openxiangda 1.0.129 → 1.0.130

package/README.md

@@ -108,6 +108,7 @@ openxiangda auth-config methods --json
 openxiangda function invoke submit_public_registration --body-json '{"input":{}}'
 openxiangda connector invoke sms.sendCode --body-json '{"body":{"phone":"13800000000"}}'
 openxiangda notification preview public_register_notice --body-json '{"payload":{"title":"测试"}}'
+openxiangda permission snapshot --form-codes customer,orders --json
 openxiangda permission audit --json
 ```
 

package/lib/cli.js

@@ -150,7 +150,7 @@ Usage:
   openxiangda function list|get|create|update|upsert|delete|invoke [--json-file file]
   openxiangda connector list|get|create|update|upsert|delete|invoke|download-test [--json-file file]
   openxiangda notification template-list|template-get|template-upsert|template-delete|type-list|type-get|type-upsert|type-delete|preview|send|batch-send
-  openxiangda permission role-list|role-create|role-update|role-delete|role-bind|audit
+  openxiangda permission role-list|role-create|role-update|role-delete|role-bind|snapshot|audit
   openxiangda permission page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind
   openxiangda permission form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind
   openxiangda settings get|save|indexes|indexes-save|data-management|data-management-save|public-access
@@ -3140,7 +3140,7 @@ async function permission(args) {
   const { flags, positional } = parseArgs(rest);
   if (wantsSubcommandHelp(subcommand, flags)) {
     print(
-      '用法: openxiangda permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind|form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind|form-summary|menu-permissions|audit'
+      '用法: openxiangda permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind|form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind|form-summary|menu-permissions|snapshot|audit'
     );
     return;
   }
@@ -3579,6 +3579,36 @@ async function permission(args) {
     return;
   }
 
+  if (subcommand === 'snapshot') {
+    const target = getWorkspaceTarget(config, profileName, flags);
+    const formUuids = resolvePermissionSnapshotFormUuids(target.bound, flags);
+    const data = await requestWithAuth(
+      config,
+      target.profileName,
+      `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/permissions/snapshot`,
+      {
+        method: 'POST',
+        body: {
+          formUuids,
+          includeRoles: flags['no-roles'] ? false : undefined,
+          includePageGroups: flags['no-page-groups'] ? false : undefined,
+          includeFormGroups: flags['no-form-groups'] ? false : undefined,
+        },
+      }
+    );
+    if (flags.json) return writeJson(data);
+    const formGroups = data.formPermissionGroups || {};
+    print(
+      [
+        `Permission snapshot appType=${data.appType || target.appType}`,
+        `roles=${Array.isArray(data.roles) ? data.roles.length : 0}`,
+        `pageGroups=${Array.isArray(data.pagePermissionGroups) ? data.pagePermissionGroups.length : 0}`,
+        `formGroups=${Number(formGroups.total || 0)}`,
+      ].join(' ')
+    );
+    return;
+  }
+
   if (subcommand === 'audit') {
     const target = getWorkspaceTarget(config, profileName, flags);
     const result = await buildPermissionAudit(config, target, flags);
@@ -3589,7 +3619,7 @@ async function permission(args) {
   }
 
   fail(
-    '用法: openxiangda permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind|form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind|form-summary|menu-permissions|audit'
+    '用法: openxiangda permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind|form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind|form-summary|menu-permissions|snapshot|audit'
   );
 }
 
@@ -4526,7 +4556,7 @@ async function commands(args) {
       'function list|get|create|update|upsert|delete|invoke',
       'connector list|get|create|update|upsert|delete|invoke|download-test',
       'notification template-list|template-get|template-upsert|template-delete|type-list|type-get|type-upsert|type-delete|preview|send|batch-send',
-      'permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|audit',
+      'permission role-list|role-create|role-update|role-delete|role-bind|role-users|role-add-users|snapshot|audit',
       'permission page-group-list|page-group-create|page-group-update|page-group-delete|page-group-bind',
       'permission form-group-list|form-group-create|form-group-update|form-group-delete|form-group-bind|form-summary|menu-permissions',
       'settings get|save|indexes|indexes-save|data-management|data-management-save|public-access|public-access-save|public-access-delete',
@@ -5075,10 +5105,21 @@ async function buildPermissionAudit(config, target, flags = {}) {
     warnings,
   };
   if (flags.live) {
-    result.live = {
-      roles: await requestWithAuth(config, target.profileName, `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/roles`),
-      pagePermissionGroups: await requestWithAuth(config, target.profileName, `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/page-permission-groups`),
-    };
+    result.live = await requestWithAuth(
+      config,
+      target.profileName,
+      `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/permissions/snapshot`,
+      {
+        method: 'POST',
+        body: {
+          formUuids: unique(
+            (manifest.formPermissionGroups || [])
+              .map(group => resolveManifestFormUuid(target.bound, group))
+              .filter(Boolean)
+          ),
+        },
+      }
+    );
   }
   return result;
 }
@@ -5117,6 +5158,25 @@ function resolveOptionalFormUuid(bound, formCode) {
   return bound.resources?.forms?.[formCode]?.formUuid || formCode;
 }
 
+function resolvePermissionSnapshotFormUuids(bound, flags = {}) {
+  const directFormUuids = [
+    ...splitList(flags['form-uuids']),
+    ...splitList(flags['form-uuid']),
+  ];
+  const mappedFormUuids = [
+    ...splitList(flags['form-codes']),
+    ...splitList(flags['form-code']),
+  ]
+    .map(formCode => resolveOptionalFormUuid(bound, formCode))
+    .filter(Boolean);
+  const allFormUuids = flags['all-forms']
+    ? Object.values(bound.resources?.forms || {})
+        .map(item => item?.formUuid)
+        .filter(Boolean)
+    : [];
+  return unique([...directFormUuids, ...mappedFormUuids, ...allFormUuids]);
+}
+
 function resolveOptionalPageId(bound, pageCode) {
   if (!pageCode) return undefined;
   return bound.resources?.pages?.[pageCode]?.pageId || pageCode;

package/openxiangda-skills/skills/openxiangda-permission-settings/SKILL.md

@@ -127,8 +127,14 @@ for real backend read/write field access (`edit`, `readonly`, `hidden`) with
 ```bash
 openxiangda permission form-summary --form-code customer --profile dev --json
 openxiangda permission menu-permissions --profile dev --json
+openxiangda permission snapshot --profile dev --form-codes customer,orders --json
 ```
 
+When auditing many roles or permission groups, prefer `openxiangda permission
+snapshot` over looping `role-list`, `page-group-list`, or `form-group-list`.
+The snapshot command uses the platform batch endpoint and returns roles, page
+permission groups, and form permission groups in one request.
+
 ## Form Settings
 
 Use settings commands for form runtime settings, field indexes, data management pages, and public access:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.129",
+  "version": "1.0.130",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {
@@ -67,6 +67,7 @@
     "test:resource-plan": "node scripts/resource-plan-smoke.mjs",
     "test:design-gates": "node scripts/design-gates-smoke.mjs",
     "test:resource-cli": "node scripts/resource-cli-smoke.mjs",
+    "test:permission-snapshot": "node scripts/permission-snapshot-smoke.mjs",
     "test:sdk-bundle": "node scripts/sdk-browser-bundle-smoke.mjs",
     "test:api-contract": "node scripts/openxiangda-api-contract-smoke.mjs",
     "test:help-no-side-effects": "node scripts/help-no-side-effects-smoke.mjs",