openyida 2026.10.19-4 → 2026.10.20

package/README.md

@@ -510,6 +510,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
+| `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |

package/bin/yida.js

@@ -832,6 +832,11 @@ async function main() {
       break;
     }
 
+    case 'custom-button': {
+      const { run } = require('../lib/app/custom-button');
+      await run(args);
+      break;
+    }
     case 'form-view': {
       const { run } = require('../lib/app/form-view');
       await run(args);

package/lib/app/create-form.js

@@ -1440,6 +1440,7 @@ function resolveFieldIdReferences(fieldComponents) {
           if (resolvedId) {
             info(t('create_form.filling_rule_resolved', targetLabel, resolvedId));
             rule.target = resolvedId;
+            rule.targetFieldId = resolvedId;
           } else {
             warn(t('create_form.filling_rule_failed', targetLabel));
           }
@@ -1451,6 +1452,7 @@ function resolveFieldIdReferences(fieldComponents) {
           if (resolvedSourceId) {
             info(t('create_form.filling_rule_resolved', sourceLabel, resolvedSourceId));
             rule.source = resolvedSourceId;
+            rule.sourceFieldId = resolvedSourceId;
           } else {
             warn(t('create_form.filling_rule_failed', sourceLabel));
           }
@@ -1476,6 +1478,7 @@ function resolveFieldIdReferences(fieldComponents) {
             if (resolvedId) {
               info(t('create_form.table_rule_resolved', ruleIndex + 1, targetLabel, resolvedId));
               rule.target = resolvedId;
+              rule.targetFieldId = resolvedId;
             } else {
               warn(t('create_form.table_rule_failed', targetLabel));
             }

package/lib/app/custom-button.js

@@ -0,0 +1,372 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { isDeepStrictEqual } = require('util');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { resolveProjectRoot } = require('../core/utils');
+const { createYidaClient } = require('../core/yida-client');
+
+const ACTIONS = ['list', 'inspect', 'options', 'create', 'update', 'delete'];
+const FIELDS = ['name', 'description', 'icon', 'actionType', 'actionConfig', 'permissionConfig', 'tableViewUuids', 'detailId'];
+const JSON_FIELDS = FIELDS.filter(key => key !== 'actionType');
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const idPattern = /^[A-Za-z0-9_-]+$/;
+// Same operator codes as the native custom-button rule editor.
+const OP_CODES = {
+  等于: 'Equal', 不等于: 'NotEqual', 大于: 'Bigger', 大于等于: 'BiggerOrEqual', 小于: 'Lesser', 小于等于: 'LesserOrEqual',
+  早于: 'Before', 晚于: 'After', 不早于: 'NotBefore', 不晚于: 'NotAfter', 包含: 'Contain', 不包含: 'NotContain',
+  开始为: 'BeginWith', 结束为: 'EndWith', 有值: 'ExistValue', 没有值: 'NotExistValue', 等于任意一个: 'EqualAny',
+  不等于任意一个: 'NotEqualAny', 在范围内: 'InRange', 不在范围内: 'NotInRange', 属于: 'Contain', 不属于: 'NotContain', 匹配: 'Like',
+};
+const NATIVE_OP_CODES = new Set(Object.values(OP_CODES));
+const SQL_OP_CODES = { eq: 'Equal', ne: 'NotEqual', gt: 'Bigger', ge: 'BiggerOrEqual', lt: 'Lesser', le: 'LesserOrEqual',
+  ilike: 'Like', in: 'EqualAny', not_in: 'NotEqualAny', is: 'NotExistValue', is_not: 'ExistValue', between: 'InRange' };
+const EN_OP_CODES = { equal: 'Equal', 'not equal': 'NotEqual', before: 'Before', after: 'After',
+  'not before': 'NotBefore', 'not after': 'NotAfter', 'is null': 'NotExistValue', 'is not null': 'ExistValue',
+  'in any': 'EqualAny', 'not in any': 'NotEqualAny', like: 'Like', between: 'InRange' };
+const EXCLUDED_VARIABLES = new Set(['originatorCorp', 'processInstanceId', 'createTime', 'modifiedTime', 'currentNodeName', 'taskId']);
+const RULE_TYPES = { TextField: 'rule_text', TextareaField: 'rule_text', SerialNumberField: 'rule_text',
+  NumberField: 'rule_number', SelectField: 'rule_select', RadioField: 'rule_radio', DateField: 'rule_date', EmployeeField: 'rule_employee' };
+
+function fail(code, key, detail = '', details) {
+  throw new CliError(t(`custom_button.${key}`, detail), { code: `CUSTOM_BUTTON_${code}`, details });
+}
+
+function parseJson(value, label) {
+  try { return typeof value === 'string' ? JSON.parse(value) : value; }
+  catch (_) { return fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function safe(value) {
+  if (!value || typeof value !== 'object') { return; }
+  for (const key of Object.keys(value)) {
+    if (['__proto__', 'prototype', 'constructor'].includes(key)) { fail('INVALID_CONFIG', 'invalid_config', key); }
+    safe(value[key]);
+  }
+}
+
+function stable(value) {
+  if (Array.isArray(value)) { return value.map(stable); }
+  return object(value) ? Object.fromEntries(Object.keys(value).sort().map(key => [key, stable(value[key])])) : value;
+}
+
+function configHash(value) {
+  return crypto.createHash('sha256').update(JSON.stringify(stable(writable(value)))).digest('hex');
+}
+
+function writable(value) {
+  return Object.fromEntries(FIELDS.map(key => [key, value[key] ?? null]));
+}
+
+function matchesReadback(saved, expected) {
+  return FIELDS.every(key => {
+    // The server expands i18n values with fallback translations and nullable
+    // metadata. Verify every supplied/preserved value without requiring those
+    // derived properties to have existed in the request.
+    if (['name', 'description'].includes(key) && object(expected[key]) && object(saved[key])) {
+      return Object.entries(expected[key]).every(([locale, value]) => locale === 'pureEn_US'
+        || isDeepStrictEqual(stable(saved[key][locale]), stable(value)));
+    }
+    return isDeepStrictEqual(stable(saved[key] ?? null), stable(expected[key] ?? null));
+  });
+}
+
+function normalize(raw) {
+  if (!object(raw) || typeof raw.buttonUuid !== 'string' || !idPattern.test(raw.buttonUuid)) {
+    fail('INVALID_RESPONSE', 'invalid_response', 'buttonUuid');
+  }
+  const value = { ...raw };
+  for (const key of JSON_FIELDS) { value[key] = raw[key] === null || raw[key] === undefined || raw[key] === '' ? null : parseJson(raw[key], key); }
+  if (!object(value.actionConfig)) { fail('INVALID_RESPONSE', 'invalid_response', 'actionConfig'); }
+  // Match the native editor: individual properties may themselves be JSON
+  // strings (arrays, booleans, or translated objects). Plain strings stay as is.
+  value.actionConfig = { ...value.actionConfig };
+  for (const [key, item] of Object.entries(value.actionConfig)) {
+    if (typeof item === 'string') {
+      try { value.actionConfig[key] = JSON.parse(item); } catch (_) { /* native scalar string */ }
+    }
+  }
+  for (const key of ['tableViewUuids', 'detailId']) { value[key] = value[key] || []; }
+  safe(value);
+  return value;
+}
+
+function parseArgs(args) {
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (Object.hasOwn(flags, arg)) { fail('USAGE', 'usage'); }
+    if (['--json', '--yes', '--help', '-h'].includes(arg)) { flags[arg] = true; continue; }
+    if (['--config', '--backup', '--expected-hash'].includes(arg)) {
+      if (!args[i + 1] || args[i + 1].startsWith('-')) { fail('USAGE', 'usage'); }
+      flags[arg] = args[++i]; continue;
+    }
+    if (arg.startsWith('-')) { fail('USAGE', 'usage'); }
+    positional.push(arg);
+  }
+  if (flags['--help'] || flags['-h']) { return { help: true }; }
+  const [action, appType, formUuid, buttonUuid] = positional;
+  const targeted = ['inspect', 'update', 'delete'].includes(action);
+  if (!ACTIONS.includes(action) || positional.length !== (targeted ? 4 : 3)
+    || [appType, formUuid, ...(targeted ? [buttonUuid] : [])].some(id => !id || !idPattern.test(id))
+    || (['create', 'update'].includes(action) && !flags['--config'])
+    || (action === 'delete' && (!flags['--yes'] || !flags['--expected-hash']))) { fail('USAGE', 'usage'); }
+  const allowed = {
+    list: [], inspect: [], options: [], create: ['--config', '--backup'],
+    update: ['--config', '--backup', '--expected-hash'], delete: ['--yes', '--backup', '--expected-hash'],
+  };
+  if (Object.keys(flags).some(key => key !== '--json' && !allowed[action].includes(key))) { fail('USAGE', 'usage'); }
+  return { action, appType, formUuid, buttonUuid, flags };
+}
+
+function unwrap(response, endpoint) {
+  if (!response || response.success !== true || response.__needLogin || response.__csrfExpired || response.content === false) {
+    fail('API_ERROR', 'api_error', response?.errorMsg || response?.message || endpoint,
+      { endpoint, platformErrorCode: response?.errorCode, needLogin: !!response?.__needLogin });
+  }
+  return response.content;
+}
+
+function array(value, label) {
+  if (!Array.isArray(value)) { fail('INVALID_RESPONSE', 'invalid_response', label); }
+  return value;
+}
+
+function ids(value, label, nonempty = false) {
+  if (!Array.isArray(value) || (nonempty && !value.length) || value.some(id => typeof id !== 'string' || !idPattern.test(id))
+    || new Set(value).size !== value.length) { fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function i18n(value, label, required) {
+  if (!required && value === null) { return; }
+  if (!object(value) || (required && !Object.entries(value).some(([key, text]) => key !== 'type' && typeof text === 'string' && text.trim()))
+    || Object.entries(value).some(([key, text]) => key !== 'type' && text !== null && typeof text !== 'string')) {
+    fail('INVALID_CONFIG', 'invalid_config', label);
+  }
+}
+
+function patchConfig(base, patch) {
+  if (!object(patch) || !Object.keys(patch).length || Object.keys(patch).some(key => !FIELDS.includes(key))) {
+    fail('INVALID_CONFIG', 'invalid_config', FIELDS.join(', '));
+  }
+  safe(patch);
+  for (const key of ['name', 'description', 'icon', 'actionConfig']) {
+    if (patch[key] !== undefined && !(patch[key] === null && ['description', 'icon'].includes(key)) && !object(patch[key])) {
+      fail('INVALID_CONFIG', 'invalid_config', key);
+    }
+  }
+  const changedAction = (patch.actionType !== undefined && patch.actionType !== base.actionType)
+    || (patch.actionConfig?.fillType !== undefined && patch.actionConfig.fillType !== base.actionConfig?.fillType)
+    || (patch.actionConfig?.urlType !== undefined && patch.actionConfig.urlType !== base.actionConfig?.urlType);
+  const next = { ...base, ...patch };
+  // Translations merge. Arrays, conditions and a changed action replace.
+  for (const key of ['name', 'description', 'icon', 'actionConfig']) {
+    if (patch[key] === undefined && !(key === 'actionConfig' && changedAction)) { next[key] = base[key]; continue; }
+    if (patch[key] === null) { next[key] = null; continue; }
+    next[key] = key === 'actionConfig' && changedAction ? { ...patch[key] } : { ...base[key], ...patch[key] };
+  }
+  // Reference validation enriches action/rule metadata. Never mutate the read
+  // snapshot used for backups, concurrency checks or no-op comparisons.
+  return JSON.parse(JSON.stringify(next));
+}
+
+function validateConfig(value) {
+  i18n(value.name, 'name', true);
+  if (Object.entries(value.name).some(([locale, text]) => /^[a-z]{2}_[A-Z]{2}$/.test(locale)
+    && typeof text === 'string' && text.length > 10)) { fail('INVALID_CONFIG', 'invalid_config', 'name (max 10)'); }
+  i18n(value.description, 'description', false);
+  if ((value.icon !== null && !object(value.icon)) || !object(value.actionConfig)) { fail('INVALID_CONFIG', 'invalid_config', 'icon / actionConfig'); }
+  ids(value.tableViewUuids, 'tableViewUuids'); ids(value.detailId, 'detailId');
+  const config = value.actionConfig;
+  if (value.actionType === 'fillInForm') {
+    if (config.fillType === 'fillCurrentForm') { ids(config.fieldsSelected, 'fieldsSelected', true); }
+    else if (config.fillType !== 'fillLinkageForm' || !config.linkageFormId) { fail('INVALID_CONFIG', 'invalid_config', 'fillType / linkageFormId'); }
+  } else if (value.actionType === 'invokeFlow') {
+    if (!config.processCode || !Array.isArray(config.needSecondCheck)
+      || config.needSecondCheck.length > 1 || config.needSecondCheck.some(item => item !== 'y')) {
+      fail('INVALID_CONFIG', 'invalid_config', 'processCode / needSecondCheck');
+    }
+  } else if (value.actionType === 'linkToPage') {
+    if (!['new', 'slide'].includes(config.openWith)) { fail('INVALID_CONFIG', 'invalid_config', 'openWith'); }
+    if (config.urlType === 'outer') {
+      let url;
+      try { url = new URL(config.url); } catch (_) { fail('INVALID_CONFIG', 'invalid_config', 'url'); }
+      if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password) { fail('INVALID_CONFIG', 'invalid_config', 'url'); }
+    } else if (config.urlType !== 'inner' || !config.urlFormUuid) { fail('INVALID_CONFIG', 'invalid_config', 'urlType / urlFormUuid'); }
+    if (config.paramInfo !== undefined && (!Array.isArray(config.paramInfo) || config.paramInfo.some(param => !object(param)
+      || typeof param.paramName !== 'string' || !param.paramName.trim()
+      || !['constant', 'variable', 'formula'].includes(param.paramType) || param.paramValue === undefined))) {
+      fail('INVALID_CONFIG', 'invalid_config', 'paramInfo');
+    }
+  } else { fail('INVALID_CONFIG', 'invalid_config', 'actionType'); }
+  if (value.permissionConfig !== null && !object(value.permissionConfig)) { fail('INVALID_CONFIG', 'invalid_config', 'permissionConfig'); }
+}
+
+async function execute(parsed, client = createYidaClient()) {
+  const { action, appType, formUuid, buttonUuid, flags } = parsed;
+  const target = { appType, formUuid, ...(buttonUuid ? { buttonUuid } : {}) };
+  const prefix = `/dingtalk/web/${appType}/query/`;
+  const read = async (endpoint, params = {}) => unwrap(await client.get(prefix + endpoint, { formUuid, ...params }), endpoint);
+  const list = async () => {
+    const rows = array(await read('customButtonManage/list.json'), 'buttons').map(normalize);
+    if (rows.some(row => row.formUuid && row.formUuid !== formUuid)
+      || new Set(rows.map(row => row.buttonUuid)).size !== rows.length) { fail('INVALID_RESPONSE', 'invalid_response', 'buttons'); }
+    return rows;
+  };
+  const metadata = async () => {
+    const info = await read('formdesign/getFormAndAppInfo.json', { appType });
+    const fields = array(info?.formDatas?.values?.[0]?.fields, 'fields');
+    const variables = array(await read('formProcInstData/getFormVariables.json', { appType, operatorMode: 'local' }), 'variables')
+      .filter(field => !EXCLUDED_VARIABLES.has(field.componentId) && Array.isArray(field.operatorMap) && field.operatorMap.length);
+    const relatedForms = array(await read('formdata/getAssociatedForm.json'), 'relatedForms');
+    const forms = array((await read('formdesign/getFormListOrder.json'))?.data, 'pages');
+    const flows = array((await read('appLogicflowBinding/listflowByFormUuid.json', { type: 6 }))?.data, 'flows');
+    const views = array(await read('dataview/listDataViewInForm.json', { appType }), 'views').filter(view => view.viewType === 'table');
+    const details = array(await read('configdesign/listConfigDesignInfo.json', { relationCode: 'DETAIL' }), 'details');
+    return { fields, variables, relatedForms, pages: forms, flows, tableViews: views, detailPages: details };
+  };
+  const output = { success: true, action, ...target };
+  if (action === 'options') { return { ...output, options: await metadata() }; }
+  const beforeList = await list();
+  const before = buttonUuid ? beforeList.find(button => button.buttonUuid === buttonUuid) : null;
+  if (buttonUuid && !before) { fail('NOT_FOUND', 'not_found', buttonUuid); }
+  if (action === 'list') { return { ...output, buttons: beforeList, totalCount: beforeList.length }; }
+  if (action === 'inspect') { return { ...output, button: before, configHash: configHash(before) }; }
+  if (flags['--expected-hash'] && flags['--expected-hash'] !== configHash(before)) { fail('CONFLICT', 'conflict'); }
+  let expected;
+  if (action !== 'delete') {
+    const patch = parseJson(fs.readFileSync(flags['--config'], 'utf8'), 'config');
+    if (action === 'create' && beforeList.length >= 10) { fail('LIMIT', 'limit'); }
+    const defaults = { name: {}, description: {}, icon: { type: 'icon', value: 'icon_diagonal_outlined' },
+      actionConfig: {}, permissionConfig: null, tableViewUuids: [], detailId: [] };
+    expected = patchConfig(before || defaults, patch);
+    if (expected.actionType === 'invokeFlow' && expected.actionConfig.needSecondCheck === undefined) {
+      expected.actionConfig.needSecondCheck = ['y'];
+    }
+    validateConfig(expected);
+    const options = await metadata();
+    validateReferences(expected, options, formUuid);
+    if (before && isDeepStrictEqual(stable(writable(expected)), stable(writable(before)))) {
+      return { ...output, changed: false, button: before, configHash: configHash(before), readbackVerified: true };
+    }
+  }
+  // List includes display bindings. A concurrent edit anywhere stops the write.
+  if (!isDeepStrictEqual(stable(beforeList.map(row => [row.buttonUuid, configHash(row)])),
+    stable((await list()).map(row => [row.buttonUuid, configHash(row)])))) { fail('CONFLICT', 'conflict'); }
+  const backupPath = flags['--backup'] ? path.resolve(flags['--backup']) : path.join(resolveProjectRoot().projectRoot,
+    '.cache', 'openyida', 'custom-button', `${Date.now()}-${crypto.randomUUID()}.json`);
+  fs.mkdirSync(path.dirname(backupPath), { recursive: true });
+  fs.writeFileSync(backupPath, JSON.stringify({ ...target, action, buttons: beforeList }, null, 2), { flag: 'wx', mode: 0o600 });
+  const mutationDetails = { target, backupPath, retrySafe: false, sideEffectState: 'unknown', readbackAllowed: true };
+  const endpoint = action === 'delete' ? 'customButtonManage/delete.json' : 'customButtonManage/saveButtonConfig.json';
+  const params = action === 'delete' ? { formUuid, buttonUuid } : serialize(expected, formUuid, buttonUuid);
+  try { unwrap(await client.postFormOnce(prefix + endpoint, params), endpoint); }
+  catch (error) { throw new CliError(error.message, { code: error.code || 'CUSTOM_BUTTON_WRITE_FAILED', details: { ...error.details, ...mutationDetails } }); }
+  try {
+    const after = await list();
+    let saved;
+    if (action === 'delete') {
+      if (after.some(row => row.buttonUuid === buttonUuid)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+    } else {
+      const added = after.filter(row => !beforeList.some(old => old.buttonUuid === row.buttonUuid));
+      saved = action === 'create' ? (added.length === 1 ? added[0] : null) : after.find(row => row.buttonUuid === buttonUuid);
+      if (!saved || !matchesReadback(saved, expected)) { fail('READBACK_MISMATCH', 'readback_mismatch'); }
+    }
+    return { ...output, buttonUuid: saved?.buttonUuid || buttonUuid, changed: true, backupPath, readbackVerified: true,
+      ...(saved ? { button: saved, configHash: configHash(saved) } : {}) };
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'CUSTOM_BUTTON_READBACK_FAILED',
+      details: { ...mutationDetails, mutationAccepted: true, sideEffectState: 'accepted_unverified' } });
+  }
+}
+
+function validateReferences(value, options, formUuid) {
+  const config = value.actionConfig;
+  const check = (condition, label) => { if (!condition) { fail('INVALID_CONFIG', 'invalid_config', label); } };
+  for (const id of value.tableViewUuids) { check(options.tableViews.some(view => view.viewUuid === id), `tableViewUuids: ${id}`); }
+  for (const id of value.detailId) { check(options.detailPages.some(page => page.designId === id), `detailId: ${id}`); }
+  if (value.actionType === 'fillInForm') {
+    if (config.fillType === 'fillCurrentForm') {
+      for (const id of config.fieldsSelected) { check(options.fields.some(field => field.fieldId === id), `fieldsSelected: ${id}`); }
+      value.relationId = formUuid;
+    } else {
+      const form = options.relatedForms.find(form => form.formUuid === config.linkageFormId);
+      check(form && form.appType && form.formType, 'linkageFormId');
+      check(!config.linkageFormAppType || config.linkageFormAppType === form.appType, 'linkageFormAppType');
+      check(!config.linkageFormType || config.linkageFormType === form.formType, 'linkageFormType');
+      config.linkageFormAppType = form.appType; config.linkageFormType = form.formType;
+      value.relationId = form.formUuid;
+    }
+  } else if (value.actionType === 'invokeFlow') {
+    check(options.flows.some(flow => flow.processCode === config.processCode && flow.status === 'y'), 'processCode (published type 6)');
+    value.relationId = config.processCode;
+  } else if (config.urlType === 'inner') {
+    const page = options.pages.find(page => page.formUuid === config.urlFormUuid);
+    check(page && ['receipt', 'process', 'report', 'display', 'portal', 'manage', 'datav'].includes(page.formType), 'urlFormUuid');
+    check(!config.urlFormType || config.urlFormType === page.formType, 'urlFormType');
+    config.urlFormType = page.formType;
+  }
+  const visit = (group, parentId) => {
+    check(object(group) && ['AND', 'OR'].includes(group.condition) && Array.isArray(group.rules) && group.rules.length, 'permissionConfig');
+    group.conditionCode = group.condition === 'AND' ? '&&' : '||';
+    group.ruleId = group.ruleId || `group-${crypto.randomUUID()}`;
+    if (parentId) { group.parentId = parentId; }
+    for (const rule of group.rules) {
+      check(object(rule), 'permissionConfig.rules');
+      if (rule.rules) { visit(rule, group.ruleId); continue; }
+      const field = options.variables.find(field => field.id === rule.id);
+      // Platform metadata uses SQL keys (eq, in, is...) while saved editor
+      // trees may use labels or canonical codes. Resolve through the same field.
+      const operator = field?.operatorMap?.find(op => op.value === rule.op || op.label === rule.op || op.labelEn === rule.op
+        || (OP_CODES[op.label] || EN_OP_CODES[op.labelEn] || SQL_OP_CODES[op.value]) === rule.op);
+      check(operator, `permissionConfig: ${rule.id} / ${rule.op}`);
+      const code = operator.opCode || OP_CODES[operator.label] || EN_OP_CODES[operator.labelEn] || SQL_OP_CODES[operator.value]
+        || OP_CODES[rule.op] || (NATIVE_OP_CODES.has(rule.op) ? rule.op : null);
+      check(code && (rule.opCode === undefined || rule.opCode === code), 'permissionConfig.opCode');
+      rule.opCode = code;
+      if (rule.valueType === undefined) { rule.valueType = rule.extValue === 'column' ? 'column' : 'literal'; }
+      check(['literal', 'column'].includes(rule.valueType), 'permissionConfig.valueType');
+      check(rule.value !== undefined || ['ExistValue', 'NotExistValue'].includes(code), 'permissionConfig.value');
+      // Native runtime evaluates ruleValue using the component's rule parser;
+      // id/op/value alone renders in the editor but cannot execute correctly.
+      rule.ruleId = rule.ruleId || `item-${crypto.randomUUID()}`;
+      rule.parentId = group.ruleId;
+      if (field.componentName) { rule.componentType = field.componentName; }
+      rule.ruleType = rule.ruleType || RULE_TYPES[rule.componentType] || 'rule_text';
+      rule.name = rule.name || field.varName?.zh_CN || field.varName?.en_US || rule.id;
+      rule.extValue = rule.valueType === 'column' ? 'column' : 'value';
+      rule.ruleValue = rule.value ?? '';
+      if (rule.value === undefined) { rule.value = ''; }
+    }
+  };
+  if (value.permissionConfig) { visit(value.permissionConfig); }
+  for (const param of config.paramInfo || []) {
+    if (param.paramType === 'variable') {
+      check(['formUuid', 'formInstId'].includes(param.paramValue) || options.fields.some(field => field.fieldId === param.paramValue), 'paramInfo.paramValue');
+    }
+  }
+}
+
+function serialize(value, formUuid, buttonUuid) {
+  const params = { formUuid, buttonUuid: buttonUuid || '' };
+  for (const key of FIELDS) {
+    params[key] = JSON_FIELDS.includes(key)
+      ? (value[key] === null || (['tableViewUuids', 'detailId'].includes(key) && !value[key].length) ? '' : JSON.stringify(value[key])) : value[key];
+  }
+  if (value.actionType !== 'linkToPage') { params.relationId = value.relationId; }
+  return params;
+}
+
+async function run(args, options = {}) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { process.stdout.write(t('custom_button.usage') + '\n'); return; }
+  const result = await execute(parsed, options.client);
+  process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+  return result;
+}
+
+module.exports = { run, execute, parseArgs, normalize, configHash, patchConfig, validateConfig, validateReferences, serialize };

package/lib/app/services/form-compiler.js

@@ -1375,6 +1375,7 @@ function resolveFieldIdReferences(fieldComponents) {
           const resolvedId = labelToFieldId[targetLabel];
           if (resolvedId) {
             rule.target = resolvedId;
+            rule.targetFieldId = resolvedId;
           }
         }
         // 解析 source 中的 @label:xxx 引用
@@ -1383,6 +1384,7 @@ function resolveFieldIdReferences(fieldComponents) {
           const resolvedSourceId = labelToFieldId[sourceLabel];
           if (resolvedSourceId) {
             rule.source = resolvedSourceId;
+            rule.sourceFieldId = resolvedSourceId;
           }
         }
       });
@@ -1403,6 +1405,7 @@ function resolveFieldIdReferences(fieldComponents) {
             const resolvedId = labelToFieldId[targetLabel];
             if (resolvedId) {
               rule.target = resolvedId;
+              rule.targetFieldId = resolvedId;
             }
           }
         });

package/lib/core/command-manifest.js

@@ -542,6 +542,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     mutating_actions: ['connect', 'run', 'disconnect', 'logout'],
     note: 'Explicit local-agent control. Remote runs use only the current task grant and never read a personal OpenYida profile.',
   })],
+  ['custom-button', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: ['list', 'inspect', 'options'],
+    mutating_actions: ['create', 'update', 'delete'],
+  })],
   ['cool-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'templates', 'get'], mutating_actions: ['create'] })],
   ['data-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'get', 'probe', 'release-check', 'refs'], mutating_actions: ['create', 'save', 'publish', 'release-get', 'release-save', 'release-test'], note: 'release-get reads broadcast settings but the native backend may initialize the application cool app; classify it conservatively as a possible mutation.' })],
   ['form-view', sideEffect('mixed', {
@@ -847,6 +853,13 @@ const COMMAND_PERMISSIONS = new Map([
     preauthorized_actions: ['save', 'create', 'order'],
   })),
 
+  ...permissionEntries([
+    'custom-button',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'update'],
+    ask_actions: ['delete'],
+  })),
+
   ...permissionEntries([
     'aggregate-table',
   ], actionDependentPermission({
@@ -1608,6 +1621,19 @@ const COMMAND_GROUPS = [
         examples: ['openyida form-view list APP_XXX FORM_XXX --with-config --json', 'openyida form-view save APP_XXX FORM_XXX VIEW_XXX --config view-patch.json --json'],
         notes: ['Reads native multiViewInfos and per-view staticConfig/defaultConfig. Saves a recursive object patch; arrays, filter and dataRange replace. --replace restores full staticConfig/defaultConfig and requires --expected-hash. showFields controls visibility and order, widths controls pixel widths, lockFieldIds controls frozen columns, filter controls default filtering, staticConfig.columnFilter controls available fields. Backups precede mutations and success requires readback. --expected-hash detects stale edits; the platform has no atomic compare-and-swap. Personal browser view settings can override published defaults. create adds a table view; order requires every existing view UUID exactly once. No delete operation.'],
       }),
+      command('custom-button', ['custom-button'], 'custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]', 'help.cmd_custom_button', {
+        managedRun: { scope: 'actions', actions: {
+          list: { scope: 'app', appPosition: 1 },
+          inspect: { scope: 'app', appPosition: 1 },
+          options: { scope: 'app', appPosition: 1 },
+          create: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          update: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          delete: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+        } },
+        output: 'json',
+        examples: ['openyida custom-button options APP_XXX FORM_XXX --json', 'openyida custom-button create APP_XXX FORM_XXX --config button.json --json'],
+        notes: ['Manages native form custom buttons: edit current fields, fill an associated form, invoke a published manual custom-button flow (type 6), or open a page. options reads eligible fields, conditions, forms, flows and display locations. Updates merge action properties and translations; arrays and permissionConfig replace. Changing action type, fillType or urlType requires a complete new actionConfig. Saves back up first and verify by readback; writes are never replayed automatically. delete permanently removes the button definition and requires --yes and --expected-hash from inspect. This differs from removing a display reference. Platform permissions, edition limits, 10-button limit, and completed-process restrictions still apply. No runtime button execution. See docs/guides/custom-buttons.md.'],
+      }),
       command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json|--analysis-json]', 'help.cmd_get_schema', { managedRun: { scope: 'app', appPosition: 0 },
         examples: ['openyida get-schema APP_XXX FORM_XXX --field-map-json'],
       }),

package/lib/core/locales/en.js

@@ -4,6 +4,16 @@
 'use strict';
 
 module.exports = {
+  custom_button: {
+    'usage': 'Usage: openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
+    'invalid_config': 'Invalid configuration or argument: {0}',
+    'invalid_response': 'Incomplete platform custom-button response: {0}',
+    'api_error': 'Custom button API failed: {0}. Check login, permissions and edition availability.',
+    'not_found': 'Button does not exist in the target form: {0}',
+    'conflict': 'Configuration changed. Inspect again before saving.',
+    'limit': 'A form supports at most 10 custom buttons.',
+    'readback_mismatch': 'Saved custom button does not match readback. Keep the backup and inspect remote state.'
+  },
   dws_external: {'note': 'dws is an independent external tool. OpenYida only shows installation instructions; it does not download or install it.', 'install_guide': 'Show official DingTalk CLI installation instructions'},
   cool_card: {'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
   data_card: {'description':'Create, configure, publish and distribute native YiDA data cards','usage':'Usage: openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'Native data card operation stopped: {0}','conflict':'The draft changed. Read it again before saving or publishing.','mismatch':'Readback does not match the expected schema or published state. Keep the backup and inspect the card before retrying.'},
@@ -124,6 +134,7 @@ module.exports = {
 
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
+    cmd_custom_button: 'Native custom buttons: inspect and configure form edits, automation flows and page links',
     cmd_check_design: 'Validate design documents, theme tokens and PRD handoff',
     subtitle: 'AI-powered low-code development tool for Yida',
     usage: 'Usage:',

package/lib/core/locales/zh.js

@@ -4,6 +4,16 @@
 'use strict';
 
 module.exports = {
+  custom_button: {
+    'usage': '用法：openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
+    'invalid_config': '配置或参数无效：{0}',
+    'invalid_response': '平台返回的按钮配置不完整：{0}',
+    'api_error': '自定义按钮接口失败：{0}。请检查登录、权限和版本支持。',
+    'not_found': '按钮不存在于目标表单：{0}',
+    'conflict': '配置已变化，请重新查询后再保存。',
+    'limit': '单个表单最多支持 10 个自定义按钮。',
+    'readback_mismatch': '保存后的配置与回读不一致，请保留备份并检查远端状态。'
+  },
   dws_external: {'note': 'dws 是独立的外部工具；OpenYida 仅提供安装指引，不下载或安装它。', 'install_guide': '显示钉钉 CLI 官方安装指引'},
   cool_card: {'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
   data_card: {'description':'创建、配置、发布原生数据卡片并管理投放播报','usage':'用法： openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'原生数据卡片操作已停止：{0}','conflict':'卡片草稿已发生变化，请重新读取后再保存或发布。','mismatch':'回读配置或发布状态与预期不一致，请保留备份并检查卡片后再重试。'},
@@ -124,6 +134,7 @@ module.exports = {
 
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
+    cmd_custom_button: '原生自定义按钮：查询、配置填写表单、自动化流及页面跳转',
     cmd_check_design: '检查设计文档、主题变量与 PRD 交接',
     subtitle: '宜搭低代码 AI 开发工具',
     usage: '用法:',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.10.19-4",
+  "version": "2026.10.20",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/yida-skills/SKILL.md

@@ -144,7 +144,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | `yida-skills/context` | 登录、退出、切换组织、组织版本/容量、Schema、fieldId、执行前检查 | `yida-login`、`yida-logout`、`yida-basic-info`、`yida-get-schema`、`yida-corp-efficiency` |
 | `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言、AI 老应用主题升级 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n`、`yida-upgrade-app-theme`（仅明确升级要求并 ask_human 确认） |
 | `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤、图片素材 | `yida-requirement-analysis`、`yida-prd`、`yida-design`、`yida-data-manage-ui`、`yida-image-assets` |
-| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、批量录入、数据记录 | `yida-create-form-page`、`yida-form-view`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
+| `yida-skills/form` | 表单字段、公式、校验、业务关联规则、原生自定义按钮、批量录入、数据记录 | `yida-create-form-page`、`yida-custom-button`、`yida-form-view`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
 | `yida-skills/process` | 审批、流程表单、流程规则、节点/分支/字段权限、流程代理 | `yida-create-process`、`yida-process-rule`、`yida-flow-node-config`、`yida-agent-center` |
 | `yida-skills/page` | 工作台、办事门户、任务看板、自定义展示页、页面源码开发、平台 JSX 组件页面维护、页面发布、页面内导航、PPT 页面 | `yida-create-page`、`yida-canvas-custom-page`、`yida-custom-page`、`yida-canvas-data-binding`、`yida-task-center`（仅显式选择自定义待办）、`yida-canvas-upgrade`、`yida-publish-page`、`yida-openyida-publish-guard`、`yida-density`、`yida-nav-shell`、`yida-ppt-slider` |
 | `yida-skills/analytics` | 用户显式指定宜搭原生数据卡片（含其投放播报）；聚合表、虚拟视图、报表、统计、图表、Recharts、ECharts、经营分析看板、驾驶舱、大屏 | `yida-data-card`、`yida-aggregate-table`、`yida-report`、`yida-rechart`、`yida-chart`、`yida-dashboard` |
@@ -198,6 +198,7 @@ Fast / Plan 选定的主题和主色属于整个应用：导航、原生页、
 | 增加待办中心、审批工作台或任务页签，但未指定自定义页面 | 不加载 `yida-task-center`、不默认创建自定义待办页面；先复用原生入口，已有入口整理用 `yida-nav-group`。完整应用仍由 `yida-app` 编排；Agent 建议自定义实现时先 ask_human，明确同意后才交接；Fast、通用授权和已有 Canvas 均不能替代该选择 |
 | 业务操作队列、业务工作台或办事门户页面 | `yida-canvas-custom-page`；接业务数据时加载 `yida-canvas-data-binding`，不因页面名称或辅助统计转为经营看板；不顺带新增自定义审批待办中心 |
 | 批量录入、表格填写、多行编辑 | 默认 `yida-canvas-table-form`；已检测到平台 JSX 组件页面、native 页面或存量源码使用 `this.utils.yida.saveFormData` 时用 `yida-table-form` |
+| 页面设置中的自定义按钮、客户跟进/分配、审批后发起订单、按钮触发自动化或打开页面 | `yida-custom-button`；配置原生按钮定义和显示位置，自定义页面内 React 按钮不走此入口 |
 | 原生数据管理页视图列表、显示列配置、字段显隐与顺序、列宽、冻结列、默认筛选、多视图 | `yida-form-view`；使用原生配置读写，保存前备份并回读，不通过 CSS 隐藏字段或重建自定义列表 |
 | 当前数据管理页换风格、只留横线、突出新增/筛选/行操作、列级强调、状态列标签、数据管理 UI 异常、自定义简单数据管理 | `yida-data-manage-ui`（优先于通用美化）；保留承载类型和业务，从目标推导维度、定位 token/CSS 并按页改写；备份发布并实测，不要求选择配方 |
 | 页面视觉方向、页面美化、去 AI 味、优化应用 UI、不好看、太乱、美化后不满意或恢复 | `yida-design`；已有资源优先走 `sub_skill/ui-improve/SKILL.md`，先展示视觉方案，经 `ask_human` 确认并备份后才交接实施，只改 UI；不满意恢复本轮前状态。新页面设计沿用原设计流程 |

package/yida-skills/skills/yida-custom-button/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: yida-custom-button
+description: 配置已有普通表单或流程表单的原生自定义按钮。用于客户跟进、线索分配、审批后发起订单、触发自动化或打开业务页面；不用于自定义页面内的 React 按钮。
+---
+
+# 表单自定义按钮
+
+使用 `openyida custom-button` 管理「页面设置 > 自定义按钮」中的按钮定义及显示位置。
+
+| 业务场景 | 动作 |
+| --- | --- |
+| 分配客户跟进人、员工转正、补充当前记录 | `fillInForm` / `fillCurrentForm`，选择可修改字段 |
+| 从客户填写跟进记录、采购审批后发起订单 | `fillInForm` / `fillLinkageForm`，选择平台返回的被关联表单 |
+| 手动执行复杂业务处理 | `invokeFlow`，绑定当前表单已发布的自定义按钮手动触发流（type 6） |
+| 查看业务说明、进入应用页面或外部系统 | `linkToPage`，应用内页面或 HTTP(S) 链接 |
+
+先查目标表单的按钮和可选资源，按业务意图编写配置。不要仅凭表单名猜字段或资源 ID。
+
+```bash
+openyida custom-button list <appType> <formUuid> --json
+openyida custom-button options <appType> <formUuid> --json
+openyida custom-button inspect <appType> <formUuid> <buttonUuid> --json
+openyida custom-button create <appType> <formUuid> --config button.json --json
+openyida custom-button update <appType> <formUuid> <buttonUuid> --config patch.json --expected-hash <configHash> --json
+```
+
+`options` 返回字段、筛选变量、被关联表单、页面、type 6 自动化流、表格视图和自定义详情页。没有符合条件的流时，用 `yida-integration` 配置按钮手动触发的自动化；本命令不会创建或执行自动化。
+
+按钮名称的每种语言文案最长 10 个字符。平台会自动补齐备用翻译与空元数据；CLI 回读会核对显式设置和原有翻译，接受这些平台补充项。
+
+可用条件会补齐原生字段类型、规则类型、`ruleValue` 和组/条目 ID；只保存 `id/op/value` 可能在编辑器中可见却无法执行。真实测试应分别验证符合与不符合条件的记录。创建手动触发流当前需在平台设计器完成，再从 `options` 返回的已发布流中绑定。
+
+修改当前记录示例（用查询得到的 ID 替换占位符）：
+
+```json
+{
+  "name": {"type":"i18n","zh_CN":"分配","en_US":"Assign"},
+  "actionType":"fillInForm",
+  "actionConfig": {"fillType":"fillCurrentForm","fieldsSelected":["实际字段ID"]},
+  "tableViewUuids":["实际表格视图ID"],
+  "detailId":[]
+}
+```
+
+关联表单的 `actionConfig` 使用 `fillType: fillLinkageForm`、`linkageFormId`。CLI 根据关联列表补齐 `linkageFormAppType` 和 `linkageFormType`；自动填充取决于目标表单已有的关联填充配置。
+
+自动化使用 `actionType: invokeFlow`、`actionConfig: {"processCode":"实际流程编码","needSecondCheck":["y"]}`。二次确认默认开启，显式 `[]` 才关闭。这是成员点击按钮时的提示。
+
+页面跳转使用 `actionType: linkToPage`，`actionConfig` 中：
+
+- 应用内：`urlType: inner`、`urlFormUuid`，CLI 补齐 `urlFormType`。
+- 外部：`urlType: outer`、`url: https://...`。
+- `openWith` 为 `new` 或 `slide`。可选 `paramInfo` 是 `{paramName,paramType,paramValue}` 数组，类型为 `constant`、`variable`、`formula`；字段或公式从实际元数据生成。
+
+可用条件使用 `permissionConfig` 的平台规则树，`null` 表示全部数据。条件按完整树替换，格式为 `{"condition":"AND","rules":[{"id":"实际字段ID","op":"eq","value":"目标值"}]}`。`id` 和 `op` 从 `options.variables[].operatorMap` 取得；CLI 根据该字段支持的操作符解析 SQL 键、原生标签或标准码，补齐 `conditionCode`、`opCode` 和默认 `valueType: literal`。已有树可保留有效的 `opCode` 与 `valueType`，不匹配的操作码会被拒绝。不要将数据查询条件或权限组规则直接传入。公式只使用已有有效平台表达式。隐藏/提示属性受平台能力约束，不绕过灰度或版本限制。
+
+更新时多语言文案与同类动作属性合并，数组及条件整体替换。切换 `actionType`、`fillType` 或 `urlType` 时提供完整新 `actionConfig`。保留未修改的翻译、条件和显示位置；`tableViewUuids: []` / `detailId: []` 清空对应显示引用。旧版详情页和自定义详情布局还可能需要在对应设计器中添加引用与排序，本命令不重写详情布局或系统按钮顺序。
+
+删除定义需要用户明确要求，先 `inspect` 确认目标，再使用真实 hash：
+
+```bash
+openyida custom-button delete <appType> <formUuid> <buttonUuid> --expected-hash <configHash> --yes --json
+```
+
+删除定义与移除显示引用不同。备份包含原定义，但重建会得到新 UUID，不能自动恢复其他地方的旧引用。仅要求隐藏某处按钮时，调整对应引用。
+
+写入前自动备份，成功需返回 `readbackVerified: true`。超时、认证失败或回读不一致时，保留 `backupPath` 并只读检查，不直接重复创建/删除。hash 能检测读取后的变化，平台没有原子比较写入能力。
+
+验收按本轮授权范围，在详情页/数据管理页核对名称、位置、条件和动作配置。执行按钮可能改业务记录或触发外部操作，只有用户授权相应测试时才执行。保存回读不能证明移动端展示、关联填充或自动化执行成功。
+
+平台边界见[官方说明](https://docs.aliwork.com/docs/yida_support/wtwabe/ckyvwt/ohyllrtgx9v5opox)：每表最多 10 个；流程数据结束后才展示；编辑受字段权限约束；自动化按钮不另按字段权限控制触发，应结合页面访问与流程设计确定范围；未开启的流不会生效。版本/权限拒绝如实报告，不修改组织版本、授权或灰度开关。

package/yida-skills/skills-index.json

@@ -3,6 +3,39 @@
   "source": "openyida",
   "entry": "openyida",
   "skills": [
+    {
+      "name": "yida-custom-button",
+      "path": "skills/yida-custom-button/SKILL.md",
+      "display_name": "表单自定义按钮",
+      "description": "配置页面设置中的原生自定义按钮：修改当前记录、填写被关联表单、触发自动化、打开页面和设置显示位置。",
+      "category": "yida-skills/form",
+      "tags": [
+        "自定义按钮",
+        "页面设置",
+        "客户跟进",
+        "审批后发起订单"
+      ],
+      "aliases": [
+        "表单按钮",
+        "详情页自定义操作"
+      ],
+      "positive_signals": [
+        "配置表单自定义按钮",
+        "客户详情页添加跟进按钮",
+        "按钮触发手动自动化",
+        "审批结束后发起采购订单",
+        "表格视图中显示分配按钮"
+      ],
+      "negative_signals": [
+        "自定义页面React按钮",
+        "仅修改按钮颜色",
+        "提交表单按钮文案"
+      ],
+      "command_ids": [
+        "custom-button"
+      ],
+      "requires_login": true
+    },
     {
       "name": "yida-cool-card",
       "path": "skills/yida-cool-card/SKILL.md",
@@ -259,10 +292,24 @@
       "display_name": "宜搭需求分析",
       "description": "从应用需求推导核心功能候选，尽早确认范围和实际用法，再推导入口建议，整合 .cache/openyida/<项目名>/requirement-brief.json；平台导航或自定义导航交下游 AI 判断，不生成 PRD、视觉设计或页面源码。",
       "category": "yida-skills/design",
-      "tags": ["需求分析", "整理需求", "完整应用"],
-      "aliases": ["整理用户需求", "需求分析"],
-      "positive_signals": ["整理用户需求", "完整应用需求分析"],
-      "negative_signals": ["写 PRD", "视觉设计", "页面实现"],
+      "tags": [
+        "需求分析",
+        "整理需求",
+        "完整应用"
+      ],
+      "aliases": [
+        "整理用户需求",
+        "需求分析"
+      ],
+      "positive_signals": [
+        "整理用户需求",
+        "完整应用需求分析"
+      ],
+      "negative_signals": [
+        "写 PRD",
+        "视觉设计",
+        "页面实现"
+      ],
       "command_ids": [],
       "done_when": ".cache/openyida/<项目名>/requirement-brief.json 已写入、可解析，且没有会改变资源范围的未决问题。"
     },
@@ -272,10 +319,27 @@
       "display_name": "宜搭应用 PRD",
       "description": "读取整理后的用户需求，输出 prd/<项目名>/prd.md；负责业务目标、资源蓝图、页面契约、三种顺序与验收，不生成 design.md 或页面源码。",
       "category": "yida-skills/design",
-      "tags": ["PRD", "产品设计", "资源蓝图", "页面结构"],
-      "aliases": ["应用 PRD", "产品需求文档"],
-      "positive_signals": ["写 PRD", "资源蓝图", "页面结构规划", "导航顺序"],
-      "negative_signals": ["页面美化", "视觉方向", "页面源码"],
+      "tags": [
+        "PRD",
+        "产品设计",
+        "资源蓝图",
+        "页面结构"
+      ],
+      "aliases": [
+        "应用 PRD",
+        "产品需求文档"
+      ],
+      "positive_signals": [
+        "写 PRD",
+        "资源蓝图",
+        "页面结构规划",
+        "导航顺序"
+      ],
+      "negative_signals": [
+        "页面美化",
+        "视觉方向",
+        "页面源码"
+      ],
       "command_ids": [],
       "done_when": "prd/<项目名>/prd.md 已写入，包含资源创建顺序、页面实现交付顺序、导航顺序、页面 handoff 和验收标准。"
     },
@@ -328,7 +392,10 @@
         "表单字段建模",
         "数据记录操作"
       ],
-      "command_ids": ["app-theme.snapshot", "app-theme.restore"],
+      "command_ids": [
+        "app-theme.snapshot",
+        "app-theme.restore"
+      ],
       "done_when": "新设计输出 prd/<项目名>/design.md，不写 prd.md。已有资源 UI 美化以用户验收保留或本轮修改已恢复并核验为完成；等待方案确认或效果验收时保持对应等待状态。"
     },
     {
@@ -337,11 +404,37 @@
       "display_name": "宜搭图片素材准备",
       "description": "按页面并发选图，允许外链的图片检查后直接使用，需托管时上传。",
       "category": "yida-skills/design",
-      "tags": ["图片素材", "联网搜图", "图片生成", "背景图", "商品图"],
-      "aliases": ["素材设计", "图片搜索", "生成图片", "商品占位图"],
-      "positive_signals": ["Hero 图", "背景图", "商品图片", "场景图片", "联网搜索图片", "生成 UI 素材"],
-      "negative_signals": ["纯表单", "审批配置", "权限设置", "普通 CRUD 台账"],
-      "command_ids": ["agent-capabilities", "asset"],
+      "tags": [
+        "图片素材",
+        "联网搜图",
+        "图片生成",
+        "背景图",
+        "商品图"
+      ],
+      "aliases": [
+        "素材设计",
+        "图片搜索",
+        "生成图片",
+        "商品占位图"
+      ],
+      "positive_signals": [
+        "Hero 图",
+        "背景图",
+        "商品图片",
+        "场景图片",
+        "联网搜索图片",
+        "生成 UI 素材"
+      ],
+      "negative_signals": [
+        "纯表单",
+        "审批配置",
+        "权限设置",
+        "普通 CRUD 台账"
+      ],
+      "command_ids": [
+        "agent-capabilities",
+        "asset"
+      ],
       "done_when": "生成 prd/<项目名>/asset-manifest.json，记录能力、来源、授权、尺寸和缺口；必需素材不完整时保持 draft。"
     },
     {
@@ -1106,7 +1199,12 @@
       "name": "yida-form-permission",
       "path": "skills/yida-form-permission/SKILL.md",
       "display_name": "表单权限组管理",
-      "command_ids": ["get-permission", "save-permission", "permission-manage", "matrix"],
+      "command_ids": [
+        "get-permission",
+        "save-permission",
+        "permission-manage",
+        "matrix"
+      ],
       "description": "管理表单权限组的成员范围、数据范围、操作权限和字段权限；支持差异预览和已有矩阵引用。",
       "category": "yida-skills/access",
       "tags": [
@@ -1242,7 +1340,20 @@
         "只创建 HTTP 连接器动作",
         "页面 dataSourceMap 数据源"
       ],
-      "command_ids": ["integration.create", "integration.update", "integration.list", "integration.enable", "integration.disable", "integration.check", "integration.diagnose", "integration.log-detail", "integration.monitor", "integration.copy", "integration.rename", "integration.delete"],
+      "command_ids": [
+        "integration.create",
+        "integration.update",
+        "integration.list",
+        "integration.enable",
+        "integration.disable",
+        "integration.check",
+        "integration.diagnose",
+        "integration.log-detail",
+        "integration.monitor",
+        "integration.copy",
+        "integration.rename",
+        "integration.delete"
+      ],
       "done_when": "集成自动化创建/启停/诊断完成，并返回 processCode 或检查结果。"
     },
     {
@@ -1385,15 +1496,43 @@
       "display_name": "流程与自动化通用节点配置",
       "description": "配置审批、办理、分支、并行、循环、数据和通知节点；人员、角色、条件选人、字段权限及变量各在一处说明。",
       "category": "yida-skills/process",
-      "tags": ["通用节点", "指定角色", "字段权限", "操作按钮", "条件变量", "字段比较", "数据节点", "通知节点", "扩展执行"],
-      "positive_signals": ["节点指定角色", "审批人条件模式", "流程自动化共用节点配置", "通知财务角色", "审批人允许编辑单价", "配置加签和转交", "数据节点字段赋值", "字段与字段比较", "当前库存低于库存下限"],
-      "negative_signals": ["表单权限组数据范围", "维护角色成员", "修改版本权益"]
+      "tags": [
+        "通用节点",
+        "指定角色",
+        "字段权限",
+        "操作按钮",
+        "条件变量",
+        "字段比较",
+        "数据节点",
+        "通知节点",
+        "扩展执行"
+      ],
+      "positive_signals": [
+        "节点指定角色",
+        "审批人条件模式",
+        "流程自动化共用节点配置",
+        "通知财务角色",
+        "审批人允许编辑单价",
+        "配置加签和转交",
+        "数据节点字段赋值",
+        "字段与字段比较",
+        "当前库存低于库存下限"
+      ],
+      "negative_signals": [
+        "表单权限组数据范围",
+        "维护角色成员",
+        "修改版本权益"
+      ]
     },
     {
       "name": "yida-process-rule",
       "path": "skills/yida-process-rule/SKILL.md",
       "display_name": "流程规则配置",
-      "command_ids": ["configure-process", "process.fields", "process.preview"],
+      "command_ids": [
+        "configure-process",
+        "process.fields",
+        "process.preview"
+      ],
       "description": "配置已有流程的审批、办理、抄送、条件分支和字段权限，保存发布后核对配置。人员、按条件选人和节点参数按需读取通用节点说明。",
       "category": "yida-skills/process",
       "tags": [