openyida 2026.10.21 → 2026.10.22-beta.0

package/lib/core/locales/en.js

@@ -4,6 +4,17 @@
 'use strict';
 
 module.exports = {
+  qwenwork: {
+    credential_missing: 'No cloud Agent credential is available. Run this command inside the QwenWork cloud execution environment.',
+    gateway_missing: 'QWENWORK_GATEWAY_URL or MULE_GATEWAY_URL is required.',
+    invalid_url: 'The QwenWork gateway must use HTTPS (HTTP is allowed only for loopback) and contain no credentials, query or fragment.',
+    request_failed: 'The QwenWork request failed. Check the stage and HTTP status in the diagnostic details.',
+    request_timeout: 'The QwenWork request timed out.',
+    invalid_response: 'QwenWork returned an invalid authentication or identity response.',
+    identity_mismatch: 'The returned QwenWork identity does not match the cloud execution context or exchanged credential.',
+    expired_token: 'QwenWork returned an expired user credential.',
+    usage: 'Usage: openyida auth qwenwork user-info [--json]',
+  },
   print_template: {
     'description': 'Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs',
     'error': 'Print template operation failed: {0}',
@@ -39,7 +50,10 @@ module.exports = {
   integration_update_v2: {'usage': 'integration update <appType> <formUuid> <processCode> --patch patch.json [--dry-run] [--expect fingerprint] [--publish]'},
 
   conditional_actors: { unavailable: 'Conditional actors are unavailable or could not be verified.', invalid: 'Invalid conditional actors: {0}' },
-  integration_triggers: { invalid: 'Invalid automation trigger: {0}' },
+  integration_triggers: {
+    invalid: 'Invalid automation trigger: {0}',
+    end_required: 'Choose the timer end condition: set schedule.maxCount (1–100) for a run count or schedule.expireDate (expiry in milliseconds) for a specified time. For long-running schedules, choose a distant expiry and show the actual date in the configuration summary.',
+  },
   permission_conditions: { invalid: 'Invalid permission conditions: {0}' },
   agent: {
     preflight_cli_detected: 'CLI detected; runtime will discover and report login, protocol and model status.',
@@ -477,7 +491,7 @@ Examples:
     login_usage: 'Usage: openyida login [entryUrl|--public|--alibaba|--intl] [--no-browser] [--check-only] [--json] [--client-id <clientId>]',
     login_example: 'Examples:\n  openyida login                         # Automatically open the browser via OAuth loopback login\n  openyida login --no-browser            # Let the caller handle the authorization URL\n  openyida login --check-only --json     # Check token auth status only\n  openyida login --intl                  # Login against the international environment\n  OPENYIDA_NO_BROWSER=1 openyida login   # Suppress auto-opening the browser with an environment variable\n  openyida auth login                    # Login alias',
     login_unsupported_option: 'Removed legacy login option is no longer supported: {0}. Use token/OAuth login; env token mode reads only OPENYIDA_* tokens.',
-    auth_usage: 'Usage: openyida auth <status|login|refresh|logout|profiles|profile switch>',
+    auth_usage: 'Usage: openyida auth <status|login|refresh|logout|profiles|profile switch|qwenwork user-info> [--json]',
     auth_example: 'Examples:\n  openyida auth status                         # View login status\n  openyida auth profiles                       # List existing login profiles\n  openyida auth profile switch <auth_profile>  # Switch current project to an existing profile\n  openyida auth login                          # Add a profile when the target does not exist\n  openyida auth refresh                        # Refresh login session\n  openyida auth logout                         # Unbind current project auth\n  openyida auth logout --profile <auth_profile> # Delete a shared profile explicitly',
     org_usage: 'Usage: openyida org <list|switch> [--json] [--corp-id <corpId>]',
     org_example: 'Examples:\n  openyida org list --json                    # List accessible organizations\n  openyida org switch --corp-id dingXXX       # Switch existing profiles first; login to add one if missing',
@@ -1132,7 +1146,7 @@ Examples:
 
   import_example2: '      openyida import ./yida-export.json "Quality Traceability System (Production)"',
   exec_failed: '\n❌ Execution failed: {0}',
-  auth_usage: 'Usage: openyida auth <status|login|refresh|logout|profiles|profile switch>',
+  auth_usage: 'Usage: openyida auth <status|login|refresh|logout|profiles|profile switch|qwenwork user-info> [--json]',
   auth_example: 'Examples:\n  openyida auth status                         # View login status\n  openyida auth profiles                       # List existing login profiles\n  openyida auth profile switch <auth_profile>  # Switch current project to an existing profile\n  openyida auth login                          # Add a profile when the target does not exist\n  openyida auth refresh                        # Refresh login session\n  openyida auth logout                         # Unbind current project auth\n  openyida auth logout --profile <auth_profile> # Delete a shared profile explicitly',
   org_usage: 'Usage: openyida org <list|switch> [--json] [--corp-id <corpId>]',
   org_example: 'Examples:\n  openyida org list --json                    # List accessible organizations\n  openyida org switch --corp-id dingXXX       # Switch existing profiles first; login to add one if missing',
@@ -1531,6 +1545,10 @@ Examples:
     lint_setstate_non_timestamp: 'this.setState writes a non-timestamp field. Custom page business state should live in _customState and be updated via forceUpdate()/setCustomState(); this.setState should only carry the timestamp contract field',
     lint_self_binding_missing: 'renderJsx uses this without declaring var self = this;. Add var self = this; at the top of renderJsx and use self inside closures/callbacks to avoid losing this',
     lint_echarts_dom_ready: 'echarts.init is not wrapped in setTimeout; the container may not be mounted yet so the chart may not render. Use setTimeout(function(){ /* echarts.init */ }, 300)',
+    lint_resize_observer_cleanup: 'ResizeObserver has no disconnect()/unobserve() cleanup and may keep measuring after unmount. Release it from the effect or lifecycle cleanup.',
+    lint_responsive_viewport_only: 'Layout changes only from viewport width, so a narrow desktop sidebar, drawer, or iframe may not degrade. Measure the content container with @container or a cleaned-up ResizeObserver. Add openyida-responsive-viewport-ok only for intentional viewport-owned behavior.',
+    lint_responsive_fixed_width: 'A fixed width of %spx may overflow a narrow container. Prefer max-width, minmax(0, 1fr), or local scrolling. Add openyida-responsive-fixed-width-ok only for an intentional fixed canvas.',
+    lint_responsive_page_scale: 'Whole-page scale/zoom was detected. Responsive layouts should reflow content while preserving readable text and touch targets. Add openyida-responsive-scale-ok only for an intentionally scaled local visualization.',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
     lint_echarts_rich_label_formatter: 'ECharts label.formatter returning rich text templates is unstable in Yida custom pages; prefer plain formatter strings or precomputed label text',
@@ -2331,6 +2349,16 @@ module.exports.app_theme = {
 module.exports.help.cmd_app_theme_snapshot = 'Archive application theme settings and CSS (read-only)';
 module.exports.help.cmd_app_theme_restore = 'Check or restore an application theme snapshot (supported exact values only)';
 
+Object.assign(module.exports.process_tasks || (module.exports.process_tasks = {}), {
+  arguments_invalid: 'Invalid arguments: query requires appType and --process-inst-id; transfer also requires --form-uuid, --to-user-id, --expect-form-name and --expect-form-type process. taskId must be a positive integer; unknown options are not supported.',
+  query_failed: 'Process task query failed; no transfer was performed.',
+  response_invalid: 'The task response structure, task ID or process ownership could not be verified.',
+  not_running: 'The specified task is not running in the target process, or no running task exists; no transfer was performed.',
+  ambiguous: 'Multiple running tasks exist. Query the task list and specify --task-id; no transfer was performed.',
+  rejected: 'The platform rejected the administrator transfer. Check permissions and task status.',
+  result_unknown: 'The administrator transfer result is unknown. Use nextStep to read the tasks; do not automatically retry the transfer.',
+  unverified: 'The transfer was accepted, but readback could not verify the recipient. Use nextStep to read the tasks; do not automatically retry the transfer.',
+});
 module.exports.data_manage_style = {
   'usage': 'openyida data-manage-style guide [--json]\nopenyida data-manage-style list [--json]\nopenyida data-manage-style generate --app APP_ID --form FORM-ID --style <id> --base-css <snapshot/theme.css> --output <new.css> [--focus balanced|actions] [--field-id <actualId>]... [--emphasize-field <actualId>]... [--tag-field <selectFieldId>]... [--follow-shell] [--json]',
   'data_style_invalid': 'Invalid style parameters; use actual app/form/field IDs and a style returned by list.',
@@ -2427,6 +2455,26 @@ Object.assign(module.exports.help, {'cmd_formula_contracts': 'Show formula forma
 Object.assign(module.exports.formula_v2, {'parallel_formula': 'Use conditions/rules or all:true for parallel branches; expression is currently supported only for route branches.'});
 
 module.exports.feedback_report = {
+  body: {
+    summary: 'Your goal',
+    actual: 'What happened',
+    expected: 'Expected result',
+    incident: 'Environment when the problem occurred',
+    command: 'Related operation',
+    steps: 'How to reproduce',
+    impact: 'Impact',
+    evidence: 'Observed evidence',
+    attempts: 'Attempts and results',
+    cause: 'Cause and confidence',
+    cause_evidence: 'Evidence for assessment',
+    next: 'Next verification',
+    screenshots: 'Screenshots',
+    review_image: 'Review image before sharing',
+    limitations: 'Test limitations',
+    generator: 'Report generator environment (not the incident environment)',
+    unknown: 'Unknown / not verified',
+    draft: 'Local draft — not submitted. Review text and screenshots for customer data, credentials and private information before sharing.',
+  },
   comparison: 'Test pass/fail requires a command, actual result and evidence.',
   screenshots: 'Choose at most five PNG/JPEG/WebP screenshots of at most 10 MiB each.',
   text: 'Feedback text fields must be strings of at most 12000 characters.',
@@ -2514,7 +2562,18 @@ module.exports.task_center = {
 };
 
 module.exports.feedback_github = {
-  usage: 'Usage: openyida feedback github <status|star|fork> [--confirm] [--json]',
+  setup_inspect_installation: 'Installation is unverified. Check gh --version, package-manager state or reopen the terminal before deciding to retry; keep the draft.',
+  setup_check_execution: 'gh could not run. Check execution permissions or the local environment; do not reinstall or switch accounts automatically.',
+  setup_confirm_install: 'GitHub CLI can be installed. Explain the plan and obtain consent before openyida feedback github setup --install --confirm --json; the web option remains available.',
+  setup_manual_install: 'Automatic installation is unavailable. Use the official instructions, an existing connector or the web; keep the draft.',
+  setup_ready: 'GitHub CLI and the current account are verified. Resume the draft; confirm public content and required permissions before submission.',
+  setup_browser_login: 'GitHub CLI is available and login is required. With consent, guide browser authorization, then rerun setup --json to verify.',
+  setup_check_account: 'GitHub CLI is available, but the account is unverified. Check network, authorization or rate limits; do not infer a missing account or reinstall.',
+  setup_consent: 'Use --install --confirm only after consent to install GitHub CLI and required dependencies in the package manager default location. Windows accepts WinGet source/package agreements and may need user-approved system permissions. No automatic manager installation, privilege escalation or login.',
+  setup_privacy: 'Installation is not consent to publish. The user authorizes in the browser; never request passwords, codes or tokens. If gh cannot store credentials securely, use the web or a secure connector. Keep account and tool diagnostics out of feedback reports.',
+  usage: 'Usage: openyida feedback github setup [--install --confirm] [--json]; openyida feedback github <status|star|fork> [--confirm] [--json]',
   confirmation: 'Star or Fork requires the user to explicitly choose that action before --confirm. Neither is required to submit an Issue.',
   failed: 'The GitHub action could not be verified. Inspect its status before retrying; this does not block Issue submission.',
 };
+
+module.exports.process_dynamic_actors = { invalid: 'Invalid process actor configuration. Check details.reason, selection range and actual member fields.' };

package/lib/core/locales/zh.js

@@ -4,6 +4,17 @@
 'use strict';
 
 module.exports = {
+  qwenwork: {
+    credential_missing: '未发现云端 Agent 凭证，请在千问办公云端执行环境中运行此命令。',
+    gateway_missing: '缺少 QWENWORK_GATEWAY_URL 或 MULE_GATEWAY_URL。',
+    invalid_url: '千问网关必须使用 HTTPS（仅回环地址允许 HTTP），且不能包含账号密码、查询参数或片段。',
+    request_failed: '千问接口请求失败，请查看诊断信息中的阶段和 HTTP 状态码。',
+    request_timeout: '千问接口请求超时。',
+    invalid_response: '千问返回的认证或身份响应格式不正确。',
+    identity_mismatch: '千问返回的用户身份与云端执行上下文或兑换凭证不一致。',
+    expired_token: '千问返回的用户凭证已过期。',
+    usage: '用法：openyida auth qwenwork user-info [--json]',
+  },
   print_template: {
     'description': '管理宜搭原生打印模板、按字段生成多种单据、备份恢复与生成PDF',
     'error': '打印模板操作失败：{0}',
@@ -39,7 +50,10 @@ module.exports = {
   integration_update_v2: {'usage': 'integration update <appType> <formUuid> <processCode> --patch patch.json [--dry-run] [--expect fingerprint] [--publish]'},
 
   conditional_actors: { unavailable: 'Conditional actors are unavailable or could not be verified.', invalid: 'Invalid conditional actors: {0}' },
-  integration_triggers: { invalid: 'Invalid automation trigger: {0}' },
+  integration_triggers: {
+    invalid: 'Invalid automation trigger: {0}',
+    end_required: '请选择定时任务的结束条件：触发次数填写 schedule.maxCount（1–100），指定时间填写 schedule.expireDate（截止时间的毫秒时间戳）。长期运行可选择较远的截止日期，并在配置摘要中展示实际日期。',
+  },
   permission_conditions: { invalid: '数据权限条件无效：{0}' },
   agent: {
     preflight_cli_detected: 'CLI 已发现；登录、协议和模型状态由 runtime 检测并上报。',
@@ -1104,7 +1118,7 @@ openyida - 宜搭命令行工具
   // ── lib/import-app.js ──────────────────────────────
   import_example2: '      openyida import ./yida-export.json "质量追溯系统（生产环境）"',
   exec_failed: '\n❌ 执行失败: {0}',
-  auth_usage: '用法: openyida auth <status|login|refresh|logout|profiles|profile switch>',
+  auth_usage: '用法: openyida auth <status|login|refresh|logout|profiles|profile switch|qwenwork user-info> [--json]',
   auth_example: '示例:\n  openyida auth status                         # 查看登录状态\n  openyida auth profiles                       # 列出已有登录 profile\n  openyida auth profile switch <auth_profile>  # 切换当前项目到已有 profile\n  openyida auth login                          # 目标 profile 不存在时登录新增\n  openyida auth refresh                        # 刷新登录态\n  openyida auth logout                         # 解绑当前项目登录态\n  openyida auth logout --profile <auth_profile> # 删除指定共享 profile',
   org_usage: '用法: openyida org <list|switch> [--json] [--corp-id <corpId>]',
   org_example: '示例:\n  openyida org list --json                    # 列出可访问的组织\n  openyida org switch --corp-id dingXXX       # 优先切换已有 profile；不存在时登录新增',
@@ -1528,6 +1542,10 @@ openyida - 宜搭命令行工具
     lint_setstate_non_timestamp: '检测到 this.setState 写入非 timestamp 字段。业务态应写入 _customState 并调用 forceUpdate()/setCustomState() 触发重渲染；this.setState 仅用于 timestamp 契约字段',
     lint_self_binding_missing: 'renderJsx 内使用了 this 但未声明 var self = this;。请在 renderJsx 开头加入 var self = this;，闭包/回调内改用 self，避免 this 指向丢失',
     lint_echarts_dom_ready: 'echarts.init 未包裹在 setTimeout 中，容器可能尚未挂载导致图表不渲染。建议 setTimeout(function(){ /* echarts.init */ }, 300)',
+    lint_resize_observer_cleanup: 'ResizeObserver 缺少 disconnect()/unobserve() 清理，页面卸载后可能继续测量。请在 effect 或生命周期清理函数中释放 observer。',
+    lint_responsive_viewport_only: '布局只依据视口宽度变化，桌面侧栏、抽屉或 iframe 窄容器可能无法降级。请用 @container 或带清理的 ResizeObserver 测量实际内容容器；若确实是视口级行为，添加 openyida-responsive-viewport-ok 说明。',
+    lint_responsive_fixed_width: '检测到固定宽度 %spx，窄容器可能产生整页横向溢出。请改用 max-width、minmax(0, 1fr) 或局部滚动；确有固定画布需求时添加 openyida-responsive-fixed-width-ok 说明。',
+    lint_responsive_page_scale: '检测到 scale/zoom 整体缩放。响应式布局应重排内容并保留可读字号和点击区域；仅局部可视化确需缩放时添加 openyida-responsive-scale-ok 说明。',
     lint_yida_api_catch: 'this.utils.yida API 调用未检测到 .catch()，请补充错误处理并 toast 给用户',
     lint_echarts_legacy_map_china: 'ECharts 5 已废弃 echarts/map/js/china.js，请加载 DataV GeoJSON 后调用 echarts.registerMap("china", geoJson)',
     lint_echarts_rich_label_formatter: 'ECharts label.formatter 返回 rich text 模板在宜搭自定义页面环境不稳定，建议使用普通 formatter 字符串或预先拼好的标签文本',
@@ -2285,6 +2303,16 @@ module.exports.app_theme = {
 module.exports.help.cmd_app_theme_snapshot = '保存应用主题配置与 CSS 快照（只读）';
 module.exports.help.cmd_app_theme_restore = '检查或恢复应用主题快照（仅支持可精确恢复的配置）';
 
+Object.assign(module.exports.process_tasks || (module.exports.process_tasks = {}), {
+  arguments_invalid: '参数无效：查询需要 appType 和 --process-inst-id；转交还需要 --form-uuid、--to-user-id、--expect-form-name 和 --expect-form-type process。taskId 必须为正整数，不能使用未知参数。',
+  query_failed: '流程任务查询失败，未执行转交。',
+  response_invalid: '流程任务响应结构、任务 ID 或实例归属无法验证，未继续操作。',
+  not_running: '指定任务不是目标流程的当前运行任务，或流程没有运行中任务，未执行转交。',
+  ambiguous: '流程有多个运行中任务，请查询任务列表并明确传入 --task-id，未执行转交。',
+  rejected: '平台拒绝了管理员转交请求，请核对权限与任务状态。',
+  result_unknown: '管理员转交结果未知，请按 nextStep 只读查询，禁止自动重试转交。',
+  unverified: '转交请求已被接受，但回读未能确认接收人，请按 nextStep 只读查询，禁止自动重试转交。',
+});
 module.exports.data_manage_style = {
   'usage': 'openyida data-manage-style guide [--json]\nopenyida data-manage-style list [--json]\nopenyida data-manage-style generate --app APP_ID --form FORM-ID --style <id> --base-css <snapshot/theme.css> --output <new.css> [--focus balanced|actions] [--field-id <actualId>]... [--emphasize-field <actualId>]... [--tag-field <selectFieldId>]... [--follow-shell] [--json]',
   'data_style_invalid': '数据管理样式参数无效；请使用真实应用、表单和字段 ID，以及 list 返回的样式。',
@@ -2381,6 +2409,26 @@ Object.assign(module.exports.help, {'cmd_formula_contracts': '查看公式保存
 Object.assign(module.exports.formula_v2, {'parallel_formula': '并行分支使用 conditions/rules 或 all:true；expression 目前只适用于 route 分支。'});
 
 module.exports.feedback_report = {
+  body: {
+    summary: '想完成什么',
+    actual: '实际发生了什么',
+    expected: '希望看到什么结果',
+    incident: '问题发生时的环境',
+    command: '相关操作',
+    steps: '怎样重现',
+    impact: '影响',
+    evidence: '已观察的证据',
+    attempts: '尝试过的方法与结果',
+    cause: '可能的原因及确认程度',
+    cause_evidence: '判断依据',
+    next: '下一步验证',
+    screenshots: '问题截图',
+    review_image: '公开前请检查图片',
+    limitations: '尚未验证的范围',
+    generator: '报告生成环境（不代表问题发生时）',
+    unknown: '未知 / 尚未确认',
+    draft: '本地草稿，尚未提交。请检查文字和截图，确认没有客户数据、凭证或内部信息后再公开。',
+  },
   comparison: '测试通过或失败须提供真实命令、实际结果及证据。',
   screenshots: '截图须为明确选择的 PNG/JPEG/WebP，每张至多 10 MiB，最多 5 张。',
   text: '反馈文本字段须为不超过 12000 字符的字符串。',
@@ -2468,7 +2516,18 @@ module.exports.task_center = {
 };
 
 module.exports.feedback_github = {
-  usage: '用法：openyida feedback github <status|star|fork> [--confirm] [--json]',
+  setup_inspect_installation: '安装结果尚未核实。先检查 gh --version、包管理器状态或重新打开终端，再决定是否重试；草稿仍保留。',
+  setup_check_execution: 'gh 暂时无法运行。请检查执行权限或本机环境；不要重复安装或更换账号。',
+  setup_confirm_install: '可安装 GitHub CLI。先说明安装计划并取得用户同意，再执行 openyida feedback github setup --install --confirm --json；也可使用网页。',
+  setup_manual_install: '当前没有可用的自动安装方式。可查看官方安装说明、使用已有连接器或网页，草稿仍保留。',
+  setup_ready: 'GitHub CLI 和当前账号已验证。继续原草稿，提交前仍需核对公开内容和所需权限。',
+  setup_browser_login: 'GitHub CLI 已可用，需要登录。用户同意后引导浏览器授权，完成后再次运行 setup --json 核实。',
+  setup_check_account: 'GitHub CLI 已可用，但当前账号尚未核实。先检查网络、授权或限流；不要据此判断用户没有账号或要求重新安装。',
+  setup_consent: '仅在用户同意安装 GitHub CLI 及其必要依赖后使用 --install --confirm。使用包管理器默认位置；Windows 安装会接受 WinGet 来源和软件协议，可能需要用户批准系统权限。不自动安装包管理器、提权或登录。',
+  setup_privacy: '安装不代表同意公开提交。浏览器授权由用户完成；不索取密码、验证码或 Token。若 gh 无法安全保存凭证，改用网页或安全连接器；账号和工具诊断不写入反馈报告。',
+  usage: '用法：openyida feedback github setup [--install --confirm] [--json]; openyida feedback github <status|star|fork> [--confirm] [--json]',
   confirmation: 'Star 或 Fork 需要用户明确选择后再传入 --confirm；提交 Issue 不要求这两项操作。',
   failed: 'GitHub 操作未能核实完成，请先查询状态；这不影响提交 Issue。',
 };
+
+module.exports.process_dynamic_actors = { invalid: '流程人员来源配置无效，请按 details.reason 检查来源、范围与真实成员字段。' };

package/lib/core/query-data.js

@@ -8,6 +8,7 @@
  *   query form / get form / create form / update form / delete form / query subform
  *   query process / get process / create process / update process
  *   query operation-records / execute task / query tasks
+ *   query process-tasks / transfer task (administrator)
  */
 
 'use strict';
@@ -22,6 +23,7 @@ const { queryByCurrentApprover, validateApproverOptions } = require('./process-a
 const { buildComponentAliasMaps } = require('../app/get-schema');
 const { readFormMode } = require('../app/services/form-mode-service');
 const { fetchFormPageList } = require('../app/form-navigation');
+const processTasks = require('../process/process-tasks');
 
 const USAGE = `openyida data - Unified Yida data CLI
 
@@ -39,6 +41,8 @@ Usage:
   openyida data create process <appType> <formUuid> --process-code <processCode> (--data-json <JSON>|--data-file .cache/openyida/data.json) --expect-form-name <name> --expect-form-type process [--dept-id ID] [--resolve-aliases]
   openyida data update process <appType> --process-inst-id <processInstanceId> --form-uuid <formUuid> (--data-json <JSON>|--data-file .cache/openyida/data.json) --expect-form-name <name> --expect-form-type process [--resolve-aliases]
   openyida data query operation-records <appType> --process-inst-id <processInstanceId>
+  openyida data query process-tasks <appType> --process-inst-id <processInstanceId> [--json]
+  openyida data transfer task <appType> --process-inst-id <processInstanceId> --form-uuid <formUuid> --to-user-id <userId> --expect-form-name <name> --expect-form-type process [--remark <text>] [--task-id <taskId>] [--json]
   openyida data execute task <appType> --task-id <taskId> --process-inst-id <processInstanceId> --form-uuid <formUuid> --expect-form-name <name> --expect-form-type process --out-result <AGREE|DISAGREE> --remark <text> [--data-json JSON|--data-file .cache/openyida/data.json] [--resolve-aliases] [--no-execute-expressions y]
 
   openyida data query tasks <appType> --type <todo|created|done|submitted|cc> [--transport app-v1|app-query] [--page N] [--size N] [--keyword TEXT] [--normalized] [--process-codes JSON] [--instance-status STATUS]
@@ -69,6 +73,8 @@ const SUPPORTED_DATA_COMMANDS = new Set([
   'query:operation-records',
   'execute:task',
   'query:tasks',
+  'query:process-tasks',
+  'transfer:task',
 ]);
 
 const MUTATION_DATA_COMMANDS = new Set([
@@ -78,6 +84,7 @@ const MUTATION_DATA_COMMANDS = new Set([
   'create:process',
   'update:process',
   'execute:task',
+  'transfer:task',
 ]);
 
 function fail(message) {
@@ -149,6 +156,10 @@ function validateDataCommandBeforeAuth(action, resource, positionals, options) {
     );
   }
 
+  if ((action === 'query' && resource === 'process-tasks') || action === 'transfer') {
+    processTasks.validateArguments(positionals, options, action === 'transfer');
+  }
+
   if (MUTATION_DATA_COMMANDS.has(`${action}:${resource}`)) {
     requireOption(options, 'expect_form_name');
     requireOption(options, 'expect_form_type');
@@ -203,7 +214,7 @@ function ensureSession() {
   return authRef;
 }
 
-function parseCliOptions(tokens) {
+function parseCliOptions(tokens, strict = false) {
   const positionals = [];
   const options = {};
 
@@ -211,6 +222,9 @@ function parseCliOptions(tokens) {
     const token = tokens[i];
     if (token.startsWith('--')) {
       const key = token.slice(2).replace(/-/g, '_');
+      if (strict && Object.prototype.hasOwnProperty.call(options, key)) {
+        parseError(t('process_tasks.arguments_invalid'));
+      }
       const next = tokens[i + 1];
       if (next && !next.startsWith('--')) {
         options[key] = next;
@@ -1512,6 +1526,24 @@ async function queryTasks(positionals, options, session) {
   printResult(options.normalized ? { success: true, content: normalized } : result);
 }
 
+async function transferProcessTask(positionals, options, session) {
+  const [appType] = positionals;
+  const target = await requireExpectedFormTarget(session, appType, options.form_uuid, options);
+  const record = await readProcessInstance(session, appType, options.process_inst_id);
+  requireInstanceTarget(record, target, options.process_inst_id,
+    ['processInstanceId', 'processInstId', 'instanceId']);
+  const instanceStatus = record.processInstanceStatus || record.instanceStatus;
+  if (instanceStatus && instanceStatus !== 'RUNNING') {
+    dataError('DATA_PROCESS_TASK_NOT_RUNNING', t('process_tasks.not_running'), {
+      retryable: false, retrySafe: true, sideEffectState: 'none',
+    });
+  }
+  printResult(await processTasks.transferTask(createYidaClient({ authRef: session }), {
+    appType, formUuid: options.form_uuid, processInstanceId: options.process_inst_id,
+    taskId: options.task_id, toUserId: options.to_user_id, remark: options.remark,
+  }));
+}
+
 async function run(args) {
   if (args.length < 2) {
     parseError('缺少必填参数 action 或 resource');
@@ -1519,7 +1551,8 @@ async function run(args) {
 
   const action = args[0];
   const resource = args[1];
-  const { positionals, options } = parseCliOptions(args.slice(2));
+  const strict = action === 'transfer' || (action === 'query' && resource === 'process-tasks');
+  const { positionals, options } = parseCliOptions(args.slice(2), strict);
 
   if (
     action === 'query' &&
@@ -1551,6 +1584,11 @@ async function run(args) {
   if (action === 'query' && resource === 'operation-records') {return queryOperationRecords(positionals, options, session);}
   if (action === 'execute' && resource === 'task') {return executeTask(positionals, options, session);}
   if (action === 'query' && resource === 'tasks') {return queryTasks(positionals, options, session);}
+  if (action === 'query' && resource === 'process-tasks') {
+    return printResult(await processTasks.queryProcessTasks(
+      createYidaClient({ authRef: session }), positionals[0], options.process_inst_id));
+  }
+  if (action === 'transfer' && resource === 'task') {return transferProcessTask(positionals, options, session);}
 
   dataError('DATA_COMMAND_UNSUPPORTED', t('query_data.command_unsupported', action, resource));
 }

package/lib/core/sample.js

@@ -60,6 +60,7 @@ const SAMPLES = {
     'canvas-theme': 'canvas-theme-provider.template.jsx',
     'canvas-navigation': 'canvas-navigation.jsx',
     'canvas-view-state': 'canvas-view-state.jsx',
+    'canvas-responsive-layout': 'canvas-responsive-layout.jsx',
     'canvas-admin-entry': 'canvas-admin-entry.jsx',
     'canvas-nav-side': 'canvas-nav/side.jsx',
     'canvas-nav-top': 'canvas-nav/top.jsx',
@@ -109,6 +110,7 @@ const SAMPLE_OUTPUT_FILENAMES = {
   'openyida-page-template/form-open-container': 'form-open-container.jsx',
   'openyida-page-template/canvas-dialog': 'canvas-dialog.jsx',
   'openyida-page-template/canvas-theme': 'canvas-theme.jsx',
+  'openyida-page-template/canvas-responsive-layout': 'canvas-responsive-layout.jsx',
   'yida-design/app-theme': 'app-theme.css',
 };
 
@@ -116,6 +118,7 @@ const SAMPLE_HINTS = {
   'openyida-page-template/canvas-admin-entry': '已包含统一跳转 helper；在 CanvasThemeProvider 内渲染 CanvasAdminWorkbenchButton，填写当前 appType 与真实 workbenchFormUuid。身份读取当前应用 loginUser.isAppAdmin，未知时隐藏；默认不跳开发后台或猜测管理首页。',
   'openyida-page-template/canvas-navigation': '先从资源回读填写 appType、目标类型与页面 ID；本页 Tab 用 selectView，独立前台用 custom，管理入口用 page，表单入口接 openForm；按钮和链接共用 buildCanvasPageUrl。',
   'openyida-page-template/canvas-theme': '以 CanvasThemeProvider 包住业务组件；Tabs 用于内容切换，Segmented/Radio 用于筛选，Button 用于动作。默认轻底选中态与可读文字，controls 可供自绘控件复用；避免内层固定色覆盖。保留内置加载遮罩防闪边样式；旧页面需更新 Provider 并重新发布。',
+  'openyida-page-template/canvas-responsive-layout': '合并 useContainerLayout 与 ResponsiveLayout；按实际内容容器重排筛选栏和主辅面板，宽表仅局部滚动，图表按 data-chart-width resize。业务状态放在布局壳之上，断点切换不得修改 key 或重挂载。',
   'openyida-page-template/canvas-nav-top': '顶部默认贴顶通栏；长页先合并 canvas-nav-content，CanvasNav 传 headerOnly，有首屏背景时传 overlay；悬浮外观仅显式 floating=true。',
   'openyida-page-template/canvas-nav-content': '合并 CanvasNavigationContent；长页用 layout=document，CanvasNav 传 headerOnly/overlay；默认 sticky，受宿主限制时用 navigationPosition=fixed。工作区用 workspace，宿主已分配高度时传 height。',
   'openyida-page-template/canvas-nav-data': '页内展示用 mode=local（key/viewKey/targetType=local），不请求平台菜单；platform 需真实资源 ID；independent 或声明 access 时必须接入真实 resolveAccess。保留 PRD 顺序与分组。',

package/lib/feedback/feedback.js

@@ -51,6 +51,7 @@ function printUsage() {
   openyida feedback setup <appType> [--name "OpenYida 体验反馈"] [--path /o/openyida-feedback] [--open|--no-open]
   openyida feedback setup --create-app [--app-name "OpenYida 体验反馈"] [--name "OpenYida 体验反馈"]
   openyida feedback report --input <summary.json> --output-dir <new-directory>
+  openyida feedback github setup [--install --confirm] [--json]
   openyida feedback github <status|star|fork> [--confirm] [--json]
   openyida feedback url [--tool Codex] [--model gpt-5] [--command publish] [--diagnostics "..."]
   openyida feedback dismiss --today|--forever|--reset
@@ -58,7 +59,7 @@ function printUsage() {
 
 说明:
   ${t('feedback_report.help')}
-  setup 会在宜搭创建一个公开反馈表单，并写入本地 .cache/openyida/feedback/config.json。
+  feedback setup 会在宜搭创建一个公开反馈表单，并写入本地 .cache/openyida/feedback/config.json。
   url 只生成带脱敏元数据的填写链接，不提交任何网络请求。
   dismiss/status 只读写本地提醒状态。
 `);

package/lib/feedback/github-setup.js

@@ -0,0 +1,97 @@
+'use strict';
+
+const { spawnSync } = require('child_process');
+const { t } = require('../core/i18n');
+
+const INSTALL_URL = 'https://github.com/cli/cli#installation';
+const LOGIN_COMMAND = 'gh auth login --hostname github.com --web --skip-ssh-key';
+
+/** Fixed argv only. Capture diagnostics privately, including package-manager failures. */
+function invoke(binary, args, options, installing = false) {
+  try {
+    return (options.spawnSyncFn || spawnSync)(binary, args, {
+      shell: false, encoding: 'utf8', timeout: installing ? 300000 : 15000,
+      maxBuffer: 1024 * 1024, stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true,
+      env: { ...(options.env || process.env), GH_HOST: 'github.com', GH_PROMPT_DISABLED: '1',
+        GIT_TERMINAL_PROMPT: '0', HOMEBREW_NO_AUTO_UPDATE: '1', HOMEBREW_NO_INSTALL_CLEANUP: '1',
+        HOMEBREW_NO_INSTALL_UPGRADE: '1', HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK: '1', HOMEBREW_NO_SUDO: '1',
+        ...(installing ? { HOMEBREW_NO_ASK: '1' } : {}) },
+    });
+  } catch { return { status: null }; }
+}
+
+function toolState(options) {
+  const result = invoke('gh', ['--version'], options);
+  if (result.error?.code === 'ENOENT') { return { state: 'missing', version: null }; }
+  const version = String(result.stdout || '').match(/^gh version (\d+\.\d+\.\d+)\b/)?.[1];
+  return result.status === 0 && !result.error && version
+    ? { state: 'available', version } : { state: 'unverified', version: null };
+}
+
+function installPlan(options) {
+  const platform = options.platform || process.platform;
+  const binary = platform === 'win32' ? 'winget' : ['darwin', 'linux'].includes(platform) ? 'brew' : null;
+  if (!binary) { return { available: false, reason: 'unsupported_platform', url: INSTALL_URL }; }
+  const probe = invoke(binary, ['--version'], options);
+  if (probe.error || probe.status !== 0) {
+    return { available: false, reason: probe.error?.code === 'ENOENT' ? 'manager_missing' : 'manager_unverified', url: INSTALL_URL };
+  }
+  const args = binary === 'brew' ? ['install', 'homebrew/core/gh']
+    : ['install', '--id', 'GitHub.cli', '--exact', '--source', 'winget', '--no-upgrade', '--disable-interactivity',
+      '--accept-source-agreements', '--accept-package-agreements'];
+  return { available: true, binary, args, url: INSTALL_URL, requiresConsent: true };
+}
+
+function accountState(options) {
+  const result = invoke('gh', ['api', '--hostname', 'github.com', '--method', 'GET', 'user'], options);
+  if (result.status === 4 && !result.error) { return { state: 'login_required', login: null }; }
+  let account;
+  try { account = JSON.parse(result.stdout); } catch { /* Unknown response stays unverified. */ }
+  if (result.status === 0 && !result.error && account?.type === 'User'
+    && /^[A-Za-z0-9][A-Za-z0-9-]{0,38}$/.test(account.login || '')) {
+    return { state: 'verified', login: account.login };
+  }
+  return { state: 'unverified', login: null };
+}
+
+/** Called only after the router validates consent and the managed-run boundary. */
+function setup(parsed, options) {
+  let tool = toolState(options);
+  const installation = { attempted: false, state: 'not_requested', plan: null };
+  if (tool.state === 'missing') {
+    installation.plan = installPlan(options);
+    if (parsed.install) {
+      installation.state = 'unavailable';
+      if (installation.plan.available) {
+        installation.attempted = true;
+        const result = invoke(installation.plan.binary, installation.plan.args, options, true);
+        tool = toolState(options);
+        installation.state = result.status === 0 && !result.error && tool.state === 'available'
+          ? 'verified' : 'unverified';
+      }
+    }
+  } else if (parsed.install) {
+    installation.state = tool.state === 'available' ? 'already_available' : 'unavailable';
+  }
+  const account = tool.state === 'available' ? accountState(options) : { state: 'not_checked', login: null };
+  const ready = tool.state === 'available' && account.state === 'verified';
+  const nextStep = installation.state === 'unverified' ? 'inspect_installation'
+    : tool.state === 'unverified' ? 'check_execution'
+      : tool.state === 'missing' ? (installation.plan?.available ? 'confirm_install' : 'manual_install')
+        : ready ? 'ready' : account.state === 'login_required' ? 'browser_login' : 'check_account';
+  return {
+    success: !parsed.install || ['verified', 'already_available'].includes(installation.state),
+    action: 'setup', tool, account, ready, installation, nextStep,
+    message: t(`feedback_github.setup_${nextStep}`),
+    consentNotice: t('feedback_github.setup_consent'),
+    privacyNotice: t('feedback_github.setup_privacy'),
+    authorization: { performed: false, requiresSeparateConsent: true,
+      command: tool.state === 'available' && !ready ? LOGIN_COMMAND : null,
+      url: 'https://cli.github.com/manual/gh_auth_login' },
+    links: { install: INSTALL_URL, signup: 'https://github.com/signup', issue: 'https://github.com/openyida/openyida/issues/new' },
+    submissionPerformed: false, publicConfirmationRequired: true,
+    inspectBeforeRetry: installation.state === 'unverified',
+  };
+}
+
+module.exports = { setup };

package/lib/feedback/github.js

@@ -11,15 +11,18 @@ const links = Object.freeze({ repository: `https://github.com/${REPOSITORY}`,
 /** Parse explicit account actions; submitting an Issue never implies Star or Fork consent. */
 function parseArgs(args = []) {
   const [action, ...flags] = args;
-  if (!['status', 'star', 'fork'].includes(action) || new Set(flags).size !== flags.length
-    || flags.some(flag => !['--json', '--confirm'].includes(flag))
-    || (action === 'status' && flags.includes('--confirm'))) {
+  const install = flags.includes('--install');
+  if (!['status', 'star', 'fork', 'setup'].includes(action) || new Set(flags).size !== flags.length
+    || flags.some(flag => !['--json', '--confirm', '--install'].includes(flag))
+    || (install && action !== 'setup')
+    || (action === 'status' && flags.includes('--confirm'))
+    || (action === 'setup' && !install && flags.includes('--confirm'))) {
     throw new CliError(t('feedback_github.usage'), { code: 'FEEDBACK_GITHUB_USAGE' });
   }
-  if (action !== 'status' && !flags.includes('--confirm')) {
-    throw new CliError(t('feedback_github.confirmation'), { code: 'FEEDBACK_GITHUB_CONFIRMATION_REQUIRED' });
+  if ((['star', 'fork'].includes(action) || install) && !flags.includes('--confirm')) {
+    throw new CliError(t(install ? 'feedback_github.setup_consent' : 'feedback_github.confirmation'), { code: 'FEEDBACK_GITHUB_CONFIRMATION_REQUIRED' });
   }
-  return { action, confirm: flags.includes('--confirm') };
+  return { action, confirm: flags.includes('--confirm'), ...(action === 'setup' ? { install } : {}) };
 }
 
 /** Run gh against github.com only. Never expose its raw output or credential diagnostics. */
@@ -90,10 +93,12 @@ function inspect(options) {
 
 /** Execute one explicitly authorized action, then read it back. No retry, clone, remote change or Issue submission. */
 function execute(parsed, options = {}) {
-  const { action } = parseArgs([parsed.action, ...(parsed.confirm === true ? ['--confirm'] : [])]);
+  const validated = parseArgs([parsed.action, ...(parsed.confirm === true ? ['--confirm'] : []), ...(parsed.install === true ? ['--install'] : [])]);
+  const { action } = validated;
   if ((options.env || process.env).OPENYIDA_MANAGED_RUN === '1') {
     throw new CliError(t('feedback_github.failed'), { code: 'FEEDBACK_GITHUB_MANAGED_DENIED' });
   }
+  if (action === 'setup') { return require('./github-setup').setup(validated, options); }
   const result = inspect(options);
   if (action === 'status') { return result; }
   const fail = (stage, mutationPerformed = false) => {
@@ -124,7 +129,11 @@ function execute(parsed, options = {}) {
 /** CLI entrypoint. The confirmation flag attests to the user's explicit choice of this action. */
 function run(args = []) {
   const parsed = parseArgs(args);
-  console.log(JSON.stringify(execute(parsed), null, 2));
+  const result = execute(parsed);
+  if (result.success === false) {
+    throw new CliError(result.message, { code: 'FEEDBACK_GITHUB_SETUP_FAILED', details: result });
+  }
+  console.log(JSON.stringify(result, null, 2));
 }
 
 module.exports = { parseArgs, execute, run };