@stalfh233/omc-cli 0.4.92 → 0.4.94

package/dist/approval-flow.js

@@ -93,7 +93,7 @@ export async function cmdApprovalFlow(args) {
         return 0;
     }
     // 1) 确保流程存在（一个模型只能有一个：已存在则直接 update）
-    const createOutcome = await runToolCall("workflow.create", { args: { schemaCode: schema, code: compiled.workflowCode, name: `${schema} 审批流`, ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const createOutcome = await runToolCall("workflow.create", { args: { schemaCode: schema, code: compiled.workflowCode, name: `${schema} 审批流`, ...(environment ? { environment } : {}) }, requestId: request, environment, print: () => undefined });
     if (createOutcome.exitCode !== 0) {
         const result = createOutcome.result;
         const blocker = String(result.blocker ?? "");
@@ -102,8 +102,24 @@ export async function cmdApprovalFlow(args) {
             return createOutcome.exitCode;
         }
     }
+    // r14 U1: `<schema>_wf` is THIS composer's own naming convention (not the
+    // platform's), and `workflow.create` is idempotent — when that code already
+    // exists it answers alreadyPresent and writes nothing, so the following
+    // update() merges into whatever template was left behind. A residual from an
+    // earlier round then silently inherits the new nodes (r14 chased exactly this:
+    // a leftover inspHazardFlow made the next run's behaviour inexplicable).
+    const createReadback = createOutcome.result?.readback;
+    const preexistingTemplate = createReadback?.alreadyPresent === true;
+    const preexistingSection = preexistingTemplate
+        ? {
+            preexistingTemplate: true,
+            preexistingWarning: `流程 code ${compiled.workflowCode} 在本轮之前就已存在（workflow.create 幂等跳过，未新建）。` +
+                `本次 update 是**合并**进这条既有模板，旧节点/旧连线会保留——它们可能属于上一次运行或另一个模型。` +
+                `如果不是有意复用，先 workflow.delete（有实例会 402508，用 model-purge）或换一个 workflowCode 再跑。`,
+        }
+        : {};
     // 2) 取字段清单构建审批节点只读权限（r75 修正：审批节点 editable:false）
-    const fieldList = await runToolCall("field.list", { args: { schemaCode: schema, published: true, ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const fieldList = await runToolCall("field.list", { args: { schemaCode: schema, published: true, ...(environment ? { environment } : {}) }, requestId: request, environment, print: () => undefined });
     const fieldRows = (fieldList.result?.fields ?? fieldList.result?.items ?? []);
     const propertyCodes = fieldRows.map((row) => String(row.code ?? row.propertyCode ?? "")).filter(Boolean);
     const approvalNodes = compiled.activities.filter((a) => a.activityType === "PARTICIPANT" && a.participant !== "{Originator}");
@@ -113,16 +129,16 @@ export async function cmdApprovalFlow(args) {
     // 3) update 模板（merge 语义；工具自动补 sheetCode/链路/设计器默认）
     const updateOutcome = await runToolCall("workflow.update", {
         args: { schemaCode: schema, code: compiled.workflowCode, template: { workflowCode: compiled.workflowCode, activities: activitiesWithPermissions }, ...(environment ? { environment } : {}) },
-        requestId: request, environment,
+        requestId: request, environment, print: () => undefined,
     });
     if (updateOutcome.exitCode !== 0) {
         writeEnvelope(envelope(classifyResult(updateOutcome.result).status, updateOutcome.result, request, classifyResult(updateOutcome.result).error));
         return updateOutcome.exitCode;
     }
     // 4) publish
-    const publishOutcome = await runToolCall("workflow.publish", { args: { schemaCode: schema, code: compiled.workflowCode, ...(environment ? { environment } : {}) }, requestId: request, environment });
+    const publishOutcome = await runToolCall("workflow.publish", { args: { schemaCode: schema, code: compiled.workflowCode, ...(environment ? { environment } : {}) }, requestId: request, environment, print: () => undefined });
     const classified = classifyResult(publishOutcome.result);
-    writeEnvelope(envelope(classified.status, { schemaCode: schema, workflowCode: compiled.workflowCode, steps: steps.length, publish: publishOutcome.result }, request, classified.error));
+    writeEnvelope(envelope(classified.status, { schemaCode: schema, workflowCode: compiled.workflowCode, steps: steps.length, ...preexistingSection, publish: publishOutcome.result }, request, classified.error));
     if (publishOutcome.exitCode === 0)
         process.stderr.write("[omc] 前台生效验证清单：1) 造一条数据提交走流程；2) 每级审批人在门户有待办（角色用 FindUserByRole 需审批人挂在发起人同部门，否则 PENDING 不来）；3) 审批节点字段只读（不可改单）；4) 驳回退发起人核对；5) 设计器打开流程确认节点链显示正常。\n");
     return publishOutcome.exitCode;

package/dist/cli-contract.js

@@ -75,6 +75,36 @@ export function serializeEnvelope(value) {
 export function requestId() {
     return randomUUID();
 }
+/**
+ * r16 P2: `rule-graph-validation-failed` always named the same example
+ * (`business-rule-branch-conditional`) no matter WHICH lint code fired, so a
+ * QUERY-shape failure sent the caller to a BRANCH example (2 wasted calls, 0
+ * benefit). Route by the first code's prefix and only fall back to the example.
+ */
+export function ruleGraphRecovery(validation) {
+    if (!Array.isArray(validation))
+        return undefined;
+    const codes = validation
+        .filter((entry) => entry !== null && typeof entry === "object")
+        .filter((entry) => entry.severity !== "warning")
+        .map((entry) => String(entry.code ?? ""));
+    const first = codes[0];
+    if (first === undefined)
+        return undefined;
+    if (first.startsWith("rule-graph-query-"))
+        return "omc describe rule.save --param nodeGraph";
+    if (first === "rule-graph-node-output-not-addressable")
+        return "omc compute --help";
+    if (first.startsWith("rule-graph-assign-"))
+        return "omc describe rule.save --param nodeGraph";
+    if (first.startsWith("rule-graph-preset-system-node") || first === "rule-graph-system-node")
+        return "omc describe rule.save --example standard-business-rule-graph";
+    if (first.startsWith("rule-graph-branch") || first.startsWith("rule-graph-condition-"))
+        return "omc describe rule.save --example business-rule-branch-conditional";
+    if (first.startsWith("rule-graph-create") || first.startsWith("rule-graph-query"))
+        return "omc describe rule.save --example rule-cross-model-create";
+    return undefined;
+}
 /**
  * Derive a runnable next command from a refusal payload. Tools that already
  * carry a structured recovery (an explicit `nextCommand`, an artifact `fetch`
@@ -94,6 +124,11 @@ export function nextCommandFor(result) {
         const index = trimmed.indexOf("omc ");
         return index > 0 ? trimmed.slice(index).trim() : undefined;
     };
+    // A tool that already diagnosed the shape wins over its generic recovery: the
+    // validation codes say WHAT is wrong, so they pick the right example.
+    const routed = ruleGraphRecovery(result.validation) ?? ruleGraphRecovery(result.nodeChecks);
+    if (routed !== undefined)
+        return routed;
     const explicit = result.nextCommand;
     if (typeof explicit === "string" && explicit.trim().length > 0)
         return explicit.trim();

package/dist/cli.js

@@ -419,7 +419,9 @@ async function cmdCall(store, args) {
     // `--jq` is the same path projection plus `[]` fan-out; a bare `--jq` is the
     // key inventory (the same muscle memory as `artifact get <id> --jq`).
     const extractPaths = [...argvValues(args, "--extract"), ...argvValues(args, "--jq")];
-    const extractKeys = args.includes("--extract-keys") || args.some((token, index) => token === "--jq" && (args[index + 1] === undefined || args[index + 1].startsWith("--")));
+    // `artifact get` uses `--keys`; `call` only had `--extract-keys`, so the muscle
+    // memory failed with "unknown option '--keys'" (r16 P7). Accept both.
+    const extractKeys = args.includes("--extract-keys") || args.includes("--keys") || args.some((token, index) => token === "--jq" && (args[index + 1] === undefined || args[index + 1].startsWith("--")));
     const dryRun = args.includes("--dry-run");
     const waitValue = flag("--wait");
     let waitMs = 0;
@@ -1086,7 +1088,7 @@ function cmdHelp(topic, commandNames, transport, section, sections = false, all
         for (const requested of requestedSections) {
             const sliced = readSkillSection(topic, requested);
             if (sliced?.section)
-                found.push({ section: requested, content: sliced.section });
+                found.push({ section: requested, content: sliced.section, chars: sliced.section.length, bytes: Buffer.byteLength(sliced.section, "utf8") });
             else
                 missing.push(requested);
         }
@@ -1113,7 +1115,18 @@ function cmdHelp(topic, commandNames, transport, section, sections = false, all
         }
         if (!sliced.section)
             return emitInvalid(transport, { message: `topic ${topic} 没有 section "${singleSection}"；可用：${sliced.headings.join("、")}`, blocker: "help-section-not-found" });
-        return emitTransportResult({ status: "ok", topic: sliced.document.name, section: singleSection, content: sliced.section }, transport);
+        // r16 cost finding: the same section was re-read SIX times (46 KB) because the
+        // receipt only gave `bytes` while a character count was compared against it.
+        // Emit both, plus `complete:true` so "is this truncated?" never needs a retry.
+        return emitTransportResult({
+            status: "ok",
+            topic: sliced.document.name,
+            section: singleSection,
+            chars: sliced.section.length,
+            bytes: Buffer.byteLength(sliced.section, "utf8"),
+            complete: true,
+            content: sliced.section,
+        }, transport);
     }
     const document = readSkill(topic);
     if (document === undefined) {
@@ -1282,8 +1295,9 @@ async function main() {
         commandExitCode = CLI_EXIT_CODES.ok;
     });
     command.command("doctor").option("--environment <environment>").option("--env <environment>").option("--service <serviceCode>", "可选：体检单个业务集成服务的鉴权参数形状（掩码/占位/全 0 检出，WARN 非致命）").action(async (options) => { commandExitCode = await cmdDoctor(new ConfigStore(defaultPaths()), options.environment ?? options.env, options.service); });
-    command.command("call <tool>").option("--env <environment>").option("--environment <environment>").option("--args <json>").option("--args-file <path>").option("--args-list <json-array>", '同一工具跑 N 次（JSON 数组，每条一个 args 对象）；逐条执行、默认不中断，最后回 succeeded/failed 汇总。适合批量建字段等').option("--preflight", "与 --args-list 一起用：只跑参数校验 + 写前语义闸（零 wire、零写入），一次报全所有形状问题").addOption(new Option("--extract <path>", "在本次结果的 artifact 内取一个路径的值（可重复；省掉一次 artifact get）").argParser((value, previous = []) => [...previous, value]).default([])).addOption(new Option("--jq [path]", "同 --extract，并支持 [] 映射（如 items[].fields.planNo）；裸 --jq 列出结果的顶层键").argParser((value, previous = []) => [...previous, value]).default([])).option("--extract-keys", "列出本次结果 artifact 的顶层键与体积（省掉一次 artifact get --keys）").option("--max-output-bytes <bytes>").option("--request-id <requestId>").option("--timeout-ms <milliseconds>").option("--wait <milliseconds>").option("--dry-run").addHelpText("after", `\n${onboardingHelp()}\n`).action(async (tool, options) => {
-        const rest = [tool, ...(options.env ? ["--env", options.env] : []), ...(options.environment ? ["--environment", options.environment] : []), ...(options.args !== undefined ? ["--args", options.args] : []), ...(options.argsFile !== undefined ? ["--args-file", options.argsFile] : []), ...(options.argsList !== undefined ? ["--args-list", options.argsList] : []), ...(options.preflight ? ["--preflight"] : []), ...(Array.isArray(options.extract) ? options.extract.flatMap((path) => ["--extract", path]) : []), ...(Array.isArray(options.jq) ? options.jq.flatMap((path) => path === true ? ["--jq"] : ["--jq", path]) : []), ...(options.extractKeys ? ["--extract-keys"] : []), ...(options.maxOutputBytes !== undefined ? ["--max-output-bytes", options.maxOutputBytes] : []), ...(options.requestId ? ["--request-id", options.requestId] : []), ...(options.timeoutMs !== undefined ? ["--timeout-ms", options.timeoutMs] : []), ...(options.wait !== undefined ? ["--wait", options.wait] : []), ...(options.dryRun ? ["--dry-run"] : [])];
+    command.command("call <tool>").option("--env <environment>").option("--environment <environment>").option("--args <json>").option("--args-file <path>").option("--args-list <json-array>", '同一工具跑 N 次（JSON 数组，每条一个 args 对象）；逐条执行、默认不中断，最后回 succeeded/failed 汇总。适合批量建字段等').option("--preflight", "与 --args-list 一起用：只跑参数校验 + 写前语义闸（零 wire、零写入），一次报全所有形状问题").option("--keys", "与 artifact get 的 --keys 同义（= --extract-keys）：列出本次结果 artifact 的顶层键与体积").addOption(new Option("--extract <path>", "在本次结果的 artifact 内取一个路径的值（可重复；省掉一次 artifact get）").argParser((value, previous = []) => [...previous, value]).default([])).addOption(new Option("--jq [path]", "同 --extract，并支持 [] 映射（如 items[].fields.planNo）；裸 --jq 列出结果的顶层键").argParser((value, previous = []) => [...previous, value]).default([])).option("--extract-keys", "列出本次结果 artifact 的顶层键与体积（省掉一次 artifact get --keys）").option("--max-output-bytes <bytes>").option("--request-id <requestId>").option("--timeout-ms <milliseconds>").option("--wait <milliseconds>").option("--dry-run").addHelpText("after", `\n${onboardingHelp()}\n`).action(async (tool, options) => {
+        const rest = [tool, ...(options.env ? ["--env", options.env] : []), ...(options.environment ? ["--environment", options.environment] : []), ...(options.args !== undefined ? ["--args", options.args] : []), ...(options.argsFile !== undefined ? ["--args-file", options.argsFile] : []), ...(options.argsList !== undefined ? ["--args-list", options.argsList] : []), ...(options.preflight ? ["--preflight"] : []), ...(Array.isArray(options.extract) ? options.extract.flatMap((path) => ["--extract", path]) : []), ...(Array.isArray(options.jq) ? options.jq.flatMap((path) => path === true ? ["--jq"] : ["--jq", path]) : []), ...(options.extractKeys ? ["--extract-keys"] : []),
+            ...(options.keys ? ["--keys"] : []), ...(options.maxOutputBytes !== undefined ? ["--max-output-bytes", options.maxOutputBytes] : []), ...(options.requestId ? ["--request-id", options.requestId] : []), ...(options.timeoutMs !== undefined ? ["--timeout-ms", options.timeoutMs] : []), ...(options.wait !== undefined ? ["--wait", options.wait] : []), ...(options.dryRun ? ["--dry-run"] : [])];
         commandExitCode = await cmdCall(new ConfigStore(defaultPaths()), rest);
     });
     command.command("compute").option("--schema <schemaCode>").option("--schema-code <schemaCode>").option("--target <propertyCode>").option("--property <propertyCode>").option("--formula <formula>").option("--where <condition>", "条件聚合：\"<子列code> = <值>\"，与 --formula \"{<子表code>.<子列code>}\" 配合编译为 COUNTIF/SUMIF").option("--aggregate <count|sum>", "条件聚合用哪种：count（默认，→COUNTIF）/ sum（→SUMIF）").option("--allow-unfiltered", "显式接受「对整个子表列无条件聚合」；不给则拒绝（会把不符合条件的行也算进去）").option("--name <name>").option("--env <environment>").option("--environment <environment>").option("--apply").addHelpText("after", "\n字段计算规则拼装器：公式 {字段} 引用 → datarule type2 完整形状（editorText/editorMark 自动生成）。默认 dry-run，--apply 写入。条件聚合用 --formula \"{子表.子列}\" --where \"子列 = 值\"。复杂场景（条件分支/跨模型）走 omc next 的 recipe 路径。\n").action(async (options) => {
@@ -1335,7 +1349,17 @@ async function main() {
         .option("--no-form", "跳过表单发布")
         .option("--force-publish", "有字段失败也发布（默认停在发布前）")
         .option("--apply")
-        .addHelpText("after", "\n一条命令建模型：模型 → N 字段（含子表挂载与子列）→ 发布字段 → 发布表单。默认 dry-run 只列计划。\n")
+        .addHelpText("after", `\n一条命令建模型：模型 → N 字段（含子表挂载与子列）→ 发布字段 → 发布表单。默认 dry-run 只列计划。\n\n` +
+        `字段族名（propertyType，必须逐字匹配；--apply 才校验，dry-run 不校验）：\n` +
+        `  SHORT_TEXT LONG_TEXT RICH_TEXT NUMERICAL DATE TIME LOGICAL\n` +
+        `  RADIO CHECKBOX DROPDOWN_BOX DROPDOWN_MULTI_BOX\n` +
+        `  STAFF_SELECTOR STAFF_MULTI_SELECTOR DEPARTMENT_SELECTOR DEPARTMENT_MULTI_SELECTOR\n` +
+        `  WORK_SHEET MULT_WORK_SHEET RELEVANCE_DATA HYPER_LINK ATTACHMENT\n` +
+        `  CHILD_TABLE FORMULA ADDRESS\n` +
+        `  常见错写：DEPARTMENT_MULTI→DEPARTMENT_MULTI_SELECTOR、STAFF_SINGLE→STAFF_SELECTOR、DROP_DOWN_BOX→DROPDOWN_BOX\n\n` +
+        `choices（RADIO/CHECKBOX/DROPDOWN 系列）：**字符串数组**，如 [\"待处理\",\"已完成\"]——不是 [{key,value}]\n` +
+        `关联字段（WORK_SHEET/MULT_WORK_SHEET）：options:{\"schemaCode\":\"<目标模型>\"} + relativeCode:\"<目标模型>\"\n` +
+        `子表：childFields:[…]（每条同字段形状）\n`)
         .action(async (options) => {
         const rest = ["model-scaffold",
             ...(options.code ? ["--code", options.code] : []),

package/dist/lanes/custom-page.js

@@ -209,8 +209,12 @@ export function registerCustomPageTools(tools) {
                 code: args.code,
                 existDraft: body.existDraft ?? null,
                 published: body.published ?? null,
-                ...(part !== "published" ? { draftContent: draft, draftBytes: draft === null ? 0 : Buffer.byteLength(draft, "utf8") } : {}),
-                ...(part !== "draft" ? { publishedContent: published, publishedBytes: published === null ? 0 : Buffer.byteLength(published, "utf8") } : {}),
+                ...(part !== "published" ? { draftContent: draft, draftChars: draft === null ? 0 : draft.length, draftBytes: draft === null ? 0 : Buffer.byteLength(draft, "utf8") } : {}),
+                ...(part !== "draft" ? { publishedContent: published, publishedChars: published === null ? 0 : published.length, publishedBytes: published === null ? 0 : Buffer.byteLength(published, "utf8") } : {}),
+                // r16 P8: `--jq content` returned null because the key is publishedContent.
+                // Keep the canonical keys and point at them instead of letting the miss
+                // read as "the body is empty".
+                contentKeyHint: part === "draft" ? "正文键是 draftContent（不是 content）" : part === "published" ? "正文键是 publishedContent（不是 content）" : "正文键是 draftContent / publishedContent（不是 content）",
             };
         }),
     }));

package/dist/lanes/rule-graph.js

@@ -1163,7 +1163,7 @@ export function validateConditionLeaf(leaf, nodeCode, where, warnings, legacyTol
         else if (String(leaf.ruleConditionType) === "CHANGED")
             warnings?.push({ code: "rule-graph-legacy-operator-roundtrip", nodeCode, key: "ruleConditionType", severity: "warning", message: `${where}: ruleConditionType "CHANGED" 是设计器 UI 独有变更检测算子——按原样保留回传（round-trip 保真），OMC 不支持新建此类算子；新增条件请用 ${RULE_CONDITION_TYPES.join("/")}` });
         else
-            blockers.push({ code: "rule-graph-condition-type", nodeCode, key: "ruleConditionType", message: `${where}: ruleConditionType "${String(leaf.ruleConditionType)}}" 不在 ${RULE_CONDITION_TYPES.join("/")}` });
+            blockers.push({ code: "rule-graph-condition-type", nodeCode, key: "ruleConditionType", message: `${where}: ruleConditionType "${String(leaf.ruleConditionType)}" 不在 ${RULE_CONDITION_TYPES.join("/")}` });
     }
     if (leaf[BRANCH_EXIT_OPERATOR_KEY] !== undefined && !RULE_CONDITION_TYPES.includes(String(leaf[BRANCH_EXIT_OPERATOR_KEY]))) {
         if (legacyTolerant)
@@ -1555,6 +1555,54 @@ export function validateRuleNodeGraph(graph, ruleCode, schemaCode, options = {})
                 message: `分支节点后接多个跨模型 UPDATE（${fanOut.join("；")}）——真机 2026-10-20 该组合在写/运行时报 50000。改成：① 单个跨模型 UPDATE + 条件动作（dataActions 内按条件区分），或 ② 通过 BIZ_ACTION 自调二开接口一次处理多行。`,
             });
     }
+    // r16 P1 (costliest finding of the round: 21 rule.save calls, 14 refusals):
+    // a caller who wants "count the child rows that match X and write the number to
+    // a main field" naturally invents a QUERY node output like `Q1_count` and
+    // references it downstream. The platform has NO such addressable output —
+    // RuleVirtualPropertyType only exposes `var_judgment_status/_total/
+    // _match_count/_non_match_count`, which belong to a BRANCH's own judgment, not
+    // to a QUERY result set. The save passes and the PUBLISH self-check then fails
+    // with「字段不存在」naming the invented code, which sends the caller looking for
+    // a missing field. Refuse before the wire and name the two real paths.
+    const nodeCodes = new Set(nodeRecords.map((node) => String(node.nodeCode ?? "")).filter((code) => code.length > 0));
+    const inventedOutputs = [];
+    const referenceKeys = ["currentSchemaDataItem", "currentDataItemValue", "targetSchemaDataItem", "value"];
+    for (const node of nodeRecords) {
+        const nodeCode = String(node.nodeCode ?? "");
+        const walk = (value, where) => {
+            if (Array.isArray(value)) {
+                value.forEach((entry, index) => walk(entry, `${where}[${index}]`));
+                return;
+            }
+            if (value === null || typeof value !== "object")
+                return;
+            for (const [key, entry] of Object.entries(value)) {
+                if (referenceKeys.includes(key) && typeof entry === "string") {
+                    // `Q1_count` / `SearchData_1_rows` where Q1/SearchData_1 IS a node code.
+                    const match = /^([A-Za-z][\w]*?)_(count|rows|total|result|output|size|length)$/.exec(entry.trim());
+                    if (match && nodeCodes.has(match[1]) && match[1] !== nodeCode)
+                        inventedOutputs.push({ nodeCode, reference: entry.trim(), where: `${where}.${key}` });
+                }
+                walk(entry, `${where}.${key}`);
+            }
+        };
+        walk(node, nodeCode || "node");
+    }
+    if (inventedOutputs.length > 0) {
+        const first = inventedOutputs[0];
+        blockers.push({
+            code: "rule-graph-node-output-not-addressable",
+            nodeCode: first.nodeCode,
+            key: first.where,
+            message: `引用 ${inventedOutputs.map((entry) => `${entry.reference}（${entry.where}）`).join("、")} 试图当"某个节点的输出变量"——平台**没有**这种可寻址输出。` +
+                `QUERY 节点的结果集只在它自己的下游节点里以 inputParam:"_<节点code>_output" 被消费，不能被条件/赋值按名字取值；` +
+                `平台仅有的虚拟属性是 BRANCH 自身的判断统计（var_judgment_status / var_judgment_total / var_judgment_match_count / var_judgment_non_match_count），` +
+                `那是"分支判定的命中数"，不是 QUERY 结果行的计数（RuleVirtualPropertyType.java，8.6.26）。` +
+                `要「统计子表符合条件的行数写入主表字段」，用字段计算规则：` +
+                `omc compute --schema <模型> --target <目标字段> --formula '{<子表schemaCode>.<子列code>}' --where '<子列code> = <值>' --aggregate count（编译成 COUNTIF，服务端在 submit/update 时算）。` +
+                `要「按查询结果逐条新增」才用 QUERY + CREATE（N→N 扇出，recipe: rule-cross-model-create）。`,
+        });
+    }
     if (schemaCode !== undefined && schemaCode.length > 0) {
         const writeTypes = new Set(["UPDATE", "CREATE", "DELETE"]);
         const crossModel = nodeRecords.filter((node) => {
@@ -1843,7 +1891,14 @@ export function validateRuleNodeGraph(graph, ruleCode, schemaCode, options = {})
                     code: "rule-graph-query-conditions-empty",
                     nodeCode,
                     key: "targetConditionGroups",
-                    message: `QUERY 的 ${mainEmpty ? "mainConditions" : "sheetConditions"} 没有任何条件叶——引擎 getPage 会直接返回空列表且不写日志（QueryActivityBehavior:78-86，1.1.25），运行期表现为「节点执行开始」后静默无输出。要查全表请显式写一条恒真条件叶（如 targetSchemaDataItem:"id" + ruleConditionType:"NOT_EMPTY"），否则补上真正的筛选条件。`,
+                    message: `QUERY 的 ${mainEmpty ? "mainConditions" : "sheetConditions"} 没有任何条件叶——引擎 getPage 会直接返回空列表且不写日志（QueryActivityBehavior:78-86，1.1.25），运行期表现为「节点执行开始」后静默无输出。要查全表请显式写一条恒真条件叶（如 targetSchemaDataItem:"id" + ruleConditionType:"NEP"；非空枚举是 EP/NEP，没有 NOT_EMPTY），否则补上真正的筛选条件。` +
+                        // r16 P2: the four QUERY requirements used to arrive one refusal at a
+                        // time (targetSchemaCode → condition leaf → group shape → 550018).
+                        // List them together so one edit satisfies all of them.
+                        `\nQUERY 节点的完整要求（一次核对，别一条条试）：① targetSchemaCode 必填（子表写 <schemaCode>.<子表code>）；` +
+                        `② targetConditionGroups 必须是对象 {mainConditions:[[…]],sheetConditions:[[…]]}，不能是裸数组；` +
+                        `③ 主表条件与子表条件都要至少一条叶（查全表就写 id + NEP 恒真叶）；` +
+                        `④ 结果集不能被下游按名字引用——下游消费写 inputParam:"_${String(node.nodeCode ?? "")}_output"，要汇总计数改用 omc compute。`,
                 });
             }
             if (node.dataCondition !== undefined && node.dataCondition !== null && countConditionLeaves(node.dataCondition) === 0) {

package/dist/lanes/runtime-data.js

@@ -288,6 +288,66 @@ async function loadExistingBizObject(session, schemaCode, sheetCode, objectId) {
         throw error;
     }
 }
+/**
+ * Is this work item still the caller's open todo? `false` = it was already
+ * submitted (the usual meaning of 100005, since the platform rate-limits per
+ * work item). `null` = could not tell.
+ */
+async function workItemStillOpen(session, workflowInstanceId, workItemId) {
+    if (typeof workflowInstanceId !== "string" || workflowInstanceId.length === 0)
+        return null;
+    try {
+        const data = (await wireCall(session, {
+            path: ENDPOINTS.workflowListWorkItems,
+            query: { workflowInstanceId, status: "PENDING", page: "0", size: "200" },
+        })).data;
+        const rows = Array.isArray(data?.content) ? data.content : wireRows(data);
+        if (typeof workItemId !== "string" || workItemId.length === 0)
+            return rows.length > 0;
+        return rows.some((row) => String(row.workItemId ?? row.id ?? "") === workItemId);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * People-picker values ride the wire as a bare user id (or an array of ids), but
+ * they COME BACK as objects. Writing the readback value verbatim trips
+ * `UserBizField.fillClientContent` in the engine (Assertion Failed → bare 50000,
+ * r16 P5). Detect the object/array shape on the way IN, against the published
+ * field types, so the refusal names the field instead of letting the platform
+ * answer 服务异常.
+ */
+async function personFieldShapeViolations(session, schemaCode, formData) {
+    const STAFF_TYPES = new Set([50, 51, 52]);
+    let rows;
+    try {
+        rows = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "true" } })).data);
+    }
+    catch {
+        return [];
+    }
+    const staffCodes = new Map();
+    for (const row of rows) {
+        const type = Number(row.type ?? row.propertyType);
+        const code = String(row.code ?? row.propertyCode ?? "");
+        if (code && STAFF_TYPES.has(type))
+            staffCodes.set(code, String(row.typeName ?? type));
+    }
+    const violations = [];
+    for (const [code, value] of Object.entries(formData)) {
+        if (!staffCodes.has(code))
+            continue;
+        if (value === null || value === undefined || value === "")
+            continue;
+        if (typeof value === "string")
+            continue;
+        if (Array.isArray(value) && value.every((entry) => typeof entry === "string"))
+            continue;
+        violations.push({ code, got: Array.isArray(value) ? `array[${value.length}]` : typeof value });
+    }
+    return violations;
+}
 /**
  * Portal-required fields the published form declares (`control.options.required`
  * or `requiredFormula`). The portal enforces these client-side; the REST
@@ -1032,6 +1092,22 @@ export function registerRuntimeDataLane(tools) {
         // so a missing required value must be REPORTED, not silently accepted as a
         // portal-valid submit (dogfood R3). Best-effort read; a failure never
         // blocks the submit.
+        // r16 P5:人员字段读回来是对象数组 `[{id,type,name,…}]`，写回去必须是**字符串 id**
+        // ——写成对象会让 UserBizField.fillClientContent 断言失败，平台只回 50000。
+        // 读写不对称且 schema 无法表达（formData 是 additionalProperties），所以在
+        // 写前按已发布字段类型做一次浅校验，把这类形状错误变成一条指名道姓的拒绝。
+        const staffShaped = await personFieldShapeViolations(session, args.schemaCode, formData).catch(() => []);
+        if (staffShaped.length > 0)
+            throw new ToolRefusalError({
+                status: "refused",
+                blocker: "submit-person-field-shape",
+                schemaCode: args.schemaCode,
+                fields: staffShaped,
+                message: `这些人员字段的取值是对象/数组：${staffShaped.map((entry) => `${entry.code}(${entry.got})`).join("、")}。` +
+                    `人员字段**写入只接受字符串 id**（多个用逗号或数组的字符串 id）——读回来是 \`[{id,type,name,fullDepartment,…}]\`，` +
+                    `把读回值原样写回会让平台 UserBizField.fillClientContent 断言失败、只回 50000 服务异常。` +
+                    `写成 "\"<用户id>\"" 或 ["<id1>","<id2>"]。`,
+            });
         const validation = await portalRequiredViolations(session, args.schemaCode, sheetCode, args.formData).catch(() => ({ requiredFields: [], missingRequired: [] }));
         // Directive: a workflow-backed model's submit must START the workflow, not
         // merely save a sheet row. When the caller names no workflow params, detect
@@ -1039,6 +1115,38 @@ export function registerRuntimeDataLane(tools) {
         // with no workflow stays a direct sheet submit (formType=2 -> COMPLETED).
         let explicitWorkflowCode = typeof args.workflowCode === "string" && args.workflowCode.trim().length > 0 ? args.workflowCode.trim() : "";
         let autoStarted = false;
+        // r16 P4: a second submit on the same work item answers 100005
+        // SYS_REPLAY_ERROR「频繁重复提交！」(ErrorCode.java:68 — the SAME numeric code
+        // as TEST_CONNECTION_FAIL, so the text is the only discriminator). The
+        // platform rate-limits per work item, not per request body, so retrying
+        // with a different payload changes nothing; the caller needs to know
+        // whether the FIRST submit actually landed. Diagnose before the wire.
+        if (hasWorkItem) {
+            try {
+                const activity = (await wireCall(session, {
+                    path: ENDPOINTS.workflowListInstanceActivity,
+                    query: { workflowInstanceId: String(args.workflowInstanceId ?? "") },
+                })).data;
+                const rows = Array.isArray(activity?.activities) ? activity.activities : wireRows(activity);
+                const mine = rows.filter((row) => String(row.workItemId ?? "") === args.workItemId);
+                const finished = mine.length > 0 && mine.every((row) => /FINISHED|COMPLETED/i.test(String(row.state ?? row.status ?? "")));
+                if (finished)
+                    throw new ToolRefusalError({
+                        status: "refused",
+                        blocker: "submit-workitem-already-finished",
+                        schemaCode: args.schemaCode,
+                        workItemId: args.workItemId,
+                        nextCommand: `omc call workitem.list --args '${JSON.stringify({ workflowInstanceId: String(args.workflowInstanceId ?? "") })}'`,
+                        message: `待办 ${String(args.workItemId)} 已经是完成状态——本次提交**没有发生**，平台会回 100005「频繁重复提交！」（SYS_REPLAY_ERROR，按 workItem 维度限流，换载荷/等待都无效）。` +
+                            `这不是失败，是"已经提交过了"。用 workitem.list 看下一级待办，或 data.load 看当前 sequenceStatus，不要重复提交。`,
+                    });
+            }
+            catch (error) {
+                if (error instanceof ToolRefusalError)
+                    throw error;
+                // A read failure must not block the submit (fail open).
+            }
+        }
         if (!explicitWorkflowCode && !hasWorkItem && !hasInstance) {
             const resolved = await resolvePublishedWorkflowCode(session, args.schemaCode);
             if (resolved) {
@@ -1150,11 +1258,39 @@ export function registerRuntimeDataLane(tools) {
         // platform answer "权限不足", which reads like a misconfiguration.
         if (hasWorkItem)
             await diagnoseApprovalSubmitIdentity(session, { workflowInstanceId: args.workflowInstanceId, workItemId: args.workItemId });
-        const performed = await runtimeWriteWithAppMapping(session, args.schemaCode, 50000, "data.submit 运行时提交稳定失败（50000）", () => wireCall(session, {
-            path: ENDPOINTS.runtimeFormSubmit,
-            method: "POST",
-            body: payload,
-        }), undefined, hasWorkflowCode ? explicitWorkflowCode : undefined);
+        let performed;
+        try {
+            performed = await runtimeWriteWithAppMapping(session, args.schemaCode, 50000, "data.submit 运行时提交稳定失败（50000）", () => wireCall(session, {
+                path: ENDPOINTS.runtimeFormSubmit,
+                method: "POST",
+                body: payload,
+            }), undefined, hasWorkflowCode ? explicitWorkflowCode : undefined);
+        }
+        catch (error) {
+            // r16 P4: 100005 is SYS_REPLAY_ERROR「频繁重复提交！」(ErrorCode.java:68 —
+            // the same numeric code as TEST_CONNECTION_FAIL, so only the text
+            // separates them). The platform rate-limits per WORK ITEM, so a different
+            // payload or a longer wait changes nothing. The actionable question is
+            // "did the earlier submit land?", which the todo list answers.
+            if (error instanceof WireError && error.kind === "business" && error.errcode === RUNTIME_DATA_WIRE.replayTokenErrcode) {
+                const stillMine = await workItemStillOpen(session, args.workflowInstanceId, args.workItemId).catch(() => null);
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: stillMine === false ? "submit-workitem-already-finished" : "submit-rate-limited",
+                    schemaCode: args.schemaCode,
+                    workItemId: args.workItemId ?? null,
+                    workflowInstanceId: args.workflowInstanceId ?? null,
+                    nextCommand: `omc call workitem.list --args '${JSON.stringify({ workflowInstanceId: String(args.workflowInstanceId ?? "") })}'`,
+                    message: stillMine === false
+                        ? `100005「频繁重复提交！」在这里的真实含义：待办 ${String(args.workItemId ?? "(未提供)")} **已经提交过了**。限流按 workItem 维度，换载荷、等待、换 requestId 都无效——这不是失败。用 workitem.list 看下一级待办，或 data.load 看 sequenceStatus，不要重试本次提交。`
+                        : `100005 = 平台 SYS_REPLAY_ERROR「频繁重复提交！」（ErrorCode.java:68，与"测试连接不通过"共用该数值码，只能靠文案区分）。` +
+                            `两种成因：① 该待办已经提交过；② startWorkflow 路径的 replayToken 未刷新。` +
+                            `${stillMine === null ? "（待办状态读取失败，无法判定）" : stillMine ? "该待办仍在——多半是限流窗口未过。" : ""}` +
+                            `先 workitem.list 核对当前待办，确认没提交成功再等一会儿重试；改 payload 不会绕过它。`,
+                });
+            }
+            throw error;
+        }
         const performedData = (performed.data ?? {});
         let readback = { formType };
         if (formType === "2") {

package/dist/model-purge.js

@@ -165,7 +165,11 @@ export async function planPurge(options, injected) {
         businessRules,
         ...(workflowCode !== undefined ? { workflowCode } : {}),
         instanceCount,
+        // Renamed intent (r16 P9): this counts WORK ITEMS in the workflow (one per
+        // open activity, including ones that are not the caller's todo), not "my
+        // todos". r16 saw 2 here while workitem.list showed 0 and read it as a bug.
         pendingWorkItems,
+        pendingWorkItemsNote: "这是该流程的在办工作项总数（每个未完结活动一条，不等于「我的待办」）；看自己的待办用 workitem.list",
         instanceIds: [...instanceIds].slice(0, 50),
         steps,
         blockers,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-cli",
-  "version": "0.4.92",
+  "version": "0.4.94",
   "description": "CloudPivot 8.6 configuration capability CLI — governed, fail-closed, coverage-manifest bounded.",
   "type": "module",
   "bin": {
@@ -50,9 +50,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@stalfh233/omc-fake-platform": "0.4.92",
+    "@stalfh233/omc-fake-platform": "0.4.94",
     "commander": "14.0.3",
-    "omc-core": "0.4.92",
+    "omc-core": "0.4.94",
     "proper-lockfile": "4.1.2",
     "write-file-atomic": "6.0.0",
     "zod": "^3.23.8",