openyida 2026.10.18-2 → 2026.10.19

package/README.md

@@ -420,6 +420,16 @@ The opt-in aggregate real-E2E runner additionally requires `OPENYIDA_AGGREGATE_E
 
 Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
+### Report a problem or contribute a fix
+
+Tell your AI: “OpenYida keeps failing. Analyze the cause and prepare feedback.” You can prepare a redacted report and reproduction steps without a GitHub account or a local source checkout. Preparing a report does not submit it.
+
+```bash
+openyida feedback report --input summary.json --output-dir feedback-draft-001
+```
+
+Your AI prepares the summary from observed evidence and selected reproduction screenshots. PRs include before/after test comparisons. Before anything is published, review the final text and images, confirm sensitive information, and remove anything you do not want to share. See the [report input format](yida-skills/skills/yida-feedback/references/report-input.md). Review business information before sharing. With a GitHub account, authorize your AI to submit an Issue or contribute a verified public OpenYida fix through your personal Fork. Without an account, create a GitHub account first. If that is not possible, share the report in the AI开发者群 (AI developer group).
+
 <!-- OPENYIDA_COMMANDS_START -->
 <!-- This section is generated by `npm run docs:commands`. Do not edit command rows by hand. -->
 
@@ -480,6 +490,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida create-form add-option <appType> <formUuid> <fieldLabel> <option1> [option2] ...` | Update a form page |
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
+| `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
@@ -590,7 +601,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida formula evaluate <formula\|file> [--schema file]` | Static-check Yida formula syntax and field refs |
 | `openyida update` | Check and update to latest version |
 | `openyida export-conversation [options]` | Export AI conversation records |
-| `openyida feedback <setup\|url\|dismiss\|status> [options]` | Configure experience feedback form and local reminder state |
+| `openyida feedback <report\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
 | `openyida batch <file>\|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]` | Run OpenYida commands in batch |
 | `openyida flash-to-prd --file <path> --name "<project>"` | Convert flash notes or meeting notes to a PRD prompt |
 | `openyida ai <text\|image> [options]` | Call Yida AI text and image recognition APIs |

package/bin/yida.js

@@ -815,6 +815,11 @@ async function main() {
       break;
     }
 
+    case 'form-view': {
+      const { run } = require('../lib/app/form-view');
+      await run(args);
+      break;
+    }
     case 'aggregate-table': {
       const { run } = require('../lib/aggregate-table/aggregate-table');
       await run(args);

package/lib/app/canvas-compile.js

@@ -513,19 +513,19 @@ function findUnavailableCanvasInstanceApiIssues(source) {
   const guardPlugin = ({ types: types }) => ({
     name: 'yida-canvas-instance-api-guard',
     visitor: {
-      MemberExpression(path) {
+      'MemberExpression|OptionalMemberExpression'(path) {
         const object = path.node.object;
         const property = path.node.property;
         const propertyName = path.node.computed && types.isStringLiteral(property)
           ? property.value
-          : (types.isIdentifier(property) ? property.name : '');
+          : (!path.node.computed && types.isIdentifier(property) ? property.name : '');
 
-        if (types.isMemberExpression(object)) {
+        if (types.isMemberExpression(object) || types.isOptionalMemberExpression(object)) {
           const owner = object.object;
           const ownerProperty = object.property;
           const ownerPropertyName = object.computed && types.isStringLiteral(ownerProperty)
             ? ownerProperty.value
-            : (types.isIdentifier(ownerProperty) ? ownerProperty.name : '');
+            : (!object.computed && types.isIdentifier(ownerProperty) ? ownerProperty.name : '');
           if (
             types.isIdentifier(owner, { name: 'props' }) &&
             ownerPropertyName === 'utils' &&

package/lib/app/form-view.js

@@ -0,0 +1,332 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { isDeepStrictEqual } = require('util');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { resolveProjectRoot } = require('../core/utils');
+const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { buildYidaTitleI18n } = require('../core/yida-i18n');
+
+const ACTIONS = ['list', 'inspect', 'save', 'create', 'order'];
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function fail(code, key, detail, details) {
+  throw new CliError(t(`form_view.${key}`, detail || ''), { code: `FORM_VIEW_${code}`, details });
+}
+
+function parseJson(value, label) {
+  try { return typeof value === 'string' ? JSON.parse(value) : value; }
+  catch (_) { return fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function assertObject(value, label) {
+  if (!object(value)) { fail('INVALID_CONFIG', 'invalid_config', label); }
+  return value;
+}
+
+function assertSafeKeys(value) {
+  if (!value || typeof value !== 'object') { return; }
+  for (const key of Object.keys(value)) {
+    if (['__proto__', 'prototype', 'constructor'].includes(key)) {
+      fail('INVALID_CONFIG', 'invalid_config', key);
+    }
+    assertSafeKeys(value[key]);
+  }
+}
+
+function normalizeConfig(raw, viewUuid) {
+  assertObject(raw, 'viewConfig');
+  if (raw.viewUuid !== viewUuid) { fail('TARGET_MISMATCH', 'target_mismatch', viewUuid); }
+  return {
+    ...raw,
+    viewUuid,
+    staticConfig: assertObject(parseJson(raw.staticConfig || {}, 'staticConfig'), 'staticConfig'),
+    defaultConfig: assertObject(parseJson(raw.defaultConfig || {}, 'defaultConfig'), 'defaultConfig'),
+  };
+}
+
+function stable(value) {
+  if (Array.isArray(value)) { return value.map(stable); }
+  if (!object(value)) { return value; }
+  return Object.fromEntries(Object.keys(value).sort().map(key => [key, stable(value[key])]));
+}
+
+function configHash(value) {
+  return crypto.createHash('sha256').update(JSON.stringify(stable({
+    staticConfig: value.staticConfig, defaultConfig: value.defaultConfig,
+  }))).digest('hex');
+}
+
+function writableConfig(value) {
+  // updateConfig generates this timestamp; it is not a user setting.
+  const defaultConfig = { ...value.defaultConfig };
+  delete defaultConfig.latestUpdateTime;
+  return { staticConfig: value.staticConfig, defaultConfig };
+}
+
+// Objects merge recursively; arrays and complete condition expressions replace.
+function merge(base, patch) {
+  const result = { ...base };
+  for (const [key, value] of Object.entries(patch)) {
+    result[key] = object(value) && !['filter', 'dataRange'].includes(key)
+      ? merge(object(base[key]) ? base[key] : {}, value) : value;
+  }
+  return result;
+}
+
+function validatePatch(patch) {
+  assertObject(patch, 'config');
+  assertSafeKeys(patch);
+  if (!Object.keys(patch).length || Object.keys(patch).some(key => !['staticConfig', 'defaultConfig'].includes(key))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'staticConfig / defaultConfig');
+  }
+  for (const key of Object.keys(patch)) { assertObject(patch[key], key); }
+  const def = patch.defaultConfig || {};
+  const stat = patch.staticConfig || {};
+  for (const [key, value] of [['showFields', def.showFields], ['lockFieldIds', def.lockFieldIds], ['columnFilter', stat.columnFilter]]) {
+    if (value === undefined || (key === 'showFields' && value === 'all')) { continue; }
+    if (!Array.isArray(value) || value.some(id => typeof id !== 'string' || !id.trim()) || new Set(value).size !== value.length) {
+      fail('INVALID_CONFIG', 'invalid_config', key);
+    }
+    if (key === 'showFields' && !value.length) { fail('INVALID_CONFIG', 'invalid_config', key); }
+  }
+  if (def.widths !== undefined && def.widths !== null) {
+    assertObject(def.widths, 'widths');
+    for (const width of Object.values(def.widths)) {
+      if (typeof width !== 'number' || !Number.isFinite(width) || width <= 0) { fail('INVALID_CONFIG', 'invalid_config', 'widths'); }
+    }
+  }
+  if (def.filter !== undefined) { assertObject(def.filter, 'filter'); }
+  for (const key of ['values', 'operationValues']) {
+    if (def.filter?.[key] !== undefined) { assertObject(def.filter[key], `filter.${key}`); }
+  }
+  if (def.filter?.conditionType !== undefined && !['AND', 'OR'].includes(def.filter.conditionType)) {
+    fail('INVALID_CONFIG', 'invalid_config', 'filter.conditionType');
+  }
+  if (def.sort !== undefined && !Array.isArray(def.sort)) { fail('INVALID_CONFIG', 'invalid_config', 'sort'); }
+  if (def.sort?.some(rule => !object(rule) || typeof rule.id !== 'string' || !['y', 'n'].includes(rule.isAsc))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'sort');
+  }
+  if (stat.dataRange !== undefined) { assertObject(stat.dataRange, 'dataRange'); }
+  return patch;
+}
+
+function panelFields(panel) {
+  if (!object(panel) || !Array.isArray(panel.componentValueVoList)) { fail('UNSUPPORTED', 'unsupported'); }
+  const fields = [];
+  const visit = (items, parentId) => items.forEach(item => {
+    const id = item.componentId || item.id;
+    if (id) { fields.push({ id, parentId, name: item.varName, componentName: item.componentName,
+      supportVisible: item.supportVisible, showTerm: item.showTerm, operatorMap: item.operatorMap }); }
+    if (Array.isArray(item.children)) { visit(item.children, id); }
+  });
+  visit(panel.componentValueVoList);
+  return fields;
+}
+
+function validateFields(patch, fields) {
+  const known = new Map(fields.map(field => [field.id, field]));
+  const def = patch.defaultConfig || {};
+  const stat = patch.staticConfig || {};
+  const refs = [
+    ...(Array.isArray(def.showFields) ? def.showFields : []), ...(def.lockFieldIds || []),
+    ...Object.keys(def.widths || {}), ...(stat.columnFilter || []).filter(id => id !== 'all'),
+    ...Object.keys(def.filter?.values || {}), ...Object.keys(def.filter?.operationValues || {}),
+    ...(def.sort || []).map(rule => rule.id),
+  ];
+  for (const field of fields) {
+    if (['CascadeDateField', 'CascadeTimeZoneDateField', 'AddressField'].includes(field.componentName)) {
+      for (const suffix of ['_0', '_1']) { known.set(field.id + suffix, field); }
+    }
+  }
+  for (const id of refs) {
+    if (!known.has(id)) { fail('INVALID_CONFIG', 'invalid_config', `fieldId: ${id}`); }
+  }
+  for (const [id, op] of Object.entries(def.filter?.operationValues || {})) {
+    const operators = known.get(id)?.operatorMap;
+    if (Array.isArray(operators) && !operators.some(item => item.value === op)) {
+      fail('INVALID_CONFIG', 'invalid_config', `filter.operationValues.${id}: ${op}`);
+    }
+  }
+}
+
+function parseArgs(args) {
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (['--json', '--with-config', '--replace', '--help', '-h'].includes(arg)) { flags[arg] = true; continue; }
+    if (['--config', '--name', '--expected-hash', '--backup'].includes(arg)) {
+      if (!args[i + 1] || args[i + 1].startsWith('--')) { fail('USAGE', 'invalid_config', arg); }
+      flags[arg] = args[++i];
+      continue;
+    }
+    if (arg.startsWith('-')) { fail('USAGE', 'invalid_config', arg); }
+    positional.push(arg);
+  }
+  if (flags['--help'] || flags['-h']) { return { help: true }; }
+  const [action, appType, formUuid, viewUuid] = positional;
+  if (!ACTIONS.includes(action) || !appType || !formUuid || positional.length > (['inspect', 'save'].includes(action) ? 4 : 3)
+    || (['inspect', 'save'].includes(action) && !viewUuid)
+    || (['save', 'order'].includes(action) && !flags['--config'])
+    || (action === 'create' && !flags['--name']?.trim())) {
+    fail('USAGE', 'usage');
+  }
+  const allowed = { list: ['--with-config'], inspect: [], save: ['--config', '--expected-hash', '--backup', '--replace'], create: ['--name', '--backup'], order: ['--config', '--backup'] };
+  if (Object.keys(flags).some(flag => flag !== '--json' && !allowed[action].includes(flag))) { fail('USAGE', 'usage'); }
+  // IDs are path segments, never URLs or traversal components.
+  for (const id of [appType, formUuid, viewUuid].filter(Boolean)) {
+    if (!/^[A-Za-z0-9_-]+$/.test(id)) { fail('USAGE', 'invalid_config', id); }
+  }
+  return { action, appType, formUuid, viewUuid, flags };
+}
+
+function unwrap(response, endpoint) {
+  if (!response || response.success !== true || response.__needLogin || response.__csrfExpired) {
+    fail('API_ERROR', 'api_error', response?.errorMsg || response?.message || endpoint, {
+      endpoint, platformErrorCode: response?.errorCode,
+    });
+  }
+  return response.content;
+}
+
+function backup(value, filename) {
+  const output = filename ? path.resolve(filename) : path.join(resolveProjectRoot().projectRoot,
+    '.cache', 'openyida', 'form-view', `${Date.now()}-${crypto.randomUUID()}.json`);
+  fs.mkdirSync(path.dirname(output), { recursive: true });
+  fs.writeFileSync(output, JSON.stringify(value, null, 2), { flag: 'wx', mode: 0o600 });
+  return output;
+}
+
+async function execute(parsed, client = createYidaClient({ authRef: createAuthRef() })) {
+  const { action, appType, formUuid, viewUuid, flags } = parsed;
+  const prefix = `/dingtalk/web/${appType}/query/`;
+  const target = { appType, formUuid, ...(viewUuid ? { viewUuid } : {}) };
+  const read = async (endpoint, params) => unwrap(await client.postForm(prefix + endpoint, params), endpoint);
+  const list = async () => {
+    const form = await read('formdesign/getFormSchemaInfo.json', { formUuid });
+    if (!object(form) || !Array.isArray(form.multiViewInfos)) { fail('UNSUPPORTED', 'unsupported'); }
+    if (form.multiViewInfos.some(view => !object(view) || typeof view.viewUuid !== 'string' || !/^[A-Za-z0-9_-]+$/.test(view.viewUuid))
+      || new Set(form.multiViewInfos.map(view => view.viewUuid)).size !== form.multiViewInfos.length) { fail('UNSUPPORTED', 'unsupported'); }
+    return form.multiViewInfos.map(view => ({
+      ...view, name: parseJson(view.name, 'name'), status: parseJson(view.status, 'status'),
+    }));
+  };
+  const get = async (id) => normalizeConfig(await read('dataview/getViewConfig.json', { formUuid, viewUuid: id }), id);
+  const fields = async (id) => panelFields(unwrap(await client.get(prefix + 'dataview/getDataViewPanel.json', {
+    formUuid, viewUuid: id, pageType: 'manage', ccMode: 'tile',
+  }), 'dataview/getDataViewPanel.json'));
+  const views = await list();
+  if (viewUuid && !views.some(view => view.viewUuid === viewUuid)) { fail('TARGET_MISMATCH', 'target_mismatch', viewUuid); }
+  const output = { success: true, action, ...target };
+  if (action === 'list') {
+    const configs = [];
+    for (const view of views) {
+      configs.push(flags['--with-config'] ? { ...view, config: await get(view.viewUuid) } : view);
+    }
+    return { ...output, views: configs, totalCount: views.length };
+  }
+  if (action === 'inspect') {
+    const config = await get(viewUuid);
+    const view = views.find(item => item.viewUuid === viewUuid);
+    return { ...output, view, config, configHash: configHash(config), ...(view.viewType === 'table' ? { fields: await fields(viewUuid) } : {}) };
+  }
+  let params;
+  let endpoint;
+  let before;
+  let expected;
+  if (action === 'save') {
+    if (views.find(view => view.viewUuid === viewUuid).viewType !== 'table') { fail('UNSUPPORTED', 'unsupported'); }
+    const patch = validatePatch(parseJson(fs.readFileSync(flags['--config'], 'utf8'), 'config'));
+    if (flags['--replace'] && (!patch.staticConfig || !patch.defaultConfig || !flags['--expected-hash'])) {
+      fail('INVALID_CONFIG', 'invalid_config', '--replace requires staticConfig, defaultConfig, --expected-hash');
+    }
+    validateFields(patch, await fields(viewUuid));
+    before = await get(viewUuid);
+    if (flags['--expected-hash'] && flags['--expected-hash'] !== configHash(before)) { fail('CONFLICT', 'conflict'); }
+    expected = {
+      staticConfig: flags['--replace'] ? patch.staticConfig : merge(before.staticConfig, patch.staticConfig || {}),
+      defaultConfig: flags['--replace'] ? { ...patch.defaultConfig } : merge(before.defaultConfig, patch.defaultConfig || {}),
+    };
+    delete expected.defaultConfig.latestUpdateTime;
+    // Validate the patch, while preserving platform-owned or legacy settings as read.
+    if (Array.isArray(expected.defaultConfig.showFields) && expected.defaultConfig.lockFieldIds?.some(id => !expected.defaultConfig.showFields.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'lockFieldIds / showFields');
+    }
+    if (Array.isArray(expected.staticConfig.columnFilter) && !expected.staticConfig.columnFilter.includes('all')
+      && Array.isArray(expected.defaultConfig.showFields)
+      && expected.defaultConfig.showFields.some(id => !expected.staticConfig.columnFilter.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'columnFilter / showFields');
+    }
+    if (isDeepStrictEqual(writableConfig(expected), writableConfig(before))) {
+      return { ...output, changed: false, readbackVerified: true, config: before, configHash: configHash(before) };
+    }
+    // Re-read immediately before writing; the platform has no compare-and-swap API.
+    if (configHash(await get(viewUuid)) !== configHash(before)) { fail('CONFLICT', 'conflict'); }
+    params = { formUuid, viewUuid, staticConfig: JSON.stringify(expected.staticConfig), defaultConfig: JSON.stringify(expected.defaultConfig) };
+    endpoint = 'dataview/updateConfig.json';
+  } else if (action === 'order') {
+    expected = parseJson(fs.readFileSync(flags['--config'], 'utf8'), 'order');
+    const ids = views.map(view => view.viewUuid);
+    if (!Array.isArray(expected) || expected.length !== ids.length || new Set(expected).size !== ids.length || expected.some(id => !ids.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'order');
+    }
+    before = ids;
+    if (isDeepStrictEqual(before, expected)) { return { ...output, changed: false, views, readbackVerified: true }; }
+    if (!isDeepStrictEqual((await list()).map(view => view.viewUuid), before)) { fail('CONFLICT', 'conflict'); }
+    params = { formUuid, viewConfig: JSON.stringify(expected) };
+    endpoint = 'dataview/updateViewPageConfig.json';
+  } else {
+    expected = flags['--name'].trim();
+    before = views;
+    params = { formUuid, dataFormUuid: formUuid, viewType: 'table', name: JSON.stringify(buildYidaTitleI18n(expected)),
+      status: JSON.stringify({ PC: 'ACTIVATED', MOBILE: 'ACTIVATED' }) };
+    endpoint = 'dataview/createView.json';
+  }
+  const backupPath = backup({ ...target, action, config: before }, flags['--backup']);
+  const mutationDetails = { target, backupPath, retrySafe: false, sideEffectState: 'unknown', readbackAllowed: true };
+  try {
+    // Never replay a mutation automatically after transport failure or auth refresh.
+    unwrap(await client.postFormOnce(prefix + endpoint, params), endpoint);
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_VIEW_WRITE_FAILED', details: mutationDetails });
+  }
+  try {
+    if (action === 'save') {
+      const config = await get(viewUuid);
+      if (!isDeepStrictEqual(stable(writableConfig(expected)), stable(writableConfig(config)))) {
+        fail('READBACK_MISMATCH', 'readback_mismatch');
+      }
+      return { ...output, changed: true, backupPath, readbackVerified: true, config, configHash: configHash(config) };
+    }
+    const after = await list();
+    if (action === 'order' && !isDeepStrictEqual(after.map(view => view.viewUuid), expected)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+    if (action === 'create') {
+      const added = after.filter(view => !before.some(old => old.viewUuid === view.viewUuid));
+      if (added.length !== 1 || !Object.values(added[0].name || {}).includes(expected)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+      return { ...output, viewUuid: added[0].viewUuid, view: added[0], backupPath, readbackVerified: true };
+    }
+    return { ...output, views: after, backupPath, readbackVerified: true };
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_VIEW_READBACK_FAILED',
+      details: { ...mutationDetails, mutationAccepted: true, sideEffectState: 'accepted_unverified' } });
+  }
+}
+
+async function run(args, options = {}) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { process.stdout.write(t('form_view.usage') + '\n'); return; }
+  let result;
+  try { result = await execute(parsed, options.client); }
+  catch (error) {
+    if (error.isCliError) { throw error; }
+    throw new CliError(error.message, { code: 'FORM_VIEW_FAILED' });
+  }
+  process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+  return result;
+}
+
+module.exports = { run, execute, parseArgs, normalizeConfig, configHash, merge, validatePatch };

package/lib/core/command-manifest.js

@@ -526,6 +526,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     mutating_actions: ['connect', 'run', 'disconnect', 'logout'],
     note: 'Explicit local-agent control. Remote runs use only the current task grant and never read a personal OpenYida profile.',
   })],
+  ['form-view', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: ['list', 'inspect'],
+    mutating_actions: ['save', 'create', 'order'],
+  })],
   ['aggregate-table', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: false,
@@ -616,7 +622,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
     mutates_yida: true,
     mutates_local: true,
     read_actions: ['url', 'status'],
-    mutating_actions: ['setup', 'dismiss'],
+    mutating_actions: ['setup', 'dismiss', 'report'],
   })],
   ['i18n', sideEffect('mixed', {
     mutates_yida: true,
@@ -808,6 +814,12 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['connect', 'run', 'disconnect', 'logout'],
   })),
 
+  ...permissionEntries([
+    'form-view',
+  ], actionDependentPermission({
+    preauthorized_actions: ['save', 'create', 'order'],
+  })),
+
   ...permissionEntries([
     'aggregate-table',
   ], actionDependentPermission({
@@ -934,7 +946,7 @@ const COMMAND_PERMISSIONS = new Map([
   ...permissionEntries([
     'feedback',
   ], actionDependentPermission({
-    preauthorized_actions: ['setup', 'dismiss'],
+    preauthorized_actions: ['setup', 'dismiss', 'report'],
   })),
 
   ...permissionEntries([
@@ -1496,6 +1508,18 @@ const COMMAND_GROUPS = [
       },
       output: 'json',
       }),
+      command('form-view', ['form-view'], 'form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]', 'help.cmd_form_view', {
+        managedRun: { scope: 'actions', actions: {
+          list: { scope: 'app', appPosition: 1 },
+          inspect: { scope: 'app', appPosition: 1 },
+          save: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          create: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          order: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+        } },
+        output: 'json',
+        examples: ['openyida form-view list APP_XXX FORM_XXX --with-config --json', 'openyida form-view save APP_XXX FORM_XXX VIEW_XXX --config view-patch.json --json'],
+        notes: ['Reads native multiViewInfos and per-view staticConfig/defaultConfig. Saves a recursive object patch; arrays, filter and dataRange replace. --replace restores full staticConfig/defaultConfig and requires --expected-hash. showFields controls visibility and order, widths controls pixel widths, lockFieldIds controls frozen columns, filter controls default filtering, staticConfig.columnFilter controls available fields. Backups precede mutations and success requires readback. --expected-hash detects stale edits; the platform has no atomic compare-and-swap. Personal browser view settings can override published defaults. create adds a table view; order requires every existing view UUID exactly once. No delete operation.'],
+      }),
       command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json|--analysis-json]', 'help.cmd_get_schema', { managedRun: { scope: 'app', appPosition: 0 },
         examples: ['openyida get-schema APP_XXX FORM_XXX --field-map-json'],
       }),
@@ -1864,9 +1888,11 @@ const COMMAND_GROUPS = [
       command('export-conversation', ['export-conversation'], 'export-conversation [options]', 'help.cmd_export_conversation', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         requiresLogin: false,
       }),
-      command('feedback', ['feedback'], 'feedback <setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
+      command('feedback', ['feedback'], 'feedback <report|setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'actions', actions: { report: { scope: 'local' } } },
         requiresLogin: false,
         output: 'text|json',
+        examples: ['openyida feedback report --input summary.json --output-dir feedback-draft-001'],
+        notes: ['report prepares local review drafts only; no login, source checkout, update check or network submission.'],
       }),
       command('batch', ['batch'], 'batch <file>|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]', 'help.cmd_batch', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         output: 'text|json',

package/lib/core/locales/en.js

@@ -4,6 +4,15 @@
 'use strict';
 
 module.exports = {
+  form_view: {
+    usage: 'Usage: openyida form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]',
+    invalid_config: 'Invalid native view configuration or argument: %s',
+    target_mismatch: 'The view does not belong to the target form: %s',
+    api_error: 'Native view API failed: %s. Check platform permissions and edition availability; do not retry writes blindly.',
+    unsupported: 'The platform did not return a native multi-view list. Check the form type and platform support.',
+    conflict: 'The view changed since it was read. Inspect it again before saving.',
+    readback_mismatch: 'The saved view does not match readback. Keep the backup and inspect the remote view before retrying.',
+  },
   integration_manage: {'failed': 'Automation operation failed: {0}', 'usage': 'integration <monitor|copy|rename|delete> <appType> ...', 'desc_monitor': 'Read or save automation error monitors', 'desc_copy': 'Copy an automation as disabled', 'desc_rename': 'Rename an automation', 'desc_delete': 'Delete a disabled automation'},
   permission_manage: {'failed': 'Permission group operation failed: {0}', 'usage': 'permission-manage <copy|rename|delete> <appType> <formUuid> <packageUuid> [--name name] [--dry-run] [--confirm]', 'description': 'Copy, rename or delete a permission group'},
   matrix_manage: {'failed': 'Matrix operation failed: {0}', 'usage': 'matrix <list|detail|references|rows|create|update|delete|upsert-rows|delete-rows> [matrixId] [--file config.json] [--dry-run] [--confirm]', 'description': 'Manage permission matrix definitions, references and rows'},
@@ -148,6 +157,7 @@ module.exports = {
     cmd_validate_form: 'Validate form field JSON locally',
     cmd_update_form: 'Update a form page',
     cmd_list_forms: 'List forms/pages in an app',
+    cmd_form_view: 'Native form views: list, inspect and configure columns, widths, frozen columns and filters',
     cmd_aggregate_table: 'Manage aggregate tables (virtualView)',
     cmd_get_schema: 'Get one form Schema or all form Schemas',
     cmd_check_prd_completeness: 'Check resources, frontend menu hiding and application theme delivery',
@@ -224,7 +234,7 @@ module.exports = {
     cmd_formula_evaluate: 'Static-check Yida formula syntax and field refs',
     cmd_update: 'Check and update to latest version',
     cmd_export_conversation: 'Export AI conversation records',
-    cmd_feedback: 'Configure experience feedback form and local reminder state',
+    cmd_feedback: 'Prepare local issue reports, configure feedback forms and reminders',
     cmd_batch: 'Run OpenYida commands in batch',
     cmd_flash_to_prd: 'Convert flash notes or meeting notes to a PRD prompt',
     cmd_ai: 'Call Yida AI text and image recognition APIs',
@@ -2341,3 +2351,22 @@ Object.assign(module.exports.integration, {
   batch_readback_mismatch: 'Persisted batch node type, source or quantity differs from the submitted configuration.',
   create_opt_spec: '  --spec <file.json>            Configure batch retrieve/create, updates and branches with a structured spec',
 });
+
+module.exports.feedback_report = {
+  comparison: 'Test pass/fail requires a command, actual result and evidence.',
+  screenshots: 'Choose at most five PNG/JPEG/WebP screenshots of at most 10 MiB each.',
+  text: 'Feedback text fields must be strings of at most 12000 characters.',
+  list: 'Feedback lists must contain at most 40 text items.',
+  object: 'Feedback input must be a JSON object.',
+  required: 'Feedback input requires title and actual.',
+  count: 'occurrenceCount must be a positive integer when known.',
+  cause: 'cause must be an object.',
+  confirmed: 'A confirmed cause requires a summary and evidence.',
+  usage: 'Usage: openyida feedback report --input <summary.json> --output-dir <new-directory>',
+  duplicate: 'Duplicate feedback report option.',
+  options: 'Both --input and --output-dir are required.',
+  file: 'Feedback input must be a JSON file of at most 1 MiB.',
+  json: 'Feedback input is not valid JSON.',
+  help: 'report prepares local review drafts without login, a source checkout or network submission.',
+  login_hint: 'Ask your AI to prepare local feedback with yida-feedback; no GitHub account or source checkout is required.',
+};

package/lib/core/locales/zh.js

@@ -4,6 +4,15 @@
 'use strict';
 
 module.exports = {
+  form_view: {
+    usage: '用法：openyida form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <文件>] [--name <名称>] [--with-config] [--expected-hash <哈希>] [--backup <文件>] [--replace] [--json]',
+    invalid_config: '原生视图配置或参数无效：%s',
+    target_mismatch: '视图不属于目标表单：%s',
+    api_error: '原生视图接口失败：%s。请检查平台权限和版本能力，不要盲目重试写入。',
+    unsupported: '平台未返回原生多视图列表，请检查表单类型及平台支持情况。',
+    conflict: '视图在读取后发生变化，请重新检查配置再保存。',
+    readback_mismatch: '保存配置与回读结果不一致，请保留备份并核对远程视图后再重试。',
+  },
   integration_manage: {'failed': '自动化操作失败：{0}', 'usage': 'integration <monitor|copy|rename|delete> <appType> ...', 'desc_monitor': '查询或保存自动化异常监听', 'desc_copy': '复制自动化，默认停用', 'desc_rename': '重命名自动化', 'desc_delete': '删除已停用的自动化'},
   permission_manage: {'failed': '权限组操作失败：{0}', 'usage': 'permission-manage <copy|rename|delete> <appType> <formUuid> <packageUuid> [--name name] [--dry-run] [--confirm]', 'description': '复制、重命名或删除权限组'},
   matrix_manage: {'failed': '矩阵操作失败：{0}', 'usage': 'matrix <list|detail|references|rows|create|update|delete|upsert-rows|delete-rows> [matrixId] [--file config.json] [--dry-run] [--confirm]', 'description': '管理权限矩阵定义、引用及数据行'},
@@ -148,6 +157,7 @@ module.exports = {
     cmd_validate_form: '本地校验表单字段 JSON',
     cmd_update_form: '更新表单页面',
     cmd_list_forms: '列出应用下的表单/页面',
+    cmd_form_view: '原生表单视图：查询、检查并配置显示列、列宽、冻结列和筛选',
     cmd_aggregate_table: '管理聚合表（virtualView）',
     cmd_get_schema: '获取单个或全部表单 Schema',
     cmd_check_prd_completeness: '检查资源数量、前台菜单隐藏及应用主题同步',
@@ -224,7 +234,7 @@ module.exports = {
     cmd_formula_evaluate: '静态检查宜搭公式语法和字段引用',
     cmd_update: '检查并更新到最新版本',
     cmd_export_conversation: '导出 AI 对话记录',
-    cmd_feedback: '配置体验反馈表单和本地提醒状态',
+    cmd_feedback: '整理本地问题报告、配置反馈表单与提醒',
     cmd_batch: '批量执行 OpenYida 命令',
     cmd_flash_to_prd: '闪记 / 会议纪要转 PRD prompt',
     cmd_ai: '调用 AI 文生文和识图能力',
@@ -2295,3 +2305,22 @@ Object.assign(module.exports.integration, {
   batch_readback_mismatch: '平台回读的批量节点类型、来源或条数与提交不一致。',
   create_opt_spec: '  --spec <file.json>            使用结构化编排配置批量取数、批量新增、更新和分支',
 });
+
+module.exports.feedback_report = {
+  comparison: '测试通过或失败须提供真实命令、实际结果及证据。',
+  screenshots: '截图须为明确选择的 PNG/JPEG/WebP，每张至多 10 MiB，最多 5 张。',
+  text: '反馈文本字段须为不超过 12000 字符的字符串。',
+  list: '反馈列表须为至多 40 个文本项的数组。',
+  object: '反馈输入须为 JSON 对象。',
+  required: '反馈输入须包含 title 和 actual。',
+  count: '已知发生次数 occurrenceCount 须为正整数。',
+  cause: 'cause 须为对象。',
+  confirmed: '已确认的根因须包含说明 summary 和证据 evidence。',
+  usage: '用法：openyida feedback report --input <summary.json> --output-dir <新目录>',
+  duplicate: '反馈报告选项重复。',
+  options: '必须提供 --input 和 --output-dir。',
+  file: '反馈输入须为至多 1 MiB 的 JSON 文件。',
+  json: '反馈输入不是有效 JSON。',
+  help: 'report 仅生成本地待审阅材料，无需登录或源码，不联网提交。',
+  login_hint: '可请 AI 使用 yida-feedback 整理本地反馈材料，无需 GitHub 账号或源码。',
+};

package/lib/core/update.js

@@ -158,6 +158,8 @@ function getAutoUpdateIntervalMs(env = process.env) {
 }
 
 function shouldSkipAutoUpdateCommand(command, args = []) {
+  // Report preparation must work offline even in a global npm installation.
+  if (command === 'feedback' && args[0] === 'report') {return true;}
   if (!command || ['--help', '-h', '--version', '-v'].includes(command)) {
     return true;
   }