openyida 2026.10.16 → 2026.10.18-1

package/README.md

@@ -245,11 +245,14 @@ openyida configure-process APP_XXX FORM_XXX .cache/openyida/process/process.json
 openyida process preview APP_XXX PROC_INST_XXX --output .cache/openyida/process/process.html
 openyida data query form APP_XXX FORM_XXX --page 1 --size 20
 openyida data query form APP_XXX FORM_XXX --dynamic-order '{"dateField_xxx":"-"}'
+openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count
 openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-file .cache/openyida/data-import/record.json
 openyida get-permission APP_XXX FORM_XXX
 ```
 
-Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-process-rule/references/approval-actions.md) for the JSON example, defaults, and verification limits.
+`--current-approver` takes an exact userId, not a display name. It scans running instances and their current TODO records, counts each matching instance once, and respects the current login's server-authorized data scope. Omit `--count` to include matching instance data. An incomplete scan or permission failure is reported as an error; the result does not claim application-wide visibility.
+
+Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-flow-node-config/references/actions.md) for the JSON example, defaults, and verification limits.
 
 `configure-process` 的流程 JSON 中，审批人可配置为发起人、指定成员、指定角色、部门主管或直属主管，例如：
 
@@ -387,6 +390,8 @@ A zero-dependency local dashboard (`npm run eval:dashboard`, then open `http://1
 
 ### Connectors, Integrations, and Reports
 
+Automation spec `sendMessage` nodes accept `toRoles: [{"roleCode":"REAL_ROLE_ID","roleName":"Finance"}]` for NORMAL messages, alongside users and member fields. Process approval, operator, and CC nodes can also select roles. Role selection differs from conditional actor selection, which does not yet have a complete CLI shorthand. See the `yida-flow-node-config` skill for shared node guidance.
+
 ```bash
 openyida connector smart-create --curl "curl https://api.example.com/users"
 openyida connector list
@@ -476,7 +481,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
-| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check PRD page/resource count risk |
+| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
 | `openyida er <appType> [--format mermaid\|json] [--output file] [--include-system] [--include-pages]` | Export app entity relationship diagram |
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |
@@ -496,8 +501,8 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` | Query organization basic info, capacity, quotas, and domain settings |
 | `openyida read-dingtalk-doc <docUrl> [--output <file>] [--json]` | Fetch Markdown content from a DingTalk document |
 | `openyida read-dingtalk-tingji <taskUuid> [--json]` | Fetch DingTalk Tingji details by task UUID |
-| `openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--json]` | Query form permission config |
-| `openyida save-permission <appType> <formUuid> --package-uuid <packageUuid> [--data-permission <json>\|--action-permission <json>\|--field-permission <json>]` | Save form permission config |
+| `openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--package-type <FORM_PACKAGE_VIEW\|FORM_PACKAGE_START>] [--check-matrix] [--json]` | Query form permission config |
+| `openyida save-permission <appType> <formUuid> [--package-type <FORM_PACKAGE_VIEW\|FORM_PACKAGE_START>] [--package-uuid <packageUuid>\|--create --name <name>] [--data-permission <json>] [--action-permission <json>] [--field-permission <json>] [--members <userIds>\|--roles <roleIds>\|--all-members\|--matrix <json>] [--confirm-member-replace] [--owner-field <fieldId>] [--field-access <fieldId:view\|edit\|hidden\|encrypt>] [--field-default <access>] [--dry-run]` | Save form permission config |
 | `openyida corp-manager <search-user\|list\|add\|remove\|address-book> ...` | Manage platform admins and address book permissions |
 | `openyida agent-center <list\|create\|update\|cancel\|range\|search-user> ...` | Manage process and departure delegation |
 
@@ -509,6 +514,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida create-process <appType> <formTitle> <fieldsJsonFile> <processDefinitionFile> [--replace] \| create-process <appType> --formUuid <formUuid> <processDefinitionFile> [--replace]` | Create process form (all-in-one); Supports append/forward via JSON nodes[].actions.normalActions/appendActions |
 | `openyida ai-form-setting <get\|fields\|models\|enable\|disable\|save> <appType> ...` | Manage process form AI approval prompts |
 | `openyida process preview <appType> ...` | Preview process instance (visual flowchart) |
+| `openyida process fields <appType> <formUuid> [--json]` | Check process designer field loading and subtable field paths |
 
 ### Page Config & Sharing
 
@@ -550,12 +556,13 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida integration create <appType> ... [--spec file.json] [--connector-system-token-app <appType>]` | Create integration automation flow |
+| `openyida integration create <appType> <formUuid> <flowName> [--spec file.json] [--publish] [--connector-system-token-app <appType>]` | Create integration automation flow |
 | `openyida integration update <appType> <formUuid> <processCode> --spec <desired-spec.json> [--publish]` | Probe integration update capability (currently blocked without full readback) |
 | `openyida integration list <appType> [--flow-types 1,2,3,5,6] [--form-uuid <uuid>] [--status y\|n] [--json]` | List integration automation flows |
 | `openyida integration enable <appType> <formUuid> <processCode>` | Enable integration automation flow |
 | `openyida integration disable <appType> <formUuid> <processCode>` | Disable integration automation flow |
 | `openyida integration check <appType...>` | Check abnormal integration automation run logs |
+| `openyida integration detail-log <appType> <procInstId> [--json] [--include-params]` | View integration automation run log details |
 | `openyida integration diagnose (--text <text>\|--file <path>\|--rules) [--json]` | Diagnose integration automation tickets and common pitfalls |
 | `openyida dws <command> [args]` | DingTalk CLI (contacts/calendar/todo/approval etc.) |
 | `openyida dws contact user search --keyword <text>` | DingTalk CLI (contacts/calendar/todo/approval etc.) |

package/bin/yida.js

@@ -1082,7 +1082,9 @@ async function main() {
       const subCommand = args[0];
       const subArgs = args.slice(1);
 
-      if (subCommand === 'preview') {
+      if (subCommand === 'fields') {
+        await require('../lib/process/process-fields').run(subArgs);
+      } else if (subCommand === 'preview') {
         if (subArgs.length < 2) {
           throwCliUsage(t('cli.process_preview_usage'), t('cli.process_preview_example'));
         }
@@ -1247,6 +1249,9 @@ async function main() {
       } else if (subCommand === 'check') {
         const { run: runIntegrationCheck } = require('../lib/integration/integration-check');
         await runIntegrationCheck(subArgs);
+      } else if (subCommand === 'detail-log') {
+        const { run: runIntegrationDetailLog } = require('../lib/integration/integration-detail-log');
+        await runIntegrationDetailLog(subArgs);
       } else if (subCommand === 'diagnose' || subCommand === 'doctor') {
         const { run: runIntegrationDiagnose } = require('../lib/integration/integration-diagnose');
         await runIntegrationDiagnose(subArgs);

package/lib/agent/runtime-catalog.json

@@ -13,33 +13,33 @@
       "platform": "darwin",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-darwin-arm64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "1a9f5e148491c350457a41f095de9598775a2a349d872c43877c9fad63c09e28"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "48dc2a4473422c663e3330840c4f96e6646b2ff70ed61452fef8f1e68bf4a258"
     },
     {
       "platform": "darwin",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-darwin-x64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "46918d51efd40b73a645487525f2f7bdca94124ffb3ad6cdae6e9641f28b3963"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "1c93114b7fc9f2af7de1088d801ccbd3eaf32aabd967b5bd56917e8c1ec0661b"
     },
     {
       "platform": "win32",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-win32-x64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "64d471a37c54650e25c214e08d7ca7fa8dde068decfcbe71bd8abcbb2b7e74c6"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "13a7fc58b87a7f3f2592ba5239992c415463ab8b3fbf32312944db8c611fb813"
     },
     {
       "platform": "win32",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-win32-arm64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "7b1ff527dc54285084eac0773d273fdfb892ce5ca352a810767c64eefc8e59c0"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "49e63f81730e1ee495863a48b9e90f687e9529e700788665196c169a630ed094"
     }
   ]
 }

package/lib/app/check-prd-completeness.js

@@ -268,8 +268,19 @@ function extractResources(markdown) {
 }
 
 function parsePrdMarkdown(markdown) {
+  const navigationVisibility = [];
+  let applicationTheme;
+  for (const match of String(markdown || '').matchAll(/```json\s*\n([\s\S]*?)\n```/g)) {
+    try {
+      const handoff = JSON.parse(match[1]);
+      if (Array.isArray(handoff.navigationVisibility)) {navigationVisibility.push(...handoff.navigationVisibility);}
+      if (Object.prototype.hasOwnProperty.call(handoff, 'applicationTheme')) {applicationTheme = handoff.applicationTheme;}
+    } catch { /* Other fenced examples are not the structured execution handoff. */ }
+  }
   return {
     resources: extractResources(markdown),
+    navigationVisibility,
+    ...(applicationTheme !== undefined ? { applicationTheme } : {}),
   };
 }
 
@@ -451,6 +462,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const parsedManifest = parseBuildManifest(options.buildManifest);
   const items = [];
   const assetExecution = auditAssetExecution(options.buildManifest?.assetExecution, options.buildManifest?.assetTasks);
+  let themeVerification;
 
   function addItem(id, source, status, severity, message, details = {}) {
     items.push(makeRiskItem(id, source, status, severity, message, details));
@@ -465,6 +477,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
       verdict,
       mode: 'delivery_risk_radar',
       assetExecution,
+      ...(themeVerification ? { themeVerification } : {}),
       appType,
       prdPath: options.prdPath || '',
       buildManifestPath: options.buildManifestPath || '',
@@ -510,7 +523,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const fetchForms = deps.fetchForms || fetchFormPageList;
   let forms = [];
   try {
-    forms = await fetchForms(appType, authRef);
+    forms = await fetchForms(appType, authRef, { includeNavigation: true });
   } catch (error) {
     addItem('app_resource_list_read_failed', 'remote.resource_list', 'fail', 'blocker', '目标应用资源列表读取失败，无法执行数量完整性检查', {
       expected: { appType, readable: true },
@@ -522,6 +535,55 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const actualResources = forms.map(makeActualResource);
   const manifestResources = parsedManifest.resources.filter(resource => resource.required);
 
+  if (parsedPrd.applicationTheme !== undefined) {
+    const expected = parsedPrd.applicationTheme;
+    const { normalizeCssColorToHex } = require('./custom-theme');
+    const expectedColor = normalizeCssColorToHex(expected?.themeColor);
+    themeVerification = { configurationReadback: false, verified: false, runtimeVerified: false };
+    try {
+      if (!expectedColor || !['light', 'dark'].includes(expected?.navTheme)) {throw new Error('INVALID_THEME_EXPECTATION');}
+      const { fetchCurrentApp, getThemeSettings, getNavigationSettings } = require('./update-app');
+      const app = await (deps.fetchApp || fetchCurrentApp)(appType, authRef);
+      if (!app || typeof app !== 'object' || Array.isArray(app) || !Object.keys(app).length) {throw new Error('APP_SETTINGS_UNAVAILABLE');}
+      const settings = getThemeSettings(app);
+      const rawNav = getNavigationSettings(app, ['navTheme']).navTheme;
+      const actual = {
+        colour: settings.colour,
+        themeColor: normalizeCssColorToHex(settings.themeColor),
+        navTheme: ['white', 'gray'].includes(rawNav) ? 'light' : rawNav,
+        customThemeEnabled: settings.customThemeStyle?.enabled,
+        hasCssUrl: typeof settings.customThemeStyle?.cssUrl === 'string' && !!settings.customThemeStyle.cssUrl.trim(),
+      };
+      const matched = actual.colour === 'custom' && actual.themeColor === expectedColor
+        && actual.navTheme === expected.navTheme && actual.customThemeEnabled === true && actual.hasCssUrl;
+      themeVerification = { ...themeVerification, configurationReadback: true, verified: matched, expected, actual };
+      if (!matched) {
+        addItem('application_theme_mismatch', 'remote.application_theme', 'fail', 'blocker',
+          t('check_prd_completeness.application_theme_mismatch'), { expected, actual });
+      }
+    } catch {
+      addItem('application_theme_not_checked', 'remote.application_theme', 'not_checked', 'warning',
+        t('check_prd_completeness.application_theme_not_checked'), { expected });
+    }
+  }
+
+  // Reuse the resource-list readback. Page renderNav and menu visibility are
+  // independent; a successful publication cannot prove the latter.
+  for (const expected of parsedPrd.navigationVisibility) {
+    const matches = parsedManifest.resources.filter(resource => resource.name === expected?.name && resource.kind === 'display-page');
+    const ids = [...new Set(matches.map(resource => resource.formUuid).filter(Boolean))];
+    const actual = ids.length === 1 ? forms.find(form => form.formUuid === ids[0]) : undefined;
+    const known = value => typeof value === 'boolean';
+    const valid = expected?.hidden === true && expected?.mobileHidden === true;
+    if (valid && actual && (actual.hidden === false || actual.mobileHidden === false)) {
+      addItem('frontend_navigation_visible', 'remote.navigation', 'fail', 'blocker',
+        t('check_prd_completeness.frontend_navigation_visible', expected.name), { expected, actual });
+    } else if (!valid || !actual || !known(actual.hidden) || !known(actual.mobileHidden)) {
+      addItem('frontend_navigation_not_checked', 'prd.navigationVisibility', 'not_checked', 'warning',
+        t('check_prd_completeness.frontend_navigation_not_checked', expected?.name || ''), { expected, actual: actual || null });
+    }
+  }
+
   if (!options.buildManifest) {
     addItem('build_manifest_missing', 'build_manifest', 'not_checked', 'info', '未提供 build-manifest.json，只能基于 PRD 资源 hints 做风险提示', {
       expected: '--build-manifest <file>',

package/lib/app/form-navigation.js

@@ -8,7 +8,7 @@ function resolveLocalizedText(value, fallback = '') {
   return parseYidaI18n(value, fallback, { parseJson: false });
 }
 
-function normalizeFormNavigationNode(node) {
+function normalizeFormNavigationNode(node, options = {}) {
   if (!node || node.navType === 'SYSTEM' || !node.formUuid) {
     return null;
   }
@@ -21,10 +21,14 @@ function normalizeFormNavigationNode(node) {
     ),
     formType: node.formType || '',
     pathName: node.pathName || '',
+    ...(options.includeNavigation ? {
+      hidden: ['y', true].includes(node.hidden) ? true : ['n', false].includes(node.hidden) ? false : null,
+      mobileHidden: ['y', true].includes(node.mobileHidden) ? true : ['n', false].includes(node.mobileHidden) ? false : null,
+    } : {}),
   };
 }
 
-async function fetchFormPageList(appType, authRef) {
+async function fetchFormPageList(appType, authRef, options = {}) {
   const result = await createYidaClient({ authRef }).get(
     `/dingtalk/web/${appType}/query/formnav/getFormNavigationListByOrder.json`,
     { _api: 'Nav.queryList', _mock: false }
@@ -39,7 +43,7 @@ async function fetchFormPageList(appType, authRef) {
 
   const items = Array.isArray(result.content) ? result.content : [];
   return items
-    .map(normalizeFormNavigationNode)
+    .map(node => normalizeFormNavigationNode(node, options))
     .filter(Boolean);
 }
 

package/lib/app/update-app.js

@@ -819,6 +819,9 @@ async function run(args) {
 }
 
 module.exports = {
+  fetchCurrentApp,
+  getThemeSettings,
+  getNavigationSettings,
   run,
   parseArgs,
   hasShellUpdate,

package/lib/core/command-manifest.js

@@ -424,9 +424,11 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'get-permission',
     'get-schema',
     'integration.check',
+    'integration.detail-log',
     'integration.list',
     'list-forms',
     'process.preview',
+    'process.fields',
     'read-dingtalk-tingji',
     'report.inspect',
     'verify-short-url',
@@ -672,10 +674,12 @@ const COMMAND_PERMISSIONS = new Map([
     'get-permission',
     'get-schema',
     'integration.check',
+    'integration.detail-log',
     'integration.diagnose',
     'integration.list',
     'list-forms',
     'process.preview',
+    'process.fields',
     'read-dingtalk-tingji',
     'report.inspect',
     'verify-short-url',
@@ -1493,7 +1497,7 @@ const COMMAND_GROUPS = [
       }),
       command('check-prd-completeness', ['check-prd-completeness'], 'check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]', 'help.cmd_check_prd_completeness', { managedRun: { scope: 'app', appParser: 'prd-completeness' },
         output: 'json',
-        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.'],
+        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.', 'When the PRD execution handoff contains navigationVisibility, resolves frontend display pages through build-manifest resource IDs and checks PC/mobile menu hiding using the same remote resource-list read. A visible menu fails; unknown visibility or missing ID binding needs review. Checks PRD applicationTheme against live application settings: selected brand color, custom CSS enabled with a resource URL, and navigation tone. Mismatch fails; unreadable settings or invalid expectations need review. Reuses update-app readback field handling. Does not verify page renderNav, actual CSS content/loading, default routes or browser appearance.'],
       }),
       command('check-design', ['check-design'], 'check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]', 'help.cmd_check_design', { managedRun: { scope: 'local' },
         requiresLogin: false,
@@ -1625,13 +1629,14 @@ const COMMAND_GROUPS = [
           } },
         } },
         output: 'json',
-        noteKeys: ['help.data_notes'],
+        noteKeys: ['help.data_notes', 'query_data.approver_query_help'],
         notes: [
           'Each condition uses key (field ID), componentName, type, operator and value. Query types: TextField/TextareaField/TableField TEXT; NumberField/RateField/DateField/CascadeDateField DOUBLE; RadioField/SelectField/CheckboxField/MultiSelectField/DepartmentSelectField ARRAY; EmployeeField/CascadeSelectField/CitySelectField STRING; ImageField/AttachmentField TEXT.',
           'Ordinary form searchFormDatas accepts AND condition arrays via --search-json/--search-file. DateField: type DOUBLE, is/is_not, value ""; zero is filled. Query range endpoints as DateField with .start/.end: both empty means unfilled, both filled means complete.',
           'Use synchronized NumberField counts (eq 0/gt 0) for any filled endpoint, multi-choice options or subform rows; maintain every write entry and backfill history. --resolve-aliases supports rangeAlias.start/.end and parentId aliases. Use server pagination and dynamicOrder. Guide: yida-skills/references/query-condition-guide.md; sample: yida-data-management empty-query.',
         ],
         examples: [
+          'openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count',
           'openyida data query form APP_XXX FORM_XXX --page 1 --size 20 --search-json \'[{"key":"dateField_due","componentName":"DateField","type":"DOUBLE","operator":"is","value":""}]\'',
           'openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-json \'{"textField_name":"客户 A","dateField_followUp":1787932800000}\'',
           'openyida data delete form APP_XXX FORM_XXX --inst-id FINST_XXX --expect-form-name 客户 --expect-form-type receipt --confirm --json',
@@ -1647,8 +1652,9 @@ const COMMAND_GROUPS = [
       command('read-dingtalk-tingji', ['read-dingtalk-tingji'], 'read-dingtalk-tingji <taskUuid> [--json]', 'help.cmd_read_dingtalk_tingji', { managedRun: { scope: 'selected_input', inputType: 'tingji', inputField: 'taskUuid' },
         output: 'json',
       }),
-      command('get-permission', ['get-permission'], 'get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--json]', 'help.cmd_get_permission', { managedRun: { scope: 'app', appPosition: 0 } }),
-      command('save-permission', ['save-permission'], 'save-permission <appType> <formUuid> --package-uuid <packageUuid> [--data-permission <json>|--action-permission <json>|--field-permission <json>]', 'help.cmd_save_permission', { managedRun: { scope: 'app', appPosition: 0, mutation: { operation: 'update_form_permission', formUuidPosition: 1 } },
+      command('get-permission', ['get-permission'], 'get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>] [--check-matrix] [--json]', 'help.cmd_get_permission', { managedRun: { scope: 'app', appPosition: 0 }, noteKeys: ['permission_scope.matrix_notice'] }),
+      command('save-permission', ['save-permission'], 'save-permission <appType> <formUuid> [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>] [--package-uuid <packageUuid>|--create --name <name>] [--data-permission <json>] [--action-permission <json>] [--field-permission <json>] [--members <userIds>|--roles <roleIds>|--all-members|--matrix <json>] [--confirm-member-replace] [--owner-field <fieldId>] [--field-access <fieldId:view|edit|hidden|encrypt>] [--field-default <access>] [--dry-run]', 'help.cmd_save_permission', { managedRun: { scope: 'app', appPosition: 0, mutation: { operation: 'update_form_permission', formUuidPosition: 1, forbiddenFlags: ['--dry-run'] } },
+        noteKeys: ['permission_scope.options_help', 'permission_scope.overlap_notice'],
         examples: [
           'openyida get-permission APP_XXX FORM_XXX --json',
           'openyida save-permission APP_XXX FORM_XXX --package-uuid PACKAGE_XXX --data-permission \'{"dataRange":"ORIGINATOR"}\'',
@@ -1689,6 +1695,11 @@ const COMMAND_GROUPS = [
       aliases: ['ai-approve', 'aiFormSetting'],
       }),
       command('process.preview', ['process', 'preview'], 'process preview <appType> ...', 'help.cmd_process_preview', { managedRun: { scope: 'app', appPosition: 1 } }),
+      command('process.fields', ['process', 'fields'], 'process fields <appType> <formUuid> [--json]', 'help.cmd_process_fields', {
+        managedRun: { scope: 'app', appPosition: 1 },
+        permission: permission('allow', 'read', { reason: 'Read-only process designer field diagnostics.' }),
+        output: 'json',
+      }),
     ],
   },
   {
@@ -1736,7 +1747,12 @@ const COMMAND_GROUPS = [
     id: 'integration',
     titleKey: 'help.group_integration',
     commands: [
-      command('integration.create', ['integration', 'create'], 'integration create <appType> ... [--spec file.json] [--connector-system-token-app <appType>]', 'help.cmd_integration', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'create_process' } } }),
+      command('integration.create', ['integration', 'create'], 'integration create <appType> <formUuid> <flowName> [--spec file.json] [--publish] [--connector-system-token-app <appType>]', 'help.cmd_integration', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'create_process' } },
+        examples: [
+          'openyida integration create APP_XXX FORM_XXX "批量复制明细" --spec .cache/openyida/task/integration/batch-data.json',
+          'openyida integration create APP_XXX FORM_XXX "库存不足通知" --receivers USER_ID --trigger-condition "numberField_stock:当前库存:LessThan:numberField_minStock:NumberField:processVar"',
+        ],
+      }),
       command('integration.update', ['integration', 'update'], 'integration update <appType> <formUuid> <processCode> --spec <desired-spec.json> [--publish]', 'help.cmd_integration_update', { managedRun: { scope: 'app', appPosition: 1 },
         requiresLogin: false,
         output: 'json',
@@ -1751,6 +1767,9 @@ const COMMAND_GROUPS = [
         output: 'json',
       }),
       command('integration.check', ['integration', 'check'], 'integration check <appType...>', 'help.cmd_integration_check', { managedRun: { scope: 'app', appPosition: 1 } }),
+      command('integration.detail-log', ['integration', 'detail-log'], 'integration detail-log <appType> <procInstId> [--json] [--include-params]', 'help.cmd_integration_detail_log', { managedRun: { scope: 'app', appPosition: 1 },
+        output: 'text|json',
+      }),
       command('integration.diagnose', ['integration', 'diagnose'], 'integration diagnose (--text <text>|--file <path>|--rules) [--json]', 'help.cmd_integration_diagnose', { managedRun: { scope: 'local' },
         requiresLogin: false,
         output: 'text|json',
@@ -2084,7 +2103,9 @@ function summarizeLocalizedCommands(commands) {
           derived_summary: 'execution.entryModeSummary is generated for PRD and preview from the selected mode; do not author it in build-plan.json.',
           roles: ['service', 'management', 'workspace'],
           entry_required_fields: ['key', 'name', 'role', 'menu', 'defaultMenuKey'],
-          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell',
+          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell. Missing page navigation for a multi-task service entry derives a custom top menu; single-task entries and explicit none retain their choice.',
+          application_theme_handoff: 'Derived applicationTheme in the PRD execution handoff records final design themeColor/navTheme/designFile for full builds. Fast records the same contract. check-prd-completeness reads current application settings; publish does not install application themes. Resource-only changes add no theme task. Configuration matching is separate from browser acceptance and custom-page token consumption.',
+          menu_visibility_handoff: 'Derived navigationVisibility in the PRD execution handoff, not a build-plan input: service-management hides frontend-only standalone display pages in PC/mobile platform menus. Shared forms and explicitly management-linked pages are preserved. Resolve names to build-manifest resource IDs; nav-group hide and readback are separate from page renderNav=false. Resource-only changes schedule no menu hiding.',
           page_navigation_policy: getPageNavigationContract(),
           local_menu_binding: 'Every entry containing local menus, including management/workspace, requires sceneKey matching exactly one page; each local menu requires resource equal to that page name and a nonempty viewKey.',
           menu_target_types: ['local', 'submission', 'page', 'custom'],

package/lib/core/locales/en.js

@@ -141,7 +141,7 @@ module.exports = {
     cmd_list_forms: 'List forms/pages in an app',
     cmd_aggregate_table: 'Manage aggregate tables (virtualView)',
     cmd_get_schema: 'Get one form Schema or all form Schemas',
-    cmd_check_prd_completeness: 'Check PRD page/resource count risk',
+    cmd_check_prd_completeness: 'Check resources, frontend menu hiding and application theme delivery',
     cmd_er: 'Export app entity relationship diagram',
     cmd_create_page: 'Create a custom display page',
     cmd_build_page: 'Build Yida-compatible page source',
@@ -199,6 +199,7 @@ module.exports = {
     cmd_integration_enable: 'Enable integration automation flow',
     cmd_integration_disable: 'Disable integration automation flow',
     cmd_integration_check: 'Check abnormal integration automation run logs',
+    cmd_integration_detail_log: 'View integration automation run log details',
     cmd_integration_diagnose: 'Diagnose integration automation tickets and common pitfalls',
     cmd_dws: 'DingTalk CLI (contacts/calendar/todo/approval etc.)',
     cmd_dingtalk_link: 'Generate DingTalk AppLink / legacy dingtalk:// page links',
@@ -385,7 +386,7 @@ Examples:
     forbidden_alias_get_schema_form_uuid_option: '`{0}` takes formUuid as the second positional argument, not `{1}`.',
     nearest_command_suggestion: 'Unknown OpenYida command root "{0}". Did you mean "{1}"?',
     run_help: 'Run openyida --help for usage',
-    integration_help: 'Usage: openyida integration <create|update|list|enable|disable|check|diagnose> ...',
+    integration_help: 'Usage: openyida integration <create|update|list|enable|disable|check|detail-log|diagnose> ...',
     integration_unknown: 'Unknown integration subcommand: {0}',
     integration_help_hint: 'Run openyida integration --help for available subcommands',
     integration_list_usage: 'Usage: openyida integration list <appType> [--form-uuid <uuid>] [--status y|n] [--key <kw>] [--size <n>] [--json]',
@@ -429,9 +430,9 @@ Examples:
     process_usage: 'Usage: openyida process <subcommand>\n\nSubcommands:\n  preview <appType> <processInstanceId> [--output <path>]  Preview process instance (generate visual flowchart)',
     process_preview_usage: 'Usage: openyida process preview <appType> <processInstanceId> [--output <path>]',
     process_preview_example: 'Example: openyida process preview APP_XXX proc-inst-id-xxx',
-    get_permission_usage: 'Usage: openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>]',
+    get_permission_usage: 'Usage: openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>]',
     get_permission_example: 'Example: openyida get-permission APP_XXX FORM-XXX',
-    save_permission_usage: 'Usage: openyida save-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--data-permission <json>] [--action-permission <json>]',
+    save_permission_usage: 'Usage: openyida save-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--data-permission <json>] [--action-permission <json>] [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>]',
     save_permission_example: "Example: openyida save-permission APP_XXX FORM-XXX --data-permission '{\"role\":\"DEFAULT\",\"dataRange\":\"SELF\"}'",
     exec_failed: '\n❌ Execution failed: {0}',
     login_usage: 'Usage: openyida login [entryUrl|--public|--alibaba|--intl] [--no-browser] [--check-only] [--json] [--client-id <clientId>]',
@@ -500,6 +501,18 @@ Examples:
     excel_exported: 'Excel exported: {0}',
   },
 
+  integration_detail_log: {
+    usage: 'Usage: openyida integration detail-log <appType> <procInstId> [--json] [--include-params] (known secrets are always masked; max 100 pages / 10,000 nodes; business parameters may still be sensitive)',
+    missing_args: 'Run log details require appType and procInstId',
+    unknown_option: 'Unsupported run log detail option: {0}',
+    params_require_json: '--include-params requires --json; known secrets are always masked, but business parameters may still be sensitive',
+    api_failed: 'Failed to query run log details: {0}',
+    invalid_response: 'Run log detail response has no valid node list or total count',
+    pagination_failed: 'Run log detail pages are inconsistent; incomplete data was not printed',
+    pagination_limit: 'Run log details exceed the pagination limit ({0} pages / {1} nodes); incomplete data was not printed',
+    summary: 'Run log details: {0} nodes (parameter keys only by default)',
+  },
+
   // ── lib/integration/integration-create.js ─────────
   integration: {
     create_usage: 'Usage: openyida integration create <appType> <formUuid> <flowName> [options]',
@@ -517,6 +530,7 @@ Examples:
     create_opt_spec: '  --spec <file.json>            Use a structured flow spec for complex automation nodes (dataUpdate/route, etc.)',
     create_opt_data_form_uuid: '  --data-form-uuid <uuid>     Target form UUID for a get-single-data node',
     create_opt_data_condition: '  --data-condition <rule>     Get-data condition: targetField:label:triggerField[:component[:opCode[:valueType]]]',
+    create_opt_trigger_condition: '  --trigger-condition <rule>    Trigger: field:label:opCode:value[:component[:valueType]]; RHS field: processVar, constant: literal',
     create_opt_get_self: '  --get-self                    Insert a get-self node (process runtime uses pid, designer uses proc_inst_id; ordinary forms use form_inst_id on both sides)',
     create_opt_get_self_field: '  --get-self-field <field>     Override the trigger-side system field, default __masterdata_form_inst_id',
     create_opt_get_self_query_field: '  --get-self-query-field <f>  Override the query-side system field (process: pid runtime / proc_inst_id designer; ordinary: form_inst_id)',
@@ -1555,6 +1569,10 @@ Examples:
   },
 
   check_prd_completeness: {
+    application_theme_mismatch: 'The application theme does not match the selected project theme.',
+    application_theme_not_checked: 'Application theme settings could not be verified; theme delivery remains unverified.',
+    frontend_navigation_not_checked: 'Frontend menu hiding has not been verified: {0}',
+    frontend_navigation_visible: 'Frontend page remains visible in the desktop or mobile management menu: {0}',
     usage: 'Usage: openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]',
     example: 'Example: openyida check-prd-completeness prd/order-management/prd.md --app-type APP_XXX --build-manifest prd/order-management/build-manifest.json --json',
     prd_not_found: 'PRD file not found: {0}',
@@ -2043,6 +2061,11 @@ Options:
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  approver_query_help: 'Current process approver: --current-approver <userId> [--count] scans all visible pages and counts distinct instances. Incomplete scans or permission failures are errors.',
+  approver_option_invalid: 'Invalid current-approver query option: {0}. Use an exact userId and scan RUNNING instances from page 1.',
+  approver_incomplete: 'The current-approver scan could not complete. No complete count was returned; check error details, permissions and pagination.',
+  approver_response_invalid: 'The process API response could not be verified; a current-approver count cannot be determined.',
+  approver_scope_note: 'Counts only instances visible to the current login under server authorization; this does not imply access to all application data.',
   association_derived_field_read_only: 'Derived association-form query field {0} is read-only and cannot be saved or updated. Write the source association field without the _id suffix.',
   association_value_invalid: 'The write value for association-form field {0} is invalid. Use an array of objects where every item includes appType, formUuid, formType, instanceId, and title.',
   command_unsupported: 'Unsupported data command: {0} {1}. Run openyida commands --json to inspect the actual capability.',
@@ -2063,6 +2086,19 @@ Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
   target_identity_unverified: 'Could not read the name and type of target resource {0}. The operation stopped before mutation.',
 });
 
+module.exports.permission_scope = {
+  roles_summary: 'Roles: {0}',
+  options_help: '--owner-field restricts records to those whose top-level member field contains the current user; --roles selects ordinary Yida roles; --field-access is repeatable. Initial custom field access requires --field-default and shorthand updates require --package-uuid. --dry-run previews without writes.',
+  invalid: 'Invalid permission options: {0}. Shorthand updates require --package-uuid; do not mix member scopes or field defaults.',
+  owner_invalid: '--owner-field must identify a real top-level EmployeeField in the target form, not a creator alias, text or subtable field.',
+  field_default_required: 'Initial --field-access requires --field-default view|edit|hidden|encrypt for all other fields; form-dependent behavior cannot be inferred.',
+  overlap_notice: 'Other permission groups or overlapping roles may grant broader access. Saving this group does not verify effective row isolation or field access for all users.',
+  matrix_notice: 'Native matrices use the OA enhancement entitlement package. Available does not prove purchase; unavailable requires an administrator to check or enable entitlement. Business APIs remain authoritative.',
+  matrix_unavailable: 'Matrix usage is unavailable for this app. Ask an administrator to check or enable the OA enhancement entitlement package before retrying. No writes performed.',
+  matrix_unknown: 'Matrix availability could not be established. Resolve the returned account-access or API error first. No writes performed.',
+};
+
+
 Object.assign(module.exports.common || (module.exports.common = {}), {
   non_idempotent_result_unknown: 'Authentication changed during the create request; the result is unknown. Verify the target state before retrying.',
 });
@@ -2268,3 +2304,31 @@ module.exports.help.cmd_data_manage_style_list = 'List optional data-management
 module.exports.help.cmd_data_manage_style_generate = 'Generate data-management CSS from an optional recipe (local only)';
 
 module.exports.help.cmd_data_manage_style_guide = 'Inspect data-management UI directions, tokens and scoped CSS guidance';
+
+// Process fields and submission permission packages.
+Object.assign(module.exports.permission_common || (module.exports.permission_common = {}), {
+  'package_type_invalid': 'Use FORM_PACKAGE_VIEW or FORM_PACKAGE_START for --package-type.',
+  'start_scope_invalid': 'START supports submission members, fields and OPERATE_CREATE only; configure record data ranges and matrices separately.'
+});
+Object.assign(module.exports.process_errors || (module.exports.process_errors = {}), {
+  'field_permissions_invalid': 'Field permissions contain invalid or duplicate field IDs or behaviors.',
+  'field_source_failed': 'Could not read the form fields. Check the process binding and schema response.',
+  'fields_empty': 'The bound form has no readable fields. Check its saved schema.',
+  'designer_fields_missing': 'The process designer cannot load all bound form fields. Check its schema and process binding before publishing.',
+  'field_not_found': 'A process permission references a field missing from the bound form.',
+  'fields_verified': 'Field IDs were checked; browser behavior and runtime permissions remain unverified.'
+});
+Object.assign(module.exports.help || (module.exports.help = {}), {
+  'cmd_process_fields': 'Check process designer field loading and subtable field paths'
+});
+module.exports.cli.process_usage += '\n  fields <appType> <formUuid> [--json]  Inspect process designer field loading';
+
+// Batch data nodes.
+Object.assign(module.exports.integration, {
+  batch_invalid: 'Invalid batch configuration. Check source, quantity and fields using details.reason.',
+  message_roles_invalid: 'Message roles require a non-empty role ID and NORMAL message type.',
+  message_roles_readback_mismatch: 'Persisted message roles differ from the submitted recipients.',
+  batch_retrieve_name: 'Get multiple records',
+  batch_readback_mismatch: 'Persisted batch node type, source or quantity differs from the submitted configuration.',
+  create_opt_spec: '  --spec <file.json>            Configure batch retrieve/create, updates and branches with a structured spec',
+});