@stalfh233/omc-cli 0.4.42 → 0.4.44

package/dist/lanes/b2-registration.js

@@ -148,6 +148,96 @@ function dbConnPoolCodeOf(serviceConfig) {
 function isServiceAbsent(error) {
     return error instanceof WireError && error.kind === "business" && error.errcode === 500001;
 }
+/**
+ * Rollback specs (round 17): BIZSERVICE faces split by the secret boundary —
+ * service.update replays its PLAINTEXT configJson as serviceConfig;
+ * method.update/method.delete carry CIPHERTEXT configJson (tool-encrypted,
+ * write face accepts only plaintext methodConfig) so config-carrying changes
+ * restore honestly as irreversible; name/parameter-only writes replay
+ * cleanly; method.create rolls back via method.delete. service.register /
+ * service.import / service.delete / dbconnpool.* / method.test stay OUT of
+ * the journal (batch+cipher or probe faces).
+ */
+function b2ServiceRollbackSpec(toolName) {
+    return {
+        target: (args) => (toolName.startsWith("service") ? `bizservice:${String(args.serviceCode ?? "")}` : `bizmethod:${String(args.serviceCode ?? "")}/${String(args.methodCode ?? "")}`),
+        read: async (session, args) => {
+            const serviceCode = String(args.serviceCode ?? "");
+            if (toolName === "service.update") {
+                const row = (await wireCall(session, { path: ENDPOINTS.bizServiceGetByCode, query: { serviceCode } })).data;
+                return row && Object.keys(row).length > 0 ? row : null;
+            }
+            const rows = wireRows((await wireCall(session, { path: ENDPOINTS.bizServiceMethodList, query: { serviceCode, filterFlag: "false" } })).data);
+            const row = rows.find((candidate) => String(candidate.code ?? "") === String(args.methodCode ?? ""));
+            if (!row)
+                return null;
+            const { configJson, ...rest } = row;
+            return { ...rest, hadConfig: typeof configJson === "string" && configJson.trim() !== "" };
+        },
+        inverse: ({ before, args }) => {
+            const serviceCode = String(args.serviceCode ?? "");
+            if (toolName === "service.update") {
+                if (before == null)
+                    return { kind: "calls", calls: [], notes: ["服务写入前不存在（幂等跳过），无需回滚"] };
+                const row = before;
+                let serviceConfig;
+                if (typeof row.configJson === "string" && row.configJson.trim() !== "") {
+                    try {
+                        const parsed = JSON.parse(row.configJson);
+                        if (parsed !== null && typeof parsed === "object")
+                            serviceConfig = parsed;
+                    }
+                    catch {
+                        /* unparsable config: replay without it and note */
+                    }
+                }
+                return {
+                    kind: "calls",
+                    calls: [{ tool: "service.update", args: { serviceCode, ...(row.name != null ? { name: String(row.name) } : {}), ...(row.description != null ? { description: String(row.description) } : {}), ...(serviceConfig !== undefined ? { serviceConfig } : {}) } }],
+                    ...(serviceConfig === undefined && typeof row.configJson === "string" && row.configJson.trim() !== "" ? { notes: ["before configJson 无法解析为对象，未随回滚回放——请人工核对服务配置"] } : {}),
+                };
+            }
+            const methodCode = String(args.methodCode ?? "");
+            if (toolName === "method.create") {
+                if (before == null)
+                    return { kind: "calls", calls: [{ tool: "method.delete", args: { serviceCode, methodCode } }] };
+                return { kind: "calls", calls: [], notes: ["方法写入前已存在（幂等跳过），无需回滚"] };
+            }
+            if (before == null)
+                return { kind: "calls", calls: [], notes: ["目标写入前不存在，无需回滚"] };
+            const row = before;
+            const parseParams = (value) => {
+                if (typeof value !== "string")
+                    return value !== undefined ? value : undefined;
+                try {
+                    return JSON.parse(value);
+                }
+                catch {
+                    return undefined;
+                }
+            };
+            if (toolName === "method.update") {
+                if (args.methodConfig !== undefined)
+                    return { kind: "irreversible", reason: "该写携带 methodConfig（平台以密文存储，工具只接受明文结构化配置）——密文无法安全回放；请用原明文 methodConfig 重新 method.update，或人工重配" };
+                const inputParameters = parseParams(row.inputParametersJson);
+                const outputParameters = parseParams(row.outputParametersJson);
+                return {
+                    kind: "calls",
+                    calls: [{ tool: "method.update", args: { serviceCode, methodCode, ...(row.name != null ? { name: String(row.name) } : {}), ...(inputParameters !== undefined ? { methodInputParameters: inputParameters } : {}), ...(outputParameters !== undefined ? { methodOutputParameters: outputParameters } : {}) } }],
+                };
+            }
+            if (row.hadConfig === true)
+                return { kind: "irreversible", reason: "被删除的方法携带密文 configJson——重建需要明文 methodConfig，密文无法安全回放；请用原配置重新 method.create" };
+            const inputParameters = parseParams(row.inputParametersJson);
+            const outputParameters = parseParams(row.outputParametersJson);
+            return {
+                kind: "calls",
+                calls: [{ tool: "method.create", args: { serviceCode, methodCode, name: String(row.name ?? methodCode), ...(inputParameters !== undefined ? { methodInputParameters: inputParameters } : {}), ...(outputParameters !== undefined ? { methodOutputParameters: outputParameters } : {}) } }],
+                notes: ["方法已重建；被规则/按钮引用处请回读核对"],
+            };
+        },
+    };
+}
 export function registerB2Lane(tools) {
     tools.push(defineTool({
         name: "service.get",
@@ -324,7 +414,7 @@ export function registerB2Lane(tools) {
         return { performed: { errcode: performed.errcode }, readback: { methodPresent: after != null, nameMatches: args.name === undefined || after?.name === args.name, configMatches: methodConfigPlain === undefined || after?.configJson === methodConfigPlain, inputParameters: decodeJsonColumn(after?.inputParametersJson), outputParameters: decodeJsonColumn(after?.outputParametersJson) } };
     }, (args) => {
         assertStructuredConfig(args.methodConfig, "methodConfig");
-    });
+    }, undefined, b2ServiceRollbackSpec("method.update"));
     writeTool(tools, "method.create", B2_LANE, B2_TOOLS["method.create"].scope, B2_TOOLS["method.create"].description, {
         serviceCode: z.string().min(1).describe("已存在的业务服务编码（在其下新增方法）"),
         methodCode: z.string().min(1),
@@ -371,7 +461,7 @@ export function registerB2Lane(tools) {
         return { performed: { errcode: performed.errcode }, readback: { methodPresent: after != null, nameMatches: after?.name === args.name, configMatches: methodConfigPlain === undefined || after?.configJson === methodConfigPlain, inputParameters: decodeJsonColumn(after?.inputParametersJson), outputParameters: decodeJsonColumn(after?.outputParametersJson) } };
     }, (args) => {
         assertStructuredConfig(args.methodConfig, "methodConfig");
-    });
+    }, undefined, b2ServiceRollbackSpec("method.create"));
     writeTool(tools, "method.delete", B2_LANE, B2_TOOLS["method.delete"].scope, B2_TOOLS["method.delete"].description, { serviceCode: z.string().min(1), methodCode: z.string().min(1) }, async (session, args) => {
         // Id resolution mirrors service.delete: the delete endpoint keys on the
         // row id (query, comma-separated on the platform face — this tool stays
@@ -389,7 +479,7 @@ export function registerB2Lane(tools) {
         const afterRows = wireRows((await wireCall(session, { path: ENDPOINTS.bizServiceMethodList, query: { serviceCode: args.serviceCode, filterFlag: "false" } })).data);
         const after = afterRows.find((row) => row.code === args.methodCode);
         return { performed: { errcode: performed.errcode }, readback: { absent: after == null, ...(after ? { method: after } : {}) } };
-    });
+    }, undefined, undefined, b2ServiceRollbackSpec("method.delete"));
     tools.push(defineTool({
         name: "service.category.list",
         layer: "low",
@@ -870,7 +960,7 @@ export function registerB2Lane(tools) {
         // and therefore runs after the read-only id resolution — still before
         // any update write (see the execute body).
         assertStructuredConfig(args.serviceConfig, "serviceConfig");
-    });
+    }, undefined, b2ServiceRollbackSpec("service.update"));
     writeTool(tools, "service.delete", B2_LANE, B2_TOOLS["service.delete"].scope, B2_TOOLS["service.delete"].description, { serviceCode: z.string().min(1) }, async (session, args) => {
         const found = await wireCall(session, { path: ENDPOINTS.bizServiceGetByCode, query: { serviceCode: args.serviceCode } });
         const id = found.data?.id;

package/dist/lanes/dictionary.js

@@ -30,7 +30,28 @@ function dictionaryRollbackSpec(toolName) {
                     return { kind: "irreversible", reason: "平台无字典删除端点；可回滚内容：对后续 dictionary.save 的 before 执行 plan/apply" };
                 const snapshot = before;
                 const h = snapshot.header;
-                return { kind: "calls", calls: [{ tool: "dictionary.save", args: { code: h.code, name: h.name, ...(h.classificationId ? { classificationId: h.classificationId } : {}), records: snapshot.records } }] };
+                // Wire rows store name_i18n as a JSON STRING and dictionaryType may
+                // come back as a string; the tool's input schema takes an OBJECT and
+                // the numeric literal — project before replaying (round-trip finding
+                // 2026-10-14: raw replay died as tool-input-invalid).
+                const projectI18n = (value, fallbackName) => {
+                    if (value !== null && value !== undefined && typeof value === "object")
+                        return value;
+                    if (typeof value === "string") {
+                        try {
+                            const parsed = JSON.parse(value);
+                            if (parsed !== null && typeof parsed === "object")
+                                return parsed;
+                        }
+                        catch { /* fall through to the synthesized map */ }
+                    }
+                    return { "zh-CN": fallbackName, en: fallbackName };
+                };
+                const records = (Array.isArray(snapshot.records) ? snapshot.records : []).map((record) => {
+                    const row = record;
+                    return { ...row, name_i18n: projectI18n(row.name_i18n, row.name) };
+                });
+                return { kind: "calls", calls: [{ tool: "dictionary.save", args: { id: h.id ?? undefined, code: h.code, name: h.name, dictionaryType: Number(h.dictionaryType ?? 0), ...(h.classificationId ? { classificationId: h.classificationId } : {}), records } }] };
             }
             if (before == null)
                 return { kind: "calls", calls: [] };

package/dist/lanes/field.js

@@ -36,8 +36,8 @@ function fieldRollbackSpec(toolName) {
             const row = before;
             const options = row.options !== undefined ? decodeJsonColumn(row.options, JSON_COLUMN_PASSTHROUGH) : undefined;
             if (toolName === "field.delete")
-                return { kind: "calls", calls: [{ tool: "field.create", args: { schemaCode, code, name: String(row.name ?? code), propertyType: String(row.propertyType ?? row.type), ...(options !== undefined ? { options } : {}), ...(row.choices !== undefined ? { choices: row.choices } : {}), ...(row.relativeCode !== undefined ? { relativeCode: row.relativeCode } : {}), ...(row.subFields !== undefined ? { subFields: row.subFields } : {}) } }] };
-            return { kind: "calls", calls: [{ tool: "field.update", args: { schemaCode, code, ...(row.name !== undefined ? { name: row.name } : {}), ...(row.name_i18n !== undefined ? { name_i18n: row.name_i18n } : {}), ...(options !== undefined ? { options } : {}), ...(row.choices !== undefined ? { choices: row.choices } : {}), ...(row.relativeCode !== undefined ? { relativeCode: row.relativeCode } : {}), ...(row.subFields !== undefined ? { subFields: row.subFields } : {}), ...(row.propertyEmpty !== undefined ? { propertyEmpty: row.propertyEmpty } : {}) } }] };
+                return { kind: "calls", calls: [{ tool: "field.create", args: { schemaCode, code, name: String(row.name ?? code), propertyType: String(row.propertyType ?? row.type), ...(options !== undefined ? { options } : {}), ...(row.choices !== undefined ? { choices: row.choices } : {}), ...(row.relativeCode != null ? { relativeCode: row.relativeCode } : {}), ...(row.subFields !== undefined ? { subFields: row.subFields } : {}) } }] };
+            return { kind: "calls", calls: [{ tool: "field.update", args: { schemaCode, code, ...(row.name !== undefined ? { name: row.name } : {}), ...(row.name_i18n != null ? { name_i18n: row.name_i18n } : {}), ...(options !== undefined ? { options } : {}), ...(row.choices !== undefined ? { choices: row.choices } : {}), ...(row.relativeCode != null ? { relativeCode: row.relativeCode } : {}), ...(row.subFields !== undefined ? { subFields: row.subFields } : {}), ...(row.propertyEmpty !== undefined ? { propertyEmpty: row.propertyEmpty } : {}) } }] };
         },
     };
 }

package/dist/lanes/list-view.js

@@ -6,6 +6,7 @@ import { writeTool } from "../write.js";
 import { encodeJsonColumn } from "../json-column.js";
 import { defineTool, ToolRefusalError } from "../tool-types.js";
 import { wireCall, wireRows, WireError } from "../wire.js";
+import { QUERY_ACTION_TYPE } from "omc-core/list-view-wire";
 import { resolveModelTreeNode } from "./model.js";
 import { SYSTEM_FIELD_CODES } from "../field-families.js";
 import { LIST_VIEW_LANE_CONTRACT } from "./list-view-contract.js";
@@ -263,13 +264,65 @@ export function registerListViewLane(tools) {
             };
         }),
     }));
+    /** Reverse enum map: the wire stores numeric queryActionType, the tool arg takes the enum name. */
+    const QUERY_ACTION_TYPE_NAME = new Map(Object.entries(QUERY_ACTION_TYPE.index).map(([name, index]) => [index, name]));
+    /**
+     * Project the BEFORE view model back into listview.configure args, replaying
+     * ONLY the keys the original write touched (configure semantics: omitted key =
+     * untouched, so a faithful restore never needs to resend untouched faces).
+     * Live round-trip finding 2026-10-14: replaying the RAW row (numeric
+     * queryActionType, platform-injected action keys, empty column sets) failed
+     * the tool's own input schema.
+     */
+    function projectBeforeModelToConfigureArgs(row, originalArgs, schemaCode, code) {
+        const notes = [];
+        const fieldCodes = readArray(row, "queryColumns").map((column) => String(column.propertyCode ?? "")).filter(Boolean);
+        if (fieldCodes.length === 0)
+            return { ok: false, reason: "before 视图无显式业务列（平台默认视图列集）——listview.configure 的 fieldCodes 至少 1 列，无法表达空列集；恢复平台默认列请人工在设计器重置视图" };
+        // A restore must RECLAIM the before column set as the authoritative whole:
+        // without replaceColumns the tool MERGES fieldCodes into the existing set
+        // and a column added by the rolled-back write survives the rollback.
+        const args = { schemaCode, code, fieldCodes, replaceColumns: true };
+        if (originalArgs.hideDefaultSystemFields !== undefined)
+            args.hideDefaultSystemFields = originalArgs.hideDefaultSystemFields;
+        if (originalArgs.sorts !== undefined)
+            args.sorts = row.querySorts ?? [];
+        if (originalArgs.conditions !== undefined)
+            args.conditions = row.queryConditions ?? [];
+        if (originalArgs.actions !== undefined)
+            notes.push("动作集不随回滚恢复：读面注入平台默认动作且 configure 读改写回存会累积（快照不稳定）；如需恢复动作请按原 args 显式重配");
+        if (originalArgs.defaultActions !== undefined)
+            args.defaultActions = originalArgs.defaultActions;
+        if (originalArgs.presentation !== undefined)
+            args.presentation = row.queryPresentation;
+        if (originalArgs.options !== undefined)
+            args.options = parseConditionOptions(row.options);
+        if (originalArgs.presentationType !== undefined)
+            args.presentationType = row.queryPresentationType;
+        if (originalArgs.gantt !== undefined)
+            args.gantt = row.queryGanttModel;
+        if (originalArgs.queryLayer !== undefined)
+            args.queryLayer = row.queryLayer;
+        if (originalArgs.multiTableHeaderConfig !== undefined)
+            args.multiTableHeaderConfig = parseConditionOptions(row.multiTableHeaderConfig);
+        return { ok: true, args, notes };
+    }
     const listviewRollbackSpec = (toolName) => ({
         target: (args) => `listview:${String(args.schemaCode ?? "")}/${String(args.code ?? args.schemaCode ?? "")}`,
         read: async (session, args) => {
             const code = String(args.code ?? args.schemaCode);
             const got = await wireCall(session, { path: ENDPOINTS.listQueryGet, query: { schemaCode: String(args.schemaCode), code, clientType: "PC" } });
             const model = (got.data ?? null);
-            return model && model.id ? model : null;
+            if (!model || !model.id)
+                return null;
+            // STABLE snapshot projection: the read face injects platform default
+            // queryActions (BizQueryFacadeImpl) and the configure RMW writes them
+            // back, so the raw action list grows on every write and can never
+            // byte-compare. Columns project to the authorable identity (sortKey/id
+            // are re-minted by every configure). Actions are therefore OUT of the
+            // rollback snapshot (and out of the restore) by design.
+            const columns = (Array.isArray(model.queryColumns) ? model.queryColumns : []).map((column) => ({ propertyCode: column.propertyCode, name: column.name, visible: column.visible }));
+            return { ...model, queryColumns: columns, queryActions: undefined };
         },
         inverse: ({ before, args }) => {
             const schemaCode = String(args.schemaCode);
@@ -279,10 +332,12 @@ export function registerListViewLane(tools) {
             if (before == null)
                 return { kind: "calls", calls: [], notes: ["目标在写入前不存在，无法恢复"] };
             const row = before;
-            const configure = { schemaCode, code, fieldCodes: readArray(row, "queryColumns").map((column) => String(column.propertyCode ?? "")).filter(Boolean), ...(row.querySorts !== undefined ? { sorts: row.querySorts } : {}), ...(row.queryConditions !== undefined ? { conditions: row.queryConditions } : {}), ...(row.queryActions !== undefined ? { actions: row.queryActions, replaceActions: true } : {}), ...(row.queryPresentation !== undefined ? { presentation: row.queryPresentation } : {}), ...(row.options !== undefined ? { options: parseConditionOptions(row.options) } : {}), ...(row.queryPresentationType !== undefined ? { presentationType: row.queryPresentationType } : {}), ...(row.queryGanttModel !== undefined ? { gantt: row.queryGanttModel } : {}), ...(row.queryLayer !== undefined ? { queryLayer: row.queryLayer } : {}), ...(row.multiTableHeaderConfig !== undefined ? { multiTableHeaderConfig: parseConditionOptions(row.multiTableHeaderConfig) } : {}) };
+            const configure = projectBeforeModelToConfigureArgs(row, args, schemaCode, code);
+            if (configure.ok === false)
+                return { kind: "irreversible", reason: configure.reason };
             if (toolName === "listview.configure")
-                return { kind: "calls", calls: [{ tool: "listview.configure", args: configure }] };
-            return { kind: "calls", calls: [{ tool: "listview.create", args: { schemaCode, code, name: String(row.name ?? code) } }, { tool: "listview.configure", args: configure }], notes: ["删除后重建视图，平台 id 不保证一致"] };
+                return { kind: "calls", calls: [{ tool: "listview.configure", args: configure.args }], ...(configure.notes.length > 0 ? { notes: configure.notes } : {}) };
+            return { kind: "calls", calls: [{ tool: "listview.create", args: { schemaCode, code, name: String(row.name ?? code) } }, { tool: "listview.configure", args: configure.args }], notes: ["删除后重建视图，平台 id 不保证一致", ...configure.notes] };
         },
     });
     tools.push(defineTool({

package/dist/lanes/workflow.js

@@ -967,6 +967,23 @@ async function backfillDesignerDefaults(session, schemaCode, body, callerTemplat
         }
     }
 }
+/**
+ * Rename pairs surfaced in the readback (live r51 2026-10-14): a rename mints
+ * `<original>_<n>` and DROPS the original code — re-sending the OLD code then
+ * reads as a brand-new node and APPENDS it, silently growing the flow. The
+ * readback names the pairs so the caller switches to the new code.
+ */
+function renamedActivityPairs(template, data) {
+    const callerCodes = new Set((callerActivities(template) ?? []).map((row) => activityCodeOf(row)).filter((code) => code !== ""));
+    const bodyCodes = new Set((Array.isArray(data.activities) ? data.activities : []).map((row) => String(row.activityCode ?? "")));
+    const pairs = [];
+    for (const code of bodyCodes) {
+        const match = /^(.+)_\d+$/.exec(code);
+        if (match && callerCodes.has(match[1]) && !bodyCodes.has(match[1]))
+            pairs.push({ from: match[1], to: code });
+    }
+    return pairs;
+}
 /**
  * Live 2026-10-14: a workflow node's propertyPermissions ACCEPTS
  * `required:true` on a CHILD_TABLE (子表) property at the wire level, but the
@@ -1633,7 +1650,8 @@ export function registerWorkflowLane(tools) {
             throw new ToolRefusalError({ status: "refused", blocker: "workflow-render-readback-invalid", message: "workflow.update returned no draft" });
         validateWorkflowRender(data, "workflow.update readback");
         const participantWarnings = participantReferenceWarnings(data);
-        return { performed: { errcode: performed.errcode }, readback: { workflowCode: args.code, activities: Array.isArray(data.activities) ? data.activities.length : 0, templateType: data.templateType ?? null, ...(participantWarnings.length ? { participantWarnings } : {}), workflowRenderCompat: workflowRenderCompat(data) } };
+        const renamedActivities = renamedActivityPairs(template, data);
+        return { performed: { errcode: performed.errcode }, readback: { workflowCode: args.code, activities: Array.isArray(data.activities) ? data.activities.length : 0, templateType: data.templateType ?? null, ...(participantWarnings.length ? { participantWarnings } : {}), ...(renamedActivities.length ? { renamedActivities, renamedHint: "改名会铸新码（上表 from→to）且旧码已失效——后续读写一律用 to；再用旧码 from 会被当作新节点追加" } : {}), workflowRenderCompat: workflowRenderCompat(data) } };
     }, (args) => {
         // Zero-wire refusal (ticket 77): fires in semanticGate BEFORE the
         // governed pipeline — including the rollback before-capture read.

package/dist/recipes/online-js.js

@@ -8,12 +8,12 @@ const onlinejsHighlightScript = Object.freeze({
         environment,
         schemaCode: model,
         sheetCode: "<默认表单 code == 模型 code>",
-        mode: "replace",
+        replace: true,
         source: "(function(form){ var amt = form.getControl('amountCode'); var party = form.getControl('targetCode'); function refresh(v){ party.options.style = Number(v) > 100000 ? 'color: red;' : ''; } form.on('onRendered', function(){ refresh(amt.getValue()); amt.valueChange.subscribe(function(change){ refresh(change.value); }); }); })",
     },
     preconditions: [
         "控件编码先 model.inspect/field.list 确认（示例 amountCode/targetCode 换成真实字段 code）",
-        "完整 `(function(form){…})` 生命周期外壳必须 mode:'replace'（merge 模式收外壳会被拒并指路 replace——r38 实证）",
+        "完整 `(function(form){…})` 生命周期外壳必须配 `replace:true`（默认 INCREMENTAL merge 收外壳会被拒并指路 replace——r38 实证）",
     ],
     conditionalRequirements: [
         "事件模型：`form.on('onRendered', …)` 初始化 + `<控件>.valueChange.subscribe(function(change){ change.value })` 监听；改样式用 `control.options.style`",
@@ -23,7 +23,7 @@ const onlinejsHighlightScript = Object.freeze({
     priorToolReferences: [{ tool: "form.get", args: { environment, schemaCode: model }, purpose: "确认表单已发布与控件编码" }],
     dryRun: { supported: true, command: `omc call onlinejs.compose --env ${environment} --dry-run --args-file compose.json`, notes: "dry-run 校验外壳/合并模式，不写平台" },
     expectedReadback: { readback: { deliveryState: "DELIVERED", published: true, scriptElementPresent: true, htmlRenderCompat: { draft: { ok: true }, published: { ok: true } } } },
-    refusalRecovery: [{ code: "merge-mode-requires-shell", action: "完整外壳改 mode:'replace'（六元素模板保留，仅整体替换 customScript）" }],
+    refusalRecovery: [{ code: "onlinejs-source-invalid", action: "完整外壳改 `replace:true`（六元素模板保留，仅整体替换 customScript）" }],
     requiresEnvironmentDerivedIds: false,
 });
 export const ONLINEJS_METADATA = Object.freeze({

package/dist/rollback-spec.js

@@ -59,6 +59,28 @@ export function deepDiff(before, current, path = "", limit = 40, acc = []) {
     walk(before, current, path);
     return { changes: acc, total: acc.length };
 }
+/**
+ * Drop null/undefined values from inverse-call args, recursively (live r55
+ * 2026-10-14): the wire rows carry explicit nulls (`relativeCode:null`) and
+ * `!== undefined` guards let them through — the target tool's input schema then
+ * rejects the replay as input-invalid (exit 10) and the restore stops. A null
+ * in the before row means "no value", and for every replayable config tool an
+ * ABSENT key is the same meaning with a schema the tool accepts.
+ */
+export function pruneNullish(value) {
+    if (Array.isArray(value))
+        return value.map(pruneNullish);
+    if (value !== null && typeof value === "object") {
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            if (item === null || item === undefined)
+                continue;
+            out[key] = pruneNullish(item);
+        }
+        return out;
+    }
+    return value;
+}
 /**
  * Canonical projection for restore verification: a replayed restore will
  * NEVER be byte-equal to the before snapshot — the platform stamps

package/dist/rollback.js

@@ -5,13 +5,20 @@ import { SessionManager } from "./session-manager.js";
 import { makeToolContext, buildToolRegistry } from "./tools.js";
 import { runToolCall } from "./call.js";
 import { readJournal, resolveJournalEntry, laterWritesOnTarget } from "./journal.js";
-import { canonicalForVerify, deepDiff } from "./rollback-spec.js";
+import { canonicalForVerify, deepDiff, pruneNullish } from "./rollback-spec.js";
 import { sha256 } from "./support.js";
 import { emitTransportResult } from "./command-transport.js";
 /** Pure runtime assembly: an injected context (tests) or the default one. */
 function runtime(context) {
     return context ?? makeToolContext({ sessions: new SessionManager(new ConfigStore(defaultPaths())) });
 }
+/** Nullish-prune every call arg set in an inverse plan (see pruneNullish). */
+function pruneInversePlan(plan) {
+    const pruneCalls = (calls) => calls.map((call) => ({ tool: call.tool, args: pruneNullish(call.args) }));
+    if (plan.kind === "calls")
+        return { ...plan, calls: pruneCalls(plan.calls) };
+    return plan.partial ? { ...plan, partial: pruneCalls(plan.partial) } : plan;
+}
 function resolvedEnvironment(environment) {
     return new ConfigStore(defaultPaths()).resolveEnvironment(environment).name;
 }
@@ -94,17 +101,31 @@ async function buildPlan(ref, environmentOption, context) {
             currentFingerprint,
             diff: deepDiff(before, current),
             laterWrites,
-            inverse: spec.inverse({ before, args: artifactArgs, readback: (artifact.readback ?? {}) }),
+            // Every inverse call's args are nullish-pruned centrally: wire-row nulls
+            // must never reach a tool's input schema (r55 field.update relativeCode:null).
+            inverse: pruneInversePlan(spec.inverse({ before, args: artifactArgs, readback: (artifact.readback ?? {}) })),
         },
     };
 }
 export async function planRollback(ref, options, context) {
     const loaded = await buildPlan(ref, options.environment, context);
     const { entry, plan } = loaded;
+    // Preview values are for READING — full before templates run to tens of KB
+    // and used to blow the envelope budget (live r51: plan had to be fetched
+    // back from an artifact). Truncate previews; `apply` executes the full
+    // parameters regardless.
+    const preview = (value) => {
+        if (value === undefined || value === null)
+            return value;
+        const text = typeof value === "string" ? value : JSON.stringify(value);
+        return text !== undefined && text.length > 200 ? `${text.slice(0, 200)}…（省略 ${text.length - 200}B，apply 用完整参数）` : value;
+    };
+    const script = plan.inverse.kind === "calls" ? plan.inverse.calls.map((call) => JSON.stringify({ tool: call.tool, args: { ...call.args, environment: entry.environment } })) : [];
+    const scriptOmitted = script.join("").length > 6000;
     return {
         status: "ok",
         rollbackOf: { seq: entry.seq, tool: entry.tool, target: entry.target, ts: entry.ts },
-        diff: { changedPaths: plan.diff.changes, total: plan.diff.total },
+        diff: { changedPaths: plan.diff.changes.map((change) => ({ path: change.path, before: preview(change.before), current: preview(change.current) })), total: plan.diff.total },
         ...(plan.laterWrites.length > 0
             ? { warning: `该目标在此写之后还有 ${plan.laterWrites.length} 次写（seq ${plan.laterWrites.map((w) => w.seq).join(", ")}）；本次回滚会用 before 参数覆盖这些后续变更`, laterWrites: plan.laterWrites.map((w) => ({ seq: w.seq, tool: w.tool, ts: w.ts })) }
             : {}),
@@ -113,7 +134,9 @@ export async function planRollback(ref, options, context) {
                 kind: "calls",
                 count: plan.inverse.calls.length,
                 ...(plan.inverse.notes ? { notes: plan.inverse.notes } : {}),
-                script: plan.inverse.calls.map((call) => JSON.stringify({ tool: call.tool, args: { ...call.args, environment: entry.environment } })),
+                ...(scriptOmitted
+                    ? { scriptOmitted: true, scriptHint: "恢复调用参数较大（含完整 before 模板）已省略——直接 omc rollback apply <seq> 执行即用完整参数" }
+                    : { script }),
             }
             : { kind: "irreversible", reason: plan.inverse.reason, ...(plan.inverse.partial ? { partial: plan.inverse.partial } : {}) },
         hint: "预览不写入；确认后 omc rollback apply <seq>（恢复走完整写闸门，回滚本身也会记 journal，可再回滚）",
@@ -137,7 +160,16 @@ export async function applyRollback(ref, options, context) {
             context: ctx,
             print: () => undefined,
         });
-        results.push({ tool: call.tool, exitCode, status: result.status, ...(result.deliveryState ? { deliveryState: result.deliveryState } : {}), ...(result.summary ? { summary: result.summary } : {}) });
+        results.push({
+            tool: call.tool,
+            exitCode,
+            status: result.status,
+            ...(result.deliveryState ? { deliveryState: result.deliveryState } : {}),
+            ...(result.summary ? { summary: result.summary } : {}),
+            // r55: exit-code-only results hid the reason a restore call failed
+            // (input-invalid showed as a bare "status=error"). Surface the shape.
+            ...(exitCode === 0 ? {} : { blocker: result.blocker ?? null, message: result.message ?? null, ...(result.issues !== undefined ? { issues: result.issues } : {}), ...(result.diagnostic !== undefined ? { diagnostic: result.diagnostic } : {}) }),
+        });
         if (exitCode !== 0)
             return { status: "stopped", rollbackOf: { seq: entry.seq, tool: entry.tool }, step: index + 1, results, message: `恢复调用 ${call.tool} 未成功（status=${result.status}）；已执行的调用已各自记 journal，可对已完成步骤再 plan` };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-cli",
-  "version": "0.4.42",
+  "version": "0.4.44",
   "description": "CloudPivot 8.6 configuration capability CLI — governed, fail-closed, coverage-manifest bounded.",
   "type": "module",
   "bin": {
@@ -50,9 +50,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@stalfh233/omc-fake-platform": "0.4.42",
+    "@stalfh233/omc-fake-platform": "0.4.44",
     "commander": "14.0.3",
-    "omc-core": "0.4.42",
+    "omc-core": "0.4.44",
     "proper-lockfile": "4.1.2",
     "write-file-atomic": "6.0.0",
     "zod": "^3.23.8",

package/skills/omc-business-configuration.md

@@ -42,6 +42,7 @@ node "$CLI" help omc-five-piece-flow
 
 ## 模型与字段
 
+- **code 长度平台硬限**：模型 code ≤26 字符、字段 code ≤28（`business-code-invalid` 出门校验；长业务名先起短 code，长名放 name）。
 - 模型层字段默认可空；必填、只读、可见性在表单和流程节点配置。
 - `propertyEmpty` 默认 `false`，不要把业务必填硬编码在数据模型。
 - 关联单选优先读目标模型已发布字段，明确显示字段；无映射不要写空数组字符串。
@@ -145,6 +146,11 @@ rules:
 - 配置默认视图后即可用 `data.list`；否则部分 8.6.26 读面业务列可能为 null，单行用 `data.load` 核对。
 - 读回视图用 `listview.get`（默认回列/排序/条件/动作紧凑清单）与 `listview.list`。
 
+## 流程
+
+- **两条路**：模型+表单+流程一揽子交付走**意图**（`intent` 的 `workflow` 能力，声明式一次 apply）；只动流程或想逐步控制走**低层链** `workflow.create → workflow.update（权限/节点）→ workflow.publish`，标准链配方见 `omc describe workflow.update`（含多级审批/participant 三形态/自动回填说明）。流程权限细节见下节。
+- 一个模型只能有一个流程；已有流程的模型直接 `workflow.update`，不要另建。
+
 ## 流程字段权限
 
 新增字段后，必须重新检查每个参与节点的 `propertyPermissions`：