@stalfh233/omc-cli 0.4.75 → 0.4.77

package/dist/lanes/datarule.js

@@ -453,14 +453,37 @@ function childFormulaBareReferences(formula, childFieldCodes) {
  * field (→ platform 50000 on submit). Field-aware via the child schema's
  * published fields; a caller-provided set avoids a duplicate fieldList read.
  */
+/**
+ * 1.4 of issue 2026-10-23: `datarule.list` resolves a CHILD-table schema
+ * (bizdatarule/list answers rows) while `bizproperty/list?schemaCode=<child>`
+ * answers 601003 业务模型不存在 — the same schema code reads on one face and
+ * fails on the other. Do not let the field-metadata probe veto a write that the
+ * rule face itself accepts: return null (metadata unavailable) and let callers
+ * skip the field-level guards with a warning.
+ */
+async function readPublishedFieldCodesOrNull(session, schemaCode) {
+    try {
+        const rows = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "true" } })).data);
+        return new Set(rows.map((row) => String(row.code ?? row.propertyCode ?? "")));
+    }
+    catch (error) {
+        if (error instanceof WireError && error.kind === "business" && (error.errcode === 601003 || error.errcode === 10011))
+            return null;
+        throw error;
+    }
+}
 async function assertChildFormulaRefs(session, args, knownChildFields) {
     if (args.dataRuleType !== 2 || args.childRule !== true)
         return;
     const formula = type2FormulaText(args.options);
     if (formula === null)
         return;
-    const codes = knownChildFields ??
-        new Set(wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.schemaCode, isPublish: "true" } })).data).map((row) => String(row.code ?? row.propertyCode ?? "")));
+    const codes = knownChildFields === undefined ? await readPublishedFieldCodesOrNull(session, args.schemaCode) : knownChildFields;
+    // Metadata unavailable (child-table schema on a face that only answers the
+    // rule side): the bare-reference heuristic needs the field list, so skip it
+    // rather than refusing a write the platform accepts.
+    if (codes === null)
+        return;
     const bare = childFormulaBareReferences(formula, codes);
     if (bare.length === 0)
         return;
@@ -658,8 +681,8 @@ export async function syncFormConditionDataRules(session, schemaCode, fieldCode,
     const existing = await listDataRules(session, schemaCode);
     // The designer's rule rows live on the PUBLISHED face (like datarule.create's
     // own guard); a draft-only field cannot carry a designer-visible row yet.
-    const published = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "true" } })).data)
-        .some((row) => String(row.code ?? row.propertyCode ?? "") === fieldCode);
+    const publishedCodes = await readPublishedFieldCodesOrNull(session, schemaCode);
+    const published = publishedCodes === null ? true : publishedCodes.has(fieldCode);
     for (const key of changedKeys) {
         const dataRuleType = FORM_CONDITION_RULE_TYPES[key];
         const next = text(nextOptions, key);
@@ -726,12 +749,13 @@ export function registerDataRuleLane(tools) {
         assertDataRuleCheckType(args.dataRuleType, args.checkType);
         assertDataRuleTarget(args);
         const codes = dataRuleTargetCodes(args);
-        const fields = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.schemaCode, isPublish: "true" } })).data);
-        const published = new Set(fields.map((row) => String(row.code ?? row.propertyCode ?? "")));
+        const published = await readPublishedFieldCodesOrNull(session, args.schemaCode);
         await assertChildFormulaRefs(session, args, published);
-        const missing = codes.filter((code) => !published.has(code));
-        if (missing.length > 0)
-            throw new ToolRefusalError({ status: "refused", blocker: "datarule-property-not-published", schemaCode: args.schemaCode, propertyCodes: codes, missing, message: `字段 ${args.schemaCode}.${missing.join(",")} 不在发布面上；拒绝 datarule.create POST` });
+        if (published !== null) {
+            const missing = codes.filter((code) => !published.has(code));
+            if (missing.length > 0)
+                throw new ToolRefusalError({ status: "refused", blocker: "datarule-property-not-published", schemaCode: args.schemaCode, propertyCodes: codes, missing, message: `字段 ${args.schemaCode}.${missing.join(",")} 不在发布面上；拒绝 datarule.create POST` });
+        }
         const existingRules = await listDataRules(session, args.schemaCode);
         // dataRuleType 1 (CHECK_RULE) fans out into 5 checkTypes that COEXIST on one
         // field (the platform auto-creates a checkType 4 maxLength row per text

package/dist/lanes/folder-contract.js

@@ -0,0 +1,59 @@
+import { CONTRACT_FAMILY, CONTRACT_REFERENCE_VERSION, assertDescriptionCarries, behaviorBinding } from "./contract-support.js";
+/**
+ * App-tree folder (目录/分组) wire contract — issue
+ * 2026-10-23-omc-app-folder-create-and-move. Source: AppFunctionController
+ * (/api/app/folders, 8.6.26 :90-260) and
+ * ApplicationFacadeImpl.createFolder/updateFolder/deleteFolder (:586-640).
+ */
+export const FOLDER_WIRE = Object.freeze({
+    endpoints: Object.freeze({
+        create: "POST /api/api/app/folders/create  body {appCode,name[,name_i18n,parentId,code,icon]}",
+        get: "GET /api/api/app/folders/get?folderId=",
+        update: "POST /api/api/app/folders/update  body {id,name[,name_i18n,parentId]}",
+        delete: "POST /api/api/app/folders/delete?folderId=",
+    }),
+    defaults: "createFolder forces type=Folder, defaults parentId to the app package id (root) and does NOT reject duplicate names; updateFolder refuses parentId===id and only writes parentId when non-empty; deleteFolder refuses a non-empty folder (DIRECTORY_NOT_EMPTY) — delete is NOT recursive",
+    tree: "apppackage/trees?appCode= returns a NESTED tree (folders carry children[]); reading only the top-level array makes a freshly created child folder look absent — flatten recursively and report path/depth",
+    live: "2026-10-23 customer HAR replay: folders/create answered errcode 0 成功创建目录; after the token was attached apppackage/trees returned the full tree",
+});
+export const FOLDER_LANE_CONTRACT = Object.freeze({
+    lane: "app-tree-folders",
+    family: CONTRACT_FAMILY,
+    referenceVersion: CONTRACT_REFERENCE_VERSION,
+    endpoints: Object.freeze({
+        tree: "apppackage/trees",
+        create: "folders/create",
+        get: "folders/get",
+        update: "folders/update",
+        delete: "folders/delete",
+    }),
+    wire: FOLDER_WIRE,
+    wireBindings: Object.freeze({
+        endpoints: Object.freeze([behaviorBinding("test/app-folder-and-model-move.test.ts#model.move reparents the model; folder.delete refuses a non-empty folder", assertFolderContract)]),
+        defaults: Object.freeze([behaviorBinding("test/app-folder-and-model-move.test.ts#model.move reparents the model; folder.delete refuses a non-empty folder", assertFolderContract)]),
+        tree: Object.freeze([behaviorBinding("test/app-folder-and-model-move.test.ts#folder.create then folder.tree sees the folder (nested tree is flattened)", assertFolderContract)]),
+        live: Object.freeze([behaviorBinding("test/app-folder-and-model-move.test.ts#folder.create then folder.tree sees the folder (nested tree is flattened)", assertFolderContract)]),
+    }),
+    evidence: Object.freeze([
+        "cp-sources/backend/decompiled-full/launcher-8.6.26/cloudpivot-engine-8.6.26/com/authine/cloudpivot/web/api/controller/app/AppFunctionController.java",
+        "cp-sources/backend/decompiled-full/launcher-8.6.26/cloudpivot-metadata-8.6.26/com/authine/cloudpivot/metadata/history/apppackage/service/ApplicationFacadeImpl.java",
+        "issue/2026-10-23-omc-app-folder-create-and-move.md",
+    ]),
+    tools: Object.freeze({
+        "folder.tree": Object.freeze({ scope: "app-tree folder/model tree (flattened with path/depth)", description: "读应用树（目录/分组 + 模型）：平台 apppackage/trees 返回嵌套 children，本工具递归展平并给每节点 path/depth" }),
+        "folder.create": Object.freeze({ scope: "app-tree folder create (folders/create)", description: "新建目录：folders/create 省略 parentId 建顶层目录；同父同名默认拒绝（folder-duplicate）" }),
+        "folder.update": Object.freeze({ scope: "app-tree folder rename/move (folders/update)", description: "重命名/挂载目录（不移动目录内模型，模型用 model.move）；parentId 不可等于自身" }),
+        "folder.delete": Object.freeze({ scope: "app-tree folder delete (folders/delete, non-recursive)", description: "删除空目录：非递归，有子节点回 DIRECTORY_NOT_EMPTY（工具先查子节点，拒 folder-not-empty）" }),
+    }),
+});
+export function assertFolderContract() {
+    assertDescriptionCarries(FOLDER_LANE_CONTRACT, "folder.tree", ["children", "path", "depth"]);
+    assertDescriptionCarries(FOLDER_LANE_CONTRACT, "folder.create", ["parentId", "顶层", "folder-duplicate"]);
+    assertDescriptionCarries(FOLDER_LANE_CONTRACT, "folder.update", ["parentId", "model.move"]);
+    assertDescriptionCarries(FOLDER_LANE_CONTRACT, "folder.delete", ["非递归", "folder-not-empty"]);
+    if (!FOLDER_WIRE.defaults.includes("DIRECTORY_NOT_EMPTY"))
+        throw new Error("folder contract must pin the non-recursive delete refusal");
+    if (!FOLDER_WIRE.tree.includes("NESTED"))
+        throw new Error("folder contract must pin the nested tree shape");
+}
+//# sourceMappingURL=folder-contract.js.map

package/dist/lanes/folder-coverage.js

@@ -0,0 +1,16 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { FOLDER_LANE_CONTRACT } from "./folder-contract.js";
+const T = FOLDER_LANE_CONTRACT.tools;
+export const FOLDER_COVERAGE = declareLaneCoverage(FOLDER_LANE_CONTRACT.lane, [
+    {
+        capability: "App-tree folders (目录/分组): read flattened tree, create, rename/move, non-recursive delete",
+        evidence: ["issue/2026-10-23-omc-app-folder-create-and-move.md", "packages/omc-cli/src/lanes/folder.ts"],
+        tools: [
+            claim("folder.tree", T["folder.tree"].scope),
+            claim("folder.create", T["folder.create"].scope),
+            claim("folder.update", T["folder.update"].scope),
+            claim("folder.delete", T["folder.delete"].scope),
+        ],
+    },
+]);
+//# sourceMappingURL=folder-coverage.js.map

package/dist/lanes/folder.js

@@ -0,0 +1,241 @@
+import { z } from "zod";
+import { ToolRefusalError, defineTool } from "../tool-types.js";
+import { governedRead } from "../read.js";
+import { writeTool } from "../write.js";
+import { wireCall, wireRows } from "../wire.js";
+import { ENDPOINTS } from "../endpoints.js";
+import { capabilityArg, environmentArg } from "../args.js";
+import { resolveApplicationCode } from "../support.js";
+import { LANES } from "./lane-ids.js";
+import { FOLDER_LANE_CONTRACT } from "./folder-contract.js";
+/**
+ * App-tree folders (目录/分组) and model reparenting.
+ *
+ * issue 2026-10-23-omc-app-folder-create-and-move: a customer had to build 8
+ * folders and move 33 models by hand (or with a raw HAR-replayed script) because
+ * OMC could only attach a NEW model to an EXISTING folder at create time.
+ *
+ * Wire facts (decompiled 8.6.26 AppFunctionController :90-260 +
+ * ApplicationFacadeImpl.createFolder/updateFolder/deleteFolder :586-640, and the
+ * customer's HAR replay which answered 0「成功创建目录」):
+ *  - POST /api/app/folders/create  {appCode, name, name_i18n?, parentId?, code?, icon?}
+ *    createFolder forces type=Folder and defaults parentId to the app package id
+ *    (root) — so an omitted parentId creates a TOP-LEVEL folder, not a child.
+ *  - POST /api/app/folders/update  {id, name, name_i18n?, parentId?}
+ *    refuses parentId === id (FOLDER_PARENTID_EQUALS_ID); parentId is only
+ *    written when non-empty (omitted keeps the current parent).
+ *  - POST /api/app/folders/delete  ?folderId=  refuses a non-empty folder
+ *    (DIRECTORY_NOT_EMPTY) — it is NOT a recursive delete.
+ *  - GET  /api/app/folders/get     ?folderId=
+ *  - The tree face (apppackage/trees?appCode=) is NESTED: folders carry their
+ *    children in `children[]`. Reading only the top-level array reports "folder
+ *    created but not found" (the customer's first failure) — this lane flattens
+ *    recursively and reports each node's depth/path.
+ *
+ * Moving a MODEL is the same bizmodels/update call model.update already makes,
+ * with the target folder as parentId — exposed as `model.move` so it has its own
+ * intent, dry-run preview, and readback.
+ */
+const LANE = LANES.folder;
+const T = FOLDER_LANE_CONTRACT.tools;
+/** Flatten the nested app tree, keeping the path so a caller can tell WHICH "合同" it means. */
+/**
+ * Flatten the nested app tree. Live 1.1.25 readback: `apppackage/trees?appCode=`
+ * returns the TOP-LEVEL folders directly (no app-package container row), each
+ * carrying its children — so a top-level folder is depth 0 and a child is
+ * "父 / 子" at depth 1. Reading only the top array makes a freshly created child
+ * folder look absent (the customer's first failure).
+ */
+function flattenFolders(rows, parentPath = []) {
+    const out = [];
+    for (const raw of rows) {
+        if (raw === null || typeof raw !== "object")
+            continue;
+        const node = raw;
+        const name = String(node.name ?? node.code ?? "");
+        const path = [...parentPath, name];
+        out.push({
+            id: node.id ?? null,
+            type: node.type ?? null,
+            code: node.code ?? null,
+            name: node.name ?? null,
+            parentId: node.parentId ?? null,
+            depth: path.length - 1,
+            path: path.join(" / "),
+        });
+        if (Array.isArray(node.children) && node.children.length > 0)
+            out.push(...flattenFolders(node.children, path));
+    }
+    return out;
+}
+async function readTree(session, appCode) {
+    return flattenFolders(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode } })).data));
+}
+function folderRefusal(schemaCode, message, extra = {}) {
+    throw new ToolRefusalError({ status: "refused", blocker: "folder-not-found", ...(schemaCode ? { applicationCode: schemaCode } : {}), ...extra, message });
+}
+/**
+ * Resolve a folder by id, code, or by full path ("合同管理 / 归档"). A bare name
+ * that matches several folders is ambiguous — name them with their paths instead
+ * of guessing (the customer's 8 folders included duplicates by design).
+ */
+function resolveFolder(rows, ref) {
+    const byId = rows.find((row) => String(row.id ?? "") === ref);
+    if (byId)
+        return byId;
+    const byCode = rows.filter((row) => String(row.code ?? "") === ref);
+    if (byCode.length === 1)
+        return byCode[0];
+    if (byCode.length > 1)
+        folderRefusal(undefined, `目录 code「${ref}」不唯一（${byCode.length} 个）——改用 id 或完整 path：${byCode.map((row) => String(row.path)).join("、")}`);
+    const byPath = rows.filter((row) => String(row.path ?? "") === ref);
+    if (byPath.length === 1)
+        return byPath[0];
+    const byName = rows.filter((row) => String(row.name ?? "") === ref);
+    if (byName.length === 1)
+        return byName[0];
+    if (byName.length > 1)
+        folderRefusal(undefined, `目录名「${ref}」不唯一（${byName.length} 个）——用完整 path 指定：${byName.map((row) => String(row.path)).join("、")}`);
+    folderRefusal(undefined, `找不到目录「${ref}」——先 folder.tree 看 id/path；注意 create 省略 parentId 建的是顶层目录`, {
+        available: rows.filter((row) => row.type === "Folder").map((row) => ({ id: row.id, path: row.path })).slice(0, 40),
+    });
+}
+function folderTools(tools) {
+    tools.push(defineTool({
+        name: "folder.tree",
+        layer: "low",
+        kind: "read",
+        lane: LANE,
+        scope: T["folder.tree"].scope,
+        description: "读取应用树（目录/分组 + 模型节点），**递归展平**并给出每个节点的 `path` 与 `depth`（平台 `apppackage/trees?appCode=` 返回的是嵌套 children，只看顶层会误判“目录没建成”——issue 2026-10-23 的真实失败）。`foldersOnly:true` 只回目录（type=Folder）。目录的 id 就是 folder.update/delete 与 model.move 的 `folderId/parentId`。",
+        inputSchema: {
+            environment: environmentArg,
+            applicationCode: z.string().optional().describe("应用 code；省略用配置默认应用"),
+            foldersOnly: z.boolean().optional().describe("只回目录节点（type=Folder）"),
+            capability: capabilityArg,
+        },
+        handler: async (ctx, args, self) => governedRead(ctx, self, args, async (session) => {
+            const appCode = await resolveApplicationCode(session, args.applicationCode);
+            const rows = await readTree(session, appCode);
+            const nodes = args.foldersOnly === true ? rows.filter((row) => row.type === "Folder") : rows;
+            return {
+                applicationCode: appCode,
+                nodeCount: nodes.length,
+                folderCount: rows.filter((row) => row.type === "Folder").length,
+                modelCount: rows.filter((row) => row.type === "BizModel").length,
+                nodes,
+                note: "type=Folder 是目录/分组；parentId 指向父目录（顶层目录的 parentId = 应用包 id）。嵌套 children 已展平，path 用「 / 」连接。",
+            };
+        }),
+    }));
+    writeTool(tools, "folder.create", LANE, T["folder.create"].scope, "新建应用目录（分组）：`POST /api/app/folders/create`（AppFunctionController:105；`ApplicationFacadeImpl.createFolder:586` 强制 `type=Folder`，**省略 `parentId` 会挂到应用根**，即顶层目录）。给 `parentId` 才是子目录。写入后按 `path` 回读确认（树是嵌套的）。同名不等于重复：平台不校验重名，工具默认按「同父目录下同名」拒绝（`folder-duplicate`），要并列同名传 `allowDuplicate:true`。", {
+        applicationCode: z.string().optional().describe("应用 code；省略用配置默认应用"),
+        name: z.string().min(1).describe("目录显示名（平台校验非空、中文长度 ≤50）"),
+        parentId: z.string().optional().describe("父目录 id；**省略=应用根（顶层目录）**。子目录必须显式给，值来自 folder.tree 的 id"),
+        code: z.string().optional().describe("目录 code（可选；平台只校验 code 唯一，空则自动生成）"),
+        name_i18n: z.string().optional().describe("多语言名（JSON 字符串，如 {\"zh-CN\":\"合同\",\"en\":\"Contract\"}）"),
+        allowDuplicate: z.boolean().optional().describe("允许同父目录下同名（默认拒绝，避免建出两个同名目录后无法用 path 定位）"),
+    }, async (session, args) => {
+        const appCode = await resolveApplicationCode(session, args.applicationCode);
+        const before = await readTree(session, appCode);
+        if (args.allowDuplicate !== true) {
+            const siblings = before.filter((row) => String(row.parentId ?? "") === String(args.parentId ?? "") || (args.parentId === undefined && row.depth === 0));
+            if (siblings.some((row) => row.type === "Folder" && String(row.name ?? "") === args.name))
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "folder-duplicate",
+                    applicationCode: appCode,
+                    path: `${args.parentId ?? "(root)"} / ${args.name}`,
+                    message: `同一层级已有同名目录「${args.name}」——平台允许重名，但重名后 folder.tree 的 path 无法唯一定位；确认要并列同名再传 allowDuplicate:true`,
+                });
+        }
+        const performed = await wireCall(session, {
+            path: ENDPOINTS.folderCreate,
+            method: "POST",
+            body: {
+                appCode,
+                name: args.name,
+                ...(args.parentId !== undefined ? { parentId: args.parentId } : {}),
+                ...(args.code !== undefined ? { code: args.code } : {}),
+                ...(args.name_i18n !== undefined ? { name_i18n: args.name_i18n } : {}),
+            },
+        });
+        const after = await readTree(session, appCode);
+        const created = after.filter((row) => row.type === "Folder" && String(row.name ?? "") === args.name && !before.some((old) => old.id === row.id));
+        return {
+            performed: { errcode: performed.errcode },
+            readback: {
+                applicationCode: appCode,
+                present: created.length > 0,
+                created: created.map((row) => ({ id: row.id, path: row.path, parentId: row.parentId })),
+                folderCount: after.filter((row) => row.type === "Folder").length,
+                ...(after.filter((row) => row.type === "Folder" && String(row.name ?? "") === args.name && String(row.parentId ?? "") === String(created[0]?.parentId ?? ""))
+                    .length > 1
+                    ? { warning: "同层级出现了多个同名目录（allowDuplicate 生效或既有同名）；后续用 id 定位，不要用 path/name" }
+                    : {}),
+                hint: created.length > 0 ? "把模型放进该目录用 model.move（parentId = 这里的 id）" : "回读未见新目录：树是嵌套的，但 folder.tree 已递归展平；若确实没有，检查应用 code",
+            },
+        };
+    });
+    writeTool(tools, "folder.update", LANE, T["folder.update"].scope, "重命名目录或把目录挂到另一个目录下：`POST /api/app/folders/update`（AppFunctionController:219；`updateFolder:612` 拒绝 `parentId === id`，`parentId` 为空时保留原父级）。**只改目录节点本身，不会移动目录里的模型**——模型移动用 `model.move`。", {
+        applicationCode: z.string().optional(),
+        folderId: z.string().min(1).describe("目录 id（folder.tree 的 id）"),
+        name: z.string().min(1).optional().describe("新显示名"),
+        name_i18n: z.string().optional(),
+        parentId: z.string().min(1).optional().describe("新父目录 id（挂到根用应用包 id；不理解根 id 就省略此字段表示不改父级）"),
+    }, async (session, args) => {
+        const appCode = await resolveApplicationCode(session, args.applicationCode);
+        const before = await readTree(session, appCode);
+        const current = resolveFolder(before, args.folderId);
+        if (args.name === undefined && args.parentId === undefined)
+            throw new ToolRefusalError({ status: "refused", blocker: "folder-update-empty-patch", message: "没有可应用的补丁——至少给 name 或 parentId" });
+        if (args.parentId !== undefined && args.parentId === args.folderId)
+            throw new ToolRefusalError({ status: "refused", blocker: "folder-parent-self", message: "parentId 不能等于目录自身（平台 FOLDER_PARENTID_EQUALS_ID）" });
+        const performed = await wireCall(session, {
+            path: ENDPOINTS.folderUpdate,
+            method: "POST",
+            body: { id: args.folderId, name: args.name ?? current.name, ...(args.name_i18n !== undefined ? { name_i18n: args.name_i18n } : {}), ...(args.parentId !== undefined ? { parentId: args.parentId } : {}) },
+        });
+        const after = await readTree(session, appCode);
+        const now = after.find((row) => String(row.id ?? "") === args.folderId);
+        return {
+            performed: { errcode: performed.errcode },
+            readback: {
+                folderId: args.folderId,
+                present: now !== undefined,
+                before: { name: current.name, parentId: current.parentId, path: current.path },
+                after: now ? { name: now.name, parentId: now.parentId, path: now.path } : null,
+                note: "只改了目录节点；目录内的模型不随目录移动（模型要动请用 model.move）",
+            },
+        };
+    });
+    writeTool(tools, "folder.delete", LANE, T["folder.delete"].scope, "删除空目录：`POST /api/app/folders/delete?folderId=`（AppFunctionController:246）。**非递归**——目录里还有子目录或模型时平台回 `DIRECTORY_NOT_EMPTY`，工具在写前先查子节点并拒绝（`folder-not-empty`），避免半删。要清空请先 `model.move` 移走模型、删子目录。", {
+        applicationCode: z.string().optional(),
+        folderId: z.string().min(1),
+    }, async (session, args) => {
+        const appCode = await resolveApplicationCode(session, args.applicationCode);
+        const before = await readTree(session, appCode);
+        const current = resolveFolder(before, args.folderId);
+        if (String(current.type ?? "") !== "Folder")
+            throw new ToolRefusalError({ status: "refused", blocker: "folder-target-not-folder", message: `${args.folderId} 不是目录节点（type=${String(current.type)}）；删模型用 model.delete` });
+        const children = before.filter((row) => String(row.parentId ?? "") === String(args.folderId));
+        if (children.length > 0)
+            throw new ToolRefusalError({
+                status: "refused",
+                blocker: "folder-not-empty",
+                folderId: args.folderId,
+                children: children.map((row) => ({ id: row.id, type: row.type, path: row.path })).slice(0, 40),
+                message: `目录「${current.path}」还有 ${children.length} 个子节点——平台非递归删除会回 DIRECTORY_NOT_EMPTY。先 model.move 移走模型 / 删子目录`,
+            });
+        const performed = await wireCall(session, { path: ENDPOINTS.folderDelete, method: "POST", query: { folderId: args.folderId } });
+        const after = await readTree(session, appCode);
+        return {
+            performed: { errcode: performed.errcode },
+            readback: { folderId: args.folderId, deleted: !after.some((row) => String(row.id ?? "") === args.folderId), path: current.path },
+        };
+    });
+}
+export function registerFolderLane(tools) {
+    folderTools(tools);
+}
+//# sourceMappingURL=folder.js.map

package/dist/lanes/form-contract.js

@@ -19,7 +19,7 @@ export const FORM_WIRE = Object.freeze({
     actionsColumns: "ticket 100: draftActionsJson/publishedActionsJson are REAL bizsheet columns (BizForm.java:95-100 @SerializableField; BizFormModel.java:59-62 serialized by bizsheet/get) — the designer writes draftActionsJson on save and both faces on publish (frontend-dist/admin/js/4280.cfa75764.js offsets 193538/185347); form.get full:true surfaces them; publish promotes draftActionsJson → publishedActionsJson",
 });
 const FORM_GET_DESCRIPTION = '读取默认表单（bizsheet/get）的发布状态与控件清单（紧凑默认）。**发布态以返回的 `published` / `existDraft` 布尔为准**（`published:true`=已发布；`published:false,existDraft:true`=只有草稿，**未发布**）——不要用 `publishedControlCodes` 是否非空来推断（草稿字段会让它非空，误判为已发布）。**每个模型交付前其默认表单必须 `published:true`**：用 `configure_form` 或 `form.draft(rebuild:true)`+`form.publish` 发布，并逐模型 `form.get` 核对。`full:true` 还返回 `options` 与解析后的 `customButtonJson`（表单工具栏按钮）。传 `controls:["code",…]` 只取指定控件的 options（如关联控件的 mappings）；传 `full:true` 才返回 draft/published 的完整 view/attributes/html/actions JSON（actions 列为设计器保存/发布的表单级按钮动作）。体积大，仅在需要整体布局时用。';
-const FORM_DRAFT_DESCRIPTION = "Save the default-form DRAFT (bizsheet/update). Reads the current sheet, merges the caller's explicit draftViewJson/draftAttributesJson (or preserves the existing draft); when both are absent on a fresh default form, composes the designer-standard scaffold from the model's published fields. A redundant field (relation-mapping carry-through target) always stays bound; with no workflow it is hidden in the design (options.visible=false), with a workflow it stays visible for per-node propertyPermissions. Pass `draftHtmlJson` to thread custom online-script HTML through. Empty-layout guard: explicitly passing \"[]\"/\"{}\" view/attributes is refused (form-empty-layout) — the platform designer's Save is NOT lossless and clears drafts to exactly that shape; escape with allowEmptyLayout:true, and recover cleared drafts from the form version history (/api/api/app/bizsheet/history/list). **表单工具栏按钮**：`buttons`（数组）或 `customButtonJson`（原样字符串）写进 `biz_sheet.options.customButtonJson`；**要到 form.publish 才生成 h_biz_button(triggerType=FORM)**，且表单页是否显示还取决于流程节点 `buttonPermission.customBtns[].enabled`（设计器「表单操作」勾选）。`useLocation` 用 FORM/ROW/LIST，表单工具栏按钮用 FORM。 **表单控件属性（含关联填充 mappings）从字段行派生**：改关联映射的事实源在字段 options.mappings（field.update → field.publish），直接改这里的控件映射会被平台按字段重算覆盖（真机 2026-10-14 实证）；字段发布后如需刷新已发布表单的控件映射，用本工具 rebuild:false 重存（保留现有布局与在线JS）再 form.publish。";
+const FORM_DRAFT_DESCRIPTION = "Save the default-form DRAFT (bizsheet/update). Reads the current sheet, merges the caller's explicit draftViewJson/draftAttributesJson (or preserves the existing draft); when both are absent on a fresh default form, composes the designer-standard scaffold from the model's published fields. A redundant field (relation-mapping carry-through target) always stays bound; with no workflow it is hidden in the design (options.visible=false), with a workflow it stays visible for per-node propertyPermissions. Pass `draftHtmlJson` to thread custom online-script HTML through. Empty-layout guard: explicitly passing \"[]\"/\"{}\" view/attributes is refused (form-empty-layout) — the platform designer's Save is NOT lossless and clears drafts to exactly that shape; escape with allowEmptyLayout:true, and recover cleared drafts from the form version history (/api/api/app/bizsheet/history/list). **读回原样回写**：从 `form.get` 取回的 view/attributes 直接回传时加 `fromReadback:true`——工具会与已存草稿/发布面逐字比对，一致才放行（平台自身布局可能含子表列行/系统行默认宽度），被改动过的面照常按 validation 拒绝。**表单工具栏按钮**：`buttons`（数组）或 `customButtonJson`（原样字符串）写进 `biz_sheet.options.customButtonJson`；**要到 form.publish 才生成 h_biz_button(triggerType=FORM)**，且表单页是否显示还取决于流程节点 `buttonPermission.customBtns[].enabled`（设计器「表单操作」勾选）。`useLocation` 用 FORM/ROW/LIST，表单工具栏按钮用 FORM。 **表单控件属性（含关联填充 mappings）从字段行派生**：改关联映射的事实源在字段 options.mappings（field.update → field.publish），直接改这里的控件映射会被平台按字段重算覆盖（真机 2026-10-14 实证）；字段发布后如需刷新已发布表单的控件映射，用本工具 rebuild:false 重存（保留现有布局与在线JS）再 form.publish。";
 const FORM_PUBLISH_DESCRIPTION = "Publish the default form (bizsheet/publish, proven shape: draft*Json promoted to published*Json verbatim) with published-face readback. Degrade guard: refuses to promote a draft carrying FEWER controls than the published face (form-publish-degrade) — the designer's Save clears drafts non-losslessly; recover via the form version history (/api/api/app/bizsheet/history/list) and rewrite the draft first, or pass allowDegrade:true to force the reduction. rebuild:true is the one-call refresh: discard the existing draft, re-scaffold from the published fields (non-structural control options preserved), then force-promote — use it after a field shape change. **表单工具栏按钮**：传 `buttons`（或 `customButtonJson`）→ 写进 `options.customButtonJson` 并在本次 publish 生成 `h_biz_button(triggerType=FORM, triggerCode=<formCode>)`（平台 `publishBizForm:1022`）；`options.customButtonJson` 必须是**字符串化数组**（对象会 50000 syntax error）；表单页是否显示再由流程节点 `buttonPermission.customBtns[].enabled` 过滤。";
 const FORM_RUN_BUTTON_DESCRIPTION = "执行表单工具栏按钮（平台同款面：`POST /api/api/runtime/form/executeCustomButton`，body `{bizButtonModel, bizObjectList:[<完整业务对象>], reacquireDataFromDb:true}`）。**与列表行按钮不同**：列表按钮发 `launcher/domain_service_runtime/<schema>/<rule>` + `ids[]`（用 `rule.run`），表单按钮带**整条记录**，不能互换。按钮来源 `GET /api/api/system/getCustomButtons`（只列 triggerType=FORM 的 h_biz_button）。前提：按钮已由 `form.publish` 的 `buttons`/`customButtonJson` 生成。返回是执行结果信封，规则副作用用 `data.load` 另读；被规则 UPDATE 的目标行须是 COMPLETED（引擎查不到 DRAFT）。`302045` = 数据被占用。";
 const CONFIGURE_FORM_DESCRIPTION = "High-level: bind fields into the default form and publish it (form.draft → form.publish), subject to the write permission gate. Delegates to the proven form.draft scaffold + form.publish paths so the real empty-form layout (and any caller-supplied draftHtmlJson) is persisted and promoted — never bypasses with a shortcut body. `sheetCode` is optional: omitted means the model's default sheet (sheetCode = schemaCode).";
@@ -79,7 +79,7 @@ export function assertFormContract() {
     assertDescriptionCarries(FORM_LANE_CONTRACT, "form.get", ["bizsheet/get", "draft/published", "mappings", "`full:true`", "actions"]);
     if (!FORM_WIRE.actionsColumns.includes("BizForm.java:95-100"))
         throw new Error("form contract must pin the actions-columns evidence (ticket 100)");
-    assertDescriptionCarries(FORM_LANE_CONTRACT, "form.draft", ["bizsheet/update", "draftViewJson", "draftAttributesJson", "scaffold", "draftHtmlJson", "form-empty-layout"]);
+    assertDescriptionCarries(FORM_LANE_CONTRACT, "form.draft", ["bizsheet/update", "draftViewJson", "draftAttributesJson", "scaffold", "draftHtmlJson", "form-empty-layout", "fromReadback"]);
     if (!FORM_WIRE.redundantFieldVisibility.includes("propertyPermissions"))
         throw new Error("form contract must carry the redundant-field visibility (propertyPermissions) fact");
     assertDescriptionCarries(FORM_LANE_CONTRACT, "form.publish", ["bizsheet/publish", "draft*Json", "published*Json", "verbatim", "form-publish-degrade", "history/list", "rebuild:true", "force-promote"]);

package/dist/lanes/form.js

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import { ENDPOINTS } from "../endpoints.js";
+import { decodeButtonScript } from "./list-view.js";
 import { executeFormDraftWrite, executeFormPublishWrite, executeFormRunButtonWrite, readFormButtons, readFormOrNull, refuseEmptyCallerLayout, validateHtmlRender } from "../form-support.js";
 import { capabilityArg, environmentArg } from "../args.js";
 import { governedRead } from "../read.js";
@@ -51,6 +52,7 @@ export function registerFormLane(tools) {
                 .optional()
                 .describe("控件定义投影：true = 返回全部控件的 draft/published 定义；字符串数组 = 只返回这些控件码的定义；省略 = 只回控件码清单"),
             full: z.boolean().optional().describe("返回全部六份布局 JSON 原文（大体积）"),
+            buttonScripts: z.boolean().optional().describe("附带表单按钮的脚本原文（options.customButtonJson 里 SCRIPT 按钮的 actionConfig.scriptData）及 sha/字节数"),
             capability: capabilityArg,
         },
         handler: async (ctx, args, self) => governedRead(ctx, self, args, async (session) => {
@@ -120,18 +122,21 @@ export function registerFormLane(tools) {
             // Form buttons are tiny; list them plainly in the COMPACT face so a
             // readback never needs the artifact just to see which buttons exist.
             const formButtons = readFormButtons(sheet.options) ?? [];
+            const withScripts = args.buttonScripts === true;
             return {
                 ...base,
                 ...(formButtons.length > 0
                     ? {
                         formButtonCodes: formButtons.map((button) => String(button.code ?? "")),
-                        formButtons: formButtons.map((button) => ({
-                            code: button.code ?? null,
-                            name: button.name ?? null,
-                            bindAction: button.bindAction ?? null,
-                            targetCode: button.targetCode ?? null,
-                            useLocation: button.useLocation ?? null,
-                        })),
+                        formButtons: formButtons.map((button) => withScripts
+                            ? decodeButtonScript(button)
+                            : {
+                                code: button.code ?? null,
+                                name: button.name ?? null,
+                                bindAction: button.bindAction ?? null,
+                                targetCode: button.targetCode ?? null,
+                                useLocation: button.useLocation ?? null,
+                            }),
                     }
                     : {}),
                 draftControlCodes: draftControls,
@@ -148,6 +153,7 @@ export function registerFormLane(tools) {
         draftHtmlJson: z.string().optional(),
         fieldCodes: z.array(z.string().min(1)).optional().describe("脚手架绑定的已发布字段（按此顺序）；由 configure_form/intent 显式传入"),
         rebuild: z.boolean().optional().describe("true 时丢弃现有草稿布局，按已发布字段重新生成（新增字段/子表要用它；默认保留现有草稿）"),
+        fromReadback: z.boolean().optional().describe("true = 本次 draftViewJson/draftAttributesJson 来自 form.get 的原样读回（平台自身布局可能含子表列行/系统行超宽）；工具会与已存面逐字比对，只有确实一致才放行，被改动过的面照常拒绝"),
         allowEmptyLayout: z.boolean().optional().describe("显式放行空布局（\"[]\"/\"{}\"）写入；默认拒绝（form-empty-layout），防设计器 Save 清空后照写丢控件"),
         buttons: z
             .array(z.record(z.unknown()))
@@ -156,6 +162,7 @@ export function registerFormLane(tools) {
         customButtonJson: z.string().optional().describe("buttons 的原样 JSON 数组字符串（与 buttons 互斥；用于把 form.get 读回值直接回写）"),
         buttonsMode: z.enum(["merge", "replace"]).optional().describe("默认 merge：按 code 增量 upsert（改一个按钮不必重发全表）；replace：整表替换"),
         removeButtonCodes: z.array(z.string().min(1)).optional().describe("要删除的按钮 code（仅 merge 模式）"),
+        buttonScripts: z.array(z.object({ code: z.string().min(1), script: z.string() })).optional().describe("直接改已有表单按钮的脚本（actionConfig.scriptData），按 code 逐字替换；未知 code 拒绝。不必重发整表"),
     }, async (session, args) => executeFormDraftWrite(session, { ...args, sheetCode: resolveSheetCode(args.schemaCode, args.sheetCode) }), (args) => {
         // Zero-wire refusal (ticket 74): fires in semanticGate BEFORE the
         // governed pipeline — including the rollback before-capture read.
@@ -191,6 +198,7 @@ export function registerFormLane(tools) {
         customButtonJson: z.string().optional().describe("buttons 的原样 JSON 数组字符串（与 buttons 互斥）"),
         buttonsMode: z.enum(["merge", "replace"]).optional().describe("默认 merge：按 code 增量 upsert；replace：整表替换"),
         removeButtonCodes: z.array(z.string().min(1)).optional().describe("要删除的按钮 code（仅 merge 模式）"),
+        buttonScripts: z.array(z.object({ code: z.string().min(1), script: z.string() })).optional().describe("直接改已有表单按钮的脚本（actionConfig.scriptData），按 code 逐字替换；未知 code 拒绝。不必重发整表"),
     }, async (session, args) => executeFormPublishWrite(session, { ...args, sheetCode: resolveSheetCode(args.schemaCode, args.sheetCode) }));
     registerPackageTool(tools, {
         name: "configure_form",

package/dist/lanes/lane-ids.js

@@ -13,6 +13,7 @@ export const LANES = Object.freeze({
     meta: "meta-governance",
     environment: "environment-governance",
     app: "app-management",
+    folder: "app-tree-folders",
     dictionary: "dictionary-management",
     model: "model-management",
     field: "field-families",

package/dist/lanes/list-view-contract.js

@@ -167,6 +167,9 @@ export function assertListViewContract() {
     if (!LIST_VIEW_WIRE.deleteBody.includes("query/delete"))
         throw new Error("list-view contract must pin the delete endpoint");
     assertDescriptionCarries(LIST_VIEW_LANE_CONTRACT, "listview.create", ["query/create", "LIST", "get_header"]);
+    // Button scripts are stored in h_biz_button.actionConfig.scriptData (a JSON
+    // STRING); listview.get/--buttons and form.get/--buttonScripts surface them
+    // without a round trip through the artifact.
     assertDescriptionCarries(LIST_VIEW_LANE_CONTRACT, "listview.get", ["query/get", "code", "默认视图", "present"]);
     assertDescriptionCarries(LIST_VIEW_LANE_CONTRACT, "listview.list", ["query/list", "code"]);
     assertDescriptionCarries(LIST_VIEW_LANE_CONTRACT, "listview.configure", ["query/update", "fieldCodes", "默认视图", "querySorts", "queryConditions", "queryActions", "queryActionType", "associationType", "options", "queryPresentation", "htmlJson", "schemaRelations", "customButtons", "customButtonJson", "bindAction", "useLocation", "operateType", "showPermType", "QUERY", "pagingSetting", "listViewModeSetting", "presentationType", "queryGanttModel", "GANTT", "queryLayer", "multiTableHeaderConfig", "publish=TRUE", "field.publish", "rule.enable", "actionConfig", "targetModel", "listview-button-target-unresolved"]);

package/dist/lanes/list-view-shapes.js

@@ -232,6 +232,10 @@ export const listViewButtonArg = z
         .union([z.string(), z.record(z.string(), z.unknown())])
         .optional()
         .describe("BizButtonModel.actionConfig 原样透传（与 targetModel/targetForm/configureList 互斥）；ADD_DATA/FORM 只接受 schemaCodeVal/formListData/configureList 子形状"),
+    script: z
+        .string()
+        .optional()
+        .describe("SCRIPT 按钮的脚本源码简写——等价于 actionConfig.scriptData；与 actionConfig 同传时以 script 为准（写进 actionConfig.scriptData）"),
 })
     .describe("customButtons[] entry (BizButtonModel); name/code/useLocation/bindAction/operateType are required; triggerType/triggerCode are forced to QUERY/view code and sortKey to the array position");
 /**
@@ -1004,7 +1008,29 @@ export function normalizeButtons(buttons, schemaCode, triggerCode) {
         // ("undefined is not iterable") blank the click. Emit an empty
         // configureList for those three bind actions and `{}` otherwise.
         const needsConfigureList = button.bindAction === "FLOW" || button.bindAction === "ADD_DATA" || button.bindAction === "FORM";
-        row.actionConfig = encodeJsonColumn(button.actionConfig ?? (needsConfigureList ? { configureList: [] } : {}));
+        // `script` is the ergonomic spelling of actionConfig.scriptData for SCRIPT
+        // buttons; when both are given the explicit script wins (it is the value the
+        // caller just wrote, not a stale config blob).
+        let actionConfig = button.actionConfig ?? (needsConfigureList ? { configureList: [] } : undefined);
+        if (button.script !== undefined) {
+            let base = {};
+            if (actionConfig !== undefined) {
+                if (typeof actionConfig === "string") {
+                    try {
+                        const parsed = JSON.parse(actionConfig);
+                        if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed))
+                            base = parsed;
+                    }
+                    catch {
+                        base = {};
+                    }
+                }
+                else
+                    base = { ...actionConfig };
+            }
+            actionConfig = { ...base, scriptData: button.script };
+        }
+        row.actionConfig = encodeJsonColumn(actionConfig ?? {});
         return row;
     });
 }