omc-core 0.4.37 → 0.4.39

package/dist/capability-shape.js

@@ -0,0 +1,154 @@
+export const CAPABILITY_CONTROL_TYPES = Object.freeze({
+    0: 1,
+    1: 2,
+    2: 4,
+    3: 3,
+    4: 8,
+    5: 62,
+    6: 9,
+    8: 201,
+    9: 80,
+    10: 14,
+    11: 81,
+    12: 5,
+    13: 6,
+    14: 7,
+    15: 19,
+    16: 82,
+    17: 17,
+    28: 28,
+    50: 50,
+    51: 51,
+    60: 60,
+    61: 61,
+    100: 89,
+});
+const commonEvidence = [
+    "8.6.26 BizPropertyType/BizFormPropertyType",
+    "desensitized-config-shapes.md §3.2",
+    "frontend-dist/admin/js/4280.*.js designer bundle",
+];
+const shape = (propertyType, field, control, evidence = commonEvidence) => ({ propertyType, controlType: CAPABILITY_CONTROL_TYPES[propertyType], field, control, evidence });
+const face = (requiredKeys, defaults, evidence = commonEvidence, nonEmptyKeys) => ({ requiredKeys, defaults, evidence, ...(nonEmptyKeys ? { nonEmptyKeys } : {}) });
+export const FIELD_CAPABILITY_SHAPES = Object.freeze({
+    0: shape(0, face([], { dictionaryData: "" }), face(["defaultValue", "maxLength"], { defaultValue: null, placeholder: "请输入", maxLength: 200, currentMaxLength: 2000000, noRepeat: false, enableEncrypt: false })),
+    1: shape(1, face([], { dictionaryData: "" }), face(["defaultValue", "maxLength"], { defaultValue: null, textAreaType: "longText", maxLength: 2000, placeholder: "请输入" })),
+    2: shape(2, face([], { dictionaryData: "" }), face(["defaultValue", "format"], { defaultValue: null, placeholder: "请输入", computeFormula: "", format1: "decimal", format: "decimal", verifyFormula: "", isFlag: false })),
+    3: shape(3, face(["format"], { dictionaryData: "", format: "YYYY-MM-DD" }), face(["format", "format1"], { defaultValue: null, dataItemDefault: "", format1: "YYYY-MM-DD", format: "YYYY-MM-DD", minDate: "", maxDate: "", verifyFormula: "" })),
+    4: shape(4, face(["defaultValue"], { defaultValue: false }), face(["defaultValue"], { defaultValue: true })),
+    6: shape(6, face([], {}), face(["displayTemplate", "limitNumber", "fileNumber", "batch"], { displayTemplate: true, limitNumber: "unlimited", fileNumber: 1, batch: true, displayFormula: "", requiredFormula: "", readonlyFormula: false, limit: "200M", onUpload: "", onDelete: "" }), ["cp-sources/frontend-dist/admin/js/12404.1675d362.js attachment schema", "cp-sources/frontend-dist/admin/js/24187.6e75bd30.js uploadOptions/baseUploadOptions"]),
+    // CHILD_TABLE(8) — scalar child table. Lifted from blocked on 2026-09-18:
+    // the wire shape is live-accepted (omc-core `childtable-field-contract.ts`,
+    // live record `childtable-execute-20260908070635135.md`, 2026-09-08) and the
+    // Sheet201 form control is live-proven (omc-core
+    // `childtable-sheet201-contract.ts`). The field row carries no `options`; its
+    // definition is the `subSchema` ({code:<parent field code>, properties:[...]})
+    // and the form control is Sheet(201) with `columns`. Nested CHILD_TABLE (a
+    // child of a child) remains out of coverage and is refused in
+    // `assertFieldFamilyAllowed`.
+    8: shape(8, face([], {}), face([], {}), ["omc-core childtable-field-contract.ts (live 2026-09-08)", "omc-core childtable-sheet201-contract.ts", "8.6.26 BizPropertyType CHILD_TABLE=8 / BizFormPropertyType Sheet=201"]),
+    9: shape(9, face([], { dictionaryData: "" }), face([], { schemaCode: "", displayField: "name", relativePropertyMatchCode: "name", queryCode: "", linkMode: true, showStyle: "", selectMode: "popup", isAuthorize: true, treeView: false, treeStartFromRoot: false, mappings: "", searchFormula: "", conditions: "" })),
+    10: shape(10, face(["defaultValue"], { defaultValue: "" }), face(["locationType", "addressDetail", "showEmpty", "emptyValue", "autoGetLocation"], { locationType: "pp-cc-aa", addressDetail: "true", showEmpty: "false", emptyValue: "请选择", autoGetLocation: "false" }), [".scratch/omc-app-management/research/desensitized-config-shapes.md §3.2 ADDRESS", "cp-sources/frontend-dist/admin/js/12404.1675d362.js address schema", ".scratch/omc-app-management/evidence/field-families-fwb-20260914.md:113-119 (fwb field row {\"defaultValue\":\"\",\"virtualField\":false})"]),
+    11: shape(11, face([], { dictionaryData: "" }), face([], { schemaCode: "", displayField: "name", relativePropertyMatchCode: "name", queryCode: "", linkMode: true, showStyle: "", selectMode: "popup", isAuthorize: true, treeView: false, treeStartFromRoot: false, mappings: "", searchFormula: "", conditions: "" })),
+    // Ticket 108 determination: selection families (12/13/14/15) emit NO
+    // dictionaryData — designer-produced rows carry none of it (fwb §12-15
+    // outer key unions) and live 8.6.26 proves the platform merely
+    // accepts-and-persists the extra key without requiring it. The other
+    // text/date/relation families keep the designer-carried empty-string
+    // default; ATTACHMENT(6) stays intentionally empty (system rows often
+    // have no options). The wider 2026-09-14 key unions are multi-field
+    // unions of designer rows — platform auto-fill territory, never required
+    // for creation (minimal default + caller passthrough is the boundary).
+    12: shape(12, face([], {}), face([], { defaultValue: "", options: "", hasLabel: false })),
+    13: shape(13, face([], {}), face([], { defaultValue: "", options: "", hasLabel: false, direction: "horizontal", displaySetting: "showSelected" })),
+    14: shape(14, face([], {}), face([], { displayEmpty: true, emptyValue: "请选择", multi: false })),
+    15: shape(15, face([], {}), face([], { displayEmpty: true, emptyValue: "请选择", multi: true })),
+    16: shape(16, face([], { dictionaryData: "" }), face([], {})),
+    17: shape(17, face(["defaultValue", "dictionaryData", "maxLength"], { defaultValue: "", dictionaryData: "", maxLength: 200 }), face(["defaultValue", "placeholder", "maxLength"], { defaultValue: "", placeholder: "请输入", maxLength: 200 }), [".scratch/omc-app-management/research/desensitized-config-shapes.md §3.2 HYPER_LINK", "cp-sources/frontend-dist/admin/js/12404.1675d362.js URL schema"]),
+    28: shape(28, face(["format"], { defaultValue: "", format: "HH:mm" }), face(["format", "format1"], { defaultValue: "none", dataItemDefault: "", format: "HH:mm", format1: "HH:mm", syncFormate: true }), [".scratch/omc-app-management/research/desensitized-config-shapes.md §3.2 TIME", "cp-sources/frontend-dist/admin/js/46948.4825f4e2.js Time1760153573819"]),
+    // Org-selector families. Evidence: the yst/fwb published-face dumps
+    // (origin/research/yst-examples, 2656 rows of types 5/50/51/60/61) show the
+    // FIELD row (bizproperty) options as null or `{defaultValue, mappings,
+    // virtualField, noRepeat}` — deptVisible/multi NEVER appear there. The
+    // deptVisible/multi discriminator is FORM-CONTROL-face only (source:
+    // DataModelInitUtils.updateSelectionType / BizPropertyTypeUpdateUtils.
+    // disposeUpdateType read `control.options`; ticket 69 already writes them on
+    // the control face). Field faces below mirror the observed publish-safe
+    // shapes (single: defaultValue ""; multi: defaultValue []).
+    5: shape(5, face([], { defaultValue: [], mappings: "", virtualField: false }), face(["defaultValue", "deptVisible", "multi"], { defaultValue: [], defaultValueType: "", deptVisible: "all", multi: "true" })),
+    50: shape(50, face([], { defaultValue: "", mappings: "", virtualField: false }), face(["deptVisible", "multi"], { deptVisible: "user", multi: "false" })),
+    51: shape(51, face([], { defaultValue: [], mappings: "", virtualField: false }), face(["deptVisible", "multi"], { deptVisible: "user", multi: "true" })),
+    60: shape(60, face([], { defaultValue: [], mappings: "", virtualField: false }), face(["deptVisible", "multi"], { deptVisible: "org", multi: "false" })),
+    61: shape(61, face([], { defaultValue: [], mappings: "", virtualField: false }), face(["deptVisible", "multi"], { deptVisible: "org", multi: "true" })),
+    100: shape(100, face([], {}), face([], { defaultValue: null })),
+});
+export const BLOCKED_CAPABILITY_SHAPES = Object.freeze({});
+/**
+ * Ticket 101 — control codes observed in real forms but with NO field-family
+ * emission path. PHONE(24) and PHOTO(10) are authoritative 8.6.26 control
+ * codes (BizFormPropertyType.java:23-51), but BizPropertyType.java:27-54 has
+ * no PHONE/PHOTO entry, so no accepted field family can scaffold them and no
+ * options shape is evidenced for a write. Declared blocked so the absence
+ * reads as policy (fail-closed), not omission; caller-provided explicit
+ * layouts are unaffected. Adding an emission path requires new family
+ * evidence AND consciously lifting this declaration.
+ */
+export const BLOCKED_CONTROL_CODES = Object.freeze({
+    24: "PHONE control has no BizPropertyType mapping (BizPropertyType.java:27-54) — no field family emits it; creation not offered until a family + options shape are evidenced",
+    10: "PHOTO control has no BizPropertyType mapping (BizPropertyType.java:27-54) — no field family emits it; creation not offered until a family + options shape are evidenced",
+});
+export const CAPABILITY_SHAPE_ACCEPTED_TYPES = Object.freeze(Object.keys(FIELD_CAPABILITY_SHAPES).map(Number));
+export function capabilityShapeFor(type) {
+    return FIELD_CAPABILITY_SHAPES[type] ?? BLOCKED_CAPABILITY_SHAPES[type];
+}
+export function capabilityShapeError(type, faceName, options) {
+    const current = capabilityShapeFor(type);
+    if (!current)
+        return `propertyType ${type} has no capability shape`;
+    if (current.blocked)
+        return `${current.citation ?? "blocked capability"} (propertyType ${type})`;
+    const face = current[faceName];
+    const missing = face.requiredKeys.filter((key) => options[key] === undefined || ((face.nonEmptyKeys ?? []).includes(key) && options[key] === ""));
+    return missing.length > 0 ? `capability shape ${faceName} missing required keys for propertyType ${type}: ${missing.join(", ")}` : undefined;
+}
+export function assertCapabilityShapeContract() {
+    for (const type of CAPABILITY_SHAPE_ACCEPTED_TYPES) {
+        const current = FIELD_CAPABILITY_SHAPES[type];
+        if (!current)
+            throw new Error(`capability shape missing for propertyType ${type}`);
+        if (current.blocked && !current.citation)
+            throw new Error(`blocked capability shape ${type} requires citation`);
+        if (current.controlType !== CAPABILITY_CONTROL_TYPES[type])
+            throw new Error(`capability shape control type mismatch for ${type}`);
+        for (const key of current.field.requiredKeys)
+            if (!(key in current.field.defaults))
+                throw new Error(`field shape ${type} missing default for ${key}`);
+        for (const key of current.control.requiredKeys)
+            if (!(key in current.control.defaults))
+                throw new Error(`control shape ${type} missing default for ${key}`);
+    }
+}
+export function assertCapabilityFace(type, faceName, options) {
+    const current = capabilityShapeFor(type);
+    if (!current)
+        throw new Error(`capability shape missing for propertyType ${type}`);
+    if (current.blocked)
+        throw new Error(`propertyType ${type} is blocked: ${current.citation ?? "missing evidence"}`);
+    const face = current[faceName];
+    const missing = face.requiredKeys.filter((key) => options[key] === undefined || ((face.nonEmptyKeys ?? []).includes(key) && options[key] === ""));
+    if (missing.length > 0)
+        throw new Error(`capability shape ${faceName} missing required keys for propertyType ${type}: ${missing.join(", ")}`);
+}
+export function deriveFieldOptions(type, explicit) {
+    const current = capabilityShapeFor(type);
+    if (!current || current.blocked)
+        throw new Error(`propertyType ${type} is blocked or has no capability shape`);
+    return { ...current.field.defaults, ...(explicit ?? {}) };
+}
+export function deriveControlOptions(type, explicit) {
+    const current = capabilityShapeFor(type);
+    if (!current || current.blocked)
+        throw new Error(`propertyType ${type} is blocked or has no capability shape`);
+    return { ...current.control.defaults, ...(explicit ?? {}) };
+}
+//# sourceMappingURL=capability-shape.js.map

package/dist/index.js

@@ -1,3 +1,10 @@
+export * from "./zip.js";
+export * from "./capability-shape.js";
+export * from "./json-column.js";
+export * from "./refusal.js";
+export * from "./wire-facts.js";
+export * from "./relation-shape.js";
+export * from "./list-view-wire.js";
 export * from "./ordinary-synthesis-router.js";
 export * from "./cloudpivot-adapter.js";
 export * from "./cloudpivot-fingerprints.js";

package/dist/json-column.js

@@ -0,0 +1,68 @@
+/**
+ * Ticket 52 — one explicit home for "a platform JSON column may arrive as a
+ * string (or an object)" decoding/encoding. Previously every lane carried a
+ * local copy with subtly different behaviour; the deliberate differences are
+ * now NAMED POLICIES chosen at each call site:
+ *
+ * - `JSON_COLUMN_PASSTHROUGH` — non-strings pass through untouched
+ *   (undefined stays undefined); unparseable strings return verbatim.
+ *   (datarule options, field.list readback)
+ * - `JSON_COLUMN_NULL_COALESCE` — non-strings null-coalesce (undefined →
+ *   null); blank/unparseable strings return verbatim ("" stays "").
+ *   (businessrule node/route/schedulerSetting, b2 configJson/parameter faces,
+ *   rule-support parameter faces, list-view condition options)
+ * - `{ invalid: "throw" }` — a corrupt column is a hard error
+ *   (field.update merge base reads the stored options strictly).
+ *
+ * Blank strings ("", "   ") are not valid JSON, so they always take the
+ * `invalid` branch; at every previous site that meant passthrough.
+ */
+export const JSON_COLUMN_PASSTHROUGH = { nonString: "passthrough", invalid: "passthrough" };
+export const JSON_COLUMN_NULL_COALESCE = { nonString: "null", invalid: "passthrough" };
+export function decodeJsonColumn(value, policy) {
+    if (typeof value !== "string")
+        return policy.nonString === "null" ? value ?? null : value;
+    try {
+        return JSON.parse(value);
+    }
+    catch (error) {
+        if (policy.invalid === "throw")
+            throw error;
+        return value;
+    }
+}
+/** Wire encode: a string is sent as-is, anything else is JSON-stringified. */
+export function encodeJsonColumn(value) {
+    return typeof value === "string" ? value : JSON.stringify(value);
+}
+/**
+ * Decode an options face that may be a JSON string or already an object into
+ * a plain record (or undefined). Policies preserve the previous per-site
+ * semantics: relation options accept strings/objects/arrays loosely; the
+ * FORMULA formulaConfig validator only accepts strings that parse to a
+ * non-array object; field.update/form-scaffold strict reads throw on corrupt
+ * strings.
+ */
+export function decodeJsonObjectColumn(value, policy) {
+    const asRecord = (parsed) => {
+        if (!parsed || typeof parsed !== "object")
+            return undefined;
+        if (Array.isArray(parsed))
+            return policy.array === "reject" ? undefined : parsed;
+        return parsed;
+    };
+    if (typeof value === "string") {
+        try {
+            return asRecord(JSON.parse(value));
+        }
+        catch (error) {
+            if (policy.invalid === "throw")
+                throw error;
+            return undefined;
+        }
+    }
+    if (policy.object === "reject")
+        return undefined;
+    return asRecord(value);
+}
+//# sourceMappingURL=json-column.js.map

package/dist/list-view-wire.js

@@ -0,0 +1,101 @@
+/** 列表视图按钮 wire 契约（真 lane 与假平台共用）：动作枚举、按钮校验。原居 cli list-view-shapes；C1 下沉。 */
+import { ToolRefusalError } from "./refusal.js";
+export function wireEnum(key, index) {
+    return {
+        key,
+        names: Object.keys(index),
+        index,
+        name: Object.fromEntries(Object.entries(index).map(([name, value]) => [value, name])),
+    };
+}
+/**
+ * BizQueryActionModel enums. `QueryActionType` (QueryActionType.java:13-35) and
+ * `QueryActionRelativeType` (BIZSHEET 0/WORKFLOW 1) both carry
+ * `@JsonValue getIndex()` so the wire body is numeric; the tool speaks the enum
+ * name and decodes on readback. `associationType`/`associationCode` are the
+ * JSON names of the DTO fields `queryActionRelativeType`/`relativeCode`
+ * (`@JsonProperty`, BizQueryActionModel.java:31-35).
+ */
+export const QUERY_ACTION_TYPE = wireEnum("QueryActionType", {
+    QUERY: 1,
+    ADD: 2,
+    EDIT: 3,
+    DELETE: 4,
+    IMPORT: 5,
+    EXPORT: 6,
+    CUSTOM: 7,
+    QR_CODE: 8,
+    EDITOWNER: 9,
+    BATCH_PRINT: 10,
+    BATCH_UPDATE: 11,
+    CUSTOMIZE_BTN: 12,
+    PRINT: 13,
+    COPY: 14,
+    TEMPORARY: 15,
+    SUBMIT: 16,
+    CLEAR_ROW: 17,
+    ADD_BEFORE: 18,
+    ADD_AFTER: 19,
+    MANUAL_SYNC: 20,
+    IMPORT_ATTACHMENT: 21,
+    EXPORT_ATTACHMENT: 22,
+    BATCH_SUBMIT: 23,
+});
+export const QUERY_ACTION_RELATIVE = wireEnum("QueryActionRelativeType", { BIZSHEET: 0, WORKFLOW: 1 });
+function decodeButtonActionConfig(value, code) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value === "string") {
+        try {
+            value = JSON.parse(value);
+        }
+        catch (error) {
+            throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: actionConfig must be valid JSON (${error.message})` });
+        }
+    }
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: actionConfig must decode to an object` });
+    }
+    return value;
+}
+function requireButtonConfig(config, code, bindAction) {
+    const required = bindAction === "SCRIPT" ? ["scriptData"] : bindAction === "BUSINESS_RULE" || bindAction === "FLOW" ? ["targetCode"] : bindAction === "ADD_DATA" || bindAction === "FORM" ? ["schemaCodeVal", "formListData", "configureList"] : [];
+    for (const key of required) {
+        if (config?.[key] === undefined || config[key] === null) {
+            throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: ${bindAction} actionConfig requires ${key}` });
+        }
+    }
+    if (bindAction === "SCRIPT" && typeof config?.scriptData !== "string") {
+        throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: SCRIPT actionConfig.scriptData must be a string` });
+    }
+    if ((bindAction === "ADD_DATA" || bindAction === "FORM") && (typeof config?.schemaCodeVal !== "object" || config.schemaCodeVal === null || Array.isArray(config.schemaCodeVal) || !Array.isArray(config.formListData) || !Array.isArray(config.configureList))) {
+        throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: ${bindAction} actionConfig requires object schemaCodeVal and array formListData/configureList` });
+    }
+}
+export function validateButtonActionConfig(entry) {
+    const bindAction = typeof entry.bindAction === "string" ? entry.bindAction : "";
+    const code = String(entry.code ?? "");
+    const config = decodeButtonActionConfig(entry.actionConfig, code);
+    if (bindAction === "BUSINESS_RULE") {
+        if (typeof entry.targetCode !== "string" || entry.targetCode.length === 0) {
+            throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: BUSINESS_RULE requires targetCode` });
+        }
+        return;
+    }
+    if (bindAction === "FLOW") {
+        if (typeof entry.targetCode !== "string" || entry.targetCode.length === 0) {
+            throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: FLOW requires targetCode (workflow code)` });
+        }
+        // A caller-supplied FLOW actionConfig must carry WorkflowListData; the
+        // runtime indexes [0].workflowCode and iterates configureList. Omitted is
+        // fine — expandButtonActionConfigs derives both from targetCode.
+        if (config !== undefined && (typeof config !== "object" || config === null || !Array.isArray(config.WorkflowListData))) {
+            throw new ToolRefusalError({ status: "refused", blocker: "listview-buttons-invalid", message: `buttons ${code}: FLOW actionConfig requires a WorkflowListData array (or omit actionConfig and the tool derives it from targetCode)` });
+        }
+        return;
+    }
+    if ((bindAction === "ADD_DATA" || bindAction === "FORM") && (entry.targetModel !== undefined || entry.targetForm !== undefined || entry.configureList !== undefined) && entry.actionConfig === undefined)
+        return;
+    requireButtonConfig(config, code, bindAction);
+}
+//# sourceMappingURL=list-view-wire.js.map

package/dist/refusal.js

@@ -0,0 +1,9 @@
+/** 受治理拒收（跨适配器契约）：真 lane 与假平台抛同一类、同一实例。原居 cli tool-types；C1 下沉。 */
+export class ToolRefusalError extends Error {
+    payload;
+    constructor(payload) {
+        super(String(payload["blocker"] ?? "tool refused"));
+        this.payload = payload;
+    }
+}
+//# sourceMappingURL=refusal.js.map

package/dist/relation-shape.js

@@ -0,0 +1,25 @@
+/** 关联字段目标模型解析（真 lane 与假平台共用）。原居 cli field-families；C1 下沉。 */
+import { decodeJsonObjectColumn } from "./json-column.js";
+/** relation options face decode; policy: string-or-object accepted, garbage → undefined. */
+export function relationOptions(options) {
+    return decodeJsonObjectColumn(options, { invalid: "undefined", array: "accept", object: "accept" });
+}
+/**
+ * The relation target model of a bizproperty row. Relation families
+ * (WORK_SHEET / MULT_WORK_SHEET) carry the target model code both as the
+ * row-level `relativeCode` and as the `schemaCode` key inside the options JSON
+ * (field.create writes both). RELEVANCE_DATA(16) is deliberately excluded: it
+ * references another *field* (relevanceField/referenceField), not a model, so
+ * it adds no inbound model reference of its own — the local WORK_SHEET field it
+ * resolves through already carries that reference. Either face counts as an
+ * inbound reference for the model.delete precheck (ticket 23: the server's
+ * deleteFunctions dispatcher refuses asynchronously with
+ * "xxx被模型 yyy 引用,不能删除" — the tool surfaces that check at call time).
+ */
+export function relationTargetOf(row) {
+    if (typeof row.relativeCode === "string" && row.relativeCode.trim())
+        return row.relativeCode.trim();
+    const schemaCode = relationOptions(row.options)?.schemaCode;
+    return typeof schemaCode === "string" && schemaCode.trim() ? schemaCode.trim() : undefined;
+}
+//# sourceMappingURL=relation-shape.js.map

package/dist/wire-facts.js

@@ -0,0 +1,88 @@
+/**
+ * CloudPivot 平台 wire 事实（真机实证）：规则状态/动态源键/模型互删码/运行面查询提交契约与算子表。
+ * 原居 omc-cli 契约文件；C1 拆分后真 lane 与假平台（@stalfh233/omc-fake-platform）共同取用——一张表喂两个适配器。
+ */
+export const RULE_STATUS = Object.freeze({ enabled: "ENABLE", disabled: "DISABLED" });
+export const DYNAMIC_CONDITION_SOURCE_KEY = "currentSchemaDataItem";
+export const DYNAMIC_ACTION_SOURCE_KEY = "currentDataItemValue";
+export const MODEL_REFERENCED_DELETE_ERRCODE = 50000;
+/**
+ * M2 runtime-data wire facts (live-proven). The submit chain, the replayToken
+ * gate, the three-layer queryCondition, and the propertyType injection are the
+ * single source for the handler, the arg schemas, and the fake.
+ */
+export const RUNTIME_DATA_WIRE = Object.freeze({
+    queryConditionShape: "List<List<List<FilterModel>>>（level 1 AND across groups, level 2 OR across and-groups, level 3 AND across leaves）",
+    dslShape: "or>and>叶子",
+    queryBodyCanon: "filters:[], queryVersion:1, queryCode=schemaCode, showTotal",
+    typeCastErrcode: 10009,
+    emptyModelErrcode: 301005,
+    absenceErrcode: 304001,
+    formTypeNoWorkflow: "2",
+    formTypeWorkflow: "1",
+    replayTokenEndpoint: "/api/api/runtime/form/getReplayToken",
+    replayTokenErrcode: 100005,
+    approvalNpeErrcode: 50000,
+    workflowStartDuplicateErrcode: 40000,
+    submitChain: "submit 自持久化（ticket 18 源码证据）：form/submit 持久化 bizObject.data——formType=2 submitBizSheet→saveBizObject（置 COMPLETED，mergeObject 合并）；formType=1 workItem→SubmitDataChangeHandlerImpl.updateBizObject；payload {id,schemaCode,sheetCode,ownerId?,data}+actionCode:\"submit\"，owner 服务端以库内行回填，data 剥 engine 键（sequenceStatus/sequenceNo）",
+    submitInPlace: "无流程且 bizObjectId 有值时先 form/load 预检（缺席 304001 拒绝），再以预检行+formData 合成最小对象直提 runtime/form/submit（submit 自持久化，无预 save/构建 load）；submit 返回 objectId 必须仍是目标 id，否则拒绝；仅无 workflowCode/workItemId/workflowInstanceId 的无 id 便捷链先 form/save 建稿再直提（新建记录）；带 workItemId 或 workflowInstanceId 而缺 bizObjectId 时 fail-closed 拒绝（submit-biz-object-id-required）；workflowCode + 既有无实例 bizObjectId 在 8.6.26 无 REST 就地面（见 workflowStartCreateOnly），持续拒绝并指向 workflowDraftSave 两段式",
+    workflowDraftSave: "门户暂存形状（ticket 13）：POST runtime/form/save 顶层带 workflowCode（无 workflowInstanceId/workItemId）→ FormRuntimeController.saveWorkflow→startWorkflow(finishStart=FALSE)：同 id 建 DRAFT 行 + DRAFT 流程实例 + 发起 workItem，FormSaveVO 返回 {objectId,workflowInstanceId,workItem:{id}}；必须先 GET getReplayToken（isStartWf 分支 verifyReplay，否则 100005），且 data 显式 sequenceStatus:\"DRAFT\"（createAndGetBizObject 空缺省按 PROCESSING 建实例）；提交该草稿 = form/submit formType=1 + workItemId + workflowInstanceId + bizObject.id（submitWorkflowByInstanceIdAndItemId），同 id 就地 PROCESSING，绝不走 workflowCode 分支",
+    workflowStartCreateOnly: "form/submit formType=1 + workflowCode（无 workItemId）→ submitWorkflowByWorkflowCode→startWorkflowInstance(create)→BizObjectFacadeImpl.createAndGetBizObject 纯 INSERT（BizObjectInsertModel 无存在性检查）→ 既有 id 必 40000 Duplicate entry（TID 771f64ee 全栈：ExecutorBase INSERT→BizObjectServiceImplCompanion:275→40000）；8.6.26 唯一 load+update 型就地发起是 WorkflowInstanceFacade 5 参重载（908 行，facade 层供二开扩展消费），无 REST 面",
+    sheetResolution: "explicit caller arg > default-form sheetCode from bizsheet/get > schemaCode fallback",
+    updateBranch: "POST runtime/form/save 更新既有记录：目标 id 必须放进 bizObject.data[\"id\"]（平台 BizObjectModel.getId() 读 data 的 id 键；顶层 bizObject.id 会被忽略并退化为新建）；命中既有记录时 FormRuntimeController.saveBizSheet→BizObjectFacadeImpl.updateBizObject，未命中则 createBizObject 插入",
+    updateStatusRule: "既有记录的 DRAFT/COMPLETED 状态在未显式传 sequenceStatus 时原样保留（saveBizSheet 分支），COMPLETED 记录可直接 update，无需流程",
+    updateMergeRule: "updateBizObject.mergeObject 以库内旧值打底、以本次 data 覆盖 → 部分字段（patch）更新，未传字段保持不变",
+    childRowStatusNote: "子表行（CHILD_TABLE(8)）在 form-save 路径按每行 `rowStatus` 分派（BizObjectUpdateModel.convertBizObjectOpItem）：Added=插入 / Modified=更新 / Deleted=删除；**缺失或其它值=immutable（静默忽略）**。门户前端会为改动行标 `rowStatus:\"Modified\"`；手拼载荷漏了它，子表改动不落库、但写仍返回 errcode 0（真机 2026-10-08：data.update 改子表行无 rowStatus，process_name/计划时间读回全不变）。OMC 自动补：带自身 id 的行→\"Modified\"，无 id 的行→\"Added\"，显式 rowStatus 原样保留。",
+    updateAbsentGuard: "平台对\"带 id 但库内不存在\"不报错而是静默插入（createBizObject），故 data.update 先 form/load 预检，命中缺席则以 304001 拒绝，绝不静默转新增",
+    projectionHint: "所选列在默认视图未配置（值可能存在但列表投影为 null）；先用 listview.configure 配置列，或用 data.load 读单条权威值",
+    formulaFieldNote: "计算字段（FORMULA / 表单「计算」控件、子表计算规则）**不在服务端 API 路径回填/重算**：门户是**前端**算好再提交，API save/update/submit 都不会替它算（真机 2026-09-25：子表计算规则字段落库仍 null；纯主表表达式会算）。OMC 的定位是「字段配好即默认它在前台会算」——**写测试数据时应在 formData 里显式带上预算好的计算值**（让数据与预期自洽），**不要指望平台在 API 保存时替它算，也不要用 API 回读值去断言公式/计算是否正确**。**这类纯前台行为最终由人工在前台（配表单→填表）确认。** 另：带**子表计算字段**的模型，API data.save/data.update 可能因服务端重算（CalculateHandler→FormulaProcessor）NPE 而 50000（真机 2026-10-07，前台路径正常）——此类模型请改用门户录入或避开该字段，别据此判定配置错误。",
+});
+function encodeScalar(value) {
+    if (value === null || value === undefined)
+        return "";
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    if (value instanceof Date)
+        return value.toISOString();
+    return JSON.stringify(value);
+}
+function encodeList(value) {
+    if (Array.isArray(value))
+        return value.map(encodeScalar).join(";");
+    if (typeof value === "string")
+        return value;
+    return encodeScalar(value);
+}
+const numeric = (value) => Number(value);
+function betweenBounds(expected) {
+    const [low, high] = expected.split(";").map(Number);
+    return [low ?? 0, high ?? 0];
+}
+export const RUNTIME_QUERY_OPERATORS = Object.freeze({
+    Eq: { encode: encodeScalar, matches: (actual, expected) => String(actual ?? "") === expected },
+    NotEq: { encode: encodeScalar, matches: (actual, expected) => String(actual ?? "") !== expected },
+    Gt: { encode: encodeScalar, matches: (actual, expected) => numeric(actual) > numeric(expected) },
+    Lt: { encode: encodeScalar, matches: (actual, expected) => numeric(actual) < numeric(expected) },
+    Gte: { encode: encodeScalar, matches: (actual, expected) => numeric(actual) >= numeric(expected) },
+    Lte: { encode: encodeScalar, matches: (actual, expected) => numeric(actual) <= numeric(expected) },
+    Like: { encode: encodeScalar, matches: (actual, expected) => String(actual ?? "").includes(expected) },
+    NotLike: { encode: encodeScalar, matches: (actual, expected) => !String(actual ?? "").includes(expected) },
+    In: { encode: encodeList, matches: (actual, expected) => expected.split(";").includes(String(actual ?? "")) },
+    NotIn: { encode: encodeList, matches: (actual, expected) => !expected.split(";").includes(String(actual ?? "")) },
+    Between: { encode: encodeList, matches: (actual, expected) => { const [low, high] = betweenBounds(expected); return numeric(actual) >= low && numeric(actual) <= high; } },
+    NotBetween: { encode: encodeList, matches: (actual, expected) => { const [low, high] = betweenBounds(expected); return !(numeric(actual) >= low && numeric(actual) <= high); } },
+    IsNull: { encode: () => "", matches: (actual) => actual === null || actual === undefined },
+    IsNotNull: { encode: () => "", matches: (actual) => actual !== null && actual !== undefined },
+});
+export const ENGINE_OWNED_KEYS = Object.freeze(["sequenceStatus", "2147483647_sequenceNo"]);
+export const SUBMIT_STATUS_TRANSITIONS = Object.freeze({
+    /** Start submit / start-item finish moves the row DRAFT -> PROCESSING. */
+    workflowStart: "PROCESSING",
+    /** Approval submit with agree!==false completes the row. */
+    approvalAgree: "COMPLETED",
+    /** Approval submit with agree===false cancels the row. */
+    approvalReject: "CANCELED",
+    /** formType=2 submitBizSheet -> saveBizObject completes in place. */
+    inPlaceSubmit: "COMPLETED",
+});
+//# sourceMappingURL=wire-facts.js.map

package/dist/zip.js

@@ -0,0 +1,156 @@
+import { inflateRawSync } from "node:zlib";
+/**
+ * Ticket 106 — a minimal, dependency-free ZIP reader/writer for the bizservice
+ * IE package face.
+ *
+ * The platform export answers a ZIP with manifest.json + version.md
+ * (BizServiceIEController.java:124-138). Java's ZipOutputStream typically
+ * writes local headers with zeroed sizes plus a trailing data descriptor
+ * (general-purpose bit 3), so the READER resolves entries through the central
+ * directory (whose sizes/CRCs are authoritative) and only uses each local
+ * header to locate the data offset. The WRITER emits stored (method 0)
+ * entries — real zips for fake routes and tests; the platform reader accepts
+ * both stored and deflated entries.
+ */
+const EOCD_SIGNATURE = 0x06054b50;
+const CENTRAL_SIGNATURE = 0x02014b50;
+const LOCAL_SIGNATURE = 0x04034b50;
+const EOCD_SCAN_LIMIT = 65_557; // fixed EOCD (22) + max comment (65_535)
+export class ZipFormatError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ZipFormatError";
+    }
+}
+/** CRC-32 (IEEE 802.3), table-driven. */
+const CRC_TABLE = (() => {
+    const table = new Array(256);
+    for (let n = 0; n < 256; n += 1) {
+        let c = n;
+        for (let k = 0; k < 8; k += 1)
+            c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+        table[n] = c >>> 0;
+    }
+    return table;
+})();
+function crc32(buffer) {
+    let crc = 0xffffffff;
+    for (const byte of buffer)
+        crc = CRC_TABLE[(crc ^ byte) & 0xff] ^ (crc >>> 8);
+    return (crc ^ 0xffffffff) >>> 0;
+}
+/** Locate the End Of Central Directory record; returns its byte offset. */
+function locateEocd(buffer) {
+    const start = Math.max(0, buffer.length - EOCD_SCAN_LIMIT);
+    for (let offset = buffer.length - 22; offset >= start; offset -= 1) {
+        if (buffer.readUInt32LE(offset) === EOCD_SIGNATURE) {
+            const commentLength = buffer.readUInt16LE(offset + 20);
+            if (offset + 22 + commentLength === buffer.length)
+                return offset;
+        }
+    }
+    throw new ZipFormatError("no end-of-central-directory record found");
+}
+/** Read every central-directory entry as name → decompressed Buffer. */
+export function readZipEntries(buffer) {
+    const eocd = locateEocd(buffer);
+    const entryCount = buffer.readUInt16LE(eocd + 10);
+    let cursor = buffer.readUInt32LE(eocd + 16);
+    const entries = new Map();
+    for (let index = 0; index < entryCount; index += 1) {
+        if (cursor + 46 > buffer.length || buffer.readUInt32LE(cursor) !== CENTRAL_SIGNATURE)
+            throw new ZipFormatError(`central directory entry ${index} is malformed`);
+        const method = buffer.readUInt16LE(cursor + 10);
+        const compressedSize = buffer.readUInt32LE(cursor + 20);
+        const nameLength = buffer.readUInt16LE(cursor + 28);
+        const extraLength = buffer.readUInt16LE(cursor + 30);
+        const commentLength = buffer.readUInt16LE(cursor + 32);
+        const localOffset = buffer.readUInt32LE(cursor + 42);
+        const name = buffer.subarray(cursor + 46, cursor + 46 + nameLength).toString("utf8");
+        // The local header carries its OWN name/extra lengths (they may differ
+        // from the central copies); the data starts right after them.
+        if (localOffset + 30 > buffer.length || buffer.readUInt32LE(localOffset) !== LOCAL_SIGNATURE)
+            throw new ZipFormatError(`local header for "${name}" is malformed`);
+        const localNameLength = buffer.readUInt16LE(localOffset + 26);
+        const localExtraLength = buffer.readUInt16LE(localOffset + 28);
+        const dataStart = localOffset + 30 + localNameLength + localExtraLength;
+        const data = buffer.subarray(dataStart, dataStart + compressedSize);
+        if (method === 0)
+            entries.set(name, Buffer.from(data));
+        else if (method === 8)
+            entries.set(name, inflateRawSync(data));
+        else
+            throw new ZipFormatError(`entry "${name}" uses unsupported compression method ${method}`);
+        cursor += 46 + nameLength + extraLength + commentLength;
+    }
+    return entries;
+}
+/** Build a stored-entry ZIP (method 0, UTF-8 names flagged via bit 11). */
+export function buildZip(files) {
+    const chunks = [];
+    const central = [];
+    let offset = 0;
+    for (const file of files) {
+        const nameBytes = Buffer.from(file.name, "utf8");
+        const crc = crc32(file.data);
+        const local = Buffer.alloc(30);
+        local.writeUInt32LE(LOCAL_SIGNATURE, 0);
+        local.writeUInt16LE(0x0800, 6); // UTF-8 name flag
+        local.writeUInt16LE(0, 8); // stored
+        local.writeUInt16LE(0, 10); // time
+        local.writeUInt16LE(0x2100, 12); // date (1996-01-01, deterministic)
+        local.writeUInt32LE(crc, 14);
+        local.writeUInt32LE(file.data.length, 18);
+        local.writeUInt32LE(file.data.length, 22);
+        local.writeUInt16LE(nameBytes.length, 26);
+        local.writeUInt16LE(0, 28);
+        chunks.push(local, nameBytes, file.data);
+        const entry = Buffer.alloc(46);
+        entry.writeUInt32LE(CENTRAL_SIGNATURE, 0);
+        entry.writeUInt16LE(0x031e, 4); // made by UNIX/ZIP 3.0
+        entry.writeUInt16LE(0x0014, 6); // extract by DOS/ZIP 2.0
+        entry.writeUInt16LE(0x0800, 8);
+        entry.writeUInt16LE(0, 10);
+        entry.writeUInt16LE(0, 12);
+        entry.writeUInt16LE(0x2100, 14);
+        entry.writeUInt32LE(crc, 16);
+        entry.writeUInt32LE(file.data.length, 20);
+        entry.writeUInt32LE(file.data.length, 24);
+        entry.writeUInt16LE(nameBytes.length, 28);
+        entry.writeUInt16LE(0, 30);
+        entry.writeUInt16LE(0, 32);
+        entry.writeUInt16LE(0, 34);
+        entry.writeUInt16LE(0, 36);
+        entry.writeUInt32LE(0, 38);
+        entry.writeUInt32LE(offset, 42);
+        central.push(entry, nameBytes);
+        offset += 30 + nameBytes.length + file.data.length;
+    }
+    const centralBuffer = Buffer.concat(central);
+    const eocd = Buffer.alloc(22);
+    eocd.writeUInt32LE(EOCD_SIGNATURE, 0);
+    eocd.writeUInt16LE(0, 4);
+    eocd.writeUInt16LE(0, 6);
+    eocd.writeUInt16LE(files.length, 8);
+    eocd.writeUInt16LE(files.length, 10);
+    eocd.writeUInt32LE(centralBuffer.length, 12);
+    eocd.writeUInt32LE(offset, 16);
+    eocd.writeUInt16LE(0, 20);
+    return Buffer.concat([...chunks, centralBuffer, eocd]);
+}
+/**
+ * Resolve an entry by BASENAME: the platform export compresses the staging
+ * DIRECTORY, so entries carry a `bizService-<uuid>/` prefix
+ * (live 2026-09-15: bizService-59d72d4a…/manifest.json).
+ */
+export function zipEntryByBasename(entries, basename) {
+    const direct = entries.get(basename);
+    if (direct !== undefined)
+        return direct;
+    const suffix = `/${basename}`;
+    for (const [name, data] of entries)
+        if (name.endsWith(suffix))
+            return data;
+    return undefined;
+}
+//# sourceMappingURL=zip.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omc-core",
-  "version": "0.4.37",
+  "version": "0.4.39",
   "description": "Shared OMC capability kernel: capability contracts, governance, and decoders. Zero DSH dependencies.",
   "type": "module",
   "files": [
@@ -12,7 +12,17 @@
     "!dist/**/*.d.ts.map"
   ],
   "exports": {
-    ".": "./dist/index.js",
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./zip": "./dist/zip.js",
+    "./capability-shape": "./dist/capability-shape.js",
+    "./json-column": "./dist/json-column.js",
+    "./refusal": "./dist/refusal.js",
+    "./wire-facts": "./dist/wire-facts.js",
+    "./relation-shape": "./dist/relation-shape.js",
+    "./list-view-wire": "./dist/list-view-wire.js",
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -34,5 +44,6 @@
     "type": "git",
     "url": "https://gitlab.h3yun.com/fuwenbin/oh-my-cpagents.git",
     "directory": "packages/omc-core"
-  }
+  },
+  "types": "./dist/index.d.ts"
 }