@stalfh233/omc-cli 0.6.16 → 0.6.18

package/dist/lanes/model.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { ENDPOINTS } from "../endpoints.js";
-import { assertFieldFamilyAllowed, choicesArg, fieldOptionsArg, nameI18nJson, propertyTypeArg, relationTargetOf, relativeCodeArg, SYSTEM_FIELD_CODES, subFieldArg, } from "../field-families.js";
+import { assertFieldFamilyAllowed, assertSelectionChoicesAllowed, choicesArg, fieldOptionsArg, nameI18nJson, propertyTypeArg, relationTargetOf, relativeCodeArg, SYSTEM_FIELD_CODES, subFieldArg, assertRelationTargetExists, } from "../field-families.js";
+import { modelSchemaCodes } from "./field.js";
 import { fieldChangeWireBody, prepareFieldChange, sameFieldChange } from "../field-change.js";
 import { executeFormDraftWrite, executeFormPublishWrite } from "../form-support.js";
 import { mapBounded } from "../support.js";
@@ -9,7 +10,8 @@ import { writeSummary } from "../human-summary.js";
 import { capabilityArg, environmentArg } from "../args.js";
 import { governedRead, withoutReadbackCache } from "../read.js";
 import { parseToolInput } from "../tool-types.js";
-import { applicationResolutionOf, applicationScopeHint, applicationScopeNotice, flattenTreeRows, resolveApplicationCode, resolveApplicationScope } from "../support.js";
+import { applicationResolutionOf, applicationScopeHint, applicationScopeNotice, flattenTreeRows, resolveApplicationCode } from "../support.js";
+import { resolveValidatedApplicationScope } from "./app.js";
 import { writeTool } from "../write.js";
 import { registerPackageTool } from "../package-tool.js";
 import { defineTool, ToolInputError, ToolRefusalError } from "../tool-types.js";
@@ -251,28 +253,11 @@ export function registerModelLane(tools) {
             capability: capabilityArg,
         },
         handler: async (ctx, args, self) => governedRead(ctx, self, args, async (session) => {
-            const scope = await resolveApplicationScope(session, args.applicationCode);
+            const scope = await resolveValidatedApplicationScope(session, args.applicationCode);
             const applicationCode = scope.code;
             // r29f F6：显式/配置的 applicationCode 若不在 app.list 里，旧路径会把拼写错误
             // 伪装成「该应用没有模型」。先核对租户应用表，未命中即拒（与 discover 的
             // applicationResolution.status 同构）。
-            const availableApps = wireRows((await wireCall(session, { path: ENDPOINTS.applicationList, query: {} })).data)
-                .map((row) => String(row.appCode ?? row.code ?? ""))
-                .filter((code) => code !== "");
-            if (availableApps.length > 0 && !availableApps.includes(applicationCode)) {
-                throw new ToolRefusalError({
-                    status: "refused",
-                    blocker: "app-not-found",
-                    applicationCode,
-                    applicationResolution: {
-                        status: "unresolved",
-                        source: scope.source,
-                        requested: scope.requested ?? applicationCode,
-                        available: availableApps.slice(0, 40),
-                    },
-                    message: `应用「${applicationCode}」不在租户 app.list 里（不是「该应用没有模型」）。可用：${availableApps.slice(0, 12).join("、")}${availableApps.length > 12 ? " 等" : ""}；先 app.list 取正确 applicationCode。`,
-                });
-            }
             const tree = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
             const all = tree
                 .filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code)
@@ -361,14 +346,15 @@ export function registerModelLane(tools) {
                 // 节点本来就带 name，与六面同一批并发读，零额外顺序往返。
                 const treeFace = async () => {
                     try {
-                        return { node: (await resolveModelTreeNode(session, schemaCode)).node };
+                        const resolved = await resolveModelTreeNode(session, schemaCode);
+                        return { node: resolved.node, applicationCode: resolved.applicationCode };
                     }
                     catch {
                         return undefined;
                     }
                 };
                 const [fieldFace, formFace, listviewFace, ruleFace, dataruleFace, draftFace, treeRead] = await mapBounded([
-                    () => face("field.list", { schemaCode, published: true, ...(all ? { all: true } : {}) }, faceErrcodes),
+                    () => face("field.list", { schemaCode, published: true, ...(all ? { all: true, full: true } : {}) }, faceErrcodes),
                     () => face("form.get", { schemaCode }),
                     () => face("listview.get", { schemaCode }),
                     () => face("rule.list", { schemaCode }),
@@ -378,10 +364,21 @@ export function registerModelLane(tools) {
                 ], 7, (task) => task());
                 const treeNode = treeRead?.node;
                 const modelName = typeof treeNode?.name === "string" && treeNode.name ? treeNode.name : typeof treeNode?.text === "string" && treeNode.text ? treeNode.text : undefined;
-                const fieldRows = Array.isArray(fieldFace?.fields) ? fieldFace.fields : [];
+                let fieldRows = Array.isArray(fieldFace?.fields) ? fieldFace.fields : [];
+                if (all && typeof fieldFace?.detailFile === "string" && !fieldRows.some((field) => field.options !== undefined)) {
+                    try {
+                        const { readFileSync } = await import("node:fs");
+                        const artifact = JSON.parse(readFileSync(fieldFace.detailFile, "utf8"));
+                        if (Array.isArray(artifact.fields))
+                            fieldRows = artifact.fields;
+                    }
+                    catch {
+                        // Keep the compact field inventory if the nested artifact is unavailable.
+                    }
+                }
                 const fields = fieldRows
                     .filter((field) => all || !SYSTEM_FIELD_CODES.has(String(field.code)))
-                    .map((field) => ({ code: field.code, type: field.type, ...(field.typeName !== undefined ? { typeName: field.typeName } : {}), name: field.name, ...(field.conditions ? { conditions: field.conditions } : {}) }));
+                    .map((field) => ({ code: field.code, type: field.type, ...(field.typeName !== undefined ? { typeName: field.typeName } : {}), name: field.name, ...(field.conditions ? { conditions: field.conditions } : {}), ...(all && field.options !== undefined ? { options: field.options } : {}) }));
                 const form = formFace && formFace.present !== undefined
                     ? { present: formFace.present === true, published: formFace.published === true, controlCount: Array.isArray(formFace.draftControlCodes) ? formFace.draftControlCodes.length : 0 }
                     : undefined;
@@ -454,6 +451,7 @@ export function registerModelLane(tools) {
                 return {
                     code: schemaCode,
                     schemaCode,
+                    ...(typeof treeRead?.applicationCode === "string" && treeRead.applicationCode ? { applicationCode: treeRead.applicationCode } : {}),
                     ...(modelName !== undefined ? { name: modelName } : {}),
                     ...(modelPresent !== undefined ? { modelPresent } : {}),
                     ...(modelPresent === false
@@ -488,10 +486,14 @@ export function registerModelLane(tools) {
                     return result;
                 return {
                     schemaCode: result.schemaCode,
+                    ...(result.applicationCode !== undefined ? { applicationCode: result.applicationCode } : {}),
                     // r35a-F3：compact 投影必须保留 code（model.list 有 code，inspect 此前
                     // 只剩 schemaCode，`--jq '[].code'` 必 pathMiss 白跑一轮）。
                     ...(result.code !== undefined ? { code: result.code } : {}),
                     fieldCodes: (result.fields ?? []).map((field) => field.code),
+                    ...(Array.isArray(result.fields) && result.fields.some((field) => field.options !== undefined)
+                        ? { fields: result.fields }
+                        : {}),
                     form: result.form,
                     listview: result.listview ? { code: result.listview.code, columnCount: result.listview.columnCount } : undefined,
                     ruleCodes: (result.rules ?? []).map((rule) => rule.code),
@@ -533,15 +535,17 @@ export function registerModelLane(tools) {
         // r29a F6：dry-run 必须做与实跑同样的 duplicate 探测，否则会假绿灯。
         dryRunPayload: modelCreateDryRun,
         execute: async (session, args) => {
-            const applicationCode = await resolveApplicationCode(session, args.applicationCode);
+            const applicationScope = await resolveValidatedApplicationScope(session, args.applicationCode);
+            const applicationCode = applicationScope.code;
             const existing = await resolveModelTreeNode(session, args.code, args.applicationCode);
             if (existing.node) {
                 throw new ToolRefusalError({
                     status: "refused",
                     blocker: "model-create-duplicate",
                     schemaCode: args.code,
-                    applicationCode: existing.applicationCode,
-                    message: `模型 ${args.code} 已存在于应用 ${existing.applicationCode} 的应用树中；create 拒绝重复 POST，不能把既有模型证明为本次创建结果`,
+                    requestedApplicationCode: applicationCode,
+                    conflictInApplicationCode: existing.applicationCode,
+                    message: `模型 code 在租户内全局唯一，跨应用同名即冲突：模型 ${args.code} 已存在于应用 ${existing.applicationCode}；create 拒绝重复 POST`,
                 });
             }
             // A tree-miss does NOT prove absence: an orphan mount (row exists in
@@ -1305,6 +1309,7 @@ export function registerModelLane(tools) {
                 .optional()
                 .describe("也可在本调用内配置默认列表视图（内部走 listview.configure）；一次到「模型+字段+表单+列表」"),
             applicationCode: z.string().optional(),
+            createOnly: z.boolean().optional().describe("true=模型已存在时拒绝，不执行字段合并"),
         },
         // CFG-naming/CFG-02 parity: refuse an invalid code before a plan
         // is minted (the executor's model.create/field.create would otherwise
@@ -1317,6 +1322,8 @@ export function registerModelLane(tools) {
             ];
             if (violations.length > 0)
                 throw new ToolRefusalError({ status: "refused", blocker: "business-code-invalid", message: "code 未过出门前校验；按 validation 修正（长度/风格/保留字）", validation: violations });
+            for (const entry of entries)
+                assertSelectionChoicesAllowed(entry);
             for (const entry of entries)
                 prepareFieldChange(fieldChangeInputOf(args.code, entry));
         },
@@ -1356,6 +1363,12 @@ export function registerModelLane(tools) {
         execute: async (session, args) => {
             const results = [];
             const entries = fieldEntriesOf(args);
+            // r37 跨路接线（同扇门）：field.create 单独调用已对关联字段目标写前拒
+            // （relation-target-not-found），configure_model 的字段包不能是例外——
+            // 否则混合包仍会落到裸 300010 把整个模型毒住。
+            const relationCandidates = await modelSchemaCodes(session);
+            for (const entry of entries)
+                assertRelationTargetExists(entry, relationCandidates);
             const stop = (index, tool, error) => {
                 const envelope = error instanceof ToolRefusalError
                     ? Object.fromEntries(Object.entries(error.payload).filter(([key]) => key !== "status"))
@@ -1378,7 +1391,8 @@ export function registerModelLane(tools) {
                     return stop(index, tool, error);
                 }
             };
-            const applicationCode = await resolveApplicationCode(session, args.applicationCode);
+            const applicationScope = await resolveValidatedApplicationScope(session, args.applicationCode);
+            const applicationCode = applicationScope.code;
             const tree = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
             const folder = args.folderId ? tree.find((row) => row.id === args.folderId) : tree.find((row) => row.type !== "BizModel" && typeof row.id === "string");
             if (!folder?.id)
@@ -1389,6 +1403,10 @@ export function registerModelLane(tools) {
             // or form step. The application tree is already in hand, so an existing
             // model is detected with no extra call: skip the create and continue.
             const existingModel = tree.find((row) => row.type === "BizModel" && row.code === args.code);
+            if (existingModel && args.createOnly === true) {
+                throw new ToolRefusalError({ status: "refused", blocker: "model-already-exists", requestedApplicationCode: applicationCode, conflictInApplicationCode: applicationCode, schemaCode: args.code, message: `模型 code 在租户内全局唯一，跨应用同名即冲突：${args.code} 已存在；createOnly=true 拒绝合并` });
+            }
+            const created = !existingModel;
             let failed;
             if (existingModel) {
                 results.push({ step: "model.create", skipped: "model-exists", folderId: String(folder.id), readback: { present: true } });
@@ -1405,6 +1423,7 @@ export function registerModelLane(tools) {
                     return failed;
             }
             const existingFields = new Map();
+            const mergedFieldCodes = [];
             for (const isPublish of ["false", "true"]) {
                 for (const row of wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.code, isPublish } })).data))
                     existingFields.set(String(row.code ?? row.propertyCode ?? ""), row);
@@ -1415,8 +1434,10 @@ export function registerModelLane(tools) {
                 failed = await run(results.length, "field.create", async () => {
                     const existing = existingFields.get(entry.code);
                     if (existing !== undefined) {
-                        if (sameFieldChange(existing, input))
+                        if (sameFieldChange(existing, input)) {
+                            mergedFieldCodes.push(entry.code);
                             return { step: "field.create", skipped: "field-exists", code: entry.code, readback: { present: true } };
+                        }
                         throw new ToolRefusalError({
                             status: "refused",
                             blocker: "field-conflict",
@@ -1430,6 +1451,7 @@ export function registerModelLane(tools) {
                     const after = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode: args.code, isPublish: "false" } })).data);
                     if (!after.some((row) => String(row.code ?? row.propertyCode) === entry.code))
                         throw new ToolRefusalError({ status: "refused", blocker: "field-create-readback-failed", message: `field.create 后权威草稿字段未读到 ${entry.code}` });
+                    mergedFieldCodes.push(entry.code);
                     return { step: "field.create", errcode: performed.errcode, code: entry.code, readback: { present: true } };
                 });
                 if (failed)
@@ -1482,6 +1504,8 @@ export function registerModelLane(tools) {
             const rows = wireRows(published.data);
             const publishedCodes = rows.map((row) => String(row.code ?? row.propertyCode ?? ""));
             const readback = {
+                created,
+                ...(created ? {} : { mergedChanges: { fields: mergedFieldCodes, nameIgnored: args.name !== String(existingModel?.name ?? args.name) } }),
                 publishedCodes,
                 ...(entries.length === 1
                     ? { publishedFieldPresent: publishedCodes.includes(entries[0].code) }
@@ -1513,8 +1537,10 @@ function fieldEntriesOf(args) {
     if (Array.isArray(args.fields) && args.fields.length > 0) {
         if (args.fieldCode !== undefined || args.fieldName !== undefined || args.propertyType !== undefined)
             throw new ToolRefusalError({ status: "refused", blocker: "configure-model-fields-exclusive", message: "fields[] 与单字段参数（fieldCode/fieldName/propertyType）互斥；多字段用 fields[]，单字段用旧三元组" });
-        for (const entry of args.fields)
+        for (const entry of args.fields) {
+            assertSelectionChoicesAllowed(entry);
             assertFieldFamilyAllowed({ ...entry });
+        }
         return args.fields.map((entry) => ({ code: entry.code, name: entry.name, propertyType: entry.propertyType, ...withLegacy(entry) }));
     }
     if (typeof args.fieldCode !== "string" || typeof args.fieldName !== "string" || typeof args.propertyType !== "string")
@@ -1524,6 +1550,7 @@ function fieldEntriesOf(args) {
             message: "configure_model 需要 fields[]（多字段）或 fieldCode+fieldName+propertyType（单字段）",
         });
     const legacy = { code: args.fieldCode, name: args.fieldName, propertyType: args.propertyType, ...withLegacy(args) };
+    assertSelectionChoicesAllowed(legacy);
     assertFieldFamilyAllowed(legacy);
     return [legacy];
 }

package/dist/lanes/online-js-contract.js

@@ -78,7 +78,7 @@ export const ONLINE_JS_LANE_CONTRACT = Object.freeze({
         }),
         "onlinejs.compose": Object.freeze({
             scope: ONLINE_JS_SCOPE,
-            description: `**本调用 = 改 JS + 立即发布整张表单（等同 form.publish，含布局与按钮）**：它把 source 写进 customScript，然后无条件下一次 bizsheet/publish 把整份草稿提拔成发布面（内部 force:true，即使表单此前已发布也会重推）。所以改完 JS **不需要**再单独 form.publish；反过来，form.publish 只提拔布局草稿、**不碰**在线 JS。要只改不发布必须显式传 publish:false。Compose the Online JS source as the customScript element into the form's draftHtmlJson layout array (then publish, promoting it verbatim to publishedHtmlJson). Core contract: preserve the platform template and only extend customScript.innerHTML — the six-element skeleton includes the ${PLATFORM_LIFECYCLE_WRAPPER_MARKER} lifecycle wrapper; the style, toolbar, template, beforeCustomScript, customScript, and afterCustomScript elements are kept or synthesized with platform defaults, while every layout/control element is preserved. customScript is rebuilt canonically as {tagName:'script', id:'customScript', innerHTML:<platform lifecycle wrapper containing source>, attrs:[]} because the designer requires an ARRAY attrs (e.attrs.some) and tagName, else the Online JS editor fails with t.some is not a function. Drives bizsheet/update + bizsheet/publish; publishedHtmlJson is read back verbatim and SHA-256-fingerprinted so the caller can verify byte equality. Read the EXISTING script first with onlinejs.get (decide replace vs INCREMENTAL from what is actually stored). Never overwrites the layout with a standalone script object or a partial [customScript]-only array (regression for issue 11's root cause). summary:true answers "did it land?" without any HTML/JS body (sha + byte counts + draftPublishedInSync); the default readback dedupes the composed draft and the script when they equal the published face, so the same script is never returned three times.`,
+            description: `**本调用 = 改 JS + 立即发布整张表单**（force:true 重推，不需要再 form.publish——它只提拔布局、不碰 JS）。publish:false 只写草稿；remove:true 或 source:"" 移除脚本。Compose the Online JS source as the customScript element into the form's draftHtmlJson layout array (then publish, promoting it verbatim to publishedHtmlJson). Core contract: preserve the platform template and only extend customScript.innerHTML — the six-element skeleton includes the ${PLATFORM_LIFECYCLE_WRAPPER_MARKER} lifecycle wrapper; the style, toolbar, template, beforeCustomScript, customScript, and afterCustomScript elements are kept or synthesized with platform defaults, while every layout/control element is preserved. customScript is rebuilt canonically as {tagName:'script', id:'customScript', innerHTML:<platform lifecycle wrapper containing source>, attrs:[]} because the designer requires an ARRAY attrs (e.attrs.some) and tagName, else the Online JS editor fails with t.some is not a function. Drives bizsheet/update + bizsheet/publish; publishedHtmlJson is read back verbatim and SHA-256-fingerprinted so the caller can verify byte equality. Read the EXISTING script first with onlinejs.get (decide replace vs INCREMENTAL from what is actually stored). Never overwrites the layout with a standalone script object or a partial [customScript]-only array (regression for issue 11's root cause). summary:true answers "did it land?" without any HTML/JS body (sha + byte counts + draftPublishedInSync); the default readback dedupes the composed draft and the script when they equal the published face, so the same script is never returned three times.`,
         }),
     }),
 });

package/dist/lanes/online-js.js

@@ -77,7 +77,7 @@ export function registerOnlineJsLane(tools) {
             return {
                 schemaCode: args.schemaCode,
                 sheetCode,
-                present: true,
+                present: draft.present || published.present,
                 sheetPublished: sheet.published === true,
                 draft: { ...draft, ...(draft.script === null ? { note: "草稿无 customScript 脚本（尚未 compose 或被清空）" } : {}) },
                 published: { ...published, ...(published.script === null ? { note: "发布面无 customScript 脚本" } : {}) },
@@ -107,13 +107,19 @@ export function registerOnlineJsLane(tools) {
             // 的 sheetCode 都是 optional（省略 = schemaCode）。此前只有这里必填，
             // dry-run 与真写都拒——同一个 lane 两套约定，调用方要白撞一轮才知道。
             sheetCode: z.string().min(1).optional().describe("表单槽位码；省略时默认 = schemaCode（与 form.draft/form.publish 同口径）"),
-            source: z.string().min(1).describe("在线 JS 代码。默认 INCREMENTAL：并入平台 (function(form){…}) 模板的既有脚本，模板与既有注册全部保留；配 replace:true 才是整段替换。脚本不得使用 export/import；事件名必须是平台事件（onLoad/onRendered/onValidate/onPreAction/onCustomAction/onActionDone/onPrintFormDataHandle/onPrintWorkflowLogDataHandle）"),
+            source: z.string().optional().describe("在线 JS 代码。默认 INCREMENTAL：并入平台 (function(form){…}) 模板的既有脚本，模板与既有注册全部保留；配 replace:true 才是整段替换。脚本不得使用 export/import；事件名必须是平台事件（onLoad/onRendered/onValidate/onPreAction/onCustomAction/onActionDone/onPrintFormDataHandle/onPrintWorkflowLogDataHandle）。与 remove:true 二选一；source 为空字符串也表示移除 customScript"),
             replace: z.boolean().optional().describe("true = 以 source 整体替换 customScript（含完整 (function(form){…}) 脚本）。默认 false = 增量并入既有脚本，保留平台模板与既有逻辑"),
-            publish: z.boolean().optional(),
+            remove: z.boolean().optional().describe("true = 显式移除 customScript，使 onlinejs.get 返回 present:false；会写入并按 publish 设置发布。与 source 二选一"),
+            publish: z.boolean().optional().describe("默认 true：写草稿并推发布面；false = 只写草稿不推发布面"),
             summary: z.boolean().optional().describe("true = 只回同步状态（sha/字节数/是否同步/渲染兼容），不回任何 HTML/JS 原文。确认「改动是否生效」用这个；要看原文用 onlinejs.get"),
         },
         execute: async (session, args) => {
             const shouldPublish = args.publish !== false;
+            const removing = args.remove === true || args.source === "";
+            if (!removing && args.source === undefined)
+                throw new Error("必须提供 source，或显式传 remove:true");
+            if (args.remove === true && args.source !== undefined && args.source !== "")
+                throw new Error("remove:true 不能与非空 source 同时传入");
             // r28e F9：和同 lane 其它工具一致——省略 sheetCode 即模型码槽位。
             const targetSheetCode = args.sheetCode ?? args.schemaCode;
             // 1. Read the existing draftHtmlJson.
@@ -133,10 +139,13 @@ export function registerOnlineJsLane(tools) {
             //    existing script and merge the caller's code into it; the platform
             //    default (an empty script) is seeded with the lifecycle scaffold.
             const existingScript = String(existingElements.find((element) => element.id === "customScript")?.innerHTML ?? "");
-            const composedScript = composeCustomScript(existingScript, args.source, args.replace === true ? "replace" : "merge");
+            const composedScript = removing ? "" : composeCustomScript(existingScript, args.source, args.replace === true ? "replace" : "merge");
             // 3. Preserve the platform template read-modify-write: keep the
             //    style/beforeCustomScript/afterCustomScript skeleton and every
             //    layout/control element; customScript carries the MERGED script.
+            // Keep the platform's required six-element skeleton, but an empty
+            // customScript element is semantically absent (onlinejs.get reports
+            // present:false) and remains accepted by the renderer contract.
             const composedElements = composeLayoutElements(existingElements, composedScript);
             assertHtmlRender(JSON.stringify(composedElements), { schemaCode: args.schemaCode, sheetCode: targetSheetCode, face: "composedDraftHtmlJson" }, true);
             // 4. Stringify the COMPLETE element array (never partial).
@@ -176,7 +185,10 @@ export function registerOnlineJsLane(tools) {
             const publishedScript = readCustomScriptSource(publishedRaw).script;
             const customScriptSha256 = createHash("sha256").update(composedScript, "utf8").digest("hex");
             const draftPublishedInSync = publishedScript !== null && publishedScript === composedScript;
-            const htmlRenderCompat = { draft: validateHtmlRender(composedDraftHtml, true), published: validateHtmlRender(publishedRaw, true) };
+            const htmlRenderCompat = {
+                draft: { ...validateHtmlRender(composedDraftHtml, true), note: "仅 HTML 结构不含 JS 运行" },
+                published: { ...validateHtmlRender(publishedRaw, true), note: "仅 HTML 结构不含 JS 运行" },
+            };
             // Live 2026-10-21 (customer): this readback shipped the same ~10KB script
             // three times (composedDraftHtmlJson + publishedHtmlJson + customScript),
             // ~45KB for a call whose only question was "did publish land?" — the
@@ -222,13 +234,18 @@ export function registerOnlineJsLane(tools) {
                     customScriptMatchesPublished: draftPublishedInSync,
                     customScriptMerged: args.replace !== true,
                     htmlRenderCompat,
+                    portalVerificationPlan: ["在门户打开该表单", "触发已绑定的在线 JS 事件", "检查事件产生的副作用字段或校验提示"],
                 },
             };
         },
         preflight: // Refuse a source that cannot run in the script slot (export/import, unknown
         // form.on event) BEFORE the write permission gate. This is the exact
         // class of mistake that blanked a live form page with no harness signal.
-        (args) => lintOnlineJsSource(args.source),
+        (args) => {
+            if (args.remove === true || args.source === "" || args.source === undefined)
+                return;
+            lintOnlineJsSource(args.source);
+        },
         dryRunPayload: // r23 F4：dry-run 必须走与真写相同的 compose 校验路径（含 replace/merge 的
         // wrapper 判定），否则 dry-run 过、真写拒——探针按 dry-run 绿灯写正式调用被拒。
         async (session, args) => {
@@ -238,12 +255,27 @@ export function registerOnlineJsLane(tools) {
             const compat = validateHtmlRender(raw);
             const elements = compat.ok ? parseLayoutElements(raw) : [];
             const existingScript = String(elements.find((element) => element.id === "customScript")?.innerHTML ?? "");
-            const composed = composeCustomScript(existingScript, args.source, args.replace === true ? "replace" : "merge");
+            const removing = args.remove === true || args.source === "";
+            if (!removing && args.source === undefined)
+                throw new Error("必须提供 source，或显式传 remove:true");
+            const composed = removing ? "" : composeCustomScript(existingScript, args.source, args.replace === true ? "replace" : "merge");
+            const composedBytes = Buffer.byteLength(composed, "utf8");
+            const previewSize = 200;
+            const composedPreview = composed.length <= previewSize * 2
+                ? composed
+                : `${composed.slice(0, previewSize)}…${composed.slice(-previewSize)}`;
             return {
                 mode: args.replace === true ? "replace" : "merge",
+                publish: args.publish !== false,
                 wouldChange: composed !== existingScript,
                 composedSha256: createHash("sha256").update(composed, "utf8").digest("hex"),
-                composedBytes: Buffer.byteLength(composed, "utf8"),
+                composedBytes,
+                composedPreview,
+                composedPreviewHeadBytes: Buffer.byteLength(composed.slice(0, previewSize), "utf8"),
+                composedPreviewTailBytes: Buffer.byteLength(composed.slice(-previewSize), "utf8"),
+                composedPreviewTotalBytes: composedBytes,
+                composedPreviewNote: "预览为头/尾各 200 个字符（短文本不截断）；字节数以 UTF-8 提交串对账，未自动补换行或外壳",
+                summary: args.publish === false ? "只写草稿，不推发布面" : "写草稿并推发布面",
                 hint: "dry-run 已执行与真写一致的 compose 校验；该结果即正式调用将落库的脚本形状",
             };
         },
@@ -267,7 +299,7 @@ export function registerOnlineJsLane(tools) {
             inverse: ({ before, args }) => {
                 const source = before?.customScript;
                 if (typeof source !== "string")
-                    return { kind: "irreversible", reason: "before 表单没有可识别的 customScript element，无法构造清空脚本的等价 compose 调用" };
+                    return { kind: "calls", calls: [{ tool: "onlinejs.compose", args: { schemaCode: String(args.schemaCode), sheetCode: String(args.sheetCode ?? args.schemaCode), remove: true, publish: args.publish } }] };
                 return { kind: "calls", calls: [{ tool: "onlinejs.compose", args: { schemaCode: String(args.schemaCode), sheetCode: String(args.sheetCode ?? args.schemaCode), source, replace: true, publish: args.publish } }] };
             },
         },

package/dist/lanes/organization.js

@@ -531,10 +531,17 @@ export function registerOrganizationLane(tools) {
             remarks: z.string().optional(),
             corpId: z.string().min(1).optional().describe("组织 corpId，默认当前登录企业；传 \"other\" 表示非组织分组角色"),
         },
-        execute: async (session, args) => {
+        preflight: (args) => {
             if (!args.roleGroupCode && !args.roleGroupId) {
-                throw new ToolInputError({ message: "必须给 roleGroupCode（推荐）或 roleGroupId；先 org.role.list 取 groups 码表" });
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "role-group-required",
+                    nextCommand: "omc call org.role.list --args '{}'",
+                    message: "必须给 roleGroupCode（推荐）或 roleGroupId；先 org.role.list 取 groups 码表",
+                });
             }
+        },
+        execute: async (session, args) => {
             const { groups } = await readRoleTree(session);
             if (groups.length === 0) {
                 throw new ToolRefusalError({ status: "refused", blocker: "wire-shape", message: "org.role.list 未解析出任何角色组；先确认组织树可读，不要盲建角色" });

package/dist/lanes/programming.js

@@ -7,6 +7,7 @@ import { writeTool } from "../write.js";
 import { defineTool, ToolRefusalError } from "../tool-types.js";
 import { wireCall, WireError } from "../wire.js";
 import { PROGRAMMING_LANE_CONTRACT, PROGRAMMING_WIRE } from "./programming-contract.js";
+import { readModelRecord } from "../model-record.js";
 const LANE = PROGRAMMING_LANE_CONTRACT.lane;
 const TOOLS = PROGRAMMING_LANE_CONTRACT.tools;
 /** metadata.app.CodeType is the NUMERIC index on the wire (8.6.26 source). */
@@ -60,7 +61,8 @@ async function readSource(session, args) {
         const model = asRecord(response.data);
         if (model === null)
             return { present: false, provisioned: false, model: null };
-        return { present: true, provisioned: typeof model.version === "number", model };
+        // get_source can return a generated template without a persisted source row.
+        return { present: typeof model.version === "number", provisioned: typeof model.version === "number", model };
     }
     catch (error) {
         if (error instanceof WireError && error.kind === "business" && /PROGRAMMING_SOURCE_NONEXISTENT|源码不存在|source.*nonexistent/i.test(error.message))
@@ -102,6 +104,13 @@ function assertTemplateShape(content, code) {
         });
     }
 }
+function assertProgrammingName(name) {
+    if (name === undefined)
+        return;
+    if (typeof name !== "string" || !/^[A-Za-z][A-Za-z0-9_ -]{0,127}$/.test(name)) {
+        throw new ToolRefusalError({ status: "refused", blocker: "programming-name-invalid", message: "businessRuleName 只能以字母开头，并只含字母、数字、下划线、空格或连字符（最多 128 字符）。" });
+    }
+}
 async function listRules(session, schemaCode) {
     const response = await wireCall(session, { path: ENDPOINTS.businessRuleListBySchemaCode, query: { schemaCode } });
     return rowsOf(response.data);
@@ -223,6 +232,17 @@ function sourceRollback() {
         },
     };
 }
+function publishRollback() {
+    return {
+        target: (args) => `programming.publish:${String(args.schemaCode ?? "")}/${String(args.businessRuleCode ?? "")}`,
+        // A published version has no authoritative read face and cannot be
+        // restored by replaying the draft. Deliberately fail before-capture so the
+        // shared journal records rollbackable:false rather than implying a draft
+        // restore would undo the runtime version.
+        read: async () => { throw new Error("published version has no rollbackable read face"); },
+        inverse: () => ({ kind: "irreversible", reason: "无图形化回退端点；删除规则才会连源码一起删" }),
+    };
+}
 export function registerProgrammingLane(tools) {
     tools.push(defineTool({
         name: "programming.schemas",
@@ -310,12 +330,14 @@ export function registerProgrammingLane(tools) {
         },
         handler: async (ctx, args, self) => governedRead(ctx, self, args, async (session) => {
             const read = await readSource(session, args);
+            const model = await readModelRecord(session, args.schemaCode);
             const content = typeof read.model?.content === "string" ? read.model.content : null;
             return {
                 schemaCode: args.schemaCode,
                 businessRuleCode: args.businessRuleCode,
                 code: String(read.model?.code ?? args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode)),
                 present: read.present,
+                modelExists: model !== null,
                 provisioned: read.provisioned,
                 className: read.model?.className ?? null,
                 codeType: read.model?.codeType ?? null,
@@ -326,13 +348,15 @@ export function registerProgrammingLane(tools) {
                 contentBytes: content === null ? null : Buffer.byteLength(content, "utf8"),
                 // r28j F7: --search "bizObject" 被写危害文档淹没；API 骨架入口钉在这里。
                 apiHint: 'BizObject 读写骨架：omc help omc-backend-online-coding --section "5. 典型 handler 骨架"',
-                ...(read.provisioned
-                    ? {
-                        // Draft face always reports published:false after publish too —
-                        // do not let callers treat this boolean as the publish verdict (F11).
-                        publishedNote: "本面 published 来自 version=0 草稿行；发布是否生效请看 programming.publish 的 readback.runtimeEffective / developmentMode+enabled，不要看本字段。",
-                    }
-                    : { hint: "未落库草稿：content 是平台按规则类型生成的模板骨架（version:null）。改完后 programming.save 落库，programming.publish 生效。" }),
+                ...(model === null
+                    ? { hint: `模型 ${args.schemaCode} 不存在；get_source 返回的只是平台模板骨架，不代表源码或模型存在。先用 model.list 核对 schemaCode。` }
+                    : read.provisioned
+                        ? {
+                            // Draft face always reports published:false after publish too —
+                            // do not let callers treat this boolean as the publish verdict (F11).
+                            publishedNote: "本面 published 来自 version=0 草稿行；发布是否生效请看 programming.publish 的 readback.runtimeEffective / developmentMode+enabled，不要看本字段。",
+                        }
+                        : { hint: "未落库草稿：content 是平台按规则类型生成的模板骨架（version:null）。改完后 programming.save 落库，programming.publish 生效。" }),
             };
         }, {
             target: `programming.get:${args.schemaCode}/${args.businessRuleCode}`,
@@ -442,10 +466,20 @@ export function registerProgrammingLane(tools) {
         },
         preflight: (args) => {
             const code = args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode);
+            assertProgrammingName(args.businessRuleName);
             assertTemplateShape(args.content, code);
         },
-        dryRunPayload: async (_session, args) => {
+        dryRunPayload: async (session, args) => {
             const code = args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode);
+            const rule = await ruleOf(session, args.schemaCode, args.businessRuleCode);
+            if (!rule) {
+                throw new ToolRefusalError({
+                    status: "refused",
+                    blocker: "programming-rule-absent",
+                    message: `业务规则 ${args.schemaCode}/${args.businessRuleCode} 不存在；save 不会凭空创建规则行。先用 rule.save（或 rule.list）确认/创建规则，再保存源码。`,
+                    nextCommand: `omc call rule.save --env local --args '{"schemaCode":"${args.schemaCode}","ruleCode":"${args.businessRuleCode}"}'`,
+                });
+            }
             return {
                 code,
                 contentSha256: sha256(args.content),
@@ -538,6 +572,8 @@ export function registerProgrammingLane(tools) {
             const publishStatusRaw = readbackRule?.publishStatus;
             return {
                 performed: { errcode: 0, code, contentSha256: sha256(content), contentBytes: Buffer.byteLength(content, "utf8"), compiled: true },
+                rollbackReceipt: { supported: false, reason: "无图形化回退端点；rollback plan 亦标 irreversible" },
+                runtimeVerification: { note: "自定义规则无调用响应体读面；验证须写副作用后用 data.load 读取" },
                 readback: {
                     present: readbackSource.present,
                     contentMatches: readbackContent === content,
@@ -554,19 +590,36 @@ export function registerProgrammingLane(tools) {
                     // so it cannot contradict runtimeEffective:"published".
                     ...(readbackSource.model?.published === true ? { publishedFlag: true } : { publishedFlagNote: "get_source.published 读的是 version=0 草稿行，发布后仍常为 false；不是发布成败判据（published 内容无 wire 读端点）" }),
                     note: "运行时执行的是 published 最新版；published 内容无 wire 读取端点，回滚靠本地 git + 重新 publish。判发布是否生效：authoritative=developmentMode+enabled（1/CODING + true）。",
+                    rollback: { supported: false, reason: "无图形化回退端点；删除规则才会连源码一起删" },
+                    runtimeVerification: { note: "自定义规则无调用响应体读面；须写副作用（如字段赋值）后 data.load 验证" },
                 },
             };
         },
         preflight: (args) => {
             const code = args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode);
+            assertProgrammingName(args.businessRuleName);
             if (args.content !== undefined)
                 assertTemplateShape(args.content, code);
         },
-        dryRunPayload: async (_session, args) => ({
-            code: args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode),
-            contentSha256: args.content === undefined ? null : sha256(args.content),
-            note: "dry-run 已执行模板校验；真写会 compile→publish（插新 published 版本行并把规则切 CODING+enable）。",
-        }),
+        dryRunPayload: async (session, args) => {
+            const code = args.code ?? businessRuleSourceCode(args.schemaCode, args.businessRuleCode);
+            const rule = await ruleOf(session, args.schemaCode, args.businessRuleCode);
+            if (!rule)
+                throw new ToolRefusalError({ status: "refused", blocker: "programming-rule-absent", message: `业务规则 ${args.schemaCode}/${args.businessRuleCode} 不存在：publish 必须携带 businessRule 整模型。` });
+            let content = args.content;
+            if (content === undefined) {
+                const read = await readSource(session, { schemaCode: args.schemaCode, businessRuleCode: args.businessRuleCode });
+                content = typeof read.model?.content === "string" ? read.model.content : undefined;
+            }
+            if (content === undefined || content.trim() === "")
+                throw new ToolRefusalError({ status: "refused", blocker: "programming-content-required", message: "没有可发布的源码：传 content，或先 programming.save 落库草稿。" });
+            assertTemplateShape(content, code);
+            const compiled = await compileSource(session, code, content);
+            if (!compiled.success)
+                throw new ToolRefusalError({ status: "refused", blocker: "programming-compile-failed", message: "编译失败，拒绝 dry-run（真写也会拒绝发布）。", errors: compiled.presented.errors ?? compiled.errors, userErrors: compiled.presented.userErrors, platformErrors: compiled.presented.platformErrors });
+            return { code, contentSha256: sha256(content), contentBytes: Buffer.byteLength(content, "utf8"), note: "dry-run 与真写执行相同的规则存在、模板形状、编译 preflight；不会写入或切 CODING。" };
+        },
+        rollback: publishRollback(),
     });
 }
 export { PROGRAMMING_WIRE };