@stalfh233/omc-cli 0.5.6 → 0.5.8

package/dist/goal-routes.js

@@ -44,22 +44,22 @@ function intentGuidance() {
     return {
         path: "declarative",
         why: "整包需求：用一份声明式意图文件描述 models/fields/form/listview/rules/workflow/onlinejs/services，由编译器合成平台原生结构并按依赖顺序执行；比逐能力拼装更省上下文、更不易漂移。",
-        starter: `intentVersion: 1
-models:
-  - code: <模型code>          # 如 omcTodoTask（小写下划线也合规；字段码必须 lowerCamelCase ≤25 字符——产品实施规范）
-    name: <业务名>
-    fields:
-      - {code: title, name: 标题, type: SHORT_TEXT}
-      - {code: amount, name: 数量, type: NUMERICAL, options: {scale: 2}}   # NUMERICAL 必带 scale
-      - {code: level, name: 等级, type: RADIO, choices: [高, 中, 低]}        # 选择族用顶层 choices
-    form: {publish: true}
-    listview: {fieldCodes: [title, level]}
-    rules:
-      - code: Create            # 平台预置触发行（name 省略）
-        enabled: true
-        actions:
-          - when: [{field: amount, gt: 10}]
-            set: [{field: title, value: "超限"}]
+        starter: `intentVersion: 1
+models:
+  - code: <模型code>          # 如 omcTodoTask（小写下划线也合规；字段码必须 lowerCamelCase ≤25 字符——产品实施规范）
+    name: <业务名>
+    fields:
+      - {code: title, name: 标题, type: SHORT_TEXT}
+      - {code: amount, name: 数量, type: NUMERICAL, options: {scale: 2}}   # NUMERICAL 必带 scale
+      - {code: level, name: 等级, type: RADIO, choices: [高, 中, 低]}        # 选择族用顶层 choices
+    form: {publish: true}
+    listview: {fieldCodes: [title, level]}
+    rules:
+      - code: Create            # 平台预置触发行（name 省略）
+        enabled: true
+        actions:
+          - when: [{field: amount, gt: 10}]
+            set: [{field: title, value: "超限"}]
 `,
         commands: [
             "把上面的 starter 存成 <file>.yaml 按需求改字段后：omc intent validate <file>.yaml（离线）→ omc intent plan <file>.yaml --env <env> → omc intent apply <file>.yaml --env <env>（apply 也能直接吃 YAML）",
@@ -381,6 +381,17 @@ const COMPOSER_ROUTES = Object.freeze([
         avoid: ["嵌套子表", "子表套子表"],
         topics: ["omc-business-configuration"],
     },
+    {
+        id: "field-add",
+        command: "omc field-add --schema <存量模型code> --fields '<JSON数组>' --apply",
+        usage: "omc field-add --help",
+        summary: "存量模型加字段一条命令：建字段 → 发布 → 重建表单 → 列表追加列（增量合并）；4 次写调合成 1 条命令",
+        // (add verb) × (field noun)——「给既有/存量模型加字段」是变更类需求的最高频动作（r30/r31 探针实证手工链 4 调）
+        groups: [["加", "新增", "添加", "补", "增加"], ["字段"]],
+        // 只收「加字段本体」；规则/校验/计算/编号/流程语义各有归宿（round10：'给金额字段加自动校验规则' 应归 datarule，不能被本 composer 抢走）
+        avoid: ["新建模型", "建模型", "从零", "子表", "childFields", "编号规则", "序列号", "规则", "校验", "计算", "默认值", "流程", "权限", "按钮"],
+        topics: ["omc-write-hazards"],
+    },
     {
         id: "approval-flow",
         command: "omc approval-flow --schema <模型code> --steps '<节点名>@role:<角色code>' --apply",
@@ -441,6 +452,7 @@ export const COMPOSER_ROUTES_FOR_TEST = COMPOSER_ROUTES;
 const COMPOSER_QUESTIONS = Object.freeze({
     "model-purge": "要清理哪个模型？给我 schemaCode（不确定就先跑下面的只读判别动作拿清单）",
     "model-scaffold": "给我模型 code、显示名和字段清单（每字段 code/名称/类型；子表放 subFields），我一条命令建完",
+    "field-add": "目标存量模型 schemaCode 和字段清单（每字段 code/名称/类型；choices 给字符串数组、字典给 options）是什么？建完自动发布、重建表单、列表加列",
     "approval-flow": "目标模型 schemaCode 和每级审批节点（节点名@角色code，多级用重复 --steps）是什么？",
     compute: "目标模型 schemaCode、结果字段 code、公式是什么？（子表条件聚合再加 --where \"子列 = 值\"）",
     "rule-when": "目标模型 schemaCode、触发时机（Create/Update…）、条件（--when）和动作（--then）各是什么？",

package/dist/graph.js

@@ -466,30 +466,30 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                 // D-state in folio_wait_bit_common). One transaction + memory journal
                 // + synchronous=OFF makes the build effectively free.
                 db.exec("PRAGMA journal_mode=MEMORY; PRAGMA synchronous=OFF;");
-                db.exec(`BEGIN;
-        CREATE TABLE meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-        CREATE TABLE rules (
-          schema_code TEXT NOT NULL,
-          rule_code TEXT NOT NULL,
-          name TEXT,
-          enabled INTEGER,
-          status TEXT,
-          default_rule INTEGER,
-          row_id TEXT NOT NULL,
-          graph_sha256 TEXT NOT NULL,
-          PRIMARY KEY (schema_code, rule_code)
-        );
-        CREATE TABLE edges (
-          kind TEXT NOT NULL,
-          code TEXT NOT NULL,
-          schema_code TEXT NOT NULL,
-          rule_code TEXT NOT NULL,
-          node_code TEXT,
-          node_type TEXT,
-          via TEXT NOT NULL
-        );
-        CREATE INDEX edges_lookup ON edges(kind, code);
-        CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
+                db.exec(`BEGIN;
+        CREATE TABLE meta (key TEXT PRIMARY KEY, value TEXT NOT NULL);
+        CREATE TABLE rules (
+          schema_code TEXT NOT NULL,
+          rule_code TEXT NOT NULL,
+          name TEXT,
+          enabled INTEGER,
+          status TEXT,
+          default_rule INTEGER,
+          row_id TEXT NOT NULL,
+          graph_sha256 TEXT NOT NULL,
+          PRIMARY KEY (schema_code, rule_code)
+        );
+        CREATE TABLE edges (
+          kind TEXT NOT NULL,
+          code TEXT NOT NULL,
+          schema_code TEXT NOT NULL,
+          rule_code TEXT NOT NULL,
+          node_code TEXT,
+          node_type TEXT,
+          via TEXT NOT NULL
+        );
+        CREATE INDEX edges_lookup ON edges(kind, code);
+        CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
       `);
                 const insertMeta = db.prepare("INSERT INTO meta (key, value) VALUES (?, ?)");
                 // `applicationResolution` is an object; String(value) would persist
@@ -508,9 +508,9 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                     insertGap.run(gap.kind, gap.ref, gap.note ?? null);
                 // FTS5 mirrors rules (code+name) for `graph search`; one rebuild after
                 // the bulk insert is cheaper than per-row triggers on a wholesale rebuild.
-                db.exec(`
-        CREATE VIRTUAL TABLE rules_fts USING fts5(rule_code, name, content='rules', content_rowid='rowid');
-        INSERT INTO rules_fts(rules_fts) VALUES('rebuild');
+                db.exec(`
+        CREATE VIRTUAL TABLE rules_fts USING fts5(rule_code, name, content='rules', content_rowid='rowid');
+        INSERT INTO rules_fts(rules_fts) VALUES('rebuild');
       `);
                 db.exec("COMMIT;");
             }
@@ -578,6 +578,21 @@ function openGraphIndex() {
         throw error instanceof GraphIndexAbsentError ? error : new GraphIndexAbsentError(`索引不可读（schema 不匹配或文件损坏）：${error instanceof Error ? error.message : String(error)}；重跑 omc graph pull`);
     }
 }
+/**
+ * Zero-hit disambiguation (2026-10-31 capability-test friction, hit twice in
+ * one session): querying `impact field mcc_supplier` returns an empty result
+ * that is indistinguishable from "no references". If the code appears in the
+ * index under a DIFFERENT kind — or as a schema_code, i.e. a model — say so
+ * instead of leaving the caller to guess.
+ */
+function zeroHitKindHint(db, kind, code, command) {
+    const kinds = db.prepare("SELECT DISTINCT kind FROM edges WHERE code = ? AND kind <> ? ORDER BY kind").all(code, kind).map((row) => row.kind);
+    if (kinds.length === 0 && kind !== "model" && db.prepare("SELECT 1 FROM edges WHERE schema_code = ? LIMIT 1").get(code) !== undefined)
+        kinds.push("model");
+    if (kinds.length === 0)
+        return undefined;
+    return `；注意：${code} 在索引中以 ${kinds.join("/")} 身份出现——kind 可能选错，试 omc graph ${command} ${kinds[0]} ${code}`;
+}
 export function queryGraphReferences(kind, code) {
     const { db, summary } = openGraphIndex();
     try {
@@ -599,9 +614,10 @@ export function queryGraphReferences(kind, code) {
             index: summary,
             ...(matches.length === 0
                 ? {
-                    note: gapped
+                    note: (gapped
                         ? "零命中，但索引存在扫描缺口——不可作为「无引用」证明；先 omc graph pull 重建再查"
-                        : "零命中=索引覆盖范围内没有引用它（规则面：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode；数据规则面：propertyCodes 目标与 options {字段} 引用；视图面：列/排序/条件的 propertyCode。不含规则条件叶子/流程绑定）",
+                        : "零命中=索引覆盖范围内没有引用它（规则面：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode；数据规则面：propertyCodes 目标与 options {字段} 引用；视图面：列/排序/条件的 propertyCode。不含规则条件叶子/流程绑定）") +
+                        (zeroHitKindHint(db, kind, code, "references") ?? ""),
                 }
                 : {}),
             ...(gapped
@@ -638,8 +654,8 @@ export function searchGraphRules(term, limit = 20) {
         if (tokens.length > 0) {
             const quoted = tokens.map((token, index) => `"${token.replaceAll('"', '""')}"${index === tokens.length - 1 ? "*" : ""}`).join(" ");
             const rows = db
-                .prepare(`SELECT r.schema_code, r.rule_code, r.name, r.enabled, r.status
-           FROM rules_fts JOIN rules r ON r.rowid = rules_fts.rowid
+                .prepare(`SELECT r.schema_code, r.rule_code, r.name, r.enabled, r.status
+           FROM rules_fts JOIN rules r ON r.rowid = rules_fts.rowid
            WHERE rules_fts MATCH ? ORDER BY bm25(rules_fts), r.schema_code, r.rule_code LIMIT ?`)
                 .all(quoted, limit);
             const refsFor = db.prepare("SELECT kind, code FROM edges WHERE schema_code = ? AND rule_code = ? ORDER BY kind, code");
@@ -743,9 +759,10 @@ export function impactGraph(kind, code) {
             index: summary,
             ...(hop1.length === 0 && dataruleHits.length === 0 && listViewHits.length === 0
                 ? {
-                    note: gapped
+                    note: (gapped
                         ? "零命中，但索引存在扫描缺口——不可作为「无影响」证明；先 omc graph pull 重建再查"
-                        : "零命中=索引覆盖范围内没有引用它（规则面+数据规则面+视图列/排序/条件面；流程绑定暂不在索引内）",
+                        : "零命中=索引覆盖范围内没有引用它（规则面+数据规则面+视图列/排序/条件面；流程绑定暂不在索引内）") +
+                        (zeroHitKindHint(db, kind, code, "impact") ?? ""),
                 }
                 : {}),
             ...(capped || dataruleHits.length > 20 || listViewHits.length > 20

package/dist/human-summary.js

@@ -126,7 +126,7 @@ function phraseOf(tool, args, outcome) {
         case "field.publish":
             return `发布模型 ${schemaCode ?? "?"} 的全部草稿字段（模型级一次发布）`;
         case "form.draft":
-            return `保存表单 ${stringArg(args, "sheetCode") ?? "?"}（模型 ${schemaCode ?? "?"}）的草稿布局`;
+            return `保存表单 ${stringArg(args, "sheetCode") ?? (schemaCode !== undefined ? String(schemaCode) : "?")}（模型 ${schemaCode ?? "?"}）的草稿布局——sheetCode 省略时实际写入 = 模型 code 槽位`;
         case "form.publish":
             // r26 finding: sheetCode is optional (resolved from schemaCode for the
             // default form) — the summary showed "?" when the agent omitted it.

package/dist/lanes/businessrule.js

@@ -196,7 +196,7 @@ export function registerBusinessRuleLane(tools) {
                         else {
                             if (["CREATE", "UPDATE", "DELETE"].includes(nodeType) && Array.isArray(rawNode.dataActions)
                                 && rawNode.dataActions.some((action) => String(action.targetDataItem ?? "") === wanted))
-                                matches.push({ schemaCode, ruleCode, nodeCode, nodeType, via: "dataActions.targetDataItem" });
+                                matches.push({ schemaCode, ruleCode, nodeCode, nodeType, via: "dataActions.targetDataItem", ...(String(rawNode.targetObjectCode ?? "") !== "" ? { targetObjectCode: String(rawNode.targetObjectCode) } : {}) });
                             if (mapping) {
                                 for (const [key, label] of [["inputMappings", "inputMappings.bizCode"], ["outputMappings", "outputMappings.bizCode"]]) {
                                     if (Array.isArray(mapping[key]) && mapping[key].some((row2) => String(row2.bizCode ?? "") === wanted && (row2.codeType === undefined || row2.codeType === 1)))
@@ -215,10 +215,18 @@ export function registerBusinessRuleLane(tools) {
                 ...(scope !== undefined ? { applicationResolution: applicationResolutionOf(scope) } : {}),
                 ...(matches.length === 0
                     ? {
-                        note: "零命中=全平台（或指定 schemaCodes 范围内）没有规则引用它。范围：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode（不含条件叶子与 datarule，第一版边界）",
+                        note: "零命中=" +
+                            (args.schemaCodes !== undefined
+                                ? `仅扫描了 schemaCodes 收窄的 ${scoped.length} 个模型（${scoped.slice(0, 5).join(", ")}${scoped.length > 5 ? "…" : ""}）——引用常发生在**其他**模型上；要全平台结论请去掉 schemaCodes`
+                                : "全平台没有规则引用它") +
+                            "。范围：service→methodMapping.serviceCode；model→targetObjectCode/methodMapping.schemaCode；field→dataActions.targetDataItem/映射 bizCode（不含条件叶子与 datarule，第一版边界）。本工具是在线单点扫描；要离线毫秒级复询、字段级影响面或两跳爆炸半径，先 `omc graph pull --env <env>` 再 `omc graph references|impact <kind> <code>`",
                         ...(scope !== undefined ? { hint: applicationScopeHint(scope, "引用") } : {}),
                     }
-                    : {}),
+                    : {
+                        // r31（2026-10-31）：影响评估场景 agent 已路由到本工具——在必经之路
+                        // 上一行 cross-sell 离线索引（graph 面的知识条目只回节索引时不可见）。
+                        hint: "在线扫描完成；同问要再问/要两跳影响面（改 X 会波及哪些规则，那些规则还碰什么）时，先 `omc graph pull --env <env>` 建离线索引，之后 `omc graph references|impact <kind> <code>` 毫秒级复询",
+                    }),
             };
         }, { target: `rule.references:${args.kind}:${args.code}` }),
     }));

package/dist/lanes/datarule.js

@@ -805,6 +805,12 @@ export function registerDataRuleLane(tools) {
                 matchedCount: rules.length,
                 rules: rules.map(decodeDataRule),
                 ...(args.dataRuleType >= 3 ? { advisory: DATARULE_FORM_INTERACTION_ADVISORY } : {}),
+                // r35（2026-10-31 真机）：type1 校验规则建好读回一致，但 REST `data.submit`
+                // 提交违规数据（-50 / 超阈值）errcode 0 放行、原值落库——校验在门户前端
+                // 提交管线执行，REST 不拦。先告知执行面，省掉「先实测两轮才发现不生效」。
+                ...(args.dataRuleType === 1
+                    ? { executionWarning: "校验规则在门户前端提交时执行；REST `data.submit` 不拦截违规数据（r35 真机：-50 与超阈值均 errcode 0 放行）。验收拦截效果需走门户，或改用业务规则（BIZ_ACTION/条件）在服务端拦。" }
+                    : {}),
                 ...(() => { const w = dataRuleFormulaWarnings(args.dataRuleType, args.options); return w.length ? { lintWarnings: w } : {}; })(),
             },
         };

package/dist/lanes/list-view.js

@@ -715,6 +715,12 @@ export function registerListViewLane(tools) {
             .map(decodeConditionRow)
             .sort((a, b) => String(a.propertyCode ?? "").localeCompare(String(b.propertyCode ?? "")));
         const readback = { code, added, updated, columns: afterCols, sorts, conditions };
+        // r35（2026-10-31 真机）：视图固定条件读回正确，但 `data.list --queryCode <视图>`
+        // 不应用该过滤（4 条未过滤返回）——视图条件的运行时过滤语义未取证（门户 vs
+        // REST queryCode），coverage 已声明 "filtering … not probed"。前置声明省 3 轮排查。
+        if (conditions.length > 0)
+            readback.conditionRuntimeNote =
+                "视图条件的运行时过滤语义未取证：REST `data.list --queryCode <本视图>` 实测不应用固定条件（r35：读回 Gte/5000 正确、返回未过滤 4 条）。别用 queryCode 断言过滤生效；REST 侧过滤用 `data.list` 显式 `filter`。";
         // Post-write semantic readback (dogfood R2): the platform MODELS a list
         // condition as a filter CONTROL definition, so a requested condition whose
         // propertyCode does not survive the round-trip was lost. Surface that as

package/dist/lanes/organization-coverage.js

@@ -0,0 +1,27 @@
+import { claim, declareLaneCoverage } from "./coverage-declaration.js";
+import { LANES } from "./lane-ids.js";
+/**
+ * Organization writes (role group / role / members / management scope) sit on
+ * the same live-proven template lane; the scopes below are claimed here so the
+ * runtime gate can resolve them without a second manifest item.
+ */
+export const ORGANIZATION_COVERAGE = declareLaneCoverage(LANES.workflow, [
+    {
+        capability: "W7 S29 greenfield workflow authoring",
+        evidence: [
+            "packages/omc-cli/src/lanes/organization.ts",
+            "OpenAPI /api/v3/api-docs (1.1.25): organization/role/add_role, add_role_user, update_ouscope",
+        ],
+        tools: [
+            claim("org.role.users", "organization role member read (role/users)"),
+            claim("org.role.userScope", "organization role member management scope read (role/get_ouscope)"),
+            claim("org.roleGroup.create", "organization role group create (role/add_role_group)"),
+            claim("org.role.create", "organization role create (role/add_role)"),
+            claim("org.role.update", "organization role update (role/modify_role)"),
+            claim("org.role.addUsers", "organization role member add (role/add_role_user)"),
+            claim("org.role.removeUsers", "organization role member remove (role/strike_out_role_user)"),
+            claim("org.role.setUserScope", "organization role member scope update (role/update_ouscope)"),
+        ],
+    },
+]);
+//# sourceMappingURL=organization-coverage.js.map

package/dist/lanes/organization.js

@@ -151,6 +151,9 @@ export function registerOrganizationLane(tools) {
             };
             const members = rows.map((row) => ({
                 id: roleUserId(row),
+                // r32 探针：把角色 id 当成员 id 传给 userScope/addUsers → 查询为空。
+                // 明示这个 id 的身份与正确来源，防角色/用户 id 混用。
+                idType: "user",
                 name: row.name ?? null,
                 username: row.username ?? null,
                 departmentId: memberDepartment(row),
@@ -160,7 +163,13 @@ export function registerOrganizationLane(tools) {
                 scopeCount: Array.isArray(row.ouScope) ? row.ouScope.length : null,
                 unitType: row.unitType ?? null,
             }));
-            return { roleId: String(args.roleId), count: members.length, total: data?.totalElements ?? members.length, members };
+            return {
+                roleId: String(args.roleId),
+                count: members.length,
+                total: data?.totalElements ?? members.length,
+                members,
+                note: "members[].id 是用户 id（可直接作为 addUsers 的 userIds / userScope 的 userId；不是角色 id——角色 id 在 org.role.list 的行里）",
+            };
         }),
     }));
     tools.push(defineTool({

package/dist/lanes/runtime-data.js

@@ -688,9 +688,21 @@ export function registerRuntimeDataLane(tools) {
             size: z.number().int().min(1).max(200).default(10),
             all: z.boolean().optional().describe("true 时自动翻页聚合全部结果（内部按 size=200 逐页拉取，安全上限 1000 行，超出截断并标记 capped）——存量盘点/数据核对用，替代手动循环翻页"),
             full: z.boolean().optional().describe("内联完整列表结果；默认大结果只返回计数与 detailFile"),
+            // r31 (2026-10-31 real machine): agents pass `query: {field: value}` as a
+            // filter — zod would STRIP the unknown key silently and the server
+            // returns the unfiltered total, a false "no match / filter applied".
+            // Accept-and-refuse with the correct shape beats silent ignore.
+            query: z.unknown().optional(),
             capability: capabilityArg,
         },
         handler: async (ctx, args, self) => {
+            if (args.query !== undefined)
+                throw new ToolInputError({
+                    status: "error",
+                    blocker: "invalid-input",
+                    tool: "data.list",
+                    message: '没有 `query` 参数——过滤用 `filter: {"op":"eq","field":"<字段>","value":"<值>"}`（或 `filters` 数组=AND、`filterGroup` 嵌套）。r31 真机：`query:{...}` 被静默忽略、total 不变，极易误判为"无数据/已过滤"。',
+                });
             let condition;
             let fromDsl = false;
             try {
@@ -1220,6 +1232,18 @@ export function registerRuntimeDataLane(tools) {
         const ids = args.bizObjectIds && args.bizObjectIds.length > 0 ? args.bizObjectIds : args.bizObjectId ? [args.bizObjectId] : [];
         if (ids.length === 0)
             throw new ToolInputError({ status: "error", blocker: "tool-input-invalid", tool: "data.delete", message: "需要 bizObjectId（单个）或 bizObjectIds（数组，批量）" });
+        // r30 (2026-10-31, 1.1.25 real machine): the batch form fake-succeeds —
+        // DELIVERED + absent:true + a DECREASING modelResidue.total while the
+        // rows are still queryable (data.list unchanged, data.load exists:true).
+        // Re-issuing the same ids one at a time deleted them for real. Refuse
+        // the batch shape and teach the per-id loop until the platform path is
+        // understood; single-id deletes go through the exact same deleteOne.
+        if (ids.length > 1)
+            throw new ToolRefusalError({
+                status: "refused",
+                blocker: "data-delete-batch-fake-success",
+                message: "批量删除（bizObjectIds 多个）在 1.1.25 真机实证为假成功：回执 DELIVERED + absent:true + modelResidue.total 递减，但行仍在（data.list 不变、data.load exists:true）；同样的 id 改单条逐个删才真删掉。请用 bizObjectId（单个）逐个删，每条删完用 data.load 确认 exists:false（absent:true 不是删除成功的证明）。",
+            });
         const deleteOne = async (bizObjectId) => {
             // Delete is destructive: probe the authoritative object first so an
             // absent id is an idempotent no-op, never a blind runtime delete.

package/dist/lanes/workflow.js

@@ -1495,7 +1495,7 @@ function mergeCallerDelta(template, draft, options = {}) {
             throw new ToolRefusalError({
                 status: "refused",
                 blocker: "workflow-activity-type-missing",
-                message: `workflow.update: 新节点 ${String(activity.activityCode ?? "")} 缺 type/activityType（权限编辑行可省类型仅当 activityCode 命中草稿既有节点）`,
+                message: `workflow.update: 新节点 ${String(activity.activityCode ?? "")} 缺 type/activityType（权限编辑行可省类型仅当 activityCode 命中草稿既有节点）。r32 实测：只改 participant/btnConfigList 的行也必须显式带 type——省略豁免仅限权限编辑行（带 propertyPermissions）。`,
             });
     }
     // Insert added nodes BEFORE the terminal END, so the auto-chain reads
@@ -2831,7 +2831,12 @@ export function registerWorkflowLane(tools) {
                     });
                 }
             }
-            const selected = page.items;
+            // r32（2026-10-31）：`participant` 分支此前忽略 workflowInstanceId——按人查
+            // 时同回全部实例的待办，与参数语义（exact-match 过滤）不符。两个分支统一
+            // 在客户端做实例过滤。
+            const selected = args.workflowInstanceId !== undefined
+                ? page.items.filter((item) => wireString(item.instanceId) === args.workflowInstanceId)
+                : page.items;
             // Resolve the in-flight bizObject id per distinct instance. Authoritative
             // source: getBizObjectByWfInstanceId -> BizObjectCreatedModel.id/schemaCode.
             // Best-effort: a failed lookup leaves the identity null, never drops the todo.