@stalfh233/omc-cli 0.4.73 → 0.4.75

package/coverage/m1-coverage-manifest-v1.json

@@ -337,12 +337,54 @@
         "workflow.update",
         "workflow.publish",
         "workflow.bindRule",
+        "workflow.setButtons",
         "workflow.delete",
         "configure_workflow",
-        "workflow.validate"
+        "workflow.validate",
+        "org.role.users",
+        "org.role.userScope",
+        "org.roleGroup.create",
+        "org.role.create",
+        "org.role.update",
+        "org.role.addUsers",
+        "org.role.removeUsers",
+        "org.role.setUserScope",
+        "org.role.delete",
+        "org.roleGroup.delete",
+        "org.user.transferDepartment",
+        "org.department.create",
+        "org.department.update",
+        "org.department.delete",
+        "org.department.users",
+        "org.user.create",
+        "org.user.update",
+        "org.user.delete",
+        "org.user.info",
+        "org.user.departments"
       ],
       "scopes": [
-        "greenfield workflow authoring"
+        "greenfield workflow authoring",
+        "workflow node form-button checkboxes",
+        "organization role member read (role/users)",
+        "organization role member management scope read (role/get_ouscope)",
+        "organization role group create (role/add_role_group)",
+        "organization role create (role/add_role)",
+        "organization role update (role/modify_role)",
+        "organization role member add (role/add_role_user)",
+        "organization role member remove (role/strike_out_role_user)",
+        "organization role member scope update (role/update_ouscope)",
+        "organization role delete (role/strike_out_role)",
+        "organization role group delete (role/strike_out_role_group)",
+        "organization user department transfer (user/dept_transfer)",
+        "organization department create (department/add)",
+        "organization department update (department/modefied)",
+        "organization department delete (department/strike_out)",
+        "organization department member read (department/list_user)",
+        "organization user create (user/add)",
+        "organization user update (user/modify)",
+        "organization user delete (user/strike_out)",
+        "organization user read (user/info)",
+        "organization user department read (user/departments)"
       ]
     },
     {
@@ -456,10 +498,12 @@
         "rule.disable",
         "rule.delete",
         "rule.disableMany",
+        "rule.run",
         "configure_rule"
       ],
       "scopes": [
-        "enable invoke disable delete"
+        "enable invoke disable delete",
+        "manual rule execution (button trigger)"
       ]
     },
     {
@@ -816,11 +860,13 @@
         "form.get",
         "form.draft",
         "form.publish",
-        "configure_form"
+        "configure_form",
+        "form.runButton"
       ],
       "scopes": [
         "publishedHtmlJson authoritative readback",
-        "draft publish publishedHtmlJson readback"
+        "draft publish publishedHtmlJson readback",
+        "form toolbar button execution"
       ]
     },
     {

package/dist/capability-overview.js

@@ -191,13 +191,22 @@ export const CAPABILITY_CUES = Object.freeze({
     model: ["模型", "对象", "主数据", "物理删除", "汇总表", "统计表", "汇总对象", "月度汇总表", "汇总模型"],
     field: ["字段", "属性", "子表", "明细", "下拉", "单选", "多选", "附件", "人员", "部门", "日期", "数值", "文本", "关联", "公式", "计算", "计算字段", "求和", "汇总", "合计", "回主表", "超链接", "地址", "表单层", "必填", "只读", "条件必填", "恒必填", "条件只读", "恒只读", "表单必填", "表单只读"],
     form: ["表单", "页面", "布局", "控件", "只读", "显示"],
-    listview: ["列表", "视图", "查询列", "筛选", "表头", "甘特"],
-    datarule: ["字段级规则", "控件规则", "校验规则", "计算拼接", "显示规则", "规则", "type1", "type2", "type3"],
+    // r10 (2026-10-22, issue §1.4): an ask for a FORM toolbar button was
+    // answered "CLI 无按钮能力" — the capability exists (`listview.configure`
+    // `buttons` with useLocation FORM + bindAction SCRIPT). Cue the compound
+    // phrases so they outweigh businessrule's generic "按钮".
+    listview: ["列表", "视图", "查询列", "筛选", "表头", "甘特", "表单按钮", "工具栏按钮", "列表按钮", "行级按钮", "自定义按钮", "工具栏"],
+    // r10 (2026-10-22): "计划日期不能早于今天" routed to `field` (it matched
+    // 日期) because no cue named the VALIDATION intent, so the agent went to the
+    // rule graph and concluded "the platform has no today variable" — wrong, and
+    // the form designer's 提交校验 (datarule type1/checkType2) is the real face.
+    datarule: ["字段级规则", "控件规则", "校验规则", "计算拼接", "显示规则", "规则", "type1", "type2", "type3",
+        "不早于", "不能早于", "不晚于", "不能晚于", "早于今天", "晚于今天", "日期校验", "提交校验", "校验不通过", "必填校验", "正则校验", "重复校验", "长度校验"],
     // NOTE: bare "自动" was a cue (round 10 bug: "自动识别"/"自动发邮件" matched
     // businessrule and routed an UNSUPPORTED ask onto the write ladder). A business
     // rule is named by 业务规则/触发器/规则图, not by "automatic".
     businessrule: ["业务规则", "触发器", "规则图", "校验", "事件", "按钮", "定时任务", "定时触发", "定时器", "每天", "每日", "周期执行", "调度", "SCHEDULER", "TIMING_TASK"],
-    "rule-lifecycle": ["启用规则", "停用规则", "删除规则", "规则启停"],
+    "rule-lifecycle": ["启用规则", "停用规则", "删除规则", "规则启停", "触发规则", "执行规则", "跑规则", "按钮规则", "规则验收"],
     workflow: ["流程", "工作流", "审批", "节点", "待办", "流转", "参与人", "审批人", "角色", "部门负责人", "审批角色"],
     onlinejs: ["在线js", "脚本", "联动", "onload", "onvalidate"],
     bizservice: ["集成", "接口", "服务", "回调", "对接", "外部系统", "datasql", "restful"],

package/dist/cli.js

@@ -28,6 +28,7 @@ import { cmdFormDefault } from "./form-default.js";
 if (process.argv.includes("--utf8"))
     process.env.OMC_ASCII_STDOUT = "0";
 import { commandIndex, commandInventory, describeContract, describeContractFull, describeContractTool, describeExample, describeParam, describeSchemaOnly, describeTool, describeToolFull } from "./discovery.js";
+import { repeatFullDescribe } from "./describe-cache.js";
 import { buildCapabilityOverview, capabilityDetail, compactCapabilities, executableCapabilityBundle, resolveCapabilityId, DISCOVERY_AUTHORITY } from "./capability-overview.js";
 import { goalRoute } from "./goal-routes.js";
 import { absencePointer } from "./capability-absences.js";
@@ -326,8 +327,15 @@ async function cmdCall(store, args) {
         validateAgentPaths(parsedArgs);
     }
     catch (error) {
-        console.error(`--args 必须是合法 JSON：${error instanceof Error ? error.message : String(error)}（Windows PowerShell 下内联 JSON 引号转义不可靠，请改用 --args-file <path> 写入临时文件后引用）`);
-        writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: error instanceof Error ? error.message : String(error), retryable: false }));
+        const detail = error instanceof Error ? error.message : String(error);
+        // r10 F9: an out-of-root `--args-file` was reported under "--args 必须是
+        // 合法 JSON", which points the reader at the wrong flag. Name the real
+        // cause (and the configuration root) when the failure came from the file.
+        const message = /must be inside the configuration root/.test(detail)
+            ? `--args-file 越界：${detail}（只接受配置根 ${resolve(process.env.OMC_CONFIG_HOME ?? process.cwd())} 内的路径；把参数文件放进项目目录后重试）`
+            : `--args 必须是合法 JSON：${detail}（Windows PowerShell 下内联 JSON 引号转义不可靠，请改用 --args-file <path> 写入临时文件后引用）`;
+        console.error(message);
+        writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: detail, retryable: false }));
         return CLI_EXIT_CODES.invalidInput;
     }
     const registry = buildToolRegistry();
@@ -630,8 +638,13 @@ function cmdDiscovery(kind, transport, value, options = {}) {
         result = describeParam(registry, value ?? "", options.param);
     else if (options.example !== undefined)
         result = describeExample(registry, value ?? "", typeof options.example === "string" ? options.example : undefined);
-    else if (options.full)
-        result = describeToolFull(registry, value ?? "");
+    else if (options.full) {
+        const full = describeToolFull(registry, value ?? "");
+        // r9: the same `--full` contract was re-shipped 8 times (134 KB) while the
+        // caller only wanted to re-check a shape. Within a project session the
+        // second identical read returns an artifact reference instead of the body.
+        result = full ? (repeatFullDescribe(value ?? "", full) ?? full) : full;
+    }
     else
         result = describeTool(registry, value ?? "");
     if (!result) {
@@ -1168,7 +1181,15 @@ const request = requestId();
 main().then((code) => {
     // Commands that own their stdout never grow a trailing envelope. `--version`/
     // `-V` are here because their short-circuit already wrote the bare version.
-    if (argv[2] === "call" || argv[2] === "script" || argv[2] === "artifact" || argv[2] === "commands" || argv[2] === "describe" || argv[2] === "contract" || argv[2] === "capabilities" || argv[2] === "capability" || argv[2] === "next" || argv[2] === "usage" || argv[2] === "intent" || argv[2] === "help" || argv[2] === "--version" || argv[2] === "-V") {
+    // Composers (`form-default`, `compute`, `rule-when`, `approval-flow`) own their
+    // stdout exactly like `call` does. Without them in this list every composer
+    // printed its real envelope AND a trailing `{"ok":true,"result":{}}` — r10 read
+    // that as a second, empty answer. `rollback` / `env` emit their own
+    // envelope (or, for `env --json`, their own JSON) and were printing a second
+    // empty envelope after it (live 2026-10-23: `omc rollback apply` answered two
+    // lines, violating the one-envelope stdout contract).
+    const ownsStdout = ["call", "script", "artifact", "commands", "describe", "contract", "capabilities", "capability", "next", "usage", "intent", "help", "form-default", "compute", "rule-when", "approval-flow", "rollback", "env", "--version", "-V"];
+    if (ownsStdout.includes(argv[2] ?? "")) {
         completeUsage(code);
         finish(code);
         return;

package/dist/describe-cache.js

@@ -0,0 +1,91 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { createHash } from "node:crypto";
+import { artifactRoot, joinConfigRoot } from "./command-transport.js";
+import { createArtifact, readArtifact } from "./artifacts.js";
+import { projectSessionActive } from "./usage-log.js";
+/**
+ * Repeat-read suppression for `describe <tool> --full`.
+ *
+ * r9 (2026-10-22) spent 134 KB on EIGHT `describe rule.save --full` calls: the
+ * same contract, unchanged, re-shipped every time the caller re-checked a shape.
+ * The hint at the bottom of the response ("先试 --example/--param") did not help
+ * because a caller editing a graph wants the authoritative schema again, and
+ * `--full` had no memory.
+ *
+ * The first `--full` in a project still returns the whole contract and spills a
+ * copy to an artifact. A later identical read returns `{artifactId, sha256,
+ * bytes, fetch}` instead: the caller can project the one key it needs with
+ * `omc artifact get <id> --jq <path>` instead of paying for the whole body
+ * again. Identity is the CONTENT hash, so a changed contract (new version, new
+ * field) always returns the full body again.
+ *
+ * Scoped to a project session by construction: the cache only exists where the
+ * usage log does (`.omc-env` in the working directory, or OMC_USAGE_LOG). Repo
+ * tests and the golden master run without it, so their bytes stay stable.
+ */
+const CACHE_FILE = "describe-full-cache.json";
+const CACHE_TTL_MS = 6 * 60 * 60 * 1000;
+function cachePath() {
+    return resolve(joinConfigRoot(), ".omc", CACHE_FILE);
+}
+function readCache() {
+    try {
+        const parsed = JSON.parse(readFileSync(cachePath(), "utf8"));
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function writeCache(cache) {
+    try {
+        const path = cachePath();
+        mkdirSync(join(path, ".."), { recursive: true });
+        writeFileSync(path, `${JSON.stringify(cache)}\n`, { mode: 0o600 });
+    }
+    catch {
+        // Best-effort: a cache write must never fail the command.
+    }
+}
+/**
+ * Return the compact repeat-read face for `tool`, or `undefined` when this is
+ * the first read (or the contract changed). Records the new entry as a side
+ * effect so the NEXT read is compact.
+ */
+export function repeatFullDescribe(tool, result) {
+    // No project session (repo tests, golden master, one-off runs) ⇒ no cache:
+    // those callers need byte-stable output, and a cache write would be litter.
+    if (!projectSessionActive())
+        return undefined;
+    const body = `${JSON.stringify(result, null, 2)}\n`;
+    const bytes = Buffer.byteLength(body, "utf8");
+    const digest = createHash("sha256").update(body).digest("hex");
+    const cache = readCache();
+    const previous = cache[tool];
+    if (previous && previous.sha256 === digest && Date.now() - previous.at < CACHE_TTL_MS) {
+        // A pruned artifact would turn the summary into a dead end; re-ship instead.
+        if (existsSync(join(artifactRoot(), `${previous.artifactId}.artifact`))) {
+            try {
+                readArtifact(artifactRoot(), previous.artifactId);
+                return {
+                    name: tool,
+                    repeated: true,
+                    artifactId: previous.artifactId,
+                    sha256: digest,
+                    bytes,
+                    fetch: `omc artifact get ${previous.artifactId} --summary（再 --keys/--jq 取需要的键）`,
+                    note: `本项目的会话里已读过同一个契约（${bytes}B，内容 sha256 未变），本次不再重发全文；用 fetch 里的命令按需投影`,
+                };
+            }
+            catch {
+                // fall through to a full re-ship
+            }
+        }
+    }
+    const artifact = createArtifact(artifactRoot(), body);
+    cache[tool] = { tool, sha256: digest, bytes, artifactId: artifact.artifactId, at: Date.now() };
+    writeCache(cache);
+    return undefined;
+}
+//# sourceMappingURL=describe-cache.js.map

package/dist/endpoints.js

@@ -58,6 +58,30 @@ export const ENDPOINTS = {
     businessRuleNodeRunMap: "/api/api/app/businessrule/node_run_map",
     businessRuleEnable: "/api/api/app/businessrule/enable",
     businessRuleDelete: "/api/api/app/businessrule/delete",
+    /**
+     * Manual execution of a CUSTOM-trigger rule (the list/form button path).
+     * Live 2026-10-23 (AI-Platform 1.1.25, Playwright capture of a
+     * `listview.configure` BUSINESS_RULE row button):
+     *   POST /api/api/launcher/domain_service_runtime/<schemaCode>/<ruleCode>
+     *   body {schemaCode, ids:[bizObjectId...], ruleCode, consolidation:false}
+     *   → {errcode:0, errmsg:"Execution Completed", data:[<pre-execution bizObjects>], traceId}
+     * The response objects are the PRE-execution snapshot (the frontend sends
+     * reacquireDataFromDb:false), so effects must be read back separately.
+     */
+    ruleRuntimeExecuteBase: "/api/api/launcher/domain_service_runtime",
+    /**
+     * Form-toolbar button execution — a DIFFERENT face from the list-button one.
+     * Live 2026-10-23 (1.1.25, Playwright capture of a `triggerType=FORM` button
+     * rendered on /form/detail):
+     *   POST /api/api/runtime/form/executeCustomButton
+     *   {bizButtonModel:<the h_biz_button row>, bizObjectList:[<full bizObject>],
+     *    reacquireDataFromDb:true}
+     * The list button posts ids to the launcher path instead; the two are not
+     * interchangeable.
+     */
+    runtimeFormExecuteCustomButton: "/api/api/runtime/form/executeCustomButton",
+    /** Designer's form-button inventory: form trigger infos + their BizButtonModels. */
+    systemGetCustomButtons: "/api/api/system/getCustomButtons",
     dataRuleCreate: "/api/api/app/bizdatarule/create",
     dataRuleList: "/api/api/app/bizdatarule/list",
     dataRuleUpdate: "/api/api/app/bizdatarule/update",
@@ -120,6 +144,28 @@ export const ENDPOINTS = {
     organizationRoleList: "/api/api/organization/role/list",
     organizationDepartmentTree: "/api/api/organization/department/tree",
     organizationUserSearch: "/api/api/organization/user/search",
+    organizationRoleUsers: "/api/api/organization/role/users",
+    organizationRoleGetOuScope: "/api/api/organization/role/get_ouscope",
+    organizationRoleUpdateOuScope: "/api/api/organization/role/update_ouscope",
+    organizationRoleAddGroup: "/api/api/organization/role/add_role_group",
+    organizationRoleAdd: "/api/api/organization/role/add_role",
+    organizationRoleModify: "/api/api/organization/role/modify_role",
+    organizationRoleGet: "/api/api/organization/role/get",
+    organizationDepartmentAdd: "/api/api/organization/department/add",
+    organizationDepartmentModify: "/api/api/organization/department/modefied",
+    organizationDepartmentDelete: "/api/api/organization/department/strike_out",
+    organizationDepartmentGet: "/api/api/organization/department/get_dept_info",
+    organizationDepartmentUsers: "/api/api/organization/department/list_user",
+    organizationUserAdd: "/api/api/organization/user/add",
+    organizationUserModify: "/api/api/organization/user/modify",
+    organizationUserDelete: "/api/api/organization/user/strike_out",
+    organizationUserInfo: "/api/api/organization/user/info",
+    organizationUserDepartments: "/api/api/organization/user/departments",
+    organizationRoleAddUser: "/api/api/organization/role/add_role_user",
+    organizationRoleRemoveUser: "/api/api/organization/role/strike_out_role_user",
+    organizationRoleDelete: "/api/api/organization/role/strike_out_role",
+    organizationRoleGroupDelete: "/api/api/organization/role/strike_out_role_group",
+    organizationUserDeptTransfer: "/api/api/organization/user/dept_transfer",
     listQueryCreate: "/api/api/app/query/create",
     listQueryGet: "/api/api/app/query/get",
     listQueryUpdate: "/api/api/app/query/update",

package/dist/form-default.js

@@ -14,9 +14,14 @@
  * 将要做的修改。
  */
 import { runToolCall } from "./call.js";
+import { readFileSync } from "node:fs";
+import { readArtifact } from "./artifacts.js";
+import { artifactRoot } from "./command-transport.js";
 import { envelope, requestId, classifyResult, CLI_EXIT_CODES } from "./cli-contract.js";
 import { writeEnvelope } from "./cli-output.js";
 import { argvValue } from "./args.js";
+/** Sub-calls must not print their own envelopes (the composer owns stdout). */
+const silent = () => { };
 /** 从 form.get 结果提取控件数组（draft 优先，published 兜底）。 */
 function toControlList(value) {
     if (Array.isArray(value))
@@ -35,6 +40,64 @@ function extractControls(formGet) {
         return { controls: published, face: "published" };
     return undefined;
 }
+/**
+ * `form.get` summarizes large JSON as `{length, sha256}` (token diet), and with
+ * `controls:true` even the control LISTS come back as `{keys, sha256}` — treating
+ * those as arrays yields "2 controls". The raw faces ride the detail artifact.
+ *
+ * r10 (2026-10-22) F1: `form-default --apply` cloned that摘要 as the draft, wrote
+ * a 2-control form, and `form.publish`'s degrade guard then refused its own
+ * output (`form-publish-degrade`, 7 identical failures).
+ */
+function readDetailForm(result) {
+    // In-process composers see `detailFile` (the tool's own artifact path); the CLI
+    // transport rewrites it to `detailArtifactId` before printing. Handle both.
+    const raw = (() => {
+        if (typeof result?.detailArtifactId === "string") {
+            try {
+                return readArtifact(artifactRoot(), result.detailArtifactId).content.toString("utf8");
+            }
+            catch {
+                return undefined;
+            }
+        }
+        if (typeof result?.detailFile === "string") {
+            try {
+                return readFileSync(result.detailFile, "utf8");
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return undefined;
+    })();
+    if (raw === undefined)
+        return undefined;
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function parseJsonColumn(value) {
+    if (typeof value !== "string")
+        return value;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The published control map `{ <controlKey>: {key,type,options} }`, raw. */
+function controlMap(value) {
+    const parsed = parseJsonColumn(value);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return undefined;
+    return parsed;
+}
 export async function cmdFormDefault(args) {
     const request = requestId();
     const flag = (name) => argvValue(args, name);
@@ -51,7 +114,7 @@ export async function cmdFormDefault(args) {
     if (!schema || !field || value === undefined)
         return invalid("--schema/--field/--default 均必填");
     // 1) 读控件（单控件投影，拿全对象含 options）
-    const getOutcome = await runToolCall("form.get", { args: { schemaCode: schema, controls: [field], ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const getOutcome = await runToolCall("form.get", { args: { schemaCode: schema, controls: [field], ...(environment ? { environment } : {}) }, requestId: request, environment, print: silent });
     if (getOutcome.exitCode !== 0) {
         const classified = classifyResult(getOutcome.result);
         writeEnvelope(envelope(classified.status, getOutcome.result, request, classified.error));
@@ -73,34 +136,58 @@ export async function cmdFormDefault(args) {
         writeEnvelope(envelope("ok", { schemaCode: schema, field, from: options.defaultValue === value ? undefined : control, to: nextControl, dryRun: true, note: "--apply 执行 form.draft→form.publish" }, request));
         return 0;
     }
-    // 2) form.draft：需要完整 draftAttributesJson——单控件投影不够，取全量控件面
-    const getAll = await runToolCall("form.get", { args: { schemaCode: schema, controls: true, ...(environment ? { environment } : {}) }, requestId: request, environment });
+    // 2) form.draft：需要完整 draftAttributesJson——单控件投影不够，取发布面的全量控件
+    // 图。`controls:true` / `full:true` 的大字段在 CLI 面被摘要成 {length,sha256}
+    // 或 {keys,sha256}，必须从 detail artifact 取原始 JSON。
+    const getAll = await runToolCall("form.get", { args: { schemaCode: schema, full: true, ...(environment ? { environment } : {}) }, requestId: request, environment, print: silent });
     if (getAll.exitCode !== 0) {
         const classified = classifyResult(getAll.result);
         writeEnvelope(envelope(classified.status, getAll.result, request, classified.error));
         return getAll.exitCode;
     }
-    const fullExtracted = extractControls(getAll.result ?? {});
-    if (!fullExtracted)
+    const detail = readDetailForm(getAll.result) ?? (getAll.result ?? {});
+    const publishedAttrs = controlMap(detail.publishedAttributesJson);
+    const draftAttrs = controlMap(detail.draftAttributesJson);
+    const publishedCount = publishedAttrs ? Object.keys(publishedAttrs).length : 0;
+    const draftCount = draftAttrs ? Object.keys(draftAttrs).length : 0;
+    // Clone the COMPLETE face: a partial draft (or a 摘要) would shrink the form and
+    // trip the platform's own degrade guard at publish time.
+    const base = draftAttrs && draftCount >= publishedCount && draftCount > 0 ? draftAttrs : publishedAttrs;
+    if (!base || Object.keys(base).length === 0)
         return invalid("form.get 未取到任何控件（表单为空？先发布默认表单）");
-    const fullControls = fullExtracted.controls.map((c) => (String(c.key ?? c.dataItemName ?? "") === field ? nextControl : c));
+    const controlKey = Object.keys(base).find((key) => key === field)
+        ?? Object.keys(base).find((key) => String(base[key].key ?? "") === field);
+    if (!controlKey)
+        return invalid(`发布面里没有字段 "${field}" 的控件——先 field.publish 并 form.publish`);
+    const cloned = JSON.parse(JSON.stringify(base));
+    const targetControl = cloned[controlKey];
+    const targetOptions = (targetControl.options ?? {});
+    targetOptions.defaultValue = Array.isArray(targetOptions.defaultValue) ? [value] : value;
+    targetControl.options = targetOptions;
+    const draftViewRaw = detail.publishedViewJson ?? detail.draftViewJson;
+    const draftView = parseJsonColumn(draftViewRaw);
     const draftOutcome = await runToolCall("form.draft", {
-        args: { schemaCode: schema, draftAttributesJson: JSON.stringify(fullControls), ...(environment ? { environment } : {}) },
-        requestId: request, environment,
+        args: {
+            schemaCode: schema,
+            draftAttributesJson: JSON.stringify(cloned),
+            ...(draftView !== undefined ? { draftViewJson: JSON.stringify(draftView) } : {}),
+            ...(environment ? { environment } : {}),
+        },
+        requestId: request, environment, print: silent,
     });
     if (draftOutcome.exitCode !== 0) {
         const classified = classifyResult(draftOutcome.result);
         writeEnvelope(envelope(classified.status, draftOutcome.result, request, classified.error));
         return draftOutcome.exitCode;
     }
-    const publishOutcome = await runToolCall("form.publish", { args: { schemaCode: schema, ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const publishOutcome = await runToolCall("form.publish", { args: { schemaCode: schema, ...(environment ? { environment } : {}) }, requestId: request, environment, print: silent });
     if (publishOutcome.exitCode !== 0) {
         const classified = classifyResult(publishOutcome.result);
         writeEnvelope(envelope(classified.status, publishOutcome.result, request, classified.error));
         return publishOutcome.exitCode;
     }
     // 3) 权威回读
-    const verify = await runToolCall("form.get", { args: { schemaCode: schema, controls: [field], ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const verify = await runToolCall("form.get", { args: { schemaCode: schema, controls: [field], ...(environment ? { environment } : {}) }, requestId: request, environment, print: silent });
     const verifyResult = verify.result ?? {};
     const verifyControls = extractControls(verifyResult)?.controls ?? [];
     const verifyControl = verifyControls.find((c) => String(c.key ?? c.dataItemName ?? "") === field);