openyida 2026.10.22 → 2026.10.23-2

package/README.md

@@ -516,6 +516,7 @@ When preparing a PR that needs a personal Fork, or when you ask how to support t
 | `openyida print-template <list\|inspect\|fields\|build\|create\|copy\|save\|restore\|settings\|status\|order\|render\|files> <appType> <formUuid> [templateId] [--config <file>] [--scene <order\|quotation\|delivery\|receipt\|approval\|codes>] [--bindings <file>] [--name <title>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--status START\|STOP] [--instance <id>] [--page <n>] [--size <n>] [--allow-permission-change] [--json] \| print-template <list\|render> --detail-url <url> [--template-id <id>] [--json]` | Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
+| `openyida form-message <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native form notifications: inspect triggers, recipients and templates, then safely maintain bindings |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
 | `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
@@ -533,7 +534,7 @@ When preparing a PR that needs a personal Fork, or when you ask how to support t
 | Command | Description |
 |---------|-------------|
 | `openyida data <query\|get\|create\|update\|transfer> <resource> ... \| delete form <appType> <formUuid> --inst-id <id> --expect-form-name <name> --expect-form-type receipt --confirm [--json]` | Unified data management (form/process/task/subform) |
-| `openyida task-center <todo\|created\|done\|cc\|proxy\|capabilities\|scaffold\|options\|inspect\|count> [--spec <file.json> --output <file.canvas.jsx>] [options]` | Global task center (todo/processed/cc etc.) |
+| `openyida task-center <todo\|created\|done\|cc\|proxy\|capabilities\|link\|scaffold\|options\|inspect\|count> [--spec <file.json> --output <file.canvas.jsx>] [options]` | Global task center (todo/processed/cc etc.) |
 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` | Query organization basic info, capacity, quotas, and domain settings |
 | `openyida read-dingtalk-doc <docUrl> [--output <file>] [--json]` | Fetch Markdown content from a DingTalk document |
 | `openyida read-dingtalk-tingji <taskUuid> [--json]` | Fetch DingTalk Tingji details by task UUID |

package/bin/yida.js

@@ -837,6 +837,11 @@ async function main() {
       await run(args);
       break;
     }
+    case 'form-message': {
+      const { run } = require('../lib/app/form-message');
+      await run(args);
+      break;
+    }
     case 'print-template': {
       const { run } = require('../lib/print-template/print-template');
       await run(args);

package/lib/app/form-message.js

@@ -0,0 +1,352 @@
+'use strict';
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+const { isDeepStrictEqual } = require('util');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+const { resolveProjectRoot } = require('../core/utils');
+const { createYidaClient } = require('../core/yida-client');
+
+const ACTIONS = ['list', 'inspect', 'options', 'create', 'update', 'delete'];
+const RECEIVER_TYPES = new Set(['employee', 'role', 'formField', 'variable']);
+const FORM_TRIGGERS = new Set(['FORM_DATA_CREATE', 'FORM_DATA_EDIT', 'FORM_DATA_DELETE', 'FORM_COMMENT']);
+const SYSTEM_VARIABLES = new Set(['originator']);
+const MESSAGE_FIELD_COMPONENTS = new Set([
+  'TextareaField', 'EmployeeField', 'SelectField', 'MultiSelectField', 'DateField', 'TextField',
+  'RadioField', 'NumberField', 'CheckboxField', 'RateField', 'CascadeDateField', 'DepartmentSelectField',
+]);
+const RECIPIENT_FIELD_COMPONENTS = new Set(['EmployeeField']);
+const ID = /^[A-Za-z0-9_-]+$/;
+const TEMPLATES = Object.freeze({
+  workNotice: { uuid: 'system_default_work_notice', type: 'workNotice', content: true, target: 'person' },
+  detailImage: { uuid: '8fbf8a81-c775-4570-b367-86d4d719a85f', type: 'card', fields: true, target: 'person' },
+  imageCard: { uuid: '39caf717-df43-46e1-98f9-564fdd1dc789', type: 'card', content: true, target: 'person' },
+  detailText: { uuid: '97bd36d0-64d8-4c50-96e8-f02312655700', type: 'card', fields: true, target: 'person' },
+  commentCard: { uuid: 'c298cd88-0de6-44c3-9023-c93e0d7db9ac', type: 'card', content: true, target: 'person' },
+  pinnedImage: { uuid: 'cdcdf076-3625-4da7-9a61-571591594209', type: 'ceilingCard', content: true, target: 'group' },
+  pinnedText: { uuid: '68240de5-8d9e-416a-b5b2-c71dca0ab703', type: 'ceilingCard', content: true, target: 'group' },
+});
+const TEMPLATE_BY_UUID = new Map(Object.entries(TEMPLATES).map(([key, item]) => [item.uuid, { key, ...item }]));
+
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const clone = value => JSON.parse(JSON.stringify(value));
+
+/** Build a stable fingerprint for concurrency checks and destructive actions. */
+function hash(value) {
+  const stable = item => Array.isArray(item) ? item.map(stable) : object(item)
+    ? Object.fromEntries(Object.keys(item).sort().map(key => [key, stable(item[key])])) : item;
+  return crypto.createHash('sha256').update(JSON.stringify(stable(value))).digest('hex');
+}
+
+function fail(code, key, detail = '', details) {
+  throw new CliError(t(`form_message.${key}`, detail), { code: `FORM_MESSAGE_${code}`, details });
+}
+
+function safe(value) {
+  if (!value || typeof value !== 'object') {return;}
+  for (const key of Object.keys(value)) {
+    if (['__proto__', 'prototype', 'constructor'].includes(key)) {fail('INVALID_CONFIG', 'invalid_config', key);}
+    safe(value[key]);
+  }
+}
+
+function parseJson(value, label) {
+  try { return typeof value === 'string' ? JSON.parse(value) : value; }
+  catch (_) { return fail('INVALID_CONFIG', 'invalid_config', label); }
+}
+
+function unwrap(response, endpoint) {
+  if (!response || response.success !== true || response.__needLogin || response.__csrfExpired || response.content === false) {
+    fail('API_ERROR', 'api_error', response?.errorMsg || response?.message || endpoint, {
+      endpoint, platformErrorCode: response?.errorCode || null, needLogin: !!response?.__needLogin,
+    });
+  }
+  return response.content;
+}
+
+/** Normalize a native binding while retaining fields required for lossless backup and update. */
+function normalize(raw) {
+  if (!object(raw) || raw.id === undefined || raw.id === null || !String(raw.id).trim()) {
+    fail('INVALID_RESPONSE', 'invalid_response', 'id');
+  }
+  const cardConfig = raw.cardConfig ? parseJson(raw.cardConfig, 'cardConfig') : {};
+  if (!object(cardConfig)) {fail('INVALID_RESPONSE', 'invalid_response', 'cardConfig');}
+  const recipients = [];
+  const add = (source, type) => String(source || '').split(',').map(value => value.trim()).filter(Boolean)
+    .forEach(value => recipients.push({ type, value }));
+  add(raw.persons, 'employee'); add(raw.roleId, 'role'); add(raw.formField, 'formField'); add(raw.variable, 'variable');
+  const nativeGroups = Array.isArray(cardConfig.groups) ? clone(cardConfig.groups) : [];
+  const template = TEMPLATE_BY_UUID.get(cardConfig.templateUuid) || {};
+  const buttons = Array.isArray(cardConfig.buttons) ? clone(cardConfig.buttons) : [];
+  return {
+    id: String(raw.id),
+    formUuid: raw.formUuid || null,
+    trigger: raw.phase || null,
+    messageType: raw.messageType || 'NORMAL',
+    recipients,
+    groups: nativeGroups,
+    template: {
+      key: template.key || null,
+      uuid: cardConfig.templateUuid || raw.messageUuid || null,
+      type: cardConfig.templateType || template.type || null,
+      title: cardConfig.cardTitle || '',
+      content: cardConfig.mainContent || '',
+      fields: Array.isArray(cardConfig.datas) ? clone(cardConfig.datas) : [],
+      image: Array.isArray(cardConfig.messageImage) ? clone(cardConfig.messageImage) : [],
+      contentType: cardConfig.messageContentType || (raw.messageUuid ? 'TEMPLATE' : 'CUSTOM'),
+      platformTemplateUuid: raw.messageUuid && !String(raw.messageUuid).includes('#') ? raw.messageUuid : null,
+      button: buttons[0] || null,
+    },
+    advanced: {
+      openMore: !!cardConfig.openMore,
+      activityIds: String(raw.activityId || '').split(',').filter(Boolean),
+      condition: raw.conditionJson ? parseJson(raw.conditionJson, 'conditionJson') : null,
+      processId: raw.processId || null,
+      outcome: String(raw.outResult || '').split(',').filter(Boolean),
+      currentGroup: raw.curDingGroup === 'y',
+      sendWorkNotice: raw.isSendMessage === 'y',
+    },
+    native: clone(raw),
+  };
+}
+
+function parseArgs(args) {
+  const positional = [];
+  const flags = {};
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (Object.hasOwn(flags, arg)) {fail('USAGE', 'usage');}
+    if (['--json', '--yes', '--help', '-h'].includes(arg)) { flags[arg] = true; continue; }
+    if (['--config', '--backup', '--expected-hash'].includes(arg)) {
+      if (!args[i + 1] || args[i + 1].startsWith('-')) {fail('USAGE', 'usage');}
+      flags[arg] = args[++i]; continue;
+    }
+    if (arg.startsWith('-')) {fail('USAGE', 'usage');}
+    positional.push(arg);
+  }
+  if (flags['--help'] || flags['-h']) {return { help: true };}
+  const [action, appType, formUuid, messageId] = positional;
+  const targeted = ['inspect', 'update', 'delete'].includes(action);
+  if (!ACTIONS.includes(action) || positional.length !== (targeted ? 4 : 3)
+    || !ID.test(appType || '') || !ID.test(formUuid || '') || (targeted && !ID.test(messageId || ''))
+    || (['create', 'update'].includes(action) && !flags['--config'])
+    || (action === 'delete' && (!flags['--yes'] || !flags['--expected-hash']))) {fail('USAGE', 'usage');}
+  const allowed = { list: [], inspect: [], options: [], create: ['--config', '--backup'],
+    update: ['--config', '--backup', '--expected-hash'], delete: ['--yes', '--backup', '--expected-hash'] };
+  if (Object.keys(flags).some(key => key !== '--json' && !allowed[action].includes(key))) {fail('USAGE', 'usage');}
+  return { action, appType, formUuid, messageId, flags };
+}
+
+function fieldId(field) { return field.fieldId || field.id || field.componentId; }
+function fieldType(field) { return field.componentName || field.fieldType || field.type; }
+
+function normalizeTemplate(value) {
+  if (!object(value)) {fail('INVALID_CONFIG', 'invalid_config', 'template');}
+  const registry = value.key ? TEMPLATES[value.key] : TEMPLATE_BY_UUID.get(value.uuid);
+  if (!registry || (value.uuid && value.uuid !== registry.uuid) || (value.type && value.type !== registry.type)) {
+    fail('INVALID_CONFIG', 'invalid_config', 'template.key / template.uuid / template.type');
+  }
+  const result = { ...value, key: value.key || TEMPLATE_BY_UUID.get(registry.uuid).key,
+    uuid: registry.uuid, type: registry.type };
+  result.title = String(result.title || '').trim();
+  result.content = String(result.content || '').trim();
+  result.fields = result.fields || [];
+  result.image = result.image || [];
+  result.contentType = 'CUSTOM';
+  result.platformTemplateUuid = null;
+  result.button = result.button || null;
+  if (!result.title || result.title.replace(/\$!\{\w+\}/g, '').length > 50) {fail('INVALID_CONFIG', 'invalid_config', 'template.title');}
+  if (registry.content && !result.content) {fail('INVALID_CONFIG', 'invalid_config', 'template.content');}
+  if (registry.fields && (!Array.isArray(result.fields) || !result.fields.length)) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields');}
+  if (!Array.isArray(result.fields) || !Array.isArray(result.image)) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields / template.image');}
+  if (result.button !== undefined && result.button !== null) {
+    if (!object(result.button) || typeof result.button.name !== 'string'
+      || !['formInstDetail', 'comment', 'custom'].includes(result.button.type)) {fail('INVALID_CONFIG', 'invalid_config', 'template.button');}
+    if (result.button.type === 'custom') {
+      let url; try { url = new URL(result.button.value); } catch (_) { fail('INVALID_CONFIG', 'invalid_config', 'template.button.value'); }
+      if (!['https:', 'http:'].includes(url.protocol) || url.username || url.password) {fail('INVALID_CONFIG', 'invalid_config', 'template.button.value');}
+    }
+  }
+  return { result, registry };
+}
+
+/** Validate references against the target form metadata before a mutation. */
+function validateConfig(value, metadata) {
+  if (!object(value) || !FORM_TRIGGERS.has(value.trigger)) {
+    fail('UNSUPPORTED_TRIGGER', 'unsupported_trigger', value?.trigger || '');
+  }
+  const formType = metadata.form.formType;
+  if (formType === 'process') {fail('UNSUPPORTED_FORM', 'unsupported_form', formType);}
+  const { result: template, registry } = normalizeTemplate(value.template);
+  const recipients = value.recipients || [];
+  const groups = value.groups || [];
+  if (!Array.isArray(recipients) || !Array.isArray(groups)) {fail('INVALID_CONFIG', 'invalid_config', 'recipients / groups');}
+  if (registry.target === 'person' && !recipients.length) {fail('INVALID_CONFIG', 'invalid_config', 'recipients');}
+  if (registry.target === 'group' && !groups.length) {fail('INVALID_CONFIG', 'invalid_config', 'groups');}
+  if (recipients.length > 100) {fail('INVALID_CONFIG', 'invalid_config', 'recipients (max 100)');}
+  const seen = new Set();
+  for (const receiver of recipients) {
+    if (!object(receiver) || !RECEIVER_TYPES.has(receiver.type) || !ID.test(String(receiver.value || ''))
+      || seen.has(`${receiver.type}:${receiver.value}`)) {fail('INVALID_CONFIG', 'invalid_config', 'recipients');}
+    seen.add(`${receiver.type}:${receiver.value}`);
+    if (receiver.type === 'variable' && !SYSTEM_VARIABLES.has(receiver.value)) {fail('INVALID_CONFIG', 'invalid_config', `recipient variable: ${receiver.value}`);}
+    if (receiver.type === 'formField' && !metadata.recipientFields.some(field => fieldId(field) === receiver.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `recipient field: ${receiver.value}`);
+    }
+  }
+  for (const group of groups) {
+    if (!object(group) || !ID.test(String(group.cid || group.id || ''))) {fail('INVALID_CONFIG', 'invalid_config', 'groups');}
+  }
+  for (const item of template.fields) {
+    if (!object(item) || !['variable', 'formField'].includes(item.type) || typeof item.title !== 'string' || !item.title.trim()
+      || !ID.test(String(item.value || ''))) {fail('INVALID_CONFIG', 'invalid_config', 'template.fields');}
+    if (item.type === 'variable' && !metadata.systemFields.some(field => field.value === item.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `template variable: ${item.value}`);
+    }
+    if (item.type === 'formField' && !metadata.messageFields.some(field => fieldId(field) === item.value)) {
+      fail('INVALID_CONFIG', 'invalid_config', `template field: ${item.value}`);
+    }
+  }
+  return { trigger: value.trigger, recipients: clone(recipients), groups: clone(groups), template };
+}
+
+function patchConfig(base, patch) {
+  if (!object(patch) || !Object.keys(patch).length || Object.keys(patch).some(key => !['trigger', 'recipients', 'groups', 'template'].includes(key))) {
+    fail('INVALID_CONFIG', 'invalid_config', 'trigger, recipients, groups, template');
+  }
+  safe(patch);
+  const next = { ...base, ...patch };
+  if (patch.template) {next.template = { ...base.template, ...patch.template };}
+  return next;
+}
+
+function editable(message) {
+  return { trigger: message.trigger, recipients: clone(message.recipients), groups: clone(message.groups), template: clone(message.template) };
+}
+
+function serialize(config, formUuid, messageId, native = {}) {
+  const byType = type => config.recipients.filter(item => item.type === type).map(item => item.value).join(',');
+  const registered = config.template.key ? TEMPLATES[config.template.key] : TEMPLATE_BY_UUID.get(config.template.uuid);
+  const nativeCardConfig = native.cardConfig ? parseJson(native.cardConfig, 'cardConfig') : {};
+  const cardConfig = {
+    ...nativeCardConfig,
+    openMore: false,
+    groups: config.groups,
+    messageImage: config.template.image,
+    cardTitle: config.template.title,
+    mainContent: config.template.content,
+    datas: config.template.fields,
+    templateUuid: config.template.uuid || registered.uuid,
+    templateType: config.template.type || registered.type,
+    messageContentType: 'CUSTOM',
+    buttons: config.template.button ? [config.template.button] : [],
+  };
+  return {
+    ...clone(native),
+    service: native.service || '', formUuid, phase: config.trigger, outResult: native.outResult || '',
+    formField: byType('formField'), studentField: native.studentField || '', roleId: byType('role'),
+    persons: byType('employee'), varField: native.varField || '', messageUuid: '', id: messageId || '',
+    variable: byType('variable'), email: native.email || '', formFieldEmail: native.formFieldEmail || '',
+    activityId: native.activityId || '', messageType: native.messageType || 'NORMAL',
+    curDingGroup: native.curDingGroup || 'n', isSendMessage: native.isSendMessage || 'n',
+    processId: native.processId || '', conditionJson: native.conditionJson || '', cardConfig: JSON.stringify(cardConfig),
+  };
+}
+
+async function execute(parsed, client = createYidaClient()) {
+  const { action, appType, formUuid, messageId, flags } = parsed;
+  const prefix = `/${appType}/query/`;
+  const read = async (endpoint, params = {}) => unwrap(await client.get(prefix + endpoint, { formUuid, ...params }), endpoint);
+  const list = async () => {
+    const rows = await read('formMsgTpl/listFormMessageBind.json');
+    if (!Array.isArray(rows)) {fail('INVALID_RESPONSE', 'invalid_response', 'messages');}
+    const messages = rows.map(normalize);
+    if (messages.some(item => item.formUuid && item.formUuid !== formUuid)
+      || new Set(messages.map(item => item.id)).size !== messages.length) {fail('INVALID_RESPONSE', 'invalid_response', 'messages');}
+    return messages;
+  };
+  const metadata = async () => {
+    const info = await read('formdesign/getFormAndAppInfo.json', { appType });
+    const form = info?.formDatas?.values?.find(item => item.formUuid === formUuid);
+    if (!form || !Array.isArray(form.fields)) {fail('INVALID_RESPONSE', 'invalid_response', 'form metadata');}
+    const fields = form.fields;
+    return {
+      form: { formUuid, formType: form.formType, title: form.title, processCode: form.processCode || null },
+      triggers: [...FORM_TRIGGERS],
+      readOnlyTriggers: ['RECUR_JOB_FIELD', 'INST_START', 'INST_COMPLETE', 'INST_NODE', 'TASK_GENERATE', 'TASK_COMPLETED'],
+      templates: Object.entries(TEMPLATES).map(([key, item]) => ({ key, ...item })),
+      systemFields: [
+        { value: 'formInstId', componentName: 'TextField' }, { value: 'originatorName', componentName: 'TextField' },
+        { value: 'originator', componentName: 'TextField' }, { value: 'createTime', componentName: 'DateField' },
+        { value: 'modifiedTime', componentName: 'DateField' }, { value: 'serialNo', componentName: 'TextField' },
+        { value: 'formTitle', componentName: 'TextField' }, { value: 'title', componentName: 'TextField' },
+      ],
+      messageFields: fields.filter(field => MESSAGE_FIELD_COMPONENTS.has(fieldType(field))),
+      recipientFields: fields.filter(field => RECIPIENT_FIELD_COMPONENTS.has(fieldType(field))),
+      recipientVariables: [...SYSTEM_VARIABLES],
+      supportsToggle: false,
+    };
+  };
+  // Link to the form's native notification settings in the authenticated environment.
+  const configUrl = new URL(`/${appType}/admin/${formUuid}/settings/messageSetting`, client.getAuthRef().baseUrl).href;
+  const output = { success: true, action, appType, formUuid, configUrl };
+  if (action === 'options') {return { ...output, options: await metadata() };}
+  const beforeList = await list();
+  const before = messageId ? beforeList.find(item => item.id === messageId) : null;
+  if (messageId && !before) {fail('NOT_FOUND', 'not_found', messageId);}
+  if (action === 'list') {return { ...output, messages: beforeList, totalCount: beforeList.length, supportsToggle: false };}
+  if (action === 'inspect') {return { ...output, messageId, message: before, configHash: hash(editable(before)), supportsToggle: false };}
+  if (flags['--expected-hash'] && flags['--expected-hash'] !== hash(editable(before))) {fail('CONFLICT', 'conflict');}
+
+  let expected;
+  if (action !== 'delete') {
+    let patch;
+    try { patch = parseJson(fs.readFileSync(path.resolve(flags['--config']), 'utf8'), 'config'); }
+    catch (error) { if (error instanceof CliError) {throw error;} fail('INVALID_CONFIG', 'invalid_config', 'config file'); }
+    const defaults = { trigger: 'FORM_DATA_CREATE', recipients: [{ type: 'variable', value: 'originator' }], groups: [],
+      template: { key: 'workNotice', title: '', content: '', fields: [], image: [], button: null } };
+    expected = validateConfig(patchConfig(before ? editable(before) : defaults, patch), await metadata());
+    if (before && isDeepStrictEqual(editable(before), expected)) {
+      return { ...output, messageId, changed: false, message: before, configHash: hash(expected), readbackVerified: true };
+    }
+  }
+  const snapshot = beforeList.map(item => [item.id, hash(item.native)]);
+  if (!isDeepStrictEqual(snapshot, (await list()).map(item => [item.id, hash(item.native)]))) {fail('CONFLICT', 'conflict');}
+  const backupPath = flags['--backup'] ? path.resolve(flags['--backup']) : path.join(resolveProjectRoot().projectRoot,
+    '.cache', 'openyida', 'form-message', `${Date.now()}-${crypto.randomUUID()}.json`);
+  fs.mkdirSync(path.dirname(backupPath), { recursive: true });
+  fs.writeFileSync(backupPath, JSON.stringify({ appType, formUuid, action, messages: beforeList }, null, 2), { flag: 'wx', mode: 0o600 });
+  const details = { target: { appType, formUuid, ...(messageId ? { messageId } : {}) }, backupPath,
+    retrySafe: false, sideEffectState: 'unknown', readbackAllowed: true };
+  const endpoint = action === 'delete' ? 'formMsgTpl/removeMessageBind.json' : 'formMsgTpl/saveOrUpdateMessageBind.json';
+  const params = action === 'delete' ? { id: messageId } : serialize(expected, formUuid, messageId, before?.native);
+  try { unwrap(await client.postFormOnce(prefix + endpoint, params), endpoint); }
+  catch (error) { throw new CliError(error.message, { code: error.code || 'FORM_MESSAGE_WRITE_FAILED', details: { ...error.details, ...details } }); }
+  try {
+    const after = await list();
+    if (action === 'delete') {
+      if (after.some(item => item.id === messageId)) {fail('READBACK_MISMATCH', 'readback_mismatch');}
+      return { ...output, messageId, changed: true, backupPath, readbackVerified: true };
+    }
+    const added = after.filter(item => !beforeList.some(old => old.id === item.id));
+    const saved = action === 'create' ? (added.length === 1 ? added[0] : null) : after.find(item => item.id === messageId);
+    if (!saved || !isDeepStrictEqual(editable(saved), expected)) {fail('READBACK_MISMATCH', 'readback_mismatch');}
+    return { ...output, messageId: saved.id, changed: true, backupPath, readbackVerified: true,
+      message: saved, configHash: hash(expected) };
+  } catch (error) {
+    throw new CliError(error.message, { code: error.code || 'FORM_MESSAGE_READBACK_FAILED',
+      details: { ...details, mutationAccepted: true, sideEffectState: 'accepted_unverified' } });
+  }
+}
+
+async function run(args, options = {}) {
+  const parsed = parseArgs(args);
+  if (parsed.help) { process.stdout.write(t('form_message.usage') + '\n'); return; }
+  const result = await execute(parsed, options.client);
+  process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+  return result;
+}
+
+module.exports = { ACTIONS, TEMPLATES, run, execute, parseArgs, normalize, validateConfig, patchConfig, serialize, hash, editable };

package/lib/app/services/canvas-page-schema-builder.js

@@ -10,7 +10,16 @@ const {
   findEmojiInValue,
 } = require('../../core/no-emoji-detector');
 
-const CANVAS_YIDA_API_BRIDGE_SOURCE = `var OPENYIDA_YIDA_FORM_API_METHODS = [
+const { createPageNavigation } = require('../../navigation/page-navigation');
+const { createTaskCenterContract } = require('../../task-center/contract');
+const { createTaskCenterLoader } = require('../../task-center/loader');
+const { createTaskCenterNavigation } = require('../../task-center/navigation');
+
+const CANVAS_YIDA_API_BRIDGE_SOURCE = `${createPageNavigation.toString()}
+${createTaskCenterNavigation.toString()}
+${createTaskCenterContract.toString()}
+${createTaskCenterLoader.toString()}
+var OPENYIDA_YIDA_FORM_API_METHODS = [
   'saveFormData',
   'updateFormData',
   'searchFormDataIds',
@@ -239,8 +248,15 @@ function openyidaCreateRouterBridge(utils) {
 
 function openyidaCreateUtilsBridge(context, yidaBridge) {
   var utils = context && context.utils;
+  var navigation = createPageNavigation(window);
+  var taskNavigation = createTaskCenterNavigation();
+  var taskCounts = createTaskCenterLoader(createTaskCenterContract(), function() { return yidaBridge; });
   var methodNames = openyidaCollectUtilsMethodNames(utils);
   function invoke(methodName) {
+    if (methodName === 'openPage') { return navigation.open.apply(null, Array.prototype.slice.call(arguments, 1)); }
+    if (['taskCenterCount', 'taskCenterLink', 'openTaskCenter'].indexOf(methodName) !== -1) {
+      return bridge[methodName].apply(null, Array.prototype.slice.call(arguments, 1));
+    }
     if (!utils || typeof utils[methodName] !== 'function') {
       throw new Error('this.utils.' + methodName + ' is not available');
     }
@@ -251,6 +267,8 @@ function openyidaCreateUtilsBridge(context, yidaBridge) {
     apiGroups: {
       utility: OPENYIDA_UTIL_API_METHODS.slice(),
       router: ['push'],
+      navigation: ['openPage', 'taskCenterLink', 'openTaskCenter'],
+      tasks: ['taskCenterCount'],
       yida: OPENYIDA_KNOWN_YIDA_API_METHODS.slice()
     },
     knownMethods: OPENYIDA_UTIL_API_METHODS.slice(),
@@ -259,9 +277,33 @@ function openyidaCreateUtilsBridge(context, yidaBridge) {
       return !utils || typeof utils[methodName] !== 'function';
     }),
     invoke: invoke,
+    openPage: navigation.open,
+    taskCenterLink: function(options) {
+      return taskNavigation.target(Object.assign({ baseUrl: window.location.origin }, options));
+    },
+    taskCenterCount: async function(options) {
+      if (!options || typeof options !== 'object' || Array.isArray(options)
+        || Object.keys(options).some(function(key) { return ['scope', 'appType', 'kind', 'filters'].indexOf(key) === -1; })) {
+        var error = new Error('TASK_FILTER_INVALID: options');
+        error.code = 'TASK_FILTER_INVALID';
+        throw error;
+      }
+      var target = taskNavigation.target({ scope: options.scope, appType: options.appType, kind: options.kind, baseUrl: window.location.origin });
+      var filters = createTaskCenterContract().normalizeFilters(target.kind, options.filters === undefined ? {} : options.filters, 'app-query');
+      return taskCounts.count(target.kind, Object.assign({}, filters, { transport: 'app-query' },
+        target.scope === 'corp' ? { scope: 'corp' } : { appType: target.appType }));
+    },
+    openTaskCenter: function(options) {
+      var target = taskNavigation.target(Object.assign({ baseUrl: window.location.origin }, options));
+      return navigation.open(target.pageUrl, { mode: target.mode });
+    },
     router: openyidaCreateRouterBridge(utils),
     yida: yidaBridge
   };
+  ['openPage', 'taskCenterLink', 'openTaskCenter', 'taskCenterCount'].forEach(function(methodName) {
+    if (bridge.availableMethods.indexOf(methodName) === -1) { bridge.availableMethods.push(methodName); }
+  });
+  bridge.missingKnownMethods = bridge.missingKnownMethods.filter(function(name) { return name !== 'openPage'; });
   methodNames.forEach(function(methodName) {
     if (!bridge[methodName]) {
       bridge[methodName] = function() {

package/lib/core/command-manifest.js

@@ -549,6 +549,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['list', 'inspect', 'options'],
     mutating_actions: ['create', 'update', 'delete'],
   })],
+  ['form-message', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: ['list', 'inspect', 'options'],
+    mutating_actions: ['create', 'update', 'delete'],
+  })],
   ['cool-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'templates', 'get'], mutating_actions: ['create'] })],
   ['data-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'get', 'probe', 'release-check', 'refs'], mutating_actions: ['create', 'save', 'publish', 'release-get', 'release-save', 'release-test'], note: 'release-get reads broadcast settings but the native backend may initialize the application cool app; classify it conservatively as a possible mutation.' })],
   ['print-template', sideEffect('mixed', printTemplateEffects)],
@@ -677,7 +683,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['task-center', sideEffect('mixed', {
     mutates_yida: false,
     mutates_local: true,
-    read_actions: ['todo', 'created', 'done', 'cc', 'proxy', 'capabilities', 'options', 'inspect', 'count'],
+    read_actions: ['todo', 'created', 'done', 'cc', 'proxy', 'capabilities', 'link', 'options', 'inspect', 'count'],
     mutating_actions: ['scaffold'],
   })],
 ]);
@@ -863,6 +869,13 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['delete'],
   })),
 
+  ...permissionEntries([
+    'form-message',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'update'],
+    ask_actions: ['delete'],
+  })),
+
   ...permissionEntries([
     'aggregate-table',
   ], actionDependentPermission({
@@ -1638,6 +1651,19 @@ const COMMAND_GROUPS = [
         examples: ['openyida custom-button options APP_XXX FORM_XXX --json', 'openyida custom-button create APP_XXX FORM_XXX --config button.json --json'],
         notes: ['Manages native form custom buttons: edit current fields, fill an associated form, invoke a published manual custom-button flow (type 6), or open a page. options reads eligible fields, conditions, forms, flows and display locations. Updates merge action properties and translations; arrays and permissionConfig replace. Changing action type, fillType or urlType requires a complete new actionConfig. Saves back up first and verify by readback; writes are never replayed automatically. delete permanently removes the button definition and requires --yes and --expected-hash from inspect. This differs from removing a display reference. Platform permissions, edition limits, 10-button limit, and completed-process restrictions still apply. No runtime button execution. See docs/guides/custom-buttons.md.'],
       }),
+      command('form-message', ['form-message'], 'form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]', 'help.cmd_form_message', {
+        managedRun: { scope: 'actions', actions: {
+          list: { scope: 'app', appPosition: 1 },
+          inspect: { scope: 'app', appPosition: 1 },
+          options: { scope: 'app', appPosition: 1 },
+          create: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          update: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+          delete: { scope: 'app', appPosition: 1, mutation: { operation: 'update_form', formUuidPosition: 2 } },
+        } },
+        output: 'json',
+        examples: ['openyida form-message options APP_XXX FORM_XXX --json', 'openyida form-message create APP_XXX FORM_XXX --config message.json --json'],
+        notes: ['Manages native form-level message notification bindings, not application settings, custom-page messaging or integration automation. list and inspect preserve native configurations. create and update currently support verified immediate events for ordinary forms and seven native templates; scheduled and process-node writes are rejected until their rule and process context can be verified. The platform exposes no independent enable/disable state, so deletion is the only supported removal action and requires --yes plus the current inspect hash. Writes back up first, detect concurrent changes and require readback; requests are never replayed automatically. Saving a binding does not send a test message or prove delivery. See docs/guides/form-messages.md.'],
+      }),
       command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json|--analysis-json]', 'help.cmd_get_schema', { managedRun: { scope: 'app', appPosition: 0 },
         examples: ['openyida get-schema APP_XXX FORM_XXX --field-map-json'],
       }),
@@ -1795,10 +1821,11 @@ const COMMAND_GROUPS = [
           'openyida data transfer task APP_XXX --process-inst-id PINST_XXX --form-uuid FORM_XXX --to-user-id USER_ID --expect-form-name "Approval form" --expect-form-type process --json',
         ],
       }),
-      command('task-center', ['task-center'], 'task-center <todo|created|done|cc|proxy|capabilities|scaffold|options|inspect|count> [--spec <file.json> --output <file.canvas.jsx>] [options]', 'help.cmd_task_center', {
+      command('task-center', ['task-center'], 'task-center <todo|created|done|cc|proxy|capabilities|link|scaffold|options|inspect|count> [--spec <file.json> --output <file.canvas.jsx>] [options]', 'help.cmd_task_center', {
         requiresLogin: false,
         managedRun: { scope: 'actions', actions: {
           capabilities: { scope: 'local', allowedFlags: ['--json'] },
+          link: { scope: 'local', allowedFlags: ['--scope', '--type', '--base-url', '--mode', '--json'] },
           scaffold: { scope: 'local' },
           options: { scope: 'app', appPosition: 1 },
           inspect: { scope: 'app', appPosition: 1 },
@@ -1807,13 +1834,16 @@ const COMMAND_GROUPS = [
         output: 'json',
         examples: [
           'openyida task-center capabilities --json',
+          'openyida task-center link APP_XXX --scope app --type todo --base-url https://tenant.aliwork.com --json',
+          'openyida task-center link --scope corp --type cc --base-url https://tenant.aliwork.com --json',
+          'openyida task-center count --scope corp --type created --json',
           'openyida task-center options APP_XXX --type originators --keyword 张 --json',
           'openyida task-center inspect APP_XXX --process-inst-id INSTANCE_REPLACE --form-uuid FORM_REPLACE --json',
           'openyida task-center inspect APP_XXX --process-inst-id INSTANCE_REPLACE --history --task-id TASK_REPLACE --json',
           'openyida task-center count APP_XXX --type todo --transport app-query --filters-json \'{"keyword":"采购"}\' --json',
           'openyida task-center scaffold --spec workflow-spec.json --output project/pages/src/progress.canvas.jsx',
         ],
-        notes: ['capabilities describes application task kinds, filters, lookup options, workflow read models and scaffold specs. inspect <appType> --process-inst-id ID [--history] [--task-id ID] reads authorized process progress and optional history; taskResult matches a task, without asserting visitor ownership. count <appType> --type KIND [--transport app-query] [--filters-json JSON] reads one list record and its server total; unknown totals stay null. Neither read command requires a custom-page choice. The tasks scaffold selects fields, filterFields and optional expandProcess; the progress view exports ProcessProgressSection for a real linked instance. options <appType> --type originators|processes|forms --keyword TEXT --size N --json reads current-visitor lookup candidates. scaffold creates a new local Canvas page only after an explicit custom-page request or affirmative ask_human choice, recorded as customPage.source and confirmed=true. A generic task-center request or Fast mode does not provide that choice. Pages use the current visitor and existing application theme; CLI credentials are never embedded. Global queries remain unavailable in application-bound managed runs.'],
+        notes: ['link generates a native app or corporation task-center pageUrl and DingTalk AppLink without opening a browser or writing platform resources. --scope app|corp is required; app requires appType, corp rejects appType. --base-url allows offline URL generation; otherwise the active auth environment supplies the origin. --mode defaults to auto: browser pages stay in the browser and DingTalk pages use native openLink with ddtab=true; generating a link cannot detect a future page visitor environment. Explicit dingtalk mode adds ddtab=true. count --scope corp uses app-query with appKeys=[]; explicit --scope app defaults to app-query, while legacy count without --scope retains app-v1 compatibility. Scope must be clarified with the user when ambiguous. Published utilities expose openPage(url, {mode: auto|dingtalk|browser}), taskCenterLink and openTaskCenter. DingTalk mode never silently falls back to a browser. capabilities describes application task kinds, filters, lookup options, workflow read models and scaffold specs. inspect <appType> --process-inst-id ID [--history] [--task-id ID] reads authorized process progress and optional history; taskResult matches a task, without asserting visitor ownership. count <appType> --type KIND [--transport app-query] [--filters-json JSON] reads one list record and its server total; unknown totals stay null. Neither read command requires a custom-page choice. The tasks scaffold selects fields, filterFields and optional expandProcess; the progress view exports ProcessProgressSection for a real linked instance. options <appType> --type originators|processes|forms --keyword TEXT --size N --json reads current-visitor lookup candidates. scaffold creates a new local Canvas page only after an explicit custom-page request or affirmative ask_human choice, recorded as customPage.source and confirmed=true. A generic task-center request or Fast mode does not provide that choice. Pages use the current visitor and existing application theme; CLI credentials are never embedded. Global queries remain unavailable in application-bound managed runs.'],
       }),
       command('basic-info', ['basic-info'], 'basic-info <overview|commodity|grant|capacity|quota|abs-path|dataflow|i18n|domain>', 'help.cmd_basic_info', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         output: 'json',

package/lib/core/locales/en.js

@@ -19,6 +19,17 @@ module.exports = {
     'limit': 'A form supports at most 10 custom buttons.',
     'readback_mismatch': 'Saved custom button does not match readback. Keep the backup and inspect remote state.'
   },
+  form_message: {
+    usage: 'Usage: openyida form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
+    invalid_config: 'Invalid form message configuration or argument: {0}',
+    invalid_response: 'Incomplete platform form-message response: {0}',
+    api_error: 'Form message API failed: {0}. Check login, form administration permission, edition and feature availability.',
+    not_found: 'The message notification does not exist in the target form: {0}',
+    conflict: 'The message notification changed after it was read. Inspect again before saving.',
+    unsupported_trigger: 'This CLI has not verified writes for this trigger: {0}. Existing configurations remain readable.',
+    unsupported_form: 'This CLI has not verified notification writes for this form type: {0}. Existing configurations remain readable.',
+    readback_mismatch: 'Saved message notification does not match readback. Keep the backup and inspect remote state.',
+  },
   dws_external: {'note': 'dws is an independent external tool. OpenYida only shows installation instructions; it does not download or install it.', 'install_guide': 'Show official DingTalk CLI installation instructions'},
   cool_card: {'unsupported_environment': 'The Alibaba Group edition does not support building cool cards.', 'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
   data_card: {'description':'Create, configure, publish and distribute native YiDA data cards','usage':'Usage: openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'Native data card operation stopped: {0}','conflict':'The draft changed. Read it again before saving or publishing.','mismatch':'Readback does not match the expected schema or published state. Keep the backup and inspect the card before retrying.'},
@@ -143,6 +154,7 @@ module.exports = {
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
     cmd_custom_button: 'Native custom buttons: inspect and configure form edits, automation flows and page links',
+    cmd_form_message: 'Native form notifications: inspect triggers, recipients and templates, then safely maintain bindings',
     cmd_check_design: 'Validate design documents, theme tokens and PRD handoff',
     subtitle: 'AI-powered low-code development tool for Yida',
     usage: 'Usage:',

package/lib/core/locales/zh.js

@@ -19,6 +19,17 @@ module.exports = {
     'limit': '单个表单最多支持 10 个自定义按钮。',
     'readback_mismatch': '保存后的配置与回读不一致，请保留备份并检查远端状态。'
   },
+  form_message: {
+    usage: '用法：openyida form-message <list|inspect|options|create|update|delete> <appType> <formUuid> [messageId] [--config <文件>] [--expected-hash <哈希>] [--backup <文件>] [--yes] [--json]',
+    invalid_config: '消息通知配置或参数无效：{0}',
+    invalid_response: '平台返回的消息通知配置不完整：{0}',
+    api_error: '表单消息通知接口失败：{0}。请检查登录、表单管理权限、组织版本和功能开关。',
+    not_found: '目标表单中不存在消息通知：{0}',
+    conflict: '消息通知在读取后发生变化，请重新查询后再保存。',
+    unsupported_trigger: '当前 CLI 尚未验证此触发规则的写入协议：{0}。仍可查询已有配置。',
+    unsupported_form: '当前 CLI 尚未验证此表单类型的消息通知写入协议：{0}。仍可查询已有配置。',
+    readback_mismatch: '保存后的消息通知与回读不一致，请保留备份并检查远端状态。',
+  },
   dws_external: {'note': 'dws 是独立的外部工具；OpenYida 仅提供安装指引，不下载或安装它。', 'install_guide': '显示钉钉 CLI 官方安装指引'},
   cool_card: {'unsupported_environment': '集团版不支持酷卡片搭建。', 'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
   data_card: {'description':'创建、配置、发布原生数据卡片并管理投放播报','usage':'用法： openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'原生数据卡片操作已停止：{0}','conflict':'卡片草稿已发生变化，请重新读取后再保存或发布。','mismatch':'回读配置或发布状态与预期不一致，请保留备份并检查卡片后再重试。'},
@@ -143,6 +154,7 @@ module.exports = {
   // ── bin/yida.js printHelp() ────────────────────────
   help: {
     cmd_custom_button: '原生自定义按钮：查询、配置填写表单、自动化流及页面跳转',
+    cmd_form_message: '原生表单消息通知：查询触发、接收对象与模板并安全维护配置',
     cmd_check_design: '检查设计文档、主题变量与 PRD 交接',
     subtitle: '宜搭低代码 AI 开发工具',
     usage: '用法:',