openyida 2026.7.18 → 2026.7.21

package/lib/basic-info/basic-info.js

@@ -6,6 +6,7 @@ const {
   resolveBaseUrl,
 } = require('../core/utils');
 const { createYidaClient } = require('../core/yida-client');
+const { throwUsage } = require('../core/command-errors');
 
 const API = {
   commodityInfo: '/query/commodity/getCommodityInfo.json',
@@ -351,7 +352,7 @@ async function run(args = []) {
     }
     default:
       printUsage();
-      process.exit(1);
+      throwUsage('Unsupported basic-info command: ' + subcommand, 'Run openyida basic-info --help for usage.');
   }
 }
 

package/lib/bridge/bridge.js

@@ -6,6 +6,7 @@ const path = require('path');
 const { spawn } = require('child_process');
 
 const { parseOpenOption } = require('../core/browser-handoff');
+const { resolveBrowserLauncher } = require('../auth/oauth-loopback');
 const { banner, label, success, hint, fail } = require('../core/chalk');
 
 const DEFAULT_HOST = '127.0.0.1';
@@ -515,6 +516,7 @@ function sanitizeLoginResult(result = {}) {
     canAutoUse: !!(result.can_auto_use || result.canAutoUse),
     loggedIn: status === 'ok',
     authMode: result.auth_mode || result.authMode,
+    authSource: result.auth_source || result.authSource,
     baseUrlOrigin: originFromUrl(result.base_url || result.baseUrl),
     corpId: maskId(result.corp_id || result.corpId),
     userId: maskId(result.user_id || result.userId),
@@ -536,6 +538,36 @@ function sanitizeQrLoginStart(result = {}, loginSessionId) {
   };
 }
 
+function isTokenLoginStartResult(result = {}) {
+  const authMode = result.auth_mode || result.authMode;
+  return authMode === 'token' || result.status === 'token_login_required';
+}
+
+function sanitizeTokenLoginStart(result = {}) {
+  const status = result.status || 'token_login_required';
+  return {
+    status,
+    canAutoUse: !!(result.can_auto_use || result.canAutoUse),
+    loggedIn: status === 'ok',
+    authMode: result.auth_mode || result.authMode || 'token',
+    authSource: result.auth_source || result.authSource,
+    baseUrlOrigin: originFromUrl(result.base_url || result.baseUrl),
+    corpId: maskId(result.corp_id || result.corpId),
+    userId: maskId(result.user_id || result.userId),
+    diagnostics: sanitizeDiagnostics(result.diagnostics || {}),
+    pollable: false,
+    loginSessionId: null,
+    message: result.message ? String(result.message).slice(0, 300) : undefined,
+  };
+}
+
+function sanitizeLoginStart(result = {}, loginSessionId) {
+  if (isTokenLoginStartResult(result)) {
+    return sanitizeTokenLoginStart(result);
+  }
+  return sanitizeQrLoginStart(result, loginSessionId);
+}
+
 function getBridgeInfo(state) {
   return {
     ok: true,
@@ -559,8 +591,8 @@ function getBridgeInfo(state) {
 }
 
 function defaultCheckLogin() {
-  const { tokenStatus } = require('../auth/token-auth');
-  return tokenStatus({ includeSecrets: false });
+  const { getAuthStatus } = require('../core/utils');
+  return getAuthStatus({ includeSecrets: false });
 }
 
 async function defaultStartLogin() {
@@ -765,8 +797,9 @@ async function handleLoginStart(req, res, state) {
 
   const startLogin = getHandler(state, 'startLogin', defaultStartLogin);
   const result = await startLogin(body);
-  const loginSessionId = randomToken();
-  if (result.session_file) {
+  const tokenLoginStart = isTokenLoginStartResult(result);
+  const loginSessionId = tokenLoginStart ? null : randomToken();
+  if (!tokenLoginStart && result && result.session_file) {
     state.loginSessions.set(loginSessionId, {
       sessionFile: result.session_file,
       createdAt: new Date().toISOString(),
@@ -775,7 +808,7 @@ async function handleLoginStart(req, res, state) {
 
   respondJson(req, res, state, 200, {
     ok: true,
-    login: sanitizeQrLoginStart(result, loginSessionId),
+    login: sanitizeLoginStart(result, loginSessionId),
   });
 }
 
@@ -1128,19 +1161,11 @@ async function startBridgeServer(options = {}) {
 }
 
 function openExternalUrl(url) {
-  const platform = process.platform;
-  let command;
-  let args;
-  if (platform === 'darwin') {
-    command = 'open';
-    args = [url];
-  } else if (platform === 'win32') {
-    command = 'cmd';
-    args = ['/c', 'start', '', url];
-  } else {
-    command = 'xdg-open';
-    args = [url];
-  }
+  // Reuse the shared launcher so the URL is passed as a single argument.
+  // On Windows this avoids `cmd /c start` splitting the URL on `&`, which
+  // would drop the bridge params carried in the URL hash
+  // (oy_bridge_url / oy_bridge_token) and break bridge pairing.
+  const { command, args } = resolveBrowserLauncher(url);
 
   const child = spawn(command, args, {
     detached: true,

package/lib/core/agent-capabilities.js

@@ -6,7 +6,7 @@ const { version } = require('../../package.json');
 const { t } = require('./i18n');
 const { buildCommandManifest } = require('./command-manifest');
 const { buildEnvironmentSnapshot } = require('./env');
-const { tokenStatus } = require('../auth/token-auth');
+const { getAuthStatus } = require('./utils');
 
 function redactLogin(login) {
   const redacted = { ...login };
@@ -18,6 +18,8 @@ function redactLogin(login) {
 function compactLogin(login) {
   return {
     status: login.status,
+    auth_mode: login.auth_mode,
+    auth_source: login.auth_source,
     can_auto_use: login.can_auto_use === true,
   };
 }
@@ -68,9 +70,9 @@ function buildCommandManifestDigest(manifest) {
 
 function buildAgentCapabilitiesSummary() {
   const envSnapshot = buildEnvironmentSnapshot();
-  const loginStatus = tokenStatus({ includeSecrets: false });
   const manifest = buildCommandManifest({ t, version });
   const projectRoot = envSnapshot.active.projectRoot;
+  const loginStatus = getAuthStatus({ projectRoot, includeSecrets: false });
 
   return {
     schema_version: 1,
@@ -90,9 +92,9 @@ function buildAgentCapabilitiesSummary() {
 
 function buildAgentCapabilities() {
   const envSnapshot = buildEnvironmentSnapshot();
-  const loginStatus = redactLogin(tokenStatus({ includeSecrets: false }));
   const manifest = buildCommandManifest({ t, version });
   const projectRoot = envSnapshot.active.projectRoot;
+  const loginStatus = redactLogin(getAuthStatus({ projectRoot, includeSecrets: false }));
 
   return {
     schema_version: 1,

package/lib/core/command-errors.js

@@ -0,0 +1,38 @@
+'use strict';
+
+const { CliError } = require('./cli-error');
+
+function joinMessage(lines) {
+  return lines.filter(Boolean).join('\n');
+}
+
+function throwUsage(usage, example, options = {}) {
+  throw new CliError(joinMessage([usage, example]), {
+    code: options.code || 'CLI_INVALID_ARGUMENTS',
+    exitCode: options.exitCode || 1,
+    usage: example,
+    details: options.details,
+  });
+}
+
+function throwCommandError(message, options = {}) {
+  throw new CliError(message, {
+    code: options.code || 'CLI_COMMAND_FAILED',
+    exitCode: options.exitCode || 1,
+    details: options.details,
+    usage: options.usage,
+  });
+}
+
+function throwStatus(message, exitCode, options = {}) {
+  throwCommandError(message, {
+    ...options,
+    exitCode,
+  });
+}
+
+module.exports = {
+  throwUsage,
+  throwCommandError,
+  throwStatus,
+};

package/lib/core/command-manifest.js

@@ -193,8 +193,13 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'dingtalk-link',
     'formula.evaluate',
     'integration.diagnose',
+    'schema.validate',
   ], sideEffect('local_read')),
 
+  ...sideEffectEntries([
+    'schema.plan',
+  ], sideEffect('remote_read')),
+
   ...sideEffectEntries([
     'build-page',
     'cdn-config',
@@ -212,6 +217,13 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'update',
   ], sideEffect('local_write')),
 
+  ...sideEffectEntries([
+    'eval',
+  ], sideEffect('mixed', {
+    read_actions: ['doc-quality', 'coverage', 'routing', 'safety', 'comprehensive', 'baseline', 'pipeline'],
+    mutating_actions: ['e2e', 'generate'],
+  })),
+
   ...sideEffectEntries([
     'app-list',
     'connector.detail',
@@ -233,7 +245,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['asset', sideEffect('mixed', {
     mutates_yida: false,
     mutates_local: true,
-    read_actions: ['status', 'verify-url', 'generate', 'resolve without --upload-assets'],
+    read_actions: ['status', 'verify-url', 'generate', 'resolve'],
     mutating_actions: ['resolve --upload-assets', 'resolve --mirror-external'],
   })],
 
@@ -279,6 +291,12 @@ const COMMAND_SIDE_EFFECTS = new Map([
     read_actions: ['text', 'image --image-url'],
     mutating_actions: ['image --file'],
   })],
+  ['schema.apply', sideEffect('mixed', {
+    mutates_yida: true,
+    mutates_local: true,
+    read_actions: [],
+    mutating_actions: ['apply'],
+  })],
   ['ai-form-setting', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: false,
@@ -445,11 +463,20 @@ const COMMAND_PERMISSIONS = new Map([
     'integration.list',
     'list-forms',
     'process.preview',
+    'schema.plan',
+    'schema.validate',
     'verify-short-url',
   ], permission('allow', 'read', {
     reason: 'Read-only, diagnostic, validation, or manifest discovery command.',
   })),
 
+  ...permissionEntries([
+    'eval',
+  ], actionDependentPermission({
+    preauthorized_actions: ['doc-quality', 'coverage', 'routing', 'safety', 'comprehensive', 'baseline', 'pipeline'],
+    ask_actions: ['e2e', 'generate'],
+  })),
+
   ...permissionEntries([
     'add-validation',
     'append-chart',
@@ -496,6 +523,17 @@ const COMMAND_PERMISSIONS = new Map([
     reason: ALLOW_WRITE_REASON,
   })),
 
+  ['schema.apply', permission('allow', 'write', {
+    reason: ALLOW_WRITE_REASON,
+    action_dependent: true,
+    read_actions: [],
+    preauthorized_actions: ['apply'],
+    preauthorized_patterns: [],
+    ask_actions: [],
+    ask_patterns: [],
+    unknown_action_mode: 'ask',
+  })],
+
   ...permissionEntries([
     'login',
     'logout',
@@ -785,6 +823,22 @@ const COMMAND_GROUPS = [
       command('get-form-config', ['get-form-config'], 'get-form-config <appType> <formUuid> [--json]', 'help.cmd_get_form_config', { output: 'json' }),
     ],
   },
+  {
+    id: 'schema',
+    titleKey: 'help.group_schema',
+    commands: [
+      command('schema.validate', ['schema', 'validate'], 'schema validate <manifest> --json --quiet', 'help.cmd_schema_validate', {
+        requiresLogin: false,
+        output: 'json',
+      }),
+      command('schema.plan', ['schema', 'plan'], 'schema plan <manifest> --state <path> --json --quiet', 'help.cmd_schema_plan', {
+        output: 'json',
+      }),
+      command('schema.apply', ['schema', 'apply'], 'schema apply <manifest> --state <path> --plan-id <planId> --json --quiet', 'help.cmd_schema_apply', {
+        output: 'json',
+      }),
+    ],
+  },
   {
     id: 'data',
     titleKey: 'help.group_data',
@@ -907,6 +961,10 @@ const COMMAND_GROUPS = [
       command('copy', ['copy'], 'copy [--force]', 'help.cmd_copy', { requiresLogin: false }),
       command('sample', ['sample'], 'sample [--list]', 'help.cmd_sample', { requiresLogin: false }),
       command('doctor', ['doctor'], 'doctor [--fix]', 'help.cmd_doctor', { requiresLogin: false }),
+      command('eval', ['eval'], 'eval --mode <mode> [--skill <name>] [--runs N]', 'help.cmd_eval', {
+        requiresLogin: false,
+        output: 'text|json',
+      }),
       command('db-seq-fix', ['db-seq-fix'], 'db-seq-fix [--fix]', 'help.cmd_db_seq_fix'),
       command('formula.evaluate', ['formula', 'evaluate'], 'formula evaluate <formula|file> [--schema file]', 'help.cmd_formula_evaluate', {
         requiresLogin: false,

package/lib/core/copy.js

@@ -36,6 +36,10 @@ const PROJECT_COPY_IGNORE_PATHS = [
   path.join('pages', 'dist'),
 ];
 
+const PROJECT_WORKSPACE_DIRS = [
+  path.join('pages', 'src'),
+];
+
 /**
  * 查找 npm 全局安装包根目录。
  * 优先通过 require.resolve 定位（适用于正式全局安装），
@@ -150,6 +154,12 @@ function forceCopyDir(sourceDir, destDir, options = {}) {
   return mergeCopyDir(sourceDir, destDir, options);
 }
 
+function ensureProjectWorkspaceDirs(projectDir) {
+  PROJECT_WORKSPACE_DIRS.forEach((relativeDir) => {
+    fs.mkdirSync(path.join(projectDir, relativeDir), { recursive: true });
+  });
+}
+
 /**
  * 删除已有的 yida-skills 软链接或目录（悟空环境专用）。
  * 悟空通过手动上传技能，不需要软链，执行 -skills 时只做清理。
@@ -305,6 +315,7 @@ function run(args = process.argv.slice(3)) {
       ignorePaths: PROJECT_COPY_IGNORE_PATHS,
       sourceRoot: packageProjectDir,
     });
+    ensureProjectWorkspaceDirs(projectDestDir);
     results.push({ label: 'project/', dest: projectDestDir, count, type: 'copy' });
   }
 
@@ -391,6 +402,7 @@ module.exports = {
   run,
   _internal: {
     forceCopyDir,
+    ensureProjectWorkspaceDirs,
     resolveDestBaseFromEnv,
   },
 };

package/lib/core/doctor.js

@@ -202,7 +202,7 @@ class EnvironmentChecker {
         label: '可选浏览器能力（Playwright 已安装）',
         passed: true,
         severity: Severity.INFO,
-        message: '当前 CLI 默认使用 OAuth token 登录；Playwright 仅用于少量浏览器预览或兼容场景',
+        message: '当前 CLI 默认使用 OAuth token 登录；Playwright 仅用于少量浏览器预览或截图评测',
         fixType: null,
       };
     } catch {
@@ -254,10 +254,21 @@ class EnvironmentChecker {
   }
 
   checkLoginStatus() {
-    const { tokenStatus } = require('../auth/token-auth');
-    const status = tokenStatus({ projectRoot: this.projectRoot });
+    const { getAuthStatus, isEnvAuthMode } = require('./utils');
+    const status = getAuthStatus({ projectRoot: this.projectRoot });
 
-    if (status.status !== 'ok') {
+    if (!status.ok) {
+      if (isEnvAuthMode()) {
+        return {
+          id: 'env-login',
+          label: '宜搭宿主 token 注入登录态',
+          passed: false,
+          severity: Severity.WARNING,
+          message: `宿主 token 注入不可用（${status.failure_reason || status.status}），请回到宿主环境注入 OPENYIDA_ACCESS_TOKEN 或 OPENYIDA_REFRESH_TOKEN`,
+          fixType: null,
+          fixCommand: null,
+        };
+      }
       return {
         id: 'env-login',
         label: '宜搭 token 登录态',

package/lib/core/env-cmd.js

@@ -145,7 +145,7 @@ function switchToEnv(envName) {
   console.log(`  地址：${config.environments[resolvedEnvName].baseUrl}`);
   console.log(`  登录：${getLoginHost(config.environments[resolvedEnvName].loginUrl)}`);
   console.log('');
-  console.log(`${DIM}下一步：运行 openyida login；在悟空中可运行 openyida login --wukong${RESET}`);
+  console.log(`${DIM}下一步：运行 openyida login；在宿主注入 token 模式中请先确认宿主已注入 OPENYIDA_ACCESS_TOKEN 或 OPENYIDA_REFRESH_TOKEN${RESET}`);
   console.log('');
 }
 

package/lib/core/env.js

@@ -12,6 +12,7 @@ const os = require('os');
 const {
   detectActiveTool,
   findProjectRoot,
+  getAuthStatus,
   resolveWukongWorkspaceRoot,
 } = require('./utils');
 const { t } = require('./i18n');
@@ -98,29 +99,29 @@ function getTokenDiagnostics(projectRoot) {
  * 检测登录态信息。
  */
 function detectLoginStatus(projectRoot) {
-  const tokenDiagnostics = getTokenDiagnostics(projectRoot);
-  const { tokenStatus } = require('../auth/token-auth');
-  const status = tokenStatus({ projectRoot });
+  const status = getAuthStatus({ projectRoot });
   const loggedIn = status.status === 'ok';
 
+  const tokenDiagnostics = getTokenDiagnostics(projectRoot);
   return {
     loggedIn,
     canAutoUse: !!status.can_auto_use,
     corpId: status.corp_id || null,
     userId: status.user_id || null,
     baseUrl: status.base_url || null,
-    authSource: 'token',
+    authSource: status.auth_source || 'token',
     authMode: 'token',
     tokenFile: status.token_file || tokenDiagnostics.tokenFile,
     diagnostics: {
       ...tokenDiagnostics,
-      authSource: 'token',
+      authSource: status.auth_source || 'token',
+      authMode: 'token',
       cacheReadable: tokenDiagnostics.tokenFileFound,
       tokenFound: loggedIn,
       corpIdFound: !!status.corp_id,
       userIdFound: !!status.user_id,
       baseUrlFound: !!status.base_url,
-      failureReason: loggedIn ? null : status.status,
+      failureReason: loggedIn ? null : (status.failure_reason || status.status),
     },
   };
 }

package/lib/core/i18n.js

@@ -28,8 +28,15 @@
 
 'use strict';
 
+const fs = require('fs');
+const path = require('path');
+
 const SUPPORTED_LANGUAGES = ['zh', 'zh-HK', 'en', 'ja', 'ko', 'fr', 'de', 'es', 'pt', 'vi', 'hi', 'ar'];
+const CORE_LANGUAGES = ['zh', 'en'];
+const OPTIONAL_LANGUAGES = SUPPORTED_LANGUAGES.filter(lang => !CORE_LANGUAGES.includes(lang));
 const DEFAULT_LANGUAGE = 'zh';
+const CORE_LOCALE_DIR = path.join(__dirname, 'locales');
+const SOURCE_EXTRA_LOCALE_DIR = path.resolve(__dirname, '..', '..', 'locales-extra', 'core');
 
 /**
  * 将系统 locale 代码映射到支持的语言代码。
@@ -91,18 +98,57 @@ function detectLanguage() {
 let currentLanguage = detectLanguage();
 let translations = null;
 
+function getLocaleSearchDirs() {
+  const dirs = [CORE_LOCALE_DIR];
+  const extraDirs = String(process.env.OPENYIDA_LOCALE_DIR || '')
+    .split(path.delimiter)
+    .map(item => item.trim())
+    .filter(Boolean);
+  dirs.push(...extraDirs);
+  dirs.push(SOURCE_EXTRA_LOCALE_DIR);
+  return [...new Set(dirs)];
+}
+
+function resolveLocaleFile(lang) {
+  if (!SUPPORTED_LANGUAGES.includes(lang)) {
+    return null;
+  }
+
+  for (const dir of getLocaleSearchDirs()) {
+    const direct = path.join(dir, `${lang}.js`);
+    if (fs.existsSync(direct)) {
+      return direct;
+    }
+    const nested = path.join(dir, 'core', `${lang}.js`);
+    if (fs.existsSync(nested)) {
+      return nested;
+    }
+  }
+
+  return null;
+}
+
+function loadLocaleForLanguage(lang) {
+  const file = resolveLocaleFile(lang);
+  if (!file) {
+    return null;
+  }
+  return require(file);
+}
+
+function getAvailableLanguages() {
+  return SUPPORTED_LANGUAGES.filter(lang => !!resolveLocaleFile(lang));
+}
+
 /**
  * 懒加载翻译文件。
  * @returns {object} 翻译字典
  */
 function loadTranslations() {
   if (translations) {return translations;}
-  try {
-    translations = require(`./locales/${currentLanguage}`);
-  } catch {
-    // 加载失败时回退到中文
-    translations = require('./locales/zh');
-  }
+  translations = loadLocaleForLanguage(currentLanguage)
+    || loadLocaleForLanguage('en')
+    || loadLocaleForLanguage('zh');
   return translations;
 }
 
@@ -127,7 +173,8 @@ function t(key, ...args) {
     if (currentLanguage !== 'en') { fallbackLangs.push('en'); }
     if (currentLanguage !== 'zh') { fallbackLangs.push('zh'); }
     for (const lang of fallbackLangs) {
-      const fbDict = require(`./locales/${lang}`);
+      const fbDict = loadLocaleForLanguage(lang);
+      if (!fbDict) { continue; }
       const fbValue = key.split('.').reduce((obj, segment) => {
         return obj && typeof obj === 'object' ? obj[segment] : undefined;
       }, fbDict);
@@ -178,4 +225,15 @@ function setLanguage(lang) {
   }
 }
 
-module.exports = { t, getLanguage, setLanguage, detectLanguage, SUPPORTED_LANGUAGES };
+module.exports = {
+  t,
+  getLanguage,
+  setLanguage,
+  detectLanguage,
+  SUPPORTED_LANGUAGES,
+  CORE_LANGUAGES,
+  OPTIONAL_LANGUAGES,
+  getAvailableLanguages,
+  loadLocaleForLanguage,
+  resolveLocaleFile,
+};