openyida 2026.6.1-beta.1 → 2026.6.3-beta.0

package/lib/app/import-app.js

@@ -139,16 +139,28 @@ async function updateFormConfig(appType, formUuid, authRef) {
   return result;
 }
 
-// ── 适配 SerialNumberField formula ───────────────────
+// ── 适配 Schema 中的应用 / 表单标识符 ─────────────────
 //
-// 将 Schema 中所有 SerialNumberField 的 formula 里的旧 appType 替换为新 appType，
-// 同时将旧 formUuid 替换为新 formUuid。
+// 导入时需要把 Schema 里所有对旧 appType / formUuid 的引用（页面 id、组件
+// props.appType、actions.source、SerialNumberField 公式等）重映射为新值。
+//
+// 早期实现对整个 Schema JSON 做无约束的全局字符串替换，存在数据腐蚀风险：
+// 若某个字段的文本值、label、备注恰好包含旧 appType / formUuid 子串，会被
+// 误替换。这里改为「标识符边界」约束替换——appType / formUuid 都是由字母、
+// 数字、下划线、连字符构成的标识符，只有当匹配片段两侧不是同类标识符字符时
+// 才替换，从而避免误伤包含旧标识符子串的普通文本。
+
+function buildIdentifierBoundaryRegExp(identifier) {
+  // 标识符字符集：字母、数字、下划线、连字符。
+  // 使用 lookbehind / lookahead 保证匹配片段不是更长标识符的一部分。
+  return new RegExp(`(?<![A-Za-z0-9_-])${escapeRegExp(identifier)}(?![A-Za-z0-9_-])`, 'g');
+}
 
-function adaptSerialNumberFormulas(schema, oldAppType, newAppType, oldFormUuid, newFormUuid) {
+function adaptSchemaIdentifiers(schema, oldAppType, newAppType, oldFormUuid, newFormUuid) {
   const schemaStr = JSON.stringify(schema);
   const adapted = schemaStr
-    .replace(new RegExp(escapeRegExp(oldAppType), 'g'), newAppType)
-    .replace(new RegExp(escapeRegExp(oldFormUuid), 'g'), newFormUuid);
+    .replace(buildIdentifierBoundaryRegExp(oldAppType), newAppType)
+    .replace(buildIdentifierBoundaryRegExp(oldFormUuid), newFormUuid);
   return JSON.parse(adapted);
 }
 
@@ -287,8 +299,8 @@ async function run(args) {
       continue;
     }
 
-    // 将 Schema 中所有旧 appType / formUuid 替换为新值
-    const adaptedSchema = adaptSerialNumberFormulas(
+    // 将 Schema 中所有旧 appType / formUuid 引用重映射为新值（标识符边界约束，避免误伤普通文本）
+    const adaptedSchema = adaptSchemaIdentifiers(
       originalSchema,
       sourceAppType,
       newAppType,
@@ -377,7 +389,7 @@ module.exports = {
   __test__: {
     normalizeImportFormType,
     buildCreateFormPostData,
-    adaptSerialNumberFormulas,
+    adaptSchemaIdentifiers,
     extractSchemaContent,
   },
 };

package/lib/connector/action-generator.js

@@ -2,6 +2,42 @@
  * 执行动作配置生成模块
  */
 
+// 可能携带凭证 / 敏感信息的请求头（小写匹配）。
+// 这些头的真实值绝不能写入生成的 Action 配置，否则会把用户 token 泄漏到
+// 落盘的连接器配置里。命中时用占位符替换，提示用户在连接器认证中配置。
+const SENSITIVE_HEADER_PATTERNS = [
+  'authorization',
+  'cookie',
+  'token',
+  'api-key',
+  'apikey',
+  'secret',
+  'access-token',
+  'x-acs-dingtalk-access-token',
+  'x-api-key',
+  'proxy-authorization',
+];
+
+function isSensitiveHeader(headerName) {
+  const lower = String(headerName || '').toLowerCase();
+  return SENSITIVE_HEADER_PATTERNS.some((pattern) => lower.includes(pattern));
+}
+
+/**
+ * 计算请求头写入 Action 配置的默认值。
+ * 敏感头返回占位符（不泄漏真实凭证），普通头截断展示前 50 字符。
+ * @param {string} headerName - 请求头名称
+ * @param {string} headerValue - 请求头原始值
+ * @returns {string} 可安全写入配置的默认值
+ */
+function buildHeaderDefaultValue(headerName, headerValue) {
+  if (isSensitiveHeader(headerName)) {
+    return '';
+  }
+  const value = String(headerValue === null || headerValue === undefined ? '' : headerValue);
+  return value.length > 50 ? value.substring(0, 50) + '...' : value;
+}
+
 /**
  * 根据URL路径生成有意义的动作名称和描述
  * @param {string} path - URL路径
@@ -125,7 +161,7 @@ function generateOperation(curlData, relevantHeaders) {
       paramType: 'String',
       desc: key,
       required: false,
-      defaultValue: value.substring(0, 50) + (value.length > 50 ? '...' : ''),
+      defaultValue: buildHeaderDefaultValue(key, value),
       children: [],
       childList: [],
       __level: 0,
@@ -262,5 +298,7 @@ function generateOperation(curlData, relevantHeaders) {
 
 module.exports = {
   generateActionInfo,
-  generateOperation
+  generateOperation,
+  isSensitiveHeader,
+  buildHeaderDefaultValue
 };

package/lib/connector/api.js

@@ -60,7 +60,13 @@ function printTable(headers, rows) {
 function buildOperationsSummary(operations) {
   if (!Array.isArray(operations) || operations.length === 0) {return '';}
 
-  const summaries = operations.map(op => op.summary || op.operationId);
+  const summaries = operations
+    .map(op => op.summary || op.name || op.operationId || op.id || op.url || op.path)
+    .filter(Boolean);
+
+  if (summaries.length === 0) {
+    return '';
+  }
 
   if (summaries.length === 1) {
     return `支持${summaries[0]}`;

package/lib/connector/connector-add-action.js

@@ -23,6 +23,7 @@ const {
   getConnectorDetail,
   saveConnector,
 } = require('./api');
+const { normalizeOperations } = require('./operation-normalizer');
 
 function showUsage() {
   console.log(`
@@ -99,6 +100,7 @@ async function run(args) {
     if (!Array.isArray(newOperations)) {
       newOperations = [newOperations];
     }
+    newOperations = normalizeOperations(newOperations);
     console.log(`✓ 已加载 ${newOperations.length} 个执行动作`);
     newOperations.forEach((operation, index) => {
       console.log(`  [${index + 1}] ${operation.operationId}: ${operation.summary}`);
@@ -123,7 +125,7 @@ async function run(args) {
     const detail = await getConnectorDetail(connector.connectorName, authRef);
     targetConnector = { ...connector, detail };
 
-    const existingOps = JSON.parse(targetConnector.detail.operations || '[]');
+    const existingOps = normalizeOperations(JSON.parse(targetConnector.detail.operations || '[]'));
     console.log('📋 即将追加到以下连接器:');
     console.log(`   名称: ${targetConnector.displayName}`);
     console.log(`   ID: ${targetConnector.id}`);
@@ -164,7 +166,7 @@ async function run(args) {
   }
 
   // 合并执行动作
-  const existingOperations = JSON.parse(targetConnector.detail.operations || '[]');
+  const existingOperations = normalizeOperations(JSON.parse(targetConnector.detail.operations || '[]'));
   const existingIds = new Set(existingOperations.map(op => op.operationId));
   const duplicates = newOperations.filter(op => existingIds.has(op.operationId));
 

package/lib/connector/connector-create.js

@@ -31,6 +31,7 @@ const {
   getConnectorDetail,
   saveConnector,
 } = require('./api');
+const { normalizeOperations } = require('./operation-normalizer');
 
 function showUsage() {
   console.log(`
@@ -232,11 +233,11 @@ async function run(args) {
     console.log(`当前描述: ${connector.connectorDesc || '(空)'}\n`);
 
     const detail = await getConnectorDetail(connector.connectorName, authRef);
-    const currentOperations = JSON.parse(detail.operations || '[]');
+    const currentOperations = normalizeOperations(JSON.parse(detail.operations || '[]'));
     const newDesc = buildConnectorDesc(options.description, connector.connectorDesc, authRef, currentOperations);
 
     await saveConnector({
-      operations: detail.operations || '[]',
+      operations: JSON.stringify(currentOperations),
       displayName: detail.displayName,
       iconUrl: detail.iconUrl || 'chaxun%%#FFA200',
       connectorDesc: newDesc,
@@ -278,6 +279,7 @@ async function run(args) {
       fail('错误: operations 文件不能为空数组');
       process.exit(1);
     }
+    operations = normalizeOperations(operations);
     console.log(`✓ 已加载 ${operations.length} 个执行动作`);
   } catch (e) {
     fail(`读取执行动作配置文件失败: ${e.message}`);

package/lib/connector/connector-delete-action.js

@@ -17,6 +17,7 @@ const {
   getConnectorDetail,
   saveConnector,
 } = require('./api');
+const { normalizeOperations } = require('./operation-normalizer');
 
 function showUsage() {
   console.log(`
@@ -63,7 +64,7 @@ async function run(args) {
   }
 
   const detail = await getConnectorDetail(connector.connectorName, authRef);
-  const currentOperations = JSON.parse(detail.operations || '[]');
+  const currentOperations = normalizeOperations(JSON.parse(detail.operations || '[]'));
   const targetOperation = currentOperations.find(op => op.operationId === operationId);
 
   if (!targetOperation) {

package/lib/connector/curl-parser.js

@@ -2,6 +2,36 @@
  * Curl 命令解析模块
  */
 
+/**
+ * 从 curl 命令中提取 URL。
+ * 早期实现只匹配 `curl "<url>"`（必须带引号且紧跟 curl），导致裸 URL、
+ * 单引号、`--url` 参数、`-X POST` 在 URL 之前等常见写法全部解析失败。
+ * 这里按优先级多策略提取：
+ *   1. 显式 `--url <url>` 参数
+ *   2. 命令中任意带引号的 http(s) URL
+ *   3. 命令中任意裸 http(s) URL（截断到空白处）
+ * @param {string} curlCommand - curl 命令字符串
+ * @returns {string} 提取到的 URL，未找到返回空字符串
+ */
+function extractCurlUrl(curlCommand) {
+  const explicitUrl = curlCommand.match(/--url\s+['"]?([^'"\s]+)['"]?/);
+  if (explicitUrl) {
+    return explicitUrl[1];
+  }
+
+  const quotedUrl = curlCommand.match(/['"](https?:\/\/[^'"]+)['"]/);
+  if (quotedUrl) {
+    return quotedUrl[1];
+  }
+
+  const bareUrl = curlCommand.match(/(https?:\/\/[^\s'"]+)/);
+  if (bareUrl) {
+    return bareUrl[1];
+  }
+
+  return '';
+}
+
 /**
  * 解析 curl 命令
  * @param {string} curlCommand - curl 命令字符串
@@ -19,10 +49,9 @@ function parseCurl(curlCommand) {
   };
 
   try {
-    // 提取 URL
-    const urlMatch = curlCommand.match(/curl\s+['"]([^'"]+)['"]/);
-    if (urlMatch) {
-      result.url = urlMatch[1];
+    // 提取 URL：兼容带引号 URL、裸 URL、--url 参数、-X POST 在前等多种写法
+    result.url = extractCurlUrl(curlCommand);
+    if (result.url) {
       const url = new URL(result.url);
       result.protocol = url.protocol.replace(':', '');
       result.host = url.hostname;
@@ -30,10 +59,10 @@ function parseCurl(curlCommand) {
     }
 
     // 提取方法
-    const methodMatch = curlCommand.match(/-X\s+(\w+)/);
+    const methodMatch = curlCommand.match(/(?:-X|--request)\s+['"]?(\w+)['"]?/);
     if (methodMatch) {
       result.method = methodMatch[1].toUpperCase();
-    } else if (curlCommand.includes('--data') || curlCommand.includes('-d')) {
+    } else if (curlCommand.includes('--data') || /\s-d\b/.test(curlCommand)) {
       result.method = 'POST';
     }
 
@@ -64,10 +93,11 @@ function detectAuthType(headers) {
   const authHeader = headers['Authorization'] || headers['authorization'];
 
   if (authHeader) {
-    if (authHeader.startsWith('Bearer')) {
+    const scheme = authHeader.trim().toLowerCase();
+    if (scheme.startsWith('bearer')) {
       return { type: 'API密钥', code: 'ApiKeyAuth', headerName: 'Authorization' };
     }
-    if (authHeader.startsWith('Basic')) {
+    if (scheme.startsWith('basic')) {
       return { type: '基本身份验证', code: 'BasicAuth', headerName: 'Authorization' };
     }
   }
@@ -116,6 +146,7 @@ function filterBrowserHeaders(headers) {
 
 module.exports = {
   parseCurl,
+  extractCurlUrl,
   detectAuthType,
   filterBrowserHeaders,
   BROWSER_HEADERS

package/lib/connector/doc-parser.js

@@ -104,21 +104,22 @@ class MarkdownParser extends BaseDocParser {
   }
 
   parseRequestHeaders() {
-    const headerSection = this.extractSection('请求头', '请求参数');
+    const headerSection = this.extractSection('请求头', ['查询参数', '请求参数', '请求体', '响应']);
     if (headerSection) {
       this.result.requestInfo.headers = this.parseTable(headerSection);
     }
   }
 
   parseQueryParams() {
-    const querySection = this.extractSection('查询参数', '请求体');
+    const querySection = this.extractSection('查询参数', ['请求体', '响应', '错误码']) ||
+      this.extractSection('请求参数', ['请求体', '响应', '错误码']);
     if (querySection) {
       this.result.requestInfo.query = this.parseTable(querySection);
     }
   }
 
   parseRequestBody() {
-    const bodySection = this.extractSection('请求体', '响应');
+    const bodySection = this.extractSection('请求体', ['响应', '返回', '错误码']);
     if (!bodySection) {return;}
 
     const jsonMatch = bodySection.match(/```json\s*([\s\S]*?)```/);
@@ -289,10 +290,13 @@ class MarkdownParser extends BaseDocParser {
 
     let endIndex = this.content.length;
     if (endMarker) {
-      const endMatch = this.content.indexOf(endMarker, startIndex + startMarker.length);
-      if (endMatch !== -1) {
-        endIndex = endMatch;
-      }
+      const markers = Array.isArray(endMarker) ? endMarker : [endMarker];
+      markers.forEach(marker => {
+        const endMatch = this.content.indexOf(marker, startIndex + startMarker.length);
+        if (endMatch !== -1 && endMatch < endIndex) {
+          endIndex = endMatch;
+        }
+      });
     }
 
     return this.content.substring(startIndex, endIndex);
@@ -343,6 +347,15 @@ class MarkdownParser extends BaseDocParser {
   }
 }
 
+function applyParamLocation(nodes, paramLocation) {
+  (Array.isArray(nodes) ? nodes : []).forEach(node => {
+    node.paramLocation = paramLocation;
+    applyParamLocation(node.childList, paramLocation);
+    applyParamLocation(node.children, paramLocation);
+  });
+  return nodes;
+}
+
 /**
  * 文档解析器工厂
  */
@@ -424,6 +437,7 @@ function convertToOperationConfig(parseResult) {
       childList: [],
       __level: 0,
       hidden: false,
+      paramLocation: 'header',
       required: h.required === 'true' || h.required === '是' || h.required === '**' || h.required === true,
       defaultValue: h.example || h.value || ''
     }));
@@ -433,7 +447,8 @@ function convertToOperationConfig(parseResult) {
       desc: '请求头',
       name: 'Headers',
       paramType: 'Object',
-      required: false
+      required: false,
+      paramLocation: 'header'
     });
 
     operation.parameters.header = parseResult.requestInfo.headers.map(h => ({
@@ -452,7 +467,8 @@ function convertToOperationConfig(parseResult) {
       children: [],
       childList: [],
       __level: 0,
-      hidden: false
+      hidden: false,
+      paramLocation: 'query'
     }));
 
     operation.inputs.push({
@@ -460,7 +476,8 @@ function convertToOperationConfig(parseResult) {
       desc: '查询参数',
       name: 'Query',
       paramType: 'Object',
-      required: false
+      required: false,
+      paramLocation: 'query'
     });
 
     operation.parameters.query = parseResult.requestInfo.query.map(q => ({
@@ -478,7 +495,7 @@ function convertToOperationConfig(parseResult) {
       default: JSON.stringify(requestExample)
     };
 
-    const requestChildList = generateChildList(requestSchema, operation.operationId);
+    const requestChildList = applyParamLocation(generateChildList(requestSchema, operation.operationId), 'body');
     if (requestChildList.length > 0) {
       operation.inputs.push({
         defaultValue: JSON.stringify(requestExample),
@@ -486,7 +503,8 @@ function convertToOperationConfig(parseResult) {
         name: 'Body',
         paramType: 'Object',
         required: false,
-        childList: requestChildList
+        childList: requestChildList,
+        paramLocation: 'body'
       });
     }
   }
@@ -496,13 +514,6 @@ function convertToOperationConfig(parseResult) {
     const responseSchema = parseResult.responseInfo.schema;
     operation.responses = responseSchema;
 
-    if (!operation.parameters.body) {
-      const example = generateExample(responseSchema);
-      operation.parameters.body = {
-        default: JSON.stringify(example)
-      };
-    }
-
     operation.outputs = [generateOutputs(responseSchema, operation.operationId)];
   } else {
     operation.responses = { type: 'object' };

package/lib/connector/operation-normalizer.js

@@ -0,0 +1,198 @@
+'use strict';
+
+const { generateOutputs } = require('./response-parser');
+
+function slugifyOperationId(value, fallback) {
+  const slug = String(value || '')
+    .trim()
+    .replace(/^\//, '')
+    .replace(/[^A-Za-z0-9_]+/g, '_')
+    .replace(/^_+|_+$/g, '');
+
+  return slug || fallback;
+}
+
+function deriveOperationId(operation, index) {
+  const explicitId = String(operation.operationId || '').trim();
+  if (explicitId) {
+    return explicitId;
+  }
+
+  const fallback = `operation_${index + 1}`;
+  const candidates = [operation.url, operation.path, operation.id, operation.name, operation.summary];
+  for (const candidate of candidates) {
+    const operationId = slugifyOperationId(candidate, '');
+    if (operationId) {
+      return operationId;
+    }
+  }
+
+  return fallback;
+}
+
+function normalizeUrl(value) {
+  return String(value || '').trim().replace(/^\/+/, '');
+}
+
+function inferParamLocation(input) {
+  if (input.paramLocation) {
+    return input.paramLocation;
+  }
+
+  const name = String(input.name || '').toLowerCase();
+  if (name === 'headers' || name === 'header') {
+    return 'header';
+  }
+  if (name === 'query' || name === 'queries') {
+    return 'query';
+  }
+  if (name === 'path' || name === 'paths') {
+    return 'path';
+  }
+  if (name === 'body') {
+    return 'body';
+  }
+
+  return null;
+}
+
+function normalizeParamNode(node, paramLocation) {
+  if (!node || typeof node !== 'object') {
+    return node;
+  }
+
+  const normalized = { ...node };
+  if (paramLocation && !normalized.paramLocation) {
+    normalized.paramLocation = paramLocation;
+  }
+  if (!Array.isArray(normalized.children)) {
+    normalized.children = [];
+  }
+  if (!Array.isArray(normalized.childList)) {
+    normalized.childList = [];
+  }
+  normalized.children = normalized.children.map(child => normalizeParamNode(child, paramLocation));
+  normalized.childList = normalized.childList.map(child => normalizeParamNode(child, paramLocation));
+  return normalized;
+}
+
+function normalizeInput(input) {
+  if (!input || typeof input !== 'object') {
+    return input;
+  }
+
+  const paramLocation = inferParamLocation(input);
+  const normalized = { ...input };
+  if (paramLocation && !normalized.paramLocation) {
+    normalized.paramLocation = paramLocation;
+  }
+  if (!Array.isArray(normalized.childList)) {
+    normalized.childList = [];
+  }
+  normalized.childList = normalized.childList.map(child => normalizeParamNode(child, paramLocation));
+  return normalized;
+}
+
+function buildParametersFromInputs(inputs) {
+  const parameters = { header: [] };
+
+  for (const input of inputs) {
+    if (!input || typeof input !== 'object') {
+      continue;
+    }
+
+    const location = inferParamLocation(input);
+    const childList = Array.isArray(input.childList) ? input.childList : [];
+
+    if (location === 'header') {
+      parameters.header = childList.map(child => ({
+        name: child.name,
+        value: child.defaultValue || '',
+      }));
+    } else if (location === 'query') {
+      parameters.query = childList.map(child => ({
+        name: child.name,
+        value: child.defaultValue || '',
+      }));
+    } else if (location === 'body' && input.defaultValue !== undefined) {
+      parameters.body = { default: input.defaultValue };
+    }
+  }
+
+  return parameters;
+}
+
+function normalizeParameters(parameters, inputs) {
+  const normalized = parameters && typeof parameters === 'object' && !Array.isArray(parameters)
+    ? { ...parameters }
+    : buildParametersFromInputs(inputs);
+
+  if (!Array.isArray(normalized.header)) {
+    normalized.header = [];
+  }
+
+  return normalized;
+}
+
+function normalizeOutput(output) {
+  if (!output || typeof output !== 'object') {
+    return output;
+  }
+
+  const normalized = { ...output };
+  if (!Array.isArray(normalized.childList)) {
+    normalized.childList = [];
+  }
+  return normalized;
+}
+
+function normalizeOperation(operation, index) {
+  if (!operation || typeof operation !== 'object' || Array.isArray(operation)) {
+    throw new Error(`第 ${index + 1} 个执行动作必须是对象`);
+  }
+
+  const operationId = deriveOperationId(operation, index);
+  const rawUrl = operation.url !== undefined && operation.url !== null ? operation.url : operation.path;
+  const hasUrl = rawUrl !== undefined && rawUrl !== null && String(rawUrl).trim() !== '';
+  const url = normalizeUrl(rawUrl);
+
+  if (!hasUrl) {
+    throw new Error(`第 ${index + 1} 个执行动作缺少 url/path`);
+  }
+
+  const summary = operation.summary || operation.name || operationId;
+  const description = operation.description || operation.desc || summary;
+  const method = String(operation.method || 'get').toLowerCase();
+  const inputs = Array.isArray(operation.inputs)
+    ? operation.inputs.map(normalizeInput)
+    : [];
+  const responses = operation.responses || { type: 'object', properties: {} };
+  const outputs = Array.isArray(operation.outputs) && operation.outputs.length > 0
+    ? operation.outputs.map(normalizeOutput)
+    : [generateOutputs(responses, operationId)];
+
+  return {
+    ...operation,
+    id: operation.id || `operation-${operationId}`,
+    operationId,
+    summary,
+    description,
+    url,
+    method,
+    inputs,
+    parameters: normalizeParameters(operation.parameters, inputs),
+    responses,
+    outputs,
+    origin: operation.origin !== undefined ? operation.origin : true,
+  };
+}
+
+function normalizeOperations(operations) {
+  const list = Array.isArray(operations) ? operations : [operations];
+  return list.map(normalizeOperation);
+}
+
+module.exports = {
+  normalizeOperation,
+  normalizeOperations,
+};

package/lib/core/chalk.js

@@ -36,6 +36,8 @@ const c = {
   cyan:    '\x1b[36m',
   white:   '\x1b[37m',
   gray:    '\x1b[90m',
+  bgBlue:  '\x1b[44m',
+  bgCyan:  '\x1b[46m',
 };
 
 // ── 图标常量 ───────────────────────────────────────────

package/lib/core/env-cmd.js

@@ -13,7 +13,7 @@
 
 const { execSync } = require('child_process');
 const readline = require('readline');
-const { warn } = require('./chalk');
+const { c, warn } = require('./chalk');
 const {
   loadEnvsConfig,
   saveEnvsConfig,
@@ -28,14 +28,14 @@ const {
 
 // ── 颜色常量 ──────────────────────────────────────────
 
-const RESET   = '\x1b[0m';
-const BOLD    = '\x1b[1m';
-const DIM     = '\x1b[2m';
-const GREEN   = '\x1b[32m';
-const YELLOW  = '\x1b[33m';
-const CYAN    = '\x1b[36m';
-const RED     = '\x1b[31m';
-const BLUE    = '\x1b[34m';
+const RESET   = c.reset;
+const BOLD    = c.bold;
+const DIM     = c.dim;
+const GREEN   = c.green;
+const YELLOW  = c.yellow;
+const CYAN    = c.cyan;
+const RED     = c.red;
+const BLUE    = c.blue;
 
 // ── 工具函数 ──────────────────────────────────────────
 

package/lib/core/update.js

@@ -12,18 +12,18 @@
 const { execSync } = require('child_process');
 const { fetchLatestVersion, isNewer } = require('./check-update');
 const { t } = require('./i18n');
-const { warn } = require('./chalk');
+const { c, warn } = require('./chalk');
 const { getNpmExecutable } = require('./utils');
 
 // ── ANSI 颜色常量 ──────────────────────────────────
-const RESET   = '\x1b[0m';
-const BOLD    = '\x1b[1m';
-const DIM     = '\x1b[2m';
-const GREEN   = '\x1b[32m';
-const YELLOW  = '\x1b[33m';
-const CYAN    = '\x1b[36m';
-const RED     = '\x1b[31m';
-const MAGENTA = '\x1b[35m';
+const RESET   = c.reset;
+const BOLD    = c.bold;
+const DIM     = c.dim;
+const GREEN   = c.green;
+const YELLOW  = c.yellow;
+const CYAN    = c.cyan;
+const RED     = c.red;
+const MAGENTA = c.magenta;
 
 // ── Spinner 动画 ───────────────────────────────────
 const SPINNER_FRAMES = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];

package/lib/dws/dws-wrapper.js

@@ -12,7 +12,7 @@
 
 const { execSync, spawn } = require('child_process');
 const { t } = require('../core/i18n');
-const { warn } = require('../core/chalk');
+const { c, warn } = require('../core/chalk');
 
 const DWS_BINARY_NAME = 'dws';
 const INSTALL_SCRIPTS = {
@@ -51,16 +51,16 @@ function getDwsVersion() {
  * 显示安装指引
  */
 function showInstallGuide() {
-  const RESET   = '\x1b[0m';
-  const BOLD    = '\x1b[1m';
-  const DIM     = '\x1b[2m';
-  const CYAN    = '\x1b[36m';
-  const GREEN   = '\x1b[32m';
-  const YELLOW  = '\x1b[33m';
-  const BLUE    = '\x1b[34m';
+  const RESET   = c.reset;
+  const BOLD    = c.bold;
+  const DIM     = c.dim;
+  const CYAN    = c.cyan;
+  const GREEN   = c.green;
+  const YELLOW  = c.yellow;
+  const BLUE    = c.blue;
 
-  const BG_BLUE = '\x1b[44m';
-  const WHITE   = '\x1b[37m';
+  const BG_BLUE = c.bgBlue;
+  const WHITE   = c.white;
 
   const isWindows = process.platform === 'win32';
   const installCommand = isWindows ? INSTALL_SCRIPTS.windows : INSTALL_SCRIPTS.unix;
@@ -221,11 +221,11 @@ async function executeDwsCommand(args) {
  * 显示 dws 帮助信息
  */
 function showDwsHelp() {
-  const RESET   = '\x1b[0m';
-  const BOLD    = '\x1b[1m';
-  const CYAN    = '\x1b[36m';
-  const GREEN   = '\x1b[32m';
-  const YELLOW  = '\x1b[33m';
+  const RESET   = c.reset;
+  const BOLD    = c.bold;
+  const CYAN    = c.cyan;
+  const GREEN   = c.green;
+  const YELLOW  = c.yellow;
 
   console.log('');
   console.log(`${BOLD}openyida dws - 钉钉 CLI 集成${RESET}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.6.1-beta.1",
+  "version": "2026.6.3-beta.0",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",