openyida 2026.10.19 → 2026.10.20-2

package/README.md

@@ -95,6 +95,22 @@ Local terminals and AI tools share the same policy. Managed cloud Agent runtimes
 
 If Codex is already installed, OpenYida also imports a local Codex plugin during postinstall. Restart Codex after installation, then type `@宜搭` or `@openyida` in the composer to attach the OpenYida context.
 
+<details>
+<summary>Optional: install DingTalk Workspace CLI (dws)</summary>
+
+For DingTalk A2UI authoring, validation or messaging, install the official [DingTalk Workspace CLI](https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli#installation) separately:
+
+```bash
+npm install -g dingtalk-workspace-cli
+dws version
+```
+
+Alternatively, `openyida dws install` displays official instructions for your platform without running an installer. Once installed, `openyida dws <command> [args]` forwards arguments to your system's dws.
+
+OpenYida does not bundle or automatically install dws. Dws manages its own version, updates and login. Use `dws auth login` for DingTalk business access and verify the target organization and account. Native YiDA cool-card creation, reads and editor links work without dws; updating a chat card through dws does not save a YiDA template. See the official instructions for other installation methods and check the installed command's `--help` before use.
+
+</details>
+
 ### 2. Check Your Environment
 
 Run this from the AI coding workspace where you want OpenYida to operate:
@@ -447,6 +463,9 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 
 | Command | Description |
 |---------|-------------|
+| `openyida app-settings <appType> [--section theme\|basic\|data-card\|cool-card] [--json]` | Read theme, frontend/backend, native data card and cool card management links |
+| `openyida cool-card <list\|templates\|create\|get> <appType> [cardPageCode] [--type im\|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]` | Create and read native YiDA cool cards (interactive and pinned) |
+| `openyida data-card <list\|create\|get\|save\|publish\|probe\|release-get\|release-save\|release-check\|release-test\|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>\|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published\|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]` | Create, configure, publish and distribute native YiDA data cards |
 | `openyida app-entry get <appType> [--json]` | Read frontend and management runtime entries |
 | `openyida app-entry set <appType> [--frontend <url>\|--frontend-page <formUuid>] [--management <url>\|--management-page <formUuid>] [--clear-frontend] [--clear-management] [--json]` | Register application entries with partial update and readback |
 | `openyida app-list [--type managed\|created] [--page N] [--size N]` | Page through apps I manage or created |
@@ -491,6 +510,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
+| `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
@@ -508,7 +528,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | Command | Description |
 |---------|-------------|
 | `openyida data <query\|get\|create\|update> <resource> ... \| delete form <appType> <formUuid> --inst-id <id> --expect-form-name <name> --expect-form-type receipt --confirm [--json]` | Unified data management (form/process/task/subform) |
-| `openyida task-center <type> [options]` | Global task center (todo/processed/cc etc.) |
+| `openyida task-center <todo\|created\|done\|cc\|proxy\|capabilities\|scaffold\|options\|inspect\|count> [--spec <file.json> --output <file.canvas.jsx>] [options]` | Global task center (todo/processed/cc etc.) |
 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` | Query organization basic info, capacity, quotas, and domain settings |
 | `openyida read-dingtalk-doc <docUrl> [--output <file>] [--json]` | Fetch Markdown content from a DingTalk document |
 | `openyida read-dingtalk-tingji <taskUuid> [--json]` | Fetch DingTalk Tingji details by task UUID |
@@ -545,6 +565,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida create-report <appType> "<name>" ... [--json] [--open\|--no-open]` | Create a Yida report |
 | `openyida append-chart <appType> <reportId> ... [--json] [--open\|--no-open]` | Append chart to existing report |
 | `openyida report inspect <appType> <reportId> --json` | Inspect report runtime bindings (read-only) |
+| `openyida report configure <appType> <reportId> <cid> --hide-zero-values <true\|false> [--hide-zero-categories <true\|false>] [--hide-zero-legends <true\|false>] [--dry-run] [--json]` | Configure dynamic zero-value hiding on a native bar chart (explicit opt-in) |
 
 ### Connectors
 
@@ -598,7 +619,13 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida sample [--list] [<skill> <name>] [--output <file-or-directory>] [--var KEY=VALUE ...] [--design-file <design.md>] [--style-id <themeId\|free-creative>] [--theme-ids <id,...>] [--pop-art-context <explicit-request\|showcase>]` | Output code samples/templates |
 | `openyida doctor [--fix]` | Environment diagnostics & auto-fix |
 | `openyida db-seq-fix [--fix]` | Detect and repair PostgreSQL sequence drift |
-| `openyida formula evaluate <formula\|file> [--schema file]` | Static-check Yida formula syntax and field refs |
+| `openyida formula evaluate <formula\|file> [--schema file] [--contract field-value\|validation-rule\|business-action\|node-expression] [--context form\|validation\|automation\|business] [--target-type NumberField] [--metadata file] [--strict] [--json]` | Static-check Yida formula syntax and field refs |
+| `openyida formula check <formula\|file> [--schema file] [--contract field-value\|validation-rule\|business-action\|node-expression] [--context form\|validation\|automation\|business] [--target-type NumberField] [--metadata file] [--strict] [--json]` | Check formula syntax, fields, arguments and types |
+| `openyida formula contracts [--json]` | Show formula formats and checker coverage |
+| `openyida formula functions <appType> [--name IF] [--context form\|validation\|automation\|business] [--output file] [--json]` | Read Yida formula functions and signatures |
+| `openyida formula types <appType> [--component NumberField] [--json]` | Query formula component value types |
+| `openyida formula inspect <appType> <formUuid> [--field fieldId] [--json]` | Inspect configured form field formulas |
+| `openyida formula test <appType> <formUuid> [formula\|file] [--data-file file \| --cases file] [--field fieldId] [--timezone-offset minutes] [--context form\|validation] [--binding platform\|numeric-literals] [--expect JSON] [--json]` | Evaluate a non-writing formula in Yida and compare its result |
 | `openyida update` | Check and update to latest version |
 | `openyida export-conversation [options]` | Export AI conversation records |
 | `openyida feedback <report\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
@@ -612,6 +639,20 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 
 <!-- OPENYIDA_COMMANDS_END -->
 
+### Personal tasks and process progress
+
+Query application tasks with `openyida data query tasks <appType> --type todo --normalized`; `created`, `done`, and `cc` select the other personal task lists. Use `openyida task-center capabilities --json` for supported filters and the page configuration example.
+
+The default `app-v1` transport preserves the existing queries. Select `--transport app-query` for additional server filters while keeping the query fixed to the target application: `--originators '["USER_ID"]'` accepts one originator, `--process-codes '["PROCESS_CODE"]'` selects processes, and date bounds use Unix milliseconds. Available fields vary by task kind; unsupported fields fail before a request. `openyida task-center options <appType> --type originators|processes|forms --keyword TEXT --json` returns readable lookup options. The CLI never silently falls back to an unfiltered query.
+
+After explicitly choosing a custom task page, run `openyida task-center scaffold --spec <file.json> --output <new-file.canvas.jsx>`. The configuration requires the choice record and the application's existing design file. Generated pages follow the application theme, read the current visitor's tasks, and open native pages for processing. `embedded` mode provides the same task section for an existing workbench. Compile and publish the page using the usual commands.
+
+Page configurations can explicitly set `transport: "app-query"` and per-kind initial filters, for example `filters: { "todo": { "originators": ["USER_ID"] } }`. Generated pages include the same `filterSchema`, `normalizeFilters`, task loader, and option lookup helpers as the CLI.
+
+Use `task-center count <appType> --type todo --transport app-query --filters-json '{"keyword":"purchase"}' --json` for a one-record query with a matching server total; an unknown total remains `null`. `task-center inspect <appType> --process-inst-id <id> [--form-uuid <id>] [--history] [--task-id <id>] --json` reads an authorized linked process and optional operation history. Personal task outcomes, selected-task outcomes and final process results remain separate. Read commands do not create custom pages or require a custom-page choice.
+
+Scaffolds select only the needed task kinds, `fields` and `filterFields`; the default is a single todo list. `view: "progress", mode: "embedded"` provides a progress component for an existing business page, using its real linked `processInstanceId`. History and task-row expansion are opt-in. See the [workflow capability reference](yida-skills/skills/yida-canvas-data-binding/references/workflow-capabilities.md) for configuration and integration examples.
+
 ### CLI Notes
 
 #### Connector Safety and Real E2E

package/bin/yida.js

@@ -761,6 +761,23 @@ async function main() {
       break;
     }
 
+    case 'cool-card': {
+      const { run } = require('../lib/app/cool-card');
+      await run(args);
+      break;
+    }
+    case 'data-card': {
+      const { run } = require('../lib/app/data-card');
+      await run(args);
+      break;
+    }
+
+    case 'app-settings': {
+      const { run } = require('../lib/app/app-settings');
+      await run(args);
+      break;
+    }
+
     case 'app-entry': {
       const { run } = require('../lib/app/app-entry');
       await run(args);
@@ -815,6 +832,11 @@ async function main() {
       break;
     }
 
+    case 'custom-button': {
+      const { run } = require('../lib/app/custom-button');
+      await run(args);
+      break;
+    }
     case 'form-view': {
       const { run } = require('../lib/app/form-view');
       await run(args);
@@ -856,6 +878,8 @@ async function main() {
       if (subCommand === 'evaluate' || subCommand === 'check') {
         const { run } = require('../lib/formula/evaluate');
         await run(subArgs);
+      } else if (['contracts', 'functions', 'types', 'inspect', 'test'].includes(subCommand)) {
+        await require('../lib/formula/commands').run(subCommand, subArgs);
       } else {
         throwCliUsage(t('cli.formula_usage'), t('cli.formula_example'));
       }
@@ -1115,10 +1139,11 @@ async function main() {
 
     case 'report': {
       const subCommand = args[0];
-      if (subCommand !== 'inspect') {
-        throwCliUsage('用法: openyida report inspect <appType> <reportId> --json');
+      if (!['inspect', 'configure'].includes(subCommand)) {
+        throwCliUsage('用法: openyida report <inspect|configure> ... --json');
       }
-      const { run } = require('../lib/report/inspect');
+      const { run } = subCommand === 'inspect'
+        ? require('../lib/report/inspect') : require('../lib/report/configure');
       await run(args.slice(1));
       break;
     }

package/lib/app/agent-app-type.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Server-derived provenance: channels may grow; only absence or "none" means non-AI.
+function isAgentAppType(value) {
+  if (typeof value !== 'string') {
+    return false;
+  }
+  const type = value.trim().toLowerCase();
+  return type !== '' && type !== 'none';
+}
+
+module.exports = { isAgentAppType };

package/lib/app/app-settings.js

@@ -0,0 +1,38 @@
+'use strict';
+
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { buildApplicationSettingsUrls } = require('./application-entry-urls');
+
+function parseArgs(args = []) {
+  if (args.includes('--help') || args.includes('-h')) { return { help: true }; }
+  const [appType, ...rest] = args;
+  let section;
+  let json = false;
+  for (let i = 0; i < rest.length; i++) {
+    if (rest[i] === '--json' && !json) { json = true; }
+    else if (rest[i] === '--section' && section === undefined) { section = rest[++i]; }
+    else { throw new CliError(t('app_settings.usage'), { code: 'CLI_USAGE_ERROR' }); }
+  }
+  if (!/^APP_[A-Za-z0-9_-]+$/.test(appType || '') || (rest.includes('--section') && !['theme', 'basic', 'data-card', 'cool-card'].includes(section))) {
+    throw new CliError(t('app_settings.usage'), { code: 'CLI_USAGE_ERROR' });
+  }
+  return { appType, section };
+}
+async function execute({ appType, section }, client = createYidaClient({ authRef: createAuthRef() })) {
+  const response = await client.get(`/${appType}/query/app/getAppIncludingAecpInfo.json`, { appKey: appType });
+  if (response?.success !== true || response.__needLogin || response.__csrfExpired || !response.content
+    || response.content.appType !== appType) {
+    throw new CliError(t('app_settings.failed', response?.errorMsg || appType), { code: 'APP_SETTINGS_READ_FAILED' });
+  }
+  const urls = buildApplicationSettingsUrls({ appType, baseUrl: client.getAuthRef().baseUrl, systemLink: response.content.systemLink });
+  const key = { theme: 'themeSettingsUrl', basic: 'basicSettingsUrl', 'data-card': 'dataCardManageUrl', 'cool-card': 'coolCardManageUrl' }[section];
+  return { success: true, appType, urls, ...(key ? { url: urls[key] } : {}), runtimeVerified: false };
+}
+async function run(args = []) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { console.log(t('app_settings.usage')); return; }
+  console.log(JSON.stringify(await execute(parsed), null, 2));
+}
+module.exports = { run, execute, parseArgs };

package/lib/app/application-entry-urls.js

@@ -36,6 +36,14 @@ function readRenderNav(config) {
   return null;
 }
 
+function buildApplicationSettingsUrls(options) {
+  const { adminUrl } = buildApplicationEntryUrls(options);
+  if (!adminUrl) { return {}; }
+  const url = new URL(adminUrl);
+  const settings = suffix => `${url.origin}${url.pathname}/appSetting/${suffix}${url.search}`;
+  return { themeSettingsUrl: settings('themeSetting'), basicSettingsUrl: settings('basicSetting'), dataCardManageUrl: settings('dataCardManage'), coolCardManageUrl: settings('coolCardManage') };
+}
+
 function buildDisplayPageEntryUrls({ appType, formUuid, baseUrl, config, formType = config?.formType }) {
   if (formType !== 'display' || !/^FORM[-_][A-Za-z0-9_-]+$/.test(formUuid || '')) {return {};}
   if (config?.formType && config.formType !== 'display') {return {};}
@@ -54,4 +62,4 @@ function buildDisplayPageEntryUrls({ appType, formUuid, baseUrl, config, formTyp
   };
 }
 
-module.exports = { buildApplicationEntryUrls, buildDisplayPageEntryUrls, readRenderNav };
+module.exports = { buildApplicationEntryUrls, buildApplicationSettingsUrls, buildDisplayPageEntryUrls, readRenderNav };

package/lib/app/cool-card.js

@@ -0,0 +1,207 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { buildApplicationSettingsUrls } = require('./application-entry-urls');
+
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const validApp = value => /^APP_[A-Za-z0-9_-]+$/.test(value || '');
+const validCard = value => /^form[A-Za-z0-9_-]+$/.test(value || '');
+const validType = value => ['im', 'onebox'].includes(value);
+const capabilities = Object.freeze({ create: true, read: true, templates: true, save: false, publish: false, send: false });
+
+function fail(code, message, details) {
+  throw new CliError(t('cool_card.failed', message), { code: `COOL_CARD_${code}`, details });
+}
+function parseArgs(args = []) {
+  const positional = [], flags = {};
+  const allowed = {
+    list: ['--type', '--page', '--size', '--search'],
+    templates: ['--type', '--page', '--size', '--search'],
+    create: ['--type', '--name', '--out'], get: ['--out'],
+  };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (['--help', '-h'].includes(arg)) { return { help: true }; }
+    if (arg === '--json' || ['--type', '--name', '--out', '--page', '--size', '--search'].includes(arg)) {
+      if (Object.hasOwn(flags, arg)) { fail('USAGE', t('cool_card.usage')); }
+      if (arg === '--json') { flags[arg] = true; }
+      else {
+        if (!args[i + 1] || args[i + 1].startsWith('-')) { fail('USAGE', t('cool_card.usage')); }
+        flags[arg] = args[++i];
+      }
+    } else if (arg.startsWith('-')) { fail('USAGE', t('cool_card.usage')); }
+    else { positional.push(arg); }
+  }
+  const [action, appType, cardPageCode] = positional;
+  if (!allowed[action] || !validApp(appType) || positional.length !== (action === 'get' ? 3 : 2)
+    || (cardPageCode && !validCard(cardPageCode))
+    || Object.keys(flags).some(key => key !== '--json' && !allowed[action].includes(key))
+    || (flags['--type'] !== undefined && !validType(flags['--type']))
+    || (['create', 'templates'].includes(action) && !validType(flags['--type']))
+    || (action === 'create' && !flags['--name']?.trim())) { fail('USAGE', t('cool_card.usage')); }
+  for (const [flag, max] of [['--page', 1000], ['--size', 100]]) {
+    if (flags[flag] !== undefined && (!/^\d+$/.test(flags[flag]) || +flags[flag] < 1 || +flags[flag] > max)) {
+      fail('USAGE', t('cool_card.usage'));
+    }
+  }
+  return { action, appType, cardPageCode, flags };
+}
+function unwrap(response, endpoint) {
+  if (response?.success !== true || response.__needLogin || response.__csrfExpired) {
+    fail('API_ERROR', response?.errorMsg || response?.message || endpoint, { endpoint, platformErrorCode: response?.errorCode });
+  }
+  return response.content;
+}
+function parseObject(value, label) {
+  let result = value;
+  if (typeof value === 'string') {
+    try { result = JSON.parse(value); } catch { fail('INVALID_RESPONSE', label); }
+  }
+  if (!object(result)) { fail('INVALID_RESPONSE', label); }
+  return result;
+}
+function validateCard(card, appType, cardPageCode) {
+  if (!object(card) || card.appId !== appType || !validCard(card.cardPageCode)
+    || (cardPageCode && card.cardPageCode !== cardPageCode) || !validType(card.cardType)) {
+    fail('TARGET_MISMATCH', cardPageCode || appType);
+  }
+  return card;
+}
+function decodeCard(card) {
+  // New blank resources can have no template yet. Do not call that a completed configuration.
+  const template = card.cardSchema ? parseObject(card.cardSchema, 'cardSchema') : null;
+  const editorData = template?.editorData ? parseObject(template.editorData, 'editorData') : null;
+  if (editorData?.schema?.componentsTree !== undefined && !Array.isArray(editorData.schema.componentsTree)) {
+    fail('INVALID_RESPONSE', 'componentsTree');
+  }
+  const components = new Set();
+  const visit = node => {
+    if (!object(node)) { return; }
+    if (typeof node.componentName === 'string') { components.add(node.componentName); }
+    if (Array.isArray(node.children)) { node.children.forEach(visit); }
+  };
+  (editorData?.schema?.componentsTree || []).forEach(visit);
+  return { template, editorData, components: [...components].sort(), variableList: editorData?.variableList || [],
+    templateIdsMatch: template?.templateId ? template.templateId === card.cardTemplateId : null,
+    publishStatus: template?.publishStatus || null };
+}
+function cardUrls(appType, card, baseUrl) {
+  const settings = buildApplicationSettingsUrls({ appType, baseUrl });
+  if (!settings.coolCardManageUrl) { fail('INVALID_TARGET', 'baseUrl'); }
+  // Link to the official editor; this command does not establish its DingTalk session.
+  const templateId = card.cardTemplateId;
+  const editorUrl = /(^|\.)aliwork\.com$/.test(new URL(baseUrl).hostname) && /^[A-Za-z0-9-]+$/.test(templateId || '')
+    ? `https://editor.dingtalk.com/editor?templateId=${encodeURIComponent(templateId)}&scene=yida_card&bizId=${encodeURIComponent(`${appType}.${card.cardPageCode}`)}#/` : null;
+  return { coolCardManageUrl: settings.coolCardManageUrl, editorUrl };
+}
+function userHandoff(action, appType, card, urls) {
+  // Existing cards enter through management so the platform can prepare the editable version.
+  const directEditor = action === 'create' && urls.editorUrl;
+  return { actor: 'user', action: action === 'create' ? 'configure-and-save' : 'review-or-edit',
+    target: directEditor ? 'official-editor' : 'cool-card-management',
+    url: directEditor || urls.coolCardManageUrl,
+    verificationCommand: `openyida cool-card get ${appType} ${card.cardPageCode} --json` };
+}
+function exportFile(filename, snapshot) {
+  const output = path.resolve(filename);
+  fs.mkdirSync(path.dirname(output), { recursive: true });
+  fs.writeFileSync(output, JSON.stringify(snapshot, null, 2), { mode: 0o600, flag: 'wx' });
+  return output;
+}
+async function execute(parsed, client) {
+  // Revalidate programmatic callers before auth or any network operation.
+  const flags = parsed.flags || {};
+  const argv = [parsed.action, parsed.appType, ...(parsed.cardPageCode ? [parsed.cardPageCode] : [])];
+  for (const [key, value] of Object.entries(flags)) { argv.push(key, ...(value === true ? [] : [value])); }
+  const checked = parseArgs(argv);
+  if (checked.help) { fail('USAGE', t('cool_card.usage')); }
+  const { action, appType } = checked;
+  let { cardPageCode } = checked;
+  if (flags['--out'] && fs.existsSync(path.resolve(flags['--out']))) { fail('OUTPUT_EXISTS', flags['--out']); }
+  client = client || createYidaClient({ authRef: createAuthRef() });
+  const prefix = `/${appType}/query/cardDesign/`;
+  const get = async (name, params) => unwrap(await client.get(prefix + name + '.json', params), name);
+  const base = { success: true, action, appType, resourceType: 'native-cool-card', capabilities };
+  if (['list', 'templates'].includes(action)) {
+    const content = await get(action === 'list' ? 'listCards' : 'listTpls', {
+      cardType: flags['--type'] || '', currentPage: +(flags['--page'] || 1), pageSize: +(flags['--size'] || 50),
+      searchName: flags['--search'] || '', ...(action === 'list' ? { excludeOfficialCard: false } : {}),
+    });
+    if (!object(content) || !Array.isArray(content.data) || !Number.isFinite(+content.totalCount) || +content.totalCount < 0) {
+      fail('INVALID_RESPONSE', action);
+    }
+    // Template catalog entries may be owned by a different application; listing does not grant mutation rights.
+    const data = content.data.map(card => {
+      if (action === 'list') { validateCard(card, appType); }
+      return Object.fromEntries(Object.entries(card).filter(([key]) => !['cardSchema', 'variableConfig'].includes(key)));
+    });
+    return { ...content, ...base, data };
+  }
+  let created;
+  let listedCard;
+  if (action === 'create') {
+    // Allowlist the complete write body. No entitlements, app tags, official-card switches or send options.
+    created = unwrap(await client.postFormOnce(prefix + 'createCard.json', {
+      cardName: flags['--name'], cardType: flags['--type'],
+    }), 'createCard');
+    try { validateCard(created, appType); }
+    catch (error) {
+      error.details = { ...error.details, mutationAccepted: true, inspectBeforeRetry: true, appType,
+        ...(validCard(created?.cardPageCode) ? { cardPageCode: created.cardPageCode } : {}) };
+      throw error;
+    }
+    cardPageCode = created.cardPageCode;
+    try {
+      const list = await get('listCards', { cardType: flags['--type'], currentPage: 1, pageSize: 100,
+        searchName: flags['--name'], excludeOfficialCard: false });
+      listedCard = Array.isArray(list?.data) ? list.data.find(item => item?.cardPageCode === cardPageCode) : null;
+      validateCard(listedCard, appType, cardPageCode);
+      if (listedCard.cardName !== flags['--name'] || listedCard.cardType !== flags['--type']) { fail('READBACK_MISMATCH', cardPageCode); }
+    } catch (error) {
+      error.details = { ...error.details, appType, cardPageCode, resourceCreated: true, inspectBeforeRetry: true };
+      throw error;
+    }
+  }
+  let card;
+  try {
+    card = validateCard(await get('getCardSchema', { cardAppId: appType, cardPageCode }), appType, cardPageCode);
+  } catch (error) {
+    if (!created) { throw error; }
+    // A real newly-created resource may have a template ID before that template exists.
+    // Verify its resource metadata independently; retain the failed schema read rather than inventing an empty schema.
+    const urls = cardUrls(appType, listedCard, client.getAuthRef().baseUrl);
+    const result = { ...base, cardPageCode, card: listedCard, completion: 'resource-only', readbackVerified: true,
+      schemaReadbackVerified: false, configurationVerified: false, deliveryVerified: false,
+      schemaReadbackError: { code: error.code || 'READ_FAILED', message: error.message, details: error.details },
+      urls, nextAction: userHandoff(action, appType, listedCard, urls) };
+    if (flags['--out']) { result.snapshotFile = exportFile(flags['--out'], { ...result }); }
+    return result;
+  }
+  try {
+    if (created && (card.cardType !== flags['--type'] || card.cardName !== flags['--name'])) { fail('READBACK_MISMATCH', cardPageCode); }
+    const decoded = decodeCard(card);
+    const snapshot = { resourceType: base.resourceType, appType, cardPageCode, card };
+    const configHash = crypto.createHash('sha256').update(JSON.stringify(snapshot)).digest('hex');
+    const urls = cardUrls(appType, card, client.getAuthRef().baseUrl);
+    const result = { ...base, cardPageCode, card, ...decoded, configHash,
+      readbackVerified: true, schemaReadbackVerified: decoded.template !== null,
+      ...(decoded.template ? {} : { completion: 'resource-only' }), configurationVerified: false, deliveryVerified: false,
+      urls, nextAction: userHandoff(action, appType, card, urls) };
+    if (flags['--out']) { result.snapshotFile = exportFile(flags['--out'], snapshot); }
+    return result;
+  } catch (error) {
+    if (created) { error.details = { ...error.details, appType, cardPageCode, resourceCreated: true, inspectBeforeRetry: true }; }
+    throw error;
+  }
+}
+async function run(args = []) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { console.log(t('cool_card.usage')); return; }
+  console.log(JSON.stringify(await execute(parsed), null, 2));
+}
+module.exports = { parseArgs, execute, run, decodeCard, capabilities };

package/lib/app/create-form.js

@@ -78,6 +78,7 @@ const { banner, step, label, success, fail, warn, info, error, result, usage, hi
 const { parseOpenOption: parseBrowserOpenOption, withBrowserHandoff } = require('../core/browser-handoff');
 const { default: babelTransform } = require('../core/babel-transform');
 const { normalizeFormulaFieldRefs } = require('../formula/evaluate');
+const { applyFieldFormula, formulaFields, validateSchemaFormulas } = require('../formula/config');
 const { createParseArgs } = require('./create-form/args');
 const { createDefinitionReaders } = require('./create-form/definition-reader');
 const { dispatchCreateFormCommand } = require('./create-form/commands');
@@ -458,6 +459,14 @@ function validateFormFieldDefinitions(fields, rootPath) {
     rootPath: rootPath || 'fields',
   });
   throwFieldValidationDiagnostics(fields, diagnostics, rootPath || 'fields');
+  function validateFormulas(items) {
+    for (const field of items || []) {
+      applyFieldFormula({}, field, normalizeFormDefinitionType(field));
+      if (Array.isArray(field.children)) { validateFormulas(field.children); }
+    }
+  }
+  validateFormulas(fields);
+  if (!rootPath) { validateSchemaFormulas(buildFormNodeComponents(fields)); }
 }
 
 function throwFieldValidationDiagnostics(fields, diagnostics, rootPath) {
@@ -729,7 +738,7 @@ function buildFieldComponent(field) {
     props.__gridSpan = 1;
     props.tips = i18n('', '');
     props.linkage = '';
-    props.precision = 0;
+    props.precision = field.precision === undefined ? 0 : field.precision;
     props.step = 1;
     props.thousandsSeparators = false;
     props.innerAfter = field.innerAfter || '';
@@ -1240,6 +1249,8 @@ function buildFieldComponent(field) {
     props.placeholder = i18n(field.placeholder);
   }
 
+  applyFieldFormula(props, field, componentName);
+
   const component = {
     componentName: componentName,
     id: nodeId,
@@ -1429,6 +1440,7 @@ function resolveFieldIdReferences(fieldComponents) {
           if (resolvedId) {
             info(t('create_form.filling_rule_resolved', targetLabel, resolvedId));
             rule.target = resolvedId;
+            rule.targetFieldId = resolvedId;
           } else {
             warn(t('create_form.filling_rule_failed', targetLabel));
           }
@@ -1440,6 +1452,7 @@ function resolveFieldIdReferences(fieldComponents) {
           if (resolvedSourceId) {
             info(t('create_form.filling_rule_resolved', sourceLabel, resolvedSourceId));
             rule.source = resolvedSourceId;
+            rule.sourceFieldId = resolvedSourceId;
           } else {
             warn(t('create_form.filling_rule_failed', sourceLabel));
           }
@@ -1465,6 +1478,7 @@ function resolveFieldIdReferences(fieldComponents) {
             if (resolvedId) {
               info(t('create_form.table_rule_resolved', ruleIndex + 1, targetLabel, resolvedId));
               rule.target = resolvedId;
+              rule.targetFieldId = resolvedId;
             } else {
               warn(t('create_form.table_rule_failed', targetLabel));
             }
@@ -1650,6 +1664,7 @@ function buildFormSchema(formTitle, fields, formUuid, corpId, appType, layout, t
   // 解析主题配置
   const themeConfig = getThemeConfig(theme || 'default', labelAlign || 'top');
   const fieldComponents = buildFormNodeComponents(fields);
+  validateSchemaFormulas(fieldComponents);
   const formContainerChildren = layoutConfig.groupFields
     ? buildGroupedFieldComponents(fields, layoutConfig.formLayout)
     : fieldComponents;
@@ -2038,15 +2053,6 @@ function findFormContainer(node) {
   return null;
 }
 
-function findFieldIndexByLabel(fields, label) {
-  for (let fieldIndex = 0; fieldIndex < fields.length; fieldIndex++) {
-    if (extractLabelText(fields[fieldIndex]) === label) {
-      return fieldIndex;
-    }
-  }
-  return -1;
-}
-
 function findFieldByLabelDeep(fields, label) {
   if (!Array.isArray(fields)) {
     return null;
@@ -2166,30 +2172,6 @@ function collectFieldReferences(fields, options) {
   return refs;
 }
 
-function collectFieldMatchesByLabelDeep(fields, label, tableAncestors, matches) {
-  const result = matches || [];
-  const ancestors = Array.isArray(tableAncestors) ? tableAncestors : [];
-  if (!Array.isArray(fields)) {
-    return result;
-  }
-  fields.forEach(function (field, fieldIndex) {
-    const labelText = extractLabelText(field);
-    if (labelText === label) {
-      result.push({
-        field,
-        fields,
-        index: fieldIndex,
-        evidence: buildFieldEvidence(field, ancestors),
-      });
-    }
-    const nextAncestors = field && field.componentName === 'TableField'
-      ? ancestors.concat(compactTableAncestorEvidence(field))
-      : ancestors;
-    collectFieldMatchesByLabelDeep(field && field.children, label, nextAncestors, result);
-  });
-  return result;
-}
-
 function collectFieldCandidates(fields, tableAncestors, query) {
   const candidates = [];
   const normalizedQuery = query ? String(query).trim() : '';
@@ -2424,18 +2406,6 @@ function resolveFieldReference(fields, input, options) {
   };
 }
 
-function requireResolvedField(fields, input, options) {
-  const resolution = resolveFieldReference(fields, input, options);
-  if (resolution.ok) {
-    return resolution;
-  }
-  const err = createCreateFormError(t('create_form.field_resolution_failed'), 'CREATE_FORM_FIELD_RESOLUTION_FAILED', {
-    diagnostics: [resolution.diagnostic],
-  });
-  err.diagnostics = [resolution.diagnostic];
-  throw err;
-}
-
 function outputFieldResolutionFailure(appType, formUuid, diagnostics) {
   const fieldDiagnostics = Array.isArray(diagnostics) ? diagnostics : [];
   fail(t('create_form.field_resolution_failed'));
@@ -4517,6 +4487,7 @@ function applyFieldChanges(component, changes) {
       props[key] = changes[key];
     }
   });
+  applyFieldFormula(props, changes, component.componentName);
 }
 
 function ensureComponentsMap(schema, componentName) {
@@ -4565,6 +4536,7 @@ function countDataFieldDefinitions(fields) {
 // ── 应用修改操作（update 模式） ─────────────────────
 
 function applyChangesToSchema(schema, changes, options) {
+  const previousFormulas = formulaFields(schema);
   const verbose = Boolean(options && options.verbose);
   const componentsTree = schema.pages[0].componentsTree;
   if (!componentsTree || componentsTree.length === 0) {
@@ -4713,6 +4685,7 @@ function applyChangesToSchema(schema, changes, options) {
   resolveFieldIdReferences(formFields);
 
   formContainer.children = formFields;
+  validateSchemaFormulas(schema, previousFormulas);
   appliedChanges.diagnostics = diagnostics;
   return appliedChanges;
 }