@stalfh233/omc-cli 0.4.73 → 0.4.75

package/dist/form-support.js

@@ -665,6 +665,171 @@ export function refuseEmptyCallerLayout(args) {
         message: `显式提供的 ${emptyFaces.join("、")} 是空布局（"[]"/"{}"）——平台设计器 Save 会把草稿清成该形态（非无损），照写会丢控件。若确要清空布局请显式传 allowEmptyLayout:true；若是设计器 Save 后的修复，先用表单版本历史（/api/api/app/bizsheet/history/list）取回完好版本原文再写回`,
     });
 }
+/**
+ * Form-toolbar buttons are a THREE-LAYER configuration (live 2026-10-23, 1.1.25
+ * + backend source):
+ *  1. `bizsheet.options.customButtonJson` (a STRINGIFIED JSON array) is the
+ *     authoring face — `ModelManagementFacadeImpl.publishBizForm:1022` turns it
+ *     into `h_biz_button` rows with `triggerType=FORM`, `triggerCode=<formCode>`
+ *     at publish time.
+ *  2. Those rows are what `ActionPermissionHandler` reads
+ *     (`getByTriggerTypeAndCode(FORM, bizCode)`).
+ *  3. Whether a button shows at a given node is filtered by the workflow
+ *     activity's `buttonPermission.customBtns[].enabled` (the designer's
+ *     「表单操作」 checkboxes) plus `showPermCode`.
+ *
+ * `customButtonJson` MUST stay a string inside the options JSON — passing the
+ * array inline makes the platform answer 50000 (fastjson
+ * "syntax error, position at 0, name customButtonJson").
+ */
+export const FORM_BUTTON_LOCATIONS = Object.freeze(["FORM", "ROW", "LIST"]);
+const FORM_BUTTON_BIND_ACTIONS = new Set([
+    "LIST",
+    "FORM",
+    "ADD_DATA",
+    "FLOW",
+    "BUSINESS_RULE",
+    "SCRIPT",
+    "CUSTOM_PAGE",
+    "WORKFLOW_CENTER_PAGE",
+    "FRONT_EVENT",
+    "AGENT",
+]);
+const FORM_BUTTON_OPERATE_TYPES = new Set(["WITH_VIEW", "WITH_OUT_VIEW"]);
+/** Validate the caller's form-button list before any wire (same shape as listview buttons, FORM location). */
+export function validateFormButtons(buttons, tool) {
+    if (!Array.isArray(buttons))
+        throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons 必须是数组（BizButtonModel 数组）` });
+    const seen = new Set();
+    return buttons.map((raw, index) => {
+        const button = (raw ?? {});
+        const code = typeof button.code === "string" ? button.code : "";
+        const name = typeof button.name === "string" ? button.name : "";
+        if (code === "")
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}].code 必填（表单按钮的唯一标识，流程节点按它勾选）` });
+        if (name === "")
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}].name 必填（设计器/表单页显示名）` });
+        if (seen.has(code))
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-duplicate", message: `${tool}: buttons 里 code ${code} 重复` });
+        seen.add(code);
+        const useLocation = typeof button.useLocation === "string" ? button.useLocation : "FORM";
+        if (!FORM_BUTTON_LOCATIONS.includes(useLocation))
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}].useLocation 只能是 ${FORM_BUTTON_LOCATIONS.join("|")}（表单工具栏按钮用 FORM）` });
+        const bindAction = typeof button.bindAction === "string" ? button.bindAction : "";
+        if (!FORM_BUTTON_BIND_ACTIONS.has(bindAction))
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}].bindAction 必须是 ButtonBindAction 名（SCRIPT/BUSINESS_RULE/FLOW/FORM/ADD_DATA/CUSTOM_PAGE/…）` });
+        const operateType = typeof button.operateType === "string" ? button.operateType : "";
+        if (!FORM_BUTTON_OPERATE_TYPES.has(operateType))
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}].operateType 必须是 WITH_VIEW 或 WITH_OUT_VIEW` });
+        if (bindAction === "SCRIPT" || bindAction === "BUSINESS_RULE" || bindAction === "FLOW" || bindAction === "ADD_DATA" || bindAction === "FORM") {
+            const actionConfig = button.actionConfig;
+            const record = typeof actionConfig === "string" ? (() => { try {
+                return JSON.parse(actionConfig);
+            }
+            catch {
+                return undefined;
+            } })() : actionConfig;
+            const config = record && typeof record === "object" && !Array.isArray(record) ? record : undefined;
+            if (bindAction === "SCRIPT" && typeof config?.scriptData !== "string")
+                throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}] SCRIPT 需要 actionConfig.scriptData（前端脚本源码字符串）` });
+            if ((bindAction === "BUSINESS_RULE" || bindAction === "FLOW") && (typeof button.targetCode !== "string" || button.targetCode === ""))
+                throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: buttons[${index}] ${bindAction} 需要 targetCode` });
+        }
+        return {
+            ...button,
+            code,
+            name,
+            useLocation,
+            bindAction,
+            operateType,
+            // The platform stores actionConfig as a string; a caller's object is
+            // serialized once here (double-encoding breaks the renderer).
+            ...(button.actionConfig !== undefined && typeof button.actionConfig !== "string" ? { actionConfig: JSON.stringify(button.actionConfig) } : {}),
+            sortKey: typeof button.sortKey === "number" ? button.sortKey : index,
+        };
+    });
+}
+function decodeOptionsColumn(value) {
+    if (value === null || value === undefined || value === "")
+        return {};
+    if (typeof value === "object" && !Array.isArray(value))
+        return { ...value };
+    if (typeof value === "string") {
+        try {
+            const parsed = JSON.parse(value);
+            if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+                return { ...parsed };
+        }
+        catch {
+            // A corrupt options column must not silently drop other options.
+        }
+    }
+    return {};
+}
+/**
+ * Merge the caller's form buttons into the sheet `options` column. Returns the
+ * options JSON string to POST (undefined = leave the column untouched).
+ */
+export function mergeFormOptionsWithButtons(existingOptions, input, tool) {
+    const hasButtons = input.buttons !== undefined;
+    const hasJson = input.customButtonJson !== undefined;
+    const removeCodes = input.removeButtonCodes ?? [];
+    if (hasButtons && hasJson)
+        throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-ambiguous", message: `${tool}: buttons 与 customButtonJson 只能给一种（buttons 数组更好读；customButtonJson 用于原样透传读回值）` });
+    if (!hasButtons && !hasJson && removeCodes.length === 0)
+        return undefined;
+    let incoming = [];
+    if (hasButtons) {
+        incoming = validateFormButtons(input.buttons, tool);
+    }
+    else if (hasJson) {
+        const raw = String(input.customButtonJson);
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: customButtonJson 必须是 JSON 数组字符串` });
+        }
+        incoming = validateFormButtons(parsed, tool);
+    }
+    const options = decodeOptionsColumn(existingOptions);
+    // Default MERGE: an upsert by `code` so a caller can add or edit ONE button
+    // without re-sending the whole list (and without a read-modify-write race).
+    // `replace` restores the whole-list semantics.
+    const mode = input.buttonsMode ?? "merge";
+    const existing = readFormButtons(options) ?? [];
+    let final;
+    if (mode === "replace") {
+        final = incoming;
+    }
+    else {
+        const byCode = new Map(existing.map((button) => [String(button.code ?? ""), button]));
+        for (const button of incoming)
+            byCode.set(String(button.code), { ...(byCode.get(String(button.code)) ?? {}), ...button });
+        for (const code of removeCodes)
+            byCode.delete(String(code));
+        final = [...byCode.values()].map((button, index) => ({ ...button, sortKey: typeof button.sortKey === "number" ? button.sortKey : index }));
+    }
+    if (removeCodes.length > 0 && mode === "replace")
+        throw new ToolRefusalError({ status: "refused", blocker: "form-buttons-invalid", message: `${tool}: removeButtonCodes 只用于 buttonsMode:"merge"（replace 已用新列表整体替换）` });
+    options.customButtonJson = JSON.stringify(final);
+    return JSON.stringify(options);
+}
+/** The caller's buttons from a READ face (parsed array, or null when absent). */
+export function readFormButtons(options) {
+    const record = decodeOptionsColumn(options);
+    const raw = record.customButtonJson;
+    if (typeof raw !== "string" || raw === "")
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        return Array.isArray(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
 export async function executeFormDraftWrite(session, args) {
     if (args.draftHtmlJson !== undefined) {
         assertHtmlRender(args.draftHtmlJson, { schemaCode: args.schemaCode, sheetCode: args.sheetCode, face: "draftHtmlJson" });
@@ -856,6 +1021,11 @@ export async function executeFormDraftWrite(session, args) {
         if (composed !== undefined)
             assertFormulasSurvivedRebuild(composed, previousAttributes, { schemaCode: args.schemaCode, sheetCode: args.sheetCode });
     }
+    // Form toolbar buttons live on `options.customButtonJson`; the publish step
+    // turns them into h_biz_button rows (triggerType=FORM). Merge rather than
+    // replace so unrelated options (presetButtonManage, sheetPresetButtonManage)
+    // survive.
+    const mergedOptions = mergeFormOptionsWithButtons(pre?.options, { buttons: args.buttons, customButtonJson: args.customButtonJson, buttonsMode: args.buttonsMode, removeButtonCodes: args.removeButtonCodes }, "form.draft");
     const payload = {
         ...(pre ?? {}),
         schemaCode: args.schemaCode,
@@ -863,6 +1033,7 @@ export async function executeFormDraftWrite(session, args) {
         name: pre?.name ?? args.sheetCode,
         sheetType: pre?.sheetType ?? 0,
         published: false,
+        ...(mergedOptions !== undefined ? { options: mergedOptions } : {}),
         // Draft writes are full-row updates, but they must not destroy the
         // currently published face. Publish promotion is a separate operation;
         // preserving these columns keeps the published form usable if the draft
@@ -878,7 +1049,115 @@ export async function executeFormDraftWrite(session, args) {
     const performed = await wireCall(session, { path: ENDPOINTS.sheetUpdate, method: "POST", body: payload });
     const readback = await wireCall(session, { path: ENDPOINTS.sheetGet, query: { schemaCode: args.schemaCode, sheetCode: args.sheetCode } });
     const sheet = (readback.data ?? {});
-    return { performed: { errcode: performed.errcode }, readback: { hasDraft: sheet.existDraft === true || typeof sheet.draftViewJson === "string", ...(args.rebuild === true && previousAttributes ? { rebuildPreservedControls } : {}) } };
+    const formButtons = readFormButtons(sheet.options);
+    return {
+        performed: { errcode: performed.errcode },
+        readback: {
+            hasDraft: sheet.existDraft === true || typeof sheet.draftViewJson === "string",
+            ...(formButtons !== null ? { formButtons, formButtonCodes: formButtons.map((button) => String(button.code ?? "")) } : {}),
+            ...(mergedOptions !== undefined ? { customButtonJsonWritten: true } : {}),
+            ...(args.rebuild === true && previousAttributes ? { rebuildPreservedControls } : {}),
+        },
+    };
+}
+/** Schema-wide FORM buttons (code -> row) — the set a workflow node can tick. */
+export async function readSchemaFormButtons(session, schemaCode) {
+    const inventory = (await wireCall(session, { path: ENDPOINTS.systemGetCustomButtons, query: { schemaCode } })).data;
+    const triggers = Array.isArray(inventory?.formCustomButtons) ? inventory.formCustomButtons : [];
+    const byCode = {};
+    for (const trigger of triggers) {
+        const buttons = Array.isArray(trigger.buttonModels) ? trigger.buttonModels : [];
+        for (const button of buttons) {
+            const code = String(button.code ?? "");
+            if (code !== "" && byCode[code] === undefined)
+                byCode[code] = button;
+        }
+    }
+    return byCode;
+}
+/**
+ * Execute ONE form-toolbar button on ONE record — the exact request the portal
+ * posts when that button is clicked (live 2026-10-23, Playwright capture,
+ * AI-Platform 1.1.25):
+ *   POST /api/api/runtime/form/executeCustomButton
+ *   {bizButtonModel:<the h_biz_button row>, bizObjectList:[<full bizObject>],
+ *    reacquireDataFromDb:true}
+ * Distinct from the list-row button face (`launcher/domain_service_runtime`
+ * with `ids[]`): form buttons carry the whole record.
+ */
+export async function executeFormRunButtonWrite(session, args) {
+    const inventory = (await wireCall(session, { path: ENDPOINTS.systemGetCustomButtons, query: { schemaCode: args.schemaCode } })).data;
+    const triggers = Array.isArray(inventory?.formCustomButtons) ? inventory.formCustomButtons : [];
+    const trigger = triggers.find((row) => String(row.triggerCode ?? "") === args.sheetCode) ?? triggers[0];
+    const buttons = Array.isArray(trigger?.buttonModels) ? trigger.buttonModels : [];
+    if (buttons.length === 0)
+        throw new ToolRefusalError({
+            status: "refused",
+            blocker: "form-button-absent",
+            schemaCode: args.schemaCode,
+            sheetCode: args.sheetCode,
+            message: `表单 ${args.sheetCode} 没有自定义按钮（getCustomButtons 的 buttonModels 为空）——先用 form.publish 传 buttons（写 options.customButtonJson）生成 h_biz_button(triggerType=FORM)`,
+        });
+    const button = buttons.find((row) => String(row.code ?? "") === args.buttonCode);
+    if (!button)
+        throw new ToolRefusalError({
+            status: "refused",
+            blocker: "form-button-absent",
+            schemaCode: args.schemaCode,
+            sheetCode: args.sheetCode,
+            buttonCode: args.buttonCode,
+            available: buttons.map((row) => String(row.code ?? "")),
+            message: `表单 ${args.sheetCode} 没有按钮 ${args.buttonCode}；可用：${buttons.map((row) => String(row.code ?? "")).join("、")}`,
+        });
+    const loaded = (await wireCall(session, { path: ENDPOINTS.runtimeFormLoad, query: { schemaCode: args.schemaCode, sheetCode: args.sheetCode, objectId: args.bizObjectId, isMobile: "false" } })).data;
+    const bizObject = (loaded?.bizObject ?? null);
+    if (!bizObject)
+        throw new ToolRefusalError({
+            status: "refused",
+            blocker: "form-object-absent",
+            schemaCode: args.schemaCode,
+            bizObjectId: args.bizObjectId,
+            message: `读不到记录 ${args.bizObjectId} 的 bizObject（runtime/form/load 无 bizObject）——先 data.load 核对 bizObjectId`,
+        });
+    // The portal flattens the org/person fields to id strings before posting
+    // (form-detail's customButtonRule: `c.owner=(c.owner?.id)||""` etc.). Sending
+    // the loaded objects makes the platform answer 10009
+    // "Cannot deserialize value of type java.lang.String from Object value".
+    const idOf = (value) => {
+        if (typeof value === "string")
+            return value;
+        if (value && typeof value === "object" && !Array.isArray(value)) {
+            const id = value.id;
+            return typeof id === "string" ? id : "";
+        }
+        return "";
+    };
+    const submitted = { ...bizObject };
+    for (const key of ["owner", "creater", "modifier", "ownerDeptId", "createdDeptId"]) {
+        if (submitted[key] !== undefined)
+            submitted[key] = idOf(submitted[key]);
+    }
+    submitted.formMode = loaded?.formMode ?? "isRead";
+    submitted.activityCode = loaded?.activityCode ?? null;
+    const performed = await wireCall(session, {
+        path: ENDPOINTS.runtimeFormExecuteCustomButton,
+        method: "POST",
+        body: { bizButtonModel: button, bizObjectList: [submitted], reacquireDataFromDb: true },
+    });
+    return {
+        performed: { errcode: performed.errcode, buttonCode: args.buttonCode, bizObjectId: args.bizObjectId },
+        readback: {
+            schemaCode: args.schemaCode,
+            sheetCode: args.sheetCode,
+            buttonCode: args.buttonCode,
+            buttonName: String(button.name ?? ""),
+            bindAction: String(button.bindAction ?? ""),
+            targetCode: button.targetCode ?? null,
+            errmsg: performed.data?.errmsg ?? null,
+            ...(performed.errcode === 302045 ? { dataInUse: true, hint: "302045：数据被占用（有人正在编辑该行），稍后重试" } : {}),
+            effectHint: "平台只回执行结果；按钮绑定的规则副作用请另读 data.load。表单按钮走 executeCustomButton（带整条记录），与列表按钮的 launcher 路径不同",
+        },
+    };
 }
 /**
  * Shared form.publish write body — promotes the saved draft to published,
@@ -913,7 +1192,14 @@ export async function executeFormPublishWrite(session, args) {
         throw new WireError("business", `form ${args.sheetCode} not found`, 302024);
     if (pre.draftHtmlJson !== "[]")
         assertHtmlRender(pre.draftHtmlJson, { schemaCode: args.schemaCode, sheetCode: args.sheetCode, face: "draftHtmlJson" });
-    const forcePromote = args.force === true || args.rebuild === true;
+    // A button-only publish on an ALREADY published form must still promote: the
+    // platform materialises h_biz_button rows from options.customButtonJson during
+    // the publish call, so short-circuiting "already-published" would silently
+    // drop the buttons (live 2026-10-23).
+    const hasButtonDelta = args.buttons !== undefined ||
+        args.customButtonJson !== undefined ||
+        (Array.isArray(args.removeButtonCodes) && args.removeButtonCodes.length > 0);
+    const forcePromote = args.force === true || args.rebuild === true || hasButtonDelta;
     if (pre.published === true && !forcePromote)
         return { performed: { skipped: "already-published" }, readback: { published: true } };
     if (!hasDraft(pre))
@@ -939,8 +1225,14 @@ export async function executeFormPublishWrite(session, args) {
             });
         }
     }
+    // Buttons ride `options.customButtonJson`; the platform converts them into
+    // h_biz_button(triggerType=FORM) rows during THIS publish call
+    // (ModelManagementFacadeImpl.publishBizForm:1022). Passing them here is the
+    // only way to create form buttons without the designer.
+    const mergedOptions = mergeFormOptionsWithButtons(pre.options, { buttons: args.buttons, customButtonJson: args.customButtonJson, buttonsMode: args.buttonsMode, removeButtonCodes: args.removeButtonCodes }, "form.publish");
     const payload = {
         ...pre,
+        ...(mergedOptions !== undefined ? { options: mergedOptions } : {}),
         schemaCode: args.schemaCode,
         code: args.sheetCode,
         name: pre.name,
@@ -961,6 +1253,20 @@ export async function executeFormPublishWrite(session, args) {
     const performed = await wireCall(session, { path: ENDPOINTS.sheetPublish, method: "POST", body: payload });
     const readback = await wireCall(session, { path: ENDPOINTS.sheetGet, query: { schemaCode: args.schemaCode, sheetCode: args.sheetCode } });
     const sheet = (readback.data ?? {});
-    return { performed: { errcode: performed.errcode }, readback: { published: sheet.published === true, publishedHtmlJsonPresent: typeof sheet.publishedHtmlJson === "string" } };
+    const formButtons = readFormButtons(sheet.options);
+    return {
+        performed: { errcode: performed.errcode },
+        readback: {
+            published: sheet.published === true,
+            publishedHtmlJsonPresent: typeof sheet.publishedHtmlJson === "string",
+            ...(formButtons !== null
+                ? {
+                    formButtons,
+                    formButtonCodes: formButtons.map((button) => String(button.code ?? "")),
+                    formButtonNote: "按钮已写入 options.customButtonJson，本次 publish 已生成 h_biz_button(triggerType=FORM)；表单页是否显示还取决于流程节点 buttonPermission.customBtns[].enabled（设计器「表单操作」勾选）",
+                }
+                : {}),
+        },
+    };
 }
 //# sourceMappingURL=form-support.js.map

package/dist/human-summary.js

@@ -168,6 +168,10 @@ function phraseOf(tool, args, outcome) {
             return `发布流程 ${stringArg(args, "code") ?? "?"}（${schemaCode ?? "?"}）`;
         case "workflow.bindRule": {
             const codes = Array.isArray(args.ruleCodes) ? args.ruleCodes.join("、") : stringArg(args, "ruleCode") ?? "?";
+            const activityCode = stringArg(args, "activityCode");
+            const nodeEvent = stringArg(args, "nodeEvent");
+            if (activityCode !== undefined && nodeEvent !== undefined)
+                return `绑定流程节点事件规则：${stringArg(args, "workflowCode") ?? "?"} 的节点 ${activityCode}.${nodeEvent} ← ${codes}`;
             return `绑定流程事件规则：${stringArg(args, "workflowCode") ?? "?"} 的 ${stringArg(args, "handler") ?? "end"} 处理器 ← ${codes}`;
         }
         case "workflow.delete":

package/dist/lanes/businessrule.js

@@ -220,7 +220,14 @@ export function registerBusinessRuleLane(tools) {
                 schemaCode: record.schemaCode,
                 bizRuleType: record.bizRuleType,
                 enabled: record.enabled,
+                // The platform's `status` column lags behind the enable switch: r10
+                // saw `enabled:true` with `ruleStatus:"DISABLED"` while rule.list said
+                // ENABLED. `enabled` is the dispatch truth; flag the disagreement
+                // instead of letting two faces contradict each other silently.
                 ruleStatus: record.status,
+                ...(record.enabled === true && String(record.status ?? "") !== "ENABLED"
+                    ? { statusLag: true, statusNote: "平台 status 列滞后：enabled=true 才是分发真相（列表面/日志可复核）；不要据 ruleStatus=DISABLED 判定未启用" }
+                    : {}),
                 defaultRule: record.defaultRule,
                 developmentMode: record.developmentMode,
                 ruleVersion: record.ruleVersion,

package/dist/lanes/form-contract.js

@@ -15,11 +15,13 @@ export const FORM_WIRE = Object.freeze({
     publishAlreadyPublished: "published:true with force!==true skips as already-published",
     forceRepublish: "onlinejs.compose passes force:true so it can re-promote after a prior publish",
     emptyLayoutGuard: "ticket 74: the platform designer's Save is NOT lossless — it clears draftViewJson to \"[]\" and draftAttributesJson to \"{}\"; form.draft refuses CALLER-PROVIDED empty layouts (blocker form-empty-layout, zero wire, escape allowEmptyLayout:true) and form.publish refuses to promote a draft with fewer controls than the published face (blocker form-publish-degrade, escape allowDegrade:true); the recovery path is the form version history (/api/api/app/bizsheet/history/list) — fetch the intact version's view/attributes originals and rewrite the draft before publishing",
+    formButtons: "form toolbar buttons are a three-layer configuration (live 2026-10-23, 1.1.25): (1) bizsheet.options.customButtonJson — a STRINGIFIED JSON array — is the authoring face; ModelManagementFacadeImpl.publishBizForm:1022 turns it into h_biz_button rows with triggerType=FORM, triggerCode=<formCode> at publish; (2) those rows are what ActionPermissionHandler.getByTriggerTypeAndCode(FORM, bizCode) reads; (3) whether a button shows at a node is filtered by the workflow activity's buttonPermission.customBtns[].enabled (the designer 表单操作 checkboxes) plus showPermCode; the execute face is POST /api/api/runtime/form/executeCustomButton {bizButtonModel, bizObjectList:[<full bizObject>], reacquireDataFromDb:true} — NOT the list-button launcher path with ids[]",
     actionsColumns: "ticket 100: draftActionsJson/publishedActionsJson are REAL bizsheet columns (BizForm.java:95-100 @SerializableField; BizFormModel.java:59-62 serialized by bizsheet/get) — the designer writes draftActionsJson on save and both faces on publish (frontend-dist/admin/js/4280.cfa75764.js offsets 193538/185347); form.get full:true surfaces them; publish promotes draftActionsJson → publishedActionsJson",
 });
-const FORM_GET_DESCRIPTION = '读取默认表单（bizsheet/get）的发布状态与控件清单（紧凑默认）。**发布态以返回的 `published` / `existDraft` 布尔为准**（`published:true`=已发布；`published:false,existDraft:true`=只有草稿，**未发布**）——不要用 `publishedControlCodes` 是否非空来推断（草稿字段会让它非空，误判为已发布）。**每个模型交付前其默认表单必须 `published:true`**：用 `configure_form` 或 `form.draft(rebuild:true)`+`form.publish` 发布，并逐模型 `form.get` 核对。传 `controls:["code",…]` 只取指定控件的 options（如关联控件的 mappings）；传 `full:true` 才返回 draft/published 的完整 view/attributes/html/actions JSON（actions 列为设计器保存/发布的表单级按钮动作）。体积大，仅在需要整体布局时用。';
-const FORM_DRAFT_DESCRIPTION = "Save the default-form DRAFT (bizsheet/update). Reads the current sheet, merges the caller's explicit draftViewJson/draftAttributesJson (or preserves the existing draft); when both are absent on a fresh default form, composes the designer-standard scaffold from the model's published fields. A redundant field (relation-mapping carry-through target) always stays bound; with no workflow it is hidden in the design (options.visible=false), with a workflow it stays visible for per-node propertyPermissions. Pass `draftHtmlJson` to thread custom online-script HTML through. Empty-layout guard: explicitly passing \"[]\"/\"{}\" view/attributes is refused (form-empty-layout) — the platform designer's Save is NOT lossless and clears drafts to exactly that shape; escape with allowEmptyLayout:true, and recover cleared drafts from the form version history (/api/api/app/bizsheet/history/list). **表单控件属性（含关联填充 mappings）从字段行派生**：改关联映射的事实源在字段 options.mappings（field.update → field.publish），直接改这里的控件映射会被平台按字段重算覆盖（真机 2026-10-14 实证）；字段发布后如需刷新已发布表单的控件映射，用本工具 rebuild:false 重存（保留现有布局与在线JS）再 form.publish。";
-const FORM_PUBLISH_DESCRIPTION = "Publish the default form (bizsheet/publish, proven shape: draft*Json promoted to published*Json verbatim) with published-face readback. Degrade guard: refuses to promote a draft carrying FEWER controls than the published face (form-publish-degrade) — the designer's Save clears drafts non-losslessly; recover via the form version history (/api/api/app/bizsheet/history/list) and rewrite the draft first, or pass allowDegrade:true to force the reduction. rebuild:true is the one-call refresh: discard the existing draft, re-scaffold from the published fields (non-structural control options preserved), then force-promote — use it after a field shape change.";
+const FORM_GET_DESCRIPTION = '读取默认表单（bizsheet/get）的发布状态与控件清单（紧凑默认）。**发布态以返回的 `published` / `existDraft` 布尔为准**（`published:true`=已发布；`published:false,existDraft:true`=只有草稿，**未发布**）——不要用 `publishedControlCodes` 是否非空来推断（草稿字段会让它非空，误判为已发布）。**每个模型交付前其默认表单必须 `published:true`**：用 `configure_form` 或 `form.draft(rebuild:true)`+`form.publish` 发布，并逐模型 `form.get` 核对。`full:true` 还返回 `options` 与解析后的 `customButtonJson`（表单工具栏按钮）。传 `controls:["code",…]` 只取指定控件的 options（如关联控件的 mappings）；传 `full:true` 才返回 draft/published 的完整 view/attributes/html/actions JSON（actions 列为设计器保存/发布的表单级按钮动作）。体积大，仅在需要整体布局时用。';
+const FORM_DRAFT_DESCRIPTION = "Save the default-form DRAFT (bizsheet/update). Reads the current sheet, merges the caller's explicit draftViewJson/draftAttributesJson (or preserves the existing draft); when both are absent on a fresh default form, composes the designer-standard scaffold from the model's published fields. A redundant field (relation-mapping carry-through target) always stays bound; with no workflow it is hidden in the design (options.visible=false), with a workflow it stays visible for per-node propertyPermissions. Pass `draftHtmlJson` to thread custom online-script HTML through. Empty-layout guard: explicitly passing \"[]\"/\"{}\" view/attributes is refused (form-empty-layout) — the platform designer's Save is NOT lossless and clears drafts to exactly that shape; escape with allowEmptyLayout:true, and recover cleared drafts from the form version history (/api/api/app/bizsheet/history/list). **表单工具栏按钮**：`buttons`（数组）或 `customButtonJson`（原样字符串）写进 `biz_sheet.options.customButtonJson`；**要到 form.publish 才生成 h_biz_button(triggerType=FORM)**，且表单页是否显示还取决于流程节点 `buttonPermission.customBtns[].enabled`（设计器「表单操作」勾选）。`useLocation` 用 FORM/ROW/LIST，表单工具栏按钮用 FORM。 **表单控件属性（含关联填充 mappings）从字段行派生**：改关联映射的事实源在字段 options.mappings（field.update → field.publish），直接改这里的控件映射会被平台按字段重算覆盖（真机 2026-10-14 实证）；字段发布后如需刷新已发布表单的控件映射，用本工具 rebuild:false 重存（保留现有布局与在线JS）再 form.publish。";
+const FORM_PUBLISH_DESCRIPTION = "Publish the default form (bizsheet/publish, proven shape: draft*Json promoted to published*Json verbatim) with published-face readback. Degrade guard: refuses to promote a draft carrying FEWER controls than the published face (form-publish-degrade) — the designer's Save clears drafts non-losslessly; recover via the form version history (/api/api/app/bizsheet/history/list) and rewrite the draft first, or pass allowDegrade:true to force the reduction. rebuild:true is the one-call refresh: discard the existing draft, re-scaffold from the published fields (non-structural control options preserved), then force-promote — use it after a field shape change. **表单工具栏按钮**：传 `buttons`（或 `customButtonJson`）→ 写进 `options.customButtonJson` 并在本次 publish 生成 `h_biz_button(triggerType=FORM, triggerCode=<formCode>)`（平台 `publishBizForm:1022`）；`options.customButtonJson` 必须是**字符串化数组**（对象会 50000 syntax error）；表单页是否显示再由流程节点 `buttonPermission.customBtns[].enabled` 过滤。";
+const FORM_RUN_BUTTON_DESCRIPTION = "执行表单工具栏按钮（平台同款面：`POST /api/api/runtime/form/executeCustomButton`，body `{bizButtonModel, bizObjectList:[<完整业务对象>], reacquireDataFromDb:true}`）。**与列表行按钮不同**：列表按钮发 `launcher/domain_service_runtime/<schema>/<rule>` + `ids[]`（用 `rule.run`），表单按钮带**整条记录**，不能互换。按钮来源 `GET /api/api/system/getCustomButtons`（只列 triggerType=FORM 的 h_biz_button）。前提：按钮已由 `form.publish` 的 `buttons`/`customButtonJson` 生成。返回是执行结果信封，规则副作用用 `data.load` 另读；被规则 UPDATE 的目标行须是 COMPLETED（引擎查不到 DRAFT）。`302045` = 数据被占用。";
 const CONFIGURE_FORM_DESCRIPTION = "High-level: bind fields into the default form and publish it (form.draft → form.publish), subject to the write permission gate. Delegates to the proven form.draft scaffold + form.publish paths so the real empty-form layout (and any caller-supplied draftHtmlJson) is persisted and promoted — never bypasses with a shortcut body. `sheetCode` is optional: omitted means the model's default sheet (sheetCode = schemaCode).";
 export const FORM_LANE_CONTRACT = Object.freeze({
     lane: LANES.form,
@@ -42,6 +44,7 @@ export const FORM_LANE_CONTRACT = Object.freeze({
         forceRepublish: FORM_WIRE.forceRepublish,
         emptyLayoutGuard: FORM_WIRE.emptyLayoutGuard,
         actionsColumns: FORM_WIRE.actionsColumns,
+        formButtons: FORM_WIRE.formButtons,
     }),
     wireBindings: Object.freeze({
         draftBody: Object.freeze([behaviorBinding("test/form-scaffold.test.ts#form.draft scaffolds an empty default form from published fields", assertFormContract)]),
@@ -54,6 +57,7 @@ export const FORM_LANE_CONTRACT = Object.freeze({
         forceRepublish: Object.freeze([behaviorBinding("test/issue-11-online-js.test.ts#onlinejs.compose merges customScript into the existing draftHtmlJson layout", assertFormContract)]),
         emptyLayoutGuard: Object.freeze([behaviorBinding("test/ticket-74-form-empty-layout.test.ts#ticket 74: form.draft refuses an explicitly empty draftViewJson", assertFormContract)]),
         actionsColumns: Object.freeze([behaviorBinding("test/ticket-100-form-actions-columns.test.ts#form.get full:true surfaces draftActionsJson/publishedActionsJson", assertFormContract)]),
+        formButtons: Object.freeze([behaviorBinding("test/form-buttons.test.ts#form.publish with buttons materialises FORM-trigger buttons and form.get surfaces them", assertFormContract)]),
     }),
     evidence: Object.freeze([
         ".scratch/omc-route-wayfinder/leg2-closeout.md",
@@ -65,6 +69,7 @@ export const FORM_LANE_CONTRACT = Object.freeze({
         "form.draft": Object.freeze({ scope: "draft publish publishedHtmlJson readback", description: FORM_DRAFT_DESCRIPTION }),
         "form.publish": Object.freeze({ scope: "draft publish publishedHtmlJson readback", description: FORM_PUBLISH_DESCRIPTION }),
         configure_form: Object.freeze({ scope: "draft publish publishedHtmlJson readback", description: CONFIGURE_FORM_DESCRIPTION }),
+        "form.runButton": Object.freeze({ scope: "form toolbar button execution", description: FORM_RUN_BUTTON_DESCRIPTION }),
     }),
 });
 export function assertFormContract() {
@@ -93,5 +98,10 @@ export function assertFormContract() {
         throw new Error("form contract must pin the force-republish override");
     if (!FORM_WIRE.emptyLayoutGuard.includes("form-empty-layout") || !FORM_WIRE.emptyLayoutGuard.includes("form-publish-degrade"))
         throw new Error("form contract must pin the empty-layout/degrade guards");
+    if (!FORM_WIRE.formButtons.includes("customButtonJson") || !FORM_WIRE.formButtons.includes("executeCustomButton") || !FORM_WIRE.formButtons.includes("publishBizForm:1022"))
+        throw new Error("form contract must pin the form-button three-layer mechanism");
+    assertDescriptionCarries(FORM_LANE_CONTRACT, "form.draft", ["buttons", "customButtonJson", "h_biz_button", "buttonPermission"]);
+    assertDescriptionCarries(FORM_LANE_CONTRACT, "form.publish", ["buttons", "customButtonJson", "triggerType=FORM", "buttonPermission"]);
+    assertDescriptionCarries(FORM_LANE_CONTRACT, "form.runButton", ["executeCustomButton", "bizObjectList", "getCustomButtons", "rule.run", "302045"]);
 }
 //# sourceMappingURL=form-contract.js.map

package/dist/lanes/form-coverage.js

@@ -4,12 +4,13 @@ const T = FORM_LANE_CONTRACT.tools;
 export const FORM_COVERAGE = declareLaneCoverage(FORM_LANE_CONTRACT.lane, [
     {
         capability: "Form publish chain (draft-first → publish → publishedHtmlJson readback)",
-        evidence: [".scratch/omc-route-wayfinder/leg2-closeout.md", "packages/omc-cli/src/lanes/form.ts"],
+        evidence: [".scratch/omc-route-wayfinder/leg2-closeout.md", "packages/omc-cli/src/lanes/form.ts", "r11 2026-10-23 (1.1.25): form buttons live on bizsheet.options.customButtonJson → h_biz_button(triggerType=FORM) at publish; execution is POST runtime/form/executeCustomButton with the full bizObject (Playwright capture)"],
         tools: [
             claim("form.get", T["form.get"].scope),
             claim("form.draft", T["form.draft"].scope),
             claim("form.publish", T["form.publish"].scope),
             claim("configure_form", T["configure_form"].scope),
+            claim("form.runButton", T["form.runButton"].scope),
         ],
     },
 ]);

package/dist/lanes/form.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { ENDPOINTS } from "../endpoints.js";
-import { executeFormDraftWrite, executeFormPublishWrite, readFormOrNull, refuseEmptyCallerLayout, validateHtmlRender } from "../form-support.js";
+import { executeFormDraftWrite, executeFormPublishWrite, executeFormRunButtonWrite, readFormButtons, readFormOrNull, refuseEmptyCallerLayout, validateHtmlRender } from "../form-support.js";
 import { capabilityArg, environmentArg } from "../args.js";
 import { governedRead } from "../read.js";
 import { writeTool } from "../write.js";
@@ -80,6 +80,13 @@ export function registerFormLane(tools) {
                     publishedAttributesJson: sheet.publishedAttributesJson ?? null,
                     publishedHtmlJson: sheet.publishedHtmlJson ?? null,
                     publishedActionsJson: sheet.publishedActionsJson ?? null,
+                    // Form-toolbar buttons are authored on `options.customButtonJson`
+                    // and materialised into h_biz_button(triggerType=FORM) at publish
+                    // (ModelManagementFacadeImpl.publishBizForm:1022). The projection
+                    // used to drop `options`, so a read→write round trip could never
+                    // carry the buttons back.
+                    options: sheet.options ?? null,
+                    customButtonJson: readFormButtons(sheet.options),
                     // Ticket 109 — render compatibility: the Online JS panel resolves
                     // generateCodeType(e) whose first line is `if(!e||!e.tagName)
                     // return ""` and then does o[type].push(...) (54286.fbbb415f.js)
@@ -110,8 +117,23 @@ export function registerFormLane(tools) {
                 }
                 return Object.fromEntries(wanted.filter((code) => code in parsed).map((code) => [code, parsed[code]]));
             };
+            // Form buttons are tiny; list them plainly in the COMPACT face so a
+            // readback never needs the artifact just to see which buttons exist.
+            const formButtons = readFormButtons(sheet.options) ?? [];
             return {
                 ...base,
+                ...(formButtons.length > 0
+                    ? {
+                        formButtonCodes: formButtons.map((button) => String(button.code ?? "")),
+                        formButtons: formButtons.map((button) => ({
+                            code: button.code ?? null,
+                            name: button.name ?? null,
+                            bindAction: button.bindAction ?? null,
+                            targetCode: button.targetCode ?? null,
+                            useLocation: button.useLocation ?? null,
+                        })),
+                    }
+                    : {}),
                 draftControlCodes: draftControls,
                 publishedControlCodes: publishedControls,
                 ...(wanted ? { draftControls: pick(sheet.draftAttributesJson), publishedControls: pick(sheet.publishedAttributesJson) } : {}),
@@ -127,6 +149,13 @@ export function registerFormLane(tools) {
         fieldCodes: z.array(z.string().min(1)).optional().describe("脚手架绑定的已发布字段（按此顺序）；由 configure_form/intent 显式传入"),
         rebuild: z.boolean().optional().describe("true 时丢弃现有草稿布局，按已发布字段重新生成（新增字段/子表要用它；默认保留现有草稿）"),
         allowEmptyLayout: z.boolean().optional().describe("显式放行空布局（\"[]\"/\"{}\"）写入；默认拒绝（form-empty-layout），防设计器 Save 清空后照写丢控件"),
+        buttons: z
+            .array(z.record(z.unknown()))
+            .optional()
+            .describe("表单工具栏按钮（写进 biz_sheet.options.customButtonJson；publish 时才生成 h_biz_button(triggerType=FORM)）。每条至少 code/name/bindAction/operateType，useLocation 默认 FORM"),
+        customButtonJson: z.string().optional().describe("buttons 的原样 JSON 数组字符串（与 buttons 互斥；用于把 form.get 读回值直接回写）"),
+        buttonsMode: z.enum(["merge", "replace"]).optional().describe("默认 merge：按 code 增量 upsert（改一个按钮不必重发全表）；replace：整表替换"),
+        removeButtonCodes: z.array(z.string().min(1)).optional().describe("要删除的按钮 code（仅 merge 模式）"),
     }, async (session, args) => executeFormDraftWrite(session, { ...args, sheetCode: resolveSheetCode(args.schemaCode, args.sheetCode) }), (args) => {
         // Zero-wire refusal (ticket 74): fires in semanticGate BEFORE the
         // governed pipeline — including the rollback before-capture read.
@@ -155,6 +184,13 @@ export function registerFormLane(tools) {
             .boolean()
             .optional()
             .describe("true 时一步刷新：先丢弃现有草稿、按已发布字段重建脚手架（保留非结构性控件 options），再强制提拔——改字段形状后刷新表单用一个调用；默认只发布现有草稿（无草稿时自动补默认）"),
+        buttons: z
+            .array(z.record(z.unknown()))
+            .optional()
+            .describe("表单工具栏按钮：本次发布写进 options.customButtonJson 并生成 h_biz_button(triggerType=FORM)。之后再按流程节点 buttonPermission.customBtns[].enabled 决定哪个节点可见"),
+        customButtonJson: z.string().optional().describe("buttons 的原样 JSON 数组字符串（与 buttons 互斥）"),
+        buttonsMode: z.enum(["merge", "replace"]).optional().describe("默认 merge：按 code 增量 upsert；replace：整表替换"),
+        removeButtonCodes: z.array(z.string().min(1)).optional().describe("要删除的按钮 code（仅 merge 模式）"),
     }, async (session, args) => executeFormPublishWrite(session, { ...args, sheetCode: resolveSheetCode(args.schemaCode, args.sheetCode) }));
     registerPackageTool(tools, {
         name: "configure_form",
@@ -202,5 +238,11 @@ export function registerFormLane(tools) {
         },
         summarize: (args, _outcome, phase) => writeSummary("configure_form", args, undefined, phase),
     });
+    writeTool(tools, "form.runButton", FORM_LANE, FORM_TOOLS["form.runButton"].scope, FORM_TOOLS["form.runButton"].description, {
+        schemaCode: z.string().min(1),
+        sheetCode: z.string().min(1).optional().describe("表单槽位码；省略时默认 = schemaCode"),
+        buttonCode: z.string().min(1).describe("表单按钮 code（form.get --full 的 customButtonJson / publish 读回的 formButtonCodes）"),
+        bizObjectId: z.string().min(1).describe("要执行按钮的业务记录 id（data.load/data.list 的 bizObjectId）"),
+    }, async (session, args) => executeFormRunButtonWrite(session, { schemaCode: args.schemaCode, sheetCode: resolveSheetCode(args.schemaCode, args.sheetCode), buttonCode: args.buttonCode, bizObjectId: args.bizObjectId }));
 }
 //# sourceMappingURL=form.js.map

package/dist/lanes/organization-coverage.js

@@ -0,0 +1,27 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { LANES } from "./lane-ids.js";
+/**
+ * Organization writes (role group / role / members / management scope) sit on
+ * the same live-proven template lane; the scopes below are claimed here so the
+ * runtime gate can resolve them without a second manifest item.
+ */
+export const ORGANIZATION_COVERAGE = declareLaneCoverage(LANES.workflow, [
+    {
+        capability: "W7 S29 greenfield workflow authoring",
+        evidence: [
+            "packages/omc-cli/src/lanes/organization.ts",
+            "OpenAPI /api/v3/api-docs (1.1.25): organization/role/add_role, add_role_user, update_ouscope",
+        ],
+        tools: [
+            claim("org.role.users", "organization role member read (role/users)"),
+            claim("org.role.userScope", "organization role member management scope read (role/get_ouscope)"),
+            claim("org.roleGroup.create", "organization role group create (role/add_role_group)"),
+            claim("org.role.create", "organization role create (role/add_role)"),
+            claim("org.role.update", "organization role update (role/modify_role)"),
+            claim("org.role.addUsers", "organization role member add (role/add_role_user)"),
+            claim("org.role.removeUsers", "organization role member remove (role/strike_out_role_user)"),
+            claim("org.role.setUserScope", "organization role member scope update (role/update_ouscope)"),
+        ],
+    },
+]);
+//# sourceMappingURL=organization-coverage.js.map