@stalfh233/omc-cli 0.6.21 → 0.6.22

package/dist/cli.js

@@ -23,7 +23,7 @@ import { formatDoctorHumanSummary, unsupportedCapabilities } from "./version-fam
 import { beginWriteFace, configureOutput, endWriteFace, humanSummary, maybeWarnMergedStreams, stripOutputFlags, writeEnvelope } from "./cli-output.js";
 import { beginUsage, completeUsage, currentUsageArgsDigest, ensureProjectIgnore, priorIdenticalSuccess, recordUsageOutput, usageReport } from "./usage-log.js";
 import { artifactFetchHint, artifactRoot, boundResult, emitInvalid, emitResult, emitThrown, emitTransportResult, outputBudget, readArtifact, withTransport, } from "./command-transport.js";
-import { CLI_DEFAULT_OUTPUT_BYTES, assertSafeOutputPath, pruneArtifacts } from "./artifacts.js";
+import { CLI_DEFAULT_OUTPUT_BYTES, assertSafeOutputPath, createArtifact, pruneArtifacts } from "./artifacts.js";
 import { artifactPathMissHint, nullProjectionHint, partialPathMissHint, projectJsonPath, projectJsonPathFanout, projectResultExtract } from "./path-projection.js";
 import { basename, join, resolve } from "node:path";
 import { buildToolRegistry } from "./tools.js";
@@ -56,7 +56,7 @@ import { planIntent, readbackIntent, applyIntent, intentWarnings } from "./inten
 import { listSkills, readSkill, readSkillOutline, readSkillSection, searchSkills, suggestHelpTopics } from "./skills.js";
 import { parseToolInput, ToolInputError } from "./tool-types.js";
 import { WireError, wireCall } from "./wire.js";
-import { DEFAULT_PULL_CONCURRENCY, GraphIndexAbsentError, GraphPullLockHeldError, MAX_PULL_CONCURRENCY, impactGraph, publishGraphPull, queryGraphReferences, readGraphStatus, searchGraphRules, } from "./graph.js";
+import { DEFAULT_PULL_CONCURRENCY, GraphIndexAbsentError, GraphPullLockHeldError, MAX_PULL_CONCURRENCY, impactGraph, publishGraphPull, queryGraphReferences, queryGraphReferencesBatch, queryGraphEdges, readGraphStatus, searchGraphRules, } from "./graph.js";
 import { cmdResidue } from "./residue.js";
 import { ENDPOINTS } from "./endpoints.js";
 import { makeToolContext } from "./context.js";
@@ -1604,14 +1604,20 @@ async function cmdIntentReadback(file, environment, transport) {
  * registry or `commands --json`. Results are candidate pointers only — plan /
  * apply / readback keep reading the live baseline.
  */
-async function cmdGraphPull(environment, concurrency, transport) {
+async function cmdGraphPull(environment, concurrency, transport, path, applicationCodes, allApplications = false) {
     const workers = concurrency ?? DEFAULT_PULL_CONCURRENCY;
     if (!Number.isSafeInteger(workers) || workers < 1 || workers > MAX_PULL_CONCURRENCY)
         return emitInvalid(transport, { message: `--concurrency 必须是 1–${MAX_PULL_CONCURRENCY} 的整数（平台负载有界；默认 ${DEFAULT_PULL_CONCURRENCY}）` });
     const context = makeToolContext({ sessions: new SessionManager(new ConfigStore(defaultPaths())) });
     try {
         const session = await context.sessions.session(environment);
-        const data = await publishGraphPull(session, workers);
+        let selected = applicationCodes;
+        if (allApplications) {
+            const apps = (await wireCall(session, { path: ENDPOINTS.applicationList, query: {} })).data;
+            const rows = Array.isArray(apps) ? apps : (apps && typeof apps === "object" && Array.isArray(apps.data) ? apps.data : []);
+            selected = rows.map((row) => String(row.appCode ?? row.code ?? "")).filter(Boolean);
+        }
+        const data = await publishGraphPull(session, workers, { ...(selected ? { applicationCodes: selected } : {}) });
         // issue#9 C4：扫到 0 模型仍回 ok，让调用者误以为索引就绪（随后 search 报
         // graph-index-absent 才发现）。0 模型 fail-fast，点名 env/applicationCode
         // 与解析来源，把「索引没建成」和「建成了但为空」分开。
@@ -1644,13 +1650,15 @@ async function cmdGraphPull(environment, concurrency, transport) {
             identityFingerprint: data.meta.identityFingerprint,
             pulledAtIso: data.meta.pulledAtIso,
             scope: data.meta.scope,
-            coverage: { applicationCodes: [data.meta.applicationCode] },
+            coverage: { applicationCodes: data.meta.coverage.applicationCodes, ...(data.meta.coverage.tenantApplications ? { tenantApplications: data.meta.coverage.tenantApplications } : {}) },
             freshness: data.gaps.length === 0 ? "complete" : "partial",
             scanned: { models: data.scanned.models, rules: data.scanned.rules, datarules: data.scanned.datarules, views: data.scanned.views, ...(data.scanned.parseFailures > 0 ? { parseFailures: data.scanned.parseFailures } : {}) },
             edges: edgesByKind,
             ...(data.gaps.length > 0 ? { gaps: { count: data.gaps.length, byKind: gapsByKind } } : {}),
             dbBytes: data.dbBytes,
             timings: data.timings,
+            dbPath: path ? `${path}/.omc/graph/graph.db` : undefined,
+            mcpHint: `MCP 工具按注册时的 --path 读库；要让 MCP 看到本次拉取：omc graph pull --path <MCP 的配置根> --env <env>`,
             nextCommand: "omc graph references <kind> <code>",
         }, transport);
     }
@@ -1688,6 +1696,32 @@ function cmdGraphReferences(kind, code, transport, requestedEnvironment) {
         return emitThrown(error, transport);
     }
 }
+function cmdGraphReferencesBatch(kind, codeList, transport) {
+    if (!["service", "model", "field"].includes(kind))
+        return emitInvalid(transport, { message: "kind 必须是 service / model / field" });
+    try {
+        const result = queryGraphReferencesBatch(kind, codeList.split(",").map((code) => code.trim()));
+        return emitResult({ status: "ok", ...result }, transport);
+    }
+    catch (error) {
+        return emitThrown(error, transport);
+    }
+}
+function cmdGraphEdges(fromSchema, toSchema, requestedEnvironment, transport) {
+    try {
+        const result = queryGraphEdges(fromSchema, toSchema);
+        if (requestedEnvironment !== undefined && requestedEnvironment !== result.index.environmentName)
+            return emitResult({ status: "refused", blocker: "graph-environment-mismatch", message: `索引已绑定环境 ${result.index.environmentName}，不是 ${requestedEnvironment}；请先 omc graph pull --env ${requestedEnvironment}`, index: result.index }, transport);
+        if (result.total > 200) {
+            const artifact = createArtifact(artifactRoot(), JSON.stringify(result.edges, null, 2));
+            return emitResult({ status: "ok", total: result.total, index: result.index, artifactId: artifact.artifactId, sha256: artifact.sha256, edges: { count: result.edges.length, truncated: true } }, transport);
+        }
+        return emitResult({ status: "ok", ...result }, transport);
+    }
+    catch (error) {
+        return emitThrown(error, transport);
+    }
+}
 function cmdGraphStatus(transport) {
     try {
         const status = readGraphStatus();
@@ -2553,13 +2587,22 @@ async function main() {
     });
     // ADR-0008: local derived rule-graph index — CLI management face, not a call
     // tool (so it stays out of `commands --json`/coverage by construction).
-    const graphCommand = command.command("graph").description("本地派生规则图索引（ADR-0008）：pull 全量重建（有界并发）/ references 离线引用 / impact 影响面 / search 规则 code+name 检索（非规则体）/ status 完整性与新鲜度。候选定位器——不进 baseline/plan/写门禁");
-    graphCommand.command("pull").option("--env <environment>").option("--environment <environment>").option("--concurrency <n>", "并发 wire 读数（1–32，默认 16）：拉取已流水线化，墙钟 ≈ max(模型面,规则面)/并发 × 延迟；过高可能触发平台限流形成缺口").option("--max-output-bytes <bytes>").addHelpText("after", "\n只读远端（model.list → 每模型 rule.list+datarule.list → 每规则 rule.get，统一任务池流水线并发）+ 本地原子重建；不写环境、不占环境写锁。新鲜度随结果回报（complete|partial），查询走 graph references / impact / search。\n").action(async (options) => {
+    const graphCommand = command.command("graph").description("本地派生规则图索引（ADR-0008）");
+    graphCommand.command("pull").option("--env <environment>").option("--environment <environment>").option("--path <dir>").option("--application-codes <codes>").option("--all-applications").option("--concurrency <n>").option("--max-output-bytes <bytes>").action(async (options) => {
         const parsed = options.concurrency === undefined ? undefined : Number.parseInt(String(options.concurrency), 10);
-        commandExitCode = await withTransport(options, request, (transport) => cmdGraphPull(options.environment ?? options.env, parsed, transport));
+        if (options.path)
+            process.env.OMC_GRAPH_PATH = options.path;
+        const codes = options.applicationCodes ? String(options.applicationCodes).split(",").map((code) => code.trim()).filter(Boolean) : undefined;
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphPull(options.environment ?? options.env, parsed, transport, options.path, codes, options.allApplications === true));
+    });
+    graphCommand.command("references [kind] [code]").option("--batch <codes>").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线查询（零 wire）：kind = service|model|field，语义同 rule.references 第一版边界；支持 --batch code1,code2 共享同一 index 块。\n").action(async (kind, code, options) => {
+        commandExitCode = await withTransport(options, request, (transport) => options.batch ? cmdGraphReferencesBatch(kind ?? "model", options.batch, transport) : cmdGraphReferences(kind ?? "", code ?? "", transport, options.environment ?? options.env));
+    });
+    graphCommand.command("references-batch <kind> <code>").option("--max-output-bytes <bytes>").action(async (kind, code, options) => {
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphReferencesBatch(kind, code, transport));
     });
-    graphCommand.command("references <kind> <code>").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线查询（零 wire）：kind = service|model|field，语义同 rule.references 第一版边界；结果带索引新鲜度与扫描缺口（有缺口时零命中不构成「无引用」证明）。覆盖：规则图/数据规则/视图；不含表单、workflow.permissions、流程绑定、在线 JS。在线版 rule.references 不含数据规则；两者都不含上述未扫描面。\n").action(async (kind, code, options) => {
-        commandExitCode = await withTransport(options, request, (transport) => cmdGraphReferences(kind, code, transport, options.environment ?? options.env));
+    graphCommand.command("edges").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--from-schema <code>").option("--to-schema <code>").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线全图边清单（零 wire）；--env 仅校验索引绑定环境，与 references 一致。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphEdges(options.fromSchema, options.toSchema, options.environment ?? options.env, transport));
     });
     graphCommand.command("impact <kind> <code>").option("--max-output-bytes <bytes>").addHelpText("after", "\n影响面（离线）：跳1=引用该编码的规则（同 references），跳2=这些规则还读写哪些 service/model/field——改前看爆炸半径。截断上限 50 规则×每类 20 码。\n").action(async (kind, code, options) => {
         commandExitCode = await withTransport(options, request, (transport) => cmdGraphImpact(kind, code, transport));

package/dist/command-transport.js

@@ -120,6 +120,15 @@ function sanitizePaths(value) {
             }
             continue;
         }
+        // r41a 接线（2026-11-08，E2E F34 三撞收口）：graph 回执的 dbPath 是「索引身份」
+        // 字段——MCP 面（omc mcp-graph --path）本就明文回显自己的库路径，CLI 侧把它
+        // 脱成 [local-path-redacted] 后两面无法比对（探针正是靠比对 dbPath 才发现
+        // 「MCP 读的是 ext-mcc 目录的旧库」）；graph-index-absent 的拒绝消息也在叫用户
+        // 「比对 dbId/dbPath」。仅豁免这一个键，其余路径照脱敏不放松。
+        if (key === "dbPath" && typeof entry === "string") {
+            output[key] = entry;
+            continue;
+        }
         output[key] = sanitizePaths(entry);
     }
     return output;

package/dist/graph.js

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import { chmodSync, closeSync, existsSync, mkdirSync, openSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { joinConfigRoot } from "./command-transport.js";
 import { decodeJsonColumn, JSON_COLUMN_NULL_COALESCE } from "./json-column.js";
 import { ENDPOINTS } from "./endpoints.js";
@@ -46,7 +46,7 @@ function nodeSqlite() {
  *   staleness is handled by reporting pulledAt + identity, refreshed by an
  *   explicit re-pull (no incremental watermarks, no write-back hooks).
  */
-const GRAPH_SCHEMA_VERSION = "5";
+export const GRAPH_SCHEMA_VERSION = "6";
 const STALE_LOCK_MS = 15 * 60 * 1000;
 export const DEFAULT_PULL_CONCURRENCY = 16;
 export const MAX_PULL_CONCURRENCY = 32;
@@ -77,8 +77,8 @@ export class GraphPullLockHeldError extends Error {
         this.name = "GraphPullLockHeldError";
     }
 }
-export function graphDbPath() {
-    return join(joinConfigRoot(), ".omc", "graph", "graph.db");
+export function graphDbPath(root) {
+    return join(resolve(root ?? process.env.OMC_GRAPH_PATH ?? joinConfigRoot()), ".omc", "graph", "graph.db");
 }
 /**
  * Extract api-fact reference edges from one rule's stored node graph. The
@@ -181,7 +181,7 @@ export function extractListViewEdges(schemaCode, viewCode, model) {
  * `datarule-list`) and vice versa (`rule-list`). Output is sorted so the
  * published DB is byte-stable regardless of completion order.
  */
-export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRENCY) {
+export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRENCY, requestedApplication) {
     const identity = session.environmentFingerprint();
     const pulledAtIso = new Date().toISOString();
     const totalStart = Date.now();
@@ -192,11 +192,11 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
     // returns EMPTY data on a real platform (works only against the fake face)
     // — using it here made the first live pull enumerate zero models and (pre-
     // zero-guard) wedge the scheduler.
-    const scope = await resolveApplicationScope(session, undefined).catch(() => undefined);
+    const scope = await resolveApplicationScope(session, requestedApplication).catch(() => undefined);
     const applicationCode = scope?.code ?? "";
     const gaps = [];
     const treeRows = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
-    const modelEntities = treeRows.filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code !== "").map((row) => ({ schemaCode: String(row.code), name: String(row.name ?? row.code) })).sort((a, b) => a.schemaCode.localeCompare(b.schemaCode));
+    const modelEntities = treeRows.filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code !== "").map((row) => ({ schemaCode: String(row.code), name: String(row.name ?? row.code), applicationCode })).sort((a, b) => a.schemaCode.localeCompare(b.schemaCode));
     const schemaCodes = modelEntities.map((row) => row.schemaCode);
     const fields = [];
     const services = [];
@@ -206,7 +206,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
             for (const row of rows) {
                 const code = String(row.code ?? row.propertyCode ?? "");
                 if (code)
-                    fields.push({ schemaCode, code, name: String(row.name ?? row.propertyName ?? code) });
+                    fields.push({ schemaCode, code, name: String(row.name ?? row.propertyName ?? code), applicationCode });
             }
         }
         catch (error) {
@@ -302,7 +302,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
             dataruleRows = wireRows((await wireCall(session, { path: ENDPOINTS.dataRuleList, query: { schemaCode } })).data);
             dataruleCount += dataruleRows.length;
             for (const row of dataruleRows)
-                edges.push(...extractDataRuleEdges(schemaCode, row));
+                edges.push(...extractDataRuleEdges(schemaCode, row).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "datarule-list", ref: schemaCode, note: error instanceof Error ? error.message : String(error) });
@@ -361,7 +361,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
                 rowId: ruleId,
                 graphSha256: sha256({ nodes, routes: decodeJsonColumn(record.route, JSON_COLUMN_NULL_COALESCE) }),
             });
-            edges.push(...extractReferenceEdges(schemaCode, ruleCode, nodes));
+            edges.push(...extractReferenceEdges(schemaCode, ruleCode, nodes).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "rule-get", ref: `${schemaCode}/${ruleCode}`, note: error instanceof Error ? error.message : String(error) });
@@ -378,7 +378,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
                 return;
             }
             viewCount += 1;
-            edges.push(...extractListViewEdges(schemaCode, viewCode, got));
+            edges.push(...extractListViewEdges(schemaCode, viewCode, got).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "listview-get", ref: `${schemaCode}/${viewCode}`, note: error instanceof Error ? error.message : String(error) });
@@ -496,10 +496,24 @@ async function withGraphPullLock(run) {
     }
 }
 /** Wholesalerebuild + atomic publish (staging file + rename), 0600. */
-export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCURRENCY) {
+export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCURRENCY, options = {}) {
     try {
         return await withGraphPullLock(async () => {
-            const data = await pullRuleGraph(session, concurrency);
+            const requested = options.applicationCodes?.length ? options.applicationCodes : [undefined];
+            const parts = await Promise.all(requested.map((application) => pullRuleGraph(session, concurrency, application)));
+            const first = parts[0];
+            const data = parts.length === 1 ? first : {
+                ...first,
+                meta: { ...first.meta, applicationCode: "*", coverage: { applicationCodes: parts.flatMap((part) => part.meta.coverage.applicationCodes), tenantApplications: parts.flatMap((part) => part.meta.coverage.applicationCodes) } },
+                rules: parts.flatMap((part) => part.rules),
+                edges: parts.flatMap((part) => part.edges),
+                models: parts.flatMap((part) => part.models),
+                fields: parts.flatMap((part) => part.fields),
+                services: parts.flatMap((part) => part.services),
+                gaps: parts.flatMap((part) => part.gaps),
+                scanned: parts.reduce((sum, part) => ({ models: sum.models + part.scanned.models, rules: sum.rules + part.scanned.rules, datarules: sum.datarules + part.scanned.datarules, views: sum.views + part.scanned.views, parseFailures: sum.parseFailures + part.scanned.parseFailures }), { models: 0, rules: 0, datarules: 0, views: 0, parseFailures: 0 }),
+                timings: { listMs: parts.reduce((n, part) => n + part.timings.listMs, 0), readMs: parts.reduce((n, part) => n + part.timings.readMs, 0), totalMs: parts.reduce((n, part) => n + part.timings.totalMs, 0) },
+            };
             const staging = `${graphDbPath()}.staging-${process.pid}`;
             rmSync(staging, { force: true });
             const DatabaseSyncCtor = nodeSqlite().DatabaseSync;
@@ -531,13 +545,14 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
           rule_code TEXT NOT NULL,
           node_code TEXT,
           node_type TEXT,
-          via TEXT NOT NULL
+           via TEXT NOT NULL,
+           application_code TEXT
         );
         CREATE INDEX edges_lookup ON edges(kind, code);
          CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
-         CREATE TABLE models (schema_code TEXT PRIMARY KEY, name TEXT NOT NULL);
-         CREATE TABLE fields (schema_code TEXT NOT NULL, code TEXT NOT NULL, name TEXT NOT NULL);
-         CREATE TABLE services (code TEXT PRIMARY KEY, name TEXT NOT NULL);
+          CREATE TABLE models (schema_code TEXT PRIMARY KEY, name TEXT NOT NULL, application_code TEXT);
+          CREATE TABLE fields (schema_code TEXT NOT NULL, code TEXT NOT NULL, name TEXT NOT NULL, application_code TEXT);
+          CREATE TABLE services (code TEXT PRIMARY KEY, name TEXT NOT NULL);
       `);
                 const insertMeta = db.prepare("INSERT INTO meta (key, value) VALUES (?, ?)");
                 // `applicationResolution` is an object; String(value) would persist
@@ -548,19 +563,19 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                 const insertRule = db.prepare("INSERT INTO rules (schema_code, rule_code, name, enabled, status, default_rule, row_id, graph_sha256) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");
                 for (const rule of data.rules)
                     insertRule.run(rule.schemaCode, rule.ruleCode, rule.name, rule.enabled === null ? null : rule.enabled ? 1 : 0, rule.status, rule.defaultRule === null ? null : rule.defaultRule ? 1 : 0, rule.rowId, rule.graphSha256);
-                const insertEdge = db.prepare("INSERT INTO edges (kind, code, schema_code, rule_code, node_code, node_type, via) VALUES (?, ?, ?, ?, ?, ?, ?)");
+                const insertEdge = db.prepare("INSERT INTO edges (kind, code, schema_code, rule_code, node_code, node_type, via, application_code) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");
                 for (const edge of data.edges)
-                    insertEdge.run(edge.kind, edge.code, edge.schemaCode, edge.ruleCode, edge.nodeCode, edge.nodeType, edge.via);
+                    insertEdge.run(edge.kind, edge.code, edge.schemaCode, edge.ruleCode, edge.nodeCode, edge.nodeType, edge.via, edge.applicationCode ?? null);
                 const insertGap = db.prepare("INSERT INTO gaps (kind, ref, note) VALUES (?, ?, ?)");
                 for (const gap of data.gaps)
                     insertGap.run(gap.kind, gap.ref, gap.note ?? null);
-                const insertModel = db.prepare("INSERT INTO models (schema_code, name) VALUES (?, ?)");
+                const insertModel = db.prepare("INSERT INTO models (schema_code, name, application_code) VALUES (?, ?, ?)");
                 for (const row of data.models)
-                    insertModel.run(row.schemaCode, row.name);
-                const insertField = db.prepare("INSERT INTO fields (schema_code, code, name) VALUES (?, ?, ?)");
+                    insertModel.run(row.schemaCode, row.name, row.applicationCode ?? null);
+                const insertField = db.prepare("INSERT INTO fields (schema_code, code, name, application_code) VALUES (?, ?, ?, ?)");
                 for (const row of data.fields)
-                    insertField.run(row.schemaCode, row.code, row.name);
-                const insertService = db.prepare("INSERT INTO services (code, name) VALUES (?, ?)");
+                    insertField.run(row.schemaCode, row.code, row.name, row.applicationCode ?? null);
+                const insertService = db.prepare("INSERT OR IGNORE INTO services (code, name) VALUES (?, ?)");
                 for (const row of data.services)
                     insertService.run(row.code, row.name);
                 // FTS5 mirrors rules (code+name) for `graph search`; one rebuild after
@@ -598,7 +613,7 @@ function openGraphIndex() {
         for (const row of db.prepare("SELECT key, value FROM meta").all())
             meta[row.key] = row.value;
         if (meta.schemaVersion !== GRAPH_SCHEMA_VERSION)
-            throw new GraphIndexAbsentError(`索引 schema 版本不匹配（${meta.schemaVersion} ≠ ${GRAPH_SCHEMA_VERSION}）；重跑 omc graph pull`);
+            throw new GraphIndexAbsentError(`索引 schema 版本不匹配（${meta.schemaVersion ?? "unknown"} ≠ ${GRAPH_SCHEMA_VERSION}）；旧版索引已作废，请重跑 omc graph pull（schema 升版需重拉）`);
         const ruleCount = db.prepare("SELECT COUNT(*) AS n FROM rules").get().n;
         const modelCount = db.prepare("SELECT COUNT(DISTINCT schema_code) AS n FROM rules").get().n;
         const entityCounts = {
@@ -620,7 +635,21 @@ function openGraphIndex() {
         const pulledAtIso = meta.pulledAtIso ?? "";
         const ageDays = indexAgeDays(pulledAtIso);
         const ageMinutes = indexAgeMinutes(pulledAtIso);
-        const coverage = { applicationCodes: meta.applicationCode ? [meta.applicationCode] : [] };
+        let applicationCodes = meta.applicationCode ? [meta.applicationCode] : [];
+        try {
+            const parsedCoverage = JSON.parse(meta.coverage ?? "null");
+            if (Array.isArray(parsedCoverage.applicationCodes))
+                applicationCodes = parsedCoverage.applicationCodes.filter((code) => typeof code === "string");
+        }
+        catch { /* legacy index */ }
+        let tenantApplications;
+        try {
+            const parsedCoverage = JSON.parse(meta.coverage ?? "null");
+            if (Array.isArray(parsedCoverage.tenantApplications))
+                tenantApplications = parsedCoverage.tenantApplications.filter((code) => typeof code === "string");
+        }
+        catch { /* legacy index */ }
+        const coverage = { applicationCodes, ...(tenantApplications ? { tenantApplications } : {}) };
         return {
             db,
             summary: {
@@ -663,6 +692,14 @@ function openGraphIndex() {
 export const GRAPH_COVERAGE = Object.freeze({
     scanned: Object.freeze(["businessrule", "datarule", "listview"]),
     notScanned: Object.freeze(["form", "workflow.permissions", "workflow.bindings", "onlinejs", "rule.conditions"]),
+    answerable: Object.freeze(["businessrule", "datarule", "listview"]),
+    mustCheckManually: Object.freeze([
+        { surface: "form", why: "表单控件关联未扫描，可能仍引用目标字段", how: "omc call form.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "workflow.permissions", why: "流程权限未扫描，无法判断谁能发起/操作", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "workflow.bindings", why: "流程规则绑定未扫描，规则删除可能留下绑定", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "onlinejs", why: "在线 JS 可能通过字符串引用字段", how: "omc call onlinejs.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "rule.conditions", why: "规则条件叶子未扫描，命中可能不完整", how: "omc call rule.list --args '{\"schemaCode\":\"<x>\"}' 后人工检查条件公式" },
+    ]),
     note: "零命中/全零 totals 只代表 scanned 面没有命中；notScanned 面（尤其 form 与 workflow.permissions）未扫描，不可据此判定可安全删除或无影响",
 });
 /**
@@ -692,6 +729,8 @@ export function queryGraphReferences(kind, code) {
             nodeCode: row.node_code ?? "",
             nodeType: row.node_type ?? "",
             via: row.via,
+            referrer: { schemaCode: row.schema_code, ruleCode: row.rule_code },
+            isSelf: row.schema_code === code,
         }));
         const gapped = summary.gaps.count > 0;
         // r35a-F4（真机 2026-11-06）：探针拿 matches:[] 差点把一个**被表单引用**的
@@ -722,6 +761,39 @@ export function queryGraphReferences(kind, code) {
         db.close();
     }
 }
+export function queryGraphReferencesBatch(kind, codes) {
+    const { db, summary } = openGraphIndex();
+    try {
+        const wanted = [...new Set(codes.filter(Boolean))];
+        const rows = wanted.length === 0 ? [] : db.prepare(`SELECT code, schema_code, rule_code, node_code, node_type, via FROM edges WHERE kind = ? AND code IN (${wanted.map(() => "?").join(",")}) ORDER BY code, schema_code, rule_code, node_code, via`).all(kind, ...wanted);
+        return { kind, codes: wanted, matches: rows.map((row) => ({ targetCode: row.code, schemaCode: row.schema_code, ruleCode: row.rule_code, nodeCode: row.node_code ?? "", nodeType: row.node_type ?? "", via: row.via, referrer: { schemaCode: row.schema_code, ruleCode: row.rule_code }, isSelf: row.schema_code === row.code })), index: summary, coverage: GRAPH_COVERAGE };
+    }
+    finally {
+        db.close();
+    }
+}
+export function queryGraphEdges(fromSchema, toSchema) {
+    const { db, summary } = openGraphIndex();
+    try {
+        const conditions = [];
+        const params = [];
+        if (fromSchema) {
+            conditions.push("schema_code = ?");
+            params.push(fromSchema);
+        }
+        if (toSchema) {
+            conditions.push("code = ?");
+            params.push(toSchema);
+        }
+        const where = conditions.length ? ` WHERE ${conditions.join(" AND ")}` : "";
+        const total = Number(db.prepare(`SELECT COUNT(*) AS n FROM edges${where}`).get(...params).n);
+        const rows = db.prepare(`SELECT kind, code, schema_code, rule_code, node_code, node_type, via, application_code FROM edges${where} ORDER BY schema_code, code, rule_code, node_code, via`).all(...params);
+        return { edges: rows.map((row) => ({ kind: row.kind, code: row.code, schemaCode: row.schema_code, ruleCode: row.rule_code, nodeCode: row.node_code ?? "", nodeType: row.node_type ?? "", via: row.via, ...(row.application_code ? { applicationCode: row.application_code } : {}) })), index: summary, total };
+    }
+    finally {
+        db.close();
+    }
+}
 export function readGraphStatus() {
     const { db, summary } = openGraphIndex();
     try {
@@ -732,10 +804,13 @@ export function readGraphStatus() {
             dbBytes: statSync(dbPath).size,
             dbPath,
             dbId: sha256(dbPath).slice(0, 12),
+            mcpHint: `MCP 工具按注册时的 --path 读库；要让 MCP 看到本次拉取，请执行 omc graph pull --path <MCP 的配置根> --env <env>。`,
             ageMinutes: summary.ageMinutes,
             staleAfterMinutes: summary.staleAfterMinutes,
             ...(summary.staleWarning ? { warning: summary.staleWarning } : {}),
             coverage: summary.coverage,
+            coveredApplications: summary.coverage.applicationCodes,
+            tenantApplications: summary.coverage.tenantApplications ?? summary.coverage.applicationCodes,
             gaps,
         };
     }
@@ -794,8 +869,8 @@ export function searchGraphRules(term, limit = 20, offset = 0) {
                     ...(offset + rows.length < total ? { truncated: true, nextOffset: offset + rows.length } : {}),
                 };
             };
-            entityMatches.model = searchEntity("SELECT COUNT(*) AS n FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0", "SELECT schema_code, name FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0 ORDER BY schema_code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, name: row.name }));
-            entityMatches.field = searchEntity("SELECT COUNT(*) AS n FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT schema_code, code, name FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY schema_code, code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, code: row.code, name: row.name }));
+            entityMatches.model = searchEntity("SELECT COUNT(*) AS n FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0", "SELECT schema_code, name, application_code FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0 ORDER BY schema_code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, name: row.name, applicationCode: row.application_code ?? undefined }));
+            entityMatches.field = searchEntity("SELECT COUNT(*) AS n FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT schema_code, code, name, application_code FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY schema_code, code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, code: row.code, name: row.name, applicationCode: row.application_code ?? undefined }));
             entityMatches.service = searchEntity("SELECT COUNT(*) AS n FROM services WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT code, name FROM services WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY code LIMIT ?", [term.trim(), term.trim()], (row) => ({ code: row.code, name: row.name }));
         }
         const gapped = summary.gaps.count > 0;
@@ -804,7 +879,7 @@ export function searchGraphRules(term, limit = 20, offset = 0) {
             rules: matches,
             matches: entityMatches,
             index: summary,
-            coverage: { scanned: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], notScanned: ["rule.body", "form", "workflow.permissions"], note: "检索覆盖规则与实体的 code/name；规则体、表单与流程权限未扫描" },
+            coverage: { scanned: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], notScanned: ["rule.body", "form", "workflow.permissions"], answerable: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], mustCheckManually: [{ surface: "rule.body", why: "规则体未检索", how: "omc call rule.list --args '{\"schemaCode\":\"<x>\"}'" }, { surface: "form", why: "表单控件未扫描", how: "omc call form.get --args '{\"schemaCode\":\"<x>\"}'" }, { surface: "workflow.permissions", why: "流程权限未扫描", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" }], note: "检索覆盖规则与实体的 code/name；规则体、表单与流程权限未扫描" },
             ...(term.trim() !== "" && !/^[A-Za-z][A-Za-z0-9_.-]*$/.test(term.trim()) ? { note: "疑似业务词；本工具同时检索实体 name/code 与规则 code/name，引用明细请使用匹配到的 code 再查 references/impact" } : {}),
             ...(matches.length === 0 && entityMatches.model.total === 0 && entityMatches.field.total === 0 && entityMatches.service.total === 0
                 ? {

package/dist/human-summary.js

@@ -191,7 +191,7 @@ function phraseOf(tool, args, outcome) {
         case "workflow.delete":
             return `删除流程 ${stringArg(args, "code") ?? "?"}`;
         case "onlinejs.compose":
-            return `编排并发布表单脚本 customScript（模型 ${schemaCode ?? "?"} / 表单 ${stringArg(args, "sheetCode") ?? "?"}）`;
+            return `编排并发布表单脚本 customScript（模型 ${schemaCode ?? "?"} / 表单 ${stringArg(args, "sheetCode") ?? `sheetCodeFromSchema:${String(outcome?.readback?.sheetCodeFromSchema ?? schemaCode ?? "?")}`}）`;
         case "service.register":
             return `注册后端服务 ${stringArg(args, "serviceCode") ?? "?"}`;
         case "service.delete":

package/dist/lanes/field.js

@@ -134,6 +134,10 @@ function childSchemaCodes(rows) {
     const codes = new Set(rows.map((row) => String(row.code ?? row.propertyCode ?? "")));
     return codes.has("parentId") && codes.has("sortKey");
 }
+function isSystemFieldCode(code) {
+    const value = String(code ?? "");
+    return SYSTEM_FIELD_CODES.has(value) || value === "parentId" || value === "sortKey";
+}
 /**
  * r17 (2026-10-25, live + decompiled A/B): a FORMULA field CANNOT aggregate its
  * own model's child table. `BizPropertyManagerImpl.publishFormula` rewrites
@@ -232,8 +236,10 @@ export function registerFieldLane(tools) {
                 // Round 4 (ADR 0005): read-side annotation for stored scale-less
                 // NUMERICAL landmines (the platform accepted them for years).
                 const scaleWarning = numericalScaleWarning(type, options);
+                const fieldCode = row.code ?? row.propertyCode;
+                const system = isSystemFieldCode(fieldCode);
                 return {
-                    code: row.code ?? row.propertyCode,
+                    code: fieldCode,
                     name: row.name,
                     ...(redundantNameI18n(row.name_i18n, row.name) ? {} : typeof row.name_i18n === "string" ? { name_i18n: row.name_i18n } : {}),
                     type: row.type ?? row.propertyType,
@@ -261,7 +267,8 @@ export function registerFieldLane(tools) {
                     // readback.committed。
                     ...(Object.prototype.hasOwnProperty.call(row, "propertyEmpty") ? { propertyEmpty: row.propertyEmpty } : {}),
                     ...(options !== undefined ? { options } : {}),
-                    ...(scaleWarning !== undefined ? { shapeWarning: scaleWarning } : {}),
+                    ...(scaleWarning !== undefined ? { shapeWarning: scaleWarning, ...(system ? { origin: "system" } : {}) } : {}),
+                    ...(system && scaleWarning === undefined ? { origin: "system" } : {}),
                 };
             });
             // Projection: ask for one field (`--code`) or a named set (`--fields`) so a
@@ -281,7 +288,7 @@ export function registerFieldLane(tools) {
             // does this model have" paid for noise it then had to filter. `all:true`
             // restores the previous full list (uses the SAME SYSTEM_FIELD_CODES set the
             // list-view/form scaffolds already filter with).
-            const visible = args.all === true ? selected : selected.filter((field) => !SYSTEM_FIELD_CODES.has(String(field.code)));
+            const visible = args.all === true ? selected : selected.filter((field) => !isSystemFieldCode(field.code));
             const projected = detailed
                 ? visible
                 : visible.map((field) => {
@@ -306,6 +313,7 @@ export function registerFieldLane(tools) {
                         ...(Array.isArray(subColumns) && subColumns.length > businessCodes.length ? { systemSubColumnCount: subColumns.length - businessCodes.length } : {}),
                         ...(conditions.length > 0 ? { conditions } : {}),
                         ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
+                        ...(field.origin !== undefined ? { origin: field.origin } : {}),
                     };
                 });
             return {
@@ -363,6 +371,7 @@ export function registerFieldLane(tools) {
                             ...(Array.isArray(field.subColumns) ? { subColumns: field.subColumns } : {}),
                             ...(conditions.length > 0 ? { conditions } : {}),
                             ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
+                            ...(field.origin !== undefined ? { origin: field.origin } : {}),
                         };
                     }),
                     hint: "字段详情（options/subSchema）用 omc call field.list --args '{\"schemaCode\":\"...\",\"published\":true,\"code\":\"<field>\"}'",

package/dist/lanes/list-view-contract.js

@@ -12,7 +12,7 @@ export const LIST_VIEW_WIRE = Object.freeze({
     configureDefault: "code omitted means the default view (code=schemaCode)",
     configureColumns: "query/get then query/update: for each fieldCodes entry, append a missing column as visible, or repair an existing column's name/propertyType/displayFormat/visible in place (never skip an already-present column), then query/get readback; propertyType comes from published field metadata; NUMERICAL displayFormat is derived from the field's 0-based `options.scale` (0=integer,1=1dp,2=2dp,3=3dp…8=8dp) through the platform parseNumber table ({0:1,1:2,2:3,3:11,4:12,23:…, percent 0..:4/5/6/13/14/27..30, currency ¥ 2dp..:7/15/16/31..34} — verified live: scale 2 → displayFormat 3 = 2 decimals) and DATE displayFormat from options.format (1=yyyy-MM-dd,2=datetime,3=minute,4=yyyy-MM); the readback columns array carries {propertyCode,propertyType,displayFormat,visible,sumType} and added/updated name the fieldCodes touched",
     configureSorts: "sorts -> querySorts [{propertyCode,propertyType,direction,sortKey,clientType}]; direction SortDirectionType numeric ASC(1)/DESC(2); omitted leaves the existing sorts untouched, provided replaces them",
-    configureConditions: "conditions -> queryConditions [{propertyCode,propertyType,displayType,filterType,defaultValue,options,startValue,endValue,shortcutFilter,choiceType,dateType,accurateSearch,showNull,includeSubData,buildTreeBy,visible}]; filterType is the comparison OPERATOR (QueryFilterType STRING enum: Eq/NotEq/Gt/Lt/Gte/Lte/Like/NotLike/IsNull/IsNotNull/In/NotIn/Between/NotBetween/Of/NotOf/…; omitted → the platform default for the propertyType; aliases operator/op and legacy options.op); displayType INPUT(0)/RADIO(1)/CHECKBOX(2)/SELECT(3)/RANGE(4); choiceType SELECT(1)/POPUP(2)/TREE_LEFT(3); options is a JSON string (decoded on readback); conditionReadback is equivalent only for field-by-field equality, otherwise coerced with from/to details; viewConditionsAppliedRest:false records that REST data.list --queryCode does not apply fixed conditions",
+    configureConditions: "conditions -> queryConditions [{propertyCode,propertyType,displayType,filterType,defaultValue,options,startValue,endValue,shortcutFilter,choiceType,dateType,accurateSearch,showNull,includeSubData,buildTreeBy,visible}]; minimum --param shape: {\"conditions\":[{\"propertyCode\":\"<code>\",\"filterType\":\"Eq\",\"defaultValue\":<value>}]}; filterType is the comparison OPERATOR (QueryFilterType STRING enum: Eq/NotEq/Gt/Lt/Gte/Lte/Like/NotLike/IsNull/IsNotNull/In/NotIn/Between/NotBetween/Of/NotOf/…; omitted → the platform default for the propertyType; aliases operator/op and legacy options.op); displayType INPUT(0)/RADIO(1)/CHECKBOX(2)/SELECT(3)/RANGE(4); choiceType SELECT(1)/POPUP(2)/TREE_LEFT(3); options is a JSON string (decoded on readback); conditionReadback is equivalent only for field-by-field equality, otherwise coerced with from/to details; viewConditionsAppliedRest:false records that REST data.list --queryCode does not apply fixed conditions",
     configureConditionMap: "queryConditionMap {<schemaCode>: queryConditions[]} is read-derived (query/get with a formCode child-table filter); BizQueryDetailConfig persists queryConditions/querySorts only, so the map is not a configure input",
     configureActions: "actions -> queryActions [{actionCode,name,icon,queryActionType,systemAction,serviceCode,serviceMethod,customService,associationCode,associationType,sortKey}]; queryActionType QueryActionType numeric QUERY(1)/ADD(2)/.../BATCH_SUBMIT(23); associationType QueryActionRelativeType numeric BIZSHEET(0)/WORKFLOW(1); associationCode/associationType are the JSON names of the DTO fields relativeCode/queryActionRelativeType (@JsonProperty); omitted leaves the existing actions untouched, provided MERGES into the effective set by actionCode (live 2026-09-17: query/update replaces-then-re-adds the submitted list, so a merge keeps the platform's built-in 新增/删除/导入/导出 and updates a matching actionCode — replaceActions:true restores the authoritative full set, defaultActions:true re-seeds the platform default set); query/get auto-injects default actions (qr_code/batch_print/batch_update/import_attachment/export_attachment/batch_submit) and query/update resets sortKey to i+1",
     configurePresentation: "presentation -> queryPresentation {clientType,htmlJson,actionsJson,columnsJson,queryViewDataSource,schemaRelations,options}; htmlJson/actionsJson/columnsJson JSON strings are decoded once before render-shape validation (html element tagName+attrs, action actionCode/name/icon, column propertyCode/propertyType); invalid input refuses with listview-presentation-render-invalid before wire and is never double-encoded; clientType is forced to PC by query/update; schemaRelations is platform-derived from the queryColumns tree (resolveRelations) and overwrites your input; a non-empty htmlJson updates the environment record, which query/delete cleans up; omitted leaves the existing presentation untouched (the read-face object must be echoed, because saveBizQueryDetail removes every presentation whose clientType matches before re-adding), provided replaces it",

package/dist/lanes/list-view.js

@@ -920,7 +920,15 @@ export function registerListViewLane(tools) {
                         : `omc call field.list --args '${JSON.stringify({ schemaCode: args.schemaCode, published: true })}'`,
                 });
             }
-            return { wouldChange: true, summary: `即将配置列表视图 ${args.schemaCode}/${code} 的列` };
+            const normalizedFieldCodes = args.fieldCodes.map((ref) => resolveFieldRef(fieldRows, ref)?.code ?? ref);
+            return {
+                wouldChange: true,
+                summary: `即将配置列表视图 ${args.schemaCode}/${code} 的列`,
+                fieldCodes: normalizedFieldCodes.length > 20
+                    ? { count: normalizedFieldCodes.length, sha256: createHash("sha256").update(JSON.stringify(normalizedFieldCodes)).digest("hex"), note: "超过 20 项才摘要；顺序复核请分批配置" }
+                    : normalizedFieldCodes,
+                ...(args.conditions !== undefined ? { conditions: args.conditions } : {}),
+            };
         },
         rollback: listviewRollbackSpec("listview.configure"),
     });

package/dist/lanes/online-js.js

@@ -81,11 +81,12 @@ export function registerOnlineJsLane(tools) {
                 sheetCode,
                 present: draft.present || published.present,
                 sheetPublished: sheet.published === true,
-                draft: { ...draft, ...(draft.script === null ? { note: "草稿无 customScript 脚本（尚未 compose 或被清空）" } : {}) },
-                published: { ...published, ...(published.script === null ? { note: "发布面无 customScript 脚本" } : {}) },
+                draft: { ...draft, scriptSha256: draft.sha256 || undefined, ...(draft.script === null ? { note: "草稿无 customScript 脚本（尚未 compose 或被清空）" } : {}) },
+                published: { ...published, scriptSha256: published.sha256 || undefined, ...(published.script === null ? { note: "发布面无 customScript 脚本" } : {}) },
                 ...(draft.sha256 !== "" && published.sha256 !== ""
                     ? { draftPublishedInSync: draft.sha256 === published.sha256 }
                     : {}),
+                scriptSha256: published.sha256 || draft.sha256 || undefined,
                 hint: "脚本是 innerHTML 原文（含平台 (function(form){…}) 生命周期包装——那就是平台存储形态）；改脚本用 onlinejs.compose（默认 INCREMENTAL 并入，replace:true 整段替换）；同文件修订直接 replace:true 传完整脚本",
             };
         }, {
@@ -125,6 +126,8 @@ export function registerOnlineJsLane(tools) {
                 throw new Error("remove:true 不能与非空 source 同时传入");
             // r28e F9：和同 lane 其它工具一致——省略 sheetCode 即模型码槽位。
             const targetSheetCode = args.sheetCode ?? args.schemaCode;
+            // Keep the human summary truthful when the caller relies on the documented
+            // default (sheetCode omitted): it is the model's default form slot.
             // 1. Read the existing draftHtmlJson.
             const current = await wireCall(session, { path: ENDPOINTS.sheetGet, query: { schemaCode: args.schemaCode, sheetCode: targetSheetCode } });
             const existingSheet = (current.data ?? null);
@@ -215,6 +218,7 @@ export function registerOnlineJsLane(tools) {
                 return {
                     performed: { errcode: 0, published },
                     readback: {
+                        ...(args.sheetCode === undefined ? { sheetCodeFromSchema: targetSheetCode } : {}),
                         publishedSha256,
                         draftSha256,
                         draftPublishedInSync,
@@ -223,11 +227,14 @@ export function registerOnlineJsLane(tools) {
                         scriptElementMeaning: "skeleton 空槽不等于存在脚本",
                         composeMode: args.replace === true ? "replace" : "incremental",
                         ...(removing ? { removed: true } : {}),
+                        scriptSha256: customScriptSha256,
                         customScriptSha256,
+                        scriptSha256DeprecatedAlias: "customScriptSha256",
                         customScriptBytes: Buffer.byteLength(composedScript, "utf8"),
                         composedDraftBytes: Buffer.byteLength(composedDraftHtml, "utf8"),
                         publishedHtmlBytes: Buffer.byteLength(publishedRaw, "utf8"),
                         htmlRenderCompat,
+                        verifyWith: "onlinejs.get → published.scriptSha256",
                         hint: "summary 模式不回原文；要脚本原文用 onlinejs.get，要完整布局用 artifact 或 form.get --full",
                     },
                 };
@@ -235,6 +242,7 @@ export function registerOnlineJsLane(tools) {
             return {
                 performed: { errcode: 0, published },
                 readback: {
+                    ...(args.sheetCode === undefined ? { sheetCodeFromSchema: targetSheetCode } : {}),
                     // Dedupe: after a successful publish the draft and the published
                     // face are the same bytes, and the script also rides inside them.
                     // Return the composed payload ONCE (composedDraftHtmlJson keeps the
@@ -255,6 +263,7 @@ export function registerOnlineJsLane(tools) {
                     composeMode: args.replace === true ? "replace" : "incremental",
                     ...(removing ? { removed: true } : {}),
                     htmlRenderCompat,
+                    verifyWith: "onlinejs.get → published.scriptSha256",
                     portalVerificationPlan: ["在门户打开该表单", "触发已绑定的在线 JS 事件", "检查事件产生的副作用字段或校验提示"],
                 },
             };

package/dist/lanes/workflow.js

@@ -3506,6 +3506,7 @@ export function registerWorkflowLane(tools) {
                 fullName: row.fullName ?? null,
                 corpId: row.corpId ?? null,
                 code: row.code ?? null,
+                ...(row.origin === "system-preset" || row.defaultPermission === true || row.preset === true ? { origin: "system-preset" } : row.origin === "user" ? { origin: "user" } : {}),
             }));
             const actor = await resolvePermissionActor(session);
             const effectiveFor = {
@@ -3520,6 +3521,7 @@ export function registerWorkflowLane(tools) {
                 note: actor.isAdmin
                     ? "当前登录人是平台管理员：发起成功不证明白名单生效。要用非管理员账号另建环境验证。"
                     : "本读面只回配置行；membership 命中需非管理员实发 data.submit 才能证伪。",
+                ...(actor.isAdmin ? { verifiable: false, verifyWith: `以普通账号凭据跑同查询：omc call workflow.permissions --env <env> --args '${JSON.stringify({ workflowCode })}'` } : {}),
             };
             return {
                 workflowCode,

package/dist/mcp-graph.js

@@ -47,7 +47,7 @@ const INSTRUCTIONS_INDEXED = [
     "- 改名/删除/重构一个 字段(field)/模型(model)/服务(service) 前，先用 omc_graph_explore 查引用与影响面；查\"谁引用了 X\"也走它。",
     "- 索引只覆盖：业务规则（methodMapping/targetObjectCode）、数据规则（propertyCodes 与公式 {字段}）、视图（列/排序/条件）。**不含**规则条件叶子与流程绑定。",
     "- search 语义：只匹配规则 code+name 的**词首**（中文子串不命中：搜「预算」匹配不到「增加预算」）。",
-    "答案带 freshness/pulledAtIso——索引是快照，平台侧改动后需 CLI 重建：omc graph pull --env <env>（只读远端，约 1 分钟）。",
+    "答案带 freshness/pulledAtIso——索引是快照，平台侧改动后需 CLI 重建：omc graph pull --env <env>（只读远端，约 1 分钟）。MCP 按注册时的 --path 读库；CLI pull 必须把 --path 指到本目录才能写入本库。",
     "索引绑定单一环境（environmentName）；查别的环境先重新 pull。",
 ].join("\n");
 const INSTRUCTIONS_NO_INDEX = [
@@ -60,7 +60,7 @@ const EXPLORE_TOOL = {
     description: [
         "一次查全一个目标的引用与影响面（本地索引，毫秒级）。",
         "输入 query 可为业务名（实体 name+code 子串）或规则 code+name 词首；也可直接给字段/模型/服务 code。kind 可选 field|model|service，不给则三种都查。",
-        "返回 {index(freshness), references:{kind:[{schemaCode,ruleCode,nodeCode,nodeType,via}]}, impact:{kind:totals}, search:{matches:{model,field,service},rules}}。",
+        "返回 {index(freshness), references:{kind:[{schemaCode,ruleCode,nodeCode,nodeType,via,referrer,isSelf}]}, impact:{kind:totals}, search:{matches:{model,field,service},rules}}。",
         "references/impact 支持 offset+limit 分页；truncated 时按返回的 nextOffset 继续调用。实体分页结果带 nextCall；分页不会改变 resolved。字段同名时请用 schemaCode 消歧。",
         "改/删/重命名任何字段、模型、服务之前必查；找\"关于 X 的规则\"拿 code 也走这里。",
         "索引不含规则条件叶子与流程绑定；freshness=partial 时命中可能不完整（答案里有 gapWarning）。",
@@ -69,8 +69,11 @@ const EXPLORE_TOOL = {
         type: "object",
         properties: {
             query: { type: "string", description: "业务名（实体 name+code 子串）、字段/模型/服务 code，或规则检索词（规则 code+name 词首匹配）" },
+            queries: { type: "array", items: { type: "string" }, description: "实体面多条件检索；与 query 并存时合并，match 默认 any" },
+            match: { type: "string", enum: ["all", "any"], description: "queries[] 的模型∪字段所属模型求交/并" },
             kind: { type: "string", enum: [...KINDS], description: "限定一种引用种类；省略则 field/model/service 全查" },
             schemaCode: { type: "string", description: "限定字段所属模型；也可用于校验模型。" },
+            applicationCode: { type: "string", description: "限定应用；仅返回该应用的实体与引用" },
             env: { type: "string", description: "期望的环境名；与索引所属环境不一致时会拒绝（防跨环境误答）" },
             offset: { type: "integer", minimum: 0, description: "引用/实体结果起始偏移；truncated 时使用 nextOffset" },
             limit: { type: "integer", minimum: 1, maximum: MATCH_CAP, description: "每类结果最多返回多少条（默认 50）" },
@@ -125,8 +128,8 @@ function entityInventory() {
     const db = new DatabaseSync(graphDbPath(), { readOnly: true });
     try {
         return [
-            ...db.prepare("SELECT schema_code, name FROM models").all().map((r) => ({ kind: "model", schemaCode: r.schema_code, code: r.schema_code, name: r.name ?? "" })),
-            ...db.prepare("SELECT schema_code, code, name FROM fields").all().map((r) => ({ kind: "field", schemaCode: r.schema_code, code: r.code, name: r.name ?? "" })),
+            ...db.prepare("SELECT schema_code, name, application_code FROM models").all().map((r) => ({ kind: "model", schemaCode: r.schema_code, code: r.schema_code, name: r.name ?? "", applicationCode: r.application_code ?? undefined })),
+            ...db.prepare("SELECT schema_code, code, name, application_code FROM fields").all().map((r) => ({ kind: "field", schemaCode: r.schema_code, code: r.code, name: r.name ?? "", applicationCode: r.application_code ?? undefined })),
             ...db.prepare("SELECT code, name FROM services").all().map((r) => ({ kind: "service", code: r.code, name: r.name ?? "" })),
         ];
     }
@@ -159,12 +162,16 @@ export async function executeGraphTool(name, rawArgs) {
         }
         if (name === EXPLORE_TOOL.name) {
             const query = typeof args.query === "string" ? args.query.trim() : "";
-            if (!query)
-                return toolError("query 不能为空");
+            const queryList = Array.isArray(args.queries) ? args.queries.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean) : [];
+            const queries = queryList.length > 0 ? queryList : query ? [query] : [];
+            if (queries.length === 0)
+                return toolError("query 或 queries 不能为空");
+            const primaryQuery = queries[0];
             const kind = args.kind === undefined ? undefined : String(args.kind);
             if (kind !== undefined && !KINDS.includes(kind))
                 return toolError(`kind 必须是 ${KINDS.join("|")} 之一`);
             const schemaCode = typeof args.schemaCode === "string" && args.schemaCode.trim() ? args.schemaCode.trim() : undefined;
+            const applicationCode = typeof args.applicationCode === "string" && args.applicationCode.trim() ? args.applicationCode.trim() : undefined;
             if (schemaCode && kind !== "field" && kind !== "model")
                 return toolError("schemaCode 仅适用于 kind=field|model");
             const status = readGraphStatus();
@@ -179,11 +186,34 @@ export async function executeGraphTool(name, rawArgs) {
             const impact = {};
             // Resolve from an unpaged search. The result page is presentation only;
             // otherwise offset=2 can silently change the subject being inspected.
-            const search = searchGraphRules(query, limit, offset);
-            const resolvedSearch = searchGraphRules(query, MATCH_CAP, 0);
-            const loweredQuery = query.toLocaleLowerCase();
+            const search = searchGraphRules(primaryQuery, limit, offset);
+            const scopedSearch = applicationCode ? {
+                ...search,
+                matches: {
+                    ...search.matches,
+                    model: { ...search.matches.model, items: search.matches.model.items.filter((row) => row.applicationCode === applicationCode) },
+                    field: { ...search.matches.field, items: search.matches.field.items.filter((row) => row.applicationCode === applicationCode) },
+                },
+            } : search;
+            const resolvedSearch = searchGraphRules(primaryQuery, MATCH_CAP, 0);
+            const loweredQuery = primaryQuery.toLocaleLowerCase();
             const allCandidates = entityInventory().filter((r) => (r.code.toLocaleLowerCase().includes(loweredQuery) || r.name.toLocaleLowerCase().includes(loweredQuery)) &&
-                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)));
+                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)) &&
+                (!applicationCode || r.kind === "service" || r.applicationCode === applicationCode));
+            const candidatesForQuery = (term) => entityInventory().filter((r) => (r.code.toLocaleLowerCase().includes(term.toLocaleLowerCase()) || r.name.toLocaleLowerCase().includes(term.toLocaleLowerCase())) &&
+                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)) &&
+                (!applicationCode || r.kind === "service" || r.applicationCode === applicationCode));
+            const perQueryModels = queries.map((term) => new Set(candidatesForQuery(term).filter((r) => r.kind === "model").map((r) => r.schemaCode)));
+            const perQueryFieldModels = queries.map((term) => new Set(candidatesForQuery(term).filter((r) => r.kind === "field").map((r) => r.schemaCode)));
+            const combine = (sets) => {
+                if (sets.length === 0)
+                    return new Set();
+                if (args.match === "all")
+                    return new Set([...sets[0]].filter((value) => sets.every((set) => set.has(value))));
+                return new Set(sets.flatMap((set) => [...set]));
+            };
+            const hitModels = combine(perQueryModels);
+            const hitFieldModels = combine(perQueryFieldModels);
             const typedCandidates = kind ? allCandidates.filter((r) => r.kind === kind) : allCandidates;
             const fieldCandidates = kind === "field" ? typedCandidates : allCandidates.filter((r) => r.kind === "field");
             const exactSame = fieldCandidates.filter((r) => r.code === query);
@@ -232,7 +262,7 @@ export async function executeGraphTool(name, rawArgs) {
                 }
             }
             const decorate = (row) => withMatchedOn({ ...row, ...(row.schemaCode && row.code === undefined ? { code: row.schemaCode } : {}) }, query);
-            const decoratedMatches = { ...search.matches, model: { ...search.matches.model, items: search.matches.model.items.map(decorate) }, field: { ...search.matches.field, items: search.matches.field.items.map(decorate) }, service: { ...search.matches.service, items: search.matches.service.items.map(decorate) } };
+            const decoratedMatches = { ...scopedSearch.matches, model: { ...scopedSearch.matches.model, items: scopedSearch.matches.model.items.map(decorate) }, field: { ...scopedSearch.matches.field, items: scopedSearch.matches.field.items.map(decorate) }, service: { ...scopedSearch.matches.service, items: scopedSearch.matches.service.items.map(decorate) } };
             const noEntityHit = search.matches.model.total === 0 && search.matches.field.total === 0 && search.matches.service.total === 0;
             const composite = /\s|\+|,|\b(?:AND|OR)\b/i.test(query);
             const searchNote = "实体检索：业务名/实体 name+code 使用子串匹配。\n规则检索：规则 code+name 使用词首匹配（中文子串不命中）。";
@@ -242,8 +272,12 @@ export async function executeGraphTool(name, rawArgs) {
             return toolResult({
                 status: "ok",
                 query,
+                ...(queries.length > 1 ? { queries, match: args.match === "all" ? "all" : "any" } : {}),
+                hitModels: [...hitModels],
+                hitFields: [...hitFieldModels].flatMap((schema) => entityInventory().filter((r) => r.kind === "field" && r.schemaCode === schema).map((r) => ({ schemaCode: schema, code: r.code, name: r.name }))),
                 found: resolvedEntity !== undefined,
                 ...(resolvedEntity ? { resolved: { kind: resolvedEntity.kind, schemaCode: "schemaCode" in resolvedEntity ? resolvedEntity.schemaCode : "", code: resolvedEntity.code, matchedOn: { on: resolvedEntity.name.includes(query) ? "name" : "code", fragment: query } } } : {}),
+                ...(resolvedEntity ? { otherCandidates: allCandidates.filter((r) => r.code !== resolvedEntity.code).slice(0, 5).map((r) => ({ schemaCode: r.schemaCode ?? r.code, name: r.name })) } : {}),
                 ...(ambiguous ? { ambiguous: true, candidates: exactSame.map((r) => ({ schemaCode: r.schemaCode, code: r.code, name: r.name })) } : {}),
                 ...(kind !== undefined ? { kind } : {}),
                 index,
@@ -253,7 +287,7 @@ export async function executeGraphTool(name, rawArgs) {
                 ...(nextCall ? { nextCall } : {}),
                 ...(noEntityHit && composite ? { unsupportedQuerySyntax: true, hint: "组合检索暂不支持，请拆词单查后求交" } : {}),
                 ...(noEntityHit ? { suggestions: suggestions(query), hint: "可尝试 suggestions 中的实体 code/name；引用明细请使用匹配 code 查 references/impact" } : {}),
-                searchNote: `${searchNote}${paginationNote}`,
+                searchNote: `${searchNote}${paginationNote}${queries.length > 1 ? " 规则面（词首匹配）不参与 queries[] 的实体求交。" : ""}`,
                 ...(search.note ? { searchNote: `${searchNote}\n${search.note}` } : {}),
                 // 旧句「索引不含规则条件叶子与流程绑定」漏了表单与流程权限（r35a-F4 实证
                 // 探针据此差点误删被表单引用的字段）。改为指向结构化 coverage，不再靠散文。

package/dist/model-purge.js

@@ -324,6 +324,7 @@ export async function cmdModelPurge(args) {
     const result = {
         status,
         schemaCode,
+        verdict: plan.modelExists && !failed ? "cascading" : "clean",
         ...(plan.workflowCode !== undefined ? { workflowCode: plan.workflowCode } : {}),
         deletedInstances: steps.filter((step) => step.step.startsWith("workflow.delete_instance:") && step.status === "ok").length,
         ...(unremovableInstances.length > 0 ? { unremovableInstances } : {}),

package/dist/residue.js

@@ -7,6 +7,15 @@ import { SessionManager } from "./session-manager.js";
 import { makeToolContext } from "./context.js";
 import { emitInvalid, emitResult } from "./command-transport.js";
 const MAX_ITEMS = 20;
+const SYSTEM_RULE_NAMES = new Set(["Available", "Cancel", "Create", "Delete", "GetList", "Load", "Update"]);
+function residueOrigin(row, faceName) {
+    if (row.defaultRule === true || row.preset === true || row.system === true || row.systemPreset === true)
+        return "system-preset";
+    if (faceName === "rule" && SYSTEM_RULE_NAMES.has(nameOf(row, codeOf(row))))
+        return "system-preset";
+    // Do not guess for datarules or otherwise unmarked rows.
+    return row.origin === "system-preset" || row.origin === "user" ? row.origin : undefined;
+}
 function face(faceName, rows, extra = {}) {
     return { face: faceName, ...extra, count: rows.length, items: rows.slice(0, MAX_ITEMS) };
 }
@@ -64,8 +73,8 @@ async function deepFaces(session, model) {
         // A missing form is an absent online-js face, not a scan failure.
     }
     return [
-        face("rule", rules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)) })), { model: schemaCode }),
-        face("datarule", datarules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)) })), { model: schemaCode }),
+        face("rule", rules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)), ...(residueOrigin(row, "rule") ? { origin: residueOrigin(row, "rule") } : {}) })), { model: schemaCode }),
+        face("datarule", datarules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)), ...(residueOrigin(row, "datarule") ? { origin: residueOrigin(row, "datarule") } : {}) })), { model: schemaCode }),
         face("onlinejs", online, { model: schemaCode }),
     ];
 }
@@ -92,13 +101,21 @@ export async function scanResidues(session, prefix, options = {}) {
         for (const model of models)
             faces.push(...await deepFaces(session, model));
     }
+    const systemPresetCount = faces.reduce((sum, item) => sum + item.items.filter((row) => row.origin === "system-preset").length, 0);
+    const userResidues = faces.reduce((sum, item) => sum + item.items.filter((row) => row.origin !== "system-preset").length, 0);
     const totalResidues = faces.reduce((sum, item) => sum + item.count, 0);
+    const modelFace = faces.filter((item) => item.face === "model");
+    const hasModelResidue = modelFace.some((item) => item.count > 0);
+    const hasOtherResidue = faces.some((item) => item.face !== "model" && item.count > 0);
+    const pendingCascade = !hasModelResidue && hasOtherResidue;
     return {
         prefix,
         faces,
         totalResidues,
-        clean: totalResidues === 0,
-        note: "report 面暂停维护未扫描；workflow 模板跟模型走（模型删即删）",
+        clean: userResidues === 0 && !pendingCascade,
+        ...(systemPresetCount > 0 ? { systemPresetCount } : {}),
+        ...(pendingCascade ? { pendingCascade: true } : {}),
+        note: pendingCascade ? "模型已不存在但仍有级联面命中：级联窗口内，等 40-60s 重跑，幂等" : "report 面暂停维护未扫描；workflow 模板跟模型走（模型删即删）",
     };
 }
 export async function cmdResidue(prefix, options, transport) {

package/dist/rule-when.js

@@ -34,10 +34,65 @@ function parseWhen(raw) {
     const value = /^-?\d+(\.\d+)?$/.test(rawValue.trim()) ? Number(rawValue.trim()) : rawValue.trim();
     return { field, op, value };
 }
+/**
+ * 人读层只投影图中真正存在的节点；它不是另一套编译结果。
+ * `matchBy` 明确区分执行门（dataCondition）与选行（filterCondition），
+ * 避免 dry-run 只给 sha256 时把两者误认为同一种条件。
+ */
+export function compiledRuleSummary(nodeGraph) {
+    const nodes = Array.isArray(nodeGraph.nodes) ? nodeGraph.nodes : [];
+    return nodes
+        .filter((node) => !!node && typeof node === "object" && nodeTypeOf(node) !== undefined && nodeTypeOf(node) !== "START" && nodeTypeOf(node) !== "END")
+        .map((node) => {
+        const dataCondition = node.dataCondition;
+        const filterCondition = node.filterCondition;
+        const rawActions = Array.isArray(node.dataActions) ? node.dataActions : Array.isArray(node.actions) ? node.actions : [];
+        const currentRowFilter = filterCondition !== undefined && conditionText(filterCondition) === "id=id";
+        const matchBy = dataCondition !== undefined
+            ? `dataCondition: ${conditionText(dataCondition)}`
+            : filterCondition !== undefined && !currentRowFilter
+                ? `filterCondition: ${conditionText(filterCondition)}`
+                : "always";
+        const actions = rawActions
+            .filter((action) => !!action && typeof action === "object")
+            .map((action) => {
+            const field = action.targetDataItem ?? action.field ?? action.targetField;
+            const value = action.value ?? action.currentDataItemValue;
+            return {
+                ...(field !== undefined ? { field } : {}),
+                ...(value !== undefined ? { value } : {}),
+                ...(action.ruleValueType !== undefined ? { valueType: action.ruleValueType } : {}),
+                ...(action.ruleActionType !== undefined ? { actionType: action.ruleActionType } : {}),
+            };
+        });
+        return { nodeType: nodeTypeOf(node), matchBy, actions };
+    });
+}
+function nodeTypeOf(node) {
+    return typeof node.nodeType === "string" ? node.nodeType : undefined;
+}
+function conditionText(condition) {
+    if (!condition || typeof condition !== "object")
+        return "always";
+    const value = condition;
+    const groups = Array.isArray(value.conditionGroup) ? value.conditionGroup : Array.isArray(value.mainConditions) ? value.mainConditions : [];
+    const leaves = Array.isArray(groups[0]) ? groups[0] : groups;
+    const text = leaves
+        .filter((leaf) => !!leaf && typeof leaf === "object")
+        .map((leaf) => {
+        const field = leaf.currentSchemaDataItem ?? leaf.targetSchemaDataItem ?? "?";
+        const op = leaf.ruleDataConditionType ?? leaf.ruleConditionType ?? "?";
+        const operators = { EQ: "=", NEQ: "!=", GT: ">", LT: "<", GTEQ: ">=", LTEQ: "<=", CT: "~=", NCT: "!~" };
+        const right = leaf.value
+            ?? (leaf.currentDataItemValue !== undefined ? `{${leaf.currentDataItemValue}}` : undefined)
+            ?? (leaf.targetSchemaDataItem !== undefined ? leaf.currentSchemaDataItem : "?");
+        return `${String(field)}${operators[String(op)] ?? String(op)}${String(right)}`;
+    })
+        .join(" AND ");
+    return text || "always";
+}
 /** 编译 --when/--then DSL 为设计器验证形状的规则图（导出供测试断言）。 */
 export function composeRuleWhenGraph(options) {
-    if (options.when.length === 0)
-        throw new Error("至少给一个 --when 条件；无条件更新整表是 bench23 病灶（空 mainConditions=无条件更新全部行）");
     if (options.then.length === 0)
         throw new Error("至少给一个 --then 动作");
     const leaves = [];
@@ -81,7 +136,7 @@ export function composeRuleWhenGraph(options) {
                     // UPDATE.filterCondition selects rows; it is not an execution gate.
                     // Keep the trigger row as the default target and put --when on the
                     // platform's real execution-gate field (dataCondition).
-                    dataCondition: { conditionGroup: [leaves] },
+                    ...(leaves.length > 0 ? { dataCondition: { conditionGroup: [leaves] } } : {}),
                     filterCondition: { mainConditions: [[{ targetSchemaDataItem: "id", ruleConditionType: "EQ", ruleValueType: "DYNAMIC", currentSchemaDataItem: "id" }]], sheetConditions: [] },
                     dataActions: actions },
                 { nodeCode: "End", nodeType: "END" },
@@ -126,7 +181,7 @@ export async function cmdRuleWhen(args) {
     const name = flag("--name");
     const environment = flag("--env") ?? flag("--environment");
     const apply = args.includes("--apply");
-    const usage = '用法：omc rule-when --schema <模型> --on create|update --when "字段=值" [--when ...可多个,AND] --then "set:字段=值|{来源字段}|{公式}" [--then ...] [--apply]\n触发时机只有 create|update（**没有 submit**；“提交时”用 create 或 update）。条件操作符：= != > < >= <= ~=（包含） !~（不包含）。默认 dry-run；--apply 保存并发布（rule.enable 仍需显式执行）。';
+    const usage = '用法：omc rule-when --schema <模型> --on create|update [--when "字段=值" ...] --then "set:字段=值|{来源字段}|{公式}" [--then ...] [--apply]\n触发时机只有 create|update（**没有 submit**；“提交时”用 create 或 update）。条件操作符：= != > < >= <= ~=（包含） !~（不包含）。省略 --when 表示 always（仍按当前 _input.id 定位，不更新整表）。默认 dry-run；--apply 保存并发布（rule.enable 仍需显式执行）。';
     const invalid = (message) => {
         writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: `${message}\n${usage}`, retryable: false }));
         return CLI_EXIT_CODES.invalidInput;
@@ -160,8 +215,21 @@ export async function cmdRuleWhen(args) {
     const scopedResult = {
         ...result,
         rowScope,
+        compiled: compiledRuleSummary(result && typeof result.nodeGraph === "object" && result.nodeGraph !== null
+            ? result.nodeGraph
+            : createArgs.nodeGraph),
+        detailReadHint: {
+            detailFile: "cat <detailFile>",
+            detailArtifactId: "omc artifact get <detailArtifactId>",
+        },
     };
     const classified = classifyResult(result);
+    if (apply && classified.status === "ok") {
+        scopedResult.effectiveAfter = {
+            note: "规则保存后生效存在延迟；改数据后以读回的 changedFields 为准，不要以第一次读回判未生效",
+            verifyHint: "同一条 data.update 后 data.load 复核",
+        };
+    }
     writeEnvelope(envelope(classified.status, scopedResult, request, classified.error));
     if (apply && classified.status === "ok")
         process.stderr.write("[omc] 前台生效验证清单（后端通过≠门户生效）：1) omc call rule.enable 启用；2) 造一条命中 --when 的测试数据提交；3) 门户打开该记录核对 --then 字段已变更；4) 再造一条不命中的数据确认不误改；5) 设计器打开本规则确认节点/条件显示正常。\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-cli",
-  "version": "0.6.21",
+  "version": "0.6.22",
   "description": "CloudPivot 8.6 configuration capability CLI — governed, fail-closed, coverage-manifest bounded.",
   "type": "module",
   "bin": {
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "commander": "14.0.3",
-    "omc-core": "0.6.21",
+    "omc-core": "0.6.22",
     "proper-lockfile": "4.1.2",
     "write-file-atomic": "6.0.0",
     "zod": "^3.23.8",
@@ -73,6 +73,6 @@
     "directory": "packages/omc-cli"
   },
   "optionalDependencies": {
-    "@stalfh233/omc-fake-platform": "0.6.21"
+    "@stalfh233/omc-fake-platform": "0.6.22"
   }
 }

package/skills/omc-start-here.md

@@ -29,10 +29,7 @@ be treated as a second source. Read this, then follow the topics it names.
    方法论按 `route.readSections` 逐节读：对每条 `{topic, section}` 执行 `omc help <topic> --section "<section>"`（单节 0.4–3.4KB）。`omc help <topic>` 默认只回节索引（约 1KB，含每节字节数）；**不要 `--all` 读整篇**（5–14KB，读一次就留在后续每一轮窗口）。**带着具体问题（错误码/跨能力语义/某个词）直接 `omc help --search "<词>"`**——跨全部 topic 全文检索，命中节的正文随结果内联返回，一次调用就是答案；**严禁自己写 `for t in …; do omc help $t --all | grep …` 循环**（r18 实测 12 调用/176KB，检索一次 8KB 搞定）。
 1b. **改/删/重命名既有对象前先看影响面（本地规则图索引）**：`omc graph pull --env <env>` 一次拉全平台建本地索引（增量、秒级、带锁与 gap 报告），之后 `omc graph references <service|model|field> <code>` 离线答「谁引用了它」——一调替代逐模型 `rule.get` 枚举（r30 实测影响评估手工枚举 8×rule.get，graph 一调可达）；`impact <kind> <code>` 看爆炸半径、`search <词>` 找规则 code、`status` 看索引新鲜度。索引不含规则条件叶子与流程绑定，命中后仍以 `rule.get` 原文为准。无索引时会拒绝并指路 pull。宿主已接 MCP 时用 `omc mcp-graph --path <项目根>`（工具 `omc_graph_explore`/`omc_graph_status`）。
 
-**图谱只覆盖单应用时怎么按应用盘点（只读）**：先用
-`omc call app.list` 列出应用，再用
-`omc call model.list --args '{"applicationCode":"<code>"}'` 按应用盘点模型。
-graph 索引 coverage 默认只含配置应用；coverage 未命中不等于应用或模型不存在。
+**图谱多应用覆盖时怎么盘点（只读）**：优先用 `omc graph pull --all-applications --env <env>` 建全租户索引；也可用 `--application-codes <a,b,c>` 指定应用，再用 `omc graph status` 看 coveredApplications/tenantApplications。
 1c. **写后端 Java 源码（在线开发）走工作区而不是一条条 call**：`omc programming pull --env <env> --app <appCode>` 把业务规则源码拉进 `.omc-programming/`（git 可管），改文件后 `omc programming status` → `omc programming apply [--publish]`（逐文件走编程面治理）；图形化规则转编码用 `omc programming adopt --schema <s> --rule <r>`；验证用 `omc programming test --schema <s> --rule <r>`（fixture 驱动：compile→publish→触发→断言→清理）。**平台运行时只执行已发布版**：只 save 不 publish 等于没改；publish 内部会编译并把规则切 CODING+enable。包路径/类名不得改。
 2. 写前只需读 `omc-config-draft-review`（人审门）与 `omc-five-piece-flow`（发现→草稿→权限→执行→回读）；`omc-business-configuration` 按命中的能力分节读（见 `next` 的 `readSections`），不要整篇预取。
 3. 环境名以 `omc doctor` 的「环境=」或 `.omc-env` 为准；工具不确定先用默认 `describe`/`--example`，只有单个工具缺形状才用 `--full`；`describe` 带 `exampleHint`/`recipeHint` 时优先 `--example`。