openxiangda 1.0.77 → 1.0.78

package/README.md

@@ -170,7 +170,9 @@ const affiliatedDepartmentExternalId = user?.affiliatedDepartment?.externalId
 
 工程化资源放在工作区 `src/resources/` 下，由 `openxiangda resource validate|plan|publish|pull` 管理。`workspace publish` 会先构建并注册 workspace 表单/页面，再执行非破坏性资源 upsert，这样菜单、权限组、流程和表单设置可以解析最新的 profile-local ID。需要删除平台中 manifest 未声明的资源时，显式传 `--prune`。连接器页面运行时通过 `sdk.connector.invoke()` / `sdk.connector.call("connector.api")` 调用平台运行时接口，第三方密钥只保存在后端连接器配置中。
 
-多表只读查询和固定口径统计优先声明 `src/resources/data-views/*.json` 数据视图，而不是在页面里手写多次单表查询再拼数据。默认数据视图是行级联表视图，适合工单+客户、订单+商品、项目+成员、报表列表、跨页面复用查询等读多写少场景；`viewType: "aggregate"` 是统计聚合视图，适合按客户、状态、月份等维度预聚合 count/sum/avg/min/max。发布时 CLI 会把 `formCode` 解析为当前 profile 的 `formUuid`，平台创建 PostgreSQL materialized view；页面通过 `sdk.dataView.query(code, params)` 查询行级视图，通过 `sdk.dataView.stats(code, params)` 查询聚合视图，也可以用 `sdk.dataSource.run()` 路由 `dataView.query` / `dataView.stats`。发布前应为常用筛选、排序、统计维度和时间桶声明 `indexes`，并确认用户能接受的刷新延迟；默认不要设置低于 5 分钟的定时刷新。数据视图只读，刷新后才反映源表变化，不适合单表 CRUD、写回源表、强实时状态、临时 BI 查询或简单 linkedForm 下拉。
+多表只读查询和固定口径统计优先声明 `src/resources/data-views/*.json` 数据视图，而不是在页面里手写多次单表查询再拼数据。默认 `storageMode: "materialized"` 会创建 PostgreSQL materialized view，适合读多写少和可接受刷新延迟的列表/报表；`storageMode: "live"` 每次查询实时编译逻辑视图，适合强实时但数据量可控的复杂查询。`viewType: "aggregate"` 是统计聚合视图，适合按客户、状态、月份等维度聚合 count/sum/avg/min/max。发布时 CLI 会把 `formCode` 解析为当前 profile 的 `formUuid`；页面通过 `sdk.dataView.query(code, params)` 查询行级视图，通过 `sdk.dataView.stats(code, params)` 查询聚合视图，也可以用 `sdk.dataSource.run()` 路由 `dataView.query` / `dataView.stats`。materialized 模式应为常用筛选、排序、统计维度和时间桶声明 `indexes`，并确认用户能接受的刷新延迟；live 模式忽略 `indexes`，不需要刷新。
+
+后端业务逻辑优先声明为 App Function：源码放在 `src/functions/<functionCode>/index.ts`，资源 manifest 放在 `src/resources/functions/<functionCode>.json`。函数运行在 trusted_node 中，通过 `ctx.form`、`ctx.dataView`、`ctx.connector`、`ctx.notification`、`ctx.platform.api` 等受控 API 访问平台能力；自动化、流程和运行时接口都可以调用同一个 function。JS_CODE V2 仍兼容，但新逻辑建议写成 function，再由 `function_call` 节点、`sdk.function.invoke(code, { input })` 或 `/:appType/v1/functions/:code/invoke.json` 调用。当前 MVP 中直接运行时接口要求调用者具备应用自动化管理权限，自动化/流程内部调用走服务端受控上下文。
 
 常用数据视图命令：
 

package/lib/cli.js

@@ -1098,6 +1098,7 @@ async function workspace(args) {
         pages: {},
         workflows: {},
         automations: {},
+        functions: {},
         menus: {},
         roles: {},
         connectors: {},
@@ -3129,6 +3130,7 @@ function ensureResourceBuckets(bound) {
   bound.resources.pages = bound.resources.pages || {};
   bound.resources.workflows = bound.resources.workflows || {};
   bound.resources.automations = bound.resources.automations || {};
+  bound.resources.functions = bound.resources.functions || {};
   bound.resources.menus = bound.resources.menus || {};
   bound.resources.roles = bound.resources.roles || {};
   bound.resources.connectors = bound.resources.connectors || {};
@@ -3327,8 +3329,16 @@ function saveAutomationResource(target, automationCode, automationId, extra = {}
   }, keys);
 }
 
+function saveFunctionResource(target, functionCode, functionId, extra = {}) {
+  const keys = ['functionId', 'status'];
+  saveStateResource(target, 'functions', functionCode, {
+    ...pickStateFields(extra, keys),
+    functionId,
+  }, keys);
+}
+
 function saveDataViewResource(target, dataViewCode, dataViewId, extra = {}) {
-  const keys = ['dataViewId', 'materializedViewName', 'status'];
+  const keys = ['dataViewId', 'materializedViewName', 'status', 'storageMode'];
   saveStateResource(target, 'dataViews', dataViewCode, {
     ...pickStateFields(extra, keys),
     dataViewId,
@@ -3440,6 +3450,7 @@ const RESOURCE_SPECS = [
   { key: 'menus', dir: 'menus', topFiles: ['menus.json'], pluralKeys: ['menus'] },
   { key: 'workflows', dir: 'workflows', topFiles: ['workflows.json'], pluralKeys: ['workflows'] },
   { key: 'automations', dir: 'automations', topFiles: ['automations.json'], pluralKeys: ['automations'] },
+  { key: 'functions', dir: 'functions', topFiles: ['functions.json'], pluralKeys: ['functions'] },
   { key: 'dataViews', dir: 'data-views', topFiles: ['data-views.json'], pluralKeys: ['dataViews', 'data-views'] },
   {
     key: 'pagePermissionGroups',
@@ -3631,6 +3642,8 @@ function generateResourceTypes(manifest, outputFile) {
   const pagePermissionGroupCodes = unique(
     pagePermissionGroups.map(item => item.code).filter(Boolean)
   );
+  const dataViewCodes = unique((manifest.dataViews || []).map(item => item.code).filter(Boolean));
+  const functionCodes = unique((manifest.functions || []).map(item => item.code).filter(Boolean));
   const content = [
     '/* eslint-disable */',
     '// Generated by openxiangda resource typegen. Do not edit manually.',
@@ -3644,6 +3657,12 @@ function generateResourceTypes(manifest, outputFile) {
     `export const pagePermissionGroupCodes = ${JSON.stringify(pagePermissionGroupCodes, null, 2)} as const`,
     'export type PagePermissionGroupCode = typeof pagePermissionGroupCodes[number]',
     '',
+    `export const dataViewCodes = ${JSON.stringify(dataViewCodes, null, 2)} as const`,
+    'export type DataViewCode = typeof dataViewCodes[number]',
+    '',
+    `export const functionCodes = ${JSON.stringify(functionCodes, null, 2)} as const`,
+    'export type FunctionCode = typeof functionCodes[number]',
+    '',
     `export const runtimeMenus = ${JSON.stringify(menus, null, 2)} as const`,
     '',
     `export const pagePermissionGroups = ${JSON.stringify(pagePermissionGroups, null, 2)} as const`,
@@ -3656,6 +3675,8 @@ function generateResourceTypes(manifest, outputFile) {
     menuCodes: menuCodes.length,
     routeCodes: routeCodes.length,
     pagePermissionGroups: pagePermissionGroupCodes.length,
+    dataViews: dataViewCodes.length,
+    functions: functionCodes.length,
   };
 }
 
@@ -3702,9 +3723,20 @@ function validateResourceItem(kind, item, errors, warnings) {
       errors.push(`${label}: 缺少 definitionJson 或 definitionFile`);
     }
   }
+  if (kind === 'functions') {
+    if (!item.name) errors.push(`${label}: 缺少 name`);
+    if (!item.definitionJson && !item.definitionFile) {
+      errors.push(`${label}: 缺少 definitionJson 或 definitionFile`);
+    }
+  }
   if (kind === 'dataViews') {
     const definition = item.definition || item;
     const viewType = String(definition.viewType || 'row').toLowerCase();
+    const storageMode = normalizeDataViewStorageMode(
+      item.storageMode || definition.storageMode || 'materialized',
+      label,
+      errors
+    );
     if (!item.name && !definition.name) errors.push(`${label}: 缺少 name`);
     if (!definition.base) errors.push(`${label}: 缺少 base`);
     if (viewType === 'aggregate') {
@@ -3721,7 +3753,7 @@ function validateResourceItem(kind, item, errors, warnings) {
     } else {
       errors.push(`${label}: 不支持的 viewType: ${definition.viewType}`);
     }
-    validateDataViewPerformance(label, definition, errors, warnings);
+    validateDataViewPerformance(label, definition, errors, warnings, storageMode);
   }
   if (kind === 'pagePermissionGroups' && !item.name) errors.push(`${label}: 缺少 name`);
   if (kind === 'formPermissionGroups') {
@@ -3743,7 +3775,7 @@ function validateResourceItem(kind, item, errors, warnings) {
   }
 }
 
-function validateDataViewPerformance(label, definition, errors, warnings) {
+function validateDataViewPerformance(label, definition, errors, warnings, storageMode = 'materialized') {
   const viewType = String(definition.viewType || 'row').toLowerCase();
   if (viewType !== 'row' && viewType !== 'aggregate') return;
   const outputAliases = collectDataViewOutputAliases(definition, viewType);
@@ -3760,6 +3792,13 @@ function validateDataViewPerformance(label, definition, errors, warnings) {
     }
   }
 
+  if (storageMode === 'live') {
+    if (indexes.length) {
+      warnings.push(`${label}: live 数据视图不会创建物化索引，indexes 仅在 materialized 模式生效`);
+    }
+    return;
+  }
+
   if (!indexes.length) {
     warnings.push(
       viewType === 'aggregate'
@@ -3794,6 +3833,13 @@ function validateDataViewPerformance(label, definition, errors, warnings) {
   }
 }
 
+function normalizeDataViewStorageMode(value, label, errors) {
+  const storageMode = String(value || 'materialized').trim().toLowerCase();
+  if (storageMode === 'materialized' || storageMode === 'live') return storageMode;
+  errors.push(`${label}: 不支持的 storageMode: ${value}`);
+  return 'materialized';
+}
+
 function collectDataViewOutputAliases(definition, viewType) {
   if (viewType === 'aggregate') {
     return [
@@ -4109,6 +4155,7 @@ async function buildResourcePlan(config, target, manifest) {
   addPlanActions(actions, 'connector', manifest.connectors, existing.connectors, connectorEquals);
   addNotificationPlanActions(target, actions, manifest.notifications || [], existing);
   await addWorkflowPlanActions(config, target, actions, manifest.workflows, existing.workflows);
+  addPlanActions(actions, 'function', manifest.functions, existing.functions, (item, current) => functionEquals(target, item, current));
   await addAutomationPlanActions(config, target, actions, manifest.automations, existing.automations);
   addPlanActions(actions, 'dataView', manifest.dataViews, existing.dataViews, (item, current) => dataViewEquals(target.bound, item, current));
   addPlanActions(actions, 'pagePermissionGroup', manifest.pagePermissionGroups, existing.pagePermissionGroups, (item, current) => pagePermissionGroupEquals(target.bound, item, current));
@@ -4143,6 +4190,7 @@ async function publishResourceManifest(config, target, manifest, options = {}) {
   await publishConnectorResources(config, target, manifest.connectors || [], result);
   await publishNotificationResources(config, target, manifest.notifications || [], result);
   await publishWorkflowResources(config, target, manifest.workflows || [], result);
+  await publishFunctionResources(config, target, manifest.functions || [], result);
   await publishAutomationResources(config, target, manifest.automations || [], result);
   await publishDataViewResources(config, target, manifest.dataViews || [], result);
   await publishPagePermissionGroupResources(config, target, manifest.pagePermissionGroups || [], result);
@@ -4165,6 +4213,7 @@ async function fetchExistingResourceMaps(config, target, manifest) {
     notificationTemplates: new Map(),
     notificationTypeConfigs: new Map(),
     workflows: new Map(),
+    functions: new Map(),
     automations: new Map(),
     dataViews: new Map(),
     pagePermissionGroups: new Map(),
@@ -4245,6 +4294,31 @@ async function fetchExistingResourceMaps(config, target, manifest) {
     );
     indexByCode(maps.automations, normalizeItems(data), item => item.resourceCode);
   }
+  if ((manifest.functions || []).length > 0) {
+    const data = await requestWithAuth(
+      config,
+      target.profileName,
+      apiPathWithQuery(`/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions`, {
+        page: 1,
+        pageSize: 1000,
+      })
+    );
+    indexByCode(maps.functions, normalizeItems(data), item => item.code || item.functionCode || item.resourceCode);
+    for (const item of manifest.functions || []) {
+      const code = item.code || item.functionCode || item.resourceCode;
+      const existing = maps.functions.get(code);
+      if (!existing) continue;
+      const detail = await requestOptionalWithAuth(
+        config,
+        target.profileName,
+        `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions/${encodeURIComponent(code)}`
+      );
+      maps.functions.set(code, {
+        ...existing,
+        ...(detail || {}),
+      });
+    }
+  }
   if ((manifest.dataViews || []).length > 0) {
     const data = await requestWithAuth(
       config,
@@ -4782,6 +4856,7 @@ async function publishAutomationResources(config, target, automations, result) {
       'definitionJson',
       'definitionFile'
     );
+    applyResourceBindingsToRuntimeDefinition(target.bound, automationItem, definitionJson);
     const viewJson =
       (await resolveManifestJson(
         config,
@@ -4845,6 +4920,58 @@ async function publishAutomationResources(config, target, automations, result) {
   }
 }
 
+async function publishFunctionResources(config, target, functions, result) {
+  for (const functionItem of functions) {
+    const code = functionItem.code || functionItem.functionCode;
+    const existing = await findExistingFunction(config, target, code);
+    const definitionJson = await resolveManifestJson(
+      config,
+      target.profileName,
+      functionItem,
+      'definitionJson',
+      'definitionFile'
+    );
+    applyResourceBindingsToRuntimeDefinition(target.bound, functionItem, definitionJson);
+    const body = stripUndefinedValues({
+      code,
+      name: functionItem.name || definitionJson.name || code,
+      description:
+        functionItem.description !== undefined
+          ? functionItem.description
+          : definitionJson.description || '',
+      definitionJson,
+      resourceBindings: definitionJson.resourceBindings,
+      inputSchema: functionItem.inputSchema || definitionJson.inputSchema,
+      outputSchema: functionItem.outputSchema || definitionJson.outputSchema,
+      status: functionItem.status,
+    });
+    const data = existing
+      ? await requestWithAuth(
+          config,
+          target.profileName,
+          `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions/${encodeURIComponent(code)}`,
+          { method: 'PUT', body }
+        )
+      : await requestWithAuth(
+          config,
+          target.profileName,
+          `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions`,
+          { method: 'POST', body }
+        );
+    if (data?.id) {
+      saveFunctionResource(target, code, data.id, {
+        status: data.status,
+      });
+    }
+    result.published.push({
+      kind: 'function',
+      code,
+      action: existing ? 'update' : 'create',
+      id: data?.id,
+    });
+  }
+}
+
 async function publishDataViewResources(config, target, dataViews, result) {
   for (const dataViewItem of dataViews) {
     const existing = await findExistingDataView(config, target, dataViewItem.code);
@@ -4866,6 +4993,7 @@ async function publishDataViewResources(config, target, dataViews, result) {
       saveDataViewResource(target, dataViewItem.code, data.id, {
         materializedViewName: data.materializedViewName,
         status: data.status,
+        storageMode: data.storageMode,
       });
     }
     result.published.push({
@@ -4877,6 +5005,18 @@ async function publishDataViewResources(config, target, dataViews, result) {
   }
 }
 
+async function findExistingFunction(config, target, code) {
+  const stateId = target.bound.resources?.functions?.[code]?.functionId;
+  const byCode = await requestOptionalWithAuth(
+    config,
+    target.profileName,
+    `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions/${encodeURIComponent(code)}`
+  );
+  if (byCode?.id) return byCode;
+  if (stateId) return { id: stateId, code };
+  return null;
+}
+
 async function findExistingDataView(config, target, code) {
   const stateId = target.bound.resources?.dataViews?.[code]?.dataViewId;
   const byCode = await requestOptionalWithAuth(
@@ -5026,6 +5166,7 @@ async function pruneResourceManifest(config, target, manifest, result) {
   await pruneMenus(config, target, desiredCodes(manifest.menus), result);
   await pruneWorkflows(config, target, desiredCodes(manifest.workflows), result);
   await pruneAutomations(config, target, desiredCodes(manifest.automations), result);
+  await pruneFunctions(config, target, desiredCodes(manifest.functions), result);
   await pruneDataViews(config, target, desiredCodes(manifest.dataViews), result);
   await prunePagePermissionGroups(
     config,
@@ -5198,6 +5339,29 @@ async function pruneDataViews(config, target, desired, result) {
   }
 }
 
+async function pruneFunctions(config, target, desired, result) {
+  const data = await requestWithAuth(
+    config,
+    target.profileName,
+    apiPathWithQuery(`/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions`, {
+      page: 1,
+      pageSize: 1000,
+    })
+  );
+  for (const fn of normalizeItems(data)) {
+    const code = fn.code || fn.functionCode || fn.resourceCode;
+    if (!code || desired.has(code)) continue;
+    await pruneOne(config, target, result, 'function', code, fn.id, async () => {
+      await requestWithAuth(
+        config,
+        target.profileName,
+        `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions/${encodeURIComponent(code)}`,
+        { method: 'DELETE' }
+      );
+    });
+  }
+}
+
 async function prunePagePermissionGroups(config, target, desired, result) {
   const data = await requestWithAuth(
     config,
@@ -5272,6 +5436,7 @@ function removeStateResource(target, kind, code) {
     menu: 'menus',
     workflow: 'workflows',
     automation: 'automations',
+    function: 'functions',
     dataView: 'dataViews',
     pagePermissionGroup: 'pagePermissionGroups',
     formPermissionGroup: 'formPermissionGroups',
@@ -5441,6 +5606,35 @@ async function pullResources(config, target) {
     written.push(path.relative(process.cwd(), filePath));
   }
 
+  const functions = await requestWithAuth(
+    config,
+    target.profileName,
+    apiPathWithQuery(`/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions`, {
+      page: 1,
+      pageSize: 1000,
+    })
+  );
+  for (const fn of normalizeItems(functions)) {
+    const code = fn.code || fn.functionCode || fn.resourceCode || fn.id;
+    const detail = await requestWithAuth(
+      config,
+      target.profileName,
+      `/openxiangda-api/v1/apps/${encodeURIComponent(target.appType)}/functions/${encodeURIComponent(code)}`
+    );
+    const filePath = path.join(baseDir, 'functions', `${code}.json`);
+    writeResourceJsonFile(filePath, {
+      code,
+      name: detail.name,
+      description: detail.description || '',
+      definitionJson: detail.definitionJson,
+      resourceBindings: detail.resourceBindings || undefined,
+      inputSchema: detail.inputSchema || undefined,
+      outputSchema: detail.outputSchema || undefined,
+      status: detail.status || undefined,
+    });
+    written.push(path.relative(process.cwd(), filePath));
+  }
+
   const dataViews = await requestWithAuth(
     config,
     target.profileName,
@@ -5649,6 +5843,7 @@ function toPulledDataView(dataView, permissionGroups, lookups) {
     code: dataView.code || dataView.resourceCode,
     name: dataView.name,
     description: dataView.description || '',
+    storageMode: dataView.storageMode || 'materialized',
     definition,
     refreshConfig: dataView.refreshConfig || undefined,
     permissionGroups: groups.length > 0 ? groups : undefined,
@@ -5818,12 +6013,15 @@ function normalizeDataViewManifest(bound, dataView) {
     definition.description = dataView.description;
   }
   const normalizedDefinition = normalizeDataViewDefinitionFormRefs(bound, definition, dataView);
+  const storageMode = String(dataView.storageMode || normalizedDefinition.storageMode || 'materialized').toLowerCase();
+  delete normalizedDefinition.storageMode;
   return stripUndefinedValues({
     code: dataView.code || dataView.resourceCode || normalizedDefinition.code,
     name: dataView.name || normalizedDefinition.name || dataView.code || normalizedDefinition.code,
     description: dataView.description !== undefined
-      ? dataView.description
-      : normalizedDefinition.description || '',
+        ? dataView.description
+        : normalizedDefinition.description || '',
+    storageMode,
     definition: normalizedDefinition,
     refreshConfig: dataView.refreshConfig || dataView.refresh || normalizedDefinition.refresh,
     permissionGroups: Array.isArray(dataView.permissionGroups)
@@ -5836,6 +6034,7 @@ function withoutDataViewManifestMeta(dataView) {
   const next = withoutResourceMeta(dataView);
   delete next.permissionGroups;
   delete next.refreshConfig;
+  delete next.storageMode;
   return next;
 }
 
@@ -5872,6 +6071,93 @@ function resolveDataViewSourceFormUuid(bound, source, dataView, label) {
   delete source.form;
 }
 
+function applyResourceBindingsToRuntimeDefinition(bound, item, definitionJson) {
+  if (!definitionJson || typeof definitionJson !== 'object') return definitionJson;
+  const topBindings = resolveRuntimeResourceBindings(
+    bound,
+    item.resources || definitionJson.resources,
+    item
+  );
+  if (!isEmptyResourceBindings(topBindings)) {
+    definitionJson.resourceBindings = mergeResourceBindings(
+      definitionJson.resourceBindings,
+      topBindings
+    );
+  }
+  applyNestedRuntimeResourceBindings(bound, definitionJson, item);
+  return definitionJson;
+}
+
+function applyNestedRuntimeResourceBindings(bound, value, owner) {
+  if (!value || typeof value !== 'object') return;
+  if (Array.isArray(value)) {
+    for (const item of value) applyNestedRuntimeResourceBindings(bound, item, owner);
+    return;
+  }
+  if (value.resources && typeof value.resources === 'object') {
+    const bindings = resolveRuntimeResourceBindings(bound, value.resources, owner);
+    if (!isEmptyResourceBindings(bindings)) {
+      value.resourceBindings = mergeResourceBindings(value.resourceBindings, bindings);
+    }
+  }
+  for (const child of Object.values(value)) {
+    if (child && typeof child === 'object') {
+      applyNestedRuntimeResourceBindings(bound, child, owner);
+    }
+  }
+}
+
+function resolveRuntimeResourceBindings(bound, resources, item) {
+  if (!resources || typeof resources !== 'object') return {};
+  const label = resourceLabel('resource', item);
+  const forms = {};
+  for (const formCode of normalizeResourceCodeList(resources.forms)) {
+    const formUuid = bound.resources?.forms?.[formCode]?.formUuid;
+    if (!formUuid) {
+      fail(`${label}: resources.forms 未绑定: ${formCode}`);
+    }
+    forms[formCode] = formUuid;
+  }
+  const dataViews = {};
+  for (const dataViewCode of normalizeResourceCodeList(resources.dataViews)) {
+    dataViews[dataViewCode] = dataViewCode;
+  }
+  return stripEmptyResourceBindings({ forms, dataViews });
+}
+
+function normalizeResourceCodeList(value) {
+  if (!value) return [];
+  if (Array.isArray(value)) return value.map(item => String(item || '').trim()).filter(Boolean);
+  if (typeof value === 'object') return Object.keys(value).map(item => String(item || '').trim()).filter(Boolean);
+  return [String(value).trim()].filter(Boolean);
+}
+
+function mergeResourceBindings(left, right) {
+  return stripEmptyResourceBindings({
+    ...(left || {}),
+    ...(right || {}),
+    forms: {
+      ...((left && left.forms) || {}),
+      ...((right && right.forms) || {}),
+    },
+    dataViews: {
+      ...((left && left.dataViews) || {}),
+      ...((right && right.dataViews) || {}),
+    },
+  });
+}
+
+function stripEmptyResourceBindings(bindings) {
+  const next = { ...(bindings || {}) };
+  if (!next.forms || Object.keys(next.forms).length === 0) delete next.forms;
+  if (!next.dataViews || Object.keys(next.dataViews).length === 0) delete next.dataViews;
+  return next;
+}
+
+function isEmptyResourceBindings(bindings) {
+  return Object.keys(stripEmptyResourceBindings(bindings)).length === 0;
+}
+
 async function resolveManifestJson(config, profileName, item, objectKey, fileKey, optional = false) {
   let value = item[objectKey];
   if (value === undefined && item[fileKey]) {
@@ -6166,6 +6452,7 @@ function workflowEquals(bound, desired, existing) {
 function automationEquals(target, desired, existing) {
   if (!existing) return false;
   const desiredDefinition = resolveManifestPlainJson(desired, 'definitionJson', 'definitionFile');
+  applyResourceBindingsToRuntimeDefinition(target.bound, desired, desiredDefinition);
   const desiredView = resolveManifestPlainJson(desired, 'viewJson', 'viewFile', true);
   const automationPayload = resolveAutomationManifestPayload(target, desired);
   const desiredTags =
@@ -6195,6 +6482,23 @@ function automationEquals(target, desired, existing) {
   );
 }
 
+function functionEquals(target, desired, existing) {
+  if (!existing) return false;
+  const desiredDefinition = resolveManifestPlainJson(desired, 'definitionJson', 'definitionFile');
+  applyResourceBindingsToRuntimeDefinition(target.bound, desired, desiredDefinition);
+  const desiredStatus = desired.status === undefined ? 'active' : String(desired.status || 'active');
+  return (
+    String(existing.code || existing.functionCode || existing.resourceCode || '') === String(desired.code || desired.functionCode || '') &&
+    String(existing.name || '') === String(desired.name || desiredDefinition.name || desired.code || '') &&
+    String(existing.description || '') === String(
+      desired.description !== undefined ? desired.description : desiredDefinition.description || ''
+    ) &&
+    jsonEqualsForPlan(existing.definitionJson, desiredDefinition, desired.__dir) &&
+    jsonEqualsForPlan(existing.resourceBindings || {}, desiredDefinition.resourceBindings || {}, desired.__dir) &&
+    String(existing.status || 'active') === desiredStatus
+  );
+}
+
 function dataViewEquals(bound, desired, existing) {
   if (!existing) return false;
   const expected = normalizeDataViewManifest(bound, desired);
@@ -6205,6 +6509,7 @@ function dataViewEquals(bound, desired, existing) {
     String(existing.code || existing.resourceCode || '') === String(expected.code || '') &&
     String(existing.name || '') === String(expected.name || '') &&
     String(existing.description || '') === String(expected.description || '') &&
+    String(existing.storageMode || 'materialized') === String(expected.storageMode || 'materialized') &&
     jsonEqualsForPlan(existing.definition || {}, expected.definition || {}, desired.__dir) &&
     jsonEqualsForPlan(existing.refreshConfig || {}, expected.refreshConfig || {}, desired.__dir) &&
     permissionGroupsEqual
@@ -6538,26 +6843,31 @@ function resolveJsCodeBundlePath(localPath, scriptCode) {
   const extension = path.extname(localPath).toLowerCase();
   if (['.js', '.cjs', '.mjs'].includes(extension)) {
     fail(
-      `JS_CODE V2 要求 AI 源码使用 TypeScript，请把 sourceFile.localPath 指向 src/js-code-nodes/<scriptCode>/index.ts，而不是已构建的 ${extension} 文件: ${localPath}`
+      `JS_CODE V2 要求 AI 源码使用 TypeScript，请把 sourceFile.localPath 指向 src/js-code-nodes/<scriptCode>/index.ts、src/automations/<scriptCode>/index.ts 或 src/functions/<functionCode>/index.ts，而不是已构建的 ${extension} 文件: ${localPath}`
     );
   }
   if (extension !== '.ts') {
     fail(
-      `JS_CODE V2 sourceFile.localPath 必须指向 TypeScript 源文件 src/js-code-nodes/<scriptCode>/index.ts: ${localPath}`
+      `JS_CODE V2 sourceFile.localPath 必须指向 TypeScript 源文件 src/js-code-nodes/<scriptCode>/index.ts、src/automations/<scriptCode>/index.ts 或 src/functions/<functionCode>/index.ts: ${localPath}`
     );
   }
 
   const normalized = localPath.replace(/\\/g, '/');
   const jsCodeMatched = normalized.match(/src\/js-code-nodes\/([^/]+)\/index\.tsx?$/);
   const automationMatched = normalized.match(/src\/automations\/([^/]+)\/index\.tsx?$/);
-  const matched = jsCodeMatched || automationMatched;
+  const functionMatched = normalized.match(/src\/functions\/([^/]+)\/index\.tsx?$/);
+  const matched = jsCodeMatched || automationMatched || functionMatched;
   const resolvedScriptCode = scriptCode || matched?.[1];
   if (!resolvedScriptCode) {
     fail(
-      `无法从 sourceFile.localPath 推断 scriptCode，请使用 src/js-code-nodes/<scriptCode>/index.ts 或 src/automations/<scriptCode>/index.ts: ${localPath}`
+      `无法从 sourceFile.localPath 推断 scriptCode，请使用 src/js-code-nodes/<scriptCode>/index.ts、src/automations/<scriptCode>/index.ts 或 src/functions/<functionCode>/index.ts: ${localPath}`
     );
   }
-  const sourceKind = automationMatched ? 'automations' : 'js-code-nodes';
+  const sourceKind = functionMatched
+    ? 'functions'
+    : automationMatched
+      ? 'automations'
+      : 'js-code-nodes';
 
   const workspaceRoot = findWorkspaceRoot(localPath);
   const result = spawnSync('pnpm', ['build-js-code', '--script', resolvedScriptCode, '--source', sourceKind], {

package/openxiangda-skills/SKILL.md

@@ -26,10 +26,11 @@ OpenXiangda supports two workspace modes. Classic `sy-lowcode-app-workspace` pub
 | 创建 / 修改自定义代码页 / portal / dashboard | `openxiangda-page` | edit `src/pages/<code>/` → `workspace publish --page <code>` |
 | 审批流程 / workflow / 流程节点 / JS_CODE | `openxiangda-workflow-automation` | `openxiangda workflow validate / create / publish` |
 | 自动化 / 定时任务 / 提交触发 / cron | `openxiangda-workflow-automation` | `openxiangda automation validate / create / publish / enable` |
+| App Function / function_call / 可复用后端逻辑 | `openxiangda-workflow-automation` | declare `src/resources/functions/<code>.json` + `src/functions/<code>/index.ts` |
 | 角色 / 权限组 / 字段权限 / 数据范围 / 公开访问 | `openxiangda-permission-settings` | `openxiangda permission ...` / `openxiangda settings ...` |
 | 看应用结构 / 快照 / 对比 / 诊断 / 排查 / 报错 | `openxiangda-inspect` | `openxiangda app snapshot <APP_XXX> --profile <name> --json` |
 | 登录 / 切换平台 / profile / token / whoami | `openxiangda-core` | `openxiangda env --profile <name>` / `openxiangda auth status` |
-| 多表只读联表 / 固定口径统计 / 看板指标 | `openxiangda-form` (data view) | declare `src/resources/data-views/<code>.json` → `resource publish` |
+| 多表只读联表 / 固定口径统计 / 强实时复杂查询 / 看板指标 | `openxiangda-form` (data view) | declare `src/resources/data-views/<code>.json` with `storageMode` → `resource publish` |
 | 调外部 / 第三方 API / 钉钉 / 自建系统 | `openxiangda-page` (connector) | declare `src/resources/connectors/<code>.json` → `sdk.connector.invoke` |
 
 ### Hard rules — always
@@ -133,14 +134,15 @@ When the user provides a root domain such as `https://yida.wisejob.cn/`, use it
 - All visible copy in forms and pages must be written for end users. Do not put implementation notes, developer explanations, schema descriptions, or "this area is generated by..." text into page sections, cards, labels, tips, or empty states.
 - Use logical resource codes in local files. Platform-specific IDs such as `formUuid`, `pageId`, `workflowId`, and `automationId` must be isolated by profile.
 - Put engineering-managed resources in `src/resources/` and use `openxiangda resource validate|plan|publish|pull`. `workspace publish` publishes workspace forms/pages first, then runs non-destructive resource upsert. Only pass `--prune` when the user explicitly wants local manifests to delete platform-side extras.
-- For repeated read-only multi-form queries or predefined dashboard metrics, create a data view manifest in `src/resources/data-views/`. Use row views plus `sdk.dataView.query` for joined lists/lookups; use `viewType: "aggregate"` plus `sdk.dataView.stats` for count/sum/avg/min/max statistics. Before choosing scheduled refresh, confirm the user's freshness tolerance; default to manual or 10 minutes and above unless fresher data is explicitly required. Add `indexes` for common runtime filters/order fields, aggregate dimensions, and time buckets. Do not use data views for single-form CRUD, simple linkedForm selects, real-time writes, write-back, or ad-hoc BI. Read `references/data-views.md` before designing one.
+- For repeated read-only multi-form queries or predefined dashboard metrics, create a data view manifest in `src/resources/data-views/`. Use `storageMode: "materialized"` for refreshed lists/reports that tolerate delay; use `storageMode: "live"` for bounded real-time joins where source changes must appear immediately. Use row views plus `sdk.dataView.query` for joined lists/lookups; use `viewType: "aggregate"` plus `sdk.dataView.stats` for count/sum/avg/min/max statistics. Add `indexes` only for materialized views. Do not use data views for single-form CRUD, simple linkedForm selects, writes, write-back, unbounded realtime joins, or ad-hoc BI. Read `references/data-views.md` before designing one.
 - For external APIs, create a connector manifest in `src/resources/connectors/` and call it from pages through `sdk.connector`; never put third-party API keys in page source.
+- For reusable backend logic shared by pages, automations, and workflows, create an App Function in `src/resources/functions/<functionCode>.json` plus `src/functions/<functionCode>/index.ts`. Call it from pages with `sdk.function.invoke`, from automation/workflow graphs with `function_call`, or from the runtime endpoint when the caller has app automation management permission. Current App Function MVP exposes controlled helpers such as `ctx.resources`, `ctx.form`, `ctx.dataView`, `ctx.connector`, `ctx.notification`, and `ctx.platform.api`; it does not expose raw SQL or Redis.
 - Before scaffolding a real app, complex page, data management page, portal shell, status lifecycle, role governance, or automation, read `references/best-practices.md` and pick the architecture first. Prefer copying the relevant pattern from `examples/best-practices/` into `src/` instead of generating a single large page file.
 - Before publishing to another platform, verify the workspace is bound for that profile. Resource IDs from one profile must not be reused for another profile.
 - Use `openxiangda app snapshot <APP_XXX> --profile <name> --json` for diagnosis before changing an existing app.
 - Run write commands that update `.openxiangda/state.json` sequentially within the same workspace. Read-only commands can run in parallel.
 - JS_CODE is backend-executed workflow/automation logic, not frontend page code. Use it when logic must run after a backend trigger such as fixed cron schedules, form date-field schedules, form submit/update/delete/field-change events, or workflow approval/process events.
-- Use JS_CODE for cross-form data queries, create/update/batch update operations, process termination, platform API calls, external HTTP calls, and complex orchestration that the frontend cannot handle reliably. Do not use it for simple UI interactions, ordinary form validation, or display-only page behavior.
+- Use JS_CODE for node-local cross-form data queries, create/update/batch update operations, process termination, platform API calls, external HTTP calls, and backend trigger orchestration. For logic that pages, automations, and workflows should reuse through a stable backend entry, prefer App Function. Do not use JS_CODE for simple UI interactions, ordinary form validation, or display-only page behavior.
 - For workflow/automation JS_CODE nodes, prefer V2 `runtimeMode: "trusted_node"`. AI-authored source must be TypeScript under `sy-lowcode-app-workspace/src/js-code-nodes/<scriptCode>/index.ts`. `pnpm build-js-code --script <scriptCode>` runs TypeScript validation before bundling, and `sourceFile.localPath` should point to the TS source; the CLI builds, uploads, and replaces it with snapshot metadata during validate/create.
 
 ## Subskills
@@ -169,9 +171,9 @@ Core CLI / state:
 
 - `references/openxiangda-api.md` — `/openxiangda-api/v1` request and response fields.
 - `references/workspace-state.md` — `.openxiangda/state.json` shape and profile isolation rules.
-- `references/connector-resources.md` — `src/resources` manifests, connector schema, and SDK connector calls.
-- `references/resource-manifest-cheatsheet.md` — 复制即用的 connector / data-view / notification / workflow / automation / JS_CODE / role / permission group / settings / menu manifest 骨架与运行时调用示例。在创建任何 `src/resources/` 资源前先看这份。
-- `references/data-views.md` — `src/resources/data-views` materialized view resources, DSL, permissions, refresh, CLI commands, and runtime SDK usage.
+- `references/connector-resources.md` — `src/resources` manifests, connector schema, App Function boundary, and platform runtime calls.
+- `references/resource-manifest-cheatsheet.md` — 复制即用的 connector / data-view / notification / App Function / workflow / automation / JS_CODE / role / permission group / settings / menu manifest 骨架与运行时调用示例。在创建任何 `src/resources/` 资源前先看这份。
+- `references/data-views.md` — `src/resources/data-views` materialized/live data view resources, DSL, permissions, refresh, CLI commands, and runtime SDK usage.
 - `references/notifications.md` — `src/resources/notifications`, notification templates/type bindings, and `sdk.notification` / `ctx.notification`.
 - `references/best-practices.md` — initialized examples for modular pages, state lifecycles, role governance, permission isolation, high-performance queries, portal shells, workflow boundaries, and automation patterns.
 
@@ -184,13 +186,13 @@ Form authoring:
 Page authoring:
 
 - `references/pages/workspace-structure.md` — `src/pages/<pageCode>/` layout and config.
-- `references/pages/page-sdk.md` — `openxiangda/runtime` data and runtime APIs.
+- `references/pages/page-sdk.md` — `openxiangda/runtime` data, connector, data view, notification, and App Function APIs.
 - `references/pages/publish-flow.md` — workspace publish steps for code pages.
 
 Workflow / automation / permissions:
 
-- `references/workflow-v3.md` — workflow v3 definitions, JS_CODE nodes, trusted_node mode.
-- `references/automation-v3.md` — automation triggers, conditions, and publishing.
+- `references/workflow-v3.md` — workflow v3 definitions, JS_CODE nodes, App Function `function_call`, and trusted_node mode.
+- `references/automation-v3.md` — automation triggers, conditions, App Function `function_call`, and publishing.
 - `references/permissions-settings.md` — roles, page/form permission groups, settings.
 
 Platform domain knowledge (read these first when generating forms or pages so the output matches the live platform behavior):