docs: publish business instruction 0.5.127

.project-docs/20-architecture/system-overview.md

@@ -29,7 +29,7 @@ Authenticated employee manual or account-bound AgentBus input is routed through
 - Each enabled AgentBus channel owns one active non-admin employee account. Inbound work uses that account and route allowlist, persists the same account as immutable task assignee, and is returned only to that account's executable feed. A team-lead channel may additionally carry its leader's lower-priority proactive summary outbox; those rows use explicit destination/conversation routing and never become executable task traffic.
 - Each employee account has one expected ERP identity and at most one fresh browser execution worker. The extension accepts ERP identity only from exactly one `#Lable_UserName` login node and normalized full equality; missing, duplicate, blank, substring-only, or unrelated body-text matches fail closed without returning the observed identity. Concurrent fresh workers, unbound channels, or unassigned tasks also fail closed. Browser claims, active-execution checks, and confirmed FIFO are serialized per immutable task assignee, so one account cannot block or occupy another account's queue.
 - Administrators have no task read or execution model. Task lists/details, attachments, artifacts, lifecycle mutations, SSE history/live events, browser claims, plugin-result ingestion, and browser cleanup commands require a `team_lead` or `user` session matching `assigned_user_id`; the team-lead dashboard and notification outbox remain separate read projections.
-- Extension `0.5.170` is the current manually published plugin baseline, Program parser `v1.0.7` owns the new shared-child batch directive, and the five Skills plus operator instruction DOCX remain at `0.5.126`. The batch adapter enumerates and validates every matching shared-plan parent before the first write, executes in date/tid order, and stops without retry at the first blocked, failed, or uncertain result. The extension retains an idle-proof and guarded-reload message protocol, but the active control plane has no extension-release tables, ECS host mapping, OSS publication endpoint, Cloud Assistant dispatcher, or platform trigger; required migration is 023.
+- Extension `0.5.170` is the current manually published plugin baseline, Program parser `v1.0.7` owns the new shared-child batch directive, the five Skills remain at `0.5.126`, and the operator instruction DOCX is `0.5.127`. The batch adapter enumerates and validates every matching shared-plan parent before the first write, executes in date/tid order, and stops without retry at the first blocked, failed, or uncertain result. The extension retains an idle-proof and guarded-reload message protocol, but the active control plane has no extension-release tables, ECS host mapping, OSS publication endpoint, Cloud Assistant dispatcher, or platform trigger; required migration is 023.
 - Creator and manual input-turn attribution remain durable while business input stays encrypted at rest. Routine removal is reversible archive/restore. Separately confirmed force delete physically removes an authorized task regardless of lifecycle state, retains only a minimal non-content deletion audit marker, and cannot undo an ERP write that already occurred.
 - Unknown, ambiguous, unverified, or post-write-uncertain states fail closed; automatic retries must not create duplicate writes.
 - PostgreSQL is the sole required durable database/state middleware, and the production artifact provider is OSS. Redis, message queues, MongoDB, and search services are not runtime dependencies.

.project-docs/30-worklog/current-state.md

@@ -4,6 +4,7 @@ This file is the integrated default-branch snapshot. Feature tasks record progre
 
 ## Integrated Through
 
+- Integration task `20260909-business-instruction-batch-child-7e3c1a94` synchronized operator input catalog/DOCX `0.5.127` with all 19 system routes, adding the copyable `散拼团多个新增子单` entry while keeping that route Program-only and leaving the five Skills at `0.5.126`.
 - Source commit `be17f6c` from feature task `20260908-leader-webhook-api-7c4e9a12`, integrated as merge commit `295409b`, for organization-level external Webhook delivery of privacy-bounded leader summaries, migration `023_leader_summary_webhook_delivery`, and AUTH-005's one-attempt accepted-versus-delivered boundary.
 - Source commit `6ac90f8` from feature task `20260908-shared-child-batch-create-4e7c2a91`, integrated as merge commit `0d20544`, for Program-only `shared_child_order_batch_create`, parser `v1.0.7`, migration `022_shared_child_order_batch_create`, complete pre-write target enumeration, deterministic stop-on-first-non-success execution, and extension `0.5.170`.
 - Commit `bb115a3` from integration task `20260908-remove-maintain-project-docs-requirement-6d8a31f2` removed the deleted external project-document Skill/task-registry dependency and retained repository-local worktree and project-memory gates.
@@ -42,7 +43,7 @@ This file is the integrated default-branch snapshot. Feature tasks record progre
 
 ## Current Focus
 
-Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, Skill/business-instruction `0.5.126`, roster normalizer `v1.4.0`, and migrations through `023_leader_summary_webhook_delivery` safely. The machine registry contains 19 routes; the external Agent remains limited to its original 18 and the two passenger-list routes plus shared-child batch creation are Program-only. Administrators manage accounts, channels, employee grants, parser routing, automation settings, and audit but never enter the task data plane. Team leads/users own normal task operations through immutable assignment; same-account work remains FIFO and single-active while distinct accounts are independent. Team leads alone receive the read-only assignee-based dashboard. Future privacy-bounded organization summaries use one protected external Webhook and a separate encrypted one-attempt outbox, not a leader AgentBus route. Database migration, extension reload, route grants, service rollout, live ERP validation, and any external Webhook canary remain separately authorized runtime work. Server-side automatic extension updating is not part of the active main line.
+Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, Skills `0.5.126`, business-instruction `0.5.127`, roster normalizer `v1.4.0`, and migrations through `023_leader_summary_webhook_delivery` safely. The machine registry and operator input catalog contain 19 routes; the external Agent remains limited to its original 18 and the two passenger-list routes plus shared-child batch creation are Program-only. Administrators manage accounts, channels, employee grants, parser routing, automation settings, and audit but never enter the task data plane. Team leads/users own normal task operations through immutable assignment; same-account work remains FIFO and single-active while distinct accounts are independent. Team leads alone receive the read-only assignee-based dashboard. Future privacy-bounded organization summaries use one protected external Webhook and a separate encrypted one-attempt outbox, not a leader AgentBus route. Database migration, extension reload, route grants, service rollout, live ERP validation, and any external Webhook canary remain separately authorized runtime work. Server-side automatic extension updating is not part of the active main line.
 
 ## Recently Completed
 
@@ -77,6 +78,7 @@ Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, S
 - 2026-09-08: Added Program-only shared-child batch creation across an inclusive departure-date range. Every product-matching parent is enumerated and validated before the first write; execution is ordered by date/tid, stops at the first blocked/failed/uncertain result, and never retries a write automatically. Parser `v1.0.7`, migration 022, and extension `0.5.170` are synchronized.
 - 2026-09-08: Replaced only the leader-summary AgentBus transport with an organization-level external Webhook. AUTH-005 and migration 023 retain future-only encrypted/privacy-bounded projection, mark only strict gateway success as accepted rather than delivered, and terminate rejected or uncertain attempts without automatic retry.
 - 2026-09-08: Removed the deleted external project-document Skill and task-registry requirement; repository-local Git worktree checks and `.project-docs/` remain the active collaboration and memory boundary.
+- 2026-09-09: Advanced the operator input catalog and generated DOCX to `0.5.127`, covering all 19 routes with a new copyable Program-only `散拼团多个新增子单` section while leaving Agent Prompt and Skill packages unchanged.
 
 ## In Progress
 

.project-docs/30-worklog/tasks/20260909-business-instruction-batch-child-7e3c1a94.md

@@ -0,0 +1,63 @@
+# Task: Update business instruction table for batch shared-child creation
+
+## Identity
+
+- Task ID: 20260909-business-instruction-batch-child-7e3c1a94
+- Mode: Integration
+- Branch: main
+- Worktree: /Users/inmanx/Documents/lwltAPI
+- Base commit: 75b9f2ede991c3f8d37465f80d4856f771e54051
+- Owner: codex
+- Status: Ready for push verification
+
+## Scope
+
+- Add the integrated Program-only `散拼团多个新增子单` route to the canonical operations input template.
+- Bump the business-input contract and DOCX delivery version without changing any Skill or external-Agent route.
+- Rebuild the versioned DOCX, synchronize the release manifest and README, visually inspect every rendered page, and place the verified current copy on the user's Desktop.
+- Commit the verified release and push `main` to `origin/main` without force after confirming the remote remains at the selected base.
+
+## Worktree Safety
+
+- Existing changes in this worktree: none.
+- Relevant concurrent worktree: `/Users/inmanx/Documents/lwltAPI-shared-child-batch-create-4e7c2a91`, clean and already integrated into `main`.
+- Overlap result: Clear.
+
+## Constraints
+
+- Preserve `shared_child_order_batch_create` as Program-only.
+- Do not add it to the Agent prompt, external-Agent directive registry, or any Skill package.
+- Keep the Markdown template as the sole editable source and generate the DOCX only through `tools/build_business_instruction_docx.py`.
+- Use bundled workspace dependencies and complete render-to-PNG inspection before delivery.
+
+## Outcome
+
+- Advanced the canonical operator input catalog and generated DOCX from `0.5.126`/18 items to `0.5.127`/19 items.
+- Added section 5, `散拼团多个新增子单`, with a directly copyable template and example while preserving `shared_child_order_batch_create` as Program-only and absent from the external Agent prompt, Agent/Skill registry table, and all Skill packages.
+- Synchronized the route contract constant, repository documentation, release gate, README, regression expectations, and `dist/release-manifest.json`.
+- Corrected the canonical architecture snapshot so it distinguishes the unchanged five Skills at `0.5.126` from the operator instruction DOCX at `0.5.127`.
+- Archived the former `0.5.126` DOCX and its exact release-manifest snapshot under `archive/releases/2026-09-09/`, generated `dist/老挝联泰AI指令表-0.5.127.docx`, and copied the verified artifact to the user's Desktop. The superseded Desktop copy was moved to Trash and remains recoverable.
+
+## Verification
+
+- Rebuilt the DOCX from `agent设计规范/templates/business-input-templates.md` with the governed builder and bundled workspace dependencies.
+- Rendered the final DOCX to 13 PNG pages with the bundled LibreOffice/Poppler stack and configured Chinese fonts; visually inspected every page with no clipping, missing glyphs, orphaned explanatory text, or broken hierarchy.
+- Parsed the DOCX package to confirm all operation headings 1 through 19, the new template/example fields, version/scope text, and absence of unresolved document tokens.
+- Verified source SHA-256 `652af8ef645ae56af2dd9990f74b8078de230cb9b87acd13c289d1f4dae0738a`, builder SHA-256 `c162884210da22e3b78368749b66f1f177df5e9fc6155f4fd9954bd516d187f1`, and DOCX SHA-256 `e1b8ae5a98d550ab0785692a01cf1c87b99e4edfaea39e4edbbab7341e585f29`; the Desktop copy is byte-identical to `dist`.
+- `node --test tools/business-input-templates.test.mjs` — 16/16 passed.
+- `node --run check:repo` — 10/10 passed.
+- `node --run check` — passed.
+- `node --run test:control-plane` — 183/183 passed.
+- `node --run test:legacy` — 278/278 passed.
+- `node --run build` — passed.
+- A fresh release-push gate reran all required checks. The initial repository-hygiene pass found only two generated `.DS_Store` files; both were moved out of the repository, after which `node --run check:repo` passed 10/10 and `node --run test:legacy` passed 278/278.
+- `git diff --check` — passed after the final project-memory edits.
+- Remote push and final remote-tip verification are pending the release commit.
+
+## Follow-ups
+
+- No documentation follow-up is required. Deployment, extension reload, route grants, and live ERP writes remain separate explicitly authorized runtime work.
+
+## Promotion Candidates
+
+- Promote the operator input catalog/DOCX `0.5.127` and its 19-item scope into the integrated current-state snapshot; no Agent/Skill behavior changes are promoted.