openyida 2026.10.18-3 → 2026.10.19

package/README.md

@@ -490,6 +490,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida create-form add-option <appType> <formUuid> <fieldLabel> <option1> [option2] ...` | Update a form page |
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
+| `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |

package/bin/yida.js

@@ -815,6 +815,11 @@ async function main() {
       break;
     }
 
+    case 'form-view': {
+      const { run } = require('../lib/app/form-view');
+      await run(args);
+      break;
+    }
     case 'aggregate-table': {
       const { run } = require('../lib/aggregate-table/aggregate-table');
       await run(args);

package/lib/app/canvas-compile.js

@@ -513,19 +513,19 @@ function findUnavailableCanvasInstanceApiIssues(source) {
   const guardPlugin = ({ types: types }) => ({
     name: 'yida-canvas-instance-api-guard',
     visitor: {
-      MemberExpression(path) {
+      'MemberExpression|OptionalMemberExpression'(path) {
         const object = path.node.object;
         const property = path.node.property;
         const propertyName = path.node.computed && types.isStringLiteral(property)
           ? property.value
-          : (types.isIdentifier(property) ? property.name : '');
+          : (!path.node.computed && types.isIdentifier(property) ? property.name : '');
 
-        if (types.isMemberExpression(object)) {
+        if (types.isMemberExpression(object) || types.isOptionalMemberExpression(object)) {
           const owner = object.object;
           const ownerProperty = object.property;
           const ownerPropertyName = object.computed && types.isStringLiteral(ownerProperty)
             ? ownerProperty.value
-            : (types.isIdentifier(ownerProperty) ? ownerProperty.name : '');
+            : (!object.computed && types.isIdentifier(ownerProperty) ? ownerProperty.name : '');
           if (
             types.isIdentifier(owner, { name: 'props' }) &&
             ownerPropertyName === 'utils' &&

package/lib/app/form-view.js

@@ -0,0 +1,332 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { isDeepStrictEqual } = require('util');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { resolveProjectRoot } = require('../core/utils');
+const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { buildYidaTitleI18n } = require('../core/yida-i18n');
+
+const ACTIONS = ['list', 'inspect', 'save', 'create', 'order'];
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function fail(code, key, detail, details) {
+  throw new CliError(t(`form_view.${key}`, detail || ''), { code: `FORM_VIEW_${code}`, details });
+}
+
+function parseJson(value, label) {
+  try { return typeof value === 'string' ? JSON.parse(value) : value; }
+  catch (_) { return fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function assertObject(value, label) {
+  if (!object(value)) { fail('INVALID_CONFIG', 'invalid_config', label); }
+  return value;
+}
+
+function assertSafeKeys(value) {
+  if (!value || typeof value !== 'object') { return; }
+  for (const key of Object.keys(value)) {
+    if (['__proto__', 'prototype', 'constructor'].includes(key)) {
+      fail('INVALID_CONFIG', 'invalid_config', key);
+    }
+    assertSafeKeys(value[key]);
+  }
+}
+
+function normalizeConfig(raw, viewUuid) {
+  assertObject(raw, 'viewConfig');
+  if (raw.viewUuid !== viewUuid) { fail('TARGET_MISMATCH', 'target_mismatch', viewUuid); }
+  return {
+    ...raw,
+    viewUuid,
+    staticConfig: assertObject(parseJson(raw.staticConfig || {}, 'staticConfig'), 'staticConfig'),
+    defaultConfig: assertObject(parseJson(raw.defaultConfig || {}, 'defaultConfig'), 'defaultConfig'),
+  };
+}
+
+function stable(value) {
+  if (Array.isArray(value)) { return value.map(stable); }
+  if (!object(value)) { return value; }
+  return Object.fromEntries(Object.keys(value).sort().map(key => [key, stable(value[key])]));
+}
+
+function configHash(value) {
+  return crypto.createHash('sha256').update(JSON.stringify(stable({
+    staticConfig: value.staticConfig, defaultConfig: value.defaultConfig,
+  }))).digest('hex');
+}
+
+function writableConfig(value) {
+  // updateConfig generates this timestamp; it is not a user setting.
+  const defaultConfig = { ...value.defaultConfig };
+  delete defaultConfig.latestUpdateTime;
+  return { staticConfig: value.staticConfig, defaultConfig };
+}
+
+// Objects merge recursively; arrays and complete condition expressions replace.
+function merge(base, patch) {
+  const result = { ...base };
+  for (const [key, value] of Object.entries(patch)) {
+    result[key] = object(value) && !['filter', 'dataRange'].includes(key)
+      ? merge(object(base[key]) ? base[key] : {}, value) : value;
+  }
+  return result;
+}
+
+function validatePatch(patch) {
+  assertObject(patch, 'config');
+  assertSafeKeys(patch);
+  if (!Object.keys(patch).length || Object.keys(patch).some(key => !['staticConfig', 'defaultConfig'].includes(key))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'staticConfig / defaultConfig');
+  }
+  for (const key of Object.keys(patch)) { assertObject(patch[key], key); }
+  const def = patch.defaultConfig || {};
+  const stat = patch.staticConfig || {};
+  for (const [key, value] of [['showFields', def.showFields], ['lockFieldIds', def.lockFieldIds], ['columnFilter', stat.columnFilter]]) {
+    if (value === undefined || (key === 'showFields' && value === 'all')) { continue; }
+    if (!Array.isArray(value) || value.some(id => typeof id !== 'string' || !id.trim()) || new Set(value).size !== value.length) {
+      fail('INVALID_CONFIG', 'invalid_config', key);
+    }
+    if (key === 'showFields' && !value.length) { fail('INVALID_CONFIG', 'invalid_config', key); }
+  }
+  if (def.widths !== undefined && def.widths !== null) {
+    assertObject(def.widths, 'widths');
+    for (const width of Object.values(def.widths)) {
+      if (typeof width !== 'number' || !Number.isFinite(width) || width <= 0) { fail('INVALID_CONFIG', 'invalid_config', 'widths'); }
+    }
+  }
+  if (def.filter !== undefined) { assertObject(def.filter, 'filter'); }
+  for (const key of ['values', 'operationValues']) {
+    if (def.filter?.[key] !== undefined) { assertObject(def.filter[key], `filter.${key}`); }
+  }
+  if (def.filter?.conditionType !== undefined && !['AND', 'OR'].includes(def.filter.conditionType)) {
+    fail('INVALID_CONFIG', 'invalid_config', 'filter.conditionType');
+  }
+  if (def.sort !== undefined && !Array.isArray(def.sort)) { fail('INVALID_CONFIG', 'invalid_config', 'sort'); }
+  if (def.sort?.some(rule => !object(rule) || typeof rule.id !== 'string' || !['y', 'n'].includes(rule.isAsc))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'sort');
+  }
+  if (stat.dataRange !== undefined) { assertObject(stat.dataRange, 'dataRange'); }
+  return patch;
+}
+
+function panelFields(panel) {
+  if (!object(panel) || !Array.isArray(panel.componentValueVoList)) { fail('UNSUPPORTED', 'unsupported'); }
+  const fields = [];
+  const visit = (items, parentId) => items.forEach(item => {
+    const id = item.componentId || item.id;
+    if (id) { fields.push({ id, parentId, name: item.varName, componentName: item.componentName,
+      supportVisible: item.supportVisible, showTerm: item.showTerm, operatorMap: item.operatorMap }); }
+    if (Array.isArray(item.children)) { visit(item.children, id); }
+  });
+  visit(panel.componentValueVoList);
+  return fields;
+}
+
+function validateFields(patch, fields) {
+  const known = new Map(fields.map(field => [field.id, field]));
+  const def = patch.defaultConfig || {};
+  const stat = patch.staticConfig || {};
+  const refs = [
+    ...(Array.isArray(def.showFields) ? def.showFields : []), ...(def.lockFieldIds || []),
+    ...Object.keys(def.widths || {}), ...(stat.columnFilter || []).filter(id => id !== 'all'),
+    ...Object.keys(def.filter?.values || {}), ...Object.keys(def.filter?.operationValues || {}),
+    ...(def.sort || []).map(rule => rule.id),
+  ];
+  for (const field of fields) {
+    if (['CascadeDateField', 'CascadeTimeZoneDateField', 'AddressField'].includes(field.componentName)) {
+      for (const suffix of ['_0', '_1']) { known.set(field.id + suffix, field); }
+    }
+  }
+  for (const id of refs) {
+    if (!known.has(id)) { fail('INVALID_CONFIG', 'invalid_config', `fieldId: ${id}`); }
+  }
+  for (const [id, op] of Object.entries(def.filter?.operationValues || {})) {
+    const operators = known.get(id)?.operatorMap;
+    if (Array.isArray(operators) && !operators.some(item => item.value === op)) {
+      fail('INVALID_CONFIG', 'invalid_config', `filter.operationValues.${id}: ${op}`);
+    }
+  }
+}
+
+function parseArgs(args) {
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (['--json', '--with-config', '--replace', '--help', '-h'].includes(arg)) { flags[arg] = true; continue; }
+    if (['--config', '--name', '--expected-hash', '--backup'].includes(arg)) {
+      if (!args[i + 1] || args[i + 1].startsWith('--')) { fail('USAGE', 'invalid_config', arg); }
+      flags[arg] = args[++i];
+      continue;
+    }
+    if (arg.startsWith('-')) { fail('USAGE', 'invalid_config', arg); }
+    positional.push(arg);
+  }
+  if (flags['--help'] || flags['-h']) { return { help: true }; }
+  const [action, appType, formUuid, viewUuid] = positional;
+  if (!ACTIONS.includes(action) || !appType || !formUuid || positional.length > (['inspect', 'save'].includes(action) ? 4 : 3)
+    || (['inspect', 'save'].includes(action) && !viewUuid)
+    || (['save', 'order'].includes(action) && !flags['--config'])
+    || (action === 'create' && !flags['--name']?.trim())) {
+    fail('USAGE', 'usage');
+  }
+  const allowed = { list: ['--with-config'], inspect: [], save: ['--config', '--expected-hash', '--backup', '--replace'], create: ['--name', '--backup'], order: ['--config', '--backup'] };
+  if (Object.keys(flags).some(flag => flag !== '--json' && !allowed[action].includes(flag))) { fail('USAGE', 'usage'); }
+  // IDs are path segments, never URLs or traversal components.
+  for (const id of [appType, formUuid, viewUuid].filter(Boolean)) {
+    if (!/^[A-Za-z0-9_-]+$/.test(id)) { fail('USAGE', 'invalid_config', id); }
+  }
+  return { action, appType, formUuid, viewUuid, flags };
+}
+
+function unwrap(response, endpoint) {
+  if (!response || response.success !== true || response.__needLogin || response.__csrfExpired) {
+    fail('API_ERROR', 'api_error', response?.errorMsg || response?.message || endpoint, {
+      endpoint, platformErrorCode: response?.errorCode,
+    });
+  }
+  return response.content;
+}
+
+function backup(value, filename) {
+  const output = filename ? path.resolve(filename) : path.join(resolveProjectRoot().projectRoot,
+    '.cache', 'openyida', 'form-view', `${Date.now()}-${crypto.randomUUID()}.json`);
+  fs.mkdirSync(path.dirname(output), { recursive: true });
+  fs.writeFileSync(output, JSON.stringify(value, null, 2), { flag: 'wx', mode: 0o600 });
+  return output;
+}
+
+async function execute(parsed, client = createYidaClient({ authRef: createAuthRef() })) {
+  const { action, appType, formUuid, viewUuid, flags } = parsed;
+  const prefix = `/dingtalk/web/${appType}/query/`;
+  const target = { appType, formUuid, ...(viewUuid ? { viewUuid } : {}) };
+  const read = async (endpoint, params) => unwrap(await client.postForm(prefix + endpoint, params), endpoint);
+  const list = async () => {
+    const form = await read('formdesign/getFormSchemaInfo.json', { formUuid });
+    if (!object(form) || !Array.isArray(form.multiViewInfos)) { fail('UNSUPPORTED', 'unsupported'); }
+    if (form.multiViewInfos.some(view => !object(view) || typeof view.viewUuid !== 'string' || !/^[A-Za-z0-9_-]+$/.test(view.viewUuid))
+      || new Set(form.multiViewInfos.map(view => view.viewUuid)).size !== form.multiViewInfos.length) { fail('UNSUPPORTED', 'unsupported'); }
+    return form.multiViewInfos.map(view => ({
+      ...view, name: parseJson(view.name, 'name'), status: parseJson(view.status, 'status'),
+    }));
+  };
+  const get = async (id) => normalizeConfig(await read('dataview/getViewConfig.json', { formUuid, viewUuid: id }), id);
+  const fields = async (id) => panelFields(unwrap(await client.get(prefix + 'dataview/getDataViewPanel.json', {
+    formUuid, viewUuid: id, pageType: 'manage', ccMode: 'tile',
+  }), 'dataview/getDataViewPanel.json'));
+  const views = await list();
+  if (viewUuid && !views.some(view => view.viewUuid === viewUuid)) { fail('TARGET_MISMATCH', 'target_mismatch', viewUuid); }
+  const output = { success: true, action, ...target };
+  if (action === 'list') {
+    const configs = [];
+    for (const view of views) {
+      configs.push(flags['--with-config'] ? { ...view, config: await get(view.viewUuid) } : view);
+    }
+    return { ...output, views: configs, totalCount: views.length };
+  }
+  if (action === 'inspect') {
+    const config = await get(viewUuid);
+    const view = views.find(item => item.viewUuid === viewUuid);
+    return { ...output, view, config, configHash: configHash(config), ...(view.viewType === 'table' ? { fields: await fields(viewUuid) } : {}) };
+  }
+  let params;
+  let endpoint;
+  let before;
+  let expected;
+  if (action === 'save') {
+    if (views.find(view => view.viewUuid === viewUuid).viewType !== 'table') { fail('UNSUPPORTED', 'unsupported'); }
+    const patch = validatePatch(parseJson(fs.readFileSync(flags['--config'], 'utf8'), 'config'));
+    if (flags['--replace'] && (!patch.staticConfig || !patch.defaultConfig || !flags['--expected-hash'])) {
+      fail('INVALID_CONFIG', 'invalid_config', '--replace requires staticConfig, defaultConfig, --expected-hash');
+    }
+    validateFields(patch, await fields(viewUuid));
+    before = await get(viewUuid);
+    if (flags['--expected-hash'] && flags['--expected-hash'] !== configHash(before)) { fail('CONFLICT', 'conflict'); }
+    expected = {
+      staticConfig: flags['--replace'] ? patch.staticConfig : merge(before.staticConfig, patch.staticConfig || {}),
+      defaultConfig: flags['--replace'] ? { ...patch.defaultConfig } : merge(before.defaultConfig, patch.defaultConfig || {}),
+    };
+    delete expected.defaultConfig.latestUpdateTime;
+    // Validate the patch, while preserving platform-owned or legacy settings as read.
+    if (Array.isArray(expected.defaultConfig.showFields) && expected.defaultConfig.lockFieldIds?.some(id => !expected.defaultConfig.showFields.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'lockFieldIds / showFields');
+    }
+    if (Array.isArray(expected.staticConfig.columnFilter) && !expected.staticConfig.columnFilter.includes('all')
+      && Array.isArray(expected.defaultConfig.showFields)
+      && expected.defaultConfig.showFields.some(id => !expected.staticConfig.columnFilter.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'columnFilter / showFields');
+    }
+    if (isDeepStrictEqual(writableConfig(expected), writableConfig(before))) {
+      return { ...output, changed: false, readbackVerified: true, config: before, configHash: configHash(before) };
+    }
+    // Re-read immediately before writing; the platform has no compare-and-swap API.
+    if (configHash(await get(viewUuid)) !== configHash(before)) { fail('CONFLICT', 'conflict'); }
+    params = { formUuid, viewUuid, staticConfig: JSON.stringify(expected.staticConfig), defaultConfig: JSON.stringify(expected.defaultConfig) };
+    endpoint = 'dataview/updateConfig.json';
+  } else if (action === 'order') {
+    expected = parseJson(fs.readFileSync(flags['--config'], 'utf8'), 'order');
+    const ids = views.map(view => view.viewUuid);
+    if (!Array.isArray(expected) || expected.length !== ids.length || new Set(expected).size !== ids.length || expected.some(id => !ids.includes(id))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'order');
+    }
+    before = ids;
+    if (isDeepStrictEqual(before, expected)) { return { ...output, changed: false, views, readbackVerified: true }; }
+    if (!isDeepStrictEqual((await list()).map(view => view.viewUuid), before)) { fail('CONFLICT', 'conflict'); }
+    params = { formUuid, viewConfig: JSON.stringify(expected) };
+    endpoint = 'dataview/updateViewPageConfig.json';
+  } else {
+    expected = flags['--name'].trim();
+    before = views;
+    params = { formUuid, dataFormUuid: formUuid, viewType: 'table', name: JSON.stringify(buildYidaTitleI18n(expected)),
+      status: JSON.stringify({ PC: 'ACTIVATED', MOBILE: 'ACTIVATED' }) };
+    endpoint = 'dataview/createView.json';
+  }
+  const backupPath = backup({ ...target, action, config: before }, flags['--backup']);
+  const mutationDetails = { target, backupPath, retrySafe: false, sideEffectState: 'unknown', readbackAllowed: true };
+  try {
+    // Never replay a mutation automatically after transport failure or auth refresh.
+    unwrap(await client.postFormOnce(prefix + endpoint, params), endpoint);
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_VIEW_WRITE_FAILED', details: mutationDetails });
+  }
+  try {
+    if (action === 'save') {
+      const config = await get(viewUuid);
+      if (!isDeepStrictEqual(stable(writableConfig(expected)), stable(writableConfig(config)))) {
+        fail('READBACK_MISMATCH', 'readback_mismatch');
+      }
+      return { ...output, changed: true, backupPath, readbackVerified: true, config, configHash: configHash(config) };
+    }
+    const after = await list();
+    if (action === 'order' && !isDeepStrictEqual(after.map(view => view.viewUuid), expected)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+    if (action === 'create') {
+      const added = after.filter(view => !before.some(old => old.viewUuid === view.viewUuid));
+      if (added.length !== 1 || !Object.values(added[0].name || {}).includes(expected)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+      return { ...output, viewUuid: added[0].viewUuid, view: added[0], backupPath, readbackVerified: true };
+    }
+    return { ...output, views: after, backupPath, readbackVerified: true };
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_VIEW_READBACK_FAILED',
+      details: { ...mutationDetails, mutationAccepted: true, sideEffectState: 'accepted_unverified' } });
+  }
+}
+
+async function run(args, options = {}) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { process.stdout.write(t('form_view.usage') + '\n'); return; }
+  let result;
+  try { result = await execute(parsed, options.client); }
+  catch (error) {
+    if (error.isCliError) { throw error; }
+    throw new CliError(error.message, { code: 'FORM_VIEW_FAILED' });
+  }
+  process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+  return result;
+}
+
+module.exports = { run, execute, parseArgs, normalizeConfig, configHash, merge, validatePatch };

package/lib/core/command-manifest.js

@@ -526,6 +526,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     mutating_actions: ['connect', 'run', 'disconnect', 'logout'],
     note: 'Explicit local-agent control. Remote runs use only the current task grant and never read a personal OpenYida profile.',
   })],
+  ['form-view', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: ['list', 'inspect'],
+    mutating_actions: ['save', 'create', 'order'],
+  })],
   ['aggregate-table', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: false,
@@ -808,6 +814,12 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['connect', 'run', 'disconnect', 'logout'],
   })),
 
+  ...permissionEntries([
+    'form-view',
+  ], actionDependentPermission({
+    preauthorized_actions: ['save', 'create', 'order'],
+  })),
+
   ...permissionEntries([
     'aggregate-table',
   ], actionDependentPermission({
@@ -1496,6 +1508,18 @@ const COMMAND_GROUPS = [
       },
       output: 'json',
       }),
+      command('form-view', ['form-view'], 'form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]', 'help.cmd_form_view', {
+        managedRun: { scope: 'actions', actions: {
+          list: { scope: 'app', appPosition: 1 },
+          inspect: { scope: 'app', appPosition: 1 },
+          save: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          create: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          order: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+        } },
+        output: 'json',
+        examples: ['openyida form-view list APP_XXX FORM_XXX --with-config --json', 'openyida form-view save APP_XXX FORM_XXX VIEW_XXX --config view-patch.json --json'],
+        notes: ['Reads native multiViewInfos and per-view staticConfig/defaultConfig. Saves a recursive object patch; arrays, filter and dataRange replace. --replace restores full staticConfig/defaultConfig and requires --expected-hash. showFields controls visibility and order, widths controls pixel widths, lockFieldIds controls frozen columns, filter controls default filtering, staticConfig.columnFilter controls available fields. Backups precede mutations and success requires readback. --expected-hash detects stale edits; the platform has no atomic compare-and-swap. Personal browser view settings can override published defaults. create adds a table view; order requires every existing view UUID exactly once. No delete operation.'],
+      }),
       command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json|--analysis-json]', 'help.cmd_get_schema', { managedRun: { scope: 'app', appPosition: 0 },
         examples: ['openyida get-schema APP_XXX FORM_XXX --field-map-json'],
       }),

package/lib/core/locales/en.js

@@ -4,6 +4,15 @@
 'use strict';
 
 module.exports = {
+  form_view: {
+    usage: 'Usage: openyida form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]',
+    invalid_config: 'Invalid native view configuration or argument: %s',
+    target_mismatch: 'The view does not belong to the target form: %s',
+    api_error: 'Native view API failed: %s. Check platform permissions and edition availability; do not retry writes blindly.',
+    unsupported: 'The platform did not return a native multi-view list. Check the form type and platform support.',
+    conflict: 'The view changed since it was read. Inspect it again before saving.',
+    readback_mismatch: 'The saved view does not match readback. Keep the backup and inspect the remote view before retrying.',
+  },
   integration_manage: {'failed': 'Automation operation failed: {0}', 'usage': 'integration <monitor|copy|rename|delete> <appType> ...', 'desc_monitor': 'Read or save automation error monitors', 'desc_copy': 'Copy an automation as disabled', 'desc_rename': 'Rename an automation', 'desc_delete': 'Delete a disabled automation'},
   permission_manage: {'failed': 'Permission group operation failed: {0}', 'usage': 'permission-manage <copy|rename|delete> <appType> <formUuid> <packageUuid> [--name name] [--dry-run] [--confirm]', 'description': 'Copy, rename or delete a permission group'},
   matrix_manage: {'failed': 'Matrix operation failed: {0}', 'usage': 'matrix <list|detail|references|rows|create|update|delete|upsert-rows|delete-rows> [matrixId] [--file config.json] [--dry-run] [--confirm]', 'description': 'Manage permission matrix definitions, references and rows'},
@@ -148,6 +157,7 @@ module.exports = {
     cmd_validate_form: 'Validate form field JSON locally',
     cmd_update_form: 'Update a form page',
     cmd_list_forms: 'List forms/pages in an app',
+    cmd_form_view: 'Native form views: list, inspect and configure columns, widths, frozen columns and filters',
     cmd_aggregate_table: 'Manage aggregate tables (virtualView)',
     cmd_get_schema: 'Get one form Schema or all form Schemas',
     cmd_check_prd_completeness: 'Check resources, frontend menu hiding and application theme delivery',

package/lib/core/locales/zh.js

@@ -4,6 +4,15 @@
 'use strict';
 
 module.exports = {
+  form_view: {
+    usage: '用法：openyida form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <文件>] [--name <名称>] [--with-config] [--expected-hash <哈希>] [--backup <文件>] [--replace] [--json]',
+    invalid_config: '原生视图配置或参数无效：%s',
+    target_mismatch: '视图不属于目标表单：%s',
+    api_error: '原生视图接口失败：%s。请检查平台权限和版本能力，不要盲目重试写入。',
+    unsupported: '平台未返回原生多视图列表，请检查表单类型及平台支持情况。',
+    conflict: '视图在读取后发生变化，请重新检查配置再保存。',
+    readback_mismatch: '保存配置与回读结果不一致，请保留备份并核对远程视图后再重试。',
+  },
   integration_manage: {'failed': '自动化操作失败：{0}', 'usage': 'integration <monitor|copy|rename|delete> <appType> ...', 'desc_monitor': '查询或保存自动化异常监听', 'desc_copy': '复制自动化，默认停用', 'desc_rename': '重命名自动化', 'desc_delete': '删除已停用的自动化'},
   permission_manage: {'failed': '权限组操作失败：{0}', 'usage': 'permission-manage <copy|rename|delete> <appType> <formUuid> <packageUuid> [--name name] [--dry-run] [--confirm]', 'description': '复制、重命名或删除权限组'},
   matrix_manage: {'failed': '矩阵操作失败：{0}', 'usage': 'matrix <list|detail|references|rows|create|update|delete|upsert-rows|delete-rows> [matrixId] [--file config.json] [--dry-run] [--confirm]', 'description': '管理权限矩阵定义、引用及数据行'},
@@ -148,6 +157,7 @@ module.exports = {
     cmd_validate_form: '本地校验表单字段 JSON',
     cmd_update_form: '更新表单页面',
     cmd_list_forms: '列出应用下的表单/页面',
+    cmd_form_view: '原生表单视图：查询、检查并配置显示列、列宽、冻结列和筛选',
     cmd_aggregate_table: '管理聚合表（virtualView）',
     cmd_get_schema: '获取单个或全部表单 Schema',
     cmd_check_prd_completeness: '检查资源数量、前台菜单隐藏及应用主题同步',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.10.18-3",
+  "version": "2026.10.19",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/yida-skills/SKILL.md

@@ -140,7 +140,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | `yida-skills/context` | 登录、退出、切换组织、组织版本/容量、Schema、fieldId、执行前检查 | `yida-login`、`yida-logout`、`yida-basic-info`、`yida-get-schema`、`yida-corp-efficiency` |
 | `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言、AI 老应用主题升级 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n`、`yida-upgrade-app-theme`（仅明确升级要求并 ask_human 确认） |
 | `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤、图片素材 | `yida-requirement-analysis`、`yida-prd`、`yida-design`、`yida-data-manage-ui`、`yida-image-assets` |
-| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、批量录入、数据记录 | `yida-create-form-page`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
+| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、批量录入、数据记录 | `yida-create-form-page`、`yida-form-view`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
 | `yida-skills/process` | 审批、流程表单、流程规则、节点/分支/字段权限、流程代理 | `yida-create-process`、`yida-process-rule`、`yida-flow-node-config`、`yida-agent-center` |
 | `yida-skills/page` | 工作台、办事门户、任务看板、自定义展示页、页面源码开发、平台 JSX 组件页面维护、页面发布、页面内导航、PPT 页面 | `yida-create-page`、`yida-canvas-custom-page`、`yida-custom-page`、`yida-canvas-data-binding`、`yida-canvas-upgrade`、`yida-publish-page`、`yida-openyida-publish-guard`、`yida-density`、`yida-nav-shell`、`yida-ppt-slider` |
 | `yida-skills/analytics` | 聚合表、虚拟视图、报表、统计、图表、Recharts、ECharts、经营分析看板、驾驶舱、大屏 | `yida-aggregate-table`、`yida-report`、`yida-rechart`、`yida-chart`、`yida-dashboard` |
@@ -190,6 +190,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | 产品化经营分析看板/驾驶舱交付 | `yida-dashboard`，按指标分析任务触发 |
 | 待办、操作队列、业务工作台或办事门户页面 | `yida-canvas-custom-page`；接真实数据时加载 `yida-canvas-data-binding`，不因页面名称或辅助统计转为经营看板 |
 | 批量录入、表格填写、多行编辑 | 默认 `yida-canvas-table-form`；已检测到平台 JSX 组件页面、native 页面或存量源码使用 `this.utils.yida.saveFormData` 时用 `yida-table-form` |
+| 原生数据管理页视图列表、显示列配置、字段显隐与顺序、列宽、冻结列、默认筛选、多视图 | `yida-form-view`；使用原生配置读写，保存前备份并回读，不通过 CSS 隐藏字段或重建自定义列表 |
 | 当前数据管理页换风格、只留横线、突出新增/筛选/行操作、列级强调、状态列标签、数据管理 UI 异常、自定义简单数据管理 | `yida-data-manage-ui`（优先于通用美化）；保留承载类型和业务，从目标推导维度、定位 token/CSS 并按页改写；备份发布并实测，不要求选择配方 |
 | 页面视觉方向、页面美化、去 AI 味、优化应用 UI、不好看、太乱、美化后不满意或恢复 | `yida-design`；已有资源优先走 `sub_skill/ui-improve/SKILL.md`，先展示视觉方案，经 `ask_human` 确认并备份后才交接实施，只改 UI；不满意恢复本轮前状态。新页面设计沿用原设计流程 |
 | 应用级主题、品牌色、全局换肤 | `yida-design`；已有应用按 ui-improve 确认应用级影响范围和恢复方式后执行 |

package/yida-skills/skills/yida-app/workflow/step-4-forms-processes.md

@@ -26,6 +26,7 @@
 9. 分析、复刻或迁移已有表单时，执行 `use_skill("yida-get-schema", "读取字段与行为语义")`，对每个核心表单读取一次 `--analysis-json`；把字段结构与 `actions/fieldBehaviors/associationRuleCount` 分开规划，字段事件动作使用 `yida-create-form-page` 的原子 `field-action`，数据源使用 `bind-datasource`。
 10. PRD 明确包含原生报表时，执行 `use_skill("yida-report", "按业务统计语义创建原生报表")`；地域分布、日历统计分别使用已支持的 `map`、`calendarHeatmap`，不得无声明退化成柱/饼图。
 11. PRD 明确包含集成自动化时，执行 `use_skill("yida-integration", "按业务动作创建自动化")`；已有应用先用全类型 `integration list --json` 盘点，创建时区分通知、数据新增/更新、审批完成、定时和手动触发。CLI 不支持的触发类型输出 capability gap，不得用通知替代。
+12. PRD 已规划原生列表的显示列、列宽、冻结、默认筛选或多视图时，表单就绪后执行 `use_skill("yida-form-view", "配置原生数据管理视图")`；用 list/inspect 取得真实视图 UUID、字段与操作符，再按规划 save/create/order 并回读。未要求视图配置的资源级任务不额外改设置；不通过 CSS 隐藏字段或改建自定义列表实现原生列配置。
 
 ## 字段配置文件示例
 

package/yida-skills/skills/yida-data-manage-ui/SKILL.md

@@ -7,6 +7,8 @@ description: 宜搭数据管理页美化方法：从用户目标推导线条、
 
 本技能沉淀的是**怎么改**，不是风格清单。先理解用户希望更容易看到什么、完成什么，再选择需要改变的视觉维度。可以产生未被命名、未收录的新样式；不要求先选 style ID，不要求运行配方生成器。已有明确风格、参考或方案授权时直接沿用，不重复选型；只有用户要求预览时展示方案，并区分示意与实际结果。
 
+字段显隐、字段顺序、列宽、冻结列、默认筛选及多视图配置使用 `yida-form-view` 的原生配置命令；不要用 CSS 隐藏字段、改虚拟表格几何或重建列表来实现。
+
 ## 1. 定位当前页面与约束
 
 从访问 URL、应用导航和浏览器定位 appType、formUuid、viewUuid。详情页 URL 不等于列表入口。用 `get-schema`、`list-forms` 和实际 DOM 核对原生/自定义类型、真实字段 ID、主题和源码；不能只看截图猜选择器。没有迁移要求时保留承载方式。

package/yida-skills/skills/yida-form-view/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: yida-form-view
+description: 宜搭原生数据管理视图配置。读取全部视图、显示列和表格设置，配置字段显隐与顺序、列宽、冻结列、默认筛选，新建表格视图及调整视图顺序。保留表单字段、业务记录和权限。
+---
+
+# 原生表单视图
+
+用于原生数据管理页的配置；仅换颜色、边框和密度用 `yida-data-manage-ui`，修改表单字段用 `yida-create-form-page`，查询记录用 `yida-data-management`。
+
+## 执行
+
+1. 按根技能核验登录和 app/form 上下文，复用已有表单。不要创建同名表单或用自定义页面替换原生列表。
+2. 执行 `openyida form-view list <appType> <formUuid> --with-config --json`，读取全部视图及 `staticConfig/defaultConfig`。选择返回的真实 `viewUuid`，不要猜测或把 `formUuid` 当作视图 ID。
+3. 执行 `openyida form-view inspect <appType> <formUuid> <viewUuid> --json`。消费 `fields[].id/operatorMap`、`config` 和 `configHash`；需要业务字段身份时同时使用 `get-schema --compact --resolve-fields`。操作符大小写与平台返回一致，不猜测 `eq/EQ`。
+4. 将本轮最小配置写到项目缓存 JSON 文件；执行 `openyida form-view save <appType> <formUuid> <viewUuid> --config <file> --expected-hash <configHash> --json`。CLI 先备份，再保存并回读；仅 `readbackVerified=true` 为配置成功。
+5. 打开真实数据管理页，验证列顺序、宽度、冻结、筛选、横向滚动及记录。个人浏览器视图偏好可能覆盖管理员默认配置，不能仅凭 API 回读宣称浏览器验收通过。
+
+## 配置映射
+
+| 配置 | 原生字段 |
+| --- | --- |
+| 默认显示列及顺序 | `defaultConfig.showFields`，真实字段 ID 数组；`"all"` 为全部；不能传空数组 |
+| 列宽 | `defaultConfig.widths`，字段 ID 到正数像素宽度的对象；`null` 清空宽度设置 |
+| 冻结列 | `defaultConfig.lockFieldIds`，已显示字段 ID 数组；`[]` 取消冻结 |
+| 默认筛选 | `defaultConfig.filter`，`values/operationValues/conditionType` 原生对象；`{}` 清空 |
+| 默认排序 | `defaultConfig.sort`，`[{"id":"真实字段ID","isAsc":"y"}]`；`n` 降序 |
+| 可用字段 | `staticConfig.columnFilter`，字段 ID 数组，平台 `['all']` 表示全部；它不是数据权限 |
+| 视图数据范围 | `staticConfig.dataRange`，使用现有原生规则结构；`{}` 清空，验收实际查询结果 |
+
+示例（必须替换为 inspect 返回的真实字段 ID）：
+
+```json
+{
+  "defaultConfig": {
+    "showFields": ["textField_REAL", "selectField_REAL"],
+    "widths": {"textField_REAL": 280, "selectField_REAL": 160},
+    "lockFieldIds": ["textField_REAL"]
+  }
+}
+```
+
+对象递归合并，数组替换；`filter` 和 `dataRange` 整体替换。未指定的配置保留；不要提交从空对象重造的整套设置。服务端自动更新 `latestUpdateTime`，不能把它当成用户配置。
+
+## 多视图
+
+```bash
+openyida form-view create <appType> <formUuid> --name "待处理订单" --json
+openyida form-view order <appType> <formUuid> --config <order.json> --json
+```
+
+create 只新建 table 视图，成功后复用返回 UUID 再配置。order 文件是包含当前全部视图 UUID 的数组（包括 form 视图），每项恰好一次，首项为默认入口。当前写配置仅支持 table，读取保留其他视图类型。
+
+## 失败与恢复
+
+- `FORM_VIEW_CONFLICT`：重新 inspect 后合并本轮修改；平台没有原子条件写入，避免多人同时编辑。
+- 平台版本或权限拒绝：保留平台错误，停止写入；不修改版本、授权或额度。
+- 写入传输错误/回读不一致：保留 `backupPath`，先 inspect 核对线上结果；不自动重放 create/save。
+- save 的备份文件包含原配置 `config.staticConfig/defaultConfig`。恢复时提取这两个对象写入恢复文件，重新 inspect 后使用 `save --replace --expected-hash <当前哈希>`；全量恢复必须提供两个完整配置对象，删除备份后新增的设置；其他资源和记录不在视图备份范围内。

package/yida-skills/skills-index.json

@@ -3,6 +3,42 @@
   "source": "openyida",
   "entry": "openyida",
   "skills": [
+    {
+      "name": "yida-form-view",
+      "path": "skills/yida-form-view/SKILL.md",
+      "display_name": "原生数据管理视图配置",
+      "description": "读取原生视图列表、显示列和表格设置，配置字段显隐与顺序、列宽、冻结列、默认筛选，新建表格视图和调整顺序。",
+      "category": "yida-skills/form",
+      "tags": [
+        "原生视图",
+        "显示列",
+        "冻结列",
+        "列宽",
+        "默认筛选"
+      ],
+      "aliases": [
+        "表格设置",
+        "数据管理字段显示配置"
+      ],
+      "positive_signals": [
+        "获取表单全部视图配置",
+        "设置数据管理页显示列",
+        "调整原生表格列宽",
+        "冻结订单名称列",
+        "新建待处理视图",
+        "配置默认筛选条件"
+      ],
+      "negative_signals": [
+        "仅美化颜色边框",
+        "新增业务记录",
+        "修改表单字段结构"
+      ],
+      "command_ids": [
+        "form-view",
+        "get-schema"
+      ],
+      "requires_login": true
+    },
     {
       "name": "yida-data-manage-ui",
       "path": "skills/yida-data-manage-ui/SKILL.md",