openyida 2026.7.12-1 → 2026.7.13

package/lib/core/command-manifest.js

@@ -49,6 +49,34 @@ const SIDE_EFFECT_SCHEMA = Object.freeze({
   },
 });
 
+const PERMISSION_SCHEMA = Object.freeze({
+  version: 1,
+  fields: {
+    mode: 'Default agent execution decision: allow, ask, or deny. Action-dependent commands must be checked against ask_actions before using the default.',
+    effect: 'Primary effect category: read, write, external, destructive, or unknown.',
+    reason: 'Human-readable rationale for the permission decision.',
+    action_dependent: 'True when the top-level command contains both read-only and mutating actions.',
+    read_actions: 'For action-dependent commands, subcommands/options that can be treated as allow/read.',
+    preauthorized_actions: 'For action-dependent commands, mutating subcommands/options that are explicitly pre-authorized by policy.',
+    ask_actions: 'For action-dependent commands, subcommands/options that should require confirmation.',
+    preauthorized_patterns: 'Structured argument matchers that are explicitly pre-authorized by policy.',
+    ask_patterns: 'Structured argument matchers that require confirmation.',
+    unknown_action_mode: 'Decision for unrecognized actions under action-dependent commands. Use ask unless a caller has a more specific local proof.',
+  },
+  modes: {
+    allow: 'Allowed by the current OpenYida agent policy without an extra OpenYida-specific confirmation.',
+    ask: 'Requires user confirmation before agent execution; currently reserved for destructive/delete-like operations.',
+    deny: 'Should not be auto-executed by an agent.',
+  },
+  effects: {
+    read: 'Reads, validates, inspects, or diagnoses without known mutation.',
+    write: 'Creates, updates, publishes, imports, uploads, or writes local/remote state.',
+    external: 'Touches identity, browser login, local servers, package updates, or third-party execution.',
+    destructive: 'Deletes or removes existing state.',
+    unknown: 'Action-dependent; callers should inspect read_actions, preauthorized_actions, ask_actions, and unknown_action_mode before using the default mode.',
+  },
+});
+
 function sideEffect(kind, overrides = {}) {
   if (!SIDE_EFFECT_BASES[kind]) {
     throw new Error('Unknown side effect kind: ' + kind);
@@ -72,6 +100,29 @@ function sideEffectEntries(ids, effect) {
   return ids.map(id => [id, effect]);
 }
 
+function permission(mode, effect, overrides = {}) {
+  return {
+    mode,
+    effect,
+    ...overrides,
+  };
+}
+
+function permissionEntries(ids, metadata) {
+  return ids.map(id => [id, metadata]);
+}
+
+function actionDependentPermission(options = {}) {
+  return permission('allow', 'unknown', {
+    reason: ACTION_DEPENDENT_REASON,
+    preauthorized_actions: options.preauthorized_actions || [],
+    preauthorized_patterns: options.preauthorized_patterns || [],
+    ask_actions: options.ask_actions || [],
+    ask_patterns: options.ask_patterns || [],
+    unknown_action_mode: 'ask',
+  });
+}
+
 function cloneSideEffect(effect) {
   const cloned = { ...effect };
   if (Array.isArray(effect.read_actions)) {
@@ -87,17 +138,59 @@ function cloneSideEffectSchema() {
   return JSON.parse(JSON.stringify(SIDE_EFFECT_SCHEMA));
 }
 
+function clonePermissionSchema() {
+  return JSON.parse(JSON.stringify(PERMISSION_SCHEMA));
+}
+
+function normalizePermission(metadata, sideEffectMetadata) {
+  const normalized = { ...metadata };
+  if (sideEffectMetadata && sideEffectMetadata.kind === 'mixed') {
+    if (normalized.action_dependent === undefined) {
+      normalized.action_dependent = true;
+    }
+    if (!Array.isArray(normalized.read_actions)) {
+      normalized.read_actions = Array.isArray(sideEffectMetadata.read_actions)
+        ? [...sideEffectMetadata.read_actions]
+        : [];
+    }
+  }
+  return normalized;
+}
+
+function clonePermission(metadata) {
+  const cloned = { ...metadata };
+  if (Array.isArray(metadata.read_actions)) {
+    cloned.read_actions = [...metadata.read_actions];
+  }
+  if (Array.isArray(metadata.preauthorized_actions)) {
+    cloned.preauthorized_actions = [...metadata.preauthorized_actions];
+  }
+  if (Array.isArray(metadata.preauthorized_patterns)) {
+    cloned.preauthorized_patterns = metadata.preauthorized_patterns.map(pattern => ({ ...pattern }));
+  }
+  if (Array.isArray(metadata.ask_actions)) {
+    cloned.ask_actions = [...metadata.ask_actions];
+  }
+  if (Array.isArray(metadata.ask_patterns)) {
+    cloned.ask_patterns = metadata.ask_patterns.map(pattern => ({ ...pattern }));
+  }
+  return cloned;
+}
+
 function listCommandSideEffectIds() {
   return [...COMMAND_SIDE_EFFECTS.keys()].sort();
 }
 
+function listCommandPermissionIds() {
+  return [...COMMAND_PERMISSIONS.keys()].sort();
+}
+
 const COMMAND_SIDE_EFFECTS = new Map([
   ...sideEffectEntries([
     'agent-capabilities',
     'check-page',
     'commands',
     'dingtalk-link',
-    'env',
     'formula.evaluate',
     'integration.diagnose',
   ], sideEffect('local_read')),
@@ -109,6 +202,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'connector.gen-template',
     'connector.parse-api',
     'copy',
+    'export',
     'export-conversation',
     'flash-to-prd',
     'generate-page',
@@ -120,7 +214,6 @@ const COMMAND_SIDE_EFFECTS = new Map([
 
   ...sideEffectEntries([
     'app-list',
-    'basic-info',
     'connector.detail',
     'connector.list',
     'connector.list-actions',
@@ -214,17 +307,17 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['status'],
     mutating_actions: ['login', 'refresh', 'logout'],
   })],
-  ['batch.file', sideEffect('mixed', {
+  ['batch', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
     read_actions: [],
-    mutating_actions: ['depends on commands in file'],
+    mutating_actions: ['depends on commands in batch'],
   })],
-  ['batch.inline', sideEffect('mixed', {
+  ['basic-info', sideEffect('mixed', {
     mutates_yida: true,
-    mutates_local: true,
-    read_actions: [],
-    mutating_actions: ['depends on inline commands'],
+    mutates_local: false,
+    read_actions: ['default', 'overview', 'commodity', 'grant', 'capacity', 'quota', 'abs-path', 'dataflow', 'i18n', 'domain'],
+    mutating_actions: ['domain set'],
   })],
   ['bridge', sideEffect('mixed', {
     mutates_yida: false,
@@ -268,10 +361,10 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['help', 'contact user search', 'calendar event list', 'approval instance list'],
     mutating_actions: ['install', 'setup', 'todo task create', 'chat robot send', 'depends on dws command'],
   })],
-  ['env-management', sideEffect('mixed', {
+  ['env', sideEffect('mixed', {
     mutates_yida: false,
     mutates_local: true,
-    read_actions: ['list', 'show'],
+    read_actions: ['default', '--json', 'list', 'show'],
     mutating_actions: ['setup', 'switch', 'add', 'remove'],
   })],
   ['er', sideEffect('mixed', {
@@ -280,12 +373,6 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['default', '--format json'],
     mutating_actions: ['--output'],
   })],
-  ['export', sideEffect('mixed', {
-    mutates_yida: false,
-    mutates_local: true,
-    read_actions: ['read application schema'],
-    mutating_actions: ['write export file'],
-  })],
   ['feedback', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
@@ -302,7 +389,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
     mutates_yida: false,
     mutates_local: true,
     read_actions: [],
-    mutating_actions: ['start stdio server'],
+    mutating_actions: ['default'],
   })],
   ['nav-group', sideEffect('mixed', {
     mutates_yida: true,
@@ -324,11 +411,275 @@ const COMMAND_SIDE_EFFECTS = new Map([
   })],
 ]);
 
+const ALLOW_WRITE_REASON = 'Allowed by policy: non-destructive write, update, publish, import, upload, or local file operation.';
+const ALLOW_EXTERNAL_REASON = 'Allowed by policy: non-destructive auth, external service, local server, or package operation.';
+const ACTION_DEPENDENT_REASON = 'Action-dependent command: allow only read_actions or preauthorized_actions; ask ask_actions and unknown mutating actions.';
+
+const COMMAND_PERMISSIONS = new Map([
+  ...permissionEntries([
+    'agent-capabilities',
+    'app-list',
+    'check-page',
+    'commands',
+    'connector.detail',
+    'connector.list',
+    'connector.list-actions',
+    'connector.list-connections',
+    'dingtalk-link',
+    'dws.contact-user-search',
+    'formula.evaluate',
+    'get-page-config',
+    'get-permission',
+    'get-schema',
+    'integration.check',
+    'integration.diagnose',
+    'integration.list',
+    'list-forms',
+    'process.preview',
+    'verify-short-url',
+  ], permission('allow', 'read', {
+    reason: 'Read-only, diagnostic, validation, or manifest discovery command.',
+  })),
+
+  ...permissionEntries([
+    'add-validation',
+    'append-chart',
+    'build-page',
+    'cdn-config',
+    'cdn-refresh',
+    'cdn-upload',
+    'compile',
+    'configure-process',
+    'connector.add-action',
+    'connector.create',
+    'connector.create-connection',
+    'connector.gen-template',
+    'connector.parse-api',
+    'connector.smart-create',
+    'copy',
+    'create-app',
+    'create-form.add-option',
+    'create-form.bind-datasource',
+    'create-form.create',
+    'create-form.patch',
+    'create-form.rule',
+    'create-form.update',
+    'create-form.validation',
+    'create-page',
+    'create-process',
+    'create-report',
+    'export-conversation',
+    'externalize-form',
+    'export',
+    'flash-to-prd',
+    'generate-page',
+    'import',
+    'integration.create',
+    'integration.disable',
+    'integration.enable',
+    'publish',
+    'sample',
+    'save-permission',
+    'save-share-config',
+    'update-app',
+    'update-form-config',
+  ], permission('allow', 'write', {
+    reason: ALLOW_WRITE_REASON,
+  })),
+
+  ...permissionEntries([
+    'login',
+    'logout',
+    'update',
+  ], permission('allow', 'external', {
+    reason: ALLOW_EXTERNAL_REASON,
+  })),
+
+  ...permissionEntries([
+    'connector.test',
+  ], permission('allow', 'external', {
+    reason: ALLOW_EXTERNAL_REASON,
+  })),
+
+  ...permissionEntries([
+    'connector.delete',
+    'connector.delete-action',
+  ], permission('ask', 'destructive', {
+    reason: 'Deletes or removes existing configuration.',
+  })),
+
+  ...permissionEntries([
+    'a2a',
+  ], actionDependentPermission({
+    preauthorized_actions: ['serve'],
+  })),
+
+  ...permissionEntries([
+    'aggregate-table',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create-empty', 'save', 'publish'],
+  })),
+
+  ...permissionEntries([
+    'ai',
+  ], actionDependentPermission({
+    preauthorized_actions: ['image --file'],
+  })),
+
+  ...permissionEntries([
+    'agent-center',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'update', 'cancel'],
+  })),
+
+  ...permissionEntries([
+    'ai-form-setting',
+  ], actionDependentPermission({
+    preauthorized_actions: ['enable', 'disable', 'save'],
+  })),
+
+  ...permissionEntries([
+    'app-permission',
+  ], actionDependentPermission({
+    preauthorized_actions: ['set', 'add'],
+    ask_actions: ['remove'],
+  })),
+
+  ...permissionEntries([
+    'auth',
+  ], actionDependentPermission({
+    preauthorized_actions: ['login', 'refresh', 'logout'],
+  })),
+
+  ...permissionEntries([
+    'batch',
+  ], actionDependentPermission({
+    preauthorized_patterns: [{
+      type: 'option_value_excludes_any',
+      option: '--commands',
+      values: ['delete', 'remove'],
+      description: 'Inline batch commands that do not contain delete/remove.',
+    }],
+    ask_patterns: [{
+      type: 'argv_contains_any',
+      values: ['delete', 'remove'],
+      description: 'Batch command arguments or inline command text contains delete/remove.',
+    }],
+  })),
+
+  ...permissionEntries([
+    'basic-info',
+  ], actionDependentPermission({
+    preauthorized_actions: ['domain set'],
+  })),
+
+  ...permissionEntries([
+    'bridge',
+  ], actionDependentPermission({
+    preauthorized_actions: ['start'],
+  })),
+
+  ...permissionEntries([
+    'corp-efficiency',
+  ], actionDependentPermission({
+    preauthorized_actions: ['notify'],
+  })),
+
+  ...permissionEntries([
+    'corp-manager',
+  ], actionDependentPermission({
+    preauthorized_actions: ['add', 'address-book'],
+    ask_actions: ['remove'],
+  })),
+
+  ...permissionEntries([
+    'data',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'update'],
+    ask_actions: ['delete'],
+  })),
+
+  ...permissionEntries([
+    'db-seq-fix',
+  ], actionDependentPermission({
+    preauthorized_actions: ['--fix'],
+  })),
+
+  ...permissionEntries([
+    'doctor',
+  ], actionDependentPermission({
+    preauthorized_actions: ['--fix'],
+  })),
+
+  ...permissionEntries([
+    'dws',
+  ], actionDependentPermission({
+    preauthorized_actions: ['install', 'setup', 'todo task create', 'chat robot send'],
+    ask_actions: ['unrecognized dws command'],
+  })),
+
+  ...permissionEntries([
+    'env',
+  ], actionDependentPermission({
+    preauthorized_actions: ['setup', 'switch', 'add'],
+    ask_actions: ['remove'],
+  })),
+
+  ...permissionEntries([
+    'er',
+  ], actionDependentPermission({
+    preauthorized_actions: ['--output'],
+  })),
+
+  ...permissionEntries([
+    'feedback',
+  ], actionDependentPermission({
+    preauthorized_actions: ['setup', 'dismiss'],
+  })),
+
+  ...permissionEntries([
+    'i18n',
+  ], actionDependentPermission({
+    preauthorized_actions: ['upsert', 'translate', 'translate-all', 'upgrade'],
+    ask_actions: ['delete'],
+  })),
+
+  ...permissionEntries([
+    'mcp',
+  ], actionDependentPermission({
+    preauthorized_actions: ['default'],
+  })),
+
+  ...permissionEntries([
+    'nav-group',
+  ], actionDependentPermission({
+    preauthorized_actions: ['create', 'rename', 'move', 'order', 'hide', 'show'],
+    ask_actions: ['delete'],
+  })),
+
+  ...permissionEntries([
+    'org',
+  ], actionDependentPermission({
+    preauthorized_actions: ['switch'],
+  })),
+
+  ...permissionEntries([
+    'task-center',
+  ], actionDependentPermission({
+    preauthorized_actions: ['submit'],
+  })),
+]);
+
 function command(id, path, usage, descriptionKey, options = {}) {
   const commandSideEffect = COMMAND_SIDE_EFFECTS.get(id);
   if (!commandSideEffect) {
     throw new Error('Missing side effect metadata for command: ' + id);
   }
+  const commandPermission = options.permission || COMMAND_PERMISSIONS.get(id);
+  if (!commandPermission) {
+    throw new Error('Missing permission metadata for command: ' + id);
+  }
+  const normalizedPermission = normalizePermission(commandPermission, commandSideEffect);
 
   return {
     id,
@@ -343,6 +694,7 @@ function command(id, path, usage, descriptionKey, options = {}) {
     examples: options.examples || [],
     hidden: options.hidden === true,
     sideEffect: cloneSideEffect(commandSideEffect),
+    permission: clonePermission(normalizedPermission),
   };
 }
 
@@ -358,13 +710,10 @@ const COMMAND_GROUPS = [
       command('logout', ['logout'], 'logout', 'help.cmd_logout', { requiresLogin: false }),
       command('auth', ['auth'], 'auth <status|login|refresh|logout>', 'help.cmd_auth', { requiresLogin: false }),
       command('org', ['org'], 'org <list|switch>', 'help.cmd_org'),
-      command('env', ['env'], 'env [--json]', 'help.cmd_env', {
+      command('env', ['env'], 'env [--json|setup|list|show|switch|add|remove] [options]', 'help.cmd_env', {
         requiresLogin: false,
         output: 'text|json',
       }),
-      command('env-management', ['env'], 'env <setup|list|show|switch|add|remove>', 'help.cmd_env_management', {
-        requiresLogin: false,
-      }),
     ],
   },
   {
@@ -407,7 +756,7 @@ const COMMAND_GROUPS = [
       command('aggregate-table', ['aggregate-table'], 'aggregate-table <list|create-empty|inspect|preview|save|publish|status> <appType> ...', 'help.cmd_aggregate_table', {
         output: 'json',
       }),
-      command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all>', 'help.cmd_get_schema'),
+      command('get-schema', ['get-schema'], 'get-schema <appType> <formUuid|--all> [--summary-json|--field-map-json]', 'help.cmd_get_schema'),
       command('er', ['er'], 'er <appType> [--format mermaid|json] [--output file] [--include-system] [--include-pages]', 'help.cmd_er', {
         output: 'text|json',
       }),
@@ -555,10 +904,7 @@ const COMMAND_GROUPS = [
         requiresLogin: false,
         output: 'text|json',
       }),
-      command('batch.file', ['batch'], 'batch <file> [--stop-on-error] [--json]', 'help.cmd_batch', {
-        output: 'text|json',
-      }),
-      command('batch.inline', ['batch'], 'batch --commands "cmd1 ; cmd2" [--stop-on-error] [--json]', 'help.cmd_batch', {
+      command('batch', ['batch'], 'batch <file>|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]', 'help.cmd_batch', {
         output: 'text|json',
       }),
       command('flash-to-prd', ['flash-to-prd'], 'flash-to-prd --file <path> --name "<project>"', 'help.cmd_flash_to_prd', {
@@ -595,14 +941,20 @@ function localizeCommand(entry, translate) {
     examples: entry.examples,
     hidden: entry.hidden,
     side_effect: cloneSideEffect(entry.sideEffect),
+    permission: clonePermission(entry.permission),
   };
 }
 
 function summarizeLocalizedCommands(commands) {
   const sideEffectCounts = {};
   const idsBySideEffect = {};
+  const permissionModeCounts = {};
+  const idsByPermissionMode = {};
   const readOnlyCommandIds = [];
   const mutatingCommandIds = [];
+  const allowCommandIds = [];
+  const askCommandIds = [];
+  const denyCommandIds = [];
 
   for (const entry of commands) {
     const effect = entry.side_effect || {};
@@ -619,6 +971,21 @@ function summarizeLocalizedCommands(commands) {
     if (effect.mutates_yida === true || effect.mutates_local === true || kind === 'mixed') {
       mutatingCommandIds.push(entry.id);
     }
+
+    const permissionMetadata = entry.permission || {};
+    const mode = permissionMetadata.mode || 'unknown';
+    permissionModeCounts[mode] = (permissionModeCounts[mode] || 0) + 1;
+    if (!idsByPermissionMode[mode]) {
+      idsByPermissionMode[mode] = [];
+    }
+    idsByPermissionMode[mode].push(entry.id);
+    if (mode === 'allow') {
+      allowCommandIds.push(entry.id);
+    } else if (mode === 'ask') {
+      askCommandIds.push(entry.id);
+    } else if (mode === 'deny') {
+      denyCommandIds.push(entry.id);
+    }
   }
 
   return {
@@ -628,6 +995,11 @@ function summarizeLocalizedCommands(commands) {
     ids_by_side_effect: idsBySideEffect,
     read_only_command_ids: readOnlyCommandIds,
     mutating_command_ids: mutatingCommandIds,
+    permission_mode_counts: permissionModeCounts,
+    ids_by_permission_mode: idsByPermissionMode,
+    allow_command_ids: allowCommandIds,
+    ask_command_ids: askCommandIds,
+    deny_command_ids: denyCommandIds,
     core_workflows: {
       full_app_fast_build: {
         mode: 'fast_build',
@@ -643,6 +1015,11 @@ function summarizeLocalizedCommands(commands) {
           'publish',
         ],
         optional_read_command_ids: ['get-schema', 'list-forms'],
+        recommended_read_commands: [
+          'openyida get-schema <appType> <formUuid> --summary-json',
+          'openyida get-schema <appType> --all --summary-json --keyword <text> --output-dir .cache/openyida/<task>/schemas',
+        ],
+        default_data_contract: 'Do not use this.dataSourceMap.* in fast_build page code unless a designer data source was created and bound in the same run; use this.utils.yida.* or an entry-only page by default.',
         optional_after_done_command_ids: [
           'nav-group',
           'data',
@@ -683,6 +1060,7 @@ function buildCommandManifest(options = {}) {
       commands: group.commands.map(entry => entry.id),
     })),
     side_effect_schema: cloneSideEffectSchema(),
+    permission_schema: clonePermissionSchema(),
     summary: summarizeLocalizedCommands(localizedCommands),
     commands: localizedCommands,
   };
@@ -692,5 +1070,6 @@ module.exports = {
   COMMAND_GROUPS,
   buildCommandManifest,
   flattenCommandManifest,
+  listCommandPermissionIds,
   listCommandSideEffectIds,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.7.12-1",
+  "version": "2026.7.13",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/scripts/postinstall.js

@@ -257,11 +257,13 @@ openyida copy
 
 \`fast_build\` 只做：创建应用 → 核心表单 → 主页面 → 编写主页面源码 → 发布 → 返回访问链接。发布主页面成功并输出 URL 后即完成。
 
+fast_build 页面源码默认不得使用 \`this.dataSourceMap.*\`，除非本轮已经明确创建并绑定设计器数据源；默认使用入口型页面或 \`this.utils.yida.*\` 查询已创建表单。
+
 不要默认加载 \`yida-page-uiux\`、\`yida-data-source-connectors\`、\`yida-data-management\`、\`yida-nav-group\`、\`yida-dashboard\`，也不要默认做示例数据、导航整理、截图验收、公开访问、长 PRD 或深读 references；这些只在用户明确要求或 \`full_demo\` / \`deep_design\` 时执行。
 
 ## 子技能索引
 
-根据用户意图选择最匹配的子技能。支持 \`use_skill\` / \`search_skills\` 的宿主中，必须调用 \`use_skill("<技能名>", "<本次目的>")\` 加载子技能；不要用 Read / read_file / cat 读取 SKILL.md 路径。\`skills-index.json\` 仅供 yida-agent 或同构宿主机器发现，不支持该索引的宿主忽略它。完全没有 \`use_skill\` 的本地工具，才允许按根技能路由表选定技能，并按 \`skills/<技能名>/SKILL.md\` 定位当前阶段唯一必要的 SKILL.md，禁止并发批量读取多个 SKILL.md。
+根据用户意图选择最匹配的子技能。支持 \`use_skill\` / \`search_skills\` 的宿主中，必须调用 \`use_skill("<技能名>", "<本次目的>")\` 加载子技能；不要用 Read / read_file / cat 读取 SKILL.md 路径，也不要猜测 .skills、插件缓存或 workspace/project/.skills。\`skills-index.json\` 仅供 yida-agent 或同构宿主机器发现，不支持该索引的宿主忽略它。完全没有 \`use_skill\` 的本地工具，才允许按根技能路由表选定技能，并按 \`skills/<技能名>/SKILL.md\` 定位当前阶段唯一必要的 SKILL.md，禁止并发批量读取多个 SKILL.md。
 
 | 意图 | 子技能 |
 | --- | --- |