openyida 2026.10.20-2 → 2026.10.21

package/README.md

@@ -446,6 +446,8 @@ openyida feedback report --input summary.json --output-dir feedback-draft-001
 
 Your AI prepares the summary from observed evidence and selected reproduction screenshots. PRs include before/after test comparisons. Before anything is published, review the final text and images, confirm sensitive information, and remove anything you do not want to share. See the [report input format](yida-skills/skills/yida-feedback/references/report-input.md). Review business information before sharing. With a GitHub account, authorize your AI to submit an Issue or contribute a verified public OpenYida fix through your personal Fork. Without an account, create a GitHub account first. If that is not possible, share the report in the AI开发者群 (AI developer group).
 
+When you choose to submit an OpenYida Issue, the feedback Skill can check your signed-in GitHub account with `openyida feedback github status --json`. Star and a personal Fork are optional: `feedback github star --confirm` and `feedback github fork --confirm` run only after you choose them. Existing actions are reused. This check is separate from installation and automatic updates; neither action is required to submit an Issue.
+
 <!-- OPENYIDA_COMMANDS_START -->
 <!-- This section is generated by `npm run docs:commands`. Do not edit command rows by hand. -->
 
@@ -509,6 +511,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida create-form add-option <appType> <formUuid> <fieldLabel> <option1> [option2] ...` | Update a form page |
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
+| `openyida print-template <list\|inspect\|fields\|build\|create\|copy\|save\|restore\|settings\|status\|order\|render\|files> <appType> <formUuid> [templateId] [--config <file>] [--scene <order\|quotation\|delivery\|receipt\|approval\|codes>] [--bindings <file>] [--name <title>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--status START\|STOP] [--instance <id>] [--page <n>] [--size <n>] [--allow-permission-change] [--json] \| print-template <list\|render> --detail-url <url> [--template-id <id>] [--json]` | Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
@@ -628,7 +631,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida formula test <appType> <formUuid> [formula\|file] [--data-file file \| --cases file] [--field fieldId] [--timezone-offset minutes] [--context form\|validation] [--binding platform\|numeric-literals] [--expect JSON] [--json]` | Evaluate a non-writing formula in Yida and compare its result |
 | `openyida update` | Check and update to latest version |
 | `openyida export-conversation [options]` | Export AI conversation records |
-| `openyida feedback <report\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
+| `openyida feedback <report\|github\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
 | `openyida batch <file>\|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]` | Run OpenYida commands in batch |
 | `openyida flash-to-prd --file <path> --name "<project>"` | Convert flash notes or meeting notes to a PRD prompt |
 | `openyida ai <text\|image> [options]` | Call Yida AI text and image recognition APIs |

package/bin/yida.js

@@ -837,6 +837,11 @@ async function main() {
       await run(args);
       break;
     }
+    case 'print-template': {
+      const { run } = require('../lib/print-template/print-template');
+      await run(args);
+      break;
+    }
     case 'form-view': {
       const { run } = require('../lib/app/form-view');
       await run(args);
@@ -1333,6 +1338,10 @@ async function main() {
     }
 
     case 'feedback': {
+      if (args[0] === 'github') {
+        await require('../lib/feedback/github').run(args.slice(1));
+        break;
+      }
       const { run: runFeedback } = require('../lib/feedback/feedback');
       await runFeedback(args);
       break;

package/lib/app/cool-card.js

@@ -6,6 +6,7 @@ const crypto = require('crypto');
 const { CliError } = require('../core/cli-error');
 const { t } = require('../core/i18n');
 const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { inferEnvironmentNameFromUrl } = require('../core/env-manager');
 const { buildApplicationSettingsUrls } = require('./application-entry-urls');
 
 const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
@@ -124,6 +125,10 @@ async function execute(parsed, client) {
   let { cardPageCode } = checked;
   if (flags['--out'] && fs.existsSync(path.resolve(flags['--out']))) { fail('OUTPUT_EXISTS', flags['--out']); }
   client = client || createYidaClient({ authRef: createAuthRef() });
+  // Use the authenticated target, not a global environment preference, before creating any resource.
+  if (action === 'create' && inferEnvironmentNameFromUrl(client.getAuthRef().baseUrl) === 'alibaba') {
+    fail('UNSUPPORTED_ENVIRONMENT', t('cool_card.unsupported_environment'), { environment: 'alibaba' });
+  }
   const prefix = `/${appType}/query/cardDesign/`;
   const get = async (name, params) => unwrap(await client.get(prefix + name + '.json', params), name);
   const base = { success: true, action, appType, resourceType: 'native-cool-card', capabilities };

package/lib/core/command-manifest.js

@@ -8,6 +8,7 @@ const { getPageNavigationContract } = require('../design-plan/navigation-policy'
 const { ENTRY_MODES } = require('../design-plan/entry-navigation');
 const { DIVIDER_TYPES, DEFAULT_DIVIDER_TYPE } = require('../app/form-field-validator');
 const { FORMULA_COMMANDS } = require('../formula/cli-contract');
+const { printTemplateCommand, printTemplateEffects, printTemplatePermission } = require('../print-template/contract');
 
 const SIDE_EFFECT_BASES = Object.freeze({
   local_read: Object.freeze({
@@ -550,6 +551,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
   })],
   ['cool-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'templates', 'get'], mutating_actions: ['create'] })],
   ['data-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'get', 'probe', 'release-check', 'refs'], mutating_actions: ['create', 'save', 'publish', 'release-get', 'release-save', 'release-test'], note: 'release-get reads broadcast settings but the native backend may initialize the application cool app; classify it conservatively as a possible mutation.' })],
+  ['print-template', sideEffect('mixed', printTemplateEffects)],
   ['form-view', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
@@ -645,8 +647,8 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['feedback', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
-    read_actions: ['url', 'status'],
-    mutating_actions: ['setup', 'dismiss', 'report'],
+    read_actions: ['url', 'status', 'github status'],
+    mutating_actions: ['setup', 'dismiss', 'report', 'github star', 'github fork'],
   })],
   ['i18n', sideEffect('mixed', {
     mutates_yida: true,
@@ -845,6 +847,7 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['connect', 'run', 'disconnect', 'logout'],
   })),
 
+  ...permissionEntries(['print-template'], actionDependentPermission(printTemplatePermission)),
   ...permissionEntries(['cool-card'], actionDependentPermission({ preauthorized_actions: ['create'] })),
   ...permissionEntries(['data-card'], actionDependentPermission({ preauthorized_actions: ['create', 'save', 'publish', 'release-get'], ask_actions: ['release-save', 'release-test'] })),
   ...permissionEntries([
@@ -1609,6 +1612,7 @@ const COMMAND_GROUPS = [
       },
       output: 'json',
       }),
+      command(...printTemplateCommand),
       command('form-view', ['form-view'], 'form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]', 'help.cmd_form_view', {
         managedRun: { scope: 'actions', actions: {
           list: { scope: 'app', appPosition: 1 },
@@ -2047,11 +2051,12 @@ const COMMAND_GROUPS = [
       command('export-conversation', ['export-conversation'], 'export-conversation [options]', 'help.cmd_export_conversation', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         requiresLogin: false,
       }),
-      command('feedback', ['feedback'], 'feedback <report|setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'actions', actions: { report: { scope: 'local' } } },
+      command('feedback', ['feedback'], 'feedback <report|github|setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'actions', actions: { report: { scope: 'local' } } },
+        permission: actionDependentPermission({ preauthorized_actions: ['report', 'url', 'status', 'dismiss', 'github status'], ask_actions: ['setup', 'github star', 'github fork'] }),
         requiresLogin: false,
         output: 'text|json',
         examples: ['openyida feedback report --input summary.json --output-dir feedback-draft-001'],
-        notes: ['report prepares local review drafts only; no login, source checkout, update check or network submission.'],
+        notes: ['report prepares local review drafts only; no login, source checkout, update check or network submission. github status [--json] checks the authenticated github.com user, Star and personal Fork through an existing gh installation; it performs no writes. github star|fork --confirm [--json] requires the user to explicitly choose that account action. Missing gh/login, unknown status and declined actions never block Issue submission. Already applied actions are reused; writes are single-attempt with readback. No auto-update/install hook, Issue submission, clone or git remote modification. Managed runs permit only offline report preparation.'],
       }),
       command('batch', ['batch'], 'batch <file>|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]', 'help.cmd_batch', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         output: 'text|json',

package/lib/core/locales/en.js

@@ -4,6 +4,11 @@
 'use strict';
 
 module.exports = {
+  print_template: {
+    'description': 'Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs',
+    'error': 'Print template operation failed: {0}',
+    'usage': 'Usage: openyida print-template <list|inspect|fields|build|create|copy|save|restore|settings|status|order|render|files> <appType> <formUuid> [templateId]. Use --config <file>, build --scene order|quotation|delivery|receipt|approval|codes --bindings <file>, create --config <file>, --name <title>, --expected-hash <inspect-hash>, --backup <file>, --out <file>, --status START|STOP, --instance <id>, --page <n>, --size <n>, --allow-permission-change, --json as documented. For native record links: list|render --detail-url <url> [--template-id <id>].'
+  },
   custom_button: {
     'usage': 'Usage: openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
     'invalid_config': 'Invalid configuration or argument: {0}',
@@ -15,7 +20,7 @@ module.exports = {
     'readback_mismatch': 'Saved custom button does not match readback. Keep the backup and inspect remote state.'
   },
   dws_external: {'note': 'dws is an independent external tool. OpenYida only shows installation instructions; it does not download or install it.', 'install_guide': 'Show official DingTalk CLI installation instructions'},
-  cool_card: {'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
+  cool_card: {'unsupported_environment': 'The Alibaba Group edition does not support building cool cards.', 'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
   data_card: {'description':'Create, configure, publish and distribute native YiDA data cards','usage':'Usage: openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'Native data card operation stopped: {0}','conflict':'The draft changed. Read it again before saving or publishing.','mismatch':'Readback does not match the expected schema or published state. Keep the backup and inspect the card before retrying.'},
   app_settings: {'description':'Read theme, frontend/backend, native data card and cool card management links','usage':'Usage: openyida app-settings <appType> [--section theme|basic|data-card|cool-card] [--json]','failed':'Application settings could not be read: {0}'},
   form_view: {
@@ -2507,3 +2512,9 @@ module.exports.task_center = {
   'filter_carbonCreateFrom': 'Copied from',
   'filter_carbonCreateTo': 'Copied to'
 };
+
+module.exports.feedback_github = {
+  usage: 'Usage: openyida feedback github <status|star|fork> [--confirm] [--json]',
+  confirmation: 'Star or Fork requires the user to explicitly choose that action before --confirm. Neither is required to submit an Issue.',
+  failed: 'The GitHub action could not be verified. Inspect its status before retrying; this does not block Issue submission.',
+};

package/lib/core/locales/zh.js

@@ -4,6 +4,11 @@
 'use strict';
 
 module.exports = {
+  print_template: {
+    'description': '管理宜搭原生打印模板、按字段生成多种单据、备份恢复与生成PDF',
+    'error': '打印模板操作失败：{0}',
+    'usage': 'Usage: openyida print-template <list|inspect|fields|build|create|copy|save|restore|settings|status|order|render|files> <appType> <formUuid> [templateId]. Use --config <file>, build --scene order|quotation|delivery|receipt|approval|codes --bindings <file>, create --config <file>, --name <title>, --expected-hash <inspect-hash>, --backup <file>, --out <file>, --status START|STOP, --instance <id>, --page <n>, --size <n>, --allow-permission-change, --json as documented. For native record links: list|render --detail-url <url> [--template-id <id>].'
+  },
   custom_button: {
     'usage': '用法：openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
     'invalid_config': '配置或参数无效：{0}',
@@ -15,7 +20,7 @@ module.exports = {
     'readback_mismatch': '保存后的配置与回读不一致，请保留备份并检查远端状态。'
   },
   dws_external: {'note': 'dws 是独立的外部工具；OpenYida 仅提供安装指引，不下载或安装它。', 'install_guide': '显示钉钉 CLI 官方安装指引'},
-  cool_card: {'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
+  cool_card: {'unsupported_environment': '集团版不支持酷卡片搭建。', 'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
   data_card: {'description':'创建、配置、发布原生数据卡片并管理投放播报','usage':'用法： openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'原生数据卡片操作已停止：{0}','conflict':'卡片草稿已发生变化，请重新读取后再保存或发布。','mismatch':'回读配置或发布状态与预期不一致，请保留备份并检查卡片后再重试。'},
   app_settings: {'description':'获取主题、业务前后台、原生数据卡片和酷卡片管理入口','usage':'用法： openyida app-settings <appType> [--section theme|basic|data-card|cool-card] [--json]','failed':'无法读取应用设置：{0}'},
   form_view: {
@@ -2461,3 +2466,9 @@ module.exports.task_center = {
   'filter_carbonCreateFrom': '抄送时间起',
   'filter_carbonCreateTo': '抄送时间止'
 };
+
+module.exports.feedback_github = {
+  usage: '用法：openyida feedback github <status|star|fork> [--confirm] [--json]',
+  confirmation: 'Star 或 Fork 需要用户明确选择后再传入 --confirm；提交 Issue 不要求这两项操作。',
+  failed: 'GitHub 操作未能核实完成，请先查询状态；这不影响提交 Issue。',
+};

package/lib/core/sample.js

@@ -23,6 +23,7 @@ const { t } = require('./i18n');
 // ── Sample 索引表 ─────────────────────────────────────────────────────
 
 const SAMPLES = {
+  'yida-print-template': Object.fromEntries(require('../print-template/scenes').names.map(name => [name, `${name}.json`])),
   'yida-chart': {
     'line-trend':        'line-trend.js',
     'multi-bar-compare': 'multi-bar-compare.js',

package/lib/core/update.js

@@ -159,7 +159,7 @@ function getAutoUpdateIntervalMs(env = process.env) {
 
 function shouldSkipAutoUpdateCommand(command, args = []) {
   // Report preparation must work offline even in a global npm installation.
-  if (command === 'feedback' && args[0] === 'report') {return true;}
+  if (command === 'feedback' && ['report', 'github'].includes(args[0])) {return true;}
   if (!command || ['--help', '-h', '--version', '-v'].includes(command)) {
     return true;
   }

package/lib/feedback/feedback.js

@@ -51,6 +51,7 @@ function printUsage() {
   openyida feedback setup <appType> [--name "OpenYida 体验反馈"] [--path /o/openyida-feedback] [--open|--no-open]
   openyida feedback setup --create-app [--app-name "OpenYida 体验反馈"] [--name "OpenYida 体验反馈"]
   openyida feedback report --input <summary.json> --output-dir <new-directory>
+  openyida feedback github <status|star|fork> [--confirm] [--json]
   openyida feedback url [--tool Codex] [--model gpt-5] [--command publish] [--diagnostics "..."]
   openyida feedback dismiss --today|--forever|--reset
   openyida feedback status

package/lib/feedback/github.js

@@ -0,0 +1,130 @@
+'use strict';
+
+const { spawnSync } = require('child_process');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+
+const REPOSITORY = 'openyida/openyida';
+const links = Object.freeze({ repository: `https://github.com/${REPOSITORY}`,
+  issue: `https://github.com/${REPOSITORY}/issues/new`, fork: `https://github.com/${REPOSITORY}/fork` });
+
+/** Parse explicit account actions; submitting an Issue never implies Star or Fork consent. */
+function parseArgs(args = []) {
+  const [action, ...flags] = args;
+  if (!['status', 'star', 'fork'].includes(action) || new Set(flags).size !== flags.length
+    || flags.some(flag => !['--json', '--confirm'].includes(flag))
+    || (action === 'status' && flags.includes('--confirm'))) {
+    throw new CliError(t('feedback_github.usage'), { code: 'FEEDBACK_GITHUB_USAGE' });
+  }
+  if (action !== 'status' && !flags.includes('--confirm')) {
+    throw new CliError(t('feedback_github.confirmation'), { code: 'FEEDBACK_GITHUB_CONFIRMATION_REQUIRED' });
+  }
+  return { action, confirm: flags.includes('--confirm') };
+}
+
+/** Run gh against github.com only. Never expose its raw output or credential diagnostics. */
+function request(method, endpoint, options, fields = []) {
+  const spawn = options.spawnSyncFn || spawnSync;
+  const result = spawn('gh', ['api', '--hostname', 'github.com', '--include', '--method', method, endpoint, ...fields], {
+    encoding: 'utf8', timeout: 15000, maxBuffer: 1024 * 1024,
+    env: { ...(options.env || process.env), GH_HOST: 'github.com', GH_PROMPT_DISABLED: '1', GIT_TERMINAL_PROMPT: '0' },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  const output = String(result.stdout || '');
+  const status = Number(output.match(/^HTTP\/[\d.]+\s+(\d{3})\b/)?.[1]) || null;
+  const separator = output.match(/\r?\n\r?\n/);
+  let data = null;
+  try { data = separator ? JSON.parse(output.slice(separator.index + separator[0].length)) : null; }
+  catch { /* Empty responses and invalid JSON remain unverified. */ }
+  return { status, data, ok: result.status === 0 && status >= 200 && status < 300,
+    unavailable: result.error?.code === 'ENOENT' };
+}
+
+/** Verify ownership and upstream before offering an existing personal Fork for contributions. */
+function readFork(response, login) {
+  if (response.status === 404) { return { state: 'absent', url: null }; }
+  if (!response.ok) { return { state: 'unknown', url: null }; }
+  const repo = response.data;
+  if (repo?.fork === true && repo.parent?.full_name?.toLowerCase() === REPOSITORY
+    && repo.full_name?.toLowerCase() === `${login}/openyida`.toLowerCase()
+    && repo.owner?.login?.toLowerCase() === login.toLowerCase()) {
+    return { state: 'ready', url: `https://github.com/${login}/openyida` };
+  }
+  return { state: 'conflict', url: null };
+}
+
+/** Include renamed personal Forks; never infer absence from an incomplete or failed query. */
+function inspectFork(login, options) {
+  const query = 'query { repository(owner:"openyida", name:"openyida") { forks(first:100, affiliations:[OWNER]) { nodes { nameWithOwner isFork owner { login } parent { nameWithOwner } } pageInfo { hasNextPage } } } }';
+  const response = request('POST', 'graphql', options, ['--raw-field', `query=${query}`]);
+  const connection = response.data?.data?.repository?.forks;
+  if (!response.ok || response.data?.errors || !Array.isArray(connection?.nodes)
+    || typeof connection.pageInfo?.hasNextPage !== 'boolean') { return { state: 'unknown', url: null }; }
+  for (const repo of connection.nodes) {
+    const [owner, name, extra] = String(repo?.nameWithOwner || '').split('/');
+    if (repo?.isFork === true && repo.parent?.nameWithOwner?.toLowerCase() === REPOSITORY
+      && owner.toLowerCase() === login.toLowerCase() && repo.owner?.login?.toLowerCase() === login.toLowerCase()
+      && /^[A-Za-z0-9_.-]+$/.test(name || '') && !extra) {
+      return { state: 'ready', url: `https://github.com/${owner}/${name}` };
+    }
+  }
+  if (connection.nodes.length || connection.pageInfo.hasNextPage) { return { state: 'unknown', url: null }; }
+  return readFork(request('GET', `repos/${login}/openyida`, options), login);
+}
+
+/** Read account, Star and personal Fork state without changing it; unknown is never treated as absent. */
+function inspect(options) {
+  const account = request('GET', 'user', options);
+  const login = account.data?.login;
+  const base = { success: true, repository: REPOSITORY, links, mutationPerformed: false, issueRequiresStarOrFork: false };
+  if (!account.ok || account.data?.type !== 'User' || !/^[A-Za-z0-9][A-Za-z0-9-]{0,38}$/.test(login || '')) {
+    return { ...base, authenticated: false, reason: account.unavailable ? 'gh_unavailable' : 'account_unverified',
+      login: null, starred: null, fork: { state: 'unknown', url: null }, suggestedActions: [] };
+  }
+  const star = request('GET', `user/starred/${REPOSITORY}`, options);
+  const starred = star.ok && star.status === 204 ? true : star.status === 404 ? false : null;
+  const fork = inspectFork(login, options);
+  return { ...base, authenticated: true, login, starred, fork,
+    suggestedActions: [...(starred === false ? ['star'] : []), ...(fork.state === 'absent' ? ['fork'] : [])] };
+}
+
+/** Execute one explicitly authorized action, then read it back. No retry, clone, remote change or Issue submission. */
+function execute(parsed, options = {}) {
+  const { action } = parseArgs([parsed.action, ...(parsed.confirm === true ? ['--confirm'] : [])]);
+  if ((options.env || process.env).OPENYIDA_MANAGED_RUN === '1') {
+    throw new CliError(t('feedback_github.failed'), { code: 'FEEDBACK_GITHUB_MANAGED_DENIED' });
+  }
+  const result = inspect(options);
+  if (action === 'status') { return result; }
+  const fail = (stage, mutationPerformed = false) => {
+    throw new CliError(t('feedback_github.failed'), { code: 'FEEDBACK_GITHUB_FAILED',
+      details: { stage, action, mutationPerformed, inspectBeforeRetry: true } });
+  };
+  if (!result.authenticated) { fail('account'); }
+  if (action === 'star') {
+    if (result.starred === true) { return { ...result, action, alreadyApplied: true }; }
+    if (result.starred !== false) { fail('star-status'); }
+    const written = request('PUT', `user/starred/${REPOSITORY}`, options);
+    if (!written.ok) { fail('star-write', 'unknown'); }
+    const verified = request('GET', `user/starred/${REPOSITORY}`, options);
+    if (!verified.ok || verified.status !== 204) { fail('star-readback', true); }
+    return { ...result, action, starred: true, mutationPerformed: true, readbackVerified: true,
+      suggestedActions: result.suggestedActions.filter(item => item !== 'star') };
+  }
+  if (result.fork.state === 'ready') { return { ...result, action, alreadyApplied: true }; }
+  if (result.fork.state !== 'absent') { fail('fork-status'); }
+  const created = request('POST', `repos/${REPOSITORY}/forks`, options, ['--field', 'default_branch_only=true']);
+  if (!created.ok) { fail('fork-write', 'unknown'); }
+  const fork = readFork(request('GET', `repos/${result.login}/openyida`, options), result.login);
+  return { ...result, action, fork, mutationPerformed: true, readbackVerified: fork.state === 'ready',
+    completion: fork.state === 'ready' ? 'verified' : 'pending-verification',
+    suggestedActions: result.suggestedActions.filter(item => item !== 'fork') };
+}
+
+/** CLI entrypoint. The confirmation flag attests to the user's explicit choice of this action. */
+function run(args = []) {
+  const parsed = parseArgs(args);
+  console.log(JSON.stringify(execute(parsed), null, 2));
+}
+
+module.exports = { parseArgs, execute, run };

package/lib/print-template/builder.js

@@ -0,0 +1,232 @@
+'use strict';
+
+const { object, fail, json, safe, label, content } = require('./model');
+const codes = require('./codes');
+const TYPES = new Set(['value', 'date', 'img', 'table', 'commonCheckbox', 'yidaApproveNode']);
+const FONTS = ['宋体', 'Arial', '新宋', '微软雅黑', '黑体'];
+// The native PDF renderer recognizes these editor values, not localized font labels.
+const FONT_VALUES = { 宋体: 'SimSun', Arial: 'Arial Unicode MS', 新宋: 'NSimSun', 微软雅黑: 'Microsoft YaHei', 黑体: 'SimHei' };
+
+/** Escape literal values in XHTML and native dynamic-field attributes. */
+function escape(value) {
+  return String(value ?? '').replace(/[&<>"']/g, ch => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[ch]));
+}
+
+/** Fail on unrecognized configuration instead of silently dropping requested features. */
+function keys(value, allowed, name) {
+  if (!object(value) || Object.keys(value).some(key => !allowed.includes(key))) { fail('INVALID_CONFIG', name); }
+}
+
+/** Build printable field groups from the same dictionaries consumed by the native editor. */
+function fields(raw, codeCapability = { enabled: false, reason: 'capability_unverified' }) {
+  if (!object(raw) || !Array.isArray(raw.formField) && !Array.isArray(raw.forms) || !Array.isArray(raw.systemField)) {
+    fail('INVALID_RESPONSE', 'print dictionary');
+  }
+  const normalize = (items, group, parent) => (items || []).map(item => ({ ...item, label: label(item.description), group,
+    ...(codes.eligible(item) ? { codeFormats: codeCapability.enabled ? [...codes.FORMATS] : [],
+      codeUnavailableReason: codeCapability.enabled ? null : codeCapability.reason } : {}),
+    parentKey: parent || null, children: normalize(item.children, group, item.key) }));
+  return [...normalize(raw.formField, 'form'), ...normalize(raw.systemField, 'system'),
+    ...normalize(raw.remarkRecord ? [raw.remarkRecord] : [], 'system'), ...normalize(raw.approvedNode, 'approval'),
+    ...(raw.forms || []).flatMap(form => normalize(form.formField, 'form', form.id).map(item => ({ ...item, formKey: form.id })))];
+}
+
+/** Resolve exact IDs or unambiguous names, scoped to a parent table when supplied. */
+function resolve(items, ref) {
+  if (typeof ref !== 'string' || !ref) { fail('INVALID_CONFIG', 'field reference'); }
+  const byId = items.filter(item => item.key === ref);
+  const matches = byId.length ? byId : items.filter(item => item.label === ref);
+  if (matches.length !== 1) { fail('FIELD_REFERENCE', ref, { candidates: matches.map(item => ({ key: item.key, label: item.label })) }); }
+  return matches[0];
+}
+
+/** Reject executable HTML/Velocity input; native macros remain data references only. */
+function html(value) {
+  if (typeof value !== 'string' || /<\s*\/?\s*(?:script|iframe|object|embed|form|link|meta|style)\b|\bon\w+\s*=|javascript\s*:|data\s*:|#\s*(?:set|evaluate|parse|include|foreach|if|macro)\b|\$!?\{/i.test(value)) {
+    fail('INVALID_CONFIG', 'static XHTML');
+  }
+  return value;
+}
+
+/** Validate a complete native body while preserving advanced native attributes verbatim. */
+function validateNative(raw, dictionary) {
+  const result = content(raw);
+  safe(result);
+  const attrs = result.termJsonAttr;
+  const entries = result.dictionaryList;
+  const ids = attrs.map(item => item?.id);
+  if (ids.some(id => typeof id !== 'string' || !/^[\w-]+$/.test(id)) || new Set(ids).size !== ids.length
+    || entries.length !== attrs.length || new Set(entries.map(item => item.id)).size !== entries.length) {
+    fail('INVALID_CONFIG', 'native component IDs');
+  }
+  const all = [];
+  const visit = items => items.forEach(item => { all.push(item); visit(item.children || []); });
+  visit(dictionary);
+  for (const attr of attrs) {
+    const entry = entries.find(item => item.id === attr.id);
+    const code = entry && codes.resolveNative(entry.key, all);
+    const labelKey = typeof attr.content === 'string' && /exttype="label"/.test(attr.content)
+      ? /fieldkey="([^"]+)"/.exec(attr.content)?.[1] : null;
+    if (!TYPES.has(attr.type) || !entry || entry.type !== attr.type || (code ? attr.type !== 'img' : !all.some(field => field.key === (labelKey || entry.key)))
+      || typeof attr.content !== 'string' || !result.termContents.includes(` #macro_${attr.id} `)) {
+      fail('INVALID_CONFIG', `native component: ${attr.id}`);
+    }
+    // Native placeholders use ${label} in disabled input values. They are never evaluated locally.
+    html(attr.content.replace(/\$!?\{[^}]*\}/g, 'FIELD'));
+    // Repeating tables keep child image keys inside the parent macro, outside dictionaryList.
+    for (const [input] of attr.content.matchAll(/<input\b[^>]*>/gi)) {
+      const key = /\bkey\s*=\s*(["'])(.*?)\1/i.exec(input)?.[2];
+      if (codes.resolveNative(key, all) && !/\bkeytype\s*=\s*(["'])img\1/i.test(input)) {
+        fail('INVALID_CONFIG', 'native code image');
+      }
+    }
+  }
+  const macros = [...result.termContents.matchAll(/#macro_([\w-]+)/g)].map(match => match[1]);
+  if (macros.some(id => !ids.includes(id))) { fail('INVALID_CONFIG', 'unresolved macro'); }
+  html(result.termContents.replace(/ #macro_[\w-]+ /g, 'FIELD'));
+  return { termContents: result.termContents, termJsonAttr: attrs, dictionaryList: entries };
+}
+
+/** Compile named sections into the existing editor's native macros, never browser-only placeholders. */
+function build(config, dictionary) {
+  keys(config, ['title', 'style', 'font', 'fontSize', 'width', 'blocks'], 'document');
+  const theme = config.style || 'document';
+  if (!['document', 'compact', 'formal'].includes(theme) || config.font !== undefined && !FONTS.includes(config.font)
+    || config.title !== undefined && typeof config.title !== 'string'
+    || config.fontSize !== undefined && (!Number.isFinite(config.fontSize) || config.fontSize < 8 || config.fontSize > 72)
+    || config.width !== undefined && (!Number.isFinite(config.width) || config.width < 160 || config.width > 2000)
+    || !Array.isArray(config.blocks) || !config.blocks.length) { fail('INVALID_CONFIG', 'document style / blocks'); }
+  const padding = theme === 'compact' ? '3px 5px' : '7px 9px';
+  const border = theme === 'formal' ? '#333333' : '#777777';
+  const cellStyle = `border:1px solid ${border};padding:${padding};vertical-align:top;`;
+  const tableStyle = `border-collapse:collapse;width:100%;border:1px solid ${border};`;
+  const termJsonAttr = [];
+  const dictionaryList = [];
+  let counter = 0;
+  const next = type => `${type}_${++counter}`;
+  const scalar = (field, options = {}, nested = false) => {
+    if (options.render !== undefined) { field = codes.transform(field, options.render); }
+    if (field.type === 'commonCheckbox') {
+      if (nested || !Array.isArray(field.children) || !field.children.length) { fail('UNSUPPORTED', `checkbox: ${field.label}`); }
+      const id = next('commonCheckbox');
+      const body = `<span id="${id}" key="${escape(field.key)}" contenteditable="false" class="render-commonCheckbox">${field.children.map(child => `<label key="${escape(child.key)}" keytype="${escape(child.type)}" keydescription="${escape(child.label)}">☐\${${escape(child.label)}}</label>`).join(' ')}</span>`;
+      termJsonAttr.push({ id, type: 'commonCheckbox', content: body });
+      dictionaryList.push({ id, type: 'commonCheckbox', key: field.key, description: field.label });
+      return ` #macro_${id} `;
+    }
+    if (!['value', 'date', 'img'].includes(field.type)) { fail('UNSUPPORTED', `${field.label}: ${field.type}`); }
+    const id = next(field.type);
+    let extra = '';
+    const width = options.width ?? (field.codeFormat === 'qrcode' ? 128 : field.codeFormat === 'barcode' ? 240 : undefined);
+    const height = options.height ?? (field.codeFormat === 'qrcode' ? 128 : field.codeFormat === 'barcode' ? 80 : undefined);
+    if (field.type === 'date') {
+      const format = options.format || 'yyyy-MM-dd';
+      if (!(field.children || []).some(child => child.key === format)) { fail('INVALID_CONFIG', `date format: ${format}`); }
+      extra += ` dateformat="${escape(format)}"`;
+    } else if (options.format !== undefined) { fail('INVALID_CONFIG', `format: ${field.label}`); }
+    if (width !== undefined || height !== undefined) {
+      if (field.type !== 'img' || [width, height].filter(v => v !== undefined).some(v => !Number.isFinite(v) || v <= 0 || v > 2000)) {
+        fail('INVALID_CONFIG', 'image dimensions');
+      }
+      extra += width ? ` width="${width}" td-width="${Number.isInteger(width) ? `${width}.0` : width}"` : '';
+      extra += height ? ` height="${height}" td-height="${Number.isInteger(height) ? `${height}.0` : height}"` : '';
+    }
+    const input = `<input id="${id}" key="${escape(field.key)}" keytype="${field.type}" type="text" disabled="disabled" class="render-${field.type}" style="border:0;background-color:transparent;color:inherit;font:inherit;" title="${escape(field.label)}(${escape(field.key)})" value="\${${escape(field.label)}}"${extra}/>`;
+    if (nested) { return input; }
+    termJsonAttr.push({ id, type: field.type, content: input });
+    dictionaryList.push({ id, type: field.type, key: field.key, description: field.label });
+    return ` #macro_${id} `;
+  };
+  const dynamic = (ref, options = {}) => {
+    const field = resolve(dictionary, ref);
+    if (field.type === 'table' || field.group === 'approval') {
+      if (['format', 'width', 'height', 'render'].some(key => options[key] !== undefined)) { fail('INVALID_CONFIG', 'table options'); }
+      const id = next(field.group === 'approval' ? 'yidaApproveNode' : 'table');
+      const selected = options.columns || field.children.map(child => child.key);
+      if (!Array.isArray(selected) || !selected.length) { fail('INVALID_CONFIG', 'table columns'); }
+      const columns = selected.map(col => {
+        if (typeof col === 'string') { col = { field: col }; }
+        keys(col, ['field', 'label', 'format', 'width', 'height', 'render'], 'table column');
+        return { ...col, definition: resolve(field.children, col.field) };
+      });
+      const row = `<tr class="render-table row">${columns.map(col => `<td style="${cellStyle}">${scalar(col.definition, col, true)}</td>`).join('')}</tr>`;
+      const head = `<tr class="render-table head">${columns.map(col => `<td style="${cellStyle}">${escape(col.label ?? col.definition.label)}</td>`).join('')}</tr>`;
+      const type = field.group === 'approval' ? 'yidaApproveNode' : 'table';
+      const body = type === 'table'
+        ? `<table id="${id}" key="${escape(field.key)}" class="render-table" style="${tableStyle}"><tbody>${head}${row}</tbody></table>`
+        : `<div id="${id}" key="${escape(field.key)}" class="render-yidaApproveNode"><div>${columns.map(col => `<p>${escape(col.label ?? col.definition.label)}：${scalar(col.definition, col, true)}</p>`).join('')}</div></div>`;
+      termJsonAttr.push({ id, type, content: body });
+      dictionaryList.push({ id, type, key: field.key, description: field.label });
+      return ` #macro_${id} `;
+    }
+    return scalar(field, options);
+  };
+  const blocks = config.blocks.map(block => {
+    if (!object(block)) { fail('INVALID_CONFIG', 'block'); }
+    if (block.type === 'heading' || block.type === 'text') {
+      keys(block, ['type', 'text', 'align'], block.type);
+      if (typeof block.text !== 'string' || block.align && !['left', 'center', 'right'].includes(block.align)) { fail('INVALID_CONFIG', block.type); }
+      const tag = block.type === 'heading' ? 'h2' : 'p';
+      return `<${tag} style="text-align:${block.align || 'left'};">${escape(block.text)}</${tag}>`;
+    }
+    if (block.type === 'fields') {
+      keys(block, ['type', 'fields', 'columns'], 'fields block');
+      const count = block.columns ?? 1;
+      if (![1, 2, 3, 4].includes(count) || !Array.isArray(block.fields) || !block.fields.length) { fail('INVALID_CONFIG', 'fields block'); }
+      const cells = block.fields.map(ref => {
+        const item = typeof ref === 'string' ? { field: ref } : ref;
+        keys(item, ['field', 'label', 'format', 'width', 'height', 'render'], 'field');
+        const field = resolve(dictionary, item.field);
+        if (field.type === 'table' || field.group === 'approval') { fail('INVALID_CONFIG', 'use table block'); }
+        return `<td style="${cellStyle}width:${100 / count}%;">${escape(item.label ?? field.label)}：${dynamic(item.field, item)}</td>`;
+      });
+      const rows = [];
+      for (let i = 0; i < cells.length; i += count) { rows.push(`<tr>${cells.slice(i, i + count).join('')}${`<td style="${cellStyle}"></td>`.repeat(Math.max(0, count - cells.slice(i, i + count).length))}</tr>`); }
+      return `<table style="${tableStyle}"><tbody>${rows.join('')}</tbody></table>`;
+    }
+    if (block.type === 'table' || block.type === 'field') {
+      keys(block, ['type', 'field', 'columns', 'format', 'width', 'height', 'render'], block.type);
+      const field = resolve(dictionary, block.field);
+      if (block.type === 'table' && field.type !== 'table' && field.group !== 'approval') { fail('INVALID_CONFIG', 'table field'); }
+      if (block.columns !== undefined && field.type !== 'table' && field.group !== 'approval') { fail('INVALID_CONFIG', 'columns require table'); }
+      return dynamic(block.field, block);
+    }
+    if (codes.FORMATS.includes(block.type)) {
+      keys(block, ['type', 'field', 'width', 'height'], block.type);
+      const width = block.width ?? (block.type === 'qrcode' ? 128 : 240);
+      const height = block.height ?? (block.type === 'qrcode' ? 128 : 80);
+      const macro = dynamic(block.field, { render: block.type, width, height });
+      return `<table style="border-collapse:collapse;width:${width}px;"><tbody><tr><td style="width:${width}px;height:${height}px;padding:0;border:0;">${macro}</td></tr></tbody></table>`;
+    }
+    if (block.type === 'html') {
+      keys(block, ['type', 'html'], 'html block');
+      // Static XHTML supports arbitrary arrangements; dynamic tokens must resolve to live fields.
+      const result = html(block.html).replace(/\{\{([^{}]+)\}\}/g, (_, ref) => dynamic(ref.trim()));
+      if (/\{\{|\}\}/.test(result)) { fail('INVALID_CONFIG', 'unclosed field token'); }
+      return result;
+    }
+    if (block.type === 'image') {
+      keys(block, ['type', 'url', 'width', 'height'], 'image block');
+      if (typeof block.url !== 'string' || !/^https:\/\//.test(block.url) || [block.width, block.height].filter(v => v !== undefined).some(v => !Number.isFinite(v) || v <= 0 || v > 2000)) { fail('INVALID_CONFIG', 'image'); }
+      return `<p><img src="${escape(block.url)}"${block.width ? ` width="${block.width}"` : ''}${block.height ? ` height="${block.height}"` : ''}/></p>`;
+    }
+    if (block.type === 'divider') { keys(block, ['type'], 'divider'); return '<hr/>'; }
+    fail('UNSUPPORTED', `block: ${block.type}`);
+  });
+  const title = config.title ? `<h1 style="text-align:center;">${escape(config.title)}</h1>` : '';
+  const termContents = `<div style="font-family:${FONT_VALUES[config.font || '宋体']};font-size:${config.fontSize || 14}px;line-height:1.6;${config.width ? `width:${config.width}px;` : ''}">${title}${blocks.join('<p></p>')}</div>`;
+  return validateNative({ termContents, termJsonAttr, dictionaryList }, dictionary);
+}
+
+/** Accept authored documents or complete native exports; partial native bodies are rejected. */
+function compile(raw, dictionary) {
+  if (object(raw) && Object.hasOwn(raw, 'document')) {
+    keys(raw, ['document'], 'config');
+    return build(raw.document, dictionary);
+  }
+  keys(raw, ['termContents', 'termJsonAttr', 'dictionaryList'], 'native config');
+  if (['termContents', 'termJsonAttr', 'dictionaryList'].some(key => !Object.hasOwn(raw, key))) { fail('INVALID_CONFIG', 'complete native config required'); }
+  return validateNative({ ...raw, termJsonAttr: json(raw.termJsonAttr, 'termJsonAttr'), dictionaryList: json(raw.dictionaryList, 'dictionaryList') }, dictionary);
+}
+
+module.exports = { fields, resolve, build, compile, validateNative, escape };