@stalfh233/omc-cli 0.6.11 → 0.6.13

package/dist/lanes/model.js

@@ -19,6 +19,56 @@ import { MODEL_CREATE_BODY_DEFAULTS, MODEL_LANE_CONTRACT } from "./model-contrac
 import { flattenFolders } from "./folder.js";
 const MODEL_LANE = MODEL_LANE_CONTRACT.lane;
 const MODEL_TOOLS = MODEL_LANE_CONTRACT.tools;
+/**
+ * r29a F12：`model.list` 的 diet 投影。默认 `compactReadback` 把 `models` 压成
+ * 「code｜name」字符串，小结果又原样回对象——同一工具元素类型不稳定。
+ * 这里恒回 `{code,schemaCode,name,legacyString}` 对象。
+ */
+function modelListCompact(result) {
+    const compact = {};
+    for (const [key, value] of Object.entries(result)) {
+        if (key === "models" && Array.isArray(value)) {
+            compact.models = value.map((entry) => {
+                if (entry !== null && typeof entry === "object" && !Array.isArray(entry)) {
+                    const row = entry;
+                    const code = String(row.code ?? row.schemaCode ?? "");
+                    const name = row.name == null ? null : String(row.name);
+                    return {
+                        code,
+                        schemaCode: String(row.schemaCode ?? code),
+                        name,
+                        legacyString: name ? `${code}｜${name}` : code,
+                    };
+                }
+                if (typeof entry === "string") {
+                    const sep = entry.indexOf("｜");
+                    const code = sep >= 0 ? entry.slice(0, sep) : entry;
+                    const name = sep >= 0 ? entry.slice(sep + 1) : null;
+                    return { code, schemaCode: code, name, legacyString: entry };
+                }
+                return entry;
+            });
+            compact.modelsCount = value.length;
+            continue;
+        }
+        if (value !== null && typeof value === "object" && !Array.isArray(value)
+            && Object.keys(value).length <= 4
+            && Buffer.byteLength(JSON.stringify(value), "utf8") <= 200) {
+            compact[key] = value;
+            continue;
+        }
+        if (typeof value === "string" || typeof value === "number" || typeof value === "boolean" || value === null) {
+            compact[key] = value;
+            continue;
+        }
+        if (Array.isArray(value)) {
+            compact[`${key}Count`] = value.length;
+            continue;
+        }
+        compact[key] = value;
+    }
+    return compact;
+}
 /**
  * Pending work items for every workflow attached to this model.
  *
@@ -195,11 +245,34 @@ export function registerModelLane(tools) {
             applicationCode: z.string().optional().describe("应用 code；省略用配置/默认应用"),
             filter: z.string().optional().describe("子串过滤：code 或 name 含该词才保留"),
             search: z.string().optional().describe("filter 的别名（集合读统一关键字手感；org.role.list/service.list 也用 search）"),
+            // r29b F12：探针传 `query` 被静默忽略（仅 ignoredArgs 提示）。接受为 filter 别名，
+            // 与 search 同义；三者都给时以 filter > search > query 优先。
+            query: z.string().optional().describe("filter 的别名（与 search 同义；子串过滤 code/name）"),
             capability: capabilityArg,
         },
         handler: async (ctx, args, self) => governedRead(ctx, self, args, async (session) => {
             const scope = await resolveApplicationScope(session, args.applicationCode);
             const applicationCode = scope.code;
+            // r29f F6：显式/配置的 applicationCode 若不在 app.list 里，旧路径会把拼写错误
+            // 伪装成「该应用没有模型」。先核对租户应用表，未命中即拒（与 discover 的
+            // applicationResolution.status 同构）。
+            const availableApps = wireRows((await wireCall(session, { path: ENDPOINTS.applicationList, query: {} })).data)
+                .map((row) => String(row.appCode ?? row.code ?? ""))
+                .filter((code) => code !== "");
+            if (availableApps.length > 0 && !availableApps.includes(applicationCode)) {
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "app-not-found",
+                    applicationCode,
+                    applicationResolution: {
+                        status: "unresolved",
+                        source: scope.source,
+                        requested: scope.requested ?? applicationCode,
+                        available: availableApps.slice(0, 40),
+                    },
+                    message: `应用「${applicationCode}」不在租户 app.list 里（不是「该应用没有模型」）。可用：${availableApps.slice(0, 12).join("、")}${availableApps.length > 12 ? " 等" : ""}；先 app.list 取正确 applicationCode。`,
+                });
+            }
             const tree = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
             const all = tree
                 .filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code)
@@ -207,7 +280,7 @@ export function registerModelLane(tools) {
                 // the tree row's key. Echo both so `--jq 'models[].schemaCode'` works
                 // (r15 P6: the alias was missing and the path missed).
                 .map((row) => ({ code: row.code, schemaCode: row.code, name: row.name ?? row.text ?? null }));
-            const needle = (args.filter ?? args.search)?.trim();
+            const needle = (args.filter ?? args.search ?? args.query)?.trim();
             const models = needle ? all.filter((model) => String(model.code).includes(needle) || String(model.name ?? "").includes(needle)) : all;
             // `filterApplied` disambiguates an empty result: it distinguishes "the
             // filter ran and matched nothing" from "the filter was not applied"
@@ -217,7 +290,7 @@ export function registerModelLane(tools) {
             // 1-of-N, so `count: 0` must never read as tenant-wide absence.
             return {
                 applicationCode,
-                applicationResolution: applicationResolutionOf(scope),
+                applicationResolution: { status: "resolved", ...applicationResolutionOf(scope) },
                 count: models.length,
                 totalBeforeFilter: all.length,
                 filterApplied: needle !== undefined && needle !== "",
@@ -226,7 +299,13 @@ export function registerModelLane(tools) {
                 models,
                 ...(models.length === 0 ? { hint: applicationScopeHint(scope, "模型") } : {}),
             };
-        }, { target: `model.list:${args.applicationCode ?? ""}:${args.filter ?? ""}` }),
+        }, {
+            target: `model.list:${args.applicationCode ?? ""}:${args.filter ?? args.search ?? args.query ?? ""}`,
+            // r29a F12：默认 compactReadback 把 models 压成「code｜name」字符串，小应用
+            // 不过 diet 门仍回对象 → 同一工具元素类型不稳定。自定义 compact 恒回对象，
+            // 并附 legacyString 兼容旧解析。
+            compact: (result) => modelListCompact(result),
+        }),
     }));
     const siblings = tools;
     tools.push(defineTool({
@@ -433,6 +512,8 @@ export function registerModelLane(tools) {
                 .describe("模型所属应用 code（应用包，不是目录）。省略用配置默认应用；folder.* 的 appCode 别名本工具不认，请用 applicationCode。"),
             modelType: z.enum(["LIST", "TREE"]).default("LIST"),
         },
+        // r29a F6：dry-run 必须做与实跑同样的 duplicate 探测，否则会假绿灯。
+        dryRunPayload: modelCreateDryRun,
         execute: async (session, args) => {
             const applicationCode = await resolveApplicationCode(session, args.applicationCode);
             const existing = await resolveModelTreeNode(session, args.code, args.applicationCode);
@@ -540,6 +621,48 @@ export function registerModelLane(tools) {
         },
         rollback: modelRollbackSpec("model.create"),
     });
+    /**
+     * r29a F6：model.create 的 session-aware dry-run。与实跑同一套 duplicate /
+     * orphan 探测（只读），命中时 wouldChange:false + blocker，避免假绿灯。
+     */
+    async function modelCreateDryRun(session, args) {
+        const existing = await resolveModelTreeNode(session, args.code, args.applicationCode);
+        if (existing.node) {
+            return {
+                wouldChange: false,
+                blocker: "model-create-duplicate",
+                schemaCode: args.code,
+                applicationCode: existing.applicationCode,
+                message: `模型 ${args.code} 已存在于应用 ${existing.applicationCode} 的应用树中；create 拒绝重复 POST，不能把既有模型证明为本次创建结果`,
+            };
+        }
+        try {
+            const record = await readModelRecord(session, args.code);
+            if (record !== null && typeof record === "object") {
+                return {
+                    wouldChange: false,
+                    blocker: "model-create-duplicate-orphan",
+                    schemaCode: args.code,
+                    applicationCode: args.applicationCode ?? null,
+                    nextCommand: `omc call model.delete --env <env> --args '{"schemaCode":"${args.code}"}'`,
+                    message: `模型 ${args.code} 在册（bizmodels/get_all 可读）但不在应用树中。**先跑一次 model.delete**——它现在会把两种成因分开：` +
+                        `① 读缓存滞后（记录其实已删）→ 回 already-absent/stale-record-cache，随后可直接 create；` +
+                        `② 真孤儿（删除级联中断留下的残骸）→ 回 model-orphaned-record 并给平台侧出路（回收站物理删除 / 换 code），因为 8.6 平台无法删除没有 AppFunction 行的业务模型。` +
+                        `不要重复 create（会再造一条孤儿），也不要只信这一条拒绝信息。`,
+                };
+            }
+        }
+        catch {
+            // Record-face read failure must not be read as absence; dry-run proceeds.
+        }
+        const applicationCode = await resolveApplicationCode(session, args.applicationCode).catch(() => args.applicationCode ?? null);
+        return {
+            wouldChange: true,
+            schemaCode: args.code,
+            applicationCode,
+            summary: `即将创建模型 ${args.name ?? args.code}（${args.code}）${args.modelType === "TREE" ? "，树型" : "，列表型"}${applicationCode ? `（应用 ${applicationCode}）` : ""}`,
+        };
+    }
     /** model.delete writeTool extra arg: a session-aware dry-run that scans inbound references (no write). */
     async function modelDeleteDryRun(session, args) {
         const record = await (async () => {
@@ -620,8 +743,9 @@ export function registerModelLane(tools) {
             const applicationCode = resolved.applicationCode;
             const treeRows = async () => applicationCode ? flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data)) : [];
             if (!node) {
+                // r30a F22: mark noop so write.ts skips the rollback journal line.
                 if (record === null)
-                    return { performed: { skipped: "already-absent" }, readback: { absent: true } };
+                    return { performed: { skipped: "already-absent", noop: true }, readback: { absent: true } };
                 // r12 (2026-10-24): "record readable but no tree node" has TWO causes and
                 // the caller could not tell them apart — create said "go fix parentId",
                 // model.move said "there is no node", model.delete said "no node means
@@ -642,7 +766,8 @@ export function registerModelLane(tools) {
                 }
                 if (stillPresent === null) {
                     return {
-                        performed: { skipped: "stale-record-cache" },
+                        // r30a F22: noop — do not journal a phantom delete.
+                        performed: { skipped: "stale-record-cache", noop: true },
                         readback: {
                             absent: true,
                             note: "业务模型记录读取面（bizmodels/get_all）先前仍返回该 code，复查后已消失——这是读缓存滞后的残留，模型实际已删除。若刚跑过 model.create 又被拒「已在册」，现在可以重试。",
@@ -950,6 +1075,10 @@ export function registerModelLane(tools) {
         description: MODEL_TOOLS["model.update"].description,
         inputSchema: {
             schemaCode: z.string().min(1),
+            // Accept+refuse: callers habitually send `code` thinking they can rename
+            // the model identity. Keep it in schema so unknown-key suggestion does
+            // NOT redirect them to schemaCode (schemaCode == code).
+            code: z.string().min(1).optional().describe("恒拒（model-code-immutable）：模型 code 即 schemaCode，创建后不可改；要换 code 请新建模型并迁移数据"),
             name: z.string().min(1).optional().describe("新显示名（bizmodels/update 补丁语义，读回 get_all + 应用树节点）"),
             modelType: z.enum(["LIST", "TREE"]).optional().describe("恒拒（model-type-immutable）：模型类型创建时固化，bizmodels/update 只更新菜单节点显示"),
         },
@@ -1003,8 +1132,16 @@ export function registerModelLane(tools) {
             };
         },
         preflight: (args) => {
-            // `omc call` bypasses zod, so an extra modelType key still reaches here.
+            // `omc call` bypasses zod, so an extra modelType/code key still reaches here.
             const raw = args;
+            // schemaCode == code：传 code 想改模型标识时，绝不能建议「改传 schemaCode」。
+            if (raw.code !== undefined)
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "model-code-immutable",
+                    schemaCode: raw.schemaCode,
+                    message: "模型 code 是业务数据的标识（规则/表单/视图/数据都挂在 schemaCode 上），不可原地修改；要换 code 请新建模型并迁移数据",
+                });
             // Probe evidence (yunshu ledger + ticket 09): bizmodels/update only
             // updates the app-menu node display — the underlying schema (type, tree
             // system fields) is FIXED at create. A modelType patch here would look
@@ -1024,17 +1161,21 @@ export function registerModelLane(tools) {
         name: "model.move",
         lane: MODEL_LANE,
         scope: "move a model's app-tree node to another folder (bizmodels/update parentId)",
-        description: "把模型移动到指定应用目录（分组）：`POST bizmodels/update` 的 `parentId`（与 model.update 同一端点，AppFunctionController 补丁语义：bizSchemaCode/id/name/parentId 全量必填，工具从应用树解析）。`folderId` 必须是目录节点 id（`folder.tree` 的 id），**不能直接给目录名**——重名目录会定位错。移动后按应用树回读 `parentId/path` 确认；模型的 schema、字段、表单、视图都不动，只换菜单节点归属。目标目录不存在时拒绝 `folder-not-found` 并列出目录树。",
+        description: "把模型在**同一应用内**移动到指定目录（分组）：`POST bizmodels/update` 的 `parentId`（与 model.update 同一端点，AppFunctionController 补丁语义：bizSchemaCode/id/name/parentId 全量必填，工具从应用树解析）。" +
+            "`folderId` 必须是目录节点 id（`folder.tree` 的 id），**不能直接给目录名**——重名目录会定位错。" +
+            "移动后按应用树回读 `parentId/path` 确认；模型的 schema、字段、表单、视图都不动，只换菜单节点归属。" +
+            "**模型不能跨应用移动**——目标目录必须与模型同应用；要在目标应用得到同名模型，请 `model.create --applicationCode <目标>`（换 code，或先 `model.delete` 源再同 code 重建）。" +
+            "目标目录不存在时拒绝 `folder-not-found` 并列出目录树；目录属于其它应用时拒绝 `folder-other-application`。",
         inputSchema: {
             schemaCode: z.string().min(1),
             folderId: z
                 .string()
                 .min(1)
-                .describe("目标目录 id（必须是 folder.tree 里 type=Folder 的 id；顶层目录也是真实 id，不要传空或目录名）"),
+                .describe("目标目录 id（必须是 folder.tree 里 type=Folder 的 id；顶层目录也是真实 id，不要传空或目录名；且必须与模型同应用）"),
             applicationCode: z
                 .string()
                 .optional()
-                .describe("模型所在应用 code（应用包，跨应用时显式给）；folder.* 的 appCode 别名本工具不认。"),
+                .describe("模型所在应用 code（应用包）。用于定位源模型节点；**不支持跨应用移动**——目标目录必须同应用。folder.* 的 appCode 别名本工具不认。"),
         },
         execute: async (session, args) => {
             const resolved = await resolveModelTreeNode(session, args.schemaCode, args.applicationCode);
@@ -1071,8 +1212,11 @@ export function registerModelLane(tools) {
                     applicationCode: appCode,
                     ...(otherApp ? { folderApplicationCode: otherApp } : {}),
                     available: tree.filter((row) => row.type === "Folder").map((row) => ({ id: row.id, name: row.name })).slice(0, 40),
+                    // r29a F5：旧建议「先在源应用建同名目录再移动」永远到不了目标应用。
                     message: otherApp
-                        ? `目录 ${args.folderId} 属于应用 ${otherApp}，而模型 ${args.schemaCode} 在应用 ${appCode}——模型的目录必须同应用；跨应用请先在 ${appCode} 建同名目录再移动`
+                        ? `目录 ${args.folderId} 属于应用 ${otherApp}，而模型 ${args.schemaCode} 在应用 ${appCode}——模型不能跨应用移动。` +
+                            `要在 ${otherApp} 得到同名模型，请 \`model.create --applicationCode ${otherApp}\`（换 code，或先 \`model.delete\` 源再同 code 重建）；` +
+                            `同应用内换目录请传 ${appCode} 下 folder.tree 的目录 id。`
                         : `应用 ${appCode} 没有目录 ${args.folderId}——folderId 必须用 folder.tree 的目录节点 id（不是目录名）`,
                 });
             }

package/dist/lanes/organization.js

@@ -8,6 +8,43 @@ import { ENDPOINTS } from "../endpoints.js";
 import { environmentArg, capabilityArg } from "../args.js";
 import { LANES } from "./lane-ids.js";
 import { collectOrgDepartments } from "./org-tree.js";
+import { resolvePermissionActor } from "../identity.js";
+/** Normalize get_ouscope rows; empty / null / non-array → [] (r30d F3). */
+function decodeOuScopeRows(data) {
+    if (data === null || data === undefined)
+        return [];
+    if (Array.isArray(data) && data.length === 0)
+        return [];
+    try {
+        return wireRows(data);
+    }
+    catch (error) {
+        // Non-member / no-scope answers null or a non-array — that is a legitimate
+        // empty set, not a wire bug (r30d F3). Only rethrow when the payload looks
+        // like a real envelope with non-row content.
+        if (error instanceof WireError && error.kind === "malformed-envelope")
+            return [];
+        throw error;
+    }
+}
+/**
+ * Structured scope face (r30d F4): never echo the caller's includeChildren
+ * guess. Platform get_ouscope does not return an includeChildren bit, so we
+ * surface that honestly instead of inventing one.
+ */
+function projectOuScopeRow(row) {
+    const deptId = row.id === undefined || row.id === null ? null : String(row.id);
+    const deptPath = row.deptPath === undefined || row.deptPath === null ? null : String(row.deptPath);
+    return {
+        id: deptId,
+        deptId,
+        name: row.name === undefined || row.name === null ? null : String(row.name),
+        type: row.type === undefined || row.type === null ? null : String(row.type),
+        deptPath,
+        includeChildren: "unknown（平台不返回）",
+        source: "configured",
+    };
+}
 /**
  * Organization WRITE faces (8.6.41 customer transcript, 2026-10-21).
  *
@@ -384,7 +421,7 @@ export function registerOrganizationLane(tools) {
         kind: "read",
         lane: LANE,
         scope: SCOPES.userScope,
-        description: "读成员的管理范围（`GET organization/role/get_ouscope`）。**不是枚举档位**（本人/本部门/全部这类不存在）：scopes 是一组部门节点 `{id,name,type:\"1\",deptPath}` 的自由列表。`type:\"1\"`=部门节点；update_ouscope 是覆盖语义，改前先读。**roleId 与 roleCode 二者其一**（与写面对齐；都给且不一致则拒绝）。",
+        description: "读成员的管理范围（`GET organization/role/get_ouscope`）。**不是枚举档位**：scopes=`{deptId,name,type:\"1\",deptPath,includeChildren,source}`。`includeChildren` 平台不返回（`unknown`）；`source:\"configured\"`=配置值、不证明生效。非成员/无范围→`{count:0,scopes:[]}`（合法空集，非 wire 错误）。**roleId/roleCode 二选一**。",
         inputSchema: {
             environment: environmentArg,
             roleId: z.string().min(1).optional().describe("角色 id（32 位 hex）；与 roleCode 二选一"),
@@ -398,8 +435,19 @@ export function registerOrganizationLane(tools) {
                 path: ENDPOINTS.organizationRoleGetOuScope,
                 query: { ...orgQuery(session), roleId, userId: String(args.userId) },
             })).data;
-            const scopes = wireRows(data).map((row) => ({ id: row.id ?? null, name: row.name ?? null, type: row.type ?? null, deptPath: row.deptPath ?? null }));
-            return { roleId, userId: String(args.userId), count: scopes.length, scopes };
+            const scopes = decodeOuScopeRows(data).map(projectOuScopeRow);
+            const actor = await resolvePermissionActor(session);
+            return {
+                roleId,
+                userId: String(args.userId),
+                count: scopes.length,
+                scopes,
+                readback: "config",
+                note: scopes.length === 0
+                    ? "该用户不在本角色或无管理范围（合法空集；不是读失败）"
+                    : "本工具只回配置值（source:configured），不证明已参与 data.list/listview 过滤；includeChildren 平台不返回。",
+                actor,
+            };
         }),
     }));
     writeTool({
@@ -1216,7 +1264,7 @@ export function registerOrganizationLane(tools) {
         },
         execute: async (session, args) => {
             const roleId = await resolveRoleRef(session, { roleId: args.roleId, roleCode: args.roleCode }, "org.role.setUserScope");
-            const before = wireRows((await wireCall(session, {
+            const before = decodeOuScopeRows((await wireCall(session, {
                 path: ENDPOINTS.organizationRoleGetOuScope,
                 query: { ...orgQuery(session), roleId, userId: args.userId },
             })).data);
@@ -1236,13 +1284,25 @@ export function registerOrganizationLane(tools) {
                 query: orgQuery(session),
                 body: { roleId, userId: args.userId, unitType: 3, sortKey: 999, ouScopeList: merged },
             });
-            const after = wireRows((await wireCall(session, {
+            const afterRows = decodeOuScopeRows((await wireCall(session, {
                 path: ENDPOINTS.organizationRoleGetOuScope,
                 query: { ...orgQuery(session), roleId, userId: args.userId },
-            })).data).map((row) => ({ id: row.id ?? null, name: row.name ?? null, type: row.type ?? null, deptPath: row.deptPath ?? null }));
+            })).data);
+            const after = afterRows.map(projectOuScopeRow);
+            const actor = await resolvePermissionActor(session);
             return {
                 performed: { errcode: 0 },
-                readback: { roleId, userId: args.userId, mode: args.mode ?? "merge", before: before.length, after: after.length, scopes: after, ...(removed.length > 0 ? { removedScopeIds: removed } : {}) },
+                readback: {
+                    roleId,
+                    userId: args.userId,
+                    mode: args.mode ?? "merge",
+                    before: before.length,
+                    after: after.length,
+                    scopes: after,
+                    ...(removed.length > 0 ? { removedScopeIds: removed } : {}),
+                    readback: "config",
+                    actor,
+                },
             };
         },
     });

package/dist/lanes/runtime-data-contract.js

@@ -15,6 +15,7 @@ export function dataUpdateDescription() {
         `${wire.updateMergeRule}。`,
         `缺席保护：${wire.updateAbsentGuard}。`,
         `子表行：${wire.childRowStatusNote}`,
+        "CHILD_TABLE 字段传对象数组：既有行带 id、追加行 rowStatus:\"Added\"、删除行 {id,rowStatus:\"Deleted\"}（只给 id）；**少传行不会删除**（见 --example child-rows-upsert）。",
         `计算字段：${wire.formulaFieldNote}`,
         "成功后以 form/load 权威读回变更字段；审批门/生产拒绝/租约与其他 M2 写一致（governedWrite）。",
     ]);
@@ -25,6 +26,7 @@ export function dataSaveDescription() {
         `带可选 workflowCode 时按门户暂存形状创建流程草稿：${wire.workflowDraftSave}。`,
         "formData 禁止携带 id（带 id 的就地发起在 8.6.26 无 REST 面，会被拒绝；既有无实例草稿请改用两段式或 data.submit 的 workItemId 审批链）。",
         "关联值形状（live 2026-09-24）：**单选关联（propertyType 9）传 id 字符串或 { id }；传数组会 50000**；多选关联（11）才用数组。**人员/组织（50/51/60/61）传选择对象数组 `[{\"id\":\"<id>\",\"type\":3,\"name\":\"<名>\"}]`——`type` 必填**（BizField.parseFromClient 把 `type` 强转 Integer 并 intValue()，缺 `type` 稳定 50000）；`type` 取 UnitType 索引：用户=3、部门=1。字段 `mappings` 由表单运行时在用户选择时套用，**服务端 data.save 不会自动回填映射目标字段**——API 侧调用需自行写入被映射字段，否则读回为空（不要误判为映射配置失败）。",
+        "CHILD_TABLE 字段传对象数组（行键见 data.update --example child-rows-upsert）；新建时可省略行 id（工具 stamp Added）。",
         `不带 workflowCode 走纯表单保存（新行 DRAFT）；formType 语义与 replayToken 门见 data.submit 契约（${wire.replayTokenErrcode}）。`,
         "根因提示（环境相关，ticket 78 观测）：**某些环境**里模型所在应用未发布时运行时写稳定 50000（同调用在已发布应用成功），工具会反推并拒 app-not-published。注意该根因并非普遍规律——2026-09-19 实测另有一类环境未发布应用也能写运行时数据（详见 docs/issues/omc-cli-findings-2026-09-19.md B17）。遇 50000 时先用只读数据核对，不要仅凭“应用未发布”就放弃运行时验证。",
         `子表行：${wire.childRowStatusNote}`,
@@ -139,8 +141,8 @@ function desc(lead) {
 export function assertRuntimeDataContract() {
     assertLaneContract(RUNTIME_DATA_LANE_CONTRACT);
     assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.list", ["queryCondition", "propertyType", "rawCondition", "projectionHint", "listview.configure", "data.load", "items[].fields"]);
-    assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.save", ["bizObjectId", "sheetCode", "bizsheet/get", "workflowCode", "sequenceStatus", "workItem", "propertyType 9", "50000", "mappings", "rowStatus", "DRAFT", "submit:true"]);
-    assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.update", ["runtime/form/save", "bizObjectId", "COMPLETED", "304001", "form/load", "rowStatus"]);
+    assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.save", ["bizObjectId", "sheetCode", "bizsheet/get", "workflowCode", "sequenceStatus", "workItem", "propertyType 9", "50000", "mappings", "rowStatus", "DRAFT", "submit:true", "CHILD_TABLE"]);
+    assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.update", ["runtime/form/save", "bizObjectId", "COMPLETED", "304001", "form/load", "rowStatus", "child-rows-upsert"]);
     assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.delete", ["absence", "sheetCode"]);
     assertDescriptionCarries(RUNTIME_DATA_LANE_CONTRACT, "data.submit", ["getReplayToken", "replayToken", "bizObjectId", "objectId", "DRAFT", "COMPLETED", "10009", "100005", "NPE", "两段式", "finishStart=FALSE"]);
     if (!RUNTIME_DATA_WIRE.workflowDraftSave.includes("finishStart=FALSE"))