
+            const method = service.methods.find((candidate) => candidate.code === body.code);
+            if (!method)
+                return businessRefusal(500001, "业务方法不存在");
+            const args = (body.testInputParametersMap ?? {});
+            // Test affordance (dogfood round20): a method whose code ends in
+            // `_errenv` simulates a same-instance RESTFUL target that answers HTTP
+            // 200 with a CloudPivot error envelope (`{errcode:50000,...}`, e.g.
+            // "corpId can not be blank") — the platform still reports success:true.
+            if (method.code.endsWith("_errenv")) {
+                return { success: true, msg: "", data: { errcode: 50000, errmsg: "corpId can not be blank" } };
+            }
+            return {
+                success: true,
+                msg: "",
+                data: { adapterCode: service.adapterCode, methodCode: method.code, received: args },
+            };
+        }
+        default:
+            return NOT_HANDLED;
+    }
+};
+//# sourceMappingURL=b2-registration.js.map