@stalfh233/omc-cli 0.4.34 → 0.4.36

package/dist/cli.js

@@ -36,6 +36,7 @@ import { listSkills, readSkill, readSkillSection } from "./skills.js";
 import { parseToolInput, ToolInputError, ToolRefusalError } from "./tool-types.js";
 import { WireError, wireCall } from "./wire.js";
 import { ENDPOINTS } from "./endpoints.js";
+import { extractBizObjectPage } from "./lanes/runtime-data.js";
 import { makeToolContext } from "./context.js";
 import { SessionManager } from "./session-manager.js";
 async function ask(question) {
@@ -843,6 +844,23 @@ async function cmdIntentPlan(file, environment, planOut, transport) {
         const planJson = JSON.stringify(plan, null, 2) + "\n";
         const artifact = createArtifact(artifactRoot(), planJson);
         const warnings = intentWarnings(intent);
+        // r39: a destructive plan that deletes a model carrying runtime data got
+        // ZERO warning — the approval object must surface the blast radius. One
+        // cheap total-only query per declared-absent model (never blocks the plan:
+        // an unreadable runtime face just means no count to show).
+        for (const model of intent.models) {
+            if (model.absent !== true)
+                continue;
+            try {
+                const query = await wireCall(session, { path: ENDPOINTS.runtimeQueryList, method: "POST", body: { schemaCode: model.code, queryCode: model.code, filters: [], mobile: false, page: 0, size: 1, queryVersion: 1, showTotal: true } });
+                const total = extractBizObjectPage(query.data).total;
+                if (total > 0)
+                    warnings.push({ resource: `model:${model.code}`, code: "destructive-with-data", message: `模型 ${model.code} 含 ${total} 条运行数据，absent:true 删除将一并销毁（不可恢复）——确认后再 apply` });
+            }
+            catch {
+                // 运行面不可读（模型/视图未就绪等）= 无法计数，不阻塞 plan
+            }
+        }
         const toolCounts = new Map();
         for (const change of compiled.changes)
             toolCounts.set(change.tool, (toolCounts.get(change.tool) ?? 0) + 1);
@@ -869,6 +887,7 @@ async function cmdIntentPlan(file, environment, planOut, transport) {
                 changeSummary,
                 planArtifactId: artifact.artifactId,
                 planArtifactSha256: artifact.sha256,
+                ...(warnings.length > 0 ? { warnings } : {}),
                 nextAction: `omc intent apply ${planOut}`,
             };
         }
@@ -1176,12 +1195,24 @@ async function cmdIntentApply(planPath, options, transport) {
             if (options.verify === false)
                 return autoPlanned ? { ...base, plannedFrom: "intent-yaml" } : base;
             let verification;
-            try {
-                const report = await verifyIntentLive(session, plan.intent);
-                verification = { ...dietIntentLive(report, context), status: report.equivalent === true ? "ok" : "verification-failed" };
-            }
-            catch (error) {
-                verification = { status: "error", equivalent: false, error: error instanceof Error ? error.message : String(error) };
+            // r39: a destructive (absent:true) delete tears the model down in
+            // stages — fields/views drop first, the model shell lags a moment. An
+            // immediate readback then reports a phantom mismatch. Retry the live
+            // verification briefly (bounded) before declaring failure.
+            const declaresAbsence = plan.intent.models.some((model) => model.absent === true);
+            const attempts = declaresAbsence ? 3 : 1;
+            for (let attempt = 1;; attempt++) {
+                try {
+                    const report = await verifyIntentLive(session, plan.intent);
+                    verification = { ...dietIntentLive(report, context), status: report.equivalent === true ? "ok" : "verification-failed" };
+                }
+                catch (error) {
+                    verification = { status: "error", equivalent: false, error: error instanceof Error ? error.message : String(error) };
+                }
+                if (verification.equivalent === true || attempt >= attempts)
+                    break;
+                console.error(`intent apply ${planId}：删除后读回暂不等价（第 ${attempt}/${attempts} 次）——疑似删除传播中，${attempt === attempts - 1 ? "最后" : "1s"}后再核`);
+                await new Promise((resolve) => setTimeout(resolve, 1000));
             }
             if (verification.equivalent === true) {
                 console.error(`intent apply ${planId}：最终读回等价 ✓（意图 ${plan.intent.models.length} 个模型）`);
@@ -1193,6 +1224,11 @@ async function cmdIntentApply(planPath, options, transport) {
                 status: "refused",
                 blocker: "intent-readback-mismatch",
                 verification,
+                ...(declaresAbsence
+                    ? {
+                        note: "本变更含 absent:true 删除：平台删除分阶段传播（字段/视图先撤、模型壳后撤），已做 3 次间隔读回仍不等价——先用 model.inspect 的 modelPresent 独立复核再判定；若 modelPresent:false 则删除实际已生效",
+                    }
+                    : {}),
                 message: "变更已执行，但最终权威读回与意图不等价：交付可能不完整或环境已漂移。按 differences 定位后重新 intent plan（不要盲重试）",
                 nextAction: "inspect verification.differences, then re-run intent plan against the live baseline",
             };

package/dist/execution-metadata.js

@@ -311,6 +311,7 @@ const workflowTemplateUpdate = Object.freeze({
         "**activities 用数组**（也接受 {0:…,1:…} 索引对象）；每个活动必须带 activityCode（Activity1..N）与 activityType，缺了会被拒——以 get_draft 的值为基线改，不要凭记忆拼；",
         "**一个模型只能有一个流程**：workflow.create 对已有流程的模型会拒（一个模型只能有一个流程）；要改现有流程直接 workflow.update，不要另建新 code；",
         "多级审批：为每个审批节点各写一个 PARTICIPANT 活动（activityCode 唯一），END 放最后；数组里按顺序就是审批链顺序；新增的审批节点由工具自动接入链路（补全到 END 的连线），无需自己写 routes；",
+        "**{Originator}=发起人自己**：审批节点用它=提交人自审自己——提交人与审批人同账号时平台可能直接自动通过（COMPLETED，无待办；r40 实证，与节点结构有关）。需要独立审批人时绑定具体用户 id 或 `FindUserByRole({Originator.OU},\"<角色code>\",\"random\")`；验收要 PENDING 待办时先确认审批人≠提交人；",
         "**participant 必须是平台可解析的三种形态之一（真实生产 2026-09-23 观察）**：(a) 关键字 `{Originator}`；(b) 参与者对象数组 JSON `[{\"code\":\"<角色code>\",\"corpId\":\"<corpId|other>\",\"id\":\"<roleId>\",\"name\":\"<角色名>\",\"type\":2}]`（type 2=角色，3=用户；多个用 `+` 连接）；(c) 函数 `FindUserByRole({Originator.OU},\"<roleCode>\",\"random\")`。**自由文本角色名（如 `部门负责人`）能 publish 但解析不到人、不生成待办**——先用 `org.role.list` / `org.department.list` 拿 code/id 再构造。工具会在 readback 里以 `participantWarnings` 标出自由文本。",
         "**审批节点必须带 sheetCode（=模型默认表单槽位，通常等于 schemaCode）——S29 契约：participant sheetCode 为空 publish 会 401026 WORKFLOW_ACTIVITY_NO_SHEET。工具已自动回填，正常无需手填**；",
         "节点类型 START / PARTICIPANT / END；省略的既有节点由 merge 保留；",
@@ -426,7 +427,10 @@ const plainSubmit = Object.freeze({
     tool: "data.submit",
     args: { environment, schemaCode: model, formData: { name: "正式记录" } },
     preconditions: ["模型无已发布流程（有流程走 workflow-backed-data-submit）", "模型+表单已发布"],
-    conditionalRequirements: ["**不带 bizObjectId 即新建并提交**（工具内部建稿+直提，一次调用 COMPLETED）；已有草稿要直提时才带 data.save 读回的 bizObjectId；不要手造 id"],
+    conditionalRequirements: [
+        "**不带 bizObjectId 即新建并提交**（工具内部建稿+直提，一次调用 COMPLETED）；已有草稿要直提时才带 data.save 读回的 bizObjectId；不要手造 id",
+        "**目标模型已发布流程时行为不同（r36 实证）**：无 workItemId 的 data.submit = 一调新建并**启动流程**（PROCESSING，读回返回首审批待办 workItemId）——合法路径非错误；要『先草稿后提交/中途改稿』用两段式 data.save（草稿读回三元身份）→ data.submit(workItemId)",
+    ],
     priorToolReferences: [],
     dryRun: { supported: true, command: `omc call data.submit --env ${environment} --dry-run --args '<recipe.args>'`, notes: "dry-run 验证参数关系，不推进状态" },
     expectedReadback: { performed: { errcode: 0 }, readback: { sequenceStatus: "COMPLETED" } },
@@ -1039,7 +1043,7 @@ const dataListFilter = Object.freeze({
     args: { environment, schemaCode: model, filter: { op: "eq", field: "status", value: "OPEN" }, size: 20 },
     preconditions: ["schemaCode 的字段已 field.publish（filter 叶子的 propertyType 从发布面读）"],
     conditionalRequirements: [
-        "filter 是**一个**子句 `{op, field, value?}`；op ∈ eq/neq/gt/lt/gte/lte/like/notlike/in/notin/between/notbetween/isnull/isnotnull。",
+        "filter 是**一个**子句 `{op, field, value?}`；op ∈ eq/neq/gt/lt/gte/lte/like/notlike/in/notin/between/notbetween/isnull/isnotnull（camelCase 别名 equals/notEquals/contains/isNull/isNotNull 等价——r36 体检发现别名合法但只列规范名会被误判『静默接受坏 op』）。",
         "多条件 `filters:[…]`（AND）；分组 `filterGroup:{op:'and'|'or',clauses:[…]}`；系统/外部字段用 rawCondition。",
     ],
     priorToolReferences: [
@@ -1071,6 +1075,33 @@ const dataDeleteSweep = Object.freeze({
     refusalRecovery: [{ code: "wire-business", action: "模型须已创建且有已发布字段；运行面 50000 时先 model.inspect modelPresent 判存在" }],
     requiresEnvironmentDerivedIds: false,
 });
+const onlinejsHighlightScript = Object.freeze({
+    id: "field-value-driven-style",
+    title: "按字段值驱动另一控件样式（生命周期外壳 + valueChange 订阅）",
+    status: "offline-valid",
+    tool: "onlinejs.compose",
+    args: {
+        environment,
+        schemaCode: model,
+        sheetCode: "<默认表单 code == 模型 code>",
+        mode: "replace",
+        source: "(function(form){ var amt = form.getControl('amountCode'); var party = form.getControl('targetCode'); function refresh(v){ party.options.style = Number(v) > 100000 ? 'color: red;' : ''; } form.on('onRendered', function(){ refresh(amt.getValue()); amt.valueChange.subscribe(function(change){ refresh(change.value); }); }); })",
+    },
+    preconditions: [
+        "控件编码先 model.inspect/field.list 确认（示例 amountCode/targetCode 换成真实字段 code）",
+        "完整 `(function(form){…})` 生命周期外壳必须 mode:'replace'（merge 模式收外壳会被拒并指路 replace——r38 实证）",
+    ],
+    conditionalRequirements: [
+        "事件模型：`form.on('onRendered', …)` 初始化 + `<控件>.valueChange.subscribe(function(change){ change.value })` 监听；改样式用 `control.options.style`",
+        "**脚本含引号/较长时不要塞 --args 内联**——写 JSON 参数文件走 `--args-file <path>`（shell 引号拆参 r38 实证）",
+        "深入教学面：`.claude/skills/form-online-js/references/`（lifecycle-api/control-api）",
+    ],
+    priorToolReferences: [{ tool: "form.get", args: { environment, schemaCode: model }, purpose: "确认表单已发布与控件编码" }],
+    dryRun: { supported: true, command: `omc call onlinejs.compose --env ${environment} --dry-run --args-file compose.json`, notes: "dry-run 校验外壳/合并模式，不写平台" },
+    expectedReadback: { readback: { deliveryState: "DELIVERED", published: true, scriptElementPresent: true, htmlRenderCompat: { draft: { ok: true }, published: { ok: true } } } },
+    refusalRecovery: [{ code: "merge-mode-requires-shell", action: "完整外壳改 mode:'replace'（六元素模板保留，仅整体替换 customScript）" }],
+    requiresEnvironmentDerivedIds: false,
+});
 const dictionaryKeyValue = Object.freeze({
     id: "dictionary-key-value",
     title: "建一个键值字典并用其 id 作字段下拉来源",
@@ -1122,6 +1153,7 @@ export const EXECUTION_METADATA = Object.freeze({
     "data.submit": Object.freeze({ recipes: [plainSubmit, workflowSubmit], relatedTools: ["data.save", "workitem.list", "data.load"] }),
     "service.register": Object.freeze({ recipes: [restfulQueryService], relatedTools: ["service.category.list", "service.adapter_config", "service.get", "method.get"] }),
     "method.update": Object.freeze({ recipes: [bizserviceSelfCallCorp], relatedTools: ["method.get", "method.create", "service.get"] }),
+    "onlinejs.compose": Object.freeze({ recipes: [onlinejsHighlightScript], relatedTools: ["form.get", "form.draft", "form.publish"] }),
     "listview.configure": Object.freeze({ recipes: [listViewConfigure], relatedTools: ["listview.list", "listview.get", "field.list", "field.publish"] }),
     "data.list": Object.freeze({ recipes: [dataListFilter], relatedTools: ["data.load", "data.delete", "listview.configure", "field.list"] }),
     "data.delete": Object.freeze({ recipes: [dataDeleteSweep], relatedTools: ["data.list", "data.load", "data.submit"] }),

package/dist/lanes/runtime-data.js

@@ -30,7 +30,7 @@ async function resolvePublishedWorkflowCode(session, schemaCode) {
     const code = template && typeof template.workflowCode === "string" && template.workflowCode.length > 0 ? template.workflowCode : null;
     return code;
 }
-function extractBizObjectPage(value) {
+export function extractBizObjectPage(value) {
     const root = value && typeof value === "object" ? value : {};
     const candidate = root.bizObjectPage && typeof root.bizObjectPage === "object" ? root.bizObjectPage : root;
     const content = Array.isArray(candidate.content) ? candidate.content.filter((row) => !!row && typeof row === "object") : [];
@@ -341,7 +341,7 @@ export function registerRuntimeDataLane(tools) {
             // `Expected object, received array`). An array is the caller's AND-list,
             // so accept it and treat it as `filters` rather than costing a retry
             // (dogfood R1 round17).
-            filter: z.union([z.record(z.string(), z.unknown()), z.array(z.record(z.string(), z.unknown()))]).optional().describe('one clause { op, field, value? } (or an array of clauses = AND); op is one of eq, neq, gt, lt, gte, lte, like, notlike, in, notin, between, notbetween, isnull, isnotnull'),
+            filter: z.union([z.record(z.string(), z.unknown()), z.array(z.record(z.string(), z.unknown()))]).optional().describe('one clause { op, field, value? } (or an array of clauses = AND); op is one of eq, neq, gt, lt, gte, lte, like, notlike, in, notin, between, notbetween, isnull, isnotnull（camelCase 别名 equally valid: equals/notEquals/contains/isNull/isNotNull）'),
             filters: z.array(z.record(z.string(), z.unknown())).optional().describe("clauses combined with AND; a malformed clause is refused with blocker invalid-filter-DSL"),
             filterGroup: z.record(z.string(), z.unknown()).optional().describe('nested group { op:"and"|"or", clauses:[clause|group] }'),
             rawCondition: z.unknown().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-cli",
-  "version": "0.4.34",
+  "version": "0.4.36",
   "description": "CloudPivot 8.6 configuration capability CLI — governed, fail-closed, coverage-manifest bounded.",
   "type": "module",
   "bin": {
@@ -51,7 +51,7 @@
   },
   "dependencies": {
     "commander": "14.0.3",
-    "omc-core": "0.4.34",
+    "omc-core": "0.4.36",
     "proper-lockfile": "4.1.2",
     "write-file-atomic": "6.0.0",
     "zod": "^3.23.8",

package/skills/omc-capabilities.md

@@ -54,7 +54,7 @@ only the section for the capability you need —
 
 - **能做哪些事**：列出应用包、创建、改名/分组移动、删除（删除级联其模型）。
 - **工具**：`app.list`、`app.create`、`app.update`、`app.delete`
-- **边界 / 陷阱**：环境已带默认 `applicationCode`，建模**不必**先建应用；未进 intent，用 `omc call app.*`。
+- **边界 / 陷阱**：环境已带默认 `applicationCode`，建模**不必**先建应用；`app` 未进 intent 声明式面。**要把 intent 落到新应用**：`omc call app.create`（原子面）→ 把该环境的 `applicationCode` 指向新应用（`omc setup` 重配或改 `~/.config/omc/` 环境配置）→ 再 `intent plan/apply`，模型即落在新应用（用户实测摩擦：曾误以为应用能进 intent）。
 
 ## 数据字典 `dictionary`
 

package/skills/omc-start-here.md

@@ -25,7 +25,8 @@ be treated as a second source. Read this, then follow the topics it names.
 5. 键名按对象不同：模型 `schemaCode`、默认表单 `sheetCode`（可省略，默认 == 模型 code）、流程 `workflowCode`/`code`——报错会提示同义键；字段族名认不出会给「最接近的族」。
 6. **写操作串行**：同一环境不要并发写（含多个 `omc call` 并行进程——环境写锁互斥，r31 实证并行 field.create 2/3 被拒）；多个写合并为一条 `omc script` 逐行跑（进程内自动串行）；`write-lock-held` 是瞬态，等几秒重试一次即可。
 7. **单个对象优先高阶编排工具**：模型+字段用 `configure_model`（一次含全部字段），表单用 `configure_form`，列表用 `listview.configure`（**默认视图已存在，省略 code 即配置它，不要 `listview.create`**）。原子工具留给单点修改。
-8. 拿到 `detailArtifactId` 先 `artifact get <id> --summary` 看结构，再 `--keys/--jq` 取所需；`field.list`/`workflow.*` 默认面已给清单与节点摘要；`workflow.get_draft` 默认面已含 `edges`，改流程只需传 `activities`+`routes`。
+8. 拿到 `detailArtifactId` 先 `artifact get <id> --summary` 看结构，再 `--keys/--jq` 取所需；`field.list`/`workflow.*` 默认面已给清单与节点摘要；`workflow.get_draft` 默认面已含 `edges`，改流程只需传 `activities`+`routes`。**注意**：`form.get --full`、`workflow.get_draft` 的 `full:true` 大结果返回的是 `{length, sha256}` 摘要桩——真身走 `artifact get <id>`，勿把桩误判为「子表/控件没配」（用户实测陷阱）。
+9. **Windows/PowerShell 乱码**：CLI 输出是 UTF-8，PowerShell 管道默认按 GBK(936) 解码会全屏乱码——根因在终端不在 CLI。消费端先 `chcp 65001` + `[Console]::OutputEncoding=[Text.Encoding]::UTF8` 再读 CLI 输出。
 9. 每个 section 读一次即可；同一 topic 不要反复读。
 10. **复杂流程先预检角色**：读 `org.role.list`/`org.user.search`，用真实可解析对象；缺独立角色就报告阻塞，不伪造。主子表条件按规则行 `schemaCode` 回所属子模型验证。
 11. **验收不只看回读**：配置后用 opt-in `npm run test:live`（`OMC_LIVE=1`），验设计器控件/条件 Set、门户字段/列表列/选项/流程；业务规则走 `data.save(workflowCode)`→`workitem.list`→`data.submit`→`data.load`。门户断言硬重载≥2次。