@stalfh233/omc-cli 0.5.6 → 0.5.7

package/dist/graph.js

@@ -466,30 +466,30 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                 // D-state in folio_wait_bit_common). One transaction + memory journal
                 // + synchronous=OFF makes the build effectively free.
                 db.exec("PRAGMA journal_mode=MEMORY; PRAGMA synchronous=OFF;");
-                db.exec(`BEGIN;
-        CREATE TABLE meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-        CREATE TABLE rules (
-          schema_code TEXT NOT NULL,
-          rule_code TEXT NOT NULL,
-          name TEXT,
-          enabled INTEGER,
-          status TEXT,
-          default_rule INTEGER,
-          row_id TEXT NOT NULL,
-          graph_sha256 TEXT NOT NULL,
-          PRIMARY KEY (schema_code, rule_code)
-        );
-        CREATE TABLE edges (
-          kind TEXT NOT NULL,
-          code TEXT NOT NULL,
-          schema_code TEXT NOT NULL,
-          rule_code TEXT NOT NULL,
-          node_code TEXT,
-          node_type TEXT,
-          via TEXT NOT NULL
-        );
-        CREATE INDEX edges_lookup ON edges(kind, code);
-        CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
+                db.exec(`BEGIN;
+        CREATE TABLE meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+        CREATE TABLE rules (
+          schema_code TEXT NOT NULL,
+          rule_code TEXT NOT NULL,
+          name TEXT,
+          enabled INTEGER,
+          status TEXT,
+          default_rule INTEGER,
+          row_id TEXT NOT NULL,
+          graph_sha256 TEXT NOT NULL,
+          PRIMARY KEY (schema_code, rule_code)
+        );
+        CREATE TABLE edges (
+          kind TEXT NOT NULL,
+          code TEXT NOT NULL,
+          schema_code TEXT NOT NULL,
+          rule_code TEXT NOT NULL,
+          node_code TEXT,
+          node_type TEXT,
+          via TEXT NOT NULL
+        );
+        CREATE INDEX edges_lookup ON edges(kind, code);
+        CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
       `);
                 const insertMeta = db.prepare("INSERT INTO meta (key, value) VALUES (?, ?)");
                 // `applicationResolution` is an object; String(value) would persist
@@ -508,9 +508,9 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                     insertGap.run(gap.kind, gap.ref, gap.note ?? null);
                 // FTS5 mirrors rules (code+name) for `graph search`; one rebuild after
                 // the bulk insert is cheaper than per-row triggers on a wholesale rebuild.
-                db.exec(`
-        CREATE VIRTUAL TABLE rules_fts USING fts5(rule_code, name, content='rules', content_rowid='rowid');
-        INSERT INTO rules_fts(rules_fts) VALUES('rebuild');
+                db.exec(`
+        CREATE VIRTUAL TABLE rules_fts USING fts5(rule_code, name, content='rules', content_rowid='rowid');
+        INSERT INTO rules_fts(rules_fts) VALUES('rebuild');
       `);
                 db.exec("COMMIT;");
             }
@@ -578,6 +578,21 @@ function openGraphIndex() {
         throw error instanceof GraphIndexAbsentError ? error : new GraphIndexAbsentError(`索引不可读（schema 不匹配或文件损坏）：${error instanceof Error ? error.message : String(error)}；重跑 omc graph pull`);
     }
 }
+/**
+ * Zero-hit disambiguation (2026-10-31 capability-test friction, hit twice in
+ * one session): querying `impact field mcc_supplier` returns an empty result
+ * that is indistinguishable from "no references". If the code appears in the
+ * index under a DIFFERENT kind — or as a schema_code, i.e. a model — say so
+ * instead of leaving the caller to guess.
+ */
+function zeroHitKindHint(db, kind, code, command) {
+    const kinds = db.prepare("SELECT DISTINCT kind FROM edges WHERE code = ? AND kind <> ? ORDER BY kind").all(code, kind).map((row) => row.kind);
+    if (kinds.length === 0 && kind !== "model" && db.prepare("SELECT 1 FROM edges WHERE schema_code = ? LIMIT 1").get(code) !== undefined)
+        kinds.push("model");
+    if (kinds.length === 0)
+        return undefined;
+    return `；注意：${code} 在索引中以 ${kinds.join("/")} 身份出现——kind 可能选错，试 omc graph ${command} ${kinds[0]} ${code}`;
+}
 export function queryGraphReferences(kind, code) {
     const { db, summary } = openGraphIndex();
     try {
@@ -599,9 +614,10 @@ export function queryGraphReferences(kind, code) {
             index: summary,
             ...(matches.length === 0
                 ? {
-                    note: gapped
+                    note: (gapped
                         ? "零命中，但索引存在扫描缺口——不可作为「无引用」证明；先 omc graph pull 重建再查"
-                        : "零命中=索引覆盖范围内没有引用它（规则面：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode；数据规则面：propertyCodes 目标与 options {字段} 引用；视图面：列/排序/条件的 propertyCode。不含规则条件叶子/流程绑定）",
+                        : "零命中=索引覆盖范围内没有引用它（规则面：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode；数据规则面：propertyCodes 目标与 options {字段} 引用；视图面：列/排序/条件的 propertyCode。不含规则条件叶子/流程绑定）") +
+                        (zeroHitKindHint(db, kind, code, "references") ?? ""),
                 }
                 : {}),
             ...(gapped
@@ -638,8 +654,8 @@ export function searchGraphRules(term, limit = 20) {
         if (tokens.length > 0) {
             const quoted = tokens.map((token, index) => `"${token.replaceAll('"', '""')}"${index === tokens.length - 1 ? "*" : ""}`).join(" ");
             const rows = db
-                .prepare(`SELECT r.schema_code, r.rule_code, r.name, r.enabled, r.status
-           FROM rules_fts JOIN rules r ON r.rowid = rules_fts.rowid
+                .prepare(`SELECT r.schema_code, r.rule_code, r.name, r.enabled, r.status
+           FROM rules_fts JOIN rules r ON r.rowid = rules_fts.rowid
            WHERE rules_fts MATCH ? ORDER BY bm25(rules_fts), r.schema_code, r.rule_code LIMIT ?`)
                 .all(quoted, limit);
             const refsFor = db.prepare("SELECT kind, code FROM edges WHERE schema_code = ? AND rule_code = ? ORDER BY kind, code");
@@ -743,9 +759,10 @@ export function impactGraph(kind, code) {
             index: summary,
             ...(hop1.length === 0 && dataruleHits.length === 0 && listViewHits.length === 0
                 ? {
-                    note: gapped
+                    note: (gapped
                         ? "零命中，但索引存在扫描缺口——不可作为「无影响」证明；先 omc graph pull 重建再查"
-                        : "零命中=索引覆盖范围内没有引用它（规则面+数据规则面+视图列/排序/条件面；流程绑定暂不在索引内）",
+                        : "零命中=索引覆盖范围内没有引用它（规则面+数据规则面+视图列/排序/条件面；流程绑定暂不在索引内）") +
+                        (zeroHitKindHint(db, kind, code, "impact") ?? ""),
                 }
                 : {}),
             ...(capped || dataruleHits.length > 20 || listViewHits.length > 20

package/dist/lanes/businessrule.js

@@ -196,7 +196,7 @@ export function registerBusinessRuleLane(tools) {
                         else {
                             if (["CREATE", "UPDATE", "DELETE"].includes(nodeType) && Array.isArray(rawNode.dataActions)
                                 && rawNode.dataActions.some((action) => String(action.targetDataItem ?? "") === wanted))
-                                matches.push({ schemaCode, ruleCode, nodeCode, nodeType, via: "dataActions.targetDataItem" });
+                                matches.push({ schemaCode, ruleCode, nodeCode, nodeType, via: "dataActions.targetDataItem", ...(String(rawNode.targetObjectCode ?? "") !== "" ? { targetObjectCode: String(rawNode.targetObjectCode) } : {}) });
                             if (mapping) {
                                 for (const [key, label] of [["inputMappings", "inputMappings.bizCode"], ["outputMappings", "outputMappings.bizCode"]]) {
                                     if (Array.isArray(mapping[key]) && mapping[key].some((row2) => String(row2.bizCode ?? "") === wanted && (row2.codeType === undefined || row2.codeType === 1)))
@@ -215,10 +215,18 @@ export function registerBusinessRuleLane(tools) {
                 ...(scope !== undefined ? { applicationResolution: applicationResolutionOf(scope) } : {}),
                 ...(matches.length === 0
                     ? {
-                        note: "零命中=全平台（或指定 schemaCodes 范围内）没有规则引用它。范围：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode（不含条件叶子与 datarule，第一版边界）",
+                        note: "零命中=" +
+                            (args.schemaCodes !== undefined
+                                ? `仅扫描了 schemaCodes 收窄的 ${scoped.length} 个模型（${scoped.slice(0, 5).join(", ")}${scoped.length > 5 ? "…" : ""}）——引用常发生在**其他**模型上；要全平台结论请去掉 schemaCodes`
+                                : "全平台没有规则引用它") +
+                            "。范围：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode（不含条件叶子与 datarule，第一版边界）。本工具是在线单点扫描；要离线毫秒级复询、字段级影响面或两跳爆炸半径，先 `omc graph pull --env <env>` 再 `omc graph references|impact <kind> <code>`",
                         ...(scope !== undefined ? { hint: applicationScopeHint(scope, "引用") } : {}),
                     }
-                    : {}),
+                    : {
+                        // r31（2026-10-31）：影响评估场景 agent 已路由到本工具——在必经之路
+                        // 上一行 cross-sell 离线索引（graph 面的知识条目只回节索引时不可见）。
+                        hint: "在线扫描完成；同问要再问/要两跳影响面（改 X 会波及哪些规则，那些规则还碰什么）时，先 `omc graph pull --env <env>` 建离线索引，之后 `omc graph references|impact <kind> <code>` 毫秒级复询",
+                    }),
             };
         }, { target: `rule.references:${args.kind}:${args.code}` }),
     }));

package/dist/lanes/datarule.js

@@ -805,6 +805,12 @@ export function registerDataRuleLane(tools) {
                 matchedCount: rules.length,
                 rules: rules.map(decodeDataRule),
                 ...(args.dataRuleType >= 3 ? { advisory: DATARULE_FORM_INTERACTION_ADVISORY } : {}),
+                // r35（2026-10-31 真机）：type1 校验规则建好读回一致，但 REST `data.submit`
+                // 提交违规数据（-50 / 超阈值）errcode 0 放行、原值落库——校验在门户前端
+                // 提交管线执行，REST 不拦。先告知执行面，省掉「先实测两轮才发现不生效」。
+                ...(args.dataRuleType === 1
+                    ? { executionWarning: "校验规则在门户前端提交时执行；REST `data.submit` 不拦截违规数据（r35 真机：-50 与超阈值均 errcode 0 放行）。验收拦截效果需走门户，或改用业务规则（BIZ_ACTION/条件）在服务端拦。" }
+                    : {}),
                 ...(() => { const w = dataRuleFormulaWarnings(args.dataRuleType, args.options); return w.length ? { lintWarnings: w } : {}; })(),
             },
         };

package/dist/lanes/list-view.js

@@ -715,6 +715,12 @@ export function registerListViewLane(tools) {
             .map(decodeConditionRow)
             .sort((a, b) => String(a.propertyCode ?? "").localeCompare(String(b.propertyCode ?? "")));
         const readback = { code, added, updated, columns: afterCols, sorts, conditions };
+        // r35（2026-10-31 真机）：视图固定条件读回正确，但 `data.list --queryCode <视图>`
+        // 不应用该过滤（4 条未过滤返回）——视图条件的运行时过滤语义未取证（门户 vs
+        // REST queryCode），coverage 已声明 "filtering … not probed"。前置声明省 3 轮排查。
+        if (conditions.length > 0)
+            readback.conditionRuntimeNote =
+                "视图条件的运行时过滤语义未取证：REST `data.list --queryCode <本视图>` 实测不应用固定条件（r35：读回 Gte/5000 正确、返回未过滤 4 条）。别用 queryCode 断言过滤生效；REST 侧过滤用 `data.list` 显式 `filter`。";
         // Post-write semantic readback (dogfood R2): the platform MODELS a list
         // condition as a filter CONTROL definition, so a requested condition whose
         // propertyCode does not survive the round-trip was lost. Surface that as

package/dist/lanes/organization-coverage.js

@@ -0,0 +1,27 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { LANES } from "./lane-ids.js";
+/**
+ * Organization writes (role group / role / members / management scope) sit on
+ * the same live-proven template lane; the scopes below are claimed here so the
+ * runtime gate can resolve them without a second manifest item.
+ */
+export const ORGANIZATION_COVERAGE = declareLaneCoverage(LANES.workflow, [
+    {
+        capability: "W7 S29 greenfield workflow authoring",
+        evidence: [
+            "packages/omc-cli/src/lanes/organization.ts",
+            "OpenAPI /api/v3/api-docs (1.1.25): organization/role/add_role, add_role_user, update_ouscope",
+        ],
+        tools: [
+            claim("org.role.users", "organization role member read (role/users)"),
+            claim("org.role.userScope", "organization role member management scope read (role/get_ouscope)"),
+            claim("org.roleGroup.create", "organization role group create (role/add_role_group)"),
+            claim("org.role.create", "organization role create (role/add_role)"),
+            claim("org.role.update", "organization role update (role/modify_role)"),
+            claim("org.role.addUsers", "organization role member add (role/add_role_user)"),
+            claim("org.role.removeUsers", "organization role member remove (role/strike_out_role_user)"),
+            claim("org.role.setUserScope", "organization role member scope update (role/update_ouscope)"),
+        ],
+    },
+]);
+//# sourceMappingURL=organization-coverage.js.map

package/dist/lanes/organization.js

@@ -151,6 +151,9 @@ export function registerOrganizationLane(tools) {
             };
             const members = rows.map((row) => ({
                 id: roleUserId(row),
+                // r32 探针：把角色 id 当成员 id 传给 userScope/addUsers → 查询为空。
+                // 明示这个 id 的身份与正确来源，防角色/用户 id 混用。
+                idType: "user",
                 name: row.name ?? null,
                 username: row.username ?? null,
                 departmentId: memberDepartment(row),
@@ -160,7 +163,13 @@ export function registerOrganizationLane(tools) {
                 scopeCount: Array.isArray(row.ouScope) ? row.ouScope.length : null,
                 unitType: row.unitType ?? null,
             }));
-            return { roleId: String(args.roleId), count: members.length, total: data?.totalElements ?? members.length, members };
+            return {
+                roleId: String(args.roleId),
+                count: members.length,
+                total: data?.totalElements ?? members.length,
+                members,
+                note: "members[].id 是用户 id（可直接作为 addUsers 的 userIds / userScope 的 userId；不是角色 id——角色 id 在 org.role.list 的行里）",
+            };
         }),
     }));
     tools.push(defineTool({

package/dist/lanes/runtime-data.js

@@ -688,9 +688,21 @@ export function registerRuntimeDataLane(tools) {
             size: z.number().int().min(1).max(200).default(10),
             all: z.boolean().optional().describe("true 时自动翻页聚合全部结果（内部按 size=200 逐页拉取，安全上限 1000 行，超出截断并标记 capped）——存量盘点/数据核对用，替代手动循环翻页"),
             full: z.boolean().optional().describe("内联完整列表结果；默认大结果只返回计数与 detailFile"),
+            // r31 (2026-10-31 real machine): agents pass `query: {field: value}` as a
+            // filter — zod would STRIP the unknown key silently and the server
+            // returns the unfiltered total, a false "no match / filter applied".
+            // Accept-and-refuse with the correct shape beats silent ignore.
+            query: z.unknown().optional(),
             capability: capabilityArg,
         },
         handler: async (ctx, args, self) => {
+            if (args.query !== undefined)
+                throw new ToolInputError({
+                    status: "error",
+                    blocker: "invalid-input",
+                    tool: "data.list",
+                    message: '没有 `query` 参数——过滤用 `filter: {"op":"eq","field":"<字段>","value":"<值>"}`（或 `filters` 数组=AND、`filterGroup` 嵌套）。r31 真机：`query:{...}` 被静默忽略、total 不变，极易误判为"无数据/已过滤"。',
+                });
             let condition;
             let fromDsl = false;
             try {
@@ -1220,6 +1232,18 @@ export function registerRuntimeDataLane(tools) {
         const ids = args.bizObjectIds && args.bizObjectIds.length > 0 ? args.bizObjectIds : args.bizObjectId ? [args.bizObjectId] : [];
         if (ids.length === 0)
             throw new ToolInputError({ status: "error", blocker: "tool-input-invalid", tool: "data.delete", message: "需要 bizObjectId（单个）或 bizObjectIds（数组，批量）" });
+        // r30 (2026-10-31, 1.1.25 real machine): the batch form fake-succeeds —
+        // DELIVERED + absent:true + a DECREASING modelResidue.total while the
+        // rows are still queryable (data.list unchanged, data.load exists:true).
+        // Re-issuing the same ids one at a time deleted them for real. Refuse
+        // the batch shape and teach the per-id loop until the platform path is
+        // understood; single-id deletes go through the exact same deleteOne.
+        if (ids.length > 1)
+            throw new ToolRefusalError({
+                status: "refused",
+                blocker: "data-delete-batch-fake-success",
+                message: "批量删除（bizObjectIds 多个）在 1.1.25 真机实证为假成功：回执 DELIVERED + absent:true + modelResidue.total 递减，但行仍在（data.list 不变、data.load exists:true）；同样的 id 改单条逐个删才真删掉。请用 bizObjectId（单个）逐个删，每条删完用 data.load 确认 exists:false（absent:true 不是删除成功的证明）。",
+            });
         const deleteOne = async (bizObjectId) => {
             // Delete is destructive: probe the authoritative object first so an
             // absent id is an idempotent no-op, never a blind runtime delete.

package/dist/lanes/workflow.js

@@ -1495,7 +1495,7 @@ function mergeCallerDelta(template, draft, options = {}) {
             throw new ToolRefusalError({
                 status: "refused",
                 blocker: "workflow-activity-type-missing",
-                message: `workflow.update: 新节点 ${String(activity.activityCode ?? "")} 缺 type/activityType（权限编辑行可省类型仅当 activityCode 命中草稿既有节点）`,
+                message: `workflow.update: 新节点 ${String(activity.activityCode ?? "")} 缺 type/activityType（权限编辑行可省类型仅当 activityCode 命中草稿既有节点）。r32 实测：只改 participant/btnConfigList 的行也必须显式带 type——省略豁免仅限权限编辑行（带 propertyPermissions）。`,
             });
     }
     // Insert added nodes BEFORE the terminal END, so the auto-chain reads
@@ -2831,7 +2831,12 @@ export function registerWorkflowLane(tools) {
                     });
                 }
             }
-            const selected = page.items;
+            // r32（2026-10-31）：`participant` 分支此前忽略 workflowInstanceId——按人查
+            // 时同回全部实例的待办，与参数语义（exact-match 过滤）不符。两个分支统一
+            // 在客户端做实例过滤。
+            const selected = args.workflowInstanceId !== undefined
+                ? page.items.filter((item) => wireString(item.instanceId) === args.workflowInstanceId)
+                : page.items;
             // Resolve the in-flight bizObject id per distinct instance. Authoritative
             // source: getBizObjectByWfInstanceId -> BizObjectCreatedModel.id/schemaCode.
             // Best-effort: a failed lookup leaves the identity null, never drops the todo.

package/dist/online-js-source.js

@@ -15,34 +15,34 @@ import { ToolRefusalError } from "./tool-types.js";
  * to replace it.
  */
 export const PLATFORM_LIFECYCLE_WRAPPER_MARKER = "(function(form)";
-export const PLATFORM_DEFAULT_LIFECYCLE_SCRIPT = `/**
- * 用户自定义JS区域;
- * 注：外部链接的JS统一放置在HTML中，原有script标签下的js统一放置在当前编码区域
- * 使用环境变量，可通过"$env("唤醒提示框，并通过$env(分类名称.变量名称)的方式使用
- */
-(function(form){
-    /**
-     * 事件绑定，form.on
-     * @param eventType 事件类型
-     * @params function 事件
-     * @param  cover    true, false 是否覆盖root的生命周期 默认不覆盖 
-     */
-    //数据加载后，渲染之前，this为window
-    form.on('onLoad',function(data, dataPermission){},'cover');
-    //渲染完成后
-    form.on('onRendered',function(data){});
-    //内置校验完成后，返回false阻止提交
-    form.on('onValidate',function(action,data){});
-    //操作前（包含自定义按钮）执行，返回false阻止按钮操作
-    form.on('onPreAction',function(action,data){});
-    //自定义按钮执行
-    form.on('onCustomAction',function(action,data){});
-    //操作完成后执行
-    form.on('onActionDone',function(action,data,httpRes){});
-    //表单字段打印数据格式扩展，可自行定义调用打印模板时，表单字段对应所打印数据的内容
-    form.on('onPrintFormDataHandle',function(vm, printData, sourceData, formValues, key, locale, printTemplateCode, control, dataType, sheetData){});
-    //流程日志打印数据格式扩展，可自行定义调用打印模板时，流程日志对应所打印数据的内容
-    form.on('onPrintWorkflowLogDataHandle',function(vm, sourceData, printData, locale, printTemplateCode){});
+export const PLATFORM_DEFAULT_LIFECYCLE_SCRIPT = `/**
+ * 用户自定义JS区域;
+ * 注：外部链接的JS统一放置在HTML中，原有script标签下的js统一放置在当前编码区域
+ * 使用环境变量，可通过"$env("唤醒提示框，并通过$env(分类名称.变量名称)的方式使用
+ */
+(function(form){
+    /**
+     * 事件绑定，form.on
+     * @param eventType 事件类型
+     * @params function 事件
+     * @param  cover    true, false 是否覆盖root的生命周期 默认不覆盖 
+     */
+    //数据加载后，渲染之前，this为window
+    form.on('onLoad',function(data, dataPermission){},'cover');
+    //渲染完成后
+    form.on('onRendered',function(data){});
+    //内置校验完成后，返回false阻止提交
+    form.on('onValidate',function(action,data){});
+    //操作前（包含自定义按钮）执行，返回false阻止按钮操作
+    form.on('onPreAction',function(action,data){});
+    //自定义按钮执行
+    form.on('onCustomAction',function(action,data){});
+    //操作完成后执行
+    form.on('onActionDone',function(action,data,httpRes){});
+    //表单字段打印数据格式扩展，可自行定义调用打印模板时，表单字段对应所打印数据的内容
+    form.on('onPrintFormDataHandle',function(vm, printData, sourceData, formValues, key, locale, printTemplateCode, control, dataType, sheetData){});
+    //流程日志打印数据格式扩展，可自行定义调用打印模板时，流程日志对应所打印数据的内容
+    form.on('onPrintWorkflowLogDataHandle',function(vm, sourceData, printData, locale, printTemplateCode){});
 })`;
 /** The lifecycle events the platform dispatches; anything else is a typo the runtime silently drops (or throws on). */
 export const ONLINE_JS_EVENTS = new Set([