@stalfh233/omc-cli 0.5.16 → 0.6.0

package/README.md

@@ -101,11 +101,12 @@ omc call discover_environment --env <env> --args '{}'   # 环境就绪（真实
 | 业务规则 `B1-businessrule` | `rule.list`、`rule.get` |
 | 流程 / 待办 / 组织 `W7-S29-greenfield` | `workflow.get_draft`（每节点 `formButtons.enabled/disabled`）、`workflow.get_published`、`workflow.validate`、`workflow.instanceActivity`、`workitem.list`、`org.role.list`、`org.role.users`、`org.role.userScope`、`org.department.list`、`org.department.users`、`org.user.search`、`org.user.info`、`org.user.departments` |
 | 在线脚本 `online-js` | `onlinejs.get`（草稿/发布面 `customScript` 原文 + SHA-256） |
+| 后端在线开发 `programming-online-dev` | `programming.schemas`、`programming.sources`、`programming.get`、`programming.compile`、`programming.save`、`programming.publish`（另配 `omc programming pull/status/apply/adopt/test` 文件级工作区） |
 | 运行数据 `M2-runtime-data` | `data.list`、`data.load` |
 | 报表 `R1-report` | `report.tree`、`report.get`、`report.chartdata`、`report.datasource.list` |
 | 业务集成 `B2-registration` | `service.list`、`service.get`、`method.get`、`service.category.list`、`service.dbconnpool.list`、`service.adapter_config`、`service.table_list`、`service.table_sql`、`service.export`、`service.check` |
 
-## 能力总览（16 项）
+## 能力总览（17 项）
 
 `omc capabilities` 的静态快照；跑 `omc capabilities` / `omc capability <id>` 取实时投影。
 「依赖」= `requires → precedes`，即能力之间的配置顺序。
@@ -125,6 +126,7 @@ omc call discover_environment --env <env> --args '{}'   # 环境就绪（真实
 | `rule-lifecycle` | 规则生命周期 | `S25-rule-lifecycle` | executable | none | businessrule → - |
 | `workflow` | 流程模板 | `W7-S29-greenfield` | executable | partial | model → - |
 | `onlinejs` | 表单在线 JS | `online-js` | executable | partial | form → - |
+| `programming` | 后端在线开发（业务规则 Java 源码） | `programming-online-dev` | executable | none | businessrule → - |
 | `bizservice` | 业务集成 | `B2-registration` | executable | partial | - → - |
 | `report` | 报表 | `R1-report` | partial | partial | - → - |
 | `data` | 运行数据 | `M2-runtime-data` | executable | none | field → - |

package/coverage/m1-coverage-manifest-v1.json

@@ -971,6 +971,44 @@
         "draft published script readback"
       ]
     },
+    {
+      "capability": "P1 programming online development",
+      "status": "executable",
+      "scope": "Design-time 在线开发 (/api/api/programming): list codable schemas/sources, read single source via get_source (template generation when no draft), remote compile check, save draft (version 0, unconditional overwrite), publish (server-side save+compile+published row, and BUSINESS_RULE rule flipped to CODING+enabled+published). IDE-only endpoints (startDebugging/debug/complete/go_definition) are out of scope; SPI/SERVICE source families are not opened in 8.6.26.",
+      "excluded_or_unsupported_reason": "startDebugging/debug/complete/go_definition are WEB-IDE-only (attach-style debugging, no synthetic payload). SPI/SERVICE get_source is rejected by the platform in 8.6.26. Published content has no wire read endpoint, so rollback relies on local git.",
+      "version_family": "8.6",
+      "anchor_version": "8.6.26",
+      "evidence": [
+        {
+          "path": ".scratch/backend-online-coding/recon.md",
+          "anchor": "§2 controller; §8 facade storage/runtime; §7.8 authority"
+        },
+        {
+          "path": "packages/omc-cli/src/lanes/programming.ts",
+          "anchor": "registerProgrammingLane"
+        },
+        {
+          "path": "packages/omc-cli/src/lanes/programming-contract.ts",
+          "anchor": "PROGRAMMING_LANE_CONTRACT"
+        },
+        {
+          "path": "packages/omc-cli/test/programming.test.ts",
+          "anchor": "programming lane tests"
+        }
+      ],
+      "lane": "programming-online-dev",
+      "tools": [
+        "programming.schemas",
+        "programming.sources",
+        "programming.get",
+        "programming.compile",
+        "programming.save",
+        "programming.publish"
+      ],
+      "scopes": [
+        "programming backend java source business rule handler read template compile save draft publish"
+      ]
+    },
     {
       "capability": "M2 runtime data write and authoritative readback (form/save + form/load)",
       "status": "executable",

package/dist/bench/call-face-eval.js

@@ -116,6 +116,12 @@ export const CALL_FACE_TASKS = [
             await agent.discovery("contract", "B1-businessrule");
             await agent.write({ __tool: "model.create", name: "回填源", code: "eval_rs" });
             await agent.write({ __tool: "model.create", name: "回填目标", code: "eval_rt" });
+            // Live-fidelity: the platform's rule self-check (550018) only accepts
+            // PUBLISHED target fields — on a real model these columns exist. Seed them
+            // (the fake's self-check is the 1.1.25-faithful gate, not a stub).
+            server.fake.seedField("eval_rt", "latestPeriod", 0);
+            server.fake.seedField("eval_rs", "declarePeriod", 0);
+            server.fake.seedField("eval_rs", "project", 9);
             server.fake.seedDataRow("eval_rt", { latestPeriod: "" }, "eval_rt_row");
             await agent.write({
                 __tool: "rule.save",

package/dist/bench/intent-face-eval.js

@@ -177,6 +177,12 @@ models:
             // Uncovered capability: the businessrule graph goes through the escape
             // hatch (omc call) under the same governance.
             await agent.discovery("contract", "B1-businessrule");
+            // Live-fidelity: the platform's rule self-check (550018) only accepts
+            // PUBLISHED target fields — on a real model these columns exist. Seed them
+            // (the fake's self-check is the 1.1.25-faithful gate, not a stub).
+            server.fake.seedField("eval_rt", "latestPeriod", 0);
+            server.fake.seedField("eval_rs", "declarePeriod", 0);
+            server.fake.seedField("eval_rs", "project", 9);
             server.fake.seedDataRow("eval_rt", { latestPeriod: "" }, "eval_rt_row");
             await agent.write({
                 __tool: "rule.save",

package/dist/capability-overview.js

@@ -137,7 +137,17 @@ const SURFACES = [
         operations: ["compose"],
         requires: ["form"],
         intent: { level: "partial", note: "声明式支持 onlinejs.compose 的 source/replace/publish。" },
-        notes: "仅表单在线 JS（BizSheet 子能力）；后端的在线开发（/api/api/programming Java 源码）用二开扩展包，不在本 CLI 范围。",
+        notes: "仅表单在线 JS（BizSheet 子能力）。后端的在线开发（/api/api/programming Java 源码）是独立 programming 能力面，两者不互换。",
+    },
+    {
+        id: "programming",
+        title: "后端在线开发",
+        lane: LANES.programming,
+        description: "设计时在线开发（/api/api/programming）：业务规则 Java Handler 源码的读取/模板生成、编译检查、草稿保存与发布（发布即把规则切编码模式并生效）。",
+        operations: ["schemas", "sources", "get", "compile", "save", "publish"],
+        requires: ["businessrule"],
+        intent: { level: "none", note: "未覆盖；用 omc call programming.*（源码内容与包路径/类名校验由工具 preflight 承担）。" },
+        notes: "与表单 Online JS 严格分离（历史事故：旧 onlinejs.draft/publish 错包本面被移除）。publish 内部强制 compile 并把规则切 DevelopmentMode.CODING+enable；运行时只执行 published 最新版，草稿保存不生效。published 内容无 wire 读取端点，回滚靠本地 git。IDE 专用端点（startDebugging/debug/complete/go_definition）不包裹。",
     },
     {
         id: "bizservice",
@@ -182,6 +192,7 @@ const CAPABILITY_ALIASES = Object.freeze({
     "rule-lifecycle": ["rule-lifecycles", "S25-rule-lifecycle"],
     workflow: ["workflows", "W7-S29-greenfield"],
     onlinejs: ["online-js"],
+    programming: ["backend-online-coding", "programming-online-dev", "在线开发", "在线编码"],
     bizservice: ["bizservices", "B2-registration"],
     report: ["reports", "R1-report"],
     data: ["runtime-data", "M2-runtime-data"],
@@ -229,6 +240,7 @@ export const CAPABILITY_CUES = Object.freeze({
     "rule-lifecycle": ["启用规则", "停用规则", "删除规则", "规则启停", "触发规则", "执行规则", "跑规则", "按钮规则", "规则验收"],
     workflow: ["流程", "工作流", "审批", "节点", "待办", "流转", "参与人", "审批人", "角色", "部门负责人", "审批角色"],
     onlinejs: ["在线js", "脚本", "联动", "onload", "onvalidate"],
+    programming: ["在线开发", "在线编码", "后端源码", "java源码", "编码模式", "handler", "programming", "源码编译"],
     bizservice: ["集成", "接口", "服务", "回调", "对接", "外部系统", "datasql", "restful"],
     report: ["报表", "图表", "看板", "bi", "dashboard"],
     // r18 (2026-10-26): "造数据 / 造测试单据 / 录数据" is the RUN-DATA capability, but
@@ -266,8 +278,12 @@ export const BOUNDARY_CUES = Object.freeze({
     },
     "inline-coding": {
         status: "unsupported",
-        cues: ["在线开发", "在线编码", "内联代码", "内联编码", "execute_code", "online_develop", "java源码", "后端源码", "二开编码"],
-        note: "在线开发（/api/api/programming Java 源码）/ EXECUTE_CODE / ONLINE_DEVELOP 不在 CLI 内（boundary-unsupported、unsupported）；用二开扩展包",
+        // programming lane now owns 在线开发/在线编码/Java 源码原文 (business rules).
+        // The remaining boundary is the graphical rule-graph's EXECUTE_CODE /
+        // ONLINE_DEVELOP NODE kinds and any non-business-rule source family
+        // (SPI/SERVICE, not opened in 8.6.26) — those are not configuration.
+        cues: ["内联代码", "内联编码", "execute_code", "online_develop", "二开编码"],
+        note: "规则图里的 EXECUTE_CODE / ONLINE_DEVELOP 节点与 SPI/SERVICE 源码面不在 CLI 内；业务规则的 Java 源码（在线开发）用 programming.*（programming.get 模板 → save → compile → publish）",
     },
     "nested-child-table": {
         status: "blocked",

package/dist/cli.js

@@ -15,6 +15,7 @@ import { BATCH_MAX_ENTRIES, runBatchCall } from "./batch-call.js";
 import { cmdModelScaffold } from "./model-scaffold.js";
 import { cmdFieldAdd } from "./field-add.js";
 import { cmdModelPurge } from "./model-purge.js";
+import { cmdProgrammingAdopt, cmdProgrammingApply, cmdProgrammingPull, cmdProgrammingStatus, cmdProgrammingTest } from "./programming-workflow.js";
 import { environmentWritable, requiresProductionConfirmation } from "./environment-policy.js";
 import { CLI_EXIT_CODES, classifyResult, envelope, errorEnvelope, installCodePageSafeStderr, refusalText, requestId } from "./cli-contract.js";
 import { configureOutput, humanSummary, stripOutputFlags, writeEnvelope } from "./cli-output.js";
@@ -1925,6 +1926,25 @@ async function main() {
     intentCommand.command("readback <file>").option("--env <environment>").option("--max-output-bytes <bytes>").action(async (file, options) => {
         commandExitCode = await withTransport(options, request, (transport) => cmdIntentReadback(file, options.env, transport));
     });
+    // Design-time 在线开发 working copy (file-based, git-friendly): a CLI
+    // management face, not call tools — the governed writes go through the
+    // registry tools (programming.save/publish) so the write gate still applies.
+    const programmingCommand = command.command("programming").description("后端在线开发（/api/api/programming）本地工作区：pull 拉取源码树+manifest / status 本地改动与远端漂移 / apply 按文件保存草稿（--publish 发布）/ adopt 图形化规则→编码模板 / test fixture 驱动的自动验证（compile→publish→触发→断言→清理）");
+    programmingCommand.command("pull").option("--env <environment>").option("--environment <environment>").option("--app <appCode>", "应用编码；省略时用环境配置的 applicationCode").option("--max-output-bytes <bytes>").addHelpText("after", "\n只读远端 + 本地建树（.omc-programming/sources/<schemaCode>/<ruleCode>.java + manifest.json，带环境戳）。不写环境。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, async (transport) => emitResult(await cmdProgrammingPull({ environment: options.environment ?? options.env, appCode: options.app }), transport));
+    });
+    programmingCommand.command("status").option("--env <environment>").option("--environment <environment>").option("--deep", "再比远端草稿内容哈希（漂移检测）").option("--app <appCode>").option("--max-output-bytes <bytes>").action(async (options) => {
+        commandExitCode = await withTransport(options, request, async (transport) => emitResult(await cmdProgrammingStatus({ environment: options.environment ?? options.env, deep: options.deep === true, appCode: options.app }), transport));
+    });
+    programmingCommand.command("apply").option("--env <environment>").option("--environment <environment>").option("--file <file...>", "只应用指定文件（省略时=manifest 里 modified+untracked）").option("--publish", "保存后发布（publish 内部编译并把规则切编码模式）").option("--dry-run", "零写入预览（模板校验 + 将写入的内容哈希）").option("--max-output-bytes <bytes>").addHelpText("after", "\n逐文件走编程面治理：内容哈希漂移门（平台无乐观锁）→ programming.save（必要时 programming.publish）。写权限/生产确认/写锁/审计 artifact 与 omc call 相同。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, async (transport) => emitResult(await cmdProgrammingApply({ environment: options.environment ?? options.env, files: options.file, publish: options.publish === true, dryRun: options.dryRun === true }), transport));
+    });
+    programmingCommand.command("adopt").requiredOption("--schema <code>").requiredOption("--rule <code>").option("--env <environment>").option("--environment <environment>").option("--max-output-bytes <bytes>").addHelpText("after", "\n图形化规则 → 编码模式：读平台模板入工作区（规则必须已存在）。真正切换模式发生在 apply --publish（publish 内嵌 CODING+enable+发布规则）。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, async (transport) => emitResult(await cmdProgrammingAdopt({ environment: options.environment ?? options.env, schemaCode: options.schema, ruleCode: options.rule }), transport));
+    });
+    programmingCommand.command("test").option("--env <environment>").option("--environment <environment>").option("--schema <code>").option("--rule <code>").option("--file <path>").option("--fixture <path>", "fixture 路径（默认 .omc-programming/tests/<schema>/<rule>.yaml）").option("--force-publish", "即使内容哈希未变也重发").option("--max-output-bytes <bytes>").addHelpText("after", "\n全自动验证：compile 门禁 → publish（内容未变可跳过）→ 按 fixture.trigger 触发（create/update/delete/load 用 data.*，custom 用 rule.run）→ fixture.asserts 用 data.list 断言 → fixture.cleanup 只删自己种的行。编码规则内联执行：触发响应即成败（失败带 Java errmsg）。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, async (transport) => emitResult(await cmdProgrammingTest({ environment: options.environment ?? options.env, schemaCode: options.schema, ruleCode: options.rule, file: options.file, fixture: options.fixture, forcePublish: options.forcePublish === true }), transport));
+    });
     // ADR-0008: local derived rule-graph index — CLI management face, not a call
     // tool (so it stays out of `commands --json`/coverage by construction).
     const graphCommand = command.command("graph").description("本地派生规则图索引（ADR-0008）：pull 全量重建（有界并发）/ references 离线引用 / impact 影响面 / search 规则 code+name 检索（非规则体）/ status 完整性与新鲜度。候选定位器——不进 baseline/plan/写门禁");
@@ -1984,7 +2004,7 @@ main().then((code) => {
     // envelope (or, for `env --json`, their own JSON) and were printing a second
     // empty envelope after it (live 2026-10-23: `omc rollback apply` answered two
     // lines, violating the one-envelope stdout contract).
-    const ownsStdout = ["call", "script", "artifact", "commands", "describe", "contract", "capabilities", "capability", "next", "usage", "intent", "help", "form-default", "compute", "rule-when", "approval-flow", "model-scaffold", "field-add", "model-purge", "rollback", "env", "graph", "--version", "-V"];
+    const ownsStdout = ["call", "script", "artifact", "commands", "describe", "contract", "capabilities", "capability", "next", "usage", "intent", "help", "form-default", "compute", "rule-when", "approval-flow", "model-scaffold", "field-add", "model-purge", "rollback", "env", "graph", "programming", "--version", "-V"];
     if (ownsStdout.includes(argv[2] ?? "")) {
         completeUsage(code);
         finish(code);

package/dist/contract-resources.js

@@ -11,6 +11,7 @@ import { LIST_VIEW_LANE_CONTRACT } from "./lanes/list-view-contract.js";
 import { META_LANE_CONTRACT } from "./lanes/meta-contract.js";
 import { MODEL_LANE_CONTRACT } from "./lanes/model-contract.js";
 import { ONLINE_JS_LANE_CONTRACT } from "./lanes/online-js-contract.js";
+import { PROGRAMMING_LANE_CONTRACT } from "./lanes/programming-contract.js";
 import { RULE_LIFECYCLE_LANE_CONTRACT } from "./lanes/rule-lifecycle-contract.js";
 import { REPORT_LANE_CONTRACT } from "./lanes/report-contract.js";
 import { RUNTIME_DATA_LANE_CONTRACT } from "./lanes/runtime-data-contract.js";
@@ -29,6 +30,7 @@ export const LANE_CONTRACTS = Object.freeze([
     META_LANE_CONTRACT,
     MODEL_LANE_CONTRACT,
     ONLINE_JS_LANE_CONTRACT,
+    PROGRAMMING_LANE_CONTRACT,
     RULE_LIFECYCLE_LANE_CONTRACT,
     REPORT_LANE_CONTRACT,
     RUNTIME_DATA_LANE_CONTRACT,

package/dist/coverage-registry.js

@@ -10,6 +10,7 @@ import { LIST_VIEW_COVERAGE } from "./lanes/list-view-coverage.js";
 import { FOLDER_COVERAGE } from "./lanes/folder-coverage.js";
 import { MODEL_COVERAGE } from "./lanes/model-coverage.js";
 import { ONLINE_JS_COVERAGE } from "./lanes/online-js-coverage.js";
+import { PROGRAMMING_COVERAGE } from "./lanes/programming-coverage.js";
 import { RULE_LIFECYCLE_COVERAGE } from "./lanes/rule-lifecycle-coverage.js";
 import { RUNTIME_DATA_COVERAGE } from "./lanes/runtime-data-coverage.js";
 import { WORKFLOW_COVERAGE } from "./lanes/workflow-coverage.js";
@@ -33,6 +34,7 @@ const DECLARATIONS = Object.freeze([
     ...RUNTIME_DATA_COVERAGE,
     ...WORKFLOW_COVERAGE,
     ...ONLINE_JS_COVERAGE,
+    ...PROGRAMMING_COVERAGE,
     ...B2_COVERAGE,
     ...LIST_VIEW_COVERAGE,
     ...REPORT_COVERAGE,

package/dist/endpoints.js

@@ -153,13 +153,19 @@ export const ENDPOINTS = {
     bizServiceCheck: "/api/api/bizservice/service/check",
     bizServiceImport: "/api/api/bizservice/service/import",
     runtimeQueryUploadFile: "/api/api/runtime/query/upload_file",
-    // `/api/api/programming/*` (design-time 在线开发: business-rule / SPI /
-    // service-component JAVA source) is deliberately NOT wrapped. It is backend
-    // Java authored through 二开扩展包, not form Online JS, and no operator asked
-    // for it here — so the CLI exposes no tool for it. Live 2026-09-21 evidence
-    // (ProgrammingController.java:99, base is the doubled `/api/api/programming`
-    // under the `/api` context-path; the earlier single-`/api` form 404s) is
-    // recorded in the online-js contract's history note.
+    // Design-time 在线开发 (backend JAVA source: business-rule handler / SPI /
+    // service component), authored through the `programming` lane. Base is the
+    // DOUBLED `/api/api/programming` under the `/api` context-path
+    // (ProgrammingController.java, 8.6.26 source; the earlier single-`/api` form
+    // 404s). `getSourceCode` is @Deprecated — the modern read/template face is
+    // `get_source` (SourceQueryModel, codeType is the NUMERIC metadata.app.CodeType
+    // index). See `.scratch/backend-online-coding/recon.md`.
+    programmingListSchemas: "/api/api/programming/list_schemas_by_appcode",
+    programmingListSources: "/api/api/programming/list_source_by_schemacode",
+    programmingGetSource: "/api/api/programming/get_source",
+    programmingSaveSource: "/api/api/programming/saveSourceCode",
+    programmingCompile: "/api/api/programming/compile",
+    programmingPublish: "/api/api/programming/publish",
     workflowCreate: "/api/api/workflow/create",
     workflowGetHeader: "/api/api/workflow/get_header",
     workflowGetDraft: "/api/api/workflow/get_draft",

package/dist/lanes/lane-ids.js

@@ -24,6 +24,7 @@ export const LANES = Object.freeze({
     runtimeData: "M2-runtime-data",
     workflow: "W7-S29-greenfield",
     onlineJs: "online-js",
+    programming: "programming-online-dev",
     b2: "B2-registration",
     listView: "W1-list-view",
     report: "R1-report",

package/dist/lanes/online-js-contract.js

@@ -12,7 +12,7 @@ export const ONLINE_JS_WIRE = Object.freeze({
     composePreserve: `reads the existing draftHtmlJson, JSON-parses the COMPLETE element array, preserves the platform template including the ${PLATFORM_LIFECYCLE_WRAPPER_MARKER} lifecycle body — the style, toolbar, template, beforeCustomScript, and afterCustomScript elements verbatim (attrs included), plus every other layout/control element — fills in missing skeleton elements with platform defaults, replaces ONLY the customScript element, then stringifies the COMPLETE array`,
     composePublish: "bizsheet/update then bizsheet/publish (force:true) promoting the full layout; publishedHtmlJson is read back verbatim and SHA-256-fingerprinted for byte-equality verification",
     regression: "issue 11: never overwrite the layout with a standalone script object or a partial [customScript]-only array",
-    programmingRemoved: "the former onlinejs.draft/publish tools wrapped the design-time 在线开发 face (POST /api/api/programming/get_source|saveSourceCode|publish; base is the DOUBLED /api/api/programming under the /api context-path, live 2026-09-21; the earlier single-/api guess 404s). That face authors backend JAVA (business-rule/SPI/service-component source), which is written through 二开扩展包, NOT form Online JS — so the CLI exposes no tool for it and the two misleadingly-named tools were removed. onlinejs.compose is the only Online JS tool",
+    programmingRemoved: "the former onlinejs.draft/publish tools wrapped the design-time 在线开发 face (POST /api/api/programming/get_source|saveSourceCode|publish; base is the DOUBLED /api/api/programming under the /api context-path, live 2026-09-21; the earlier single-/api guess 404s). That face authors backend JAVA (business-rule handler source), NOT form Online JS — the two misleadingly-named tools were removed. The face is now owned by the INDEPENDENT programming lane (programming.*: get/save/compile/publish), deliberately separate from onlinejs; onlinejs.compose stays the only Online JS tool",
 });
 const ONLINE_JS_SCOPE = "draft promotion publish verbatim readback";
 export const ONLINE_JS_LANE_CONTRACT = Object.freeze({
@@ -63,7 +63,7 @@ export const ONLINE_JS_LANE_CONTRACT = Object.freeze({
             behaviorBinding("test/issue-11-online-js.test.ts#onlinejs.compose refuses to overwrite the layout with a standalone script object", assertOnlineJsContract),
         ]),
         programmingRemoved: Object.freeze([
-            behaviorBinding("test/onlinejs-no-programming-tool.test.ts#the removed online-development tools are absent from the registry", assertOnlineJsContract),
+            behaviorBinding("test/onlinejs-no-programming-tool.test.ts#the old onlinejs draft/publish names stay gone; programming tools are their own lane", assertOnlineJsContract),
         ]),
     }),
     evidence: Object.freeze([
@@ -90,8 +90,8 @@ export function assertOnlineJsContract() {
         throw new Error("online-js contract must pin the publish chain");
     if (!ONLINE_JS_WIRE.regression.includes("partial [customScript]-only"))
         throw new Error("online-js contract must pin the issue-11 regression shape");
-    if (!ONLINE_JS_WIRE.programmingRemoved.includes("二开扩展包"))
-        throw new Error("online-js contract must record why the programming tools are absent");
+    if (!ONLINE_JS_WIRE.programmingRemoved.includes("二开扩展包") && !ONLINE_JS_WIRE.programmingRemoved.includes("INDEPENDENT programming lane"))
+        throw new Error("online-js contract must record where the programming face went");
     if (!PLATFORM_DEFAULT_LIFECYCLE_SCRIPT.includes(PLATFORM_LIFECYCLE_WRAPPER_MARKER))
         throw new Error("online-js emitter must contain the platform lifecycle wrapper");
     if (!ONLINE_JS_WIRE.composeElement.includes(PLATFORM_LIFECYCLE_WRAPPER_MARKER))

package/dist/lanes/programming-contract.js

@@ -0,0 +1,113 @@
+import { assertDescriptionCarries, assertLaneContract, behaviorBinding, CONTRACT_FAMILY, CONTRACT_REFERENCE_VERSION } from "./contract-support.js";
+import { LANES } from "./lane-ids.js";
+/**
+ * Programming lane wire facts — the design-time 在线开发 face
+ * (`/api/api/programming/*`, doubled base under the `/api` context-path),
+ * authoritative against the CloudPivot **8.6.26 decompiled source**
+ * (`launcher-8.6.26/cloudpivot-engine-8.6.26/.../controller/programming/ProgrammingController.java`)
+ * and cross-checked against the live AI-Platform-v1.1.25 deployment (identical
+ * 11-method surface, identical paths). Full evidence:
+ * `.scratch/backend-online-coding/recon.md`.
+ */
+export const PROGRAMMING_WIRE = Object.freeze({
+    surface: "设计时::在线开发 面（类级 /api/programming → 实际 doubled /api/api/programming/*）：编写后端 JAVA 源码（业务规则 Handler），不是表单 Online JS。读取/模板面用 POST get_source（SourceQueryModel）；getSourceCode 已弃用。编译 POST compile，保存草稿 POST saveSourceCode，发布 POST publish。",
+    codeType: "codeType 是 metadata.app.CodeType 的**数字索引**（@JsonValue getIndex）：BUSINESS_RULE=0、SPI=1、SERVICE=2；客户端传字符串名会被平台以「accepted [0,1,2]」拒绝（live 2026-11-03 实证）。8.6.26 的 get_source 仅支持 BUSINESS_RULE，其它类型回 SYS_PARAMETER_ERROR。",
+    sourceIdentity: "源码主键 code = schemaCode + ruleCode + \"Handler\"（SourceUtil.getBusinessRuleSourceCode）。未保存草稿时 get_source 仍返回内存骨架：按规则类型选模板（Create/Update/Delete/Load/Cancel/Available/GetList → <ruleCode>HandlerTemplate，其余 → CustomizedHandlerTemplate），version=null 即未落库草稿。",
+    storage: "单表 h_source_code：草稿行固定 version=0（published=false），保存是**无条件覆盖 content**，平台无乐观锁/CAS（originalVersion 无比较逻辑）；publish 另插 published=true、version=maxPublished+1 的新行，草稿行不动。运行时正式执行读 published 最新版（BusinessLauncher.buildReleaseRequest → getLatestPublishedSourceByCode），调试读草稿（version=0）。publish 内容没有 wire 读取端点。",
+    publishFlow: "publish 服务端内部：saveDraftSource → 强制 compile（失败 → PROGRAMMING_COMPILE_FAILED）→ facade.publish 插新版本行 → 若 codeType=BUSINESS_RULE 则把规则置 DevelopmentMode.CODING(=1)、enabled=true 并发布规则（ProgrammingController.publishBusinessRule）。因此 publish 载荷**必须携带 businessRule 整模型**（工具内用 businessrule/list_by_schemacode 按 code 补齐）。",
+    compile: "POST /compile body {code, content}；服务端 convertSourceCode → 编辑器租户缓存 updateSourceCode（内存副作用）→ compileFile → CompileFileResult{success, errors[]}。编译是规则可运行的最低门槛：运行时每次执行都重新编译，坏源码会让该规则的每次业务执行失败。",
+    templateGuard: "平台预置代码模板，包路径/类名/继承关系不得修改（改了规则无法运行）。工具 preflight：content 若声明 class 名必须等于 code 主键；若声明 package 必须是平台模板包——8.6.26 为 com.authine.cloudpivot.engine.service.bizrule.handler，live 8.7(AI-Platform 1.1.25) 为 com.authine.cloudpivot.engine.sourcecode.handler（真机冒烟实证），两者都接受，其它拒绝。",
+    boundary: "startDebugging/debug/complete/go_definition 是 WEB-IDE 专用（调试为 attach 式：DebugVo 无合成载荷，debugId 只是随机 UUID，断点靠真实业务事件触发），不包裹。SPI/SERVICE 两类源码的写入面在 8.6.26 未开放（get_source 直接拒绝非 BUSINESS_RULE），v1 只做业务规则。",
+    authority: "权限：ProgrammingController 无 @RequireAdmin / isAdmin 判断（AdminPermissionInterceptor 只看类级注解），普通已登录用户即可调用；CLI 标准会话无需额外管理员前置。",
+});
+const PROGRAMMING_SCOPE = "programming backend java source business rule handler read template compile save draft publish";
+export const PROGRAMMING_LANE_CONTRACT = Object.freeze({
+    lane: LANES.programming,
+    family: CONTRACT_FAMILY,
+    referenceVersion: CONTRACT_REFERENCE_VERSION,
+    endpoints: Object.freeze({
+        listSchemas: "programmingListSchemas",
+        listSources: "programmingListSources",
+        getSource: "programmingGetSource",
+        compile: "programmingCompile",
+        save: "programmingSaveSource",
+        publish: "programmingPublish",
+    }),
+    wire: Object.freeze({
+        surface: PROGRAMMING_WIRE.surface,
+        codeType: PROGRAMMING_WIRE.codeType,
+        sourceIdentity: PROGRAMMING_WIRE.sourceIdentity,
+        storage: PROGRAMMING_WIRE.storage,
+        publishFlow: PROGRAMMING_WIRE.publishFlow,
+        compile: PROGRAMMING_WIRE.compile,
+        templateGuard: PROGRAMMING_WIRE.templateGuard,
+        boundary: PROGRAMMING_WIRE.boundary,
+        authority: PROGRAMMING_WIRE.authority,
+    }),
+    wireBindings: Object.freeze({
+        surface: Object.freeze([behaviorBinding("test/programming.test.ts#programming lane pins the 8.6.26 online-development face", assertProgrammingContract)]),
+        codeType: Object.freeze([behaviorBinding("test/programming.test.ts#programming lane pins the 8.6.26 online-development face", assertProgrammingContract)]),
+        sourceIdentity: Object.freeze([behaviorBinding("test/programming.test.ts#programming.get derives the source code from schema+rule and returns the template skeleton", assertProgrammingContract)]),
+        storage: Object.freeze([behaviorBinding("test/programming.test.ts#programming.save writes the draft and publish inserts a new published version", assertProgrammingContract)]),
+        publishFlow: Object.freeze([behaviorBinding("test/programming.test.ts#programming.publish compiles, publishes and flips the business rule to coding mode", assertProgrammingContract)]),
+        compile: Object.freeze([behaviorBinding("test/programming.test.ts#programming.publish refuses when compilation fails", assertProgrammingContract)]),
+        templateGuard: Object.freeze([behaviorBinding("test/programming.test.ts#programming.save refuses a source whose package or class name deviates from the template", assertProgrammingContract)]),
+        boundary: Object.freeze([behaviorBinding("test/programming.test.ts#programming lane pins the 8.6.26 online-development face", assertProgrammingContract)]),
+        authority: Object.freeze([behaviorBinding("test/programming.test.ts#programming lane pins the 8.6.26 online-development face", assertProgrammingContract)]),
+    }),
+    evidence: Object.freeze([
+        ".scratch/backend-online-coding/recon.md",
+        ".scratch/backend-online-coding/spec.md",
+        "packages/omc-cli/src/lanes/programming.ts",
+        "packages/omc-cli/test/programming.test.ts",
+    ]),
+    tools: Object.freeze({
+        "programming.schemas": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "读取应用下**已有在线源码**的模型清单（GET list_schemas_by_appcode）。注意平台语义：只列 `listSourceCodes` 非空的模型，未编码规则的发现走 rule.list。返回 [{code,name}]。只读。",
+        }),
+        "programming.sources": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "读取模型下的在线源码清单（GET list_source_by_schemacode，含 businessRule 整模型与草稿 content/version）。平台语义：任一规则缺草稿会整列报错（PROGRAMMING_SOURCE_NONEXISTENT），工具捕获后回 present:false + 提示。只读。",
+        }),
+        "programming.get": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "读取单条源码（POST get_source）：给 schemaCode+businessRuleCode（code 省略时按 `schemaCode+ruleCode+\"Handler\"` 推导），未保存草稿时平台按规则类型模板生成骨架（provisioned:false）。返回 content/className/codeType/version + sha256。只读。",
+        }),
+        "programming.compile": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "远程编译检查（POST compile，body {code,content}）：返回 CompileFileResult{success, errors}。编译是规则可运行的最低门槛（运行时每次执行都重新编译）。只读（唯一副作用是平台编辑器租户内存缓存）。",
+        }),
+        "programming.save": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "保存源码草稿（POST saveSourceCode）：content 写入 version=0 草稿行（**无条件覆盖，平台无乐观锁**）。preflight：class 名必须等于 code（`schemaCode+ruleCode+\"Handler\"`）；声明的 package 必须是平台模板包（8.6.26 `com.authine.cloudpivot.engine.service.bizrule.handler` / live 8.7 `com.authine.cloudpivot.engine.sourcecode.handler`）——改模板即规则无法运行。保存后读回判等。草稿不影响运行时，生效需 programming.publish。",
+        }),
+        "programming.publish": Object.freeze({
+            scope: PROGRAMMING_SCOPE,
+            description: "发布源码（POST publish）：内部 saveDraftSource→**强制 compile**（失败回 PROGRAMMING_COMPILE_FAILED）→插 published 新版本行→BUSINESS_RULE 规则自动置 DevelopmentMode.CODING+enabled+发布。载荷必须带 businessRule 整模型（工具内按 ruleCode 从 businessrule/list_by_schemacode 补齐；规则不存在则拒绝）。发布后运行时才执行该源码。content 省略时用远端草稿。",
+        }),
+    }),
+});
+export function assertProgrammingContract() {
+    assertLaneContract(PROGRAMMING_LANE_CONTRACT);
+    if (!PROGRAMMING_WIRE.surface.includes("/api/api/programming"))
+        throw new Error("programming contract must pin the doubled base");
+    if (!PROGRAMMING_WIRE.codeType.includes("BUSINESS_RULE=0"))
+        throw new Error("programming contract must pin the numeric CodeType index");
+    if (!PROGRAMMING_WIRE.sourceIdentity.includes("Handler"))
+        throw new Error("programming contract must pin the source code identity");
+    if (!PROGRAMMING_WIRE.storage.includes("h_source_code"))
+        throw new Error("programming contract must pin the storage table");
+    if (!PROGRAMMING_WIRE.publishFlow.includes("businessRule"))
+        throw new Error("programming contract must pin the publish payload rule model");
+    if (!PROGRAMMING_WIRE.templateGuard.includes("com.authine.cloudpivot.engine.service.bizrule.handler"))
+        throw new Error("programming contract must pin the 8.6 template package");
+    if (!PROGRAMMING_WIRE.templateGuard.includes("com.authine.cloudpivot.engine.sourcecode.handler"))
+        throw new Error("programming contract must pin the live 8.7 template package");
+    assertDescriptionCarries(PROGRAMMING_LANE_CONTRACT, "programming.get", ["get_source", "Handler", "模板"]);
+    assertDescriptionCarries(PROGRAMMING_LANE_CONTRACT, "programming.save", ["saveSourceCode", "com.authine.cloudpivot.engine.service.bizrule.handler", "sourcecode.handler", "Handler"]);
+    assertDescriptionCarries(PROGRAMMING_LANE_CONTRACT, "programming.publish", ["compile", "businessRule", "CODING"]);
+    assertDescriptionCarries(PROGRAMMING_LANE_CONTRACT, "programming.schemas", ["list_schemas_by_appcode"]);
+    assertDescriptionCarries(PROGRAMMING_LANE_CONTRACT, "programming.sources", ["list_source_by_schemacode"]);
+}
+//# sourceMappingURL=programming-contract.js.map

package/dist/lanes/programming-coverage.js

@@ -0,0 +1,18 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { PROGRAMMING_LANE_CONTRACT } from "./programming-contract.js";
+const T = PROGRAMMING_LANE_CONTRACT.tools;
+export const PROGRAMMING_COVERAGE = declareLaneCoverage(PROGRAMMING_LANE_CONTRACT.lane, [
+    {
+        capability: "P1 programming online development",
+        evidence: ["packages/omc-cli/src/lanes/programming.ts", "packages/omc-cli/test/programming.test.ts", ".scratch/backend-online-coding/recon.md"],
+        tools: [
+            claim("programming.schemas", T["programming.schemas"].scope),
+            claim("programming.sources", T["programming.sources"].scope),
+            claim("programming.get", T["programming.get"].scope),
+            claim("programming.compile", T["programming.compile"].scope),
+            claim("programming.save", T["programming.save"].scope),
+            claim("programming.publish", T["programming.publish"].scope),
+        ],
+    },
+]);
+//# sourceMappingURL=programming-coverage.js.map