openyida 2026.5.25 → 2026.5.26

package/README.md

@@ -297,7 +297,7 @@ For overseas apps, pass `--locale en_US` or `--locale ja_JP` on creation command
 | `openyida app-list [--size N]` | List Yida applications |
 | `openyida corp-efficiency [overview\|details\|detail\|groups\|notify] [options] [--open\|--no-open]` | Query enterprise efficiency metrics, detail report entries, and related notification actions |
 | `openyida create-app "<name>"\|--name <name> [options] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create an application and output `appType` |
-| `openyida update-app <appType> --name "..."` | Update application metadata |
+| `openyida update-app <appType> [--name "..."] [--layout slide\|ver] [--theme deepBlue]` | Update application metadata and theme/layout fields |
 | `openyida nav-group <list\|create\|rename\|delete\|move\|hide\|show> <appType> ...` | Manage sidebar navigation groups and move pages between groups |
 | `openyida app-permission <get\|set\|add\|remove\|search-user> ...` | Manage app primary admins, data admins, and developer members |
 | `openyida i18n <overview\|config\|languages\|list\|upsert\|delete\|translate\|translate-all\|upgrade> <appType> ...` | Manage app multilingual copy and language configuration |
@@ -330,7 +330,7 @@ For overseas apps, pass `--locale en_US` or `--locale ja_JP` on creation command
 
 | Command | Description |
 |---------|-------------|
-| `openyida data <action> <resource> [args]` | Unified data management for forms, processes, tasks, and subforms |
+| `openyida data <action> <resource> [args]` | Unified data management for forms, processes, tasks, and subforms; form queries support `--all` and `--form-uuid` subform hydration |
 | `openyida data check <appType> <formUuid> <rules.json>` | Detect anomalous process-form records |
 | `openyida task-center <type> [options]` | Query todo, created, processed, CC, or proxy-submitted tasks |
 | `openyida agent-center <sub-command>` | Manage Yida process delegation and departure delegation |
@@ -372,6 +372,7 @@ For overseas apps, pass `--locale en_US` or `--locale ja_JP` on creation command
 | `openyida sample [--list]` | Emit sample templates |
 | `openyida bridge start [--token <pair-token>] [--port 6736] [--open]` | Start the local OpenYida web bridge for `https://demo.aliwork.com/s/openyida` |
 | `openyida doctor [--fix]` | Diagnose and repair environment issues |
+| `openyida db-seq-fix [--fix]` | Detect and repair PostgreSQL sequence drift |
 | `openyida formula evaluate <formula\|file> [--schema file]` | Static-check formula syntax and field references |
 | `openyida update` | Update OpenYida through npm |
 | `openyida export-conversation [options]` | Export AI conversation history |

package/bin/yida.js

@@ -306,7 +306,7 @@ function shouldUsePlaywrightFallbackInAgentLogin() {
   const { detectActiveTool } = require('../lib/core/utils');
   const activeTool = detectActiveTool();
   if (activeTool && activeTool.tool === 'wukong') {
-    return true;
+    return false;
   }
   return process.env.OPENYIDA_AGENT_PLAYWRIGHT_FALLBACK === '1';
 }
@@ -477,6 +477,14 @@ async function main() {
         if (cachedResult.status === 'ok') {
           printLoginResult(cachedResult);
         } else {
+          const { detectActiveTool } = require('../lib/core/utils');
+          const activeTool = detectActiveTool();
+          if (activeTool && activeTool.tool === 'wukong') {
+            const { codexLogin } = require('../lib/auth/codex-login');
+            const result = await codexLogin({ tool: 'wukong' });
+            printLoginResult(result);
+            break;
+          }
           const { interactiveLogin } = require('../lib/auth/login');
           const browserResult = interactiveLogin({
             playwrightFallback: shouldUsePlaywrightFallbackInAgentLogin(),
@@ -486,8 +494,6 @@ async function main() {
           } else {
             // CDP/Playwright 失败后的兜底策略：
             // QoderWork 有 in-app browser，优先使用 browser handoff；其余走终端二维码
-            const { detectActiveTool } = require('../lib/core/utils');
-            const activeTool = detectActiveTool();
             if (activeTool && activeTool.tool === 'qoderwork') {
               const { codexLogin } = require('../lib/auth/codex-login');
               const result = await codexLogin({ tool: 'qoderwork' });
@@ -1065,6 +1071,12 @@ async function main() {
       break;
     }
 
+    case 'db-seq-fix': {
+      const { run: runDbSeqFix } = require('../lib/db/db-seq-fix');
+      await runDbSeqFix(args);
+      break;
+    }
+
     case 'update': {
       const { runUpdate } = require('../lib/core/update');
       await runUpdate(currentVersion);

package/lib/app/page-linter.js

@@ -604,6 +604,16 @@ function lintYidaSource(sourceCode, filePath) {
       pushIssue(warnings, lineNumber, 'native-select-ui', t('publish.lint_native_select_ui'), disableMap);
     }
 
+    const iframeSelfNavigationMatch = line.match(/<a\b(?=[^>]*(?:aliwork\.com|yidaapps\.com|\/preview\/|\/workbench))(?!(?=[^>]*\btarget=(['"]?)_top\1))(?!(?=[^>]*\btarget=(['"]?)_blank\2))[^>]*>/i);
+    if (iframeSelfNavigationMatch && !isInCommentOrString(line, iframeSelfNavigationMatch.index)) {
+      pushIssue(warnings, lineNumber, 'iframe-self-navigation', t('publish.lint_iframe_self_navigation'), disableMap);
+    }
+
+    const topLocationMatch = line.match(/window\.location\.href\s*=\s*[^;\n]*(?:aliwork\.com|yidaapps\.com|\/preview\/|\/workbench)/i);
+    if (topLocationMatch && !isInCommentOrString(line, topLocationMatch.index) && !line.includes('window.top.location')) {
+      pushIssue(warnings, lineNumber, 'iframe-self-navigation', t('publish.lint_iframe_self_navigation'), disableMap);
+    }
+
     const pageSizeMatch = line.match(/\bpageSize\s*:\s*(\d+)/);
     if (pageSizeMatch && Number(pageSizeMatch[1]) > 100 && !isInCommentOrString(line, pageSizeMatch.index)) {
       pushIssue(errors, lineNumber, 'page-size-limit', t('publish.lint_page_size_limit', pageSizeMatch[1]), disableMap);

package/lib/app/update-app.js

@@ -1,7 +1,7 @@
 /**
  * update-app.js - 更新宜搭应用信息
  *
- * 用法：openyida update-app <appType> --name "新名称" [--desc "描述"] [--icon "图标"]
+ * 用法：openyida update-app <appType> --name "新名称" [--desc "描述"] [--icon "图标"] [--layout slide|ver]
  */
 
 'use strict';
@@ -29,6 +29,9 @@ function parseArgs(args) {
     desc: null,
     icon: null,
     iconColor: null,
+    colour: null,
+    navTheme: null,
+    layoutDirection: null,
   };
 
   // 第一个参数是 appType
@@ -69,6 +72,28 @@ function parseArgs(args) {
           i++;
         }
         break;
+      case '--theme':
+      case '--colour':
+        if (nextArg) {
+          result.colour = nextArg;
+          i++;
+        }
+        break;
+      case '--nav-theme':
+      case '--navTheme':
+        if (nextArg) {
+          result.navTheme = nextArg;
+          i++;
+        }
+        break;
+      case '--layout':
+      case '--layout-direction':
+      case '--layoutDirection':
+        if (nextArg) {
+          result.layoutDirection = nextArg;
+          i++;
+        }
+        break;
     }
   }
 
@@ -88,7 +113,7 @@ async function run(args) {
   const params = parseArgs(args);
 
   // 验证必填参数
-  const { c, banner, step, label, info, success: chalkSuccess, result: chalkResult, error: chalkError } = require('../core/chalk');
+  const { c, banner, step, label, info, warn, success: chalkSuccess, result: chalkResult, error: chalkError } = require('../core/chalk');
 
   if (!params.appType) {
     chalkError(t('update_app.missing_app_type'), { exit: false });
@@ -96,7 +121,7 @@ async function run(args) {
     process.exit(1);
   }
 
-  if (!params.name && !params.desc && !params.icon) {
+  if (!params.name && !params.desc && !params.icon && !params.colour && !params.navTheme && !params.layoutDirection) {
     chalkError(t('update_app.missing_update_field'), { exit: false });
     printUsage();
     process.exit(1);
@@ -107,6 +132,9 @@ async function run(args) {
   if (params.name) {label('Name', params.name);}
   if (params.desc) {label('Desc', params.desc);}
   if (params.icon) {label('Icon', `${params.icon} ${c.dim}(${params.iconColor || '#0089FF'})${c.reset}`);}
+  if (params.colour || params.navTheme || params.layoutDirection) {
+    label('Theme', `${params.colour || '-'} / ${params.navTheme || '-'} / ${params.layoutDirection || '-'}`);
+  }
 
   // Step 1: 读取登录态
   step(1, t('common.step_login', 1));
@@ -158,6 +186,13 @@ async function run(args) {
     postDataObj.iconUrl = iconValue;
   }
 
+  if (params.colour) {postDataObj.colour = params.colour;}
+  if (params.navTheme) {postDataObj.navTheme = params.navTheme;}
+  if (params.layoutDirection) {
+    postDataObj.layoutDirection = params.layoutDirection;
+    warn(t('update_app.layout_notice'));
+  }
+
   const postData = querystring.stringify(postDataObj);
 
   const response = await requestWithAutoLogin((auth) => {
@@ -182,6 +217,9 @@ async function run(args) {
         name: params.name || undefined,
         desc: params.desc || undefined,
         icon: params.icon || undefined,
+        colour: params.colour || undefined,
+        navTheme: params.navTheme || undefined,
+        layoutDirection: params.layoutDirection || undefined,
       },
     }));
   } else {

package/lib/core/command-manifest.js

@@ -45,7 +45,7 @@ const COMMAND_GROUPS = [
         output: 'json',
       }),
       command('create-app', ['create-app'], 'create-app "<name>"|--name <name> [options] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_app'),
-      command('update-app', ['update-app'], 'update-app <appType> --name "..."', 'help.cmd_update_app'),
+      command('update-app', ['update-app'], 'update-app <appType> [--name "..."] [--layout slide|ver] [--theme deepBlue]', 'help.cmd_update_app'),
       command('nav-group', ['nav-group'], 'nav-group <list|create|rename|delete|move|hide|show> <appType> ...', 'help.cmd_nav_group', {
         output: 'json',
       }),
@@ -175,6 +175,7 @@ const COMMAND_GROUPS = [
       command('copy', ['copy'], 'copy [--force]', 'help.cmd_copy', { requiresLogin: false }),
       command('sample', ['sample'], 'sample [--list]', 'help.cmd_sample', { requiresLogin: false }),
       command('doctor', ['doctor'], 'doctor [--fix]', 'help.cmd_doctor', { requiresLogin: false }),
+      command('db-seq-fix', ['db-seq-fix'], 'db-seq-fix [--fix]', 'help.cmd_db_seq_fix'),
       command('formula.evaluate', ['formula', 'evaluate'], 'formula evaluate <formula|file> [--schema file]', 'help.cmd_formula_evaluate', {
         requiresLogin: false,
         output: 'text|json',

package/lib/core/locales/ar.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Output machine-readable command manifest',
     cmd_a2a: 'Start local read-only A2A adapter or print Agent Card',
     cmd_bridge: 'Start OpenYida local web bridge service',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'نسخ دليل عمل project',
     cmd_sample: 'إخراج أمثلة/قوالب الكود',
     cmd_doctor: 'تشخيص البيئة والإصلاح التلقائي',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  التعرف على الاجتماع: {0} حقول بيانات وصفية، {1} أقسام A1، {2} متحدثين',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/de.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Maschinenlesbares Command Manifest ausgeben',
     cmd_a2a: 'Lokalen schreibgeschützten A2A-Adapter starten oder Agent Card ausgeben',
     cmd_bridge: 'Lokalen OpenYida Web-Bridge-Dienst starten',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'project-Arbeitsverzeichnis kopieren',
     cmd_sample: 'Codebeispiele/Vorlagen ausgeben',
     cmd_doctor: 'Umgebungsdiagnose & automatische Reparatur',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Meeting-Erkennung: {0} Metadaten, {1} A1-Abschnitte, {2} Sprecher',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/en.js

@@ -87,6 +87,7 @@ module.exports = {
     cmd_copy: 'Copy project working directory',
     cmd_sample: 'Output code samples/templates',
     cmd_doctor: 'Environment diagnostics & auto-fix',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_formula_evaluate: 'Static-check Yida formula syntax and field refs',
     cmd_update: 'Check and update to latest version',
     cmd_export_conversation: 'Export AI conversation records',
@@ -802,11 +803,11 @@ Examples:
 
   // ── lib/update-app.js ─────────────────────────────
   update_app: {
-    usage: 'Usage: openyida update-app <appType> --name "New Name" [--desc "Description"] [--icon "icon-name"] [--icon-color "color"]',
-    example: 'Example: openyida update-app APP_XXX --name "New App Name" --desc "New Description"',
-    options: 'Options:\n  --name, -n      App name (required or at least one update field)\n  --desc, -d      App description\n  --icon          Icon name (e.g. xian-yingyong)\n  --icon-color    Icon color (default: #0089FF)',
+    usage: 'Usage: openyida update-app <appType> [--name "New Name"] [--desc "Description"] [--layout slide|ver] [--theme deepBlue]',
+    example: 'Example: openyida update-app APP_XXX --name "New App Name" --layout ver --theme deepBlue',
+    options: 'Options:\n  --name, -n      App name (specify at least one update field)\n  --desc, -d      App description\n  --icon          Icon name (e.g. xian-yingyong)\n  --icon-color    Icon color (default: #0089FF)\n  --theme         App theme colour\n  --nav-theme     Navigation theme navTheme\n  --layout        Layout direction layoutDirection (slide or ver)',
     missing_app_type: 'Error: missing appType argument',
-    missing_update_field: 'Error: at least one update field must be specified (--name, --desc, --icon)',
+    missing_update_field: 'Error: at least one update field must be specified (--name, --desc, --icon, --theme, --nav-theme, --layout)',
     title: '  update-app - Yida App Info Update Tool',
     app_type: '\n  App ID:       {0}',
     new_name: '  New name:     {0}',
@@ -817,6 +818,7 @@ Examples:
     app_type_label: '  appType: {0}',
     name_label: '  App name: {0}',
     failed: '  ❌ Update failed: {0}',
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
   },
 
   // ── lib/update-form-config.js ──────────────────────
@@ -960,6 +962,7 @@ Examples:
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',

package/lib/core/locales/es.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Emitir manifiesto de comandos legible por máquina',
     cmd_a2a: 'Iniciar adaptador A2A local de solo lectura o imprimir Agent Card',
     cmd_bridge: 'Iniciar servicio local OpenYida web bridge',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'Copiar directorio de trabajo project',
     cmd_sample: 'Generar ejemplos/plantillas de código',
     cmd_doctor: 'Diagnóstico de entorno y reparación automática',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Reconocimiento de reunion: {0} metadatos, {1} secciones A1, {2} ponentes',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/fr.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Afficher le manifeste des commandes lisible par machine',
     cmd_a2a: 'Démarrer l’adaptateur A2A local en lecture seule ou afficher l’Agent Card',
     cmd_bridge: 'Démarrer le service web bridge local OpenYida',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'Copier le répertoire de travail project',
     cmd_sample: 'Exporter des exemples/modèles de code',
     cmd_doctor: 'Diagnostic d\'environnement et réparation auto',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Reconnaissance reunion : {0} metadonnees, {1} sections A1, {2} intervenants',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/hi.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Output machine-readable command manifest',
     cmd_a2a: 'Start local read-only A2A adapter or print Agent Card',
     cmd_bridge: 'Start OpenYida local web bridge service',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'project कार्य निर्देशिका कॉपी करें',
     cmd_sample: 'कोड सैंपल/टेम्पलेट आउटपुट करें',
     cmd_doctor: 'वातावरण निदान और स्वचालित मरम्मत',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Meeting recognition: {0} metadata, {1} A1 sections, {2} speakers',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/ja.js

@@ -83,6 +83,7 @@ module.exports = {
     cmd_commands: '機械可読コマンド manifest を出力',
     cmd_a2a: 'ローカル読み取り専用 A2A Adapter を起動、または Agent Card を出力',
     cmd_bridge: 'OpenYida ローカル Web ブリッジサービスを起動',
+    cmd_db_seq_fix: 'PostgreSQL Sequence ドリフトを検出・修復',
     cmd_copy: 'project 作業ディレクトリをコピー',
     cmd_sample: 'コードサンプル/テンプレートを出力',
     cmd_doctor: '環境診断と自動修復',
@@ -882,6 +883,7 @@ openyida - Yida CLI ツール
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -1067,6 +1069,9 @@ openyida - Yida CLI ツール
       done_meeting: '  会議認識：メタ情報 {0} 項目、A1 要約 {1} セクション、発言者 {2} 名',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/ko.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Output machine-readable command manifest',
     cmd_a2a: 'Start local read-only A2A adapter or print Agent Card',
     cmd_bridge: 'Start OpenYida local web bridge service',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'project 작업 디렉토리 복사',
     cmd_sample: '코드 샘플/템플릿 출력',
     cmd_doctor: '환경 진단 및 자동 수정',
@@ -464,6 +465,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -677,6 +679,9 @@ module.exports = {
       done_meeting: '  회의 인식: 메타정보 {0}개, A1 요약 {1}개, 발언자 {2}명',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/pt.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Emitir manifesto de comandos legível por máquina',
     cmd_a2a: 'Iniciar adaptador A2A local somente leitura ou imprimir Agent Card',
     cmd_bridge: 'Iniciar serviço local OpenYida web bridge',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'Copiar diretório de trabalho project',
     cmd_sample: 'Gerar exemplos/modelos de código',
     cmd_doctor: 'Diagnóstico de ambiente e reparo automático',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Reconhecimento de reuniao: {0} metadados, {1} secoes A1, {2} palestrantes',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/vi.js

@@ -81,6 +81,7 @@ module.exports = {
     cmd_commands: 'Output machine-readable command manifest',
     cmd_a2a: 'Start local read-only A2A adapter or print Agent Card',
     cmd_bridge: 'Start OpenYida local web bridge service',
+    cmd_db_seq_fix: 'Detect and repair PostgreSQL sequence drift',
     cmd_copy: 'Sao chép thư mục làm việc project',
     cmd_sample: 'Xuất mẫu ví dụ/mẫu mã',
     cmd_doctor: 'Chẩn đoán môi trường và sửa tự động',
@@ -462,6 +463,7 @@ module.exports = {
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
     lint_native_select_ui: 'Found a native select. User-facing custom page dropdowns should use a Tailwind-styled custom dropdown component for consistent visual quality',
+    lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_yida_api_catch: 'this.utils.yida API call has no detected .catch(); add error handling and toast the user',
     lint_echarts_legacy_map_china: 'ECharts 5 no longer supports echarts/map/js/china.js. Load DataV GeoJSON and call echarts.registerMap("china", geoJson) instead',
@@ -675,6 +677,9 @@ module.exports = {
       done_meeting: '  Nhan dang cuoc hop: {0} thong tin, {1} phan A1, {2} nguoi phat bieu',
     },
   },
+  update_app: {
+    layout_notice: 'Note: layoutDirection is consumed by the Yida app shell during creation/refresh. If the top action bar does not recover immediately after a backend switch, reopen the workbench or recreate the app with the target layout.',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} Login Mode',
     not_codex: 'Current environment is not detected as Codex / Qoder / Wukong; returning an in-app browser login handoff only.',

package/lib/core/locales/zh-HK.js

@@ -83,6 +83,7 @@ module.exports = {
     cmd_commands: '輸出機器可讀命令清單',
     cmd_a2a: '啟動本機唯讀 A2A Adapter 或輸出 Agent Card',
     cmd_bridge: '啟動 OpenYida 本機網頁橋接服務',
+    cmd_db_seq_fix: 'PostgreSQL Sequence 漂移偵測與修復',
     cmd_copy: '複製 project 工作目錄',
     cmd_sample: '輸出程式碼範例/模板',
     cmd_doctor: '環境診斷與自動修復',
@@ -793,6 +794,7 @@ openyida - 宜搭命令列工具
     lint_foreach_callback_function: '.forEach(function ...) 可能導致回調內 this 遺失，建議改為 .forEach((item) => ...)',
     lint_controlled_input: 'input 使用了 value 受控模式，宜搭頁面應使用 defaultValue + onChange 寫入 _customState',
     lint_native_select_ui: '偵測到原生 select。面向用戶的自訂頁面下拉互動應使用 Tailwind 風格的自訂下拉組件，避免瀏覽器原生控件觀感不一致',
+    lint_iframe_self_navigation: '宜搭自訂頁面運行在 iframe 中，跳轉宜搭頁面時請使用 target="_top"/target="_blank" 或 window.top.location，避免頁面套娃',
     lint_page_size_limit: 'pageSize={0} 超過宜搭 API 上限 100，請改為 100 或更小',
     lint_yida_api_catch: 'this.utils.yida API 調用未偵測到 .catch()，請補充錯誤處理並 toast 給用戶',
     lint_echarts_legacy_map_china: 'ECharts 5 已廢棄 echarts/map/js/china.js，請載入 DataV GeoJSON 後調用 echarts.registerMap("china", geoJson)',
@@ -1103,6 +1105,9 @@ openyida - 宜搭命令列工具
     node_end: '流程結束',
     node_approval: '審批節點',
   },
+  update_app: {
+    layout_notice: '提示：layoutDirection 由宜搭應用外殼在建立/重新整理時消費；若後台切換後頂部操作欄未立即恢復，請重新開啟工作台或使用目標 layout 重新建立應用。',
+  },
   codex_login: {
     title: '  openyida login {0} - {1} 登入模式',
     not_codex: '目前環境未偵測為 Codex / Qoder / 悟空，僅返回內建瀏覽器登入 handoff。',

package/lib/core/locales/zh.js

@@ -87,6 +87,7 @@ module.exports = {
     cmd_copy: '复制 project 工作目录',
     cmd_sample: '输出代码示例/模板',
     cmd_doctor: '环境诊断与自动修复',
+    cmd_db_seq_fix: 'PostgreSQL Sequence 漂移检测与修复',
     cmd_formula_evaluate: '静态检查宜搭公式语法和字段引用',
     cmd_update: '检查并更新到最新版本',
     cmd_export_conversation: '导出 AI 对话记录',
@@ -739,11 +740,11 @@ openyida - 宜搭命令行工具
 
   // ── lib/update-app.js ─────────────────────────────
   update_app: {
-    usage: '用法: openyida update-app <appType> --name "新名称" [--desc "描述"] [--icon "图标"] [--icon-color "颜色"]',
-    example: '示例: openyida update-app APP_XXX --name "新应用名称" --desc "新描述"',
-    options: '选项:\n  --name, -n      应用名称（必填或至少一个更新字段）\n  --desc, -d      应用描述\n  --icon          图标名称（如: xian-yingyong）\n  --icon-color    图标颜色（默认: #0089FF）',
+    usage: '用法: openyida update-app <appType> [--name "新名称"] [--desc "描述"] [--layout slide|ver] [--theme deepBlue]',
+    example: '示例: openyida update-app APP_XXX --name "新应用名称" --layout ver --theme deepBlue',
+    options: '选项:\n  --name, -n      应用名称（至少指定一个更新字段）\n  --desc, -d      应用描述\n  --icon          图标名称（如: xian-yingyong）\n  --icon-color    图标颜色（默认: #0089FF）\n  --theme         应用主题 colour\n  --nav-theme     导航主题 navTheme\n  --layout        布局方向 layoutDirection（slide 或 ver）',
     missing_app_type: '错误: 缺少 appType 参数',
-    missing_update_field: '错误: 至少需要指定一个更新字段（--name, --desc, --icon）',
+    missing_update_field: '错误: 至少需要指定一个更新字段（--name, --desc, --icon, --theme, --nav-theme, --layout）',
     title: '  update-app - 宜搭应用信息更新工具',
     app_type: '\n  应用 ID:      {0}',
     new_name: '  新名称:       {0}',
@@ -754,6 +755,7 @@ openyida - 宜搭命令行工具
     app_type_label: '  appType: {0}',
     name_label: '  应用名称: {0}',
     failed: '  ❌ 更新失败: {0}',
+    layout_notice: '提示：layoutDirection 由宜搭应用外壳在创建/刷新时消费；若后台切换后顶部操作栏未立即恢复，请重新打开工作台或使用目标 layout 重新创建应用。',
   },
 
   // ── lib/process/create-process.js ─────────────────
@@ -962,6 +964,7 @@ openyida - 宜搭命令行工具
     lint_foreach_callback_function: '.forEach(function ...) 可能导致回调内 this 丢失，建议改为 .forEach((item) => ...)',
     lint_controlled_input: 'input 使用了 value 受控模式，宜搭页面应使用 defaultValue + onChange 写入 _customState',
     lint_native_select_ui: '检测到原生 select。面向用户的自定义页面下拉交互应使用 Tailwind 风格的自定义下拉组件，避免浏览器原生控件观感不一致',
+    lint_iframe_self_navigation: '宜搭自定义页面运行在 iframe 中，跳转宜搭页面时请使用 target="_top"/target="_blank" 或 window.top.location，避免页面套娃',
     lint_page_size_limit: 'pageSize={0} 超过宜搭接口上限 100，请改为 100 或更小',
     lint_yida_api_catch: 'this.utils.yida API 调用未检测到 .catch()，请补充错误处理并 toast 给用户',
     lint_echarts_legacy_map_china: 'ECharts 5 已废弃 echarts/map/js/china.js，请加载 DataV GeoJSON 后调用 echarts.registerMap("china", geoJson)',

package/lib/core/query-data.js

@@ -29,8 +29,8 @@ const { warn } = require('./chalk');
 const USAGE = `openyida data - Unified Yida data CLI
 
 Usage:
-  openyida data query form <appType> <formUuid> [--page N] [--size N] [--search-json JSON|--search-file .cache/openyida/search.json] [--inst-id ID]
-  openyida data get form <appType> --inst-id <formInstId>
+  openyida data query form <appType> <formUuid> [--page N] [--size N] [--all] [--max-pages N] [--search-json JSON|--search-file .cache/openyida/search.json] [--inst-id ID] [--no-hydrate-subforms]
+  openyida data get form <appType> --inst-id <formInstId> [--form-uuid <formUuid>] [--no-hydrate-subforms]
   openyida data create form <appType> <formUuid> (--data-json <JSON>|--data-file .cache/openyida/data.json) [--dept-id ID]
   openyida data update form <appType> --inst-id <formInstId> (--data-json <JSON>|--data-file .cache/openyida/data.json) [--use-latest-version y]
   openyida data query subform <appType> <formUuid> --inst-id <formInstId> --table-field-id <fieldId> [--page N] [--size N]
@@ -113,6 +113,17 @@ function clampPageSize(options, defaultSize = 20) {
   options.page = page;
 }
 
+function parsePositiveInt(value, defaultValue, label) {
+  const parsed = Number.parseInt(value || `${defaultValue}`, 10);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    if (label) {
+      parseError(`${label} 必须是正整数`);
+    }
+    return defaultValue;
+  }
+  return parsed;
+}
+
 function requirePositionals(positionals, count, names) {
   if (positionals.length < count) {
     parseError(`缺少必填参数 ${names.join(' ')}`);
@@ -230,6 +241,138 @@ function normalizeFormDatasResult(result) {
   return result;
 }
 
+function getResultDataList(result) {
+  if (!result) {return [];}
+  if (Array.isArray(result.data)) {return result.data;}
+  if (result.content && Array.isArray(result.content.data)) {return result.content.data;}
+  if (result.content && Array.isArray(result.content.dataList)) {return result.content.dataList;}
+  return [];
+}
+
+function getResultTotalCount(result) {
+  if (!result) {return 0;}
+  if (result.totalCount !== undefined) {return Number(result.totalCount) || 0;}
+  if (result.content && result.content.totalCount !== undefined) {return Number(result.content.totalCount) || 0;}
+  return 0;
+}
+
+function getFormDataContainer(result) {
+  if (!result || !result.success) {return null;}
+  const candidates = [
+    result.content,
+    result.data,
+    result.content && result.content.data,
+    result.content && result.content.formData,
+  ];
+
+  for (const candidate of candidates) {
+    if (!candidate || typeof candidate !== 'object') {continue;}
+    if (candidate.formData && typeof candidate.formData === 'object') {
+      return candidate.formData;
+    }
+  }
+
+  return null;
+}
+
+function normalizeSubformResult(result) {
+  const normalized = normalizeFormDatasResult(result);
+  return {
+    ...normalized,
+    data: getResultDataList(normalized),
+    totalCount: getResultTotalCount(normalized),
+  };
+}
+
+async function fetchAllPages(fetchPage, options, defaultSize = 100) {
+  const pageSize = Math.min(parsePositiveInt(options.size, defaultSize), 100);
+  const maxPages = parsePositiveInt(options.max_pages, 1000);
+  const firstPage = parsePositiveInt(options.page, 1);
+  const allData = [];
+  let page = firstPage;
+  let lastResult = null;
+  let pagesFetched = 0;
+
+  while (pagesFetched < maxPages) {
+    const result = normalizeFormDatasResult(await fetchPage(page, pageSize));
+    lastResult = result;
+    const data = getResultDataList(result);
+    allData.push(...data);
+    pagesFetched++;
+
+    const totalCount = getResultTotalCount(result);
+    if (totalCount && allData.length >= totalCount) {break;}
+    if (!data.length || data.length < pageSize) {break;}
+    page++;
+  }
+
+  return {
+    ...(lastResult || { success: true }),
+    data: allData,
+    totalCount: getResultTotalCount(lastResult) || allData.length,
+    currentPage: firstPage,
+    pageSize,
+    pagesFetched,
+  };
+}
+
+async function fetchAllSubformRows(session, appType, formUuid, formInstId, tableFieldId, options = {}) {
+  const result = await fetchAllPages((page, size) => sendGet(session, appType, `/dingtalk/web/${appType}/v1/form/listTableDataByFormInstIdAndTableId.json`, {
+    formUuid,
+    formInstanceId: formInstId,
+    tableFieldId,
+    currentPage: String(page),
+    pageSize: String(size),
+  }), {
+    page: 1,
+    size: options.size || 100,
+    max_pages: options.max_pages || 1000,
+  }, 100);
+  return normalizeSubformResult(result);
+}
+
+async function hydrateTruncatedSubforms(result, context) {
+  if (!context || !context.formUuid || !context.formInstId || context.disabled) {
+    return result;
+  }
+
+  const formData = getFormDataContainer(result);
+  if (!formData) {return result;}
+
+  const hydrated = [];
+  const entries = Object.entries(formData);
+  for (const [fieldId, value] of entries) {
+    if (!/^tableField_/.test(fieldId)) {continue;}
+    if (!Array.isArray(value) || value.length < 50) {continue;}
+    if (value.length > 0 && !value.every(item => item && typeof item === 'object')) {continue;}
+
+    const subformResult = await fetchAllSubformRows(
+      context.session,
+      context.appType,
+      context.formUuid,
+      context.formInstId,
+      fieldId,
+      context.options || {}
+    );
+    const rows = subformResult.data || [];
+    if (rows.length > value.length) {
+      formData[fieldId] = rows;
+      hydrated.push({
+        fieldId,
+        originalCount: value.length,
+        hydratedCount: rows.length,
+      });
+    }
+  }
+
+  if (hydrated.length > 0) {
+    const target = result.content && typeof result.content === 'object' ? result.content : result;
+    target._openyidaHydratedSubforms = hydrated;
+  }
+
+  return result;
+}
+
 function printResult(result) {
   const errorCode = result && result.errorCode;
   const hasErrorCode = errorCode !== undefined && errorCode !== null && errorCode !== '' && errorCode !== 0 && errorCode !== '0';
@@ -250,13 +393,41 @@ function printFormDatasResult(result) {
 async function queryForm(positionals, options, session) {
   requirePositionals(positionals, 2, ['appType', 'formUuid']);
   const [appType, formUuid] = positionals;
-  clampPageSize(options);
+  clampPageSize(options, options.all ? 100 : 20);
 
   let result;
   if (options.inst_id) {
     result = await sendGet(session, appType, `/dingtalk/web/${appType}/v1/form/getFormDataById.json`, {
       formInstId: options.inst_id,
     });
+    result = await hydrateTruncatedSubforms(result, {
+      session,
+      appType,
+      formUuid,
+      formInstId: options.inst_id,
+      disabled: !!options.no_hydrate_subforms,
+      options,
+    });
+  } else if (options.all) {
+    const searchJson = readJsonOption(options, 'search_json', 'search_file', '查询条件');
+    result = await fetchAllPages((page, size) => {
+      const params = {
+        formUuid,
+        appType,
+        currentPage: String(page),
+        pageSize: String(size),
+      };
+      if (searchJson) {
+        params.searchFieldJson = searchJson;
+      }
+      for (const key of ['originator_id', 'create_from', 'create_to', 'modified_from', 'modified_to', 'dynamic_order']) {
+        if (options[key]) {params[snakeToCamel(key)] = options[key];}
+      }
+      const requestPath = options.ids_only
+        ? `/dingtalk/web/${appType}/v1/form/searchFormDataIds.json`
+        : `/dingtalk/web/${appType}/v1/form/searchFormDatas.json`;
+      return sendGet(session, appType, requestPath, params);
+    }, options, 100);
   } else {
     const params = {
       formUuid,
@@ -284,8 +455,16 @@ async function getForm(positionals, options, session) {
   requirePositionals(positionals, 1, ['appType']);
   requireOption(options, 'inst_id');
   const [appType] = positionals;
-  printResult(await sendGet(session, appType, `/dingtalk/web/${appType}/v1/form/getFormDataById.json`, {
+  const result = await sendGet(session, appType, `/dingtalk/web/${appType}/v1/form/getFormDataById.json`, {
+    formInstId: options.inst_id,
+  });
+  printResult(await hydrateTruncatedSubforms(result, {
+    session,
+    appType,
+    formUuid: options.form_uuid,
     formInstId: options.inst_id,
+    disabled: !!options.no_hydrate_subforms,
+    options,
   }));
 }
 
@@ -299,7 +478,7 @@ async function createForm(positionals, options, session) {
     formDataJson: dataJson,
   };
   if (options.dept_id) {params.deptId = options.dept_id;}
-  printResult(await sendPost(session, appType, `/dingtalk/web/${appType}/v1/form/saveFormData.json`, params));
+  printResult(await sendPost(session, appType, `/alibaba/web/${appType}/_/saveFormData.json`, params));
 }
 
 async function updateForm(positionals, options, session) {

package/lib/core/utils.js

@@ -433,6 +433,10 @@ function isCsrfTokenExpired(responseJson) {
   );
 }
 
+function isHttpRedirectStatus(statusCode) {
+  return [301, 302, 303, 307, 308].includes(Number(statusCode));
+}
+
 // ── base_url 解析 ─────────────────────────────────────
 
 /**
@@ -460,6 +464,16 @@ function resolveBaseUrl(cookieData, defaultBaseUrl) {
 
 // ── HTTP 请求工具 ─────────────────────────────────────
 
+function collectResponseText(res, onEnd) {
+  const chunks = [];
+  res.on('data', (chunk) => {
+    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+  });
+  res.on('end', () => {
+    onEnd(Buffer.concat(chunks).toString('utf8'));
+  });
+}
+
 /**
  * 发送 HTTP POST 请求（application/x-www-form-urlencoded）
  * @param {string} baseUrl
@@ -508,12 +522,18 @@ function httpPost(baseUrl, requestPath, postData, cookies, optionsOverride = {})
     };
 
     const req = requestModule.request(options, (res) => {
-      let data = '';
-      res.on('data', (chunk) => { data += chunk; });
-      res.on('end', () => {
+      collectResponseText(res, (data) => {
         if (!optionsOverride.silentStatus) {
           warn(t('common.http_status', res.statusCode));
         }
+        if (isHttpRedirectStatus(res.statusCode)) {
+          resolve({
+            __needLogin: true,
+            __httpStatus: res.statusCode,
+            __location: res.headers.location || '',
+          });
+          return;
+        }
         try {
           const parsed = JSON.parse(data);
           if (isLoginExpired(parsed)) {
@@ -593,12 +613,18 @@ function httpGet(baseUrl, requestPath, queryParams, cookies, optionsOverride = {
     };
 
     const req = requestModule.request(options, (res) => {
-      let data = '';
-      res.on('data', (chunk) => { data += chunk; });
-      res.on('end', () => {
+      collectResponseText(res, (data) => {
         if (!optionsOverride.silentStatus) {
           warn(t('common.http_status', res.statusCode));
         }
+        if (isHttpRedirectStatus(res.statusCode)) {
+          resolve({
+            __needLogin: true,
+            __httpStatus: res.statusCode,
+            __location: res.headers.location || '',
+          });
+          return;
+        }
         try {
           const parsed = JSON.parse(data);
           if (isLoginExpired(parsed)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.5.25",
+  "version": "2026.5.26",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/scripts/e2e-real/skill-coverage.js

@@ -17,6 +17,7 @@ const SKILL_COVERAGE = {
   'yida-business-rule': { level: 'opt-in', reason: 'business association rules mutate form event configuration; validate in a dedicated real-form/UI stage before adding to deterministic shared E2E' },
   'yida-chart': { level: 'real-e2e', stages: ['report', 'dashboard'], tests: ['report chart config generation'] },
   'yida-connector': { level: 'offline', stages: ['connector-local'], commands: ['connector gen-template', 'connector parse-api'] },
+  'yida-connector-safe-actions': { level: 'offline', stages: ['connector-local'], commands: ['connector parse-api', 'connector test --action <operationId>'], reason: 'skill documents conservative HTTP connector action generation and repair workflow; shared E2E should validate local parsing without mutating tenant connectors' },
   'yida-corp-efficiency': { level: 'offline-unit', tests: ['tests/corp-efficiency.test.js'], reason: 'enterprise efficiency queries and notify mutations are not safe for shared real org E2E' },
   'yida-corp-manager': { level: 'offline-unit', tests: ['tests/corp-manager.test.js'], reason: 'enterprise admin mutations are not safe for shared real org E2E' },
   'yida-create-app': { level: 'real-e2e', stages: ['app'], commands: ['create-app'] },

package/yida-skills/SKILL.md

@@ -186,6 +186,7 @@ openyida copy
 | `yida-integration` | `skills/yida-integration/SKILL.md` | 集成自动化逻辑流（创建/列表/启停） | `openyida integration <create\|list\|enable\|disable> ...` |
 | `yida-business-rule` | `skills/yida-business-rule/SKILL.md` | 表单业务关联规则高级函数（INSERT/UPDATE/DELETE/UPSERT） | 详见 SKILL.md |
 | `yida-connector` | `skills/yida-connector/SKILL.md` | HTTP 连接器创建、测试与动作管理 | `openyida connector smart-create <配置>` |
+| `yida-connector-safe-actions` | `skills/yida-connector-safe-actions/SKILL.md` | 从前后端接口安全生成 HTTP 连接器执行动作，并修复测试后动作消失问题 | `openyida connector add-action --operations <动作JSON> --connector-id <id> --confirm` |
 | `sls-log-workbench` | `skills/sls-log-workbench/SKILL.md` | SLS 日志查询工作台排查（内部技术支持） | 详见 SKILL.md |
 | `yida-dashboard` | `skills/yida-dashboard/SKILL.md` | 经营看板/驾驶舱/数据大屏完整产品化交付（单屏控制塔+宜搭待办连接器真实钉钉待办闭环+卡片截图+组织内短链） | 详见 SKILL.md |
 | `yida-chart` | `skills/yida-chart/SKILL.md` | 报表可视化（ECharts 图表 + 数据聚合） | 详见 SKILL.md |

package/yida-skills/skills/yida-connector-safe-actions/SKILL.md

@@ -0,0 +1,282 @@
+---
+name: yida-connector-safe-actions
+description: 宜搭 HTTP 连接器执行动作安全生成与修复。适用于从前端 API 文件、后端 Controller/接口定义生成 OpenYida 连接器操作，或修复“点击测试后报错、所有操作消失”的连接器动作配置问题。不适用于创建连接器本体（应使用 yida-connector），也不适用于配置集成自动化逻辑流（应使用 yida-integration）。
+---
+
+# 宜搭 HTTP 连接器执行动作安全生成
+
+## 适用场景
+
+当用户需要把已有系统接口接入宜搭 HTTP 连接器时使用本技能，尤其适用于：
+
+- 已有连接器，需要继续添加“执行动作”
+- 用户提供前端 API 文件和后端 Controller/接口定义文件
+- 从 Vue/React API wrapper、ASP.NET Controller、Spring Controller 等代码中提取接口
+- 点击宜搭连接器测试面板时报错，刷新后动作列表为空
+- `openyida connector list-actions <connector-id>` 返回 0 个动作，但连接器仍存在
+- 需要说明“如何正确使用 OpenYida 生成 HTTP 连接器动作”
+
+如果只是创建连接器、配置鉴权、管理连接器账号，优先使用 `yida-connector`。
+
+## 核心原则
+
+- 先读源码再生成动作，不要凭空编造接口路径、参数或 action-id。
+- 默认只生成前端 API 文件实际暴露/调用的接口，除非用户明确要求覆盖后端全部接口。
+- 对未知响应结构保持保守，先只输出根对象 `Response`，避免宜搭测试面板解析复杂输出结构时报错。
+- Windows PowerShell 读取中文 JSON 时必须显式使用 UTF-8。
+- 修改后必须执行“添加动作 -> 列表验证 -> CLI 测试 -> 再次列表验证”的闭环。
+- 如果一次错误配置导致动作被清空，应重建完整动作列表，而不是只追加缺失动作。
+
+## 推荐流程
+
+### 1. 读取接口来源
+
+同时读取用户提供的前端 API 文件和后端接口定义文件。
+
+前端 API 文件用于确认“哪些接口真的要暴露给宜搭连接器”；后端文件用于确认 method、route、query/path/body 参数和默认值。
+
+### 2. 查看连接器状态
+
+```bash
+openyida connector detail <connector-id>
+openyida connector list-actions <connector-id>
+```
+
+记录以下信息：
+
+- 连接器 ID
+- 连接器域名、协议、基础路径、鉴权方式
+- 当前已有动作列表
+- 是否已经出现动作被清空
+
+### 3. 生成动作 JSON 文件
+
+建议放在当前项目：
+
+```text
+.cache/openyida/connector-actions/<业务名>-actions.json
+```
+
+动作 ID 建议使用顺序编号：
+
+```json
+"id": "operation-1"
+```
+
+动作调用名使用前端函数名或后端 Action 名：
+
+```json
+"operationId": "getUserDtuSns"
+```
+
+### 4. 校验 JSON 编码
+
+Windows PowerShell 必须加 `-Encoding UTF8`：
+
+```powershell
+Get-Content -Raw -Encoding UTF8 .cache\openyida\connector-actions\<业务名>-actions.json | ConvertFrom-Json | Out-Null
+```
+
+不要使用默认 `Get-Content` 校验中文 JSON，默认编码可能导致误判或乱码。
+
+### 5. 添加动作
+
+```bash
+openyida connector add-action --operations .cache/openyida/connector-actions/<业务名>-actions.json --connector-id <connector-id> --confirm
+```
+
+### 6. 验证动作存在
+
+```bash
+openyida connector list-actions <connector-id>
+```
+
+### 7. 用 CLI 测试动作
+
+CLI 测试时 `--action` 使用 `operationId`，不是顺序编号 `operation-1`：
+
+```bash
+openyida connector test --connector-id <connector-id> --action <operationId>
+```
+
+测试后再次查询动作列表，确认动作没有被清空：
+
+```bash
+openyida connector list-actions <connector-id>
+```
+
+## 安全动作格式
+
+### 无参数 GET 动作
+
+```json
+{
+  "id": "operation-1",
+  "operationId": "getAccessToken",
+  "summary": "获取三色灯 Token",
+  "description": "获取三色灯 Token",
+  "url": "api/TriColorLamp/GetAccessToken",
+  "method": "get",
+  "inputs": [],
+  "parameters": {},
+  "responses": {
+    "type": "object",
+    "properties": {}
+  },
+  "outputs": [
+    {
+      "defaultValue": "{}",
+      "desc": "响应体结构",
+      "name": "Response",
+      "paramType": "Object",
+      "required": false
+    }
+  ],
+  "origin": true
+}
+```
+
+### 带 Query 参数的 GET 动作
+
+```json
+{
+  "id": "operation-2",
+  "operationId": "getDtuSnData",
+  "summary": "获取单设备三色灯数据",
+  "description": "根据 dtuSn 和日期获取三色灯数据",
+  "url": "api/TriColorLamp/GetDtuSnData",
+  "method": "get",
+  "inputs": [
+    {
+      "childList": [
+        {
+          "componentName": "TextField",
+          "desc": "设备 dtuSn",
+          "name": "dtuSn",
+          "queryDefaultValue": {
+            "paramType": "fixedValue",
+            "defaultValue": ""
+          },
+          "required": true
+        },
+        {
+          "componentName": "TextField",
+          "desc": "查询日期，可为空",
+          "name": "date",
+          "queryDefaultValue": {
+            "paramType": "fixedValue",
+            "defaultValue": ""
+          },
+          "required": false
+        }
+      ],
+      "desc": "请求参数",
+      "name": "Query",
+      "paramType": "Object",
+      "required": false
+    }
+  ],
+  "parameters": {
+    "query": [
+      {
+        "name": "dtuSn",
+        "type": "string",
+        "required": true,
+        "description": "设备 dtuSn",
+        "queryDefaultValue": {
+          "paramType": "fixedValue",
+          "defaultValue": ""
+        }
+      },
+      {
+        "name": "date",
+        "type": "string",
+        "required": false,
+        "description": "查询日期，可为空",
+        "queryDefaultValue": {
+          "paramType": "fixedValue",
+          "defaultValue": ""
+        }
+      }
+    ]
+  },
+  "responses": {
+    "type": "object",
+    "properties": {}
+  },
+  "outputs": [
+    {
+      "defaultValue": "{}",
+      "desc": "响应体结构",
+      "name": "Response",
+      "paramType": "Object",
+      "required": false
+    }
+  ],
+  "origin": true
+}
+```
+
+## 字段规则
+
+| 字段 | 推荐写法 |
+| --- | --- |
+| `id` | 使用 `operation-1`、`operation-2` 等顺序编号 |
+| `operationId` | 使用前端函数名或后端 Action 名，例如 `getDtuSnData` |
+| `summary` | 中文短名称，用于宜搭界面展示 |
+| `description` | 一句话说明动作用途 |
+| `url` | 不带域名，只写连接器域名后的相对路径 |
+| `method` | 小写，例如 `get`、`post`、`put` |
+| `inputs` | GET 参数只放 `Query`，不要放 `Body` |
+| `parameters.query` | 与 `inputs[].childList[]` 中的 query 参数保持一致 |
+| `queryDefaultValue` | Query 参数建议在 `inputs` 和 `parameters` 两处都写 |
+| `outputs` | 修复或首次生成时只保留根对象 `Response` |
+
+## 避免测试面板崩溃
+
+以下写法容易导致宜搭连接器测试面板解析异常，应谨慎使用：
+
+- 未确认平台兼容时，在输出字段里展开复杂 `Code`、`Message`、`Data` 子字段
+- 给输入/输出叶子节点添加非必要的 `label`
+- GET 动作配置 `Body`
+- `inputs` 与 `parameters` 中的 query 参数不一致
+- 中文 JSON 未按 UTF-8 读取或保存
+- 只追加部分动作，遗漏原有 Token/Test 动作，导致重建后动作列表不完整
+
+当用户反馈“点击测试后操作都不见了”，优先按修复流程处理，不要继续追加同一份风险 JSON。
+
+## ASP.NET Controller 映射规则
+
+对于 ASP.NET Controller：
+
+```csharp
+[Route("api/[controller]/[action]")]
+public class TriColorLampController : ControllerBase
+```
+
+路径映射为：
+
+```text
+api/TriColorLamp/<ActionName>
+```
+
+规则：
+
+- `[HttpGet]`、`[HttpPost]`、`[HttpPut]` 映射到对应小写 method
+- `[FromQuery]` 参数映射为 `Query`
+- 有默认值或可空参数，例如 `string date = null`，映射为 `required: false`
+- 无默认值的必填参数映射为 `required: true`
+
+## 故障修复流程
+
+当连接器动作被清空时：
+
+1. 执行 `openyida connector detail <connector-id>`，确认连接器仍存在。
+2. 执行 `openyida connector list-actions <connector-id>`，确认动作是否为 0。
+3. 从前端 API 文件和后端 Controller 重新生成完整动作列表。
+4. 如果原来有 Token/Test 动作，也要一起放回 JSON。
+5. 使用保守输出结构，不展开复杂响应字段。
+6. 执行 `add-action --confirm` 重建动作。
+7. 执行 `list-actions` 验证动作数量。
+8. 用 `connector test --action <operationId>` 测试至少一个无参数动作。
+9. 测试后再次执行 `list-actions`，确认动作没有再次消失。