@josephyan/qingflow-cli 0.2.0-beta.66 → 0.2.0-beta.68

package/src/qingflow_mcp/cli/commands/builder.py

@@ -12,10 +12,20 @@ def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) ->
 
     package = builder_subparsers.add_parser("package", help="应用包")
     package_subparsers = package.add_subparsers(dest="builder_package_command", required=True)
+    package_list = package_subparsers.add_parser("list", help="列出应用包")
+    package_list.add_argument("--trial-status", default="all")
+    package_list.set_defaults(handler=_handle_package_list, format_hint="builder_summary")
+
     package_resolve = package_subparsers.add_parser("resolve", help="解析应用包")
     package_resolve.add_argument("--package-name", required=True)
     package_resolve.set_defaults(handler=_handle_package_resolve, format_hint="builder_summary")
 
+    package_create = package_subparsers.add_parser("create", help="创建应用包")
+    package_create.add_argument("--package-name", required=True)
+    package_create.add_argument("--icon")
+    package_create.add_argument("--color")
+    package_create.set_defaults(handler=_handle_package_create, format_hint="builder_summary")
+
     app = builder_subparsers.add_parser("app", help="应用")
     app_subparsers = app.add_subparsers(dest="builder_app_command", required=True)
 
@@ -119,10 +129,23 @@ def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) ->
     publish_verify_verify.set_defaults(handler=_handle_publish_verify, format_hint="builder_summary")
 
 
+def _handle_package_list(args: argparse.Namespace, context: CliContext) -> dict:
+    return context.builder.package_list(profile=args.profile, trial_status=args.trial_status)
+
+
 def _handle_package_resolve(args: argparse.Namespace, context: CliContext) -> dict:
     return context.builder.package_resolve(profile=args.profile, package_name=args.package_name)
 
 
+def _handle_package_create(args: argparse.Namespace, context: CliContext) -> dict:
+    return context.builder.package_create(
+        profile=args.profile,
+        package_name=args.package_name,
+        icon=args.icon,
+        color=args.color,
+    )
+
+
 def _handle_app_resolve(args: argparse.Namespace, context: CliContext) -> dict:
     return context.builder.app_resolve(
         profile=args.profile,

package/src/qingflow_mcp/cli/commands/record.py

@@ -77,6 +77,7 @@ def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) ->
     code_block.add_argument("--answers-file")
     code_block.add_argument("--fields-file")
     code_block.add_argument("--manual", action=argparse.BooleanOptionalAction, default=True)
+    code_block.add_argument("--apply-writeback", action=argparse.BooleanOptionalAction, default=True)
     code_block.add_argument("--verify-writeback", action=argparse.BooleanOptionalAction, default=True)
     code_block.add_argument("--force-refresh-form", action="store_true")
     code_block.set_defaults(handler=_handle_code_block_run, format_hint="")
@@ -197,6 +198,7 @@ def _handle_code_block_run(args: argparse.Namespace, context: CliContext) -> dic
         answers=load_list_arg(args.answers_file, option_name="--answers-file"),
         fields=load_object_arg(args.fields_file, option_name="--fields-file") or {},
         manual=bool(args.manual),
+        apply_writeback=bool(args.apply_writeback),
         verify_writeback=bool(args.verify_writeback),
         force_refresh_form=bool(args.force_refresh_form),
     )

package/src/qingflow_mcp/server.py

@@ -132,8 +132,9 @@ Use `record_code_block_run` when the user wants to execute a form code-block fie
 - Always resolve the exact code-block field from `record_code_block_schema_get` first.
 - Treat code-block execution as write-capable, not read-only.
 - If the code block is bound to relation outputs, Qingflow may calculate target answers and write them back automatically.
+- For safe debugging, pass `apply_writeback=false` and inspect the parsed alias results plus `relation.calculated_answers_preview` before allowing any writeback.
 - In workflow context, pass `role=3` and the exact `workflow_node_id`.
-- After execution, inspect `outputs.alias_results`, `relation.target_fields`, and `writeback.verification` before claiming success.
+- After execution, inspect `outputs.configured_aliases`, `outputs.alias_results`, `outputs.alias_map`, `relation.target_fields`, and `writeback.verification` before claiming success.
 
 ## Import Path
 

package/src/qingflow_mcp/server_app_builder.py

@@ -138,8 +138,13 @@ def build_builder_server() -> FastMCP:
         return ai_builder.builder_tool_contract(tool_name=tool_name)
 
     @server.tool()
-    def package_create(profile: str = DEFAULT_PROFILE, package_name: str = "") -> dict:
-        return ai_builder.package_create(profile=profile, package_name=package_name)
+    def package_create(
+        profile: str = DEFAULT_PROFILE,
+        package_name: str = "",
+        icon: str | None = None,
+        color: str | None = None,
+    ) -> dict:
+        return ai_builder.package_create(profile=profile, package_name=package_name, icon=icon, color=color)
 
     @server.tool()
     def member_search(

package/src/qingflow_mcp/server_app_user.py

@@ -121,8 +121,9 @@ Use `record_code_block_run` when the user wants to execute a form code-block fie
 - Always resolve the exact code-block field from `record_code_block_schema_get` first.
 - Treat code-block execution as write-capable, not read-only.
 - If the code block is bound to relation outputs, Qingflow may calculate target answers and write them back automatically.
+- For safe debugging, pass `apply_writeback=false` and inspect the parsed alias results plus `relation.calculated_answers_preview` before allowing any writeback.
 - In workflow context, pass `role=3` and the exact `workflow_node_id`.
-- After execution, inspect `outputs.alias_results`, `relation.target_fields`, and `writeback.verification` before claiming success.
+- After execution, inspect `outputs.configured_aliases`, `outputs.alias_results`, `outputs.alias_map`, `relation.target_fields`, and `writeback.verification` before claiming success.
 
 ## Import Path
 

package/src/qingflow_mcp/solution/compiler/form_compiler.py

@@ -23,6 +23,8 @@ QUESTION_TYPE_MAP = {
     FieldType.address: 21,
     FieldType.attachment: 13,
     FieldType.boolean: 10,
+    FieldType.q_linker: 20,
+    FieldType.code_block: 26,
     FieldType.relation: 25,
     FieldType.subtable: 18,
 }
@@ -243,6 +245,33 @@ def build_question(field: dict[str, Any], temp_id: int) -> tuple[dict[str, Any],
                 "queDefaultType": 2,
             }
         )
+    if field_type == FieldType.code_block:
+        question.update(
+            {
+                "minOpts": -1,
+                "maxOpts": -1,
+                "codeBlockConfig": {
+                    "configMode": int(config.get("config_mode") or 1),
+                    "codeContent": str(config.get("code_content") or ""),
+                    "resultAliasPath": deepcopy(config.get("result_alias_path") or []),
+                    "beingHideOnForm": bool(config.get("being_hide_on_form", False)),
+                },
+                "autoTrigger": bool(config.get("auto_trigger", False)),
+                "customBtnTextStatus": bool(config.get("custom_button_text_enabled", False)),
+                "customBtnText": str(config.get("custom_button_text") or ""),
+            }
+        )
+    if field_type == FieldType.q_linker:
+        question.update(
+            {
+                "minOpts": -1,
+                "maxOpts": -1,
+                "remoteLookupConfig": deepcopy(config.get("remote_lookup_config") or config),
+                "autoTrigger": bool(config.get("auto_trigger", False)),
+                "customBtnTextStatus": bool(config.get("custom_button_text_enabled", False)),
+                "customBtnText": str(config.get("custom_button_text") or ""),
+            }
+        )
     if field_type == FieldType.subtable:
         sub_questions: list[dict[str, Any]] = []
         for subfield in field.get("subfields", []):

package/src/qingflow_mcp/solution/spec_models.py

@@ -33,6 +33,8 @@ class FieldType(str, Enum):
     address = "address"
     attachment = "attachment"
     boolean = "boolean"
+    q_linker = "q_linker"
+    code_block = "code_block"
     relation = "relation"
     subtable = "subtable"
 

package/src/qingflow_mcp/tools/ai_builder_tools.py

@@ -82,8 +82,13 @@ class AiBuilderTools(ToolBase):
             return self.builder_tool_contract(tool_name=tool_name)
 
         @mcp.tool()
-        def package_create(profile: str = DEFAULT_PROFILE, package_name: str = "") -> JSONObject:
-            return self.package_create(profile=profile, package_name=package_name)
+        def package_create(
+            profile: str = DEFAULT_PROFILE,
+            package_name: str = "",
+            icon: str | None = None,
+            color: str | None = None,
+        ) -> JSONObject:
+            return self.package_create(profile=profile, package_name=package_name, icon=icon, color=color)
 
         @mcp.tool()
         def member_search(
@@ -425,13 +430,32 @@ class AiBuilderTools(ToolBase):
             "contract": contract,
         }
 
-    def package_create(self, *, profile: str, package_name: str) -> JSONObject:
-        normalized_args = {"package_name": package_name}
+    def package_create(
+        self,
+        *,
+        profile: str,
+        package_name: str,
+        icon: str | None = None,
+        color: str | None = None,
+    ) -> JSONObject:
+        normalized_args = {
+            "package_name": package_name,
+            **({"icon": icon} if icon else {}),
+            **({"color": color} if color else {}),
+        }
         return _safe_tool_call(
-            lambda: self._facade.package_create(profile=profile, package_name=package_name),
+            lambda: self._facade.package_create(profile=profile, package_name=package_name, icon=icon, color=color),
             error_code="PACKAGE_CREATE_FAILED",
             normalized_args=normalized_args,
-            suggested_next_call={"tool_name": "package_create", "arguments": {"profile": profile, "package_name": package_name}},
+            suggested_next_call={
+                "tool_name": "package_create",
+                "arguments": {
+                    "profile": profile,
+                    "package_name": package_name,
+                    **({"icon": icon} if icon else {}),
+                    **({"color": color} if color else {}),
+                },
+            },
         )
 
     def member_search(
@@ -795,15 +819,21 @@ class AiBuilderTools(ToolBase):
                         "profile": profile,
                         "app_key": app_key,
                         "mode": "merge",
-                        "sections": [{"title": "基础信息", "rows": [["字段A", "字段B"]]}],
+                        "sections": [{
+                            "type": "paragraph",
+                            "paragraph_id": "basic",
+                            "title": "基础信息",
+                            "rows": [["字段A", "字段B", "字段C", "字段D"]],
+                        }],
                     },
                 },
             )
+        normalized_request = request.model_dump(mode="json", exclude_none=True)
         return _safe_tool_call(
             lambda: self._facade.app_layout_plan(profile=profile, request=request),
             error_code="LAYOUT_PLAN_FAILED",
-            normalized_args=request.model_dump(mode="json"),
-            suggested_next_call={"tool_name": "app_layout_plan", "arguments": {"profile": profile, **request.model_dump(mode="json")}},
+            normalized_args=normalized_request,
+            suggested_next_call={"tool_name": "app_layout_plan", "arguments": {"profile": profile, **normalized_request}},
         )
 
     def app_flow_plan(
@@ -1100,7 +1130,7 @@ class AiBuilderTools(ToolBase):
             "app_key": str(plan_args.get("app_key") or app_key),
             "mode": parsed_mode.value,
             "publish": publish,
-            "sections": [section.model_dump(mode="json") for section in parsed_sections],
+            "sections": [section.model_dump(mode="json", exclude_none=True) for section in parsed_sections],
         }
         return _safe_tool_call(
             lambda: self._facade.app_layout_apply(
@@ -1708,6 +1738,39 @@ def _public_error_message(error_code: str, error: QingflowApiError) -> str:
 
 
 _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
+    "package_list": {
+        "allowed_keys": ["trial_status"],
+        "aliases": {"trialStatus": "trial_status"},
+        "allowed_values": {"trial_status": ["all", "trial", "formal"]},
+        "minimal_example": {
+            "profile": "default",
+            "trial_status": "all",
+        },
+    },
+    "package_resolve": {
+        "allowed_keys": ["package_name"],
+        "aliases": {"packageName": "package_name"},
+        "allowed_values": {},
+        "minimal_example": {
+            "profile": "default",
+            "package_name": "PLM（备用，施工中）",
+        },
+    },
+    "package_create": {
+        "allowed_keys": ["package_name", "icon", "color"],
+        "aliases": {
+            "packageName": "package_name",
+            "iconName": "icon",
+            "iconColor": "color",
+        },
+        "allowed_values": {},
+        "minimal_example": {
+            "profile": "default",
+            "package_name": "项目管理",
+            "icon": "files-folder",
+            "color": "azure",
+        },
+    },
     "member_search": {
         "allowed_keys": ["query", "page_num", "page_size", "contain_disable"],
         "aliases": {},
@@ -1855,6 +1918,13 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "field.allow_multiple": "field.relation_mode",
             "field.optional_data_num": "field.relation_mode",
             "field.optionalDataNum": "field.relation_mode",
+            "field.remoteLookupConfig": "field.remote_lookup_config",
+            "field.qLinkerBinding": "field.q_linker_binding",
+            "field.codeBlockConfig": "field.code_block_config",
+            "field.codeBlockBinding": "field.code_block_binding",
+            "field.autoTrigger": "field.auto_trigger",
+            "field.customBtnTextStatus": "field.custom_button_text_enabled",
+            "field.customBtnText": "field.custom_button_text",
         },
         "allowed_values": {
             "field.type": [member.value for member in PublicFieldType],
@@ -1905,6 +1975,13 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "field.allow_multiple": "field.relation_mode",
             "field.optional_data_num": "field.relation_mode",
             "field.optionalDataNum": "field.relation_mode",
+            "field.remoteLookupConfig": "field.remote_lookup_config",
+            "field.qLinkerBinding": "field.q_linker_binding",
+            "field.codeBlockConfig": "field.code_block_config",
+            "field.codeBlockBinding": "field.code_block_binding",
+            "field.autoTrigger": "field.auto_trigger",
+            "field.customBtnTextStatus": "field.custom_button_text_enabled",
+            "field.customBtnText": "field.custom_button_text",
         },
         "allowed_values": {
             "field.type": [member.value for member in PublicFieldType],
@@ -1915,6 +1992,10 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "multiple relation fields are backend-risky; read verification.relation_field_limit_verified and warnings before declaring the schema stable",
             "backend 49614 is normalized to MULTIPLE_RELATION_FIELDS_UNSUPPORTED with a workaround message",
             "relation_mode=multiple maps to referenceConfig.optionalDataNum=0",
+            "if relation target metadata lookup is blocked by 40161/40002/40027, explicit display_field.name and visible_fields[].name let builder degrade verification and still continue schema write",
+            "q_linker_binding lets you declare request config, dynamic inputs, alias parsing, and target-field bindings in one step; builder writes remoteLookupConfig plus the existing backend relation-default and questionRelations structures",
+            "code_block_binding lets you declare inputs, code, alias parsing, and target-field bindings in one step; builder writes codeBlockConfig plus the existing backend relation-default and questionRelations structures",
+            "builder configures code blocks only; it does not execute or trigger code blocks",
         ],
         "minimal_example": {
             "profile": "default",
@@ -1945,34 +2026,99 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "update_fields": [],
             "remove_fields": [],
         },
+        "code_block_example": {
+            "profile": "default",
+            "app_key": "APP_SCRIPT",
+            "publish": True,
+            "add_fields": [
+                {
+                    "name": "查询代码块",
+                    "type": "code_block",
+                    "code_block_binding": {
+                        "inputs": [
+                            {"field": {"name": "客户名称"}, "var": "customerName"},
+                            {"field": {"name": "预算金额"}, "var": "budget"},
+                        ],
+                        "code": "const qf_output = {}; qf_output.customerLevel = budget > 100000 ? 'A' : 'B'; return qf_output;",
+                        "auto_trigger": True,
+                        "custom_button_text_enabled": True,
+                        "custom_button_text": "评估客户",
+                        "outputs": [
+                            {"alias": "customerLevel", "path": "$.customerLevel"},
+                        ],
+                    },
+                }
+            ],
+            "update_fields": [],
+            "remove_fields": [],
+        },
+        "q_linker_example": {
+            "profile": "default",
+            "app_key": "APP_CUSTOMER",
+            "publish": True,
+            "add_fields": [
+                {"name": "客户名称", "type": "text"},
+                {"name": "企业名称", "type": "text"},
+                {"name": "统一社会信用代码", "type": "text"},
+                {
+                    "name": "企业信息查询",
+                    "type": "q_linker",
+                    "q_linker_binding": {
+                        "inputs": [
+                            {"field": {"name": "客户名称"}, "key": "keyword", "source": "query_param"},
+                        ],
+                        "request": {
+                            "url": "https://example.com/company/search",
+                            "method": "GET",
+                            "headers": [],
+                            "query_params": [],
+                            "body_type": 1,
+                            "url_encoded_value": [],
+                            "result_type": 1,
+                            "auto_trigger": True,
+                            "custom_button_text_enabled": True,
+                            "custom_button_text": "查询企业信息",
+                        },
+                        "outputs": [
+                            {"alias": "company_name", "path": "$.data.name", "target_field": {"name": "企业名称"}},
+                            {"alias": "credit_code", "path": "$.data.creditCode", "target_field": {"name": "统一社会信用代码"}},
+                        ],
+                    },
+                },
+            ],
+            "update_fields": [],
+            "remove_fields": [],
+        },
     },
     "app_layout_plan": {
         "allowed_keys": ["app_key", "mode", "sections", "preset"],
         "aliases": {"overwrite": "replace", "sectionId": "section_id"},
-        "section_allowed_keys": ["section_id", "title", "rows"],
+        "section_allowed_keys": ["type", "paragraph_id", "section_id", "title", "rows"],
         "section_aliases": {
             "name": "title",
+            "paragraphId": "paragraph_id",
             "sectionId": "section_id",
             "fields": "rows",
             "field_ids": "rows",
             "columns": "rows_chunk_size",
         },
         "allowed_values": {"mode": [member.value for member in LayoutApplyMode], "preset": [member.value for member in LayoutPreset]},
-        "minimal_section_example": {"title": "基础信息", "rows": [["字段A", "字段B"]]},
+        "minimal_section_example": {"type": "paragraph", "paragraph_id": "basic", "title": "基础信息", "rows": [["字段A", "字段B", "字段C", "字段D"]]},
         "minimal_example": {
             "profile": "default",
             "app_key": "APP_KEY",
             "mode": "merge",
-            "sections": [{"title": "基础信息", "rows": [["字段A", "字段B"]]}],
+            "sections": [{"type": "paragraph", "paragraph_id": "basic", "title": "基础信息", "rows": [["字段A", "字段B", "字段C", "字段D"]]}],
         },
         "preset_example": {"profile": "default", "app_key": "APP_KEY", "mode": "merge", "preset": "balanced", "sections": []},
     },
     "app_layout_apply": {
         "allowed_keys": ["app_key", "mode", "publish", "sections"],
         "aliases": {"overwrite": "replace", "sectionId": "section_id"},
-        "section_allowed_keys": ["section_id", "title", "rows"],
+        "section_allowed_keys": ["type", "paragraph_id", "section_id", "title", "rows"],
         "section_aliases": {
             "name": "title",
+            "paragraphId": "paragraph_id",
             "sectionId": "section_id",
             "fields": "rows",
             "field_ids": "rows",
@@ -1983,13 +2129,13 @@ _BUILDER_TOOL_CONTRACTS: dict[str, JSONObject] = {
             "layout verification is split into layout_verified and layout_summary_verified",
             "LAYOUT_SUMMARY_UNVERIFIED means raw form readback is stronger than the compact summary",
         ],
-        "minimal_section_example": {"title": "基础信息", "rows": [["字段A", "字段B"]]},
+        "minimal_section_example": {"type": "paragraph", "paragraph_id": "basic", "title": "基础信息", "rows": [["字段A", "字段B", "字段C", "字段D"]]},
         "minimal_example": {
             "profile": "default",
             "app_key": "APP_KEY",
             "mode": "merge",
             "publish": True,
-            "sections": [{"title": "基础信息", "rows": [["项目名称", "项目负责人"]]}],
+            "sections": [{"type": "paragraph", "paragraph_id": "basic", "title": "基础信息", "rows": [["项目名称", "项目负责人", "项目阶段", "优先级"]]}],
         },
     },
     "app_flow_plan": {

package/src/qingflow_mcp/tools/approval_tools.py

@@ -277,6 +277,7 @@ class ApprovalTools(ToolBase):
                 fields=fields,
                 public_action="task_transfer",
             )
+        self._raise_if_self_transfer(profile=profile, payload=payload)
         raw = self.record_transfer(profile=profile, app_key=app_key, apply_id=record_id, payload=payload)
         return self._public_action_response(
             raw,
@@ -326,7 +327,9 @@ class ApprovalTools(ToolBase):
             audit_node_id=workflow_node_id,
             keyword=keyword,
         )
-        items = _approval_page_items(raw.get("page"))
+        original_items = _approval_page_items(raw.get("page"))
+        items = self._filter_self_transfer_candidates(profile=profile, items=original_items)
+        filtered_count = max(len(original_items) - len(items), 0)
         return self._public_page_response(
             raw,
             items=items,
@@ -335,7 +338,7 @@ class ApprovalTools(ToolBase):
                 "page_size": page_size,
                 "returned_items": len(items),
                 "page_amount": _approval_page_amount(raw.get("page")),
-                "reported_total": _approval_page_total(raw.get("page")),
+                "reported_total": max(_approval_page_total(raw.get("page")) - filtered_count, 0),
             },
             selection={"app_key": app_key, "record_id": record_id, "workflow_node_id": workflow_node_id, "keyword": keyword},
         )
@@ -849,6 +852,32 @@ class ApprovalTools(ToolBase):
         if payload.get("handSignImageUrl"):
             raise_tool_error(QingflowApiError.not_supported("NOT_SUPPORTED_IN_V1: handSignImageUrl is not supported"))
 
+    def _extract_transfer_target_uid(self, payload: dict[str, Any]) -> int | None:
+        for key in ("uid", "target_member_id", "targetMemberId"):
+            value = payload.get(key)
+            if isinstance(value, int) and value > 0:
+                return value
+        return None
+
+    def _raise_if_self_transfer(self, *, profile: str, payload: dict[str, Any]) -> None:
+        target_uid = self._extract_transfer_target_uid(payload)
+        if target_uid is None:
+            return
+        session_profile = self.sessions.get_profile(profile)
+        if session_profile is not None and target_uid == session_profile.uid:
+            raise_tool_error(
+                QingflowApiError.config_error(
+                    "task transfer does not support transferring to the current user; choose another transfer member"
+                )
+            )
+
+    def _filter_self_transfer_candidates(self, *, profile: str, items: list[dict[str, Any]]) -> list[dict[str, Any]]:
+        session_profile = self.sessions.get_profile(profile)
+        if session_profile is None:
+            return items
+        current_uid = session_profile.uid
+        return [item for item in items if item.get("uid") != current_uid]
+
     def _delegate_task_action(
         self,
         *,