@qingflow-tech/qingflow-cli 1.1.61-beta.5 → 1.1.61-beta.7

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/filter.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"
@@ -57,9 +57,9 @@
       "type": "object",
       "additionalProperties": false,
       "required": [
-        "groups"
+        "rules"
       ],
-      "filterConfigShapeDescription": "筛选组件配置。筛选语义 raw/unstable,不建议作为主自动化路径;条件明细为受控透传(键集以 ws40013 dataset 实测形态定稿)。",
+      "filterConfigShapeDescription": "筛选组件配置。rules 必须非空——后端读面(DashSvcImpl#getComponentFilter)按筛选组(dash_filter_group 行)反查筛选组件,空规则的 filter 组件行虽会写入但读面枚举不到,表现为「apply 成功、回读缺该组件」;规则键集为受控透传(filterGroupName/filterGroupConfig/filterItemName/que/judge 系,以 ws40013 dataset 实测形态定稿)。",
       "properties": {
         "graphs": {
           "type": "array",
@@ -69,12 +69,12 @@
           },
           "x-backend": "ComponentFilter.graphList(GraphVO.graphKey/graphName/graphType)"
         },
-        "groups": {
+        "rules": {
           "type": "array",
           "minItems": 1,
-          "filterGroupsShapeDescription": "筛选规则组。",
+          "filterRulesShapeDescription": "筛选规则组(至少 1 组)。组键:filterGroupName(组名,必填)、filterGroupConfig(组内筛选项列表);项键:filterItemName、que{queId}(绑定字段)、judge{judgeType,judgeValues}(默认条件)。代理键 filterGroupId/filterItemId 为后端自增位移键,读写两侧均剔除,不要携带。",
           "items": {
-            "$ref": "#/$defs/FilterGroup"
+            "$ref": "#/$defs/FilterRuleGroup"
           },
           "x-backend": "ComponentFilter.filterConfig(List<FilterConfig>)"
         }
@@ -109,71 +109,49 @@
         }
       }
     },
-    "FilterGroup": {
+    "FilterRuleGroup": {
       "type": "object",
-      "additionalProperties": false,
       "required": [
-        "items"
+        "filterGroupName"
       ],
-      "filterGroupShapeDescription": "筛选规则组。",
+      "filterRuleGroupShapeDescription": "筛选规则组。组内筛选项走 filterGroupConfig;其余后端键受控透传。",
       "properties": {
-        "group_id": {
-          "type": "integer",
-          "filterGroupIdShapeDescription": "组 id(更新已有组时锚定;缺省新建)。",
-          "x-backend": "FilterConfig.filterGroupId"
-        },
-        "name": {
+        "filterGroupName": {
           "type": "string",
-          "filterGroupNameShapeDescription": "组名称。",
+          "filterRuleGroupNameShapeDescription": "组名称(读面渲染为分组标题)。",
           "x-backend": "FilterConfig.filterGroupName"
         },
-        "items": {
+        "filterGroupConfig": {
           "type": "array",
-          "minItems": 1,
-          "filterGroupItemsShapeDescription": "组内筛选项。",
+          "filterRuleGroupItemsShapeDescription": "组内筛选项(绑定字段与默认条件)。",
           "items": {
-            "$ref": "#/$defs/FilterItem"
-          }
+            "$ref": "#/$defs/FilterRuleItem"
+          },
+          "x-backend": "FilterConfig.filterGroupConfig(List<FilterGroupConfig>)"
         }
       }
     },
-    "FilterItem": {
+    "FilterRuleItem": {
       "type": "object",
-      "additionalProperties": false,
       "required": [
-        "name"
+        "filterItemName"
       ],
-      "filterItemShapeDescription": "单个筛选项(绑定一个字段)。",
+      "filterRuleItemShapeDescription": "单个筛选项(绑定一个字段)。que/judge 为后端受控透传形态;条件表达式(关联图表/字段)键集以 dataset 实测形态为准。",
       "properties": {
-        "item_id": {
-          "type": "integer",
-          "filterItemIdShapeDescription": "筛选项 id(更新锚定)。",
-          "x-backend": "FilterGroupConfig.filterItemId"
-        },
-        "name": {
+        "filterItemName": {
           "type": "string",
-          "filterItemNameShapeDescription": "筛选项名称。",
+          "filterRuleItemNameShapeDescription": "筛选项名称。",
           "x-backend": "FilterGroupConfig.filterItemName"
         },
-        "conditions": {
-          "type": "array",
-          "filterItemConditionsShapeDescription": "筛选条件(受控透传;条件表达式键集以 dataset 实测形态定稿后开放规范键)。",
-          "x-backend": "FilterGroupConfig.filterCondition(List<FilterCondition>)"
-        },
-        "default_judge_type": {
-          "type": "integer",
-          "filterItemDftJudgeTypeShapeDescription": "默认比较符。",
-          "x-backend": "FilterGroupConfig.dftJudgeType"
-        },
-        "default_values": {
-          "type": "array",
-          "filterItemDftValuesShapeDescription": "默认比较值(受控透传)。",
-          "x-backend": "FilterGroupConfig.dftJudgeValue(List<AnswerValue>)"
+        "que": {
+          "type": "object",
+          "filterRuleItemQueShapeDescription": "绑定的字段引用(queId 为字段唯一键)。",
+          "x-backend": "FilterGroupConfig.que(Question)"
         },
-        "filter_type": {
-          "type": "string",
-          "filterItemTypeShapeDescription": "筛选项交互类型(受控枚举,dataset 校准)。",
-          "x-backend": "FilterGroupConfig.filterType"
+        "judge": {
+          "type": "object",
+          "filterRuleItemJudgeShapeDescription": "默认筛选条件:judgeType(比较符)+judgeValues(比较值列表)。",
+          "x-backend": "FilterGroupConfig.dftJudgeType/dftJudgeValue"
         }
       }
     },
@@ -181,16 +159,14 @@
       "type": "object",
       "additionalProperties": false,
       "required": [
-        "title",
         "source_type",
         "config"
       ],
       "properties": {
         "title": {
           "type": "string",
-          "minLength": 1,
-          "sectionTitleShapeDescription": "组件标题(渲染在组件头部)。",
-          "x-backend": "组件标题(DashChartInfo.title / gridConfig.gridTitle 等)"
+          "sectionTitleShapeDescription": "组件标题(可选)。存量筛选组件合法无标题——后端筛选组件无标题存储,提取产物不带 title,不要合成(如「组件 N」)。",
+          "x-backend": "组件标题(筛选组件无标题存储;其余组件见 DashChartInfo.title / gridConfig.gridTitle 等)"
         },
         "source_type": {
           "const": "filter",
@@ -211,7 +187,7 @@
         },
         "config": {
           "$ref": "#/$defs/FilterConfig",
-          "filterConfigPropDescription": "筛选配置(必填,groups 非空)。"
+          "filterConfigPropDescription": "筛选配置(必填,rules 至少 1 组)。"
         }
       }
     }
@@ -230,7 +206,6 @@
   },
   "examples": [
     {
-      "title": "数据筛选",
       "source_type": "filter",
       "position": {
         "pc": {
@@ -249,15 +224,21 @@
             "chart_name": "故障类型分布"
           }
         ],
-        "groups": [
+        "rules": [
           {
-            "name": "默认组",
-            "items": [
+            "filterGroupName": "区域",
+            "filterGroupConfig": [
               {
-                "name": "报修日期",
-                "default_judge_type": 1,
-                "default_values": [],
-                "filter_type": "dateRange"
+                "filterItemName": "城市",
+                "que": {
+                  "queId": 123456
+                },
+                "judge": {
+                  "judgeType": 3,
+                  "judgeValues": [
+                    "上海"
+                  ]
+                }
               }
             ]
           }

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/grid.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/link.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/task.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"
@@ -81,7 +81,7 @@
         },
         "tasks": {
           "type": "array",
-          "taskItemsShapeDescription": "待办任务条目(ordinal 缺省按数组顺序)。",
+          "taskItemsShapeDescription": "待办任务条目(ordinal 缺省按数组顺序)。省略或空列表时编译器按前端新建缺省补 4 类标准任务(待办/已超时/即将超时/催办,全部勾选)——后端写链要求 dashTaskConfigList 非空键。",
           "items": {
             "$ref": "#/$defs/TaskItem"
           },

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/text.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/components/view.json

@@ -7,7 +7,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionShapeDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_* 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"

package/src/qingflow_mcp/builder_facade/schemas/portals/v1alpha1/summary.json

@@ -26,7 +26,7 @@
           "type": "integer",
           "minimum": 1,
           "packageTagIdDescription": "归属应用包 tagId;创建必填(缺 dash_key 时),更新缺省沿用读面归属。别名 packageTagId/package_id/packageId。 创建(无 dash_key)时必填——由 portal_apply 实现层校验(PACKAGE_TAG_REQUIRED + 包新增权限守卫);更新(带 dash_key)缺省沿用读面归属,无所属包的门户提取产物合法缺省本字段。",
-          "x-backend": "dash.tags[0].tagId(POST /dash/{dashKey}/baseInfo)"
+          "x-backend": "dash.tags[0].tagId"
         },
         "sections": {
           "type": "array",
@@ -49,8 +49,8 @@
         "publish": {
           "type": "boolean",
           "default": true,
-          "publishDescription": "apply 后是否发布(true=写后发布并回读线上态;false=仅落草稿)。这是生命周期动作参数,不属于声明内容,幂等重放时用 false。",
-          "x-backend": "POST /dash/{dashKey}/publish"
+          "publishDescription": "apply 后是否发布(true=写后发布并回读线上态;false=仅落草稿)。这是生命周期动作参数,不属于声明内容,幂等重放时用 false。注意:对已发布门户用 false 更新会把发布状态降回草稿——需要保留线上态时不要用 false 试写。",
+          "x-backend": "(编排层,不落库)"
         }
       }
     },
@@ -232,7 +232,7 @@
     "Position": {
       "type": "object",
       "additionalProperties": false,
-      "positionDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_x/…/mobile_h 也接受,归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
+      "positionDescription": "网格位置。PC 是 24 列网格(cols≤24),mobile 是 6 列网格(cols≤6);同行组件共享同一 y 与 rows,一行 cols 合计 24。mobile 可省略(缺省与 pc 同布局)。平铺别名 pc_x/pc_y/pc_w/pc_h、mobile_x/…/mobile_h 也接受(x/y 与 w/h/cols/rows 混写均认),归一为本结构。标准行高:指标卡 rows=5、BI 图表 rows=7、数据视图 rows=11、业务入口 rows=4。",
       "properties": {
         "pc": {
           "$ref": "#/$defs/PositionDetail"

package/src/qingflow_mcp/builder_facade/schemas/views/v1alpha1/complete.json

@@ -20,7 +20,7 @@
         "pinned": {
           "type": "boolean",
           "pinnedDescription": "是否固定在应用的视图列表顶部。true=固定，false=取消固定；省略时保持当前状态。别名 fixed/is_pinned/isPinned。它与 display.pin_navigate（视图内导航固定）无关。",
-          "x-backend": "POST /app/{appKey}/view/ordinal (FIXED_VIEW_LIST|VIEW_LIST)"
+          "x-backend": "视图列表固定状态(非 viewgraph 配置)"
         },
         "name": {
           "type": "string",

package/src/qingflow_mcp/builder_facade/schemas/views/v1alpha1/details/display.json

@@ -6,7 +6,7 @@
   "type": "object",
   "additionalProperties": false,
   "properties": {
-    "pinned": { "type": "boolean", "pinnedDescription": "是否固定在应用的视图列表顶部。true=固定，false=取消固定；省略时保持当前状态。它与 display.pin_navigate 无关。", "x-backend": "POST /app/{appKey}/view/ordinal (FIXED_VIEW_LIST|VIEW_LIST)" },
+    "pinned": { "type": "boolean", "pinnedDescription": "是否固定在应用的视图列表顶部。true=固定，false=取消固定；省略时保持当前状态。它与 display.pin_navigate 无关。", "x-backend": "视图列表固定状态(非 viewgraph 配置)" },
     "columns": { "type": "array", "items": { "type": "integer" }, "minItems": 1, "columnsDescription": "表格或卡片展示字段，按数组顺序显示。" },
     "sort": { "type": "array", "items": { "$ref": "../complete.json#/$defs/SortRule" }, "sortDescription": "多级排序。空数组恢复默认排序。" },
     "card": { "$ref": "../complete.json#/$defs/CardConfig", "cardDescription": "卡片视图配置(封面/标题/字段标题/分组)。" },

package/src/qingflow_mcp/builder_facade/schemas/views/v1alpha1/summary.json

@@ -20,7 +20,7 @@
         "pinned": {
           "type": "boolean",
           "pinnedDescription": "是否固定在应用的视图列表顶部。true=固定，false=取消固定；省略时保持当前状态。别名 fixed/is_pinned/isPinned。它与 display.pin_navigate（视图内导航固定）无关。",
-          "x-backend": "POST /app/{appKey}/view/ordinal (FIXED_VIEW_LIST|VIEW_LIST)"
+          "x-backend": "视图列表固定状态(非 viewgraph 配置)"
         },
         "name": {
           "type": "string",

package/src/qingflow_mcp/builder_facade/service.py

@@ -26,7 +26,12 @@ from ..resource_uri import validate_positive_resource_id, validate_resource_iden
 from ..solution.build_assembly_store import BuildAssemblyStore, default_artifacts, default_manifest
 from ..solution.compiler.chart_compiler import qingbi_workspace_visible_auth
 from ..solution.compiler.form_compiler import build_question, default_form_payload, default_member_auth
-from ..solution.compiler.icon_utils import encode_workspace_icon_with_defaults, update_workspace_icon_from_existing, workspace_icon_config
+from ..solution.compiler.icon_utils import (
+    encode_workspace_icon_with_defaults,
+    update_workspace_icon_from_existing,
+    validate_workspace_icon_choice,
+    workspace_icon_config,
+)
 from ..solution.compiler.view_compiler import VIEW_TYPE_MAP
 from ..solution.executor import _build_viewgraph_questions, _compact_dict, _flatten_viewgraph_questions, extract_field_map
 from ..solution.spec_models import FieldType, FormLayoutRowSpec, FormLayoutSectionSpec, ViewSpec
@@ -3063,6 +3068,7 @@ class AiBuilderFacade:
         *,
         profile: str,
         visibility: VisibilityPatch | None,
+        degradation_warnings: list[dict[str, Any]] | None = None,
     ) -> dict[str, Any]:
         if visibility is None:
             return default_member_auth()
@@ -3096,35 +3102,116 @@ class AiBuilderFacade:
             member_ids=visibility.external_selectors.member_ids,
             member_emails=visibility.external_selectors.member_emails,
         )
-        # 冗余引用降级:提取器对同一成员同时产出 uid/email/name 三通道(uid 必有且直通解析,
-        # 保证成员不丢);email/name 走后端通讯录搜索,受数据/权限边界影响解析可能失败。
-        # 这类失败降级为非阻断——只有 uid/dept_id 直通也覆盖不了的引用才真正阻断。
+        # 冗余引用降级(review §2-1 逐主体锚定校验):提取器对同一成员同时产出
+        # uid/email/name 三通道(uid 必有且直通解析,保证成员不丢);email/name 走
+        # 后端通讯录搜索,受数据/权限边界影响解析可能失败。降级只在「该主体已被
+        # 直通锚覆盖」时成立,否则升级为阻断——关闭手写声明混用 uid 锚定 + 仅
+        # email/name 引用时,主体被静默丢弃的窗口。覆盖判定按失败类别的可验证面:
+        #   - AMBIGUOUS_*:目录命中多候选,候选(matches)与已解析直通锚 uid/deptId/
+        #     roleId 求交——交非空说明歧义主体之一已被锚定,主体集合不丢;
+        #   - *_NOT_FOUND:目录答「不存在」,失败值与已解析条目的真实属性(email/
+        #     name)比对(直通 stub 条目属性是 id 字符串,不会误匹配);
+        #   - *_SEARCH_FAILED:目录服务本身不可达,主体身份无从验证——保留全局
+        #     「直通锚非空」guard(eval 隔离环境外部登录资源不可达 → 搜索 49500
+        #     超时的确定性约束;纯手写声明仍阻断),降级明细经 degradation_warnings
+        #     回响应信封,不再静默。
         _SOFT_RESOLUTION_KINDS = {"member_email", "member_name", "department_name", "role", "external_member_email"}
         _NOT_FOUND_RESOLUTION_CODES = {"MEMBER_NOT_FOUND", "AMBIGUOUS_MEMBER", "ROLE_NOT_FOUND", "AMBIGUOUS_ROLE", "DEPARTMENT_NOT_FOUND", "AMBIGUOUS_DEPARTMENT"}
-        # 目录查询失败类(隔离 eval 环境外部登录资源不可达 → 后端成员/角色搜索 49500 超时,
-        # 实测确定性环境限制非瞬态):在 uid/dept_id 直通已解析出至少一个主体、即主体集合
-        # 不依赖搜索通道时,搜索失败同样降级为非阻断(主体集合由直通锚完整保留);
-        # 纯手写声明(仅 email/name 无 uid)仍阻断,避免静默丢成员。
-        uid_direct_count = len(member_resolution.get("member_entries") or []) + len(department_resolution.get("department_entries") or [])
-        blocking_issues = [
-            issue
-            for issue in [
-                *member_resolution["issues"],
-                *role_resolution["issues"],
-                *department_resolution["issues"],
-                *external_member_resolution["issues"],
-            ]
-            # 冗余 email/name 引用「找不到」降级为非阻断(uid/id 直通已保主体不丢);
-            # 权限拒绝/查询失败类(LOOKUP_FAILED/PERMISSION_DENIED):主体直通已非空时降级,否则仍阻断
-            if not (
-                str(issue.get("kind") or "") in _SOFT_RESOLUTION_KINDS
-                and (
-                    str(issue.get("error_code") or "") in _NOT_FOUND_RESOLUTION_CODES
-                    or (str(issue.get("error_code") or "").endswith("_SEARCH_FAILED") and uid_direct_count > 0)
-                )
-            )
-        ]
+        member_entries = member_resolution.get("member_entries") or []
+        department_entries = department_resolution.get("department_entries") or []
+        role_entries = role_resolution.get("role_entries") or []
+        external_entries = external_member_resolution.get("member_entries") or []
+        uid_direct_count = len(member_entries) + len(department_entries)
+        resolved_anchor_ids = {
+            value
+            for value in (
+                _coerce_positive_int(entry.get("uid"))
+                for entry in [*member_entries, *external_entries]
+            )
+            if value is not None
+        } | {
+            value
+            for value in (
+                _coerce_positive_int(entry.get("deptId"))
+                for entry in department_entries
+            )
+            if value is not None
+        } | {
+            value
+            for value in (_coerce_positive_int(entry.get("roleId")) for entry in role_entries)
+            if value is not None
+        }
+
+        def _match_anchor_ids(issue: dict[str, Any]) -> set[int]:
+            matched: set[int] = set()
+            for candidate in issue.get("matches") or []:
+                if not isinstance(candidate, dict):
+                    continue
+                for key in ("uid", "id", "memberId", "deptId", "roleId"):
+                    value = _coerce_positive_int(candidate.get(key))
+                    if value is not None:
+                        matched.add(value)
+            return matched
+
+        def _matches_resolved_attribute(issue: dict[str, Any]) -> bool:
+            kind = str(issue.get("kind") or "")
+            raw = str(issue.get("value") or "").strip()
+            if not raw:
+                return False
+            if kind in {"member_email", "external_member_email"}:
+                entries = external_entries if kind.startswith("external") else member_entries
+                return any(raw.lower() == str(entry.get("email") or "").strip().lower() for entry in entries)
+            if kind == "member_name":
+                return any(raw == str(entry.get("name") or "").strip() for entry in member_entries)
+            if kind == "department_name":
+                return any(raw == str(entry.get("deptName") or "").strip() for entry in department_entries)
+            if kind == "role":
+                return any(raw == str(entry.get("roleName") or "").strip() for entry in role_entries)
+            return False
+
+        blocking_issues: list[dict[str, Any]] = []
+        degraded_issues: list[dict[str, Any]] = []
+        for issue in [
+            *member_resolution["issues"],
+            *role_resolution["issues"],
+            *department_resolution["issues"],
+            *external_member_resolution["issues"],
+        ]:
+            if str(issue.get("kind") or "") not in _SOFT_RESOLUTION_KINDS:
+                blocking_issues.append(issue)
+                continue
+            error_code = str(issue.get("error_code") or "")
+            if error_code.endswith("_SEARCH_FAILED"):
+                covered = uid_direct_count > 0
+            elif error_code.startswith("AMBIGUOUS_"):
+                covered = bool(_match_anchor_ids(issue) & resolved_anchor_ids)
+            elif error_code in _NOT_FOUND_RESOLUTION_CODES:
+                covered = _matches_resolved_attribute(issue)
+            else:
+                # PERMISSION_DENIED/未知失败类:不可归因为「主体已被锚定的冗余通道」,
+                # 维持阻断(master 语义)。
+                blocking_issues.append(issue)
+                continue
+            if covered:
+                degraded_issues.append(issue)
+            else:
+                blocking_issues.append(issue)
         self._raise_visibility_resolution_issues(blocking_issues)
+        if degraded_issues and degradation_warnings is not None:
+            for issue in degraded_issues:
+                degradation_warnings.append(
+                    _warning(
+                        "VISIBILITY_SOFT_REFERENCE_DEGRADED",
+                        (
+                            f"visibility {issue.get('kind')} '{issue.get('value')}' could not be resolved "
+                            f"({issue.get('error_code')}); the subject is dropped from visibility selectors "
+                            "unless it was also anchored by a direct id reference"
+                        ),
+                        kind=issue.get("kind"),
+                        value=issue.get("value"),
+                        error_code=issue.get("error_code"),
+                    )
+                )
 
         external_depart_entries: list[dict[str, Any]] = []
         for dept_id in visibility.external_selectors.dept_ids:
@@ -9024,6 +9111,26 @@ class AiBuilderFacade:
                 )
             except PortalsContractError as error:
                 issues.append({"path": error.path or "/", "code": error.error_code, "message": str(error.message)})
+            else:
+                # 创建语义(无 dash_key)的 icon/color 目录校验与 apply 同口径:离线
+                # jsonschema 不含目录枚举(更新语义须放行存量 hex 透传),不补这层
+                # 会出现「validate 通过、apply 拒绝」的校验信任断裂(实测反馈失败二
+                # 同型);更新语义不做目录校验(与 apply 更新分支一致)。
+                if not str(parsed.dash_key or "").strip():
+                    icon_ok, icon_error_code, icon_message, _icon_details = validate_workspace_icon_choice(
+                        icon=parsed.icon,
+                        color=parsed.color,
+                        require_explicit=True,
+                        disallow_generic=True,
+                    )
+                    if not icon_ok:
+                        issues.append(
+                            {
+                                "path": "/color" if str(icon_error_code or "").endswith("COLOR_NOT_FOUND") or icon_error_code == "WORKSPACE_ICON_COLOR_REQUIRED" else "/icon",
+                                "code": icon_error_code or "WORKSPACE_ICON_INVALID",
+                                "message": icon_message or "invalid workspace icon configuration",
+                            }
+                        )
         ok = not issues
         return {
             "status": "success" if ok else "failed",
@@ -15316,9 +15423,14 @@ class AiBuilderFacade:
         requested_visibility = request.visibility
         if requested_visibility is None and isinstance(request.auth, dict) and request.auth:
             requested_visibility = VisibilityPatch.model_validate(_public_visibility_from_member_auth(request.auth))
+        visibility_degradation_warnings: list[dict[str, Any]] = []
         try:
             desired_auth = (
-                self._compile_visibility_to_member_auth(profile=profile, visibility=requested_visibility)
+                self._compile_visibility_to_member_auth(
+                    profile=profile,
+                    visibility=requested_visibility,
+                    degradation_warnings=visibility_degradation_warnings,
+                )
                 if requested_visibility is not None
                 else None
             )
@@ -15363,6 +15475,12 @@ class AiBuilderFacade:
         def finalize(response: JSONObject) -> JSONObject:
             if schema_context is not None:
                 response["schemaVersion"] = schema_context.schema_version
+            # 可见性冗余引用降级明细回信封(review §2-1:降级不再静默)
+            if visibility_degradation_warnings:
+                existing_warnings = response.get("warnings")
+                warnings = list(existing_warnings) if isinstance(existing_warnings, list) else []
+                warnings.extend(item for item in visibility_degradation_warnings if item not in warnings)
+                response["warnings"] = warnings
             _merge_duration_breakdown(
                 response,
                 portal_initial_read_ms=portal_initial_read_ms,
@@ -20693,6 +20811,18 @@ def _compile_portal_task_config(section_title: str, raw: dict[str, Any]) -> dict
             task_items.append(item)
         if task_items:
             task_config["dashTaskConfigList"] = task_items
+    # dashTaskConfigList 必须始终携带:后端 DashTaskSvcImpl#addTaskInfos 对
+    # taskConfig.getDashTaskConfigList() 直接迭代(ComponentTaskConfig 字段无默认
+    # 初始化),键缺失 → null.size() NPE → 500(实测反馈「task 组件无论如何 500」
+    # 根因)。声明未表达 tasks 时按前端新建缺省补 4 类标准任务(title 用后端 i18n 键,
+    # 与存量/前端缺省一致);提取侧读面恒有条目,round-trip 不受影响。
+    if not task_config.get("dashTaskConfigList"):
+        task_config["dashTaskConfigList"] = [
+            {"title": "all.taskTodo", "type": 1, "ordinal": 0, "beingCheck": True},
+            {"title": "all.taskTimeout", "type": 2, "ordinal": 1, "beingCheck": True},
+            {"title": "all.taskUpcomingTimeout", "type": 3, "ordinal": 2, "beingCheck": True},
+            {"title": "all.taskRemind", "type": 4, "ordinal": 3, "beingCheck": True},
+        ]
     return task_config
 
 

package/src/qingflow_mcp/cli/commands/builder.py

@@ -1487,8 +1487,26 @@ def _handle_portal_apply(args: argparse.Namespace, context: CliContext) -> dict:
             schema_version=effective_schema_version,
             publish=effective_publish,
         )
-    legacy_args_used = True
-    if legacy_args_used:
+    # deprecation 提示仅在实际使用 patch 参数时打印(review §5 噪声收敛):
+    # 纯 flag 调用(--dash-key/--publish/--schema-version/--package-id 定位或发布
+    # 开关)不是 patch 形态,不该被提示;判定集与 --file 互斥检查的 patch 参数集一致。
+    patch_args_used = any(
+        bool(item)
+        for item in (
+            getattr(args, "sections_file", None),
+            getattr(args, "patch_sections_file", None),
+            getattr(args, "visibility_file", None),
+            getattr(args, "auth_file", None),
+            getattr(args, "dash_global_config_file", None),
+            getattr(args, "config_file", None),
+            getattr(args, "payload_file", None),
+            getattr(args, "icon", None),
+            getattr(args, "color", None),
+            (getattr(args, "dash_name", "") or ""),
+            (getattr(args, "layout_preset", "") or ""),
+        )
+    )
+    if patch_args_used:
         print(
             "[deprecation] builder portal apply patch parameters are in a compatibility window; prefer `--file <declaration.json>`",
             file=sys.stderr,

package/src/qingflow_mcp/server_app_builder.py

@@ -630,7 +630,7 @@ def build_builder_server() -> PolicyAwareFastMCP:
             apps=apps,
         )
 
-    @server.tool()
+    @server.tool(description=ai_builder._high_risk_tool_description(operation="update", target="portal configuration"))
     def portal_apply(
         profile: str = DEFAULT_PROFILE,
         dash_key: str = "",
@@ -696,7 +696,7 @@ def build_builder_server() -> PolicyAwareFastMCP:
             patch_sections=patch_sections,
         )
 
-    @server.tool()
+    @server.tool(description=ai_builder._high_risk_tool_description(operation="delete", target="portal configuration"))
     def portal_delete(
         profile: str = DEFAULT_PROFILE,
         dash_key: str = "",

package/src/qingflow_mcp/tools/ai_builder_tools.py

@@ -4422,6 +4422,12 @@ class AiBuilderTools(ToolBase):
             normalized_args=normalized_args,
             suggested_next_call={"tool_name": "portal_apply", "arguments": {"profile": profile, **normalized_args}},
         ))
+        # 更新语义(dash_key 定位)写成功后挂人工复核 notice:被收敛删除的
+        # portal_update/portal_update_base_info 原带该防护(master 同款),
+        # portal_apply 成为唯一写入口后在此恢复;创建语义不挂(新建资源
+        # 是 agent 主路径,逐次人工复核不可行)。
+        if not portal_creating and result.get("write_executed") and result.get("status") in {"success", "partial_success"}:
+            result = self._attach_human_review_notice(result, operation="update", target="portal configuration")
         return self._attach_apply_envelope(profile, "portal_apply", result)
 
     def portal_delete(self, *, profile: str, dash_key: str) -> JSONObject:
@@ -4433,6 +4439,8 @@ class AiBuilderTools(ToolBase):
             normalized_args=normalized_args,
             suggested_next_call={"tool_name": "portal_delete", "arguments": {"profile": profile, **normalized_args}},
         ))
+        if result.get("write_executed") and result.get("status") in {"success", "partial_success"}:
+            result = self._attach_human_review_notice(result, operation="delete", target="portal configuration")
         return self._attach_apply_envelope(profile, "portal_delete", result)
 
     def app_publish_verify(