openxiangda 1.0.134 → 1.0.136

package/openxiangda-skills/skills/openxiangda-architecture-design/SKILL.md

@@ -21,6 +21,7 @@ Read these supporting references when the design touches the topic:
 - `references/architecture-patterns.md`
 - `references/data-views.md`
 - `references/permissions-settings.md`
+- `references/permission-design-patterns.md`
 - `references/workflow-v3.md`
 - `references/automation-v3.md`
 - `references/notifications.md`
@@ -66,6 +67,8 @@ Once the user confirms, hand execution to the relevant implementation skill and
 - Do not default to `searchKeyWord` for broad fuzzy search. Prefer explicit searchable fields and structured `filterGroup` conditions.
 - Do not use workflow forms for ordinary business lifecycles. Use normal forms, status fields, state machines, responsibility fields, action logs, permissions, and automations. Use workflow only for real approval semantics.
 - Do not put sensitive authorization in page conditions only. Use page permission groups, form permission groups, backend data scope, and field access policy when data is sensitive.
+- Do not design account/role/permission requirements without choosing a permission mode first: `managed-platform-account`, `existing-platform-user-assignment`, `static-role-permission`, or `query-param-context`.
+- Do not treat query parameters as sensitive authorization. They may provide context, filters, or ticket input only; sensitive reads/writes still need public-access grants, roles, form permission groups, or App Function checks.
 - Do not put repeated multi-form joins or fixed dashboard metrics into page-side loops. Use Data View when the query is reusable and read-only; choose `live` or `materialized` deliberately.
 - Do not scatter reusable backend logic in pages or JS_CODE nodes. Use App Functions for logic shared by pages, automations, and workflows. Use JS_CODE V2 for node-local backend trigger logic.
 - Do not design raw native form controls for AI-authored workspace code. Use OpenXiangda platform form components first, then Ant Design / antd-mobile wrappers.
@@ -103,6 +106,9 @@ Resolve these before finalizing:
 
 - Data volume, pagination, searchable fields, sort fields, and expected indexes.
 - Role model, data sensitivity, backend-enforced data scope, and field visibility.
+- Account source, role membership source, permission design mode, and whether platform accounts/departments are created by the app.
+- Which roles can manage roles, assign role members, grant role API permissions, maintain permission groups, or manage organization accounts; list the required `apiPermissionCodes`.
+- Permission matrix for pages/routes, form submit/view/manage, data scope, field access policy, backend App Function checks, and query parameter tamper-deny tests.
 - Which flows are status machines and which are real approvals.
 - Report freshness: real-time live view, materialized refresh cadence, or manual snapshot.
 - Whether dashboards and joins are bounded enough for Data View.
@@ -118,6 +124,8 @@ The final design must be decision-complete. Include:
 - Architecture overview and OpenXiangda resource map.
 - Form and field design with storage shape, hidden scope keys, searchable fields, and pagination strategy.
 - Permission design with page groups, form groups, data scope, and field access policy.
+- Permission mode decision with account source, role assignment source, business scope fields, hidden scalar keys, query-parameter boundary, and backend role/scope checks.
+- Delegated role-setting design: which administrator role is first granted by a platform/app admin, which `apiPermissionCodes` it receives, and whether roles it creates can further delegate management.
 - Page/menu/UX design, including PC/mobile and design mockup decisions.
 - Data access and Data View plan with `live` / `materialized`, refresh, indexes, and runtime SDK calls.
 - Status machine, workflow, automation, JS_CODE V2, and App Function plan.

package/openxiangda-skills/skills/openxiangda-core/SKILL.md

@@ -19,8 +19,10 @@ description: Core OpenXiangda CLI workflow — normal-user token login, platform
 openxiangda env --profile <name>
 openxiangda auth status --profile <name>
 openxiangda update check --json   # if updateAvailable: openxiangda update install
+openxiangda sdd context --json    # high-risk changes need an approved SDD change
 
 # 2. preview the change set (NEVER skip --dry-run on routine edits)
+openxiangda sdd verify <change> --changed
 openxiangda workspace publish --profile <name> --changed --dry-run
 
 # 3. publish only what changed

package/openxiangda-skills/skills/openxiangda-permission-settings/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: openxiangda-permission-settings
-description: Manage OpenXiangda app **roles** (角色), **page permission groups** (页面权限组 / 菜单可见), **form permission groups** (表单权限组 / 提交 / 查看 / 字段权限 / 数据范围 / 数据隔离), and **form settings** (表单设置 / 索引 / 数据管理页 / 公开访问 / public access / 分享) with profile-isolated IDs and ordinary user token permissions. Trigger on 角色 / role / 权限 / permission / 数据范围 / data scope / 字段权限 / field permission / 菜单可见 / menu visibility / 公开访问 / public access / 分享 / share, or any work touching `permission ...` / `settings ...` CLI commands or `src/resources/{roles,pagePermissionGroups,formPermissionGroups,formSettings}/`.
+description: Manage OpenXiangda app **roles** (角色), **page permission groups** (页面权限组 / 菜单可见), **form permission groups** (表单权限组 / 提交 / 查看 / 字段权限 / 数据范围 / 数据隔离), account/role governance patterns, query-parameter authorization boundaries, and **form settings** (表单设置 / 索引 / 数据管理页 / 公开访问 / public access / 分享) with profile-isolated IDs and ordinary user token permissions. Trigger on 角色 / role / 权限 / permission / RBAC / 账号权限 / account permission / 组织账号 / organization account / 平台账号 / 数据范围 / data scope / 字段权限 / field permission / 菜单可见 / menu visibility / 公开访问 / public access / 分享 / share, or any work touching `permission ...` / `settings ...` CLI commands or `src/resources/{roles,pagePermissionGroups,formPermissionGroups,formSettings}/`.
 ---
 
 # OpenXiangda Permission And Settings
@@ -12,14 +12,25 @@ description: Manage OpenXiangda app **roles** (角色), **page permission groups
 - User wants to **gate form submit / view / edit / data scope / field permissions** (form permission groups).
 - User wants to **publish a form publicly** or change form runtime settings, indexes, data-management page config.
 - User asks about **dynamic role governance** (role maintenance form synced to platform via automation).
+- User asks about **platform accounts, organization accounts, account-role assignment, RBAC, or query-parameter access**.
 
 ## DO / DO NOT
 
+- ✅ Before account/role/permission design, run `openxiangda design gates --topic permissions --json` and choose one mode: `managed-platform-account`, `existing-platform-user-assignment`, `static-role-permission`, or `query-param-context`.
+- ✅ Write a permission matrix before implementation: account source, role member source, page groups, form groups, data scope, field access policy, backend checks, query parameter boundary, and publish order.
 - ✅ Use logical role / group codes locally; live IDs go under the active profile in `.openxiangda/state.json`.
 - ✅ For dynamic multi-role apps, build a role maintenance form + automation/JS_CODE sync, not hardcoded role logic in page code.
 - ✅ For permission scope keys, derive hidden scalars (`collegeScopeKey`, `classScopeKey`, `ownerDeptScopeKey`, `ownerUserScopeKey`, `roleCode`) via `valueSync` from visible select/person/department fields.
 - ✅ Use page permission groups for entry visibility, form permission groups for real data isolation with condition-based data permissions.
+- ✅ For app-managed platform accounts/departments, use `sdk.organization.*` / `ctx.organization.*` and require the current operator to have `app:organization:manage`.
+- ✅ For delegated administrators such as 校区管理员, put role-setting API permissions in the role manifest with `apiPermissionCodes`; use `app:role:manage` for app role creation/member assignment/API-permission assignment, and add page/form/organization management permission codes only when needed.
+- ✅ If a delegated administrator creates another role that can also manage accounts, roles, or permission groups, publish that new role with its own `apiPermissionCodes`.
 - ❌ Expose raw ID text fields to users for permission scopes.
+- ❌ Treat query parameters as sensitive authorization. They may carry context, filters, or ticket input only.
+- ❌ Treat `PermissionBoundary`, button hiding, route hiding, or frontend role checks as the authority for sensitive data.
+- ❌ Hardcode role strings in pages without backing roles/page groups/form groups or App Function checks.
+- ❌ Give a user a business admin role but forget to bind `app:role:manage`, then expect role creation or role-member assignment to work.
+- ❌ Bypass OpenXiangda SDK and call platform account/organization write APIs directly.
 - ❌ Store platform-specific public-access IDs locally; CLI resolves by `appType + formUuid` per profile.
 - ❌ Reuse role / permission-group IDs across profiles.
 - ❌ Use AK/SK or legacy `/dingtalk-api/v1.0` — the logged-in user must have the matching app permission.
@@ -36,6 +47,24 @@ openxiangda workspace bind --profile dev --app-type APP_XXX
 
 The logged-in user must have the matching app permission. Do not use AK/SK or legacy `/dingtalk-api/v1.0`.
 
+For design work, also run:
+
+```bash
+openxiangda design gates --topic permissions --json
+```
+
+Resolve the permission mode before writing resources:
+
+- `managed-platform-account`: the app creates/maintains platform accounts,
+  departments, and role members.
+- `existing-platform-user-assignment`: the app selects existing platform users
+  and assigns app roles/business scopes.
+- `static-role-permission`: fixed app roles and permission groups, no in-app
+  account governance.
+- `query-param-context`: query parameters are only context, filters, or ticket
+  input; sensitive authorization still comes from roles, grants, form groups,
+  or App Function checks.
+
 ## Roles
 
 Create app roles first:
@@ -53,6 +82,13 @@ openxiangda permission role-bind sales --role-id <id> --profile dev
 
 For dynamic multi-role apps, do not hardcode role behavior only in page code. Create a role maintenance form and sync it to platform roles with automation / JS_CODE. Visible scope fields should be maintainable controls: personnel/department fields for people and orgs, `SelectField` / `RadioField` for enums, and `SelectField` with `optionSource.type: "linkedForm"` for records maintained by other forms. When the source form can have many records, set `remoteSearch: true` and `searchFieldId` so typing in the dropdown triggers an SDK query instead of loading every record. If form permission groups need scalar matching, derive hidden keys such as `collegeScopeKey`, `classScopeKey`, `ownerDeptScopeKey`, `ownerUserScopeKey`, and `roleCode`; do not expose raw ID text fields to users. Use page permission groups for entry visibility and form permission groups with condition-based data permissions for real data isolation.
 
+For managed platform account governance, use organization/account forms and sync
+functions as a closed loop: organization units, system accounts, role
+assignments, roles resources, page groups, form groups, sync App Functions, and
+backend role/scope checks. Platform account writes must go through
+`sdk.organization` or `ctx.organization`; the current operator must have
+`app:organization:manage`.
+
 ## Page Permission Groups
 
 Page permission groups control menu/page visibility:
@@ -153,6 +189,7 @@ Do not store platform-specific public access IDs locally. The CLI resolves by `a
 ## References
 
 - Permission model and examples: `references/permissions-settings.md`
+- Account/role design modes: `references/permission-design-patterns.md`
 - Dynamic role governance and data-isolation pattern: `references/best-practices.md`
 - Profile-isolated IDs: `references/workspace-state.md`
 - API fields: `references/openxiangda-api.md`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openxiangda",
-  "version": "1.0.134",
+  "version": "1.0.136",
   "description": "OpenXiangda CLI, workspace build tools, runtime SDK, and form components.",
   "private": false,
   "bin": {
@@ -73,6 +73,7 @@
     "test:help-no-side-effects": "node scripts/help-no-side-effects-smoke.mjs",
     "test:app-function-fallback": "node scripts/app-function-source-fallback-smoke.mjs",
     "test:runtime-deploy": "node scripts/runtime-deploy-smoke.mjs",
+    "test:sdd": "node scripts/sdd-smoke.mjs",
     "test:skill-install": "bash scripts/skill-install-smoke.sh",
     "test:workspace-init": "bash scripts/workspace-init-smoke.sh"
   },

package/packages/sdk/dist/{ProcessPreview-Dfc4-wIq.d.mts → ProcessPreview-Ci8_UsbN.d.mts}

@@ -316,6 +316,10 @@ interface FormEngineConfig {
     navigation?: {
         basePath?: string;
     };
+    compatibility?: {
+        apiContracts?: 'strict' | 'legacy';
+        legacyFallbacks?: boolean;
+    };
     effects?: FormEffect[];
 }
 type FormEffectConditionOperator = 'eq' | 'ne' | 'in' | 'notIn' | 'contains' | 'empty' | 'notEmpty' | 'between' | 'changed';

package/packages/sdk/dist/{ProcessPreview-Dfc4-wIq.d.ts → ProcessPreview-Ci8_UsbN.d.ts}

@@ -316,6 +316,10 @@ interface FormEngineConfig {
     navigation?: {
         basePath?: string;
     };
+    compatibility?: {
+        apiContracts?: 'strict' | 'legacy';
+        legacyFallbacks?: boolean;
+    };
     effects?: FormEffect[];
 }
 type FormEffectConditionOperator = 'eq' | 'ne' | 'in' | 'notIn' | 'contains' | 'empty' | 'notEmpty' | 'between' | 'changed';

package/packages/sdk/dist/build/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqCO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}

package/packages/sdk/dist/build/index.d.mts

@@ -37,6 +37,13 @@ interface AppWorkspaceConfig {
     pages?: {
         dir?: string;
     };
+    governance?: {
+        sdd?: {
+            enabled?: boolean;
+            strictHighRisk?: boolean;
+            path?: string;
+        };
+    };
 }
 declare function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T;
 declare function createOpenXiangdaNamespaceCssPlugin(prefix?: string): {

package/packages/sdk/dist/build/index.d.ts

@@ -37,6 +37,13 @@ interface AppWorkspaceConfig {
     pages?: {
         dir?: string;
     };
+    governance?: {
+        sdd?: {
+            enabled?: boolean;
+            strictHighRisk?: boolean;
+            path?: string;
+        };
+    };
 }
 declare function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T;
 declare function createOpenXiangdaNamespaceCssPlugin(prefix?: string): {

package/packages/sdk/dist/build/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";AAqCO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}
+{"version":3,"sources":["../../src/build/index.ts"],"sourcesContent":["export type CssIsolation = 'namespace' | 'shadow' | 'none';\nexport type WorkspaceRuntimeMode = 'legacy' | 'react-spa';\n\nexport interface AppWorkspaceConfig {\n  appType?: string;\n  appName?: string;\n  runtimeMode?: WorkspaceRuntimeMode;\n  platformUrl?: string;\n  servicePrefix?: string;\n  appKey?: string;\n  appSecret?: string;\n  userId?: string;\n  version?: string;\n  buildId?: string;\n  oss?: {\n    region?: string;\n    bucket?: string;\n    accessKeyId?: string;\n    accessKeySecret?: string;\n    pathPrefix?: string;\n    corsOrigins?: string[];\n    skipCors?: boolean;\n  };\n  defaults?: {\n    protocolVersion?: string;\n    frameworkVersion?: string;\n    cssIsolation?: CssIsolation;\n    formMenuParentId?: string;\n    formMenuIcon?: string;\n    pageMenuParentId?: string;\n    pageMenuIcon?: string;\n    formBuilderVersion?: string;\n  };\n  forms?: { dir?: string; publishLegacyBundle?: boolean };\n  pages?: { dir?: string };\n  governance?: {\n    sdd?: {\n      enabled?: boolean;\n      strictHighRisk?: boolean;\n      path?: string;\n    };\n  };\n}\n\nexport function defineAppWorkspaceConfig<T extends AppWorkspaceConfig>(config: T): T {\n  return config;\n}\n\nconst DEFAULT_NAMESPACE_PREFIX = '.sy-app-workspace';\n\nfunction splitCssSelectors(selector: string) {\n  const selectors: string[] = [];\n  let depth = 0;\n  let quote = '';\n  let current = '';\n  for (const char of selector) {\n    if (quote) {\n      current += char;\n      if (char === quote) quote = '';\n      continue;\n    }\n    if (char === '\"' || char === \"'\") {\n      quote = char;\n      current += char;\n      continue;\n    }\n    if (char === '(' || char === '[') depth += 1;\n    if (char === ')' || char === ']') depth -= 1;\n    if (char === ',' && depth === 0) {\n      selectors.push(current.trim());\n      current = '';\n      continue;\n    }\n    current += char;\n  }\n  if (current.trim()) selectors.push(current.trim());\n  return selectors;\n}\n\nfunction shouldSkipNamespace(selector: string, prefix: string) {\n  if (!selector || selector.includes(prefix)) return true;\n  if (/^(html|body|:root)(\\b|:|\\[|$)/.test(selector)) return true;\n  if (/^(@|from\\b|to\\b|\\d+%)/.test(selector)) return true;\n  if (/^\\.(ant|sy-ant|anticon|adm)-/.test(selector)) return true;\n  return false;\n}\n\nfunction createAntdSelectorAlias(selector: string) {\n  const aliased = selector\n    .replace(/(^|[^A-Za-z0-9_-])\\.ant-/g, '$1.sy-ant-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon-/g, '$1.sy-anticon-')\n    .replace(/(^|[^A-Za-z0-9_-])\\.anticon(?=$|[^A-Za-z0-9_-])/g, '$1.sy-anticon');\n  return aliased === selector ? null : aliased;\n}\n\nexport function createOpenXiangdaNamespaceCssPlugin(\n  prefix = DEFAULT_NAMESPACE_PREFIX,\n) {\n  return {\n    postcssPlugin: 'openxiangda-namespace-css',\n    Rule(rule: { selector?: string; parent?: any }) {\n      if (!rule.selector) return;\n      let parent = rule.parent;\n      while (parent) {\n        if (parent.type === 'atrule' && /keyframes$/i.test(parent.name)) {\n          return;\n        }\n        parent = parent.parent;\n      }\n      rule.selector = Array.from(\n        new Set(\n          splitCssSelectors(rule.selector).flatMap((selector) => {\n            const scopedSelector = shouldSkipNamespace(selector, prefix)\n              ? selector\n              : `${prefix} ${selector}`;\n            const antdAlias = createAntdSelectorAlias(scopedSelector);\n            return antdAlias ? [scopedSelector, antdAlias] : [scopedSelector];\n          }),\n        ),\n      ).join(', ');\n    },\n  };\n}\n\n(createOpenXiangdaNamespaceCssPlugin as any).postcss = true;\n\nexport const createNamespaceCssPlugin = createOpenXiangdaNamespaceCssPlugin;\n"],"mappings":";AA4CO,SAAS,yBAAuD,QAAc;AACnF,SAAO;AACT;AAEA,IAAM,2BAA2B;AAEjC,SAAS,kBAAkB,UAAkB;AAC3C,QAAM,YAAsB,CAAC;AAC7B,MAAI,QAAQ;AACZ,MAAI,QAAQ;AACZ,MAAI,UAAU;AACd,aAAW,QAAQ,UAAU;AAC3B,QAAI,OAAO;AACT,iBAAW;AACX,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR,iBAAW;AACX;AAAA,IACF;AACA,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,SAAS,IAAK,UAAS;AAC3C,QAAI,SAAS,OAAO,UAAU,GAAG;AAC/B,gBAAU,KAAK,QAAQ,KAAK,CAAC;AAC7B,gBAAU;AACV;AAAA,IACF;AACA,eAAW;AAAA,EACb;AACA,MAAI,QAAQ,KAAK,EAAG,WAAU,KAAK,QAAQ,KAAK,CAAC;AACjD,SAAO;AACT;AAEA,SAAS,oBAAoB,UAAkB,QAAgB;AAC7D,MAAI,CAAC,YAAY,SAAS,SAAS,MAAM,EAAG,QAAO;AACnD,MAAI,gCAAgC,KAAK,QAAQ,EAAG,QAAO;AAC3D,MAAI,wBAAwB,KAAK,QAAQ,EAAG,QAAO;AACnD,MAAI,+BAA+B,KAAK,QAAQ,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,wBAAwB,UAAkB;AACjD,QAAM,UAAU,SACb,QAAQ,6BAA6B,YAAY,EACjD,QAAQ,iCAAiC,gBAAgB,EACzD,QAAQ,oDAAoD,eAAe;AAC9E,SAAO,YAAY,WAAW,OAAO;AACvC;AAEO,SAAS,oCACd,SAAS,0BACT;AACA,SAAO;AAAA,IACL,eAAe;AAAA,IACf,KAAK,MAA2C;AAC9C,UAAI,CAAC,KAAK,SAAU;AACpB,UAAI,SAAS,KAAK;AAClB,aAAO,QAAQ;AACb,YAAI,OAAO,SAAS,YAAY,cAAc,KAAK,OAAO,IAAI,GAAG;AAC/D;AAAA,QACF;AACA,iBAAS,OAAO;AAAA,MAClB;AACA,WAAK,WAAW,MAAM;AAAA,QACpB,IAAI;AAAA,UACF,kBAAkB,KAAK,QAAQ,EAAE,QAAQ,CAAC,aAAa;AACrD,kBAAM,iBAAiB,oBAAoB,UAAU,MAAM,IACvD,WACA,GAAG,MAAM,IAAI,QAAQ;AACzB,kBAAM,YAAY,wBAAwB,cAAc;AACxD,mBAAO,YAAY,CAAC,gBAAgB,SAAS,IAAI,CAAC,cAAc;AAAA,UAClE,CAAC;AAAA,QACH;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AACF;AAEC,oCAA4C,UAAU;AAEhD,IAAM,2BAA2B;","names":[]}

package/packages/sdk/dist/components/index.cjs

@@ -16183,7 +16183,23 @@ var pickFormInstanceId = (value) => {
   if (!value) return void 0;
   if (typeof value === "string") return value;
   if (typeof value !== "object") return void 0;
-  return value.formInstanceId || value.formInstId || value.instanceId || value.id || pickFormInstanceId(value.result) || pickFormInstanceId(value.data);
+  const direct = value.formInstanceId || value.formInstId || value.instanceId || value.id;
+  if (direct) return pickFormInstanceId(direct);
+  for (const candidate of [value.result, value.data, value.raw]) {
+    const picked = pickFormInstanceId(candidate);
+    if (picked) return picked;
+  }
+  return void 0;
+};
+var getSubmitResultFormInstanceId = (submitResponse, config, submitBehavior) => {
+  const responseId = pickFormInstanceId(submitResponse);
+  if (responseId) return responseId;
+  if (submitBehavior !== "create" && config.formInstanceId) {
+    return config.formInstanceId;
+  }
+  throw new Error(
+    "\u63D0\u4EA4\u63A5\u53E3\u672A\u8FD4\u56DE formInstId/formInstanceId\u3002\u4FDD\u5B58\u63A5\u53E3\u53EA\u8FD4\u56DE\u5B9E\u4F8B\u6807\u8BC6\u548C\u5DF2\u751F\u6210\u7684\u6D41\u6C34\u53F7\uFF1B\u5982\u9700\u5B8C\u6574\u6570\u636E\u3001\u516C\u5F0F\u56DE\u586B\u6216\u5176\u4ED6\u670D\u52A1\u7AEF\u5B57\u6BB5\uFF0C\u8BF7\u4FDD\u5B58\u6210\u529F\u540E\u518D\u67E5\u8BE2\u8BE6\u60C5\u3002"
+  );
 };
 var normalizeFormDataForSubmit = (schema, formData) => {
   const next = { ...formData };
@@ -16382,7 +16398,7 @@ var InnerFormContent = ({
           selectedApprovers: initiatorSelectedApprovers,
           initiatorSelectedApprovers
         });
-        const formInstId = pickFormInstanceId(submitResponse) || config.formInstanceId || `inst_${Date.now()}`;
+        const formInstId = getSubmitResultFormInstanceId(submitResponse, config, submitBehavior);
         if (config.submit?.afterSubmit) {
           await config.submit.afterSubmit({
             formInstanceId: formInstId,
@@ -16406,6 +16422,7 @@ var InnerFormContent = ({
         }
       } catch (error) {
         console.error("[FormSubmitTemplate] Submit failed:", error);
+        import_antd37.message.error(error instanceof Error ? error.message : "\u63D0\u4EA4\u5931\u8D25");
       } finally {
         setSubmitting(false);
       }
@@ -17433,6 +17450,7 @@ var StandardFormPage = ({
   formInstanceId,
   defaultUploadProvider,
   submitBehavior,
+  compatibility,
   onSubmit,
   onSubmitSuccess,
   inDrawer
@@ -17506,6 +17524,7 @@ var StandardFormPage = ({
         defaultUploadProvider,
         submitBehavior,
         permissions,
+        compatibility,
         api
       },
       formType,
@@ -18466,6 +18485,7 @@ var DataManagementList = ({
   detailPageUrlBuilder,
   submitRenderer,
   requestOverride,
+  allowSchemaFallback = false,
   rowActions = [],
   maxVisibleRowActions
 }) => {
@@ -18633,6 +18653,11 @@ var DataManagementList = ({
         const nextSearchKeyWord = saved?.filter?.searchKeyWord || "";
         const nextFilterGroup = hydrateFilterGroup(saved?.filter?.group);
         const nextFormType = propFormType || schemaResult.formType || "form";
+        if (!schemaResult.schema && !allowSchemaFallback) {
+          throw new Error(
+            `\u8868\u5355 schema \u4E0D\u5B58\u5728\u6216\u672A\u53D1\u5E03: ${formUuid}\u3002\u8BF7\u5148\u53D1\u5E03\u8868\u5355 schema\uFF1B\u4E25\u683C\u6A21\u5F0F\u4E0D\u4F1A\u751F\u6210\u515C\u5E95\u8868\u5355\u3002`
+          );
+        }
         setFields(allFields);
         setRuntimeFormSchema(
           schemaResult.schema || buildFallbackFormSchema({
@@ -18663,7 +18688,7 @@ var DataManagementList = ({
         });
       } catch (error) {
         console.error("[DataManagementList] load schema failed:", error);
-        import_antd39.message.error("\u52A0\u8F7D\u8868\u5355\u914D\u7F6E\u5931\u8D25");
+        import_antd39.message.error(error instanceof Error ? error.message : "\u52A0\u8F7D\u8868\u5355\u914D\u7F6E\u5931\u8D25");
       } finally {
         if (mounted) setSchemaLoading(false);
       }
@@ -18674,6 +18699,7 @@ var DataManagementList = ({
     };
   }, [
     appType,
+    allowSchemaFallback,
     forcedConfig,
     formTitle,
     formUuid,
@@ -19682,7 +19708,8 @@ function LowcodePageRenderer({ schema, context }) {
           forcedConfig: props.forcedConfig,
           showForcedConfig: props.showForcedConfig,
           maxVisibleRowActions: props.maxVisibleRowActions,
-          requestOverride
+          requestOverride,
+          allowSchemaFallback: props.allowSchemaFallback ?? context?.compatibility?.legacyFallbacks ?? false
         },
         node.id
       );
@@ -19695,6 +19722,7 @@ function LowcodePageRenderer({ schema, context }) {
           mode: props.mode || context?.mode || "submit",
           appType: props.appType || appType,
           formUuid: props.formUuid || props.schema?.formMeta?.formUuid,
+          compatibility: props.compatibility || context?.compatibility,
           inDrawer: props.inDrawer ?? true
         },
         node.id