openyida 2026.5.21 → 2026.5.25

package/README.md

@@ -228,12 +228,13 @@ Most checks should stay offline, but OpenYida also includes an explicit real-env
 ```bash
 OPENYIDA_E2E=1 npm run test:e2e:real
 OPENYIDA_E2E=1 npm run test:e2e:real:full
+OPENYIDA_E2E=1 OPENYIDA_E2E_FULL_STAGES=auth,app,form,process npm run test:e2e:real:full
 npm run test:e2e:real:skills
 ```
 
 The runner creates a disposable app, form, and custom page with an `OY_E2E_*` prefix, then verifies login, app listing, schema fetch, data query, and page publish. It writes a registry to `project/.cache/e2e-real/` so created resources can be audited later. To inject CI cookies without relying on a local login cache, pass `OPENYIDA_E2E_COOKIES_BASE64` as a base64 encoded cookie array or `{ "cookies": [...] }` object.
 
-`test:e2e:real:full` extends the smoke path into a broad deterministic feature matrix: auth/env, app update, form update and option mutation, page build/compile/generate/publish, data create/get/update/query, permission read, page config and short URL check, report create/append, dashboard skill verification, export/import, batch, task-center, formula/doctor/sample/CDN config, and local connector parsing/template generation. AI-backed commands such as `flash-to-prd` are available as the optional `ai` stage because they depend on remote model availability.
+`test:e2e:real:full` extends the smoke path into a broad deterministic feature matrix: auth/env, app update, form update and option mutation, page build/compile/generate/publish, data create/get/update/query, permission read, page config and short URL check, report create/append, dashboard skill verification, export/import, batch, task-center, formula/doctor/sample/CDN config, and local connector parsing/template generation. AI-backed commands such as `flash-to-prd` are available as the optional `ai` stage because they depend on remote model availability. Workflow mutation is available as the opt-in `process` stage; it creates and republishes a workflow on the disposable E2E form and records advanced official-node fixtures for review.
 
 `test:e2e:real:skills` enforces coverage for every directory under `yida-skills/skills/`. Each skill must be classified as real E2E, offline/unit, opt-in, or deprecated with an explicit reason. This prevents new skills from quietly bypassing the real-environment test plan.
 
@@ -340,6 +341,9 @@ For overseas apps, pass `--locale en_US` or `--locale ja_JP` on creation command
 | `openyida verify-short-url <appType> <formUuid> <url>` | Verify a short URL |
 | `openyida save-share-config <appType> <formUuid> <url> <isOpen> [openAuth]` | Save public access or sharing configuration |
 | `openyida get-page-config <appType> <formUuid>` | Query public access or sharing configuration |
+| `openyida externalize-form <appType> <formUuid> [--schema-file file]` | Assess public-access blockers and generate external-safe mirror fields |
+
+`openyida externalize-form` is useful when a form contains fields such as `AssociationFormField`, `EmployeeField`, or `DepartmentSelectField` that depend on internal organization permissions. It produces a report plus optional `--mirror-fields-output` JSON that can be used with `openyida create-form create` to build a separate public intake form while keeping the internal form and its association fields private.
 
 ### Workflow, Reports, and Integrations
 

package/bin/yida.js

@@ -426,7 +426,7 @@ async function main() {
 
     case 'copy': {
       const { run } = require('../lib/core/copy');
-      run();
+      run(args);
       break;
     }
 
@@ -717,6 +717,12 @@ async function main() {
       break;
     }
 
+    case 'externalize-form': {
+      const { run } = require('../lib/app/externalize-form');
+      await run(args);
+      break;
+    }
+
     case 'update-form-config': {
       if (args.length < 4) {
         warn(t('cli.form_config_usage'));

package/lib/app/app-list.js

@@ -19,7 +19,6 @@ const {
   httpGet,
   requestWithAutoLogin,
 } = require('../core/utils');
-const { t } = require('../core/i18n');
 
 const API_PATH = '/query/app/getAppList.json';
 
@@ -90,11 +89,31 @@ function formatApp(app) {
   };
 }
 
+function hasHelpFlag(args) {
+  return (args || []).includes('--help') || (args || []).includes('-h');
+}
+
+function printUsage() {
+  process.stderr.write([
+    'Usage: openyida app-list [--size N]',
+    '',
+    'Options:',
+    '  --size N     Page size used when fetching apps, default: 20',
+    '  --help, -h   Show this help',
+    '',
+  ].join('\n'));
+}
+
 /**
  * app-list 命令主入口
  * @param {string[]} args
  */
 async function run(args) {
+  if (hasHelpFlag(args)) {
+    printUsage();
+    return;
+  }
+
   const pageSizeIndex = args.indexOf('--size');
   const pageSize = pageSizeIndex !== -1 && args[pageSizeIndex + 1]
     ? parseInt(args[pageSizeIndex + 1], 10)

package/lib/app/check-page.js

@@ -3,7 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const { lintYidaSource, printLintResult } = require('./page-linter');
-const { buildPageSource, isAuthoringPath } = require('./page-compat');
+const { buildPageSource, shouldBuildPageSource } = require('./page-compat');
 const { t } = require('../core/i18n');
 const { warn, error, hint } = require('../core/chalk');
 
@@ -30,7 +30,7 @@ async function run(args) {
   }
 
   const sourceCode = fs.readFileSync(sourcePath, 'utf-8');
-  const shouldBuild = options.compat || isAuthoringPath(sourcePath);
+  const shouldBuild = shouldBuildPageSource(sourceCode, sourcePath, { modern: options.compat });
   const buildResult = shouldBuild
     ? buildPageSource(sourceCode, sourcePath, { modern: options.compat })
     : null;

package/lib/app/compile.js

@@ -4,7 +4,7 @@ const fs = require('fs');
 const path = require('path');
 const { compileSource } = require('./page-compiler');
 const { runLintCheck } = require('./page-linter');
-const { buildPageFile, isAuthoringPath } = require('./page-compat');
+const { buildPageFile, shouldBuildPageSource } = require('./page-compat');
 const { t } = require('../core/i18n');
 const { warn, error, info, step } = require('../core/chalk');
 
@@ -27,7 +27,8 @@ async function run(args) {
     error(t('publish.source_not_found', sourcePath));
   }
 
-  if (compat || isAuthoringPath(sourcePath)) {
+  const initialSourceCode = fs.readFileSync(sourcePath, 'utf-8');
+  if (shouldBuildPageSource(initialSourceCode, sourcePath, { modern: compat })) {
     info(t('build_page.preparing'));
     const buildResult = buildPageFile(sourcePath, { modern: compat });
     if (!buildResult.ok) {