-
ErpClient.fieldOptions 调 /ai/fieldOptions（契约见 docs/erp-tasks-field-options.md）： ERP 按其控件配置给候选，带行级数据权限、级联过滤（产品限定在已选客户名下）、 联动回填映射——这三样本地直查库都没有。404/异常/mode=none 一律回落到 FormResolverService.fkOptionPage，5 分钟退避避免反复撞未上线的端点。 前端 FK 选择器改传 (formId, 字段, ctx)：ctx = 表单上已绑定记录的 id，供级联过滤； ERP 报 need_context 时提示'请先选择客户'而不是给空列表。预览卡新增 formId 与 fk 字段的 boundId，使修改单据时也有初始级联上下文。
-
…expired key; preview save name-keyed + empty=abandon-change; previewId atomic claim; transactional batch queue + column truncation; digest zone token-budgeted; window-orphan tool_result trim; convId length cap; readFormData authoritative moduleId + /form/options permission gate (security audit); WRITE_CLAIM state-statement lookahead
-
…e shared kernel + PreviewService (previewId Redis binding, save-side re-validation, state legality checks) + queue-only OpService (sMakePerson dual-write, status=confirmed); retire ProposeWriteTool/OpController/AuditService/ErpClient writes; preview card frontend; skills/prompt/bench sync; D: checkBusinessData stub behind erp.dry-run.enabled
