openyida 2026.10.16 → 2026.10.18-2

package/README.md

@@ -245,11 +245,14 @@ openyida configure-process APP_XXX FORM_XXX .cache/openyida/process/process.json
 openyida process preview APP_XXX PROC_INST_XXX --output .cache/openyida/process/process.html
 openyida data query form APP_XXX FORM_XXX --page 1 --size 20
 openyida data query form APP_XXX FORM_XXX --dynamic-order '{"dateField_xxx":"-"}'
+openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count
 openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-file .cache/openyida/data-import/record.json
 openyida get-permission APP_XXX FORM_XXX
 ```
 
-Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-process-rule/references/approval-actions.md) for the JSON example, defaults, and verification limits.
+`--current-approver` takes an exact userId, not a display name. It scans running instances and their current TODO records, counts each matching instance once, and respects the current login's server-authorized data scope. Omit `--count` to include matching instance data. An incomplete scan or permission failure is reported as an error; the result does not claim application-wide visibility.
+
+Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-flow-node-config/references/actions.md) for the JSON example, defaults, and verification limits.
 
 `configure-process` 的流程 JSON 中，审批人可配置为发起人、指定成员、指定角色、部门主管或直属主管，例如：
 
@@ -387,6 +390,8 @@ A zero-dependency local dashboard (`npm run eval:dashboard`, then open `http://1
 
 ### Connectors, Integrations, and Reports
 
+Automation spec `sendMessage` nodes accept `toRoles: [{"roleCode":"REAL_ROLE_ID","roleName":"Finance"}]` for NORMAL messages, alongside users and member fields. Process approval, operator, and CC nodes can also select roles. Role selection differs from conditional actor selection, which does not yet have a complete CLI shorthand. See the `yida-flow-node-config` skill for shared node guidance.
+
 ```bash
 openyida connector smart-create --curl "curl https://api.example.com/users"
 openyida connector list
@@ -476,7 +481,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
-| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check PRD page/resource count risk |
+| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
 | `openyida er <appType> [--format mermaid\|json] [--output file] [--include-system] [--include-pages]` | Export app entity relationship diagram |
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |
@@ -496,8 +501,10 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` | Query organization basic info, capacity, quotas, and domain settings |
 | `openyida read-dingtalk-doc <docUrl> [--output <file>] [--json]` | Fetch Markdown content from a DingTalk document |
 | `openyida read-dingtalk-tingji <taskUuid> [--json]` | Fetch DingTalk Tingji details by task UUID |
-| `openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--json]` | Query form permission config |
-| `openyida save-permission <appType> <formUuid> --package-uuid <packageUuid> [--data-permission <json>\|--action-permission <json>\|--field-permission <json>]` | Save form permission config |
+| `openyida get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--package-type <FORM_PACKAGE_VIEW\|FORM_PACKAGE_START>] [--check-matrix] [--json]` | Query form permission config |
+| `openyida save-permission <appType> <formUuid> [--package-type <FORM_PACKAGE_VIEW\|FORM_PACKAGE_START>] [--package-uuid <packageUuid>\|--create --name <name>] [--data-permission <json>] [--action-permission <json>] [--field-permission <json>] [--members <userIds>\|--roles <roleIds>\|--all-members\|--matrix <json>] [--confirm-member-replace] [--conditions-file <conditions.json>] [--owner-field <fieldId>] [--field-access <fieldId:view\|edit\|hidden\|encrypt>] [--field-default <access>] [--dry-run]` | Save form permission config |
+| `openyida permission-manage <copy\|rename\|delete> <appType> <formUuid> <packageUuid> [--name <name>] [--package-type <type>] [--dry-run] [--confirm]` | Copy, rename or delete a permission group |
+| `openyida matrix <list\|detail\|references\|rows\|create\|update\|delete\|upsert-rows\|delete-rows> [matrixId] [--file config.json] [--page 1] [--limit 20] [--expect hash] [--dry-run] [--confirm]` | Manage permission matrix definitions, references and rows |
 | `openyida corp-manager <search-user\|list\|add\|remove\|address-book> ...` | Manage platform admins and address book permissions |
 | `openyida agent-center <list\|create\|update\|cancel\|range\|search-user> ...` | Manage process and departure delegation |
 
@@ -509,6 +516,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida create-process <appType> <formTitle> <fieldsJsonFile> <processDefinitionFile> [--replace] \| create-process <appType> --formUuid <formUuid> <processDefinitionFile> [--replace]` | Create process form (all-in-one); Supports append/forward via JSON nodes[].actions.normalActions/appendActions |
 | `openyida ai-form-setting <get\|fields\|models\|enable\|disable\|save> <appType> ...` | Manage process form AI approval prompts |
 | `openyida process preview <appType> ...` | Preview process instance (visual flowchart) |
+| `openyida process fields <appType> <formUuid> [--json]` | Check process designer field loading and subtable field paths |
 
 ### Page Config & Sharing
 
@@ -550,12 +558,17 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida integration create <appType> ... [--spec file.json] [--connector-system-token-app <appType>]` | Create integration automation flow |
-| `openyida integration update <appType> <formUuid> <processCode> --spec <desired-spec.json> [--publish]` | Probe integration update capability (currently blocked without full readback) |
+| `openyida integration create <appType> <formUuid> <flowName> [--spec file.json] [--publish] [--connector-system-token-app <appType>]` | Create integration automation flow |
+| `openyida integration update <appType> <formUuid> <processCode> --patch <patch.json> [--dry-run] [--expect <fingerprint>] [--publish]` | Patch automation using a verified local dual-definition baseline |
+| `openyida integration copy <appType> <formUuid> <processCode> --name <name> [--dry-run]` | Copy an automation as disabled |
+| `openyida integration rename <appType> <formUuid> <processCode> --name <name> [--dry-run]` | Rename an automation |
+| `openyida integration delete <appType> <formUuid> <processCode> --confirm [--dry-run]` | Delete a disabled automation |
+| `openyida integration monitor <appType> [--file monitor.json] [--dry-run] [--json]` | Read or save automation error monitors |
 | `openyida integration list <appType> [--flow-types 1,2,3,5,6] [--form-uuid <uuid>] [--status y\|n] [--json]` | List integration automation flows |
 | `openyida integration enable <appType> <formUuid> <processCode>` | Enable integration automation flow |
 | `openyida integration disable <appType> <formUuid> <processCode>` | Disable integration automation flow |
 | `openyida integration check <appType...>` | Check abnormal integration automation run logs |
+| `openyida integration detail-log <appType> <procInstId> [--json] [--include-params]` | View integration automation run log details |
 | `openyida integration diagnose (--text <text>\|--file <path>\|--rules) [--json]` | Diagnose integration automation tickets and common pitfalls |
 | `openyida dws <command> [args]` | DingTalk CLI (contacts/calendar/todo/approval etc.) |
 | `openyida dws contact user search --keyword <text>` | DingTalk CLI (contacts/calendar/todo/approval etc.) |
@@ -634,7 +647,7 @@ Form field definitions can include `alias` or `componentAlias` to populate Yida
 
 #### Workflow, Reports, and Integrations
 
-`openyida integration create` supports form events (`insert`, `update`, `delete`, `comment`) and approval events (`processFinish`, `activityTask`; aliases: `approval`, `approvalNode`). Approval events require `--approval-actions agree,disagree,terminated`; `activityTask` also requires `--approval-node-ids <nodeId,...>`. Passing `--process-code` selects a full graph replacement and now requires explicit `--replace`; it is not a safe update. `integration update` currently performs capability detection only: because full platform `processJson` + `viewJson` readback is unproven, it writes a redacted local probe artifact and returns `PLATFORM_PROBE_REQUIRED` before authentication, spec reading, or remote writes. It does not edit a flow.
+`openyida integration create` supports form events (`insert`, `update`, `delete`, `comment`) and approval events (`processFinish`, `activityTask`; aliases: `approval`, `approvalNode`). Approval events require `--approval-actions agree,disagree,terminated`; `activityTask` also requires `--approval-node-ids <nodeId,...>`. Passing `--process-code` selects a full graph replacement and now requires explicit `--replace`; it is not a safe update. `integration update` supports previewing and applying limited node patches to disabled automations with a trusted local baseline, including node names, descriptions and message titles/bodies. It checks the remote version, saves a backup and verifies the saved result. Without a trusted baseline or when the patch exceeds the supported fields, it returns `PLATFORM_PROBE_REQUIRED` without writing. See the [maintenance guide](yida-skills/skills/yida-integration/references/operations.md) for preview, fingerprint and publication examples.
 
 ### Connect a Local Agent
 

package/bin/yida.js

@@ -1082,7 +1082,9 @@ async function main() {
       const subCommand = args[0];
       const subArgs = args.slice(1);
 
-      if (subCommand === 'preview') {
+      if (subCommand === 'fields') {
+        await require('../lib/process/process-fields').run(subArgs);
+      } else if (subCommand === 'preview') {
         if (subArgs.length < 2) {
           throwCliUsage(t('cli.process_preview_usage'), t('cli.process_preview_example'));
         }
@@ -1220,6 +1222,14 @@ async function main() {
       break;
     }
 
+    case 'permission-manage': {
+      await require('../lib/permission/permission-manage').run(args);
+      break;
+    }
+    case 'matrix': {
+      await require('../lib/permission/matrix-manage').run(args);
+      break;
+    }
     case 'integration': {
       const subCommand = args[0];
       const subArgs = args.slice(1);  // 路由层消费 subCommand，传递剩余参数
@@ -1235,6 +1245,8 @@ async function main() {
       } else if (subCommand === 'update') {
         const { run: runIntegrationUpdate } = require('../lib/integration/integration-update');
         await runIntegrationUpdate(subArgs);
+      } else if (['monitor', 'copy', 'rename', 'delete'].includes(subCommand)) {
+        await require('../lib/integration/integration-manage').run(subCommand, subArgs);
       } else if (subCommand === 'list') {
         const { runList } = require('../lib/integration/integration-list');
         await runList(subArgs);
@@ -1247,6 +1259,9 @@ async function main() {
       } else if (subCommand === 'check') {
         const { run: runIntegrationCheck } = require('../lib/integration/integration-check');
         await runIntegrationCheck(subArgs);
+      } else if (subCommand === 'detail-log') {
+        const { run: runIntegrationDetailLog } = require('../lib/integration/integration-detail-log');
+        await runIntegrationDetailLog(subArgs);
       } else if (subCommand === 'diagnose' || subCommand === 'doctor') {
         const { run: runIntegrationDiagnose } = require('../lib/integration/integration-diagnose');
         await runIntegrationDiagnose(subArgs);

package/lib/agent/runtime-catalog.json

@@ -13,33 +13,33 @@
       "platform": "darwin",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-darwin-arm64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "1a9f5e148491c350457a41f095de9598775a2a349d872c43877c9fad63c09e28"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "48dc2a4473422c663e3330840c4f96e6646b2ff70ed61452fef8f1e68bf4a258"
     },
     {
       "platform": "darwin",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-darwin-x64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "46918d51efd40b73a645487525f2f7bdca94124ffb3ad6cdae6e9641f28b3963"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "1c93114b7fc9f2af7de1088d801ccbd3eaf32aabd967b5bd56917e8c1ec0661b"
     },
     {
       "platform": "win32",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-win32-x64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "64d471a37c54650e25c214e08d7ca7fa8dde068decfcbe71bd8abcbb2b7e74c6"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "13a7fc58b87a7f3f2592ba5239992c415463ab8b3fbf32312944db8c611fb813"
     },
     {
       "platform": "win32",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-win32-arm64",
-      "packageVersion": "0.1.3",
-      "runtimeVersion": "0.1.3",
-      "manifestSha256": "7b1ff527dc54285084eac0773d273fdfb892ce5ca352a810767c64eefc8e59c0"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "49e63f81730e1ee495863a48b9e90f687e9529e700788665196c169a630ed094"
     }
   ]
 }

package/lib/app/check-prd-completeness.js

@@ -268,8 +268,19 @@ function extractResources(markdown) {
 }
 
 function parsePrdMarkdown(markdown) {
+  const navigationVisibility = [];
+  let applicationTheme;
+  for (const match of String(markdown || '').matchAll(/```json\s*\n([\s\S]*?)\n```/g)) {
+    try {
+      const handoff = JSON.parse(match[1]);
+      if (Array.isArray(handoff.navigationVisibility)) {navigationVisibility.push(...handoff.navigationVisibility);}
+      if (Object.prototype.hasOwnProperty.call(handoff, 'applicationTheme')) {applicationTheme = handoff.applicationTheme;}
+    } catch { /* Other fenced examples are not the structured execution handoff. */ }
+  }
   return {
     resources: extractResources(markdown),
+    navigationVisibility,
+    ...(applicationTheme !== undefined ? { applicationTheme } : {}),
   };
 }
 
@@ -451,6 +462,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const parsedManifest = parseBuildManifest(options.buildManifest);
   const items = [];
   const assetExecution = auditAssetExecution(options.buildManifest?.assetExecution, options.buildManifest?.assetTasks);
+  let themeVerification;
 
   function addItem(id, source, status, severity, message, details = {}) {
     items.push(makeRiskItem(id, source, status, severity, message, details));
@@ -465,6 +477,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
       verdict,
       mode: 'delivery_risk_radar',
       assetExecution,
+      ...(themeVerification ? { themeVerification } : {}),
       appType,
       prdPath: options.prdPath || '',
       buildManifestPath: options.buildManifestPath || '',
@@ -510,7 +523,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const fetchForms = deps.fetchForms || fetchFormPageList;
   let forms = [];
   try {
-    forms = await fetchForms(appType, authRef);
+    forms = await fetchForms(appType, authRef, { includeNavigation: true });
   } catch (error) {
     addItem('app_resource_list_read_failed', 'remote.resource_list', 'fail', 'blocker', '目标应用资源列表读取失败，无法执行数量完整性检查', {
       expected: { appType, readable: true },
@@ -522,6 +535,55 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const actualResources = forms.map(makeActualResource);
   const manifestResources = parsedManifest.resources.filter(resource => resource.required);
 
+  if (parsedPrd.applicationTheme !== undefined) {
+    const expected = parsedPrd.applicationTheme;
+    const { normalizeCssColorToHex } = require('./custom-theme');
+    const expectedColor = normalizeCssColorToHex(expected?.themeColor);
+    themeVerification = { configurationReadback: false, verified: false, runtimeVerified: false };
+    try {
+      if (!expectedColor || !['light', 'dark'].includes(expected?.navTheme)) {throw new Error('INVALID_THEME_EXPECTATION');}
+      const { fetchCurrentApp, getThemeSettings, getNavigationSettings } = require('./update-app');
+      const app = await (deps.fetchApp || fetchCurrentApp)(appType, authRef);
+      if (!app || typeof app !== 'object' || Array.isArray(app) || !Object.keys(app).length) {throw new Error('APP_SETTINGS_UNAVAILABLE');}
+      const settings = getThemeSettings(app);
+      const rawNav = getNavigationSettings(app, ['navTheme']).navTheme;
+      const actual = {
+        colour: settings.colour,
+        themeColor: normalizeCssColorToHex(settings.themeColor),
+        navTheme: ['white', 'gray'].includes(rawNav) ? 'light' : rawNav,
+        customThemeEnabled: settings.customThemeStyle?.enabled,
+        hasCssUrl: typeof settings.customThemeStyle?.cssUrl === 'string' && !!settings.customThemeStyle.cssUrl.trim(),
+      };
+      const matched = actual.colour === 'custom' && actual.themeColor === expectedColor
+        && actual.navTheme === expected.navTheme && actual.customThemeEnabled === true && actual.hasCssUrl;
+      themeVerification = { ...themeVerification, configurationReadback: true, verified: matched, expected, actual };
+      if (!matched) {
+        addItem('application_theme_mismatch', 'remote.application_theme', 'fail', 'blocker',
+          t('check_prd_completeness.application_theme_mismatch'), { expected, actual });
+      }
+    } catch {
+      addItem('application_theme_not_checked', 'remote.application_theme', 'not_checked', 'warning',
+        t('check_prd_completeness.application_theme_not_checked'), { expected });
+    }
+  }
+
+  // Reuse the resource-list readback. Page renderNav and menu visibility are
+  // independent; a successful publication cannot prove the latter.
+  for (const expected of parsedPrd.navigationVisibility) {
+    const matches = parsedManifest.resources.filter(resource => resource.name === expected?.name && resource.kind === 'display-page');
+    const ids = [...new Set(matches.map(resource => resource.formUuid).filter(Boolean))];
+    const actual = ids.length === 1 ? forms.find(form => form.formUuid === ids[0]) : undefined;
+    const known = value => typeof value === 'boolean';
+    const valid = expected?.hidden === true && expected?.mobileHidden === true;
+    if (valid && actual && (actual.hidden === false || actual.mobileHidden === false)) {
+      addItem('frontend_navigation_visible', 'remote.navigation', 'fail', 'blocker',
+        t('check_prd_completeness.frontend_navigation_visible', expected.name), { expected, actual });
+    } else if (!valid || !actual || !known(actual.hidden) || !known(actual.mobileHidden)) {
+      addItem('frontend_navigation_not_checked', 'prd.navigationVisibility', 'not_checked', 'warning',
+        t('check_prd_completeness.frontend_navigation_not_checked', expected?.name || ''), { expected, actual: actual || null });
+    }
+  }
+
   if (!options.buildManifest) {
     addItem('build_manifest_missing', 'build_manifest', 'not_checked', 'info', '未提供 build-manifest.json，只能基于 PRD 资源 hints 做风险提示', {
       expected: '--build-manifest <file>',

package/lib/app/form-navigation.js

@@ -8,7 +8,7 @@ function resolveLocalizedText(value, fallback = '') {
   return parseYidaI18n(value, fallback, { parseJson: false });
 }
 
-function normalizeFormNavigationNode(node) {
+function normalizeFormNavigationNode(node, options = {}) {
   if (!node || node.navType === 'SYSTEM' || !node.formUuid) {
     return null;
   }
@@ -21,10 +21,14 @@ function normalizeFormNavigationNode(node) {
     ),
     formType: node.formType || '',
     pathName: node.pathName || '',
+    ...(options.includeNavigation ? {
+      hidden: ['y', true].includes(node.hidden) ? true : ['n', false].includes(node.hidden) ? false : null,
+      mobileHidden: ['y', true].includes(node.mobileHidden) ? true : ['n', false].includes(node.mobileHidden) ? false : null,
+    } : {}),
   };
 }
 
-async function fetchFormPageList(appType, authRef) {
+async function fetchFormPageList(appType, authRef, options = {}) {
   const result = await createYidaClient({ authRef }).get(
     `/dingtalk/web/${appType}/query/formnav/getFormNavigationListByOrder.json`,
     { _api: 'Nav.queryList', _mock: false }
@@ -39,7 +43,7 @@ async function fetchFormPageList(appType, authRef) {
 
   const items = Array.isArray(result.content) ? result.content : [];
   return items
-    .map(normalizeFormNavigationNode)
+    .map(node => normalizeFormNavigationNode(node, options))
     .filter(Boolean);
 }
 

package/lib/app/update-app.js

@@ -819,6 +819,9 @@ async function run(args) {
 }
 
 module.exports = {
+  fetchCurrentApp,
+  getThemeSettings,
+  getNavigationSettings,
   run,
   parseArgs,
   hasShellUpdate,

package/lib/core/command-manifest.js

@@ -369,6 +369,12 @@ function findCommandSuggestion(argv = []) {
 }
 
 const COMMAND_SIDE_EFFECTS = new Map([
+  ['integration.copy', sideEffect('remote_write')],
+  ['integration.rename', sideEffect('remote_write')],
+  ['integration.delete', sideEffect('remote_write')],
+  ['integration.monitor', sideEffect('mixed', { read_actions: ['default', '--dry-run'], mutating_actions: ['--file'] })],
+  ['permission-manage', sideEffect('mixed', { read_actions: ['--dry-run'], mutating_actions: ['copy', 'rename', 'delete'] })],
+  ['matrix', sideEffect('mixed', { read_actions: ['list', 'detail', 'references', 'rows', '--dry-run'], mutating_actions: ['create', 'update', 'delete', 'upsert-rows', 'delete-rows'] })],
   ['data-manage-style.guide', sideEffect('local_read')],
   ['data-manage-style.list', sideEffect('local_read')],
   ['data-manage-style.generate', sideEffect('local_write')],
@@ -424,9 +430,11 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'get-permission',
     'get-schema',
     'integration.check',
+    'integration.detail-log',
     'integration.list',
     'list-forms',
     'process.preview',
+    'process.fields',
     'read-dingtalk-tingji',
     'report.inspect',
     'verify-short-url',
@@ -542,10 +550,8 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: [],
     mutating_actions: ['depends on commands in batch'],
   })],
-  ['integration.update', sideEffect('local_write', {
-    mutates_yida: false,
-    mutates_local: true,
-  })],
+  ['integration.update', sideEffect('mixed', { mutates_yida: true, mutates_local: true,
+    read_actions: ['--dry-run'], mutating_actions: ['apply patch'] })],
   ['basic-info', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: false,
@@ -672,10 +678,12 @@ const COMMAND_PERMISSIONS = new Map([
     'get-permission',
     'get-schema',
     'integration.check',
+    'integration.detail-log',
     'integration.diagnose',
     'integration.list',
     'list-forms',
     'process.preview',
+    'process.fields',
     'read-dingtalk-tingji',
     'report.inspect',
     'verify-short-url',
@@ -1493,7 +1501,7 @@ const COMMAND_GROUPS = [
       }),
       command('check-prd-completeness', ['check-prd-completeness'], 'check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]', 'help.cmd_check_prd_completeness', { managedRun: { scope: 'app', appParser: 'prd-completeness' },
         output: 'json',
-        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.'],
+        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.', 'When the PRD execution handoff contains navigationVisibility, resolves frontend display pages through build-manifest resource IDs and checks PC/mobile menu hiding using the same remote resource-list read. A visible menu fails; unknown visibility or missing ID binding needs review. Checks PRD applicationTheme against live application settings: selected brand color, custom CSS enabled with a resource URL, and navigation tone. Mismatch fails; unreadable settings or invalid expectations need review. Reuses update-app readback field handling. Does not verify page renderNav, actual CSS content/loading, default routes or browser appearance.'],
       }),
       command('check-design', ['check-design'], 'check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]', 'help.cmd_check_design', { managedRun: { scope: 'local' },
         requiresLogin: false,
@@ -1625,13 +1633,14 @@ const COMMAND_GROUPS = [
           } },
         } },
         output: 'json',
-        noteKeys: ['help.data_notes'],
+        noteKeys: ['help.data_notes', 'query_data.approver_query_help'],
         notes: [
           'Each condition uses key (field ID), componentName, type, operator and value. Query types: TextField/TextareaField/TableField TEXT; NumberField/RateField/DateField/CascadeDateField DOUBLE; RadioField/SelectField/CheckboxField/MultiSelectField/DepartmentSelectField ARRAY; EmployeeField/CascadeSelectField/CitySelectField STRING; ImageField/AttachmentField TEXT.',
           'Ordinary form searchFormDatas accepts AND condition arrays via --search-json/--search-file. DateField: type DOUBLE, is/is_not, value ""; zero is filled. Query range endpoints as DateField with .start/.end: both empty means unfilled, both filled means complete.',
           'Use synchronized NumberField counts (eq 0/gt 0) for any filled endpoint, multi-choice options or subform rows; maintain every write entry and backfill history. --resolve-aliases supports rangeAlias.start/.end and parentId aliases. Use server pagination and dynamicOrder. Guide: yida-skills/references/query-condition-guide.md; sample: yida-data-management empty-query.',
         ],
         examples: [
+          'openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count',
           'openyida data query form APP_XXX FORM_XXX --page 1 --size 20 --search-json \'[{"key":"dateField_due","componentName":"DateField","type":"DOUBLE","operator":"is","value":""}]\'',
           'openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-json \'{"textField_name":"客户 A","dateField_followUp":1787932800000}\'',
           'openyida data delete form APP_XXX FORM_XXX --inst-id FINST_XXX --expect-form-name 客户 --expect-form-type receipt --confirm --json',
@@ -1647,13 +1656,16 @@ const COMMAND_GROUPS = [
       command('read-dingtalk-tingji', ['read-dingtalk-tingji'], 'read-dingtalk-tingji <taskUuid> [--json]', 'help.cmd_read_dingtalk_tingji', { managedRun: { scope: 'selected_input', inputType: 'tingji', inputField: 'taskUuid' },
         output: 'json',
       }),
-      command('get-permission', ['get-permission'], 'get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--json]', 'help.cmd_get_permission', { managedRun: { scope: 'app', appPosition: 0 } }),
-      command('save-permission', ['save-permission'], 'save-permission <appType> <formUuid> --package-uuid <packageUuid> [--data-permission <json>|--action-permission <json>|--field-permission <json>]', 'help.cmd_save_permission', { managedRun: { scope: 'app', appPosition: 0, mutation: { operation: 'update_form_permission', formUuidPosition: 1 } },
+      command('get-permission', ['get-permission'], 'get-permission <appType> <formUuid> [--package-uuid <packageUuid>] [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>] [--check-matrix] [--json]', 'help.cmd_get_permission', { managedRun: { scope: 'app', appPosition: 0 }, noteKeys: ['permission_scope.matrix_notice'] }),
+      command('save-permission', ['save-permission'], 'save-permission <appType> <formUuid> [--package-type <FORM_PACKAGE_VIEW|FORM_PACKAGE_START>] [--package-uuid <packageUuid>|--create --name <name>] [--data-permission <json>] [--action-permission <json>] [--field-permission <json>] [--members <userIds>|--roles <roleIds>|--all-members|--matrix <json>] [--confirm-member-replace] [--conditions-file <conditions.json>] [--owner-field <fieldId>] [--field-access <fieldId:view|edit|hidden|encrypt>] [--field-default <access>] [--dry-run]', 'help.cmd_save_permission', { managedRun: { scope: 'app', appPosition: 0, mutation: { operation: 'update_form_permission', formUuidPosition: 1, forbiddenFlags: ['--dry-run'] } },
+        noteKeys: ['permission_scope.options_help', 'permission_scope.overlap_notice'],
         examples: [
           'openyida get-permission APP_XXX FORM_XXX --json',
           'openyida save-permission APP_XXX FORM_XXX --package-uuid PACKAGE_XXX --data-permission \'{"dataRange":"ORIGINATOR"}\'',
         ],
       }),
+      command('permission-manage', ['permission-manage'], 'permission-manage <copy|rename|delete> <appType> <formUuid> <packageUuid> [--name <name>] [--package-type <type>] [--dry-run] [--confirm]', 'permission_manage.description', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, permission: actionDependentPermission({ preauthorized_actions: ['copy', 'rename', '--dry-run'], ask_actions: ['delete'] }), output: 'json' }),
+      command('matrix', ['matrix'], 'matrix <list|detail|references|rows|create|update|delete|upsert-rows|delete-rows> [matrixId] [--file config.json] [--page 1] [--limit 20] [--expect hash] [--dry-run] [--confirm]', 'matrix_manage.description', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, permission: actionDependentPermission({ preauthorized_actions: ['list', 'detail', 'references', 'rows', 'create', 'update', 'upsert-rows', '--dry-run'], ask_actions: ['delete', 'delete-rows'] }), output: 'json' }),
       command('corp-manager', ['corp-manager'], 'corp-manager <search-user|list|add|remove|address-book> ...', 'help.cmd_corp_manager', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, output: 'json' }),
       command('agent-center', ['agent-center'], 'agent-center <list|create|update|cancel|range|search-user> ...', 'help.cmd_agent_center', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, output: 'json' }),
     ],
@@ -1689,6 +1701,11 @@ const COMMAND_GROUPS = [
       aliases: ['ai-approve', 'aiFormSetting'],
       }),
       command('process.preview', ['process', 'preview'], 'process preview <appType> ...', 'help.cmd_process_preview', { managedRun: { scope: 'app', appPosition: 1 } }),
+      command('process.fields', ['process', 'fields'], 'process fields <appType> <formUuid> [--json]', 'help.cmd_process_fields', {
+        managedRun: { scope: 'app', appPosition: 1 },
+        permission: permission('allow', 'read', { reason: 'Read-only process designer field diagnostics.' }),
+        output: 'json',
+      }),
     ],
   },
   {
@@ -1736,11 +1753,19 @@ const COMMAND_GROUPS = [
     id: 'integration',
     titleKey: 'help.group_integration',
     commands: [
-      command('integration.create', ['integration', 'create'], 'integration create <appType> ... [--spec file.json] [--connector-system-token-app <appType>]', 'help.cmd_integration', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'create_process' } } }),
-      command('integration.update', ['integration', 'update'], 'integration update <appType> <formUuid> <processCode> --spec <desired-spec.json> [--publish]', 'help.cmd_integration_update', { managedRun: { scope: 'app', appPosition: 1 },
-        requiresLogin: false,
+      command('integration.create', ['integration', 'create'], 'integration create <appType> <formUuid> <flowName> [--spec file.json] [--publish] [--connector-system-token-app <appType>]', 'help.cmd_integration', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'create_process' } },
+        examples: [
+          'openyida integration create APP_XXX FORM_XXX "批量复制明细" --spec .cache/openyida/task/integration/batch-data.json',
+          'openyida integration create APP_XXX FORM_XXX "库存不足通知" --receivers USER_ID --trigger-condition "numberField_stock:当前库存:LessThan:numberField_minStock:NumberField:processVar"',
+        ],
+      }),
+      command('integration.update', ['integration', 'update'], 'integration update <appType> <formUuid> <processCode> --patch <patch.json> [--dry-run] [--expect <fingerprint>] [--publish]', 'help.cmd_integration_update', { permission: actionDependentPermission({ preauthorized_actions: ['--dry-run', 'apply patch'] }), managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'update_process', formUuidPosition: 2, forbiddenFlags: ['--dry-run'] } },
         output: 'json',
       }),
+      command('integration.copy', ['integration', 'copy'], 'integration copy <appType> <formUuid> <processCode> --name <name> [--dry-run]', 'integration_manage.desc_copy', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'update_process', formUuidPosition: 2, forbiddenFlags: ['--dry-run'] } }, permission: permission('allow', 'write'), output: 'json' }),
+      command('integration.rename', ['integration', 'rename'], 'integration rename <appType> <formUuid> <processCode> --name <name> [--dry-run]', 'integration_manage.desc_rename', { managedRun: { scope: 'app', appPosition: 1, mutation: { operation: 'update_process', formUuidPosition: 2, forbiddenFlags: ['--dry-run'] } }, permission: permission('allow', 'write'), output: 'json' }),
+      command('integration.delete', ['integration', 'delete'], 'integration delete <appType> <formUuid> <processCode> --confirm [--dry-run]', 'integration_manage.desc_delete', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, permission: permission('ask', 'write'), output: 'json' }),
+      command('integration.monitor', ['integration', 'monitor'], 'integration monitor <appType> [--file monitor.json] [--dry-run] [--json]', 'integration_manage.desc_monitor', { managedRun: { scope: 'denied', reason: 'scope_not_audited' }, permission: actionDependentPermission({ preauthorized_actions: ['default', '--dry-run', '--file'] }), output: 'json' }),
       command('integration.list', ['integration', 'list'], 'integration list <appType> [--flow-types 1,2,3,5,6] [--form-uuid <uuid>] [--status y|n] [--json]', 'help.cmd_integration_list', { managedRun: { scope: 'app', appPosition: 1 },
         output: 'json',
       }),
@@ -1751,6 +1776,9 @@ const COMMAND_GROUPS = [
         output: 'json',
       }),
       command('integration.check', ['integration', 'check'], 'integration check <appType...>', 'help.cmd_integration_check', { managedRun: { scope: 'app', appPosition: 1 } }),
+      command('integration.detail-log', ['integration', 'detail-log'], 'integration detail-log <appType> <procInstId> [--json] [--include-params]', 'help.cmd_integration_detail_log', { managedRun: { scope: 'app', appPosition: 1 },
+        output: 'text|json',
+      }),
       command('integration.diagnose', ['integration', 'diagnose'], 'integration diagnose (--text <text>|--file <path>|--rules) [--json]', 'help.cmd_integration_diagnose', { managedRun: { scope: 'local' },
         requiresLogin: false,
         output: 'text|json',
@@ -2084,7 +2112,9 @@ function summarizeLocalizedCommands(commands) {
           derived_summary: 'execution.entryModeSummary is generated for PRD and preview from the selected mode; do not author it in build-plan.json.',
           roles: ['service', 'management', 'workspace'],
           entry_required_fields: ['key', 'name', 'role', 'menu', 'defaultMenuKey'],
-          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell',
+          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell. Missing page navigation for a multi-task service entry derives a custom top menu; single-task entries and explicit none retain their choice.',
+          application_theme_handoff: 'Derived applicationTheme in the PRD execution handoff records final design themeColor/navTheme/designFile for full builds. Fast records the same contract. check-prd-completeness reads current application settings; publish does not install application themes. Resource-only changes add no theme task. Configuration matching is separate from browser acceptance and custom-page token consumption.',
+          menu_visibility_handoff: 'Derived navigationVisibility in the PRD execution handoff, not a build-plan input: service-management hides frontend-only standalone display pages in PC/mobile platform menus. Shared forms and explicitly management-linked pages are preserved. Resolve names to build-manifest resource IDs; nav-group hide and readback are separate from page renderNav=false. Resource-only changes schedule no menu hiding.',
           page_navigation_policy: getPageNavigationContract(),
           local_menu_binding: 'Every entry containing local menus, including management/workspace, requires sceneKey matching exactly one page; each local menu requires resource equal to that page name and a nonempty viewKey.',
           menu_target_types: ['local', 'submission', 'page', 'custom'],