@stalfh233/omc-cli 0.6.16 → 0.6.18

package/dist/batch-call.js

@@ -19,6 +19,8 @@
  * per-tool preflight apply exactly as they do for a single call.
  */
 import { refusalText } from "./cli-contract.js";
+import { createArtifact } from "./artifacts.js";
+import { artifactFetchHint, artifactRoot } from "./command-transport.js";
 import { runScript } from "./script.js";
 function inputBusinessKey(args) {
     const keys = ["code", "name", "bizObjectId", "id"];
@@ -44,7 +46,12 @@ function failureDetails(entry, args) {
     }
     return { hint: "平台回了无明细 50000，常见成因见 help omc-refusals；请用该行输入与已发布字段逐项核对" };
 }
-export function batchWarnings(argsList) {
+export function batchWarnings(argsList, tool) {
+    // Runtime data validation belongs to the runtime-data lane, which has the
+    // published field metadata.  The old generic `code` requirement fabricated
+    // ghost warnings for data.save (models commonly have no code field).
+    if (tool === "data.save")
+        return [];
     const warnings = [];
     const seenCodes = new Map();
     argsList.forEach((args, index) => {
@@ -141,6 +148,11 @@ export async function runBatchCall(options) {
                 ? String(readback.authoritative.id)
                 : undefined;
         const skippedMarker = performed?.skipped;
+        const applicationCode = typeof performed?.applicationCode === "string"
+            ? String(performed.applicationCode)
+            : typeof entry.result.readback?.applicationCode === "string"
+                ? String(entry.result.readback.applicationCode)
+                : undefined;
         return {
             index: entry.index,
             row: entry.index + 1,
@@ -148,11 +160,25 @@ export async function runBatchCall(options) {
             ok: entry.status === "ok",
             ...inputBusinessKey(options.argsList[entry.index] ?? {}),
             ...(bizObjectId !== undefined ? { bizObjectId } : {}),
+            ...(applicationCode !== undefined ? { applicationCode } : {}),
             ...(entry.status === "ok" ? {} : { status: String(entry.result.status ?? "failed"), blocker: entry.result.blocker ?? null }),
             ...(skippedMarker !== undefined ? { skipped: String(skippedMarker) } : {}),
         };
     });
     const entriesInline = entriesSummary.slice(0, ENTRIES_INLINE_LIMIT);
+    const laneWarnings = entries.flatMap((entry) => {
+        const warnings = entry.result.readback?.warnings;
+        return Array.isArray(warnings)
+            ? warnings.map((warning) => ({ ...warning, row: entry.index + 1 }))
+            : [];
+    });
+    const warnings = options.tool === "data.save" ? laneWarnings : batchWarnings(options.argsList, options.tool);
+    const applicationCode = entries.map((entry) => entry.result.performed?.applicationCode).find((value) => typeof value === "string");
+    const warningsInline = warnings.slice(0, ENTRIES_INLINE_LIMIT);
+    const detailOmitted = entriesSummary.length > entriesInline.length || warnings.length > warningsInline.length;
+    const detailArtifact = detailOmitted
+        ? createArtifact(artifactRoot(), JSON.stringify({ entries: entriesSummary, warnings }, null, 2) + "\n")
+        : undefined;
     return {
         exitCode: failed > 0 ? 1 : 0,
         result: {
@@ -162,14 +188,22 @@ export async function runBatchCall(options) {
             executed,
             succeeded,
             failed,
+            ...(applicationCode !== undefined ? { applicationCode } : {}),
             ...(skipped > 0 ? { notExecuted: skipped } : {}),
             // 每条一行摘要（index/ok/bizObjectId）——不是完整信封，但足以回答
             // 「第 3 条建成了吗、它的 id 是什么」。失败项另有 failures 带完整原因。
             entries: entriesInline,
-            ...(batchWarnings(options.argsList).length > 0 ? { warnings: batchWarnings(options.argsList) } : {}),
-            ...(entries.length > entriesInline.length
-                ? { entriesOmitted: entries.length - entriesInline.length, entriesHint: `条目超过 ${ENTRIES_INLINE_LIMIT} 条，只内联前 ${ENTRIES_INLINE_LIMIT} 条摘要；完整结果走 detailArtifactId / omc artifact get` }
-                : {}),
+            ...(warnings.length > 0 ? {
+                warnings: warningsInline,
+                ...(warnings.length > warningsInline.length ? { warningsOmitted: warnings.length - warningsInline.length } : {}),
+            } : {}),
+            ...(entriesSummary.length > entriesInline.length ? { entriesOmitted: entriesSummary.length - entriesInline.length } : {}),
+            ...(detailArtifact !== undefined ? {
+                detailArtifactId: detailArtifact.artifactId,
+                sha256: detailArtifact.sha256,
+                fetch: artifactFetchHint(detailArtifact.artifactId),
+                entriesHint: `条目或预检警告超过 ${ENTRIES_INLINE_LIMIT} 条，只内联前 ${ENTRIES_INLINE_LIMIT} 条；完整结果见 detailArtifactId`,
+            } : {}),
             // Only failures carry full per-entry detail: echoing 8 full success
             // envelopes would rebuild exactly the wall of text this command exists
             // to remove.

package/dist/capability-overview.js

@@ -123,7 +123,7 @@ const SURFACES = [
     },
     {
         id: "workflow",
-        title: "流程模板",
+        title: "流程模板 + 组织与权限",
         lane: LANES.workflow,
         description: "流程模板生命周期：get_draft/get_published、create、update、publish、bindRule、delete、workitem.list。**含组织/部门/角色/权限范围（org.* 工具）**：部门树、角色组/角色、用户搜索、成员与管理范围（userScope）——流程参与人/可见性的候选来源。",
         operations: ["create", "update", "publish", "bindRule", "delete"],
@@ -193,7 +193,7 @@ const CAPABILITY_ALIASES = Object.freeze({
     businessrule: ["business-rules", "B1-businessrule"],
     "rule-lifecycle": ["rule-lifecycles", "S25-rule-lifecycle"],
     // r28h F1/F7: org.* lives under workflow; aliases let "我要管部门/组织" hit it.
-    workflow: ["workflows", "W7-S29-greenfield", "org", "organization", "organisation", "组织", "组织架构"],
+    workflow: ["workflows", "W7-S29-greenfield", "org", "organization", "permission", "role", "权限", "角色", "组织"],
     onlinejs: ["online-js"],
     programming: ["backend-online-coding", "programming-online-dev", "在线开发", "在线编码"],
     bizservice: ["bizservices", "B2-registration"],

package/dist/cli.js

@@ -368,7 +368,7 @@ function parseDoctorStep(line) {
 function doctorAnchor() {
     const topics = listSkills().map((entry) => entry.name).join("、");
     return [
-        "最小路径  omc next \"<目标>\"（目标→工具一步定位，不确定会明说）→ omc help omc-start-here → omc call discover_environment --env <env> --args '{}'（<env> 名以 doctor 的「环境=」或项目 .omc-env 为准，勿猜）→ omc capabilities / omc describe <tool>",
+        "最小路径  omc next \"<目标>\"（目标→工具一步定位，不确定会明说）→ omc help omc-start-here → omc call discover_environment --env <env> --args '{}'（<env> 名以 doctor 的「环境=」或项目 .omc-env 为准，勿猜；项目环境白名单按 cwd 解析，须在含 .omc-env 的目录内运行）→ omc capabilities / omc describe <tool>",
         `方法论    omc help <topic>（或 --topic <name>）--sections / --section "<标题>"（按节读，随包 skills/）；topic：${topics}`,
         "大输出    超预算结果只回 artifactId/sha256/fetch；用 fetch 里的 omc artifact get <id>（可加 --jq <path>）取回，勿全量读入",
         // r29f F9：只读面不碰远端，但仍会本地落盘——写清，避免「零写入」核对误判。
@@ -534,7 +534,7 @@ async function cmdCall(store, args) {
                 return emitTransportResult({ status: "ok", ...described, helpNote: "来自 omc describe；完整面用 omc describe <tool> [--full|--param|--example]" }, { request, maxOutputBytes });
             }
         }
-        console.error("用法：omc call <tool> [--env <环境>] [--args '<json>' | --args - (stdin) | --args-file <配置根内路径（必须位于配置根内；跨目录临时文件用 --args -（stdin））>] [--extract <path>]... [--jq [path]] [--extract-keys] [--args-list <json数组> [--preflight]]");
+        console.error("用法：omc call <tool> [--env <环境>] [--args '<json>' | --args - (stdin) | --args-file <配置根内路径（必须位于配置根内；数组批量请改用 --args-list；跨目录临时文件用 --args -（stdin））>] [--extract <path>]... [--jq [path]] [--extract-keys] [--args-list <json数组>（最多 200 条；超出请分批或用 omc script 读文件） [--preflight]]");
         console.error("输出预算：--max-output-bytes 默认 65536（只约束最终 stdout 信封；读面 diet ~2048 独立外置 detailArtifactId）；artifact get 内联上限 8192");
         console.error("写入：由环境 writable 决定（只读环境拒写）；生产环境的写必须在 args 里带 confirmProduction:true。");
         return emit(toolName && toolName !== "help" ? "error" : "ok", {}, toolName && toolName !== "help" ? CLI_EXIT_CODES.invalidInput : 0);
@@ -632,18 +632,20 @@ async function cmdCall(store, args) {
         // 原来只在末尾附一句「若问题在引号转义…」，容易被当成补充说明；这里把它
         // 提成主建议，并给出 PS 可粘贴的两条命令。
         const looksLikeShellSplitting = /Unexpected (token|end of JSON)|Expected property name|position \d+/i.test(detail);
-        const message = outOfRoot
-            ? `--args-file 越界：${detail}。可执行做法：把参数文件放到 ${configRoot} 之下（如 ${join(configRoot, "args.json")}），再用 --args-file 引用；不要把参数文件放在系统临时目录（配置根之外一律拒绝）`
-            : looksLikeShellSplitting
-                ? `--args 不像合法 JSON（${detail}）——这个形态通常是 shell 把内联 JSON 拆坏了（Windows PowerShell 的引号/转义规则），不是你写错了字段。改法二选一：① 把 JSON 写进 ${join(configRoot, "args.json")} 再用 --args-file；② \`omc call <tool> --args - \` 从 stdin 读（PS: \`'{"k":"v"}' | omc call <tool> --args -\`）。POSIX 文档里的单引号写法不能照抄到 PS`
-                : `--args 必须是合法 JSON：${detail}。若问题在引号转义（Windows PowerShell），改用 --args-file <配置根内的路径> 或 --args -（stdin）`;
+        const message = argsFile !== undefined && /must be a JSON object/.test(detail)
+            ? `${detail}；--args-file 只收单个 JSON 对象，批量数组请改用 --args-list（最多 200 条，可分批执行）`
+            : outOfRoot
+                ? `--args-file 越界：${detail}。可执行做法：把参数文件放到 ${configRoot} 之下（如 ${join(configRoot, "args.json")}），再用 --args-file 引用；不要把参数文件放在系统临时目录（配置根之外一律拒绝）`
+                : looksLikeShellSplitting
+                    ? `--args 不像合法 JSON（${detail}）——这个形态通常是 shell 把内联 JSON 拆坏了（Windows PowerShell 的引号/转义规则），不是你写错了字段。改法二选一：① 把 JSON 写进 ${join(configRoot, "args.json")} 再用 --args-file；② \`omc call <tool> --args - \` 从 stdin 读（PS: \`'{"k":"v"}' | omc call <tool> --args -\`）。POSIX 文档里的单引号写法不能照抄到 PS`
+                    : `--args 必须是合法 JSON：${detail}。若问题在引号转义（Windows PowerShell），改用 --args-file <配置根内的路径> 或 --args -（stdin）`;
         console.error(message);
         // The MACHINE envelope must carry the same actionable text: agents read
         // stdout, and the old envelope only repeated the English detail.
         // Keep the REJECTED path on stderr only: the machine envelope must not leak
         // host layout (ticket 103), so it carries the root plus the bare file name.
         const rejectedName = typeof argsFile === "string" ? basename(resolve(configRoot, argsFile)) : "";
-        writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: outOfRoot ? `--args-file 必须位于配置根内（配置根 ${configRoot}${rejectedName ? `；本次文件 ${rejectedName}` : ""}）。免落盘替代：--args - 从 stdin 读 JSON（echo '<json>' | omc call <tool> --args -），或把文件放进配置根后再引用；限制是为了防参数文件携带凭据被收进会话产物` : detail, retryable: false, ...(outOfRoot ? { configurationRoot: configRoot } : {}) }));
+        writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: outOfRoot ? `--args-file 必须位于配置根内（配置根 ${configRoot}${rejectedName ? `；本次文件 ${rejectedName}` : ""}）。免落盘替代：--args - 从 stdin 读 JSON（echo '<json>' | omc call <tool> --args -），或把文件放进配置根后再引用；限制是为了防参数文件携带凭据被收进会话产物` : argsFile !== undefined && /must be a JSON object/.test(detail) ? `${detail}；批量数组请改用 --args-list（最多 200 条，可分批执行）` : detail, retryable: false, ...(outOfRoot ? { configurationRoot: configRoot } : {}) }));
         return CLI_EXIT_CODES.invalidInput;
     }
     const registry = buildToolRegistry();
@@ -1624,6 +1626,7 @@ async function cmdGraphPull(environment, concurrency, transport) {
             identityFingerprint: data.meta.identityFingerprint,
             pulledAtIso: data.meta.pulledAtIso,
             scope: data.meta.scope,
+            coverage: { applicationCodes: [data.meta.applicationCode] },
             freshness: data.gaps.length === 0 ? "complete" : "partial",
             scanned: { models: data.scanned.models, rules: data.scanned.rules, datarules: data.scanned.datarules, views: data.scanned.views, ...(data.scanned.parseFailures > 0 ? { parseFailures: data.scanned.parseFailures } : {}) },
             edges: edgesByKind,
@@ -1670,7 +1673,10 @@ function cmdGraphReferences(kind, code, transport, requestedEnvironment) {
 function cmdGraphStatus(transport) {
     try {
         const status = readGraphStatus();
-        return emitResult({ status: "ok", index: status.index, dbBytes: status.dbBytes, gaps: status.gaps }, transport);
+        // r31a-F16：这里是**第四个**白名单式重建（前三次：compact() 投影、references
+        // 覆盖声明、mcp-graph 的 explore）。白名单每漏一个键就等于没修，且不会被任何
+        // 单测发现——所以改成展开，新增字段自动透传。
+        return emitResult({ status: "ok", ...status }, transport);
     }
     catch (error) {
         if (error instanceof GraphIndexAbsentError)
@@ -2159,7 +2165,7 @@ async function main() {
         commandExitCode = CLI_EXIT_CODES.ok;
     });
     command.command("doctor").option("--environment <environment>").option("--env <environment>").option("--service <serviceCode>", "可选：体检单个业务集成服务的鉴权参数形状（掩码/占位/全 0 检出，WARN 非致命）").action(async (options) => { commandExitCode = await cmdDoctor(new ConfigStore(defaultPaths()), options.environment ?? options.env, options.service); });
-    command.command("call <tool>").option("--env <environment>").option("--environment <environment>").option("--args <json>").option("--args-file <path>", "从文件读参数 JSON。**必须位于配置根内**（跨目录/系统临时文件会被拒）；免落盘用 `--args -`（stdin）").option("--args-list <json-array>", '同一工具跑 N 次（JSON 数组，每条一个 args 对象）；逐条执行、默认不中断，最后回 succeeded/failed 汇总。适合批量建字段等').option("--preflight", "与 --args-list 一起用：只跑参数校验 + 写前语义闸（零 wire、零写入），一次报全所有形状问题").option("--keys", "与 artifact get 的 --keys 同义（= --extract-keys）：列出本次结果 artifact 的顶层键与体积").addOption(new Option("--extract <path>", "在本次结果的 artifact 内取一个路径的值（可重复；省掉一次 artifact get）").argParser((value, previous = []) => [...previous, value]).default([])).addOption(new Option("--jq [path]", "同 --extract，并支持 [] 映射（如 items[].fields.planNo）；裸 --jq 列出结果的顶层键").argParser((value, previous = []) => [...previous, value]).default([])).option("--extract-keys", "列出本次结果 artifact 的顶层键与体积（省掉一次 artifact get --keys）").option("--max-output-bytes <bytes>", "最终 stdout 信封预算；默认 65536（投影/--jq 之后再判）；读面 diet(~2048) 独立外置 detailArtifactId，抬高本参数不会把已 diet 的大表重新内联；artifact get 内联上限 8192").option("--request-id <requestId>").option("--timeout-ms <milliseconds>").option("--wait <milliseconds>").option("--dry-run").addHelpText("after", `\n${onboardingHelp()}\n`).action(async (tool, options) => {
+    command.command("call <tool>").option("--env <environment>", "环境名；项目白名单按当前 cwd 解析，须在含 .omc-env 的目录内运行").option("--environment <environment>").option("--args <json>").option("--args-file <path>", "从文件读参数 JSON。**必须位于配置根内**（数组批量请改用 --args-list；跨目录/系统临时文件会被拒）；免落盘用 `--args -`（stdin）").option("--args-list <json-array>", '同一工具跑 N 次（JSON 数组，每条一个 args 对象，最多 200 条）；超过上限请分批，或用 omc script 读文件。逐条执行、默认不中断，最后回 succeeded/failed 汇总。适合批量建字段等').option("--preflight", "与 --args-list 一起用：只跑参数校验 + 写前语义闸（零 wire、零写入），一次报全所有形状问题").option("--keys", "与 artifact get 的 --keys 同义（= --extract-keys）：列出本次结果 artifact 的顶层键与体积").addOption(new Option("--extract <path>", "在本次结果的 artifact 内取一个路径的值（可重复；省掉一次 artifact get）").argParser((value, previous = []) => [...previous, value]).default([])).addOption(new Option("--jq [path]", "同 --extract，并支持 [] 映射（如 items[].fields.planNo）；裸 --jq 列出结果的顶层键").argParser((value, previous = []) => [...previous, value]).default([])).option("--extract-keys", "列出本次结果 artifact 的顶层键与体积（省掉一次 artifact get --keys）").option("--max-output-bytes <bytes>", "最终 stdout 信封预算；默认 65536（投影/--jq 之后再判）；读面 diet(~2048) 独立外置 detailArtifactId，抬高本参数不会把已 diet 的大表重新内联；artifact get 内联上限 8192").option("--request-id <requestId>").option("--timeout-ms <milliseconds>").option("--wait <milliseconds>").option("--dry-run").addHelpText("after", `\n${onboardingHelp()}\n`).action(async (tool, options) => {
         const rest = [tool, ...(options.env ? ["--env", options.env] : []), ...(options.environment ? ["--environment", options.environment] : []), ...(options.args !== undefined ? ["--args", options.args] : []), ...(options.argsFile !== undefined ? ["--args-file", options.argsFile] : []), ...(options.argsList !== undefined ? ["--args-list", options.argsList] : []), ...(options.preflight ? ["--preflight"] : []), ...(Array.isArray(options.extract) ? options.extract.flatMap((path) => ["--extract", path]) : []), ...(Array.isArray(options.jq) ? options.jq.flatMap((path) => path === true ? ["--jq"] : ["--jq", path]) : []), ...(options.extractKeys ? ["--extract-keys"] : []),
             ...(options.keys ? ["--keys"] : []), ...(options.maxOutputBytes !== undefined ? ["--max-output-bytes", options.maxOutputBytes] : []), ...(options.requestId ? ["--request-id", options.requestId] : []), ...(options.timeoutMs !== undefined ? ["--timeout-ms", options.timeoutMs] : []), ...(options.wait !== undefined ? ["--wait", options.wait] : []), ...(options.dryRun ? ["--dry-run"] : [])];
         commandExitCode = await cmdCall(new ConfigStore(defaultPaths()), rest);
@@ -2405,15 +2411,21 @@ async function main() {
             script: { lines: lines.length, skipped: parsed.skipped.length },
         }, 0);
     });
-    const rollbackCommand = command.command("rollback").description("配置回滚（git-revert 语义）：list 列写时间线 / plan 预览恢复（diff+后续写覆盖警告）/ apply 执行恢复——恢复走完整写闸门并记 journal（回滚可再回滚）。接入全部配置写面（workflow/规则/数据规则/视图/表单草稿/在线JS/字典/字段/模型/应用/报表）；publish 类生命周期推进不可逆（plan 会说明）；journal 与 before 快照为本机边界（不跨机器）");
+    const rollbackCommand = command.command("rollback").description("配置回滚（git-revert 语义）：list 列写时间线 / plan 预览恢复（diff+后续写覆盖警告）/ apply 执行恢复——恢复走完整写闸门并记 journal（回滚可再回滚）。apply 支持 --wait <毫秒> 有界排队；list/plan 为只读面不接写锁。接入全部配置写面（workflow/规则/数据规则/视图/表单草稿/在线JS/字典/字段/模型/应用/报表）；publish 类生命周期推进不可逆（plan 会说明）；journal 与 before 快照为本机边界（不跨机器）");
     rollbackCommand.command("list").option("--env <environment>").option("--environment <environment>").option("--target <substr>").option("--tool <name>").option("--limit <n>").action(async (options) => {
         commandExitCode = await withTransport(options, "rollback list", (transport) => cmdRollbackList({ environment: options.env ?? options.environment, target: options.target, tool: options.tool, limit: options.limit }, transport));
     });
     rollbackCommand.command("plan <ref>").option("--env <environment>").option("--environment <environment>").action(async (ref, options) => {
         commandExitCode = await withTransport(options, "rollback plan", (transport) => cmdRollbackPlan(ref, { environment: options.env ?? options.environment }, transport));
     });
-    rollbackCommand.command("apply <ref>").option("--env <environment>").option("--environment <environment>").option("--confirm-production").action(async (ref, options) => {
-        commandExitCode = await withTransport(options, "rollback apply", (transport) => cmdRollbackApply(ref, { environment: options.env ?? options.environment, confirmProduction: options.confirmProduction === true }, transport));
+    rollbackCommand.command("apply <ref>").option("--env <environment>").option("--environment <environment>").option("--confirm-production").option("--wait <milliseconds>", "写锁冲突时的有界排队毫秒数（默认 0=立刻拒绝）").action(async (ref, options) => {
+        const waitMs = options.wait === undefined ? 0 : Number(options.wait);
+        if (!Number.isSafeInteger(waitMs) || waitMs < 0 || waitMs > 600_000) {
+            console.error("--wait must be an integer number of milliseconds from 0 to 600000");
+            commandExitCode = CLI_EXIT_CODES.invalidInput;
+            return;
+        }
+        commandExitCode = await withTransport(options, "rollback apply", (transport) => cmdRollbackApply(ref, { environment: options.env ?? options.environment, confirmProduction: options.confirmProduction === true, waitMs }, transport));
     });
     const artifactCommand = command.command("artifact");
     artifactCommand.command("prune").option("--older-than <duration>", "删除超过该时长的读回产物（如 7d/12h/30m）").option("--max-bytes <bytes>", "产物目录预算；超出时按最旧优先删除").option("--json").action((options) => {

package/dist/compute.js

@@ -189,7 +189,7 @@ export async function cmdCompute(args) {
     let result;
     let exitCode;
     try {
-        ({ result, exitCode } = await runToolCall("datarule.create", { args: createArgs, requestId: request, environment }));
+        ({ result, exitCode } = await runToolCall("datarule.create", { args: createArgs, requestId: request, environment, print: () => undefined }));
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);

package/dist/field-change.js

@@ -59,7 +59,12 @@ export function prepareFieldChange(input) {
     assertFormConditions(raw);
     const options = ensureRelationDisplayFieldOptions(propertyType, raw);
     const displayCode = relationDisplayFieldCode(propertyType, options);
-    return { propertyType, isChildTable, options, ...(displayCode ? { displayCode } : {}) };
+    const optionRelationTarget = typeof options.schemaCode === "string" ? options.schemaCode.trim() : "";
+    const normalizedRelation = (propertyType === FIELD_PROPERTY_TYPES.WORK_SHEET || propertyType === FIELD_PROPERTY_TYPES.MULT_WORK_SHEET) &&
+        optionRelationTarget.length > 0 && !(typeof input.relativeCode === "string" && input.relativeCode.trim().length > 0)
+        ? { relationTarget: "options.schemaCode→relativeCode" }
+        : undefined;
+    return { propertyType, isChildTable, options, ...(displayCode ? { displayCode } : {}), ...(normalizedRelation ? { normalized: normalizedRelation } : {}) };
 }
 /** The single platform wire body for a field create. */
 export function fieldChangeWireBody(input, prepared) {
@@ -74,6 +79,7 @@ export function fieldChangeWireBody(input, prepared) {
             ? { defaultValue: null, subSchema: prepared.subSchema }
             : { defaultValue: "", ...(prepared.displayCode ? { relativePropertyCode: prepared.displayCode } : {}), options: JSON.stringify(prepared.options) }),
         ...(input.relativeCode ? { relativeCode: input.relativeCode } : {}),
+        ...(!input.relativeCode && prepared.normalized ? { relativeCode: String(prepared.options.schemaCode) } : {}),
     };
 }
 /**

package/dist/field-families.js

@@ -64,7 +64,7 @@ export function relationDisplayFieldCode(type, options) {
     const displayField = options.displayField;
     return typeof displayField === "string" && displayField.trim() ? displayField.trim() : undefined;
 }
-export const choicesArg = z.array(z.string()).optional().describe('allowed values for text-choice families (RADIO / CHECKBOX / DROPDOWN_BOX / DROPDOWN_MULTI_BOX), e.g. ["正常","异常","待复检"]。注意：SELECTION(5) 是人员/部门混合选择器，不接受 choices，文本单选请用 DROPDOWN_BOX/RADIO');
+export const choicesArg = z.array(z.string()).optional().describe('allowed values for text-choice families, e.g. ["正常","异常","待复检"]。注意：SELECTION(5) 是人员/部门混合选择器，不接受 choices；文本单选族随版本不同，拒绝信息会列当前 live 集');
 function jsonString() {
     return z.string().refine((value) => {
         if (value === "")
@@ -270,6 +270,13 @@ export const FIELD_TYPE_SYNONYMS = Object.freeze({
 });
 /** A "did you mean" hint for a family name that is actually a Chinese concept. */
 export function fieldTypeHint(type) {
+    const commonAliases = {
+        SINGLE_TEXT: "SHORT_TEXT",
+        NUMERIC: "NUMERICAL",
+    };
+    const alias = commonAliases[type.toUpperCase()];
+    if (alias)
+        return `「${type}」不是族名；你要找的可能是 ${alias}`;
     for (const [concept, family] of Object.entries(FIELD_TYPE_SYNONYMS))
         if (type.includes(concept) || concept.includes(type))
             return `「${type}」看起来是概念名而非族名；最接近的是 ${family}`;
@@ -281,6 +288,63 @@ export function fieldTypeHint(type) {
         return `「${type}」不是族名；你要找的可能是 ${closest}`;
     return undefined;
 }
+/**
+ * Validate a model-relation target before bizproperty/create.  The platform
+ * accepts the row and only fails at model publish (300010), which leaves the
+ * whole model poisoned.  Callers supply the already-read model list so this
+ * helper remains usable by both field entry points without owning transport.
+ */
+export function assertRelationTargetExists(args, candidates) {
+    const raw = args.propertyType;
+    const type = typeof raw === "number" && Number.isInteger(raw)
+        ? raw
+        : typeof raw === "string" && raw in FIELD_PROPERTY_TYPES ? FIELD_PROPERTY_TYPES[raw] : undefined;
+    if (type !== FIELD_PROPERTY_TYPES.WORK_SHEET && type !== FIELD_PROPERTY_TYPES.MULT_WORK_SHEET)
+        return;
+    const optionsCode = typeof args.options?.schemaCode === "string" ? args.options.schemaCode.trim() : "";
+    const relativeCode = typeof args.relativeCode === "string" ? args.relativeCode.trim() : "";
+    const target = optionsCode || relativeCode;
+    // Some offline/fake transports do not expose a model-list face.  An empty
+    // candidate set is therefore "unknown", not proof of absence; live model
+    // lists are non-empty and get the strict pre-write gate.
+    if (!target || candidates.length === 0 || candidates.includes(target))
+        return;
+    const visibleCandidates = [...candidates].sort().slice(0, 5);
+    throw new ToolRefusalError({
+        status: "refused",
+        blocker: "relation-target-not-found",
+        relationTarget: target,
+        candidates: visibleCandidates,
+        message: `关联字段 ${String(args.code ?? "(未命名)")} 的关联目标 ${target} 不存在；已在写入前拒绝。可选模型：${visibleCandidates.length > 0 ? visibleCandidates.join("、") : "（无）"}`,
+    });
+}
+/** Construct the field-specific explanation when an older platform leaks 300010. */
+export function relationPublishFailureMessage(fields, candidates) {
+    for (const field of fields) {
+        let options;
+        if (field.options && typeof field.options === "object" && !Array.isArray(field.options))
+            options = field.options;
+        else if (typeof field.options === "string") {
+            try {
+                const parsed = JSON.parse(field.options);
+                if (parsed && typeof parsed === "object" && !Array.isArray(parsed))
+                    options = parsed;
+            }
+            catch { /* malformed options will be reported by the platform */ }
+        }
+        const raw = field.propertyType ?? field.type;
+        const type = typeof raw === "number" ? raw : typeof raw === "string" && raw in FIELD_PROPERTY_TYPES ? FIELD_PROPERTY_TYPES[raw] : undefined;
+        if (type !== FIELD_PROPERTY_TYPES.WORK_SHEET && type !== FIELD_PROPERTY_TYPES.MULT_WORK_SHEET)
+            continue;
+        const target = typeof options?.schemaCode === "string" ? options.schemaCode.trim() : typeof field.relativeCode === "string" ? field.relativeCode.trim() : "";
+        if (typeof options?.schemaCode === "string" && options.schemaCode.trim() && (!field.relativeCode || String(field.relativeCode).trim() === "")) {
+            return `字段 ${String(field.code ?? "(未知)")} 的关联目标 ${options.schemaCode} 仅写在 options.schemaCode；发布面不解析该位置（平台原始 errcode 300010「数据模型编码不能为空！」）。请重建/归一化为顶层 relativeCode=${options.schemaCode}`;
+        }
+        if (target && candidates.length > 0 && !candidates.includes(target))
+            return `字段 ${String(field.code ?? "(未知)")} 的关联目标 ${target} 不存在（平台原始 errcode 300010「数据模型编码不能为空！」）；可选模型：${candidates.slice(0, 5).join("、")}`;
+    }
+    return undefined;
+}
 /** Case/underscore-insensitive closest match over the family list (shared helper, see closest-match.ts). */
 function closestFamilyName(type) {
     return closestMatch(type, Object.keys(FIELD_PROPERTY_TYPES));
@@ -830,6 +894,43 @@ export function assertFieldFamilyAllowed(args) {
     // works if the preflight gate is the same gate the write uses.
     assertNumericalScale(normalized, options);
 }
+/**
+ * Reject the platform's accept-then-drop org-selector+choices shapes before write.
+ *
+ * 三个组织选择器族同语义（SELECTION 混合 / STAFF_SELECTOR 人员 / DEPARTMENT_SELECTOR
+ * 部门）：choices 都会被平台静默丢弃，字段建成后写任何 choices 值都 50000 无明细。
+ * r37（2026-11-07）之前 SELECTION 走的是 execute 路径的 capability-out-of-coverage
+ * （citation.reason 才说不接受 choices），STAFF/DEPARTMENT 走 live 集拒绝——同一语义
+ * 三个族两种 blocker。统一收敛到这里：同语义 = 同 blocker（含 options.choices 形态，
+ * 那是 F14 真机撞出来的：字段落库、field.list 还回显 choices、运行面才炸）。
+ */
+const ORG_SELECTOR_TYPES = new Set([
+    FIELD_PROPERTY_TYPES.SELECTION,
+    FIELD_PROPERTY_TYPES.STAFF_SELECTOR,
+    FIELD_PROPERTY_TYPES.DEPARTMENT_SELECTOR,
+]);
+export function assertSelectionChoicesAllowed(args) {
+    const options = args.options;
+    const hasTopLevelChoices = args.choices !== undefined;
+    const hasOptionsChoices = options !== null && typeof options === "object" && !Array.isArray(options)
+        && Object.prototype.hasOwnProperty.call(options, "choices");
+    if (!hasTopLevelChoices && !hasOptionsChoices)
+        return;
+    const raw = args.propertyType;
+    const type = typeof raw === "number" && Number.isInteger(raw)
+        ? raw
+        : typeof raw === "string" && raw in FIELD_PROPERTY_TYPES
+            ? FIELD_PROPERTY_TYPES[raw]
+            : undefined;
+    if (type === undefined || !ORG_SELECTOR_TYPES.has(type))
+        return;
+    const family = typeof raw === "string" ? raw : String(type);
+    throw new ToolRefusalError({
+        status: "refused",
+        blocker: "field-choices-family-mismatch",
+        message: `${family} 是组织选择器（人员/部门），choices 会被平台静默丢弃；字段虽会建成，但写入任何 choices 值都会返回 50000 且无明细。选人/部门请使用不带 choices 的本族字段（值走引用）；文本单选族随版本不同，请先看 omc describe field.create --param propertyType，拒绝信息会列当前 live 集。`,
+    });
+}
 function refuseFieldOptions(reason, message) {
     const citation = {
         code: "capability-out-of-coverage",