@stalfh233/omc-cli 0.4.87 → 0.4.90

package/dist/lanes/field.js

@@ -45,6 +45,54 @@ function fieldRollbackSpec(toolName) {
 function parseFieldOptionsForReadback(options) {
     return decodeJsonColumn(options, JSON_COLUMN_PASSTHROUGH);
 }
+/**
+ * CHILD_TABLE(8) columns as a compact list (issue 2026-10-25 §7).
+ *
+ * The stored `subSchema` is the full designer payload — system columns included,
+ * ~37.6 KB for a 10-column child table when asked for one field by code. A caller
+ * almost always wants the column codes (to build formData / verify the attach);
+ * the raw payload stays available behind `full:true`. Accepts both the object and
+ * the JSON-string wire form.
+ */
+function childColumnsOf(subSchema) {
+    let parsed = subSchema;
+    if (typeof subSchema === "string") {
+        try {
+            parsed = JSON.parse(subSchema);
+        }
+        catch {
+            return [];
+        }
+    }
+    if (parsed === null || typeof parsed !== "object")
+        return [];
+    const properties = parsed.properties;
+    if (!Array.isArray(properties))
+        return [];
+    return properties
+        .filter((child) => child !== null && typeof child === "object")
+        .map((child) => {
+        const rawType = child.propertyType ?? child.type;
+        const type = rawType === undefined || rawType === null || Number.isNaN(Number(rawType)) ? null : Number(rawType);
+        const typeLabel = type === null ? undefined : fieldTypeLabel(type);
+        const code = String(child.code ?? child.propertyCode ?? "");
+        return {
+            code,
+            name: String(child.name ?? child.code ?? child.propertyCode ?? ""),
+            type,
+            ...(typeLabel !== undefined ? { typeName: typeLabel } : {}),
+            ...(typeof child.relativeCode === "string" && child.relativeCode ? { relativeCode: child.relativeCode } : {}),
+            // r15 feedback: the projection mixed the platform's system columns with
+            // the authored ones, so "which child columns did I declare?" still needed
+            // a filter. Keep every column but mark the system ones.
+            // `parentId` / `sortKey` are injected by the platform into every child
+            // schema (they are the child row's link + order), so they are system
+            // columns here even though a MAIN model never carries them.
+            ...(SYSTEM_FIELD_CODES.has(code) || code === "parentId" || code === "sortKey" ? { system: true } : {}),
+        };
+    })
+        .filter((child) => child.code.length > 0);
+}
 /**
  * `name_i18n` is a JSON locale map. When every locale value equals the display
  * `name` there is no translation to convey, so echoing the map on every field of
@@ -117,7 +165,21 @@ export function registerFieldLane(tools) {
                     ...(redundantNameI18n(row.name_i18n, row.name) ? {} : typeof row.name_i18n === "string" ? { name_i18n: row.name_i18n } : {}),
                     type: row.type ?? row.propertyType,
                     ...(typeLabel !== undefined ? { typeName: typeLabel } : {}),
-                    ...(row.subSchema !== undefined && row.subSchema !== null ? { subSchema: row.subSchema } : {}),
+                    // A CHILD_TABLE row's `subSchema` is the whole designer payload; the
+                    // default face carries the column list + count and keeps the raw
+                    // payload behind `full:true` (issue 2026-10-25 §7: one field read was
+                    // 37.6 KB for a 5-code answer).
+                    ...(row.subSchema !== undefined && row.subSchema !== null
+                        ? args.full === true
+                            ? { subSchema: row.subSchema }
+                            : (() => {
+                                const subColumns = childColumnsOf(row.subSchema);
+                                const businessColumns = subColumns.filter((column) => column.system !== true).length;
+                                return subColumns.length > 0
+                                    ? { subColumnCount: subColumns.length, businessSubColumnCount: businessColumns, subColumns, subSchemaHint: "子表列已投影为 code/name/type（system:true 是平台注入的系统列）；要平台原始 subSchema 加 full:true" }
+                                    : { subSchema: row.subSchema };
+                            })()
+                        : {}),
                     ...(row.relativeCode ? { relativeCode: row.relativeCode } : {}),
                     ...(typeof row.relativePropertyCode === "string" && row.relativePropertyCode ? { relativePropertyCode: row.relativePropertyCode } : {}),
                     ...(options !== undefined ? { options } : {}),
@@ -150,11 +212,20 @@ export function registerFieldLane(tools) {
                         const value = options[key];
                         return key === "readonlyFormula" ? value === true : typeof value === "string" && value.trim() !== "";
                     });
+                    // Inventory reads could not see child columns at all (r13 §7): the
+                    // only face that carried them was the 37.6 KB subSchema. Codes alone
+                    // are ~12 B each and answer "did the child columns land?".
+                    const subColumns = field.subColumns;
+                    const businessCodes = Array.isArray(subColumns) ? subColumns.filter((column) => column.system !== true).map((column) => column.code) : undefined;
                     return {
                         code: field.code,
                         type: field.type,
                         ...(field.typeName !== undefined ? { typeName: field.typeName } : {}),
                         ...(field.name !== undefined ? { name: field.name } : {}),
+                        // Inventory answers "which columns did I author?" — system
+                        // columns are reported as a count, not mixed into the list.
+                        ...(businessCodes !== undefined ? { subColumnCodes: businessCodes } : {}),
+                        ...(Array.isArray(subColumns) && subColumns.length > businessCodes.length ? { systemSubColumnCount: subColumns.length - businessCodes.length } : {}),
                         ...(conditions.length > 0 ? { conditions } : {}),
                         ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
                     };
@@ -202,6 +273,7 @@ export function registerFieldLane(tools) {
                             type: field.type,
                             ...(field.typeName !== undefined ? { typeName: field.typeName } : {}),
                             ...(field.name !== undefined ? { name: field.name } : {}),
+                            ...(Array.isArray(field.subColumns) ? { subColumns: field.subColumns } : {}),
                             ...(conditions.length > 0 ? { conditions } : {}),
                             ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
                         };
@@ -225,7 +297,7 @@ export function registerFieldLane(tools) {
         const draft = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.schemaCode, isPublish: "false" } })).data);
         const published = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.schemaCode, isPublish: "true" } })).data);
         if ([...draft, ...published].some((row) => (row.code ?? row.propertyCode) === args.code))
-            throw new ToolRefusalError({ status: "refused", blocker: "duplicate-field", schemaCode: args.schemaCode, propertyCode: args.code, message: `字段 ${args.schemaCode}.${args.code} 已存在于草稿或发布面；拒绝重复 POST` });
+            throw new ToolRefusalError({ status: "refused", blocker: "duplicate-field", schemaCode: args.schemaCode, propertyCode: args.code, message: `字段 ${args.schemaCode}.${args.code} 已存在于草稿或发布面；拒绝重复 POST`, nextCommand: `omc call field.list --args '${JSON.stringify({ schemaCode: args.schemaCode, published: true, code: args.code })}'` });
         // One seam owns field-change normalization, every reproduced gate, and the
         // wire body (src/field-change.ts), so configure_model and intent share it.
         const prepared = prepareFieldChange(args);

package/dist/lanes/list-view.js

@@ -776,7 +776,27 @@ export function registerListViewLane(tools) {
         const before = await wireCall(session, { path: ENDPOINTS.listQueryGetHeader, query: { schemaCode: args.schemaCode, code: args.code } });
         if (before.data == null)
             return { performed: { skipped: "already-absent" }, readback: { absent: true, header: null } };
-        const performed = await wireCall(session, { path: ENDPOINTS.listQueryDelete, method: "POST", query: { schemaCode: args.schemaCode, code: args.code } });
+        let performed;
+        try {
+            performed = await wireCall(session, { path: ENDPOINTS.listQueryDelete, method: "POST", query: { schemaCode: args.schemaCode, code: args.code } });
+        }
+        catch (error) {
+            // 306103 删除后将无可用视图 — the platform requires at least one visible
+            // list view per model. r15's `nextCommand` fell back to the generic
+            // refusal router; name the constraint and the only real deletion path.
+            if (error instanceof WireError && error.kind === "business" && (error.errcode === 306103 || /无可用视图/.test(error.message)))
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "listview-last-visible",
+                    schemaCode: args.schemaCode,
+                    code: args.code,
+                    nextCommand: `omc model-purge --code ${args.schemaCode}`,
+                    message: `不能删除视图 ${args.code}：平台要求每个模型至少保留一条可见列表视图（306103）。` +
+                        `单独删最后一条视图没有意义——视图会随模型一起级联删除。要继续用这个模型就**就地改**（listview.configure 省略 code 即改默认视图），` +
+                        `要整体清理就用 model-purge（默认 dry-run，先看计划）。`,
+                });
+            throw error;
+        }
         const readback = await wireCall(session, { path: ENDPOINTS.listQueryGetHeader, query: { schemaCode: args.schemaCode, code: args.code } });
         return { performed: { errcode: performed.errcode }, readback: { absent: readback.data == null, header: readback.data ?? null } };
     }, undefined, undefined, listviewRollbackSpec("listview.delete"));

package/dist/lanes/model.js

@@ -199,7 +199,10 @@ export function registerModelLane(tools) {
             const tree = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
             const all = tree
                 .filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code)
-                .map((row) => ({ code: row.code, name: row.name ?? row.text ?? null }));
+                // `schemaCode` is the parameter name every other tool takes; `code` is
+                // the tree row's key. Echo both so `--jq 'models[].schemaCode'` works
+                // (r15 P6: the alias was missing and the path missed).
+                .map((row) => ({ code: row.code, schemaCode: row.code, name: row.name ?? row.text ?? null }));
             const needle = args.filter?.trim();
             const models = needle ? all.filter((model) => String(model.code).includes(needle) || String(model.name ?? "").includes(needle)) : all;
             // `filterApplied` disambiguates an empty result: it distinguishes "the

package/dist/lanes/org-tree.js

@@ -0,0 +1,52 @@
+import { ENDPOINTS } from "../endpoints.js";
+import { wireCall, wireRows } from "../wire.js";
+export async function collectOrgDepartments(session, options = {}) {
+    const limit = options.limit ?? 500;
+    const fetchLevel = async (deptId) => {
+        const query = deptId === undefined ? {} : { deptIds: deptId };
+        const data = (await wireCall(session, { path: ENDPOINTS.organizationDepartmentTree, query })).data;
+        return Array.isArray(data?.departmentList) ? data.departmentList : wireRows(data);
+    };
+    const rows = [];
+    const seen = new Set();
+    const push = (level) => {
+        const added = [];
+        for (const row of level) {
+            const id = String(row.id ?? "");
+            if (id === "" || seen.has(id))
+                continue;
+            seen.add(id);
+            rows.push({ ...row, id, name: String(row.name ?? ""), parentId: String(row.parentId ?? "") });
+            added.push(id);
+        }
+        return added;
+    };
+    const queue = [];
+    if (options.rootId !== undefined) {
+        try {
+            const self = (await wireCall(session, { path: ENDPOINTS.organizationDepartmentGet, query: { deptId: options.rootId } })).data;
+            if (self)
+                push([self]);
+        }
+        catch {
+            // unknown id → empty result
+        }
+        queue.push(...push(await fetchLevel(options.rootId)));
+    }
+    else {
+        const roots = await fetchLevel(undefined);
+        push(roots);
+        queue.push(...roots.map((row) => String(row.id ?? "")).filter((id) => id.length > 0));
+    }
+    let truncated = false;
+    while (queue.length > 0) {
+        if (rows.length >= limit) {
+            truncated = true;
+            break;
+        }
+        const parentId = queue.shift();
+        queue.push(...push(await fetchLevel(parentId)));
+    }
+    return { rows, truncated };
+}
+//# sourceMappingURL=org-tree.js.map

package/dist/lanes/organization.js

@@ -7,6 +7,7 @@ import { wireCall, wireRows, WireError } from "../wire.js";
 import { ENDPOINTS } from "../endpoints.js";
 import { environmentArg, capabilityArg } from "../args.js";
 import { LANES } from "./lane-ids.js";
+import { collectOrgDepartments } from "./org-tree.js";
 /**
  * Organization WRITE faces (8.6.41 customer transcript, 2026-10-21).
  *
@@ -130,11 +131,33 @@ export function registerOrganizationLane(tools) {
                 query: { ...orgQuery(session), roleId: String(args.roleId), page: String(args.page ?? 0), size: String(args.size ?? 500) },
             })).data;
             const rows = Array.isArray(data?.content) ? data.content : wireRows(data);
+            // The wire row carries `deptId: null` and `departmentId` absent; the
+            // member's department rides `parentDepartmentName[0].deptId` (and
+            // `ouScope[0].id`). Projecting only `departmentId` made every member look
+            // department-less (r15 misdiagnosis; P4).
+            const memberDepartment = (row) => {
+                const direct = row.departmentId ?? row.deptId;
+                if (typeof direct === "string" && direct.length > 0)
+                    return direct;
+                const parents = Array.isArray(row.parentDepartmentName) ? row.parentDepartmentName : [];
+                for (const parent of parents)
+                    if (typeof parent.deptId === "string" && parent.deptId)
+                        return parent.deptId;
+                const scopes = Array.isArray(row.ouScope) ? row.ouScope : [];
+                for (const scope of scopes)
+                    if (typeof scope.id === "string" && scope.id)
+                        return scope.id;
+                return null;
+            };
             const members = rows.map((row) => ({
                 id: roleUserId(row),
                 name: row.name ?? null,
                 username: row.username ?? null,
-                departmentId: row.departmentId ?? null,
+                departmentId: memberDepartment(row),
+                departmentName: row.departmentName ?? null,
+                // `ouScope` decides whether a role member can be resolved as a workflow
+                // participant. Surface the count so an empty scope is visible here.
+                scopeCount: Array.isArray(row.ouScope) ? row.ouScope.length : null,
                 unitType: row.unitType ?? null,
             }));
             return { roleId: String(args.roleId), count: members.length, total: data?.totalElements ?? members.length, members };
@@ -301,10 +324,67 @@ export function registerOrganizationLane(tools) {
         const after = (await wireCall(session, { path: ENDPOINTS.organizationDepartmentGet, query: { ...orgQuery(session), deptId: args.deptId } })).data;
         return { performed: { errcode: 0 }, readback: { deptId: args.deptId, name: after?.name ?? null, parentId: after?.parentId ?? null, managerId: after?.managerId ?? null, enabled: after?.enabled ?? null } };
     });
-    writeTool(tools, "org.department.delete", LANE, SCOPES.deptDelete, "删除部门（`GET organization/department/strike_out?id=`）。平台会拒绝：有子部门 → 200009「部门下面存在子部门，不能删除！」；有用户 → 200002「部门下面存在用户，不能删除！」。工具先计数并在回读里给出，仍由平台裁决。", { deptId: z.string().min(1) }, async (session, args) => {
+    writeTool(tools, "org.department.delete", LANE, SCOPES.deptDelete, "删除部门（`GET organization/department/strike_out?id=`）。平台会拒绝：有子部门 → 200009「部门下面存在子部门，不能删除！」；有用户 → 200002「部门下面存在用户，不能删除！」。工具先计数并在回读里给出，仍由平台裁决。", { deptId: z.string().min(1), force: z.boolean().optional().describe("true = 先逐个删除子部门（仅当子部门无用户）再删本部门；有用户仍由平台裁决") }, async (session, args) => {
         const users = wireRows((await wireCall(session, { path: ENDPOINTS.organizationDepartmentUsers, query: { ...orgQuery(session), deptId: args.deptId } })).data);
+        // Pre-check children: the platform's 200009 ("部门下面存在子部门") is
+        // accurate but sends the caller hunting for ids. Name them and hand over
+        // the child-delete command (found during r15 org cleanup).
+        const walked = await collectOrgDepartments(session);
+        const children = walked.rows
+            .filter((row) => row.parentId === String(args.deptId))
+            .map((row) => ({ id: row.id, name: row.name }))
+            .filter((row) => row.id.length > 0);
+        let deletedChildren = 0;
+        if (children.length > 0) {
+            if (args.force !== true)
+                throw new ToolRefusalError({
+                    status: "refused", blocker: "department-has-children", deptId: String(args.deptId), children,
+                    nextCommand: `omc call org.department.delete --args '${JSON.stringify({ deptId: children[0].id })}'`,
+                    message: `部门 ${args.deptId} 下还有 ${children.length} 个子部门，平台拒绝删除（200009）。先删子部门，或传 force:true 让工具按顺序删除：${children.map((child) => `${child.name}(${child.id})`).join("、")}。`,
+                });
+            // force = deepest-first over the WHOLE subtree (a direct child with its
+            // own children would fail 200009 otherwise).
+            const byParent = new Map();
+            for (const row of walked.rows) {
+                if (row.id === String(args.deptId))
+                    continue;
+                const list = byParent.get(row.parentId) ?? [];
+                list.push({ id: row.id, name: row.name });
+                byParent.set(row.parentId, list);
+            }
+            const ordered = [];
+            const walk = (parentId) => {
+                for (const child of byParent.get(parentId) ?? []) {
+                    walk(child.id);
+                    ordered.push(child);
+                }
+            };
+            walk(String(args.deptId));
+            deletedChildren = ordered.length;
+            for (const child of ordered) {
+                try {
+                    await wireCall(session, { path: ENDPOINTS.organizationDepartmentDelete, query: { ...orgQuery(session), id: child.id } });
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    const usersPending = /200002|用户/.test(message);
+                    throw new ToolRefusalError({
+                        status: "refused", blocker: usersPending ? "department-has-users" : "department-delete-failed",
+                        deptId: String(args.deptId), blockedChild: child,
+                        nextCommand: `omc call org.department.users --args '${JSON.stringify({ deptId: child.id })}'`,
+                        message: `force 清理到子部门 ${child.name}(${child.id}) 时失败：${message}。${usersPending ? "该部门下还有员工——先转出再删。" : "平台拒绝删除该子部门。"}`,
+                    });
+                }
+            }
+        }
+        if (users.length > 0)
+            throw new ToolRefusalError({
+                status: "refused", blocker: "department-has-users", deptId: String(args.deptId), users: users.length,
+                nextCommand: `omc call org.department.users --args '${JSON.stringify({ deptId: String(args.deptId) })}'`,
+                message: `部门 ${args.deptId} 下还有 ${users.length} 名员工，平台拒绝删除（200002）。先用 org.department.users 看人，再用 org.user.transferDepartment 转出（平台不允许删带人的部门）。`,
+            });
         await wireCall(session, { path: ENDPOINTS.organizationDepartmentDelete, query: { ...orgQuery(session), id: args.deptId } });
-        return { performed: { errcode: 0 }, readback: { deptId: args.deptId, deleted: true, usersBeforeDelete: users.length } };
+        return { performed: { errcode: 0 }, readback: { deptId: args.deptId, deleted: true, usersBeforeDelete: users.length, deletedChildren } };
     });
     tools.push(defineTool({
         name: "org.department.users",
@@ -388,7 +468,26 @@ export function registerOrganizationLane(tools) {
         const departments = wireRows((await wireCall(session, {
             path: ENDPOINTS.organizationUserDepartments, query: { ...orgQuery(session), id: String(args.userId) },
         })).data).map((row) => ({ deptId: row.deptId ?? null, deptName: row.deptName ?? null, isMain: row.isMain ?? null }));
-        return { performed: { errcode: 0 }, readback: { userId: args.userId, name: after?.name ?? null, departmentId: after?.departmentId ?? null, mobile: after?.mobile ?? null, email: after?.email ?? null, active: after?.active ?? null, userStatus: after?.status ?? null, departments } };
+        return {
+            performed: { errcode: 0 },
+            readback: {
+                userId: args.userId,
+                name: after?.name ?? null,
+                departmentId: after?.departmentId ?? null,
+                mobile: after?.mobile ?? null,
+                email: after?.email ?? null,
+                active: after?.active ?? null,
+                userStatus: after?.status ?? null,
+                departments,
+                // r15 P7: `active` did not persist on 1.1.25 (passed true, read false).
+                // It looks derived from account activation/binding rather than a
+                // writable switch — say so instead of letting the caller re-create the
+                // user to "fix" it.
+                ...(args.active !== undefined && after?.active !== args.active
+                    ? { activeWarning: `传了 active=${String(args.active)}，平台读回 ${String(after?.active)}：active 在 1.1.25 上不是可直接写的开关（疑似由账号激活/绑定派生）。启停账号用 status=ENABLE/DISABLE/LOCK；不要为改 active 新建用户。` }
+                    : {}),
+            },
+        };
     });
     writeTool(tools, "org.user.delete", LANE, SCOPES.userDelete, "删除员工（`GET organization/user/strike_out?id=`）。只传用户 id；返回 deleted。", { userId: z.string().min(1) }, async (session, args) => {
         await wireCall(session, { path: ENDPOINTS.organizationUserDelete, query: { ...orgQuery(session), id: args.userId } });
@@ -444,6 +543,7 @@ export function registerOrganizationLane(tools) {
         if (rows.length > 0 && args.force !== true)
             throw new ToolRefusalError({
                 status: "refused", blocker: "role-has-members", roleId: String(args.roleId), members: rows.length,
+                nextCommand: `omc call org.role.delete --args '${JSON.stringify({ roleId: String(args.roleId), force: true })}'`,
                 message: `角色下还有 ${rows.length} 名成员，平台拒绝删除（errmsg：角色下已经包含用户数据）。先 org.role.removeUsers，或传 force:true 让工具移出后再删。`,
             });
         if (rows.length > 0)
@@ -459,6 +559,7 @@ export function registerOrganizationLane(tools) {
         if (roles.length > 0 && args.force !== true)
             throw new ToolRefusalError({
                 status: "refused", blocker: "role-group-has-roles", roleGroupId: String(args.roleGroupId), roles: roles.length,
+                nextCommand: `omc call org.roleGroup.delete --args '${JSON.stringify({ roleGroupId: String(args.roleGroupId), force: true })}'`,
                 message: `角色组下还有 ${roles.length} 个角色，平台拒绝删除（errmsg：角色组下已经包含角色数据）。先删角色，或传 force:true。`,
             });
         for (const role of roles) {
@@ -624,7 +725,10 @@ export function registerOrganizationLane(tools) {
             id: z.string().min(1).describe("部门 id"),
             name: z.string().min(1),
             deptPath: z.string().optional().describe("完整路径，如 根组织/广州总所"),
-            type: z.string().optional().describe("默认 \"1\"（部门节点）"),
+            // The wire wants the enum as a STRING ("1"); a number used to die in
+            // input validation with a generic tool-input-invalid (r10). Accept both
+            // and normalize, so the mistake cannot cost a round.
+            type: z.union([z.string(), z.number()]).optional().describe("部门节点固定 \"1\"（字符串；也接受数字 1，工具会归一化）"),
         })).describe("要设置的管理范围节点"),
         mode: z.enum(["merge", "replace"]).optional().describe("默认 merge（读旧值合并）；replace = 覆盖整个范围"),
         dryRun: z.boolean().optional(),
@@ -633,7 +737,7 @@ export function registerOrganizationLane(tools) {
             path: ENDPOINTS.organizationRoleGetOuScope,
             query: { ...orgQuery(session), roleId: args.roleId, userId: args.userId },
         })).data);
-        const wanted = args.scopes.map((scope) => ({ id: scope.id, name: scope.name, type: scope.type ?? "1", ...(scope.deptPath ? { deptPath: scope.deptPath } : {}) }));
+        const wanted = args.scopes.map((scope) => ({ id: scope.id, name: scope.name, type: scope.type === undefined ? "1" : String(scope.type), ...(scope.deptPath ? { deptPath: scope.deptPath } : {}) }));
         const merged = args.mode === "replace"
             ? wanted
             : [...before.map((row) => ({ id: String(row.id ?? ""), name: String(row.name ?? ""), type: String(row.type ?? "1"), ...(row.deptPath ? { deptPath: String(row.deptPath) } : {}) })).filter((row) => row.id !== ""), ...wanted]

package/dist/lanes/rule-lifecycle.js

@@ -204,11 +204,32 @@ export function registerRuleLifecycleLane(tools) {
                 ruleCode: args.ruleCode,
                 message: `规则 ${args.ruleCode} 当前未启用（enabled=${String(row.enabled)}）——先 rule.enable（publish+enable 两步），否则设计器显示「失效·未启用」且按钮不会执行它`,
             });
-        const performed = await wireCall(session, {
-            path: ruleRuntimeExecutePath(args.schemaCode, args.ruleCode),
-            method: "POST",
-            body: { schemaCode: args.schemaCode, ids, ruleCode: args.ruleCode, consolidation: args.consolidation === true },
-        });
+        let performed;
+        try {
+            performed = await wireCall(session, {
+                path: ruleRuntimeExecutePath(args.schemaCode, args.ruleCode),
+                method: "POST",
+                body: { schemaCode: args.schemaCode, ids, ruleCode: args.ruleCode, consolidation: args.consolidation === true },
+            });
+        }
+        catch (error) {
+            // 550001 业务规则不存在 on the launcher runtime path means the rule was
+            // not REGISTERED as a custom trigger (r15: a data-event graph saved with
+            // customTrigger:true still 550001s). Name the semantic instead of
+            // forwarding a bare platform code.
+            if (error instanceof WireError && error.kind === "business" && error.errcode === 550001)
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "rule-not-custom-trigger",
+                    schemaCode: args.schemaCode,
+                    ruleCode: args.ruleCode,
+                    nextCommand: `omc call rule.get --args '${JSON.stringify({ schemaCode: args.schemaCode, ruleCode: args.ruleCode })}'`,
+                    message: `平台 launcher 运行时没有注册规则 ${args.ruleCode}（550001 业务规则不存在）。\`rule.run\` 走的是「按钮/自定义触发」端点，` +
+                        `只认 CUSTOM_NODE 触发的规则；数据事件（Create/Update/…）的规则不会注册在这里。` +
+                        `要看规则图里有没有 CUSTOM_NODE，用 rule.get 看 nodes；要验证数据事件规则请走 data.submit/data.update，要验证按钮请绑到列表/表单按钮后在门户点击。`,
+                });
+            throw error;
+        }
         const payload = (performed.data ?? null);
         const objects = Array.isArray(payload) ? payload : [];
         return {

package/dist/lanes/runtime-data.js

@@ -216,6 +216,47 @@ function projectReadbackRecord(record, args) {
         return record;
     return compactRuntimeRecord(source);
 }
+/**
+ * Approval-submit readback (issue 2026-10-25 §2).
+ *
+ * An approval submit changed almost nothing: the caller needs "did the flow
+ * advance" (sequenceStatus) plus "did the fields I typed persist". Returning the
+ * whole compact record made every approval level pay for the full row again
+ * (r12: 25 data.submit calls / 55.6 KB — the single largest read face).
+ * `summary`/`fields`/`full` still win when supplied; this is only the default.
+ */
+/**
+ * Which submitted values did the immediate readback NOT show? (r10 F8)
+ *
+ * The platform's form/load face can answer with only system columns right after
+ * a write transaction (r14: `readback.authoritative` held just `modifiedTime`
+ * while `data.load` a moment later had every business field). Without a note the
+ * caller reads that as "the write dropped my data" and writes again.
+ */
+function readbackEmptyFields(formData, record) {
+    const source = record !== null && typeof record === "object" && !Array.isArray(record) ? record : {};
+    return Object.entries(formData)
+        .filter(([key, value]) => value !== null && value !== undefined && (source[key] === null || source[key] === undefined))
+        .map(([key]) => key);
+}
+function readbackWarningFor(emptyFields, toolName) {
+    if (emptyFields.length === 0)
+        return undefined;
+    return `${toolName} 已 DELIVERED，但即时读回里这些本次提交的字段为空/缺省：${emptyFields.join("、")}。平台 form/load 在写事务后可能先回系统字段、业务字段滞后（真机 1.1.25，r14 见过只回 modifiedTime 的一笔）。**先 omc call data.load 核对，不要重写**；若 data.load 仍为空，才按投影/字段 code 排查。`;
+}
+function projectApprovalReadback(record, submittedKeys) {
+    if (record === null || typeof record !== "object" || Array.isArray(record))
+        return {};
+    const source = record;
+    const projected = {};
+    for (const key of ["id", "bizObjectId", "schemaCode", "sequenceStatus"])
+        if (key in source)
+            projected[key] = source[key];
+    for (const key of submittedKeys)
+        if (key in source && !(key in projected))
+            projected[key] = compactRuntimeValue(source[key]);
+    return projected;
+}
 /** Shared optional schema fields for the write readback projection. */
 export const readbackProjectionArgs = {
     summary: z.boolean().optional().describe("只回身份/状态字段，裁剪 readback.authoritative（默认关闭，读回为业务字段+身份的精简记录）"),
@@ -750,8 +791,11 @@ export function registerRuntimeDataLane(tools) {
         // branch) — business rules only run once data.submit advances the
         // row. Saying so on every plain-save readback prevents the
         // "rule didn't fire" misdiagnosis.
+        const savedRecord = normalizeLoadedRecord((readbackData ?? {}));
+        const savedEmptyFields = readbackEmptyFields(formData, savedRecord);
         const plainReadback = {
-            authoritative: projectReadbackRecord(normalizeLoadedRecord((readbackData ?? {})), args),
+            authoritative: projectReadbackRecord(savedRecord, args),
+            ...(savedEmptyFields.length > 0 ? { readbackWarning: readbackWarningFor(savedEmptyFields, "data.save") } : {}),
             draftRuleHint: "草稿态（DRAFT）保存不触发业务规则——DRAFT 行跳过 Create/Update 分发（DomainServiceImpl.java:240-248）；要一调完成态本调用加 submit:true；已存草稿直提形状：data.submit {schemaCode, bizObjectId: 本读回的 bizObjectId, formData}（submit 自持久化）",
         };
         // r18 retro (G3): one-call COMPLETED creation — the agent goal is usually
@@ -824,6 +868,7 @@ export function registerRuntimeDataLane(tools) {
                 schemaCode: args.schemaCode,
                 bizObjectId: args.bizObjectId,
                 sheetCode,
+                nextCommand: `omc call data.list --args '${JSON.stringify({ schemaCode: args.schemaCode })}'`,
                 message: "no live business object with this id; refusing to update (the platform would otherwise insert a new row)",
             });
         }
@@ -840,12 +885,14 @@ export function registerRuntimeDataLane(tools) {
         const returnedId = typeof performedData.objectId === "string" ? performedData.objectId : typeof performedData.bizObjectId === "string" ? performedData.bizObjectId : args.bizObjectId;
         const readbackData = await loadExistingBizObject(session, args.schemaCode, sheetCode, returnedId);
         const sequenceStatus = extractSequenceStatus(readbackData);
+        const updatedRecord = normalizeLoadedRecord(readbackData);
+        const updatedEmptyFields = readbackEmptyFields(formData, updatedRecord);
         return {
             performed: { errcode: performed.errcode, bizObjectId: returnedId, sheetCode, resolvedFrom },
             // Flat record contract (ticket 17): live FormLoadVO normalizes to the
             // fake's flat field shape so `authoritative.<fieldCode>` reads work on
             // both faces.
-            readback: { authoritative: projectReadbackRecord(normalizeLoadedRecord(readbackData), args), sequenceStatus },
+            readback: { authoritative: projectReadbackRecord(updatedRecord, args), sequenceStatus, ...(updatedEmptyFields.length > 0 ? { readbackWarning: readbackWarningFor(updatedEmptyFields, "data.update") } : {}) },
         };
     });
     /**
@@ -1006,6 +1053,7 @@ export function registerRuntimeDataLane(tools) {
                 schemaCode: args.schemaCode,
                 bizObjectId: targetObjectId,
                 workflowCode: explicitWorkflowCode,
+                nextCommand: "omc describe data.submit --example workflow-backed-data-submit",
                 message: "8.6.26 has no REST in-place workflow start for an existing no-instance row (submitWorkflowByWorkflowCode -> createAndGetBizObject INSERTs -> 40000 duplicate primary key; the load+update starter is facade-only). Supported shape: create workflow drafts via data.save with workflowCode (returns same-id row + DRAFT instance + start workItemId), then data.submit with that workItemId + workflowInstanceId + bizObjectId",
             });
         }
@@ -1021,6 +1069,7 @@ export function registerRuntimeDataLane(tools) {
                     schemaCode: args.schemaCode,
                     bizObjectId: targetObjectId,
                     sheetCode,
+                    nextCommand: `omc call data.list --args '${JSON.stringify({ schemaCode: args.schemaCode })}'`,
                     message: "no live business object with this id; refusing to submit (the platform would otherwise create a new row)",
                 });
             }
@@ -1163,13 +1212,20 @@ export function registerRuntimeDataLane(tools) {
             // start path returns only {result, objectId}); the authoritative loaded
             // row carries it. Prefer the response, then the row.
             const effectiveInstanceId = workflowInstanceId ?? extractWorkflowInstanceId(loaded) ?? (loadedRecord && typeof loadedRecord.workflowInstanceId === "string" && loadedRecord.workflowInstanceId ? loadedRecord.workflowInstanceId : null);
+            // An approval submit returns the status + the fields the caller submitted,
+            // not the whole row: r12's 25 approvals were the largest read face at
+            // 55.6 KB. Explicit summary/fields/full keep their contract.
+            const approvalDelta = hasWorkItem && args.summary !== true && args.full !== true && !(Array.isArray(args.fields) && args.fields.length > 0);
             readback = {
                 ...readback,
                 workflowInstanceId: effectiveInstanceId,
                 objectId,
                 workItemId: typeof performedData.workItemId === "string" ? performedData.workItemId : null,
                 sequenceStatus,
-                submittedData: projectReadbackRecord(loadedRecord, args),
+                submittedData: approvalDelta ? projectApprovalReadback(loadedRecord, Object.keys(formData ?? {})) : projectReadbackRecord(loadedRecord, args),
+                ...(approvalDelta
+                    ? { readbackShape: "approval-delta", readbackHint: "审批提交默认只回 sequenceStatus + 本次提交的字段；要整条记录（含子表/系统字段）加 full:true，要指定字段加 fields:[...]" }
+                    : {}),
             };
             // Multi-level approval: after a submit advances the flow, the caller
             // almost always needs the NEXT pending todo — bench52/53 paid an extra