@stalfh233/omc-cli 0.4.15 → 0.4.17

package/dist/bench/intent-face-eval.js

@@ -122,24 +122,24 @@ function freshHome(url) {
     writeFileSync(join(home, "credentials"), JSON.stringify({ eval: { username: "tester", password: "eval-face-password" } }));
     return home;
 }
-const LADDER_INTENT = `intentVersion: 1
-models:
-  - code: eval_m1
-    name: 评测建模
-    fields:
-      - code: f_title
-        name: 标题
-        type: SHORT_TEXT
-      - code: f_amount
-        name: 金额
-        type: NUMERICAL
-        options:
-          scale: 3
-      - code: f_when
-        name: 日期
-        type: DATE
-    form:
-      publish: true
+const LADDER_INTENT = `intentVersion: 1
+models:
+  - code: eval_m1
+    name: 评测建模
+    fields:
+      - code: f_title
+        name: 标题
+        type: SHORT_TEXT
+      - code: f_amount
+        name: 金额
+        type: NUMERICAL
+        options:
+          scale: 3
+      - code: f_when
+        name: 日期
+        type: DATE
+    form:
+      publish: true
 `;
 export const INTENT_FACE_TASKS = [
     {
@@ -163,12 +163,12 @@ export const INTENT_FACE_TASKS = [
         id: "rule-backfill-ladder",
         description: "two models via intent + DYNAMIC backfill rule + enable + trigger row + verified target readback (mixed face: intent + escape hatch)",
         async run(agent, server) {
-            const modelsIntent = agent.writeIntent("models.yaml", `intentVersion: 1
-models:
-  - code: eval_rs
-    name: 回填源
-  - code: eval_rt
-    name: 回填目标
+            const modelsIntent = agent.writeIntent("models.yaml", `intentVersion: 1
+models:
+  - code: eval_rs
+    name: 回填源
+  - code: eval_rt
+    name: 回填目标
 `);
             await agent.intentValidate(modelsIntent);
             const { plan, planFile } = await agent.intentPlan(modelsIntent);
@@ -209,27 +209,27 @@ models:
         id: "input-error-recovery",
         description: "bad intent -> validate exit 10 with source location -> fix -> plan/apply -> idempotent re-plan/re-apply with zero duplicate wires",
         async run(agent, server) {
-            const bad = agent.writeIntent("intent.yaml", `intentVersion: 1
-models:
-  - code: eval_idem
-    name: 幂等模型
-    fields:
-      - code: f_bad
-        name: 坏类型
-        type: HOLOGRAM
+            const bad = agent.writeIntent("intent.yaml", `intentVersion: 1
+models:
+  - code: eval_idem
+    name: 幂等模型
+    fields:
+      - code: f_bad
+        name: 坏类型
+        type: HOLOGRAM
 `);
             const rejected = await agent.run(["intent", "validate", bad]);
             ok(rejected.code === 10 && rejected.envelope.error?.code === "invalid-input", `expected invalid-input exit 10, got ${String(rejected.code)}`);
             const first = rejected.envelope.result.errors[0];
             ok(first.code === "intent-field-type-unknown" && typeof first.line === "number", `located error: ${JSON.stringify(first).slice(0, 200)}`);
-            const fixed = agent.writeIntent("intent.yaml", `intentVersion: 1
-models:
-  - code: eval_idem
-    name: 幂等模型
-    fields:
-      - code: f_bad
-        name: 改正的字段
-        type: SHORT_TEXT
+            const fixed = agent.writeIntent("intent.yaml", `intentVersion: 1
+models:
+  - code: eval_idem
+    name: 幂等模型
+    fields:
+      - code: f_bad
+        name: 改正的字段
+        type: SHORT_TEXT
 `);
             const validated = await agent.intentValidate(fixed);
             ok(validated.valid === true, `fixed validate: ${JSON.stringify(validated).slice(0, 200)}`);

package/dist/bizservice-config.js

@@ -177,36 +177,56 @@ export function assertStructuredConfig(value, label) {
  * 全 0 串，则拒绝并要求从任务环境事实取真值。
  */
 const MASKED_SECRET_RE = /^\*{3,}$/;
-const PLACEHOLDER_CORP_RE = /^RELEVANCE-[A-Za-z0-9]+$/;
+// 0.4.16：含连字符——r6 历史占位形态 "RELEVANCE-client-000…" 本就带连字符，
+// 旧 [A-Za-z0-9]+ 恰好漏拦它自己要拦的形态（T05 测试发现）。
+const PLACEHOLDER_CORP_RE = /^RELEVANCE-[A-Za-z0-9-]{4,}$/;
 const ALL_ZERO_CREDENTIAL_RE = /^0{16,}$/;
-function scanAuthParameterlistForPlaceholders(parameterlist, adapterCode) {
+/**
+ * 纯分类函数（不 throw、不碰环境）：鉴权 parameterlist 里的掩码/占位值识别。
+ * 写面守卫（发现即拒）与 doctor --service（全量报告）共用同一套规则：
+ * 字符串三类（legacy "***" / RELEVANCE-xxx / 全 0）+ 结构化掩码对象
+ * （masked:true——T05 读面形状，防回灌）。
+ */
+export function classifyAuthParameterlist(parameterlist, _adapterCode) {
+    const findings = [];
     for (const entry of parameterlist) {
         if (!isRecord(entry))
             continue;
         const value = entry.value;
+        if (isRecord(value) && value.masked === true) {
+            findings.push({ code: String(entry.code ?? ""), reason: "结构化读回掩码 masked:true（真值必须从任务环境事实取得，不可抄写）", valueKind: "masked-object" });
+            continue;
+        }
         if (typeof value !== "string")
             continue;
         const t = value.trim();
-        let why = "";
         if (MASKED_SECRET_RE.test(t))
-            why = "读回掩码 ***（读面按 ticket 115 掩码，不可抄写）";
+            findings.push({ code: String(entry.code ?? ""), reason: "读回掩码 ***（读面按 ticket 115 掩码，不可抄写）", valueKind: "masked-string" });
         else if (PLACEHOLDER_CORP_RE.test(t))
-            why = "自造 RELEVANCE-xxx 占位（沙盒真实 corpId 才是 RELEVANCE-<真实id>）";
+            findings.push({ code: String(entry.code ?? ""), reason: "自造 RELEVANCE-xxx 占位（沙盒真实 corpId 才是 RELEVANCE-<真实id>）", valueKind: "placeholder-corp" });
         else if (ALL_ZERO_CREDENTIAL_RE.test(t))
-            why = "全 0 串（脱敏显示值，非真实凭据）";
-        if (why)
-            refuse(BIZSERVICE_CONFIG_BLOCKERS.serviceConfigInvalid, `${adapterCode} 服务鉴权凭据包含${why}——平台 service/create 不校验凭据内容，注册成功但运行时自调必败（r6-onlinejs 真机：全 0 corpId 注册成功、自调 401/500）。凭据必须从任务环境事实取真值（如 doctor 显示的 corpId、任务提供的 client_secret）。`, { key: `auth.parameterlist.${String(entry.code ?? "")}`, value: t });
+            findings.push({ code: String(entry.code ?? ""), reason: "全 0 串（脱敏显示值，非真实凭据）", valueKind: "all-zero" });
+    }
+    return findings;
+}
+function scanAuthParameterlistForPlaceholders(parameterlist, adapterCode) {
+    for (const finding of classifyAuthParameterlist(parameterlist, adapterCode)) {
+        refuse(BIZSERVICE_CONFIG_BLOCKERS.serviceConfigInvalid, `${adapterCode} 服务鉴权凭据 ${finding.code} 包含${finding.reason}——平台 service/create 不校验凭据内容，注册成功但运行时自调必败（r6-onlinejs 真机：全 0 corpId 注册成功、自调 401/500）。凭据必须从任务环境事实取真值（如 doctor 显示的 corpId、任务提供的 client_secret）。`, { key: `auth.parameterlist.${finding.code}`, value: finding.valueKind });
     }
 }
 function requireAuthAndUrl(serviceConfig, adapterCode) {
     const auth = serviceConfig.auth;
+    // T05：掩码/占位分类先于结构校验——结构化掩码对象 {masked:true}（读回形状回灌）
+    // 在 string-only 的 validateRestfulAuth 之前就能拿到专属拒因，而不是笼统的
+    // "必须是非空字符串"。两道防线都保留（INTERNAL 路径只依赖本扫描）。
+    if (isRecord(auth) && Array.isArray(auth.parameterlist))
+        scanAuthParameterlistForPlaceholders(auth.parameterlist, adapterCode);
     if (adapterCode === "RESTFUL" || adapterCode === "SOAP")
         validateRestfulAuth(auth);
     if (!isRecord(auth) || typeof auth.code !== "string" || !auth.code || !Array.isArray(auth.parameterlist))
         refuse(BIZSERVICE_CONFIG_BLOCKERS.serviceConfigInvalid, `${adapterCode} 服务 configJson 需要 auth {code, parameterlist[]}`, { key: "auth" });
     if (!commonlistValue(serviceConfig, "url"))
         refuse(BIZSERVICE_CONFIG_BLOCKERS.serviceConfigInvalid, `${adapterCode} 服务 configJson 需要 commonlist [{code:"url", value}]`, { key: "commonlist.url" });
-    scanAuthParameterlistForPlaceholders(auth.parameterlist, adapterCode);
 }
 function requireCommonlist(serviceConfig, key, adapterCode) {
     if (!commonlistValue(serviceConfig, key))
@@ -504,12 +524,17 @@ export function normalizeMethodConfigReadback(adapterCode, config) {
  * `auth.parameterlist[].value` carries cleartext credentials (basic
  * password, oauth client_secret…); handoff §5 says method-config secrets
  * never echo. Applied ONLY to readback projections (service.get /
- * method.get / method update readback): the VALUES become "***" while the
- * code/name structure stays readable, so ticket 94's shape-readback
+ * method.get / method update readback): the VALUES become a STRUCTURED
+ * mask `{masked:true, hint}` (0.4.16 T05 — a bare "***" string was
+ * copy-pastable; agents抄回写即注册垃圾凭据，r4-r6 全 0 悬案的根因链).
+ * The code/name structure stays readable, so ticket 94's shape-readback
  * semantics survive. NEVER apply this on a write/echo path — the update
  * echo must carry the original config verbatim or the mask would be
- * persisted over the stored credential.
+ * persisted over the stored credential. The write-face guard
+ * (classifyAuthParameterlist) rejects both the structured mask and any
+ * legacy "***" string on write.
  */
+export const MASK_HINT = "读回掩码——真值从任务环境事实取，不可抄写";
 export function maskServiceConfigSecrets(config) {
     if (!isRecord(config))
         return config;
@@ -519,7 +544,7 @@ export function maskServiceConfigSecrets(config) {
     const maskedParameterlist = auth.parameterlist.map((entry) => {
         if (!isRecord(entry))
             return entry;
-        return { ...entry, ...(entry.value !== undefined ? { value: "***" } : {}) };
+        return { ...entry, ...(entry.value !== undefined ? { value: { masked: true, hint: MASK_HINT } } : {}) };
     });
     return { ...config, auth: { ...auth, parameterlist: maskedParameterlist } };
 }

package/dist/capability-overview.js

@@ -133,8 +133,8 @@ const SURFACES = [
         id: "bizservice",
         title: "业务集成",
         lane: LANES.b2,
-        description: "业务服务与方法注册（RESTFUL/DATA_SQL/DATA_TABLE/SAP/KAFKA/SOAP）、导入导出、设计器测试。",
-        operations: ["register", "update", "delete", "export", "import", "check", "test"],
+        description: "业务服务与方法注册（RESTFUL/DATA_SQL/DATA_TABLE/SAP/KAFKA/SOAP）、服务清单（按分类/关键词，凭据不回显）、导入导出、设计器测试。",
+        operations: ["list", "register", "update", "delete", "export", "import", "check", "test"],
         requires: [],
         intent: { level: "partial", note: "声明式支持新建 service.register（可带一个 method）与既有 service/method 的 update（结构化 config、AES 加密、patch 语义）；删除、给既有服务加方法、分类/连接池/IE 仍走 escape hatch。" },
         notes: "方法 configJson 走 AES-128-ECB；RESTFUL/DATA_SQL 绑定前须带适配器必需配置（否则是注册壳）。",

package/dist/cli-output.js

@@ -1,8 +1,8 @@
 import { writeFileSync } from "node:fs";
 import { serializeEnvelope } from "./cli-contract.js";
 import { recordUsageOutput } from "./usage-log.js";
-let options = { quiet: false };
-/** Parse `--quiet` and `--out <file>` from the raw argv once, before dispatch. */
+let options = { quiet: false, verbose: false };
+/** Parse `--quiet`, `--verbose` and `--out <file>` from the raw argv once, before dispatch. */
 export function configureOutput(argv) {
     const outIndex = argv.indexOf("--out");
     let outFile;
@@ -14,7 +14,11 @@ export function configureOutput(argv) {
             throw new Error("--out requires a file path");
         outFile = value;
     }
-    options = { quiet: argv.includes("--quiet"), ...(outFile ? { outFile } : {}) };
+    options = {
+        quiet: argv.includes("--quiet"),
+        verbose: argv.includes("--verbose"),
+        ...(outFile ? { outFile } : {}),
+    };
     return options;
 }
 /**
@@ -25,7 +29,7 @@ export function stripOutputFlags(argv) {
     const out = [];
     for (let index = 0; index < argv.length; index += 1) {
         const token = argv[index];
-        if (token === "--quiet")
+        if (token === "--quiet" || token === "--verbose")
             continue;
         if (token === "--out") {
             index += 1;
@@ -38,29 +42,51 @@ export function stripOutputFlags(argv) {
 export function outputOptions() {
     return options;
 }
+/**
+ * Serialize-boundary compaction: a success envelope (error == null) drops the
+ * envelope-level `status`/`requestId`/`error:null` unless `--verbose`. Failures
+ * keep the full field set. Non-envelope values pass through untouched.
+ */
+function compactForOutput(value) {
+    if (options.verbose)
+        return value;
+    if (!value || typeof value !== "object" || !("ok" in value))
+        return value;
+    const record = value;
+    if (record.error !== null && record.error !== undefined)
+        return value;
+    return { ok: record.ok, result: record.result };
+}
 /**
  * Write the single stdout envelope. When `--out` is set, the identical bytes are
  * written to that file (UTF-8) FIRST, so a bad path fails before any envelope
  * reaches stdout — keeping the "exactly one envelope" contract even on failure.
- * stdout and the file can never diverge.
+ * stdout and the file can never diverge (both follow the same verbose rule).
  */
 export function writeEnvelope(value) {
-    const text = serializeEnvelope(value);
+    const outputValue = compactForOutput(value);
+    const text = serializeEnvelope(outputValue);
     if (!options.outFile) {
         recordUsageOutput(value, Buffer.byteLength(text, "utf8"));
         process.stdout.write(text);
         return;
     }
-    const pretty = `${JSON.stringify(value, null, 2)}\n`;
+    const pretty = `${JSON.stringify(outputValue, null, 2)}\n`;
     writeFileSync(options.outFile, pretty, "utf8");
-    const envelopeValue = value && typeof value === "object" ? value : {};
-    const confirmation = {
-        ok: envelopeValue.ok ?? true,
-        status: envelopeValue.status ?? "ok",
-        result: { out: options.outFile, bytes: Buffer.byteLength(pretty, "utf8") },
-        requestId: envelopeValue.requestId ?? null,
-        error: envelopeValue.error ?? null,
-    };
+    const envelopeValue = outputValue && typeof outputValue === "object" ? outputValue : {};
+    const failure = envelopeValue.error !== null && envelopeValue.error !== undefined;
+    const confirmation = failure || options.verbose
+        ? {
+            ok: envelopeValue.ok ?? failure ? false : true,
+            status: envelopeValue.status ?? (failure ? "error" : "ok"),
+            result: { out: options.outFile, bytes: Buffer.byteLength(pretty, "utf8") },
+            requestId: envelopeValue.requestId ?? null,
+            error: envelopeValue.error ?? null,
+        }
+        : {
+            ok: envelopeValue.ok ?? true,
+            result: { out: options.outFile, bytes: Buffer.byteLength(pretty, "utf8") },
+        };
     const confirmationText = serializeEnvelope(confirmation);
     recordUsageOutput(value, Buffer.byteLength(confirmationText, "utf8"), Buffer.byteLength(pretty, "utf8"));
     process.stdout.write(confirmationText);

package/dist/cli.js

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+// T04：SQLite 警告过滤器必须保持第一个 import（先于任何拉起 omc-core/node:sqlite 的模块）。
+import "./sqlite-warning-filter.js";
 import { createInterface } from "node:readline/promises";
 import { stdin, argv } from "node:process";
 import { createRequire } from "node:module";
@@ -116,7 +118,7 @@ async function cmdSetup(store, args) {
     console.error(`环境 ${name} 已保存（幂等，可随时重跑 omc setup）。凭据存储模式：${store.credentialsMode()}`);
     return 0;
 }
-async function cmdDoctor(store, environment) {
+async function cmdDoctor(store, environment, serviceCode) {
     const manifest = loadCoverageManifest();
     const steps = [];
     let ok = true;
@@ -166,6 +168,26 @@ async function cmdDoctor(store, environment) {
                 steps.push(`许可证    FAIL 许可证面探测失败：${redactText(error.message, [])}`);
             }
         }
+        // T09 — optional per-service credential shape check (--service <code>).
+        // Non-fatal: a masked/placeholder credential does not make the ENVIRONMENT
+        // unhealthy; it explains why that service's calls would 401/500. Findings
+        // come from the RAW wire read (get_by_code configJson), classified by the
+        // same pure function the write-side guard uses — never the masked
+        // projection re-parsed.
+        if (serviceCode !== undefined) {
+            const { probeServiceCredentials } = await import("./service-doctor.js");
+            const probe = await probeServiceCredentials(session, serviceCode);
+            if (probe.status === "not-found")
+                steps.push(`服务凭据  --  ${serviceCode} 未找到（get_by_code 无行）`);
+            else if (probe.status === "error")
+                steps.push(`服务凭据  WARN 探测失败：${redactText(probe.message, [])}`);
+            else if (probe.findings.length === 0)
+                steps.push(`服务凭据  ok  ${serviceCode} 鉴权参数形状正常（${probe.parameterCount} 项；掩码/占位/全 0 均未检出）`);
+            else
+                steps.push(`服务凭据  WARN ${serviceCode} ${probe.findings.length} 项问题（${probe.findings.map((finding) => `${finding.code}:${finding.valueKind}`).join("、")}）——掩码/占位值不可用于真实调用；真值从任务环境事实取，不要抄 service.get 读回`);
+            if (serviceCode !== undefined)
+                steps.push(`连通性    --  形状检查不能证明凭据有效；真实连通性用 method.test（平台侧发起调用）`);
+        }
     }
     catch (error) {
         ok = false;
@@ -1348,7 +1370,7 @@ async function main() {
     command.command("setup").option("--list").option("--edit <environment>").option("--remove <environment>").action(async (options) => {
         commandExitCode = await cmdSetup(new ConfigStore(defaultPaths()), [...(options.list ? ["--list"] : []), ...(options.edit ? ["--edit", options.edit] : []), ...(options.remove ? ["--remove", options.remove] : [])]);
     });
-    command.command("doctor").option("--environment <environment>").option("--env <environment>").action(async (options) => { commandExitCode = await cmdDoctor(new ConfigStore(defaultPaths()), options.environment ?? options.env); });
+    command.command("doctor").option("--environment <environment>").option("--env <environment>").option("--service <serviceCode>", "可选：体检单个业务集成服务的鉴权参数形状（掩码/占位/全 0 检出，WARN 非致命）").action(async (options) => { commandExitCode = await cmdDoctor(new ConfigStore(defaultPaths()), options.environment ?? options.env, options.service); });
     command.command("call <tool>").option("--env <environment>").option("--environment <environment>").option("--args <json>").option("--args-file <path>").option("--max-output-bytes <bytes>").option("--request-id <requestId>").option("--timeout-ms <milliseconds>").option("--wait <milliseconds>").option("--dry-run").addHelpText("after", `\n${onboardingHelp()}\n`).action(async (tool, options) => {
         const rest = [tool, ...(options.env ? ["--env", options.env] : []), ...(options.environment ? ["--environment", options.environment] : []), ...(options.args !== undefined ? ["--args", options.args] : []), ...(options.argsFile !== undefined ? ["--args-file", options.argsFile] : []), ...(options.maxOutputBytes !== undefined ? ["--max-output-bytes", options.maxOutputBytes] : []), ...(options.requestId ? ["--request-id", options.requestId] : []), ...(options.timeoutMs ? ["--timeout-ms", options.timeoutMs] : []), ...(options.wait !== undefined ? ["--wait", options.wait] : []), ...(options.dryRun ? ["--dry-run"] : [])];
         commandExitCode = await cmdCall(new ConfigStore(defaultPaths()), rest);

package/dist/config-store.js

@@ -30,6 +30,10 @@ export class ConfigStore {
     constructor(paths = defaultPaths()) {
         this.paths = paths;
     }
+    /** Config root (config file's directory) — token-cache placement (F1). */
+    get configPaths() {
+        return this.paths;
+    }
     atomicWrite(path, text, mode) {
         mkdirSync(dirname(path), { recursive: true });
         if (existsSync(path)) {

package/dist/endpoints.js

@@ -70,6 +70,8 @@ export const ENDPOINTS = {
     bizServiceCreate: "/api/api/bizservice/service/create",
     bizServiceUpdate: "/api/api/bizservice/service/update",
     bizServiceGetByCode: "/api/api/bizservice/service/get_by_code",
+    bizServiceListByCategoryId: "/api/api/bizservice/service/list_by_category_id",
+    bizServiceListByCategoryIdFind: "/api/api/bizservice/service/list_by_category_id_find",
     bizServiceCategoryList: "/api/api/bizservice/category/list",
     bizServiceCategoryCreate: "/api/api/bizservice/category/create",
     bizServiceCategoryUpdate: "/api/api/bizservice/category/update",

package/dist/execution-metadata.js

@@ -738,7 +738,7 @@ const formConditionalRequired = Object.freeze({
     conditionalRequirements: ["条件串：`{字段} 操作符 [值]`（操作符两侧留空格）。操作符用**中文**（真实设计器产出）：等于/不等于/大于/小于/大于等于/小于等于/包含/不包含/包含全部/包含任意一个/等于任意一个/为空/不为空；也接受符号 == != > >= <= Contains IsEmpty。为空/不为空**不带值**（`{reason} 不为空`），其余带 JSON 值 {\"valueType\":...,\"value\":...}。多条件用 ` && `、多组用 ` || `。**不是** eq/gt/isnull——会让门户渲染 SyntaxError"],
     priorToolReferences: [{ tool: "field.list", args: { environment, schemaCode: model, published: true }, purpose: "确认条件字段与目标字段都已发布" }],
     dryRun: { supported: true, command: `omc call field.update --env ${environment} --dry-run --args '<recipe.args>'`, notes: "dry-run 校验字段 options 形状，不写入" },
-    expectedReadback: { readback: { field: { code: "leave_reason", options: { requiredFormula: "<protocol>" } } }, next: ["field.publish", "form.draft(rebuild)", "form.publish"] },
+    expectedReadback: { readback: { field: { code: "leave_reason", options: { requiredFormula: "<protocol>" } } }, next: ["（一调）field.update cascadeRepublish:true", "（分步）field.publish → form.draft(rebuild) → form.publish", "（只刷新表单）form.publish rebuild:true"] },
     refusalRecovery: [
         { code: "capability-out-of-coverage", action: "条件串用中文或符号操作符（等于/大于/不为空 或 == />/IsEmpty）；恒必填用字面量 \"true\"" },
         ...commonRecovery,
@@ -755,7 +755,7 @@ const formAlwaysReadonly = Object.freeze({
     conditionalRequirements: ["恒只读用布尔 readonlyFormula:true；条件只读用 readonlyCondition 条件串"],
     priorToolReferences: [{ tool: "field.list", args: { environment, schemaCode: model, published: true }, purpose: "确认字段已发布" }],
     dryRun: { supported: true, command: `omc call field.update --env ${environment} --dry-run --args '<recipe.args>'`, notes: "dry-run 校验 readonlyFormula 是布尔", },
-    expectedReadback: { readback: { field: { code: "approval_level", options: { readonlyFormula: true } } }, next: ["field.publish", "form.draft(rebuild)", "form.publish"] },
+    expectedReadback: { readback: { field: { code: "approval_level", options: { readonlyFormula: true } } }, next: ["（一调）field.update cascadeRepublish:true", "（分步）field.publish → form.draft(rebuild) → form.publish", "（只刷新表单）form.publish rebuild:true"] },
     refusalRecovery: [{ code: "capability-out-of-coverage", action: "readonlyFormula 必须是布尔 true；条件只读才用 readonlyCondition" }, ...commonRecovery],
     requiresEnvironmentDerivedIds: false,
 });
@@ -775,7 +775,7 @@ const formConditionalReadonly = Object.freeze({
     conditionalRequirements: ["条件串协议同必填；恒只读改用 readonlyFormula:true"],
     priorToolReferences: [{ tool: "field.list", args: { environment, schemaCode: model, published: true }, purpose: "确认字段已发布" }],
     dryRun: { supported: true, command: `omc call field.update --env ${environment} --dry-run --args '<recipe.args>'`, notes: "dry-run 校验条件串协议" },
-    expectedReadback: { readback: { field: { code: "approval_level", options: { readonlyCondition: "<protocol>" } } }, next: ["field.publish", "form.draft(rebuild)", "form.publish"] },
+    expectedReadback: { readback: { field: { code: "approval_level", options: { readonlyCondition: "<protocol>" } } }, next: ["（一调）field.update cascadeRepublish:true", "（分步）field.publish → form.draft(rebuild) → form.publish", "（只刷新表单）form.publish rebuild:true"] },
     refusalRecovery: [{ code: "capability-out-of-coverage", action: "使用中文或符号操作符与三段条件串" }, ...commonRecovery],
     requiresEnvironmentDerivedIds: false,
 });
@@ -972,7 +972,7 @@ const bizserviceSelfCallCorp = Object.freeze({
     conditionalRequirements: [
         "**参数 code 必须精确等于 `X-LowCode-Corpid`**——适配器按「参数 code = header 名」加入请求头（headerParam.add(key, value)）。",
         "**corpid 传递有两种实证形状**：①方法级入参 code 为 X-LowCode-Corpid、configJson.position 为 REQUEST_HEADER 整数 2（r3-wms 实证可用）；②规则 BIZ_ACTION 的 inputMappings 加 CONST 映射（serviceMethodParameterCode 为 X-LowCode-Corpid、codeType 为 0、bizCode 放真实 corpId——r4-fin 实证：该环境下方法级 position:2 注入为空头值 [\"\"]，此形状才生效）。**先用 ②，双跑验证头值；①失效（头空）就换 ②**。CONST 值必须放 bizCode（平台只读 bizCode）。",
-        "**corpid 头非空即可（r6-onlinejs R19 实证）**：沙盒 token corpId=null 时，全 0 corpId 头（RELEVANCE-0000…）也 errcode:0；仅空头才 50000。多租户路由才需真值。凭据值不可从读回抄（读面按 ticket 115 掩码为 ***），必须用任务环境事实真值（doctor 显示的 corpId、任务提供的 client_secret）。",
+        "**corpid 头非空即可（r6-onlinejs R19 实证）**：沙盒 token corpId=null 时，全 0 corpId 头（RELEVANCE-0000…）也 errcode:0；仅空头才 50000。多租户路由才需真值。凭据值不可从读回抄（读面按 ticket 115 掩码——0.4.16 起为结构化 {masked:true,hint}，旧版 ***），必须用任务环境事实真值（doctor 显示的 corpId、任务提供的 client_secret）。",
         "configJson.position 用 REQUEST_HEADER 名即可（工具写侧编码为整数索引 2；wire 上是整数——写名字平台侧反序列化失败、header 根本不进，源码 @JsonCreator get(int)）。",
         "BIZ_ACTION 节点调用该方法**无需传该常量参数**（方法级常量由平台注入）；只需照常映射业务参数。",
     ],

package/dist/fake/b2-registration.js

@@ -273,6 +273,32 @@ export const b2Route = (ctx, input) => {
                 { sql: `DELETE FROM ${table} WHERE ...`, sqlType: "DELETE" },
             ];
         }
+        case "/api/api/bizservice/service/list_by_category_id":
+        case "/api/api/bizservice/service/list_by_category_id_find": {
+            // Live (BizServiceController.java:167-204/264-291): categoryId="" lists
+            // ALL services; the _find variant filters name/code case-insensitively.
+            // Rows are the FULL BizServiceModel INCLUDING configJson (authorization
+            // config, possibly carrying credentials) — returned deliberately so the
+            // TOOL-layer whitelist projection is what tests assert.
+            const categoryId = String(q.categoryId ?? "");
+            const keyword = input.path.endsWith("_find") ? String(q.keyword ?? "") : "";
+            const lower = keyword.toLowerCase();
+            return [...ctx.state.services.values()]
+                .filter((service) => categoryId === "" || service.serviceCategoryId === categoryId)
+                .filter((service) => keyword === "" || String(service.code ?? "").toLowerCase().includes(lower) || String(service.name ?? "").toLowerCase().includes(lower))
+                .map((service) => ({
+                id: service.id,
+                code: service.code,
+                name: service.name ?? null,
+                adapterCode: service.adapterCode ?? null,
+                serviceCategoryId: service.serviceCategoryId ?? null,
+                description: null,
+                shared: service.shared ?? false,
+                configJson: service.configJson ?? null,
+                createdBy: "fake-admin",
+                modifiedBy: "fake-admin",
+            }));
+        }
         case "/api/api/bizservice/service/create": {
             // Live: create with an empty adapterCode → 500005 业务服务关联适配器编码为空.
             if (typeof body.adapterCode !== "string" || !body.adapterCode)