@stalfh233/omc-cli 0.6.21 → 0.6.23

package/dist/cli.js

@@ -56,7 +56,7 @@ import { planIntent, readbackIntent, applyIntent, intentWarnings } from "./inten
 import { listSkills, readSkill, readSkillOutline, readSkillSection, searchSkills, suggestHelpTopics } from "./skills.js";
 import { parseToolInput, ToolInputError } from "./tool-types.js";
 import { WireError, wireCall } from "./wire.js";
-import { DEFAULT_PULL_CONCURRENCY, GraphIndexAbsentError, GraphPullLockHeldError, MAX_PULL_CONCURRENCY, impactGraph, publishGraphPull, queryGraphReferences, readGraphStatus, searchGraphRules, } from "./graph.js";
+import { DEFAULT_PULL_CONCURRENCY, GraphIndexAbsentError, GraphPullLockHeldError, MAX_PULL_CONCURRENCY, impactGraph, publishGraphPull, queryGraphReferences, queryGraphReferencesBatch, queryGraphEdges, readGraphStatus, searchGraphRules, } from "./graph.js";
 import { cmdResidue } from "./residue.js";
 import { ENDPOINTS } from "./endpoints.js";
 import { makeToolContext } from "./context.js";
@@ -1604,14 +1604,20 @@ async function cmdIntentReadback(file, environment, transport) {
  * registry or `commands --json`. Results are candidate pointers only — plan /
  * apply / readback keep reading the live baseline.
  */
-async function cmdGraphPull(environment, concurrency, transport) {
+async function cmdGraphPull(environment, concurrency, transport, path, applicationCodes, allApplications = false) {
     const workers = concurrency ?? DEFAULT_PULL_CONCURRENCY;
     if (!Number.isSafeInteger(workers) || workers < 1 || workers > MAX_PULL_CONCURRENCY)
         return emitInvalid(transport, { message: `--concurrency 必须是 1–${MAX_PULL_CONCURRENCY} 的整数（平台负载有界；默认 ${DEFAULT_PULL_CONCURRENCY}）` });
     const context = makeToolContext({ sessions: new SessionManager(new ConfigStore(defaultPaths())) });
     try {
         const session = await context.sessions.session(environment);
-        const data = await publishGraphPull(session, workers);
+        let selected = applicationCodes;
+        if (allApplications) {
+            const apps = (await wireCall(session, { path: ENDPOINTS.applicationList, query: {} })).data;
+            const rows = Array.isArray(apps) ? apps : (apps && typeof apps === "object" && Array.isArray(apps.data) ? apps.data : []);
+            selected = rows.map((row) => String(row.appCode ?? row.code ?? "")).filter(Boolean);
+        }
+        const data = await publishGraphPull(session, workers, { ...(selected ? { applicationCodes: selected } : {}) });
         // issue#9 C4：扫到 0 模型仍回 ok，让调用者误以为索引就绪（随后 search 报
         // graph-index-absent 才发现）。0 模型 fail-fast，点名 env/applicationCode
         // 与解析来源，把「索引没建成」和「建成了但为空」分开。
@@ -1644,13 +1650,15 @@ async function cmdGraphPull(environment, concurrency, transport) {
             identityFingerprint: data.meta.identityFingerprint,
             pulledAtIso: data.meta.pulledAtIso,
             scope: data.meta.scope,
-            coverage: { applicationCodes: [data.meta.applicationCode] },
+            coverage: { applicationCodes: data.meta.coverage.applicationCodes, ...(data.meta.coverage.tenantApplications ? { tenantApplications: data.meta.coverage.tenantApplications } : {}) },
             freshness: data.gaps.length === 0 ? "complete" : "partial",
             scanned: { models: data.scanned.models, rules: data.scanned.rules, datarules: data.scanned.datarules, views: data.scanned.views, ...(data.scanned.parseFailures > 0 ? { parseFailures: data.scanned.parseFailures } : {}) },
             edges: edgesByKind,
             ...(data.gaps.length > 0 ? { gaps: { count: data.gaps.length, byKind: gapsByKind } } : {}),
             dbBytes: data.dbBytes,
             timings: data.timings,
+            dbPath: path ? `${path}/.omc/graph/graph.db` : undefined,
+            mcpHint: `MCP 工具按注册时的 --path 读库；要让 MCP 看到本次拉取：omc graph pull --path <MCP 的配置根> --env <env>`,
             nextCommand: "omc graph references <kind> <code>",
         }, transport);
     }
@@ -1663,12 +1671,16 @@ async function cmdGraphPull(environment, concurrency, transport) {
     }
 }
 function cmdGraphReferences(kind, code, transport, requestedEnvironment) {
-    if (!["service", "model", "field"].includes(kind))
-        return emitInvalid(transport, { message: "kind 必须是 service / model / field（同 rule.references 第一版边界）" });
+    if (kind !== undefined && !["service", "model", "field"].includes(kind))
+        return emitInvalid(transport, { message: "kind 必须是 service / model / field" });
     try {
-        const result = queryGraphReferences(kind, code);
+        const kinds = kind === undefined ? ["service", "model", "field"] : [kind];
+        const results = kinds.map((one) => queryGraphReferences(one, code));
+        const result = results[0];
         if (requestedEnvironment !== undefined && requestedEnvironment !== result.index.environmentName)
             return emitResult({ status: "refused", blocker: "graph-environment-mismatch", message: `索引已绑定环境 ${result.index.environmentName}，不是 ${requestedEnvironment}；请先 omc graph pull --env ${requestedEnvironment}`, index: result.index }, transport);
+        if (kind === undefined)
+            return emitResult({ status: "ok", code, index: result.index, references: Object.fromEntries(results.map((item) => [item.kind, { matches: item.matches, ...(item.coverage !== undefined ? { coverage: item.coverage } : {}), ...(item.note !== undefined ? { note: item.note } : {}) }])) }, transport);
         return emitResult({
             status: "ok",
             kind: result.kind,
@@ -1688,9 +1700,39 @@ function cmdGraphReferences(kind, code, transport, requestedEnvironment) {
         return emitThrown(error, transport);
     }
 }
-function cmdGraphStatus(transport) {
+function cmdGraphReferencesBatch(kind, codeList, transport) {
+    if (!["service", "model", "field"].includes(kind))
+        return emitInvalid(transport, { message: "kind 必须是 service / model / field" });
+    try {
+        const result = queryGraphReferencesBatch(kind, codeList.split(",").map((code) => code.trim()));
+        return emitResult({ status: "ok", ...result }, transport);
+    }
+    catch (error) {
+        return emitThrown(error, transport);
+    }
+}
+function cmdGraphEdges(fromSchema, toSchema, kind, offset, limit, requestedEnvironment, transport) {
+    try {
+        if (kind !== undefined && !["service", "model", "field"].includes(kind))
+            return emitInvalid(transport, { message: "kind 必须是 service / model / field" });
+        const pageOffset = offset ?? 0;
+        const pageLimit = limit ?? 50;
+        if (!Number.isSafeInteger(pageOffset) || pageOffset < 0 || !Number.isSafeInteger(pageLimit) || pageLimit < 1)
+            return emitInvalid(transport, { message: "offset 必须是非负整数，limit 必须是正整数" });
+        const result = queryGraphEdges(fromSchema, toSchema, kind, pageOffset, pageLimit);
+        if (requestedEnvironment !== undefined && requestedEnvironment !== result.index.environmentName)
+            return emitResult({ status: "refused", blocker: "graph-environment-mismatch", message: `索引已绑定环境 ${result.index.environmentName}，不是 ${requestedEnvironment}；请先 omc graph pull --env ${requestedEnvironment}`, index: result.index }, transport);
+        return emitResult({ status: "ok", ...result }, transport);
+    }
+    catch (error) {
+        return emitThrown(error, transport);
+    }
+}
+function cmdGraphStatus(requestedEnvironment, transport) {
     try {
         const status = readGraphStatus();
+        if (requestedEnvironment !== undefined && requestedEnvironment !== status.index.environmentName)
+            return emitResult({ status: "refused", blocker: "graph-environment-mismatch", message: `索引已绑定环境 ${status.index.environmentName}，不是 ${requestedEnvironment}`, index: status.index }, transport);
         // r31a-F16：这里是**第四个**白名单式重建（前三次：compact() 投影、references
         // 覆盖声明、mcp-graph 的 explore）。白名单每漏一个键就等于没修，且不会被任何
         // 单测发现——所以改成展开，新增字段自动透传。
@@ -2553,13 +2595,33 @@ async function main() {
     });
     // ADR-0008: local derived rule-graph index — CLI management face, not a call
     // tool (so it stays out of `commands --json`/coverage by construction).
-    const graphCommand = command.command("graph").description("本地派生规则图索引（ADR-0008）：pull 全量重建（有界并发）/ references 离线引用 / impact 影响面 / search 规则 code+name 检索（非规则体）/ status 完整性与新鲜度。候选定位器——不进 baseline/plan/写门禁");
-    graphCommand.command("pull").option("--env <environment>").option("--environment <environment>").option("--concurrency <n>", "并发 wire 读数（1–32，默认 16）：拉取已流水线化，墙钟 ≈ max(模型面,规则面)/并发 × 延迟；过高可能触发平台限流形成缺口").option("--max-output-bytes <bytes>").addHelpText("after", "\n只读远端（model.list → 每模型 rule.list+datarule.list → 每规则 rule.get，统一任务池流水线并发）+ 本地原子重建；不写环境、不占环境写锁。新鲜度随结果回报（complete|partial），查询走 graph references / impact / search。\n").action(async (options) => {
+    const graphCommand = command.command("graph").description("本地派生规则图索引（ADR-0008）");
+    graphCommand.command("pull").option("--env <environment>").option("--environment <environment>").option("--path <dir>").option("--application-codes <codes>").option("--all-applications").option("--concurrency <n>").option("--max-output-bytes <bytes>").action(async (options) => {
         const parsed = options.concurrency === undefined ? undefined : Number.parseInt(String(options.concurrency), 10);
-        commandExitCode = await withTransport(options, request, (transport) => cmdGraphPull(options.environment ?? options.env, parsed, transport));
+        if (options.path)
+            process.env.OMC_GRAPH_PATH = options.path;
+        const codes = options.applicationCodes ? String(options.applicationCodes).split(",").map((code) => code.trim()).filter(Boolean) : undefined;
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphPull(options.environment ?? options.env, parsed, transport, options.path, codes, options.allApplications === true));
+    });
+    graphCommand.command("references [kind] [code]").option("--batch <codes>").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线查询（零 wire）：省略 kind 时=service|model|field 三类全查；支持 --batch code1,code2（例如 --batch svc_a,svc_b）。\n").action(async (kind, code, options) => {
+        // r42b 接线（2026-11-08，r42a-F8）：commander 把首个位置参数绑给 [kind]，
+        // 「references <code>」这种最自然写法会把 code 当 kind 拒掉，而
+        // cmdGraphReferences 的三类全查分支只认 kind===undefined——help 承诺的
+        // 「省略 kind」在 CLI 面不可达。这里做智能重绑：首参不是合法 kind 且
+        // 第二参缺席时，视首参为 code。
+        let boundKind = kind;
+        let boundCode = code;
+        if (kind !== undefined && !["service", "model", "field"].includes(kind) && code === undefined) {
+            boundKind = undefined;
+            boundCode = kind;
+        }
+        commandExitCode = await withTransport(options, request, (transport) => options.batch ? cmdGraphReferencesBatch(boundKind ?? "model", options.batch, transport) : cmdGraphReferences(boundKind, boundCode ?? "", transport, options.environment ?? options.env));
+    });
+    graphCommand.command("references-batch <kind> <code>").option("--max-output-bytes <bytes>").action(async (kind, code, options) => {
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphReferencesBatch(kind, code, transport));
     });
-    graphCommand.command("references <kind> <code>").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线查询（零 wire）：kind = service|model|field，语义同 rule.references 第一版边界；结果带索引新鲜度与扫描缺口（有缺口时零命中不构成「无引用」证明）。覆盖：规则图/数据规则/视图；不含表单、workflow.permissions、流程绑定、在线 JS。在线版 rule.references 不含数据规则；两者都不含上述未扫描面。\n").action(async (kind, code, options) => {
-        commandExitCode = await withTransport(options, request, (transport) => cmdGraphReferences(kind, code, transport, options.environment ?? options.env));
+    graphCommand.command("edges").option("--env <environment>", "本子命令不接触环境；该参数仅用于提示索引绑定环境").option("--from-schema <code>").option("--to-schema <code>").option("--kind <kind>").option("--offset <n>").option("--limit <n>").option("--max-output-bytes <bytes>").addHelpText("after", "\n离线全图边清单（零 wire）；支持 --kind model|field|service 与 --offset/--limit 分页。\n").action(async (options) => {
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphEdges(options.fromSchema, options.toSchema, options.kind, options.offset === undefined ? undefined : Number(options.offset), options.limit === undefined ? undefined : Number(options.limit), options.environment ?? options.env, transport));
     });
     graphCommand.command("impact <kind> <code>").option("--max-output-bytes <bytes>").addHelpText("after", "\n影响面（离线）：跳1=引用该编码的规则（同 references），跳2=这些规则还读写哪些 service/model/field——改前看爆炸半径。截断上限 50 规则×每类 20 码。\n").action(async (kind, code, options) => {
         commandExitCode = await withTransport(options, request, (transport) => cmdGraphImpact(kind, code, transport));
@@ -2567,8 +2629,8 @@ async function main() {
     graphCommand.command("search <term...>").option("--max-output-bytes <bytes>").addHelpText("after", "\n检索规则的 code+name（FTS5，末词前缀匹配；**不含规则体/配置内容**）。找到\"关于 X 的规则\"拿 code，再走 references/impact。中文必须是全词或词首通配（如 报名* / 增加预算*）——子串不命中：FTS5 把「增加预算」当一个 token，搜「预算」为 0。\n").action(async (term, options) => {
         commandExitCode = await withTransport(options, request, (transport) => cmdGraphSearch(term.join(" "), transport));
     });
-    graphCommand.command("status").option("--max-output-bytes <bytes>").action(async (options) => {
-        commandExitCode = await withTransport(options, request, (transport) => cmdGraphStatus(transport));
+    graphCommand.command("status").option("--env <environment>").option("--environment <environment>").option("--max-output-bytes <bytes>").action(async (options) => {
+        commandExitCode = await withTransport(options, request, (transport) => cmdGraphStatus(options.environment ?? options.env, transport));
     });
     // MCP stdio server (host registration: cpdocs installer's omc-graph entry;
     // top-level verb like `codegraph serve --mcp`, not a graph subcommand).

package/dist/command-transport.js

@@ -120,6 +120,15 @@ function sanitizePaths(value) {
             }
             continue;
         }
+        // r41a 接线（2026-11-08，E2E F34 三撞收口）：graph 回执的 dbPath 是「索引身份」
+        // 字段——MCP 面（omc mcp-graph --path）本就明文回显自己的库路径，CLI 侧把它
+        // 脱成 [local-path-redacted] 后两面无法比对（探针正是靠比对 dbPath 才发现
+        // 「MCP 读的是 ext-mcc 目录的旧库」）；graph-index-absent 的拒绝消息也在叫用户
+        // 「比对 dbId/dbPath」。仅豁免这一个键，其余路径照脱敏不放松。
+        if (key === "dbPath" && typeof entry === "string") {
+            output[key] = entry;
+            continue;
+        }
         output[key] = sanitizePaths(entry);
     }
     return output;

package/dist/graph.js

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import { chmodSync, closeSync, existsSync, mkdirSync, openSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { joinConfigRoot } from "./command-transport.js";
 import { decodeJsonColumn, JSON_COLUMN_NULL_COALESCE } from "./json-column.js";
 import { ENDPOINTS } from "./endpoints.js";
@@ -46,7 +46,7 @@ function nodeSqlite() {
  *   staleness is handled by reporting pulledAt + identity, refreshed by an
  *   explicit re-pull (no incremental watermarks, no write-back hooks).
  */
-const GRAPH_SCHEMA_VERSION = "5";
+export const GRAPH_SCHEMA_VERSION = "7";
 const STALE_LOCK_MS = 15 * 60 * 1000;
 export const DEFAULT_PULL_CONCURRENCY = 16;
 export const MAX_PULL_CONCURRENCY = 32;
@@ -77,8 +77,8 @@ export class GraphPullLockHeldError extends Error {
         this.name = "GraphPullLockHeldError";
     }
 }
-export function graphDbPath() {
-    return join(joinConfigRoot(), ".omc", "graph", "graph.db");
+export function graphDbPath(root) {
+    return join(resolve(root ?? process.env.OMC_GRAPH_PATH ?? joinConfigRoot()), ".omc", "graph", "graph.db");
 }
 /**
  * Extract api-fact reference edges from one rule's stored node graph. The
@@ -181,7 +181,7 @@ export function extractListViewEdges(schemaCode, viewCode, model) {
  * `datarule-list`) and vice versa (`rule-list`). Output is sorted so the
  * published DB is byte-stable regardless of completion order.
  */
-export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRENCY) {
+export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRENCY, requestedApplication) {
     const identity = session.environmentFingerprint();
     const pulledAtIso = new Date().toISOString();
     const totalStart = Date.now();
@@ -192,21 +192,27 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
     // returns EMPTY data on a real platform (works only against the fake face)
     // — using it here made the first live pull enumerate zero models and (pre-
     // zero-guard) wedge the scheduler.
-    const scope = await resolveApplicationScope(session, undefined).catch(() => undefined);
+    const scope = await resolveApplicationScope(session, requestedApplication).catch(() => undefined);
     const applicationCode = scope?.code ?? "";
     const gaps = [];
     const treeRows = flattenTreeRows(wireRows((await wireCall(session, { path: ENDPOINTS.applicationTree, query: { appCode: applicationCode } })).data));
-    const modelEntities = treeRows.filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code !== "").map((row) => ({ schemaCode: String(row.code), name: String(row.name ?? row.code) })).sort((a, b) => a.schemaCode.localeCompare(b.schemaCode));
+    const modelEntities = treeRows.filter((row) => row.type === "BizModel" && typeof row.code === "string" && row.code !== "").map((row) => ({ schemaCode: String(row.code), name: String(row.name ?? row.code), applicationCode })).sort((a, b) => a.schemaCode.localeCompare(b.schemaCode));
     const schemaCodes = modelEntities.map((row) => row.schemaCode);
     const fields = [];
     const services = [];
     await Promise.all(schemaCodes.map(async (schemaCode) => {
         try {
-            const rows = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "true" } })).data);
+            let rows = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "true" } })).data);
+            // Several applications expose fields only on the draft face. An empty
+            // published response is not evidence that the model has no fields.
+            if (rows.length === 0)
+                rows = wireRows((await wireCall(session, { path: ENDPOINTS.fieldList, query: { schemaCode, isPublish: "false" } })).data);
+            if (rows.length === 0)
+                gaps.push({ kind: "field-list", ref: schemaCode, note: "published and draft faces are empty" });
             for (const row of rows) {
                 const code = String(row.code ?? row.propertyCode ?? "");
                 if (code)
-                    fields.push({ schemaCode, code, name: String(row.name ?? row.propertyName ?? code) });
+                    fields.push({ schemaCode, code, name: String(row.name ?? row.propertyName ?? code), applicationCode });
             }
         }
         catch (error) {
@@ -219,7 +225,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
         for (const row of rows) {
             const code = String(row.code ?? "");
             if (code)
-                services.push({ code, name: String(row.name ?? code) });
+                services.push({ code, name: String(row.name ?? code), applicationCode });
         }
     }
     catch (error) {
@@ -302,7 +308,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
             dataruleRows = wireRows((await wireCall(session, { path: ENDPOINTS.dataRuleList, query: { schemaCode } })).data);
             dataruleCount += dataruleRows.length;
             for (const row of dataruleRows)
-                edges.push(...extractDataRuleEdges(schemaCode, row));
+                edges.push(...extractDataRuleEdges(schemaCode, row).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "datarule-list", ref: schemaCode, note: error instanceof Error ? error.message : String(error) });
@@ -361,7 +367,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
                 rowId: ruleId,
                 graphSha256: sha256({ nodes, routes: decodeJsonColumn(record.route, JSON_COLUMN_NULL_COALESCE) }),
             });
-            edges.push(...extractReferenceEdges(schemaCode, ruleCode, nodes));
+            edges.push(...extractReferenceEdges(schemaCode, ruleCode, nodes).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "rule-get", ref: `${schemaCode}/${ruleCode}`, note: error instanceof Error ? error.message : String(error) });
@@ -378,7 +384,7 @@ export async function pullRuleGraph(session, concurrency = DEFAULT_PULL_CONCURRE
                 return;
             }
             viewCount += 1;
-            edges.push(...extractListViewEdges(schemaCode, viewCode, got));
+            edges.push(...extractListViewEdges(schemaCode, viewCode, got).map((edge) => ({ ...edge, applicationCode })));
         }
         catch (error) {
             gaps.push({ kind: "listview-get", ref: `${schemaCode}/${viewCode}`, note: error instanceof Error ? error.message : String(error) });
@@ -496,10 +502,24 @@ async function withGraphPullLock(run) {
     }
 }
 /** Wholesalerebuild + atomic publish (staging file + rename), 0600. */
-export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCURRENCY) {
+export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCURRENCY, options = {}) {
     try {
         return await withGraphPullLock(async () => {
-            const data = await pullRuleGraph(session, concurrency);
+            const requested = options.applicationCodes?.length ? options.applicationCodes : [undefined];
+            const parts = await Promise.all(requested.map((application) => pullRuleGraph(session, concurrency, application)));
+            const first = parts[0];
+            const data = parts.length === 1 ? first : {
+                ...first,
+                meta: { ...first.meta, applicationCode: "*", applicationResolution: { code: "*", source: "wildcard" }, coverage: { applicationCodes: parts.flatMap((part) => part.meta.coverage.applicationCodes), tenantApplications: parts.flatMap((part) => part.meta.coverage.applicationCodes) } },
+                rules: parts.flatMap((part) => part.rules),
+                edges: parts.flatMap((part) => part.edges),
+                models: parts.flatMap((part) => part.models),
+                fields: parts.flatMap((part) => part.fields),
+                services: parts.flatMap((part) => part.services),
+                gaps: parts.flatMap((part) => part.gaps),
+                scanned: parts.reduce((sum, part) => ({ models: sum.models + part.scanned.models, rules: sum.rules + part.scanned.rules, datarules: sum.datarules + part.scanned.datarules, views: sum.views + part.scanned.views, parseFailures: sum.parseFailures + part.scanned.parseFailures }), { models: 0, rules: 0, datarules: 0, views: 0, parseFailures: 0 }),
+                timings: { listMs: parts.reduce((n, part) => n + part.timings.listMs, 0), readMs: parts.reduce((n, part) => n + part.timings.readMs, 0), totalMs: parts.reduce((n, part) => n + part.timings.totalMs, 0) },
+            };
             const staging = `${graphDbPath()}.staging-${process.pid}`;
             rmSync(staging, { force: true });
             const DatabaseSyncCtor = nodeSqlite().DatabaseSync;
@@ -531,13 +551,14 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
           rule_code TEXT NOT NULL,
           node_code TEXT,
           node_type TEXT,
-          via TEXT NOT NULL
+           via TEXT NOT NULL,
+           application_code TEXT
         );
         CREATE INDEX edges_lookup ON edges(kind, code);
          CREATE TABLE gaps (kind TEXT NOT NULL, ref TEXT NOT NULL, note TEXT);
-         CREATE TABLE models (schema_code TEXT PRIMARY KEY, name TEXT NOT NULL);
-         CREATE TABLE fields (schema_code TEXT NOT NULL, code TEXT NOT NULL, name TEXT NOT NULL);
-         CREATE TABLE services (code TEXT PRIMARY KEY, name TEXT NOT NULL);
+          CREATE TABLE models (schema_code TEXT PRIMARY KEY, name TEXT NOT NULL, application_code TEXT);
+          CREATE TABLE fields (schema_code TEXT NOT NULL, code TEXT NOT NULL, name TEXT NOT NULL, application_code TEXT);
+           CREATE TABLE services (code TEXT PRIMARY KEY, name TEXT NOT NULL, application_code TEXT);
       `);
                 const insertMeta = db.prepare("INSERT INTO meta (key, value) VALUES (?, ?)");
                 // `applicationResolution` is an object; String(value) would persist
@@ -548,21 +569,21 @@ export async function publishGraphPull(session, concurrency = DEFAULT_PULL_CONCU
                 const insertRule = db.prepare("INSERT INTO rules (schema_code, rule_code, name, enabled, status, default_rule, row_id, graph_sha256) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");
                 for (const rule of data.rules)
                     insertRule.run(rule.schemaCode, rule.ruleCode, rule.name, rule.enabled === null ? null : rule.enabled ? 1 : 0, rule.status, rule.defaultRule === null ? null : rule.defaultRule ? 1 : 0, rule.rowId, rule.graphSha256);
-                const insertEdge = db.prepare("INSERT INTO edges (kind, code, schema_code, rule_code, node_code, node_type, via) VALUES (?, ?, ?, ?, ?, ?, ?)");
+                const insertEdge = db.prepare("INSERT INTO edges (kind, code, schema_code, rule_code, node_code, node_type, via, application_code) VALUES (?, ?, ?, ?, ?, ?, ?, ?)");
                 for (const edge of data.edges)
-                    insertEdge.run(edge.kind, edge.code, edge.schemaCode, edge.ruleCode, edge.nodeCode, edge.nodeType, edge.via);
+                    insertEdge.run(edge.kind, edge.code, edge.schemaCode, edge.ruleCode, edge.nodeCode, edge.nodeType, edge.via, edge.applicationCode ?? null);
                 const insertGap = db.prepare("INSERT INTO gaps (kind, ref, note) VALUES (?, ?, ?)");
                 for (const gap of data.gaps)
                     insertGap.run(gap.kind, gap.ref, gap.note ?? null);
-                const insertModel = db.prepare("INSERT INTO models (schema_code, name) VALUES (?, ?)");
+                const insertModel = db.prepare("INSERT INTO models (schema_code, name, application_code) VALUES (?, ?, ?)");
                 for (const row of data.models)
-                    insertModel.run(row.schemaCode, row.name);
-                const insertField = db.prepare("INSERT INTO fields (schema_code, code, name) VALUES (?, ?, ?)");
+                    insertModel.run(row.schemaCode, row.name, row.applicationCode ?? null);
+                const insertField = db.prepare("INSERT INTO fields (schema_code, code, name, application_code) VALUES (?, ?, ?, ?)");
                 for (const row of data.fields)
-                    insertField.run(row.schemaCode, row.code, row.name);
-                const insertService = db.prepare("INSERT INTO services (code, name) VALUES (?, ?)");
+                    insertField.run(row.schemaCode, row.code, row.name, row.applicationCode ?? null);
+                const insertService = db.prepare("INSERT OR REPLACE INTO services (code, name, application_code) VALUES (?, ?, ?)");
                 for (const row of data.services)
-                    insertService.run(row.code, row.name);
+                    insertService.run(row.code, row.name, row.applicationCode ?? null);
                 // FTS5 mirrors rules (code+name) for `graph search`; one rebuild after
                 // the bulk insert is cheaper than per-row triggers on a wholesale rebuild.
                 db.exec(`
@@ -598,7 +619,7 @@ function openGraphIndex() {
         for (const row of db.prepare("SELECT key, value FROM meta").all())
             meta[row.key] = row.value;
         if (meta.schemaVersion !== GRAPH_SCHEMA_VERSION)
-            throw new GraphIndexAbsentError(`索引 schema 版本不匹配（${meta.schemaVersion} ≠ ${GRAPH_SCHEMA_VERSION}）；重跑 omc graph pull`);
+            throw new GraphIndexAbsentError(`索引 schema 版本不匹配（${meta.schemaVersion ?? "unknown"} ≠ ${GRAPH_SCHEMA_VERSION}）；当前版本需要 schema ${GRAPH_SCHEMA_VERSION}，旧版索引已作废，请重跑 omc graph pull（schema 升版需重拉）`);
         const ruleCount = db.prepare("SELECT COUNT(*) AS n FROM rules").get().n;
         const modelCount = db.prepare("SELECT COUNT(DISTINCT schema_code) AS n FROM rules").get().n;
         const entityCounts = {
@@ -620,7 +641,27 @@ function openGraphIndex() {
         const pulledAtIso = meta.pulledAtIso ?? "";
         const ageDays = indexAgeDays(pulledAtIso);
         const ageMinutes = indexAgeMinutes(pulledAtIso);
-        const coverage = { applicationCodes: meta.applicationCode ? [meta.applicationCode] : [] };
+        let applicationCodes = meta.applicationCode ? [meta.applicationCode] : [];
+        try {
+            const parsedCoverage = JSON.parse(meta.coverage ?? "null");
+            if (Array.isArray(parsedCoverage.applicationCodes))
+                applicationCodes = parsedCoverage.applicationCodes.filter((code) => typeof code === "string");
+        }
+        catch { /* legacy index */ }
+        let tenantApplications;
+        try {
+            const parsedCoverage = JSON.parse(meta.coverage ?? "null");
+            if (Array.isArray(parsedCoverage.tenantApplications))
+                tenantApplications = parsedCoverage.tenantApplications.filter((code) => typeof code === "string");
+        }
+        catch { /* legacy index */ }
+        const fieldRows = db.prepare("SELECT application_code AS applicationCode, COUNT(*) AS n FROM fields GROUP BY application_code").all();
+        const countsByApplication = {};
+        for (const row of fieldRows)
+            if (row.applicationCode)
+                countsByApplication[row.applicationCode] = Number(row.n);
+        const fieldApplications = Object.keys(countsByApplication);
+        const coverage = { applicationCodes, ...(tenantApplications ? { tenantApplications } : {}), fields: { coveredApplications: fieldApplications, notCovered: applicationCodes.filter((code) => !fieldApplications.includes(code)), countsByApplication } };
         return {
             db,
             summary: {
@@ -663,6 +704,14 @@ function openGraphIndex() {
 export const GRAPH_COVERAGE = Object.freeze({
     scanned: Object.freeze(["businessrule", "datarule", "listview"]),
     notScanned: Object.freeze(["form", "workflow.permissions", "workflow.bindings", "onlinejs", "rule.conditions"]),
+    answerable: Object.freeze(["businessrule", "datarule", "listview"]),
+    mustCheckManually: Object.freeze([
+        { surface: "form", why: "表单控件关联未扫描，可能仍引用目标字段", how: "omc call form.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "workflow.permissions", why: "流程权限未扫描，无法判断谁能发起/操作", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "workflow.bindings", why: "流程规则绑定未扫描，规则删除可能留下绑定", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "onlinejs", why: "在线 JS 可能通过字符串引用字段", how: "omc call onlinejs.get --args '{\"schemaCode\":\"<x>\"}'" },
+        { surface: "rule.conditions", why: "规则条件叶子未扫描，命中可能不完整", how: "omc call rule.list --args '{\"schemaCode\":\"<x>\"}' 后人工检查条件公式" },
+    ]),
     note: "零命中/全零 totals 只代表 scanned 面没有命中；notScanned 面（尤其 form 与 workflow.permissions）未扫描，不可据此判定可安全删除或无影响",
 });
 /**
@@ -684,7 +733,7 @@ export function queryGraphReferences(kind, code) {
     const { db, summary } = openGraphIndex();
     try {
         const rows = db
-            .prepare("SELECT schema_code, rule_code, node_code, node_type, via FROM edges WHERE kind = ? AND code = ? ORDER BY schema_code, rule_code, node_code, via")
+            .prepare("SELECT schema_code, rule_code, node_code, node_type, via, application_code FROM edges WHERE kind = ? AND code = ? ORDER BY schema_code, rule_code, node_code, via")
             .all(kind, code);
         const matches = rows.map((row) => ({
             schemaCode: row.schema_code,
@@ -692,6 +741,9 @@ export function queryGraphReferences(kind, code) {
             nodeCode: row.node_code ?? "",
             nodeType: row.node_type ?? "",
             via: row.via,
+            referrer: { schemaCode: row.schema_code, ruleCode: row.rule_code },
+            isSelf: row.schema_code === code,
+            ...(row.application_code ? { applicationCode: row.application_code } : {}),
         }));
         const gapped = summary.gaps.count > 0;
         // r35a-F4（真机 2026-11-06）：探针拿 matches:[] 差点把一个**被表单引用**的
@@ -722,6 +774,44 @@ export function queryGraphReferences(kind, code) {
         db.close();
     }
 }
+export function queryGraphReferencesBatch(kind, codes) {
+    const { db, summary } = openGraphIndex();
+    try {
+        const wanted = [...new Set(codes.filter(Boolean))];
+        const rows = wanted.length === 0 ? [] : db.prepare(`SELECT code, schema_code, rule_code, node_code, node_type, via FROM edges WHERE kind = ? AND code IN (${wanted.map(() => "?").join(",")}) ORDER BY code, schema_code, rule_code, node_code, via`).all(kind, ...wanted);
+        return { kind, codes: wanted, matches: rows.map((row) => ({ targetCode: row.code, schemaCode: row.schema_code, ruleCode: row.rule_code, nodeCode: row.node_code ?? "", nodeType: row.node_type ?? "", via: row.via, referrer: { schemaCode: row.schema_code, ruleCode: row.rule_code }, isSelf: row.schema_code === row.code })), index: summary, coverage: GRAPH_COVERAGE };
+    }
+    finally {
+        db.close();
+    }
+}
+export function queryGraphEdges(fromSchema, toSchema, kind, offset = 0, limit = 50) {
+    const { db, summary } = openGraphIndex();
+    try {
+        const conditions = [];
+        const params = [];
+        if (fromSchema) {
+            conditions.push("schema_code = ?");
+            params.push(fromSchema);
+        }
+        if (toSchema) {
+            conditions.push("code = ?");
+            params.push(toSchema);
+        }
+        if (kind) {
+            conditions.push("kind = ?");
+            params.push(kind);
+        }
+        const where = conditions.length ? ` WHERE ${conditions.join(" AND ")}` : "";
+        const total = Number(db.prepare(`SELECT COUNT(*) AS n FROM edges${where}`).get(...params).n);
+        const rows = db.prepare(`SELECT kind, code, schema_code, rule_code, node_code, node_type, via, application_code FROM edges${where} ORDER BY schema_code, code, rule_code, node_code, via LIMIT ? OFFSET ?`).all(...params, limit, offset);
+        const edges = rows.map((row) => ({ kind: row.kind, code: row.code, schemaCode: row.schema_code, ruleCode: row.rule_code, nodeCode: row.node_code ?? "", nodeType: row.node_type ?? "", via: row.via, ...(row.application_code ? { applicationCode: row.application_code } : {}) }));
+        return { edges, index: summary, total, truncated: offset + edges.length < total, ...(offset + edges.length < total ? { nextOffset: offset + edges.length } : {}) };
+    }
+    finally {
+        db.close();
+    }
+}
 export function readGraphStatus() {
     const { db, summary } = openGraphIndex();
     try {
@@ -732,10 +822,13 @@ export function readGraphStatus() {
             dbBytes: statSync(dbPath).size,
             dbPath,
             dbId: sha256(dbPath).slice(0, 12),
+            mcpHint: `MCP 工具按注册时的 --path 读库（当前索引根：${dirname(dirname(dbPath))}）；要让 MCP 看到本次拉取，请执行 omc graph pull --path ${dirname(dirname(dbPath))} --env <env>。`,
             ageMinutes: summary.ageMinutes,
             staleAfterMinutes: summary.staleAfterMinutes,
             ...(summary.staleWarning ? { warning: summary.staleWarning } : {}),
             coverage: summary.coverage,
+            coveredApplications: summary.coverage.applicationCodes,
+            tenantApplications: summary.coverage.tenantApplications ?? summary.coverage.applicationCodes,
             gaps,
         };
     }
@@ -794,8 +887,8 @@ export function searchGraphRules(term, limit = 20, offset = 0) {
                     ...(offset + rows.length < total ? { truncated: true, nextOffset: offset + rows.length } : {}),
                 };
             };
-            entityMatches.model = searchEntity("SELECT COUNT(*) AS n FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0", "SELECT schema_code, name FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0 ORDER BY schema_code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, name: row.name }));
-            entityMatches.field = searchEntity("SELECT COUNT(*) AS n FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT schema_code, code, name FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY schema_code, code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, code: row.code, name: row.name }));
+            entityMatches.model = searchEntity("SELECT COUNT(*) AS n FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0", "SELECT schema_code, name, application_code FROM models WHERE instr(name, ?) > 0 OR instr(schema_code, ?) > 0 ORDER BY schema_code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, name: row.name, applicationCode: row.application_code ?? undefined }));
+            entityMatches.field = searchEntity("SELECT COUNT(*) AS n FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT schema_code, code, name, application_code FROM fields WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY schema_code, code LIMIT ?", [term.trim(), term.trim()], (row) => ({ schemaCode: row.schema_code, code: row.code, name: row.name, applicationCode: row.application_code ?? undefined }));
             entityMatches.service = searchEntity("SELECT COUNT(*) AS n FROM services WHERE instr(name, ?) > 0 OR instr(code, ?) > 0", "SELECT code, name FROM services WHERE instr(name, ?) > 0 OR instr(code, ?) > 0 ORDER BY code LIMIT ?", [term.trim(), term.trim()], (row) => ({ code: row.code, name: row.name }));
         }
         const gapped = summary.gaps.count > 0;
@@ -804,7 +897,7 @@ export function searchGraphRules(term, limit = 20, offset = 0) {
             rules: matches,
             matches: entityMatches,
             index: summary,
-            coverage: { scanned: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], notScanned: ["rule.body", "form", "workflow.permissions"], note: "检索覆盖规则与实体的 code/name；规则体、表单与流程权限未扫描" },
+            coverage: { scanned: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], notScanned: ["rule.body", "form", "workflow.permissions"], answerable: ["rule.code", "rule.name", "model.code", "model.name", "field.code", "field.name", "service.code", "service.name"], mustCheckManually: [{ surface: "rule.body", why: "规则体未检索", how: "omc call rule.list --args '{\"schemaCode\":\"<x>\"}'" }, { surface: "form", why: "表单控件未扫描", how: "omc call form.get --args '{\"schemaCode\":\"<x>\"}'" }, { surface: "workflow.permissions", why: "流程权限未扫描", how: "omc call workflow.get --args '{\"schemaCode\":\"<x>\"}'" }], note: "检索覆盖规则与实体的 code/name；规则体、表单与流程权限未扫描" },
             ...(term.trim() !== "" && !/^[A-Za-z][A-Za-z0-9_.-]*$/.test(term.trim()) ? { note: "疑似业务词；本工具同时检索实体 name/code 与规则 code/name，引用明细请使用匹配到的 code 再查 references/impact" } : {}),
             ...(matches.length === 0 && entityMatches.model.total === 0 && entityMatches.field.total === 0 && entityMatches.service.total === 0
                 ? {

package/dist/human-summary.js

@@ -191,7 +191,7 @@ function phraseOf(tool, args, outcome) {
         case "workflow.delete":
             return `删除流程 ${stringArg(args, "code") ?? "?"}`;
         case "onlinejs.compose":
-            return `编排并发布表单脚本 customScript（模型 ${schemaCode ?? "?"} / 表单 ${stringArg(args, "sheetCode") ?? "?"}）`;
+            return `编排并发布表单脚本 customScript（模型 ${schemaCode ?? "?"} / 表单 ${stringArg(args, "sheetCode") ?? `sheetCodeFromSchema:${String(outcome?.readback?.sheetCodeFromSchema ?? schemaCode ?? "?")}`}）`;
         case "service.register":
             return `注册后端服务 ${stringArg(args, "serviceCode") ?? "?"}`;
         case "service.delete":

package/dist/lanes/field.js

@@ -134,6 +134,10 @@ function childSchemaCodes(rows) {
     const codes = new Set(rows.map((row) => String(row.code ?? row.propertyCode ?? "")));
     return codes.has("parentId") && codes.has("sortKey");
 }
+function isSystemFieldCode(code) {
+    const value = String(code ?? "");
+    return SYSTEM_FIELD_CODES.has(value) || value === "parentId" || value === "sortKey";
+}
 /**
  * r17 (2026-10-25, live + decompiled A/B): a FORMULA field CANNOT aggregate its
  * own model's child table. `BizPropertyManagerImpl.publishFormula` rewrites
@@ -232,8 +236,10 @@ export function registerFieldLane(tools) {
                 // Round 4 (ADR 0005): read-side annotation for stored scale-less
                 // NUMERICAL landmines (the platform accepted them for years).
                 const scaleWarning = numericalScaleWarning(type, options);
+                const fieldCode = row.code ?? row.propertyCode;
+                const system = isSystemFieldCode(fieldCode);
                 return {
-                    code: row.code ?? row.propertyCode,
+                    code: fieldCode,
                     name: row.name,
                     ...(redundantNameI18n(row.name_i18n, row.name) ? {} : typeof row.name_i18n === "string" ? { name_i18n: row.name_i18n } : {}),
                     type: row.type ?? row.propertyType,
@@ -261,7 +267,8 @@ export function registerFieldLane(tools) {
                     // readback.committed。
                     ...(Object.prototype.hasOwnProperty.call(row, "propertyEmpty") ? { propertyEmpty: row.propertyEmpty } : {}),
                     ...(options !== undefined ? { options } : {}),
-                    ...(scaleWarning !== undefined ? { shapeWarning: scaleWarning } : {}),
+                    ...(scaleWarning !== undefined ? { shapeWarning: scaleWarning, ...(system ? { origin: "system" } : {}) } : {}),
+                    ...(system && scaleWarning === undefined ? { origin: "system" } : {}),
                 };
             });
             // Projection: ask for one field (`--code`) or a named set (`--fields`) so a
@@ -281,7 +288,7 @@ export function registerFieldLane(tools) {
             // does this model have" paid for noise it then had to filter. `all:true`
             // restores the previous full list (uses the SAME SYSTEM_FIELD_CODES set the
             // list-view/form scaffolds already filter with).
-            const visible = args.all === true ? selected : selected.filter((field) => !SYSTEM_FIELD_CODES.has(String(field.code)));
+            const visible = args.all === true ? selected : selected.filter((field) => !isSystemFieldCode(field.code));
             const projected = detailed
                 ? visible
                 : visible.map((field) => {
@@ -306,6 +313,7 @@ export function registerFieldLane(tools) {
                         ...(Array.isArray(subColumns) && subColumns.length > businessCodes.length ? { systemSubColumnCount: subColumns.length - businessCodes.length } : {}),
                         ...(conditions.length > 0 ? { conditions } : {}),
                         ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
+                        ...(field.origin !== undefined ? { origin: field.origin } : {}),
                     };
                 });
             return {
@@ -363,6 +371,7 @@ export function registerFieldLane(tools) {
                             ...(Array.isArray(field.subColumns) ? { subColumns: field.subColumns } : {}),
                             ...(conditions.length > 0 ? { conditions } : {}),
                             ...(field.shapeWarning !== undefined ? { shapeWarning: field.shapeWarning } : {}),
+                            ...(field.origin !== undefined ? { origin: field.origin } : {}),
                         };
                     }),
                     hint: "字段详情（options/subSchema）用 omc call field.list --args '{\"schemaCode\":\"...\",\"published\":true,\"code\":\"<field>\"}'",

package/dist/lanes/list-view-contract.js

@@ -12,7 +12,7 @@ export const LIST_VIEW_WIRE = Object.freeze({
     configureDefault: "code omitted means the default view (code=schemaCode)",
     configureColumns: "query/get then query/update: for each fieldCodes entry, append a missing column as visible, or repair an existing column's name/propertyType/displayFormat/visible in place (never skip an already-present column), then query/get readback; propertyType comes from published field metadata; NUMERICAL displayFormat is derived from the field's 0-based `options.scale` (0=integer,1=1dp,2=2dp,3=3dp…8=8dp) through the platform parseNumber table ({0:1,1:2,2:3,3:11,4:12,23:…, percent 0..:4/5/6/13/14/27..30, currency ¥ 2dp..:7/15/16/31..34} — verified live: scale 2 → displayFormat 3 = 2 decimals) and DATE displayFormat from options.format (1=yyyy-MM-dd,2=datetime,3=minute,4=yyyy-MM); the readback columns array carries {propertyCode,propertyType,displayFormat,visible,sumType} and added/updated name the fieldCodes touched",
     configureSorts: "sorts -> querySorts [{propertyCode,propertyType,direction,sortKey,clientType}]; direction SortDirectionType numeric ASC(1)/DESC(2); omitted leaves the existing sorts untouched, provided replaces them",
-    configureConditions: "conditions -> queryConditions [{propertyCode,propertyType,displayType,filterType,defaultValue,options,startValue,endValue,shortcutFilter,choiceType,dateType,accurateSearch,showNull,includeSubData,buildTreeBy,visible}]; filterType is the comparison OPERATOR (QueryFilterType STRING enum: Eq/NotEq/Gt/Lt/Gte/Lte/Like/NotLike/IsNull/IsNotNull/In/NotIn/Between/NotBetween/Of/NotOf/…; omitted → the platform default for the propertyType; aliases operator/op and legacy options.op); displayType INPUT(0)/RADIO(1)/CHECKBOX(2)/SELECT(3)/RANGE(4); choiceType SELECT(1)/POPUP(2)/TREE_LEFT(3); options is a JSON string (decoded on readback); conditionReadback is equivalent only for field-by-field equality, otherwise coerced with from/to details; viewConditionsAppliedRest:false records that REST data.list --queryCode does not apply fixed conditions",
+    configureConditions: "conditions -> queryConditions [{propertyCode,propertyType,displayType,filterType,defaultValue,options,startValue,endValue,shortcutFilter,choiceType,dateType,accurateSearch,showNull,includeSubData,buildTreeBy,visible}]; minimum --param shape: {\"conditions\":[{\"propertyCode\":\"<code>\",\"filterType\":\"Eq\",\"defaultValue\":<value>}]}; filterType is the comparison OPERATOR (QueryFilterType STRING enum: Eq/NotEq/Gt/Lt/Gte/Lte/Like/NotLike/IsNull/IsNotNull/In/NotIn/Between/NotBetween/Of/NotOf/…; omitted → the platform default for the propertyType; aliases operator/op and legacy options.op); displayType INPUT(0)/RADIO(1)/CHECKBOX(2)/SELECT(3)/RANGE(4); choiceType SELECT(1)/POPUP(2)/TREE_LEFT(3); options is a JSON string (decoded on readback); conditionReadback is equivalent only for field-by-field equality, otherwise coerced with from/to details; viewConditionsAppliedRest:false records that REST data.list --queryCode does not apply fixed conditions",
     configureConditionMap: "queryConditionMap {<schemaCode>: queryConditions[]} is read-derived (query/get with a formCode child-table filter); BizQueryDetailConfig persists queryConditions/querySorts only, so the map is not a configure input",
     configureActions: "actions -> queryActions [{actionCode,name,icon,queryActionType,systemAction,serviceCode,serviceMethod,customService,associationCode,associationType,sortKey}]; queryActionType QueryActionType numeric QUERY(1)/ADD(2)/.../BATCH_SUBMIT(23); associationType QueryActionRelativeType numeric BIZSHEET(0)/WORKFLOW(1); associationCode/associationType are the JSON names of the DTO fields relativeCode/queryActionRelativeType (@JsonProperty); omitted leaves the existing actions untouched, provided MERGES into the effective set by actionCode (live 2026-09-17: query/update replaces-then-re-adds the submitted list, so a merge keeps the platform's built-in 新增/删除/导入/导出 and updates a matching actionCode — replaceActions:true restores the authoritative full set, defaultActions:true re-seeds the platform default set); query/get auto-injects default actions (qr_code/batch_print/batch_update/import_attachment/export_attachment/batch_submit) and query/update resets sortKey to i+1",
     configurePresentation: "presentation -> queryPresentation {clientType,htmlJson,actionsJson,columnsJson,queryViewDataSource,schemaRelations,options}; htmlJson/actionsJson/columnsJson JSON strings are decoded once before render-shape validation (html element tagName+attrs, action actionCode/name/icon, column propertyCode/propertyType); invalid input refuses with listview-presentation-render-invalid before wire and is never double-encoded; clientType is forced to PC by query/update; schemaRelations is platform-derived from the queryColumns tree (resolveRelations) and overwrites your input; a non-empty htmlJson updates the environment record, which query/delete cleans up; omitted leaves the existing presentation untouched (the read-face object must be echoed, because saveBizQueryDetail removes every presentation whose clientType matches before re-adding), provided replaces it",

package/dist/lanes/list-view.js

@@ -920,7 +920,15 @@ export function registerListViewLane(tools) {
                         : `omc call field.list --args '${JSON.stringify({ schemaCode: args.schemaCode, published: true })}'`,
                 });
             }
-            return { wouldChange: true, summary: `即将配置列表视图 ${args.schemaCode}/${code} 的列` };
+            const normalizedFieldCodes = args.fieldCodes.map((ref) => resolveFieldRef(fieldRows, ref)?.code ?? ref);
+            return {
+                wouldChange: true,
+                summary: `即将配置列表视图 ${args.schemaCode}/${code} 的列`,
+                fieldCodes: normalizedFieldCodes.length > 20
+                    ? { count: normalizedFieldCodes.length, sha256: createHash("sha256").update(JSON.stringify(normalizedFieldCodes)).digest("hex"), note: "超过 20 项才摘要；顺序复核请分批配置" }
+                    : normalizedFieldCodes,
+                ...(args.conditions !== undefined ? { conditions: args.conditions } : {}),
+            };
         },
         rollback: listviewRollbackSpec("listview.configure"),
     });

package/dist/lanes/online-js.js

@@ -81,11 +81,12 @@ export function registerOnlineJsLane(tools) {
                 sheetCode,
                 present: draft.present || published.present,
                 sheetPublished: sheet.published === true,
-                draft: { ...draft, ...(draft.script === null ? { note: "草稿无 customScript 脚本（尚未 compose 或被清空）" } : {}) },
-                published: { ...published, ...(published.script === null ? { note: "发布面无 customScript 脚本" } : {}) },
+                draft: { ...draft, scriptSha256: draft.sha256 || undefined, ...(draft.script === null ? { note: "草稿无 customScript 脚本（尚未 compose 或被清空）" } : {}) },
+                published: { ...published, scriptSha256: published.sha256 || undefined, ...(published.script === null ? { note: "发布面无 customScript 脚本" } : {}) },
                 ...(draft.sha256 !== "" && published.sha256 !== ""
                     ? { draftPublishedInSync: draft.sha256 === published.sha256 }
                     : {}),
+                scriptSha256: published.sha256 || draft.sha256 || undefined,
                 hint: "脚本是 innerHTML 原文（含平台 (function(form){…}) 生命周期包装——那就是平台存储形态）；改脚本用 onlinejs.compose（默认 INCREMENTAL 并入，replace:true 整段替换）；同文件修订直接 replace:true 传完整脚本",
             };
         }, {
@@ -125,6 +126,8 @@ export function registerOnlineJsLane(tools) {
                 throw new Error("remove:true 不能与非空 source 同时传入");
             // r28e F9：和同 lane 其它工具一致——省略 sheetCode 即模型码槽位。
             const targetSheetCode = args.sheetCode ?? args.schemaCode;
+            // Keep the human summary truthful when the caller relies on the documented
+            // default (sheetCode omitted): it is the model's default form slot.
             // 1. Read the existing draftHtmlJson.
             const current = await wireCall(session, { path: ENDPOINTS.sheetGet, query: { schemaCode: args.schemaCode, sheetCode: targetSheetCode } });
             const existingSheet = (current.data ?? null);
@@ -215,6 +218,7 @@ export function registerOnlineJsLane(tools) {
                 return {
                     performed: { errcode: 0, published },
                     readback: {
+                        ...(args.sheetCode === undefined ? { sheetCodeFromSchema: targetSheetCode } : {}),
                         publishedSha256,
                         draftSha256,
                         draftPublishedInSync,
@@ -223,11 +227,14 @@ export function registerOnlineJsLane(tools) {
                         scriptElementMeaning: "skeleton 空槽不等于存在脚本",
                         composeMode: args.replace === true ? "replace" : "incremental",
                         ...(removing ? { removed: true } : {}),
+                        scriptSha256: customScriptSha256,
                         customScriptSha256,
+                        scriptSha256DeprecatedAlias: "customScriptSha256",
                         customScriptBytes: Buffer.byteLength(composedScript, "utf8"),
                         composedDraftBytes: Buffer.byteLength(composedDraftHtml, "utf8"),
                         publishedHtmlBytes: Buffer.byteLength(publishedRaw, "utf8"),
                         htmlRenderCompat,
+                        verifyWith: "onlinejs.get → published.scriptSha256",
                         hint: "summary 模式不回原文；要脚本原文用 onlinejs.get，要完整布局用 artifact 或 form.get --full",
                     },
                 };
@@ -235,6 +242,7 @@ export function registerOnlineJsLane(tools) {
             return {
                 performed: { errcode: 0, published },
                 readback: {
+                    ...(args.sheetCode === undefined ? { sheetCodeFromSchema: targetSheetCode } : {}),
                     // Dedupe: after a successful publish the draft and the published
                     // face are the same bytes, and the script also rides inside them.
                     // Return the composed payload ONCE (composedDraftHtmlJson keeps the
@@ -255,6 +263,7 @@ export function registerOnlineJsLane(tools) {
                     composeMode: args.replace === true ? "replace" : "incremental",
                     ...(removing ? { removed: true } : {}),
                     htmlRenderCompat,
+                    verifyWith: "onlinejs.get → published.scriptSha256",
                     portalVerificationPlan: ["在门户打开该表单", "触发已绑定的在线 JS 事件", "检查事件产生的副作用字段或校验提示"],
                 },
             };

package/dist/lanes/workflow.js

@@ -3506,6 +3506,7 @@ export function registerWorkflowLane(tools) {
                 fullName: row.fullName ?? null,
                 corpId: row.corpId ?? null,
                 code: row.code ?? null,
+                ...(row.origin === "system-preset" || row.defaultPermission === true || row.preset === true ? { origin: "system-preset" } : row.origin === "user" ? { origin: "user" } : {}),
             }));
             const actor = await resolvePermissionActor(session);
             const effectiveFor = {
@@ -3520,6 +3521,7 @@ export function registerWorkflowLane(tools) {
                 note: actor.isAdmin
                     ? "当前登录人是平台管理员：发起成功不证明白名单生效。要用非管理员账号另建环境验证。"
                     : "本读面只回配置行；membership 命中需非管理员实发 data.submit 才能证伪。",
+                ...(actor.isAdmin ? { verifiable: false, verifyWith: `以普通账号凭据跑同查询：omc call workflow.permissions --env <env> --args '${JSON.stringify({ workflowCode })}'` } : {}),
             };
             return {
                 workflowCode,

package/dist/mcp-graph.js

@@ -47,7 +47,7 @@ const INSTRUCTIONS_INDEXED = [
     "- 改名/删除/重构一个 字段(field)/模型(model)/服务(service) 前，先用 omc_graph_explore 查引用与影响面；查\"谁引用了 X\"也走它。",
     "- 索引只覆盖：业务规则（methodMapping/targetObjectCode）、数据规则（propertyCodes 与公式 {字段}）、视图（列/排序/条件）。**不含**规则条件叶子与流程绑定。",
     "- search 语义：只匹配规则 code+name 的**词首**（中文子串不命中：搜「预算」匹配不到「增加预算」）。",
-    "答案带 freshness/pulledAtIso——索引是快照，平台侧改动后需 CLI 重建：omc graph pull --env <env>（只读远端，约 1 分钟）。",
+    "答案带 freshness/pulledAtIso——索引是快照，平台侧改动后需 CLI 重建：omc graph pull --env <env>（只读远端，约 1 分钟）。MCP 按注册时的 --path 读库；CLI pull 必须把 --path 指到本目录才能写入本库。",
     "索引绑定单一环境（environmentName）；查别的环境先重新 pull。",
 ].join("\n");
 const INSTRUCTIONS_NO_INDEX = [
@@ -60,7 +60,7 @@ const EXPLORE_TOOL = {
     description: [
         "一次查全一个目标的引用与影响面（本地索引，毫秒级）。",
         "输入 query 可为业务名（实体 name+code 子串）或规则 code+name 词首；也可直接给字段/模型/服务 code。kind 可选 field|model|service，不给则三种都查。",
-        "返回 {index(freshness), references:{kind:[{schemaCode,ruleCode,nodeCode,nodeType,via}]}, impact:{kind:totals}, search:{matches:{model,field,service},rules}}。",
+        "返回 {index(freshness), references:{kind:[{schemaCode,ruleCode,nodeCode,nodeType,via,referrer,isSelf}]}, impact:{kind:totals}, search:{matches:{model,field,service},rules}}。",
         "references/impact 支持 offset+limit 分页；truncated 时按返回的 nextOffset 继续调用。实体分页结果带 nextCall；分页不会改变 resolved。字段同名时请用 schemaCode 消歧。",
         "改/删/重命名任何字段、模型、服务之前必查；找\"关于 X 的规则\"拿 code 也走这里。",
         "索引不含规则条件叶子与流程绑定；freshness=partial 时命中可能不完整（答案里有 gapWarning）。",
@@ -69,8 +69,11 @@ const EXPLORE_TOOL = {
         type: "object",
         properties: {
             query: { type: "string", description: "业务名（实体 name+code 子串）、字段/模型/服务 code，或规则检索词（规则 code+name 词首匹配）" },
+            queries: { type: "array", items: { type: "string" }, description: "实体面多条件检索；与 query 并存时合并，match 默认 any" },
+            match: { type: "string", enum: ["all", "any"], description: "queries[] 的模型∪字段所属模型求交/并" },
             kind: { type: "string", enum: [...KINDS], description: "限定一种引用种类；省略则 field/model/service 全查" },
             schemaCode: { type: "string", description: "限定字段所属模型；也可用于校验模型。" },
+            applicationCode: { type: "string", description: "限定应用；仅返回该应用的实体与引用" },
             env: { type: "string", description: "期望的环境名；与索引所属环境不一致时会拒绝（防跨环境误答）" },
             offset: { type: "integer", minimum: 0, description: "引用/实体结果起始偏移；truncated 时使用 nextOffset" },
             limit: { type: "integer", minimum: 1, maximum: MATCH_CAP, description: "每类结果最多返回多少条（默认 50）" },
@@ -125,9 +128,9 @@ function entityInventory() {
     const db = new DatabaseSync(graphDbPath(), { readOnly: true });
     try {
         return [
-            ...db.prepare("SELECT schema_code, name FROM models").all().map((r) => ({ kind: "model", schemaCode: r.schema_code, code: r.schema_code, name: r.name ?? "" })),
-            ...db.prepare("SELECT schema_code, code, name FROM fields").all().map((r) => ({ kind: "field", schemaCode: r.schema_code, code: r.code, name: r.name ?? "" })),
-            ...db.prepare("SELECT code, name FROM services").all().map((r) => ({ kind: "service", code: r.code, name: r.name ?? "" })),
+            ...db.prepare("SELECT schema_code, name, application_code FROM models").all().map((r) => ({ kind: "model", schemaCode: r.schema_code, code: r.schema_code, name: r.name ?? "", applicationCode: r.application_code ?? undefined })),
+            ...db.prepare("SELECT schema_code, code, name, application_code FROM fields").all().map((r) => ({ kind: "field", schemaCode: r.schema_code, code: r.code, name: r.name ?? "", applicationCode: r.application_code ?? undefined })),
+            ...db.prepare("SELECT code, name, application_code FROM services").all().map((r) => ({ kind: "service", code: r.code, name: r.name ?? "", applicationCode: r.application_code ?? undefined })),
         ];
     }
     finally {
@@ -159,12 +162,16 @@ export async function executeGraphTool(name, rawArgs) {
         }
         if (name === EXPLORE_TOOL.name) {
             const query = typeof args.query === "string" ? args.query.trim() : "";
-            if (!query)
-                return toolError("query 不能为空");
+            const queryList = Array.isArray(args.queries) ? args.queries.filter((item) => typeof item === "string").map((item) => item.trim()).filter(Boolean) : [];
+            const queries = queryList.length > 0 ? queryList : query ? [query] : [];
+            if (queries.length === 0)
+                return toolError("query 或 queries 不能为空");
+            const primaryQuery = queries[0];
             const kind = args.kind === undefined ? undefined : String(args.kind);
             if (kind !== undefined && !KINDS.includes(kind))
                 return toolError(`kind 必须是 ${KINDS.join("|")} 之一`);
             const schemaCode = typeof args.schemaCode === "string" && args.schemaCode.trim() ? args.schemaCode.trim() : undefined;
+            const applicationCode = typeof args.applicationCode === "string" && args.applicationCode.trim() ? args.applicationCode.trim() : undefined;
             if (schemaCode && kind !== "field" && kind !== "model")
                 return toolError("schemaCode 仅适用于 kind=field|model");
             const status = readGraphStatus();
@@ -179,11 +186,34 @@ export async function executeGraphTool(name, rawArgs) {
             const impact = {};
             // Resolve from an unpaged search. The result page is presentation only;
             // otherwise offset=2 can silently change the subject being inspected.
-            const search = searchGraphRules(query, limit, offset);
-            const resolvedSearch = searchGraphRules(query, MATCH_CAP, 0);
-            const loweredQuery = query.toLocaleLowerCase();
+            const search = searchGraphRules(primaryQuery, limit, offset);
+            const scopedSearch = applicationCode ? {
+                ...search,
+                matches: {
+                    ...search.matches,
+                    model: { ...search.matches.model, items: search.matches.model.items.filter((row) => row.applicationCode === applicationCode) },
+                    field: { ...search.matches.field, items: search.matches.field.items.filter((row) => row.applicationCode === applicationCode) },
+                },
+            } : search;
+            const resolvedSearch = searchGraphRules(primaryQuery, MATCH_CAP, 0);
+            const loweredQuery = primaryQuery.toLocaleLowerCase();
             const allCandidates = entityInventory().filter((r) => (r.code.toLocaleLowerCase().includes(loweredQuery) || r.name.toLocaleLowerCase().includes(loweredQuery)) &&
-                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)));
+                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)) &&
+                (!applicationCode || r.applicationCode === applicationCode));
+            const candidatesForQuery = (term) => entityInventory().filter((r) => (r.code.toLocaleLowerCase().includes(term.toLocaleLowerCase()) || r.name.toLocaleLowerCase().includes(term.toLocaleLowerCase())) &&
+                (!schemaCode || (r.kind !== "service" && r.schemaCode === schemaCode)) &&
+                (!applicationCode || r.applicationCode === applicationCode));
+            const perQueryModels = queries.map((term) => new Set(candidatesForQuery(term).filter((r) => r.kind === "model").map((r) => r.schemaCode)));
+            const perQueryFieldModels = queries.map((term) => new Set(candidatesForQuery(term).filter((r) => r.kind === "field").map((r) => r.schemaCode)));
+            const combine = (sets) => {
+                if (sets.length === 0)
+                    return new Set();
+                if (args.match === "all")
+                    return new Set([...sets[0]].filter((value) => sets.every((set) => set.has(value))));
+                return new Set(sets.flatMap((set) => [...set]));
+            };
+            const hitModels = combine(perQueryModels);
+            const hitFieldModels = combine(perQueryFieldModels);
             const typedCandidates = kind ? allCandidates.filter((r) => r.kind === kind) : allCandidates;
             const fieldCandidates = kind === "field" ? typedCandidates : allCandidates.filter((r) => r.kind === "field");
             const exactSame = fieldCandidates.filter((r) => r.code === query);
@@ -196,7 +226,7 @@ export async function executeGraphTool(name, rawArgs) {
             for (const one of kinds) {
                 const subject = subjects.find((s) => s.kind === one);
                 const ref = queryGraphReferences(one, subject?.code ?? query);
-                const scopedMatches = subject && one === "field" && schemaCode ? ref.matches.filter((row) => row.schemaCode === schemaCode) : ref.matches;
+                const scopedMatches = ref.matches.filter((row) => !applicationCode || row.applicationCode === applicationCode).filter((row) => subject && one === "field" && schemaCode ? row.schemaCode === schemaCode : true);
                 const capped = cap(scopedMatches, offset, limit);
                 // r35a-F4c（真机 2026-11-06）：**MCP 面是第三个消费者**——CLI 的 references
                 // 与 impact 都带 coverage 了，这里若不显式透传，MCP 用户看到的仍是
@@ -207,7 +237,6 @@ export async function executeGraphTool(name, rawArgs) {
                     offset: capped.offset,
                     limit: capped.limit,
                     ...(capped.truncated ? { truncated: true, nextOffset: capped.nextOffset, note: `共 ${capped.total} 条，已给 ${capped.rows.length} 条，offset=${capped.offset} 取下一段（调用时传 offset=${capped.nextOffset}、limit=${capped.limit}）` } : {}),
-                    ...(ref.coverage ? { coverage: ref.coverage } : {}),
                     ...(ref.gapWarning ? { gapWarning: ref.gapWarning } : {}),
                 };
                 if (scopedMatches.length > 0 || kind !== undefined || subject !== undefined) {
@@ -227,12 +256,11 @@ export async function executeGraphTool(name, rawArgs) {
                                     return m;
                                 }, new Map()).values()],
                         } : {}),
-                        ...(imp.coverage ? { coverage: imp.coverage } : {}),
                     };
                 }
             }
             const decorate = (row) => withMatchedOn({ ...row, ...(row.schemaCode && row.code === undefined ? { code: row.schemaCode } : {}) }, query);
-            const decoratedMatches = { ...search.matches, model: { ...search.matches.model, items: search.matches.model.items.map(decorate) }, field: { ...search.matches.field, items: search.matches.field.items.map(decorate) }, service: { ...search.matches.service, items: search.matches.service.items.map(decorate) } };
+            const decoratedMatches = { ...scopedSearch.matches, model: { ...scopedSearch.matches.model, items: scopedSearch.matches.model.items.map(decorate) }, field: { ...scopedSearch.matches.field, items: scopedSearch.matches.field.items.map(decorate) }, service: { ...scopedSearch.matches.service, items: scopedSearch.matches.service.items.map(decorate) } };
             const noEntityHit = search.matches.model.total === 0 && search.matches.field.total === 0 && search.matches.service.total === 0;
             const composite = /\s|\+|,|\b(?:AND|OR)\b/i.test(query);
             const searchNote = "实体检索：业务名/实体 name+code 使用子串匹配。\n规则检索：规则 code+name 使用词首匹配（中文子串不命中）。";
@@ -242,8 +270,12 @@ export async function executeGraphTool(name, rawArgs) {
             return toolResult({
                 status: "ok",
                 query,
+                ...(queries.length > 1 ? { queries, match: args.match === "all" ? "all" : "any" } : {}),
+                hitModels: [...hitModels],
+                ...(() => { const page = cap([...hitFieldModels].flatMap((schema) => entityInventory().filter((r) => r.kind === "field" && r.schemaCode === schema && (!applicationCode || r.applicationCode === applicationCode)).map((r) => ({ schemaCode: schema, code: r.code, name: r.name }))), offset, limit); return { hitFields: page.rows, hitFieldsCount: page.total, ...(page.truncated ? { hitFieldsTruncated: true, hitFieldsNextOffset: page.nextOffset } : {}) }; })(),
                 found: resolvedEntity !== undefined,
-                ...(resolvedEntity ? { resolved: { kind: resolvedEntity.kind, schemaCode: "schemaCode" in resolvedEntity ? resolvedEntity.schemaCode : "", code: resolvedEntity.code, matchedOn: { on: resolvedEntity.name.includes(query) ? "name" : "code", fragment: query } } } : {}),
+                ...(resolvedEntity ? { resolved: { kind: resolvedEntity.kind, schemaCode: "schemaCode" in resolvedEntity ? resolvedEntity.schemaCode : "", code: resolvedEntity.code, matchedOn: { on: resolvedEntity.name.includes(query) ? "name" : "code", fragment: query }, ...(resolvedEntity.applicationCode ? { applicationCode: resolvedEntity.applicationCode } : {}) } } : {}),
+                ...(resolvedEntity ? { otherCandidates: allCandidates.filter((r) => r.code !== resolvedEntity.code).slice(0, 5).map((r) => ({ schemaCode: r.schemaCode ?? r.code, name: r.name, ...(r.applicationCode ? { applicationCode: r.applicationCode } : {}) })) } : {}),
                 ...(ambiguous ? { ambiguous: true, candidates: exactSame.map((r) => ({ schemaCode: r.schemaCode, code: r.code, name: r.name })) } : {}),
                 ...(kind !== undefined ? { kind } : {}),
                 index,
@@ -253,11 +285,12 @@ export async function executeGraphTool(name, rawArgs) {
                 ...(nextCall ? { nextCall } : {}),
                 ...(noEntityHit && composite ? { unsupportedQuerySyntax: true, hint: "组合检索暂不支持，请拆词单查后求交" } : {}),
                 ...(noEntityHit ? { suggestions: suggestions(query), hint: "可尝试 suggestions 中的实体 code/name；引用明细请使用匹配 code 查 references/impact" } : {}),
-                searchNote: `${searchNote}${paginationNote}`,
+                searchNote: `${searchNote}${paginationNote}${queries.length > 1 ? " 规则面（词首匹配）不参与 queries[] 的实体求交。" : ""}`,
                 ...(search.note ? { searchNote: `${searchNote}\n${search.note}` } : {}),
                 // 旧句「索引不含规则条件叶子与流程绑定」漏了表单与流程权限（r35a-F4 实证
                 // 探针据此差点误删被表单引用的字段）。改为指向结构化 coverage，不再靠散文。
-                note: `零命中只代表 references[].coverage.scanned 面没有命中；本索引覆盖应用：${index.coverage.applicationCodes.join("、") || "（未知）"}，不代表其他应用没有结果；notScanned 面（尤其 form 与 workflow.permissions）未扫描，不可据此判定可安全删除或无影响`,
+                coverage: { ...index.coverage, scanned: ["businessrule", "datarule", "listview"], notScanned: ["form", "workflow.permissions", "workflow.bindings", "onlinejs", "rule.conditions"] },
+                note: `零命中只代表 references[].coverage.scanned 面没有命中；字段面覆盖应用：${index.coverage.fields?.coveredApplications.join("、") || "（未知）"}；notScanned 面（尤其 form 与 workflow.permissions）未扫描，不可据此判定可安全删除或无影响`,
             });
         }
         return toolError(`未知工具：${name}`);

package/dist/model-purge.js

@@ -324,6 +324,7 @@ export async function cmdModelPurge(args) {
     const result = {
         status,
         schemaCode,
+        verdict: plan.modelExists && !failed ? "cascading" : "clean",
         ...(plan.workflowCode !== undefined ? { workflowCode: plan.workflowCode } : {}),
         deletedInstances: steps.filter((step) => step.step.startsWith("workflow.delete_instance:") && step.status === "ok").length,
         ...(unremovableInstances.length > 0 ? { unremovableInstances } : {}),

package/dist/residue.js

@@ -7,6 +7,15 @@ import { SessionManager } from "./session-manager.js";
 import { makeToolContext } from "./context.js";
 import { emitInvalid, emitResult } from "./command-transport.js";
 const MAX_ITEMS = 20;
+const SYSTEM_RULE_NAMES = new Set(["Available", "Cancel", "Create", "Delete", "GetList", "Load", "Update"]);
+function residueOrigin(row, faceName) {
+    if (row.defaultRule === true || row.preset === true || row.system === true || row.systemPreset === true)
+        return "system-preset";
+    if (faceName === "rule" && SYSTEM_RULE_NAMES.has(nameOf(row, codeOf(row))))
+        return "system-preset";
+    // Do not guess for datarules or otherwise unmarked rows.
+    return row.origin === "system-preset" || row.origin === "user" ? row.origin : undefined;
+}
 function face(faceName, rows, extra = {}) {
     return { face: faceName, ...extra, count: rows.length, items: rows.slice(0, MAX_ITEMS) };
 }
@@ -64,8 +73,8 @@ async function deepFaces(session, model) {
         // A missing form is an absent online-js face, not a scan failure.
     }
     return [
-        face("rule", rules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)) })), { model: schemaCode }),
-        face("datarule", datarules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)) })), { model: schemaCode }),
+        face("rule", rules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)), ...(residueOrigin(row, "rule") ? { origin: residueOrigin(row, "rule") } : {}) })), { model: schemaCode }),
+        face("datarule", datarules.map((row) => ({ code: codeOf(row), name: nameOf(row, codeOf(row)), ...(residueOrigin(row, "datarule") ? { origin: residueOrigin(row, "datarule") } : {}) })), { model: schemaCode }),
         face("onlinejs", online, { model: schemaCode }),
     ];
 }
@@ -92,13 +101,21 @@ export async function scanResidues(session, prefix, options = {}) {
         for (const model of models)
             faces.push(...await deepFaces(session, model));
     }
+    const systemPresetCount = faces.reduce((sum, item) => sum + item.items.filter((row) => row.origin === "system-preset").length, 0);
+    const userResidues = faces.reduce((sum, item) => sum + item.items.filter((row) => row.origin !== "system-preset").length, 0);
     const totalResidues = faces.reduce((sum, item) => sum + item.count, 0);
+    const modelFace = faces.filter((item) => item.face === "model");
+    const hasModelResidue = modelFace.some((item) => item.count > 0);
+    const hasOtherResidue = faces.some((item) => item.face !== "model" && item.count > 0);
+    const pendingCascade = !hasModelResidue && hasOtherResidue;
     return {
         prefix,
         faces,
         totalResidues,
-        clean: totalResidues === 0,
-        note: "report 面暂停维护未扫描；workflow 模板跟模型走（模型删即删）",
+        clean: userResidues === 0 && !pendingCascade,
+        ...(systemPresetCount > 0 ? { systemPresetCount } : {}),
+        ...(pendingCascade ? { pendingCascade: true } : {}),
+        note: pendingCascade ? "模型已不存在但仍有级联面命中：级联窗口内，等 40-60s 重跑，幂等" : "report 面暂停维护未扫描；workflow 模板跟模型走（模型删即删）",
     };
 }
 export async function cmdResidue(prefix, options, transport) {

package/dist/rule-when.js

@@ -34,10 +34,65 @@ function parseWhen(raw) {
     const value = /^-?\d+(\.\d+)?$/.test(rawValue.trim()) ? Number(rawValue.trim()) : rawValue.trim();
     return { field, op, value };
 }
+/**
+ * 人读层只投影图中真正存在的节点；它不是另一套编译结果。
+ * `matchBy` 明确区分执行门（dataCondition）与选行（filterCondition），
+ * 避免 dry-run 只给 sha256 时把两者误认为同一种条件。
+ */
+export function compiledRuleSummary(nodeGraph) {
+    const nodes = Array.isArray(nodeGraph.nodes) ? nodeGraph.nodes : [];
+    return nodes
+        .filter((node) => !!node && typeof node === "object" && nodeTypeOf(node) !== undefined && nodeTypeOf(node) !== "START" && nodeTypeOf(node) !== "END")
+        .map((node) => {
+        const dataCondition = node.dataCondition;
+        const filterCondition = node.filterCondition;
+        const rawActions = Array.isArray(node.dataActions) ? node.dataActions : Array.isArray(node.actions) ? node.actions : [];
+        const currentRowFilter = filterCondition !== undefined && conditionText(filterCondition) === "id=id";
+        const matchBy = dataCondition !== undefined
+            ? `dataCondition: ${conditionText(dataCondition)}`
+            : filterCondition !== undefined && !currentRowFilter
+                ? `filterCondition: ${conditionText(filterCondition)}`
+                : "always";
+        const actions = rawActions
+            .filter((action) => !!action && typeof action === "object")
+            .map((action) => {
+            const field = action.targetDataItem ?? action.field ?? action.targetField;
+            const value = action.value ?? action.currentDataItemValue;
+            return {
+                ...(field !== undefined ? { field } : {}),
+                ...(value !== undefined ? { value } : {}),
+                ...(action.ruleValueType !== undefined ? { valueType: action.ruleValueType } : {}),
+                ...(action.ruleActionType !== undefined ? { actionType: action.ruleActionType } : {}),
+            };
+        });
+        return { nodeType: nodeTypeOf(node), matchBy, actions };
+    });
+}
+function nodeTypeOf(node) {
+    return typeof node.nodeType === "string" ? node.nodeType : undefined;
+}
+function conditionText(condition) {
+    if (!condition || typeof condition !== "object")
+        return "always";
+    const value = condition;
+    const groups = Array.isArray(value.conditionGroup) ? value.conditionGroup : Array.isArray(value.mainConditions) ? value.mainConditions : [];
+    const leaves = Array.isArray(groups[0]) ? groups[0] : groups;
+    const text = leaves
+        .filter((leaf) => !!leaf && typeof leaf === "object")
+        .map((leaf) => {
+        const field = leaf.currentSchemaDataItem ?? leaf.targetSchemaDataItem ?? "?";
+        const op = leaf.ruleDataConditionType ?? leaf.ruleConditionType ?? "?";
+        const operators = { EQ: "=", NEQ: "!=", GT: ">", LT: "<", GTEQ: ">=", LTEQ: "<=", CT: "~=", NCT: "!~" };
+        const right = leaf.value
+            ?? (leaf.currentDataItemValue !== undefined ? `{${leaf.currentDataItemValue}}` : undefined)
+            ?? (leaf.targetSchemaDataItem !== undefined ? leaf.currentSchemaDataItem : "?");
+        return `${String(field)}${operators[String(op)] ?? String(op)}${String(right)}`;
+    })
+        .join(" AND ");
+    return text || "always";
+}
 /** 编译 --when/--then DSL 为设计器验证形状的规则图（导出供测试断言）。 */
 export function composeRuleWhenGraph(options) {
-    if (options.when.length === 0)
-        throw new Error("至少给一个 --when 条件；无条件更新整表是 bench23 病灶（空 mainConditions=无条件更新全部行）");
     if (options.then.length === 0)
         throw new Error("至少给一个 --then 动作");
     const leaves = [];
@@ -81,7 +136,7 @@ export function composeRuleWhenGraph(options) {
                     // UPDATE.filterCondition selects rows; it is not an execution gate.
                     // Keep the trigger row as the default target and put --when on the
                     // platform's real execution-gate field (dataCondition).
-                    dataCondition: { conditionGroup: [leaves] },
+                    ...(leaves.length > 0 ? { dataCondition: { conditionGroup: [leaves] } } : {}),
                     filterCondition: { mainConditions: [[{ targetSchemaDataItem: "id", ruleConditionType: "EQ", ruleValueType: "DYNAMIC", currentSchemaDataItem: "id" }]], sheetConditions: [] },
                     dataActions: actions },
                 { nodeCode: "End", nodeType: "END" },
@@ -126,7 +181,7 @@ export async function cmdRuleWhen(args) {
     const name = flag("--name");
     const environment = flag("--env") ?? flag("--environment");
     const apply = args.includes("--apply");
-    const usage = '用法：omc rule-when --schema <模型> --on create|update --when "字段=值" [--when ...可多个,AND] --then "set:字段=值|{来源字段}|{公式}" [--then ...] [--apply]\n触发时机只有 create|update（**没有 submit**；“提交时”用 create 或 update）。条件操作符：= != > < >= <= ~=（包含） !~（不包含）。默认 dry-run；--apply 保存并发布（rule.enable 仍需显式执行）。';
+    const usage = '用法：omc rule-when --schema <模型> --on create|update [--when "字段=值" ...] --then "set:字段=值|{来源字段}|{公式}" [--then ...] [--apply]\n触发时机只有 create|update（**没有 submit**；“提交时”用 create 或 update）。条件操作符：= != > < >= <= ~=（包含） !~（不包含）。省略 --when 表示 always（仍按当前 _input.id 定位，不更新整表）。默认 dry-run；--apply 保存并发布（rule.enable 仍需显式执行）。';
     const invalid = (message) => {
         writeEnvelope(envelope("error", {}, request, { code: "invalid-input", message: `${message}\n${usage}`, retryable: false }));
         return CLI_EXIT_CODES.invalidInput;
@@ -160,8 +215,21 @@ export async function cmdRuleWhen(args) {
     const scopedResult = {
         ...result,
         rowScope,
+        compiled: compiledRuleSummary(result && typeof result.nodeGraph === "object" && result.nodeGraph !== null
+            ? result.nodeGraph
+            : createArgs.nodeGraph),
+        detailReadHint: {
+            detailFile: "cat <detailFile>",
+            detailArtifactId: "omc artifact get <detailArtifactId>",
+        },
     };
     const classified = classifyResult(result);
+    if (apply && classified.status === "ok") {
+        scopedResult.effectiveAfter = {
+            note: "规则保存后生效存在延迟；改数据后以读回的 changedFields 为准，不要以第一次读回判未生效",
+            verifyHint: "同一条 data.update 后 data.load 复核",
+        };
+    }
     writeEnvelope(envelope(classified.status, scopedResult, request, classified.error));
     if (apply && classified.status === "ok")
         process.stderr.write("[omc] 前台生效验证清单（后端通过≠门户生效）：1) omc call rule.enable 启用；2) 造一条命中 --when 的测试数据提交；3) 门户打开该记录核对 --then 字段已变更；4) 再造一条不命中的数据确认不误改；5) 设计器打开本规则确认节点/条件显示正常。\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stalfh233/omc-cli",
-  "version": "0.6.21",
+  "version": "0.6.23",
   "description": "CloudPivot 8.6 configuration capability CLI — governed, fail-closed, coverage-manifest bounded.",
   "type": "module",
   "bin": {
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "commander": "14.0.3",
-    "omc-core": "0.6.21",
+    "omc-core": "0.6.23",
     "proper-lockfile": "4.1.2",
     "write-file-atomic": "6.0.0",
     "zod": "^3.23.8",
@@ -73,6 +73,6 @@
     "directory": "packages/omc-cli"
   },
   "optionalDependencies": {
-    "@stalfh233/omc-fake-platform": "0.6.21"
+    "@stalfh233/omc-fake-platform": "0.6.23"
   }
 }

package/skills/omc-start-here.md

@@ -29,10 +29,7 @@ be treated as a second source. Read this, then follow the topics it names.
    方法论按 `route.readSections` 逐节读：对每条 `{topic, section}` 执行 `omc help <topic> --section "<section>"`（单节 0.4–3.4KB）。`omc help <topic>` 默认只回节索引（约 1KB，含每节字节数）；**不要 `--all` 读整篇**（5–14KB，读一次就留在后续每一轮窗口）。**带着具体问题（错误码/跨能力语义/某个词）直接 `omc help --search "<词>"`**——跨全部 topic 全文检索，命中节的正文随结果内联返回，一次调用就是答案；**严禁自己写 `for t in …; do omc help $t --all | grep …` 循环**（r18 实测 12 调用/176KB，检索一次 8KB 搞定）。
 1b. **改/删/重命名既有对象前先看影响面（本地规则图索引）**：`omc graph pull --env <env>` 一次拉全平台建本地索引（增量、秒级、带锁与 gap 报告），之后 `omc graph references <service|model|field> <code>` 离线答「谁引用了它」——一调替代逐模型 `rule.get` 枚举（r30 实测影响评估手工枚举 8×rule.get，graph 一调可达）；`impact <kind> <code>` 看爆炸半径、`search <词>` 找规则 code、`status` 看索引新鲜度。索引不含规则条件叶子与流程绑定，命中后仍以 `rule.get` 原文为准。无索引时会拒绝并指路 pull。宿主已接 MCP 时用 `omc mcp-graph --path <项目根>`（工具 `omc_graph_explore`/`omc_graph_status`）。
 
-**图谱只覆盖单应用时怎么按应用盘点（只读）**：先用
-`omc call app.list` 列出应用，再用
-`omc call model.list --args '{"applicationCode":"<code>"}'` 按应用盘点模型。
-graph 索引 coverage 默认只含配置应用；coverage 未命中不等于应用或模型不存在。
+**图谱多应用覆盖时怎么盘点（只读）**：优先用 `omc graph pull --all-applications --env <env>` 建全租户索引；也可用 `--application-codes <a,b,c>` 指定应用，再用 `omc graph status` 看 coveredApplications/tenantApplications。
 1c. **写后端 Java 源码（在线开发）走工作区而不是一条条 call**：`omc programming pull --env <env> --app <appCode>` 把业务规则源码拉进 `.omc-programming/`（git 可管），改文件后 `omc programming status` → `omc programming apply [--publish]`（逐文件走编程面治理）；图形化规则转编码用 `omc programming adopt --schema <s> --rule <r>`；验证用 `omc programming test --schema <s> --rule <r>`（fixture 驱动：compile→publish→触发→断言→清理）。**平台运行时只执行已发布版**：只 save 不 publish 等于没改；publish 内部会编译并把规则切 CODING+enable。包路径/类名不得改。
 2. 写前只需读 `omc-config-draft-review`（人审门）与 `omc-five-piece-flow`（发现→草稿→权限→执行→回读）；`omc-business-configuration` 按命中的能力分节读（见 `next` 的 `readSections`），不要整篇预取。
 3. 环境名以 `omc doctor` 的「环境=」或 `.omc-env` 为准；工具不确定先用默认 `describe`/`--example`，只有单个工具缺形状才用 `--full`；`describe` 带 `exampleHint`/`recipeHint` 时优先 `--example`。