openyida 2026.8.14 → 2026.8.16-beta.0

package/README.md

@@ -68,9 +68,9 @@ OpenYida returns a compact machine-readable summary with the version, login stat
 openyida login
 ```
 
-OpenYida login defaults to OAuth token mode. It opens the DingTalk OAuth authorization page, receives the local loopback callback, exchanges `code` / `authCode` with the Yida server, and stores `access_token` / `refresh_token` in the current project cache.
+OpenYida login defaults to OAuth token mode. It opens the DingTalk OAuth authorization page, receives the local loopback callback, exchanges `code` / `authCode` with the Yida server, and stores `access_token` / `refresh_token` in the user auth store when available. If the user auth store is not writable, OpenYida explicitly falls back to the current project cache and reports that narrower persistence scope.
 
-When the user names a target Yida entry URL, pass it to the login command so OpenYida can select the matching environment and token session file. For example, Alibaba intranet Yida uses `auth-token-alibaba.json`:
+When the user names a target Yida entry URL, pass it to the login command so OpenYida can select the matching environment and auth profile. For example:
 
 ```bash
 openyida login https://yida-group.alibaba-inc.com/
@@ -357,7 +357,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida login [target-url] [--env <name>\|--intl\|--overseas\|--global\|--yidaapps\|--alibaba] [--client-id <clientId>] [--endpoint <url>]` | Login with OAuth token mode |
+| `openyida login [target-url] [--env <name>\|--intl\|--overseas\|--global\|--yidaapps\|--alibaba] [--client-id <clientId>] [--endpoint <url>] [--no-browser]` | Login with OAuth token mode |
 | `openyida logout` | Logout / clear token |
 | `openyida auth <status\|login\|refresh\|logout>` | Token login state management |
 | `openyida org <list\|switch> [--json] [--corp-id <corpId>]` | Organization management (list / switch by OAuth re-login) |
@@ -395,6 +395,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json]` | Get one form Schema or all form Schemas |
+| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check PRD page/resource count risk |
 | `openyida er <appType> [--format mermaid\|json] [--output file] [--include-system] [--include-pages]` | Export app entity relationship diagram |
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |
 | `openyida build-page <sourceFile> [--output file\|--write]` | Build Yida-compatible page source |

package/bin/yida.js

@@ -30,13 +30,22 @@ function isAgentEnvironment(env) {
     env.CLAUDE_CODE_ENTRYPOINT ||
     env.MULERUN_CHAT_ID ||
     env.MULE_DATA_DIR ||
+    env.MULE_WORKSPACE_DIR ||
     env.OPENCODE ||
     env.OPENCODE_CLIENT ||
     env.QODER_IDE ||
     env.QODER_AGENT ||
     env.QODERCLI_INTEGRATION_MODE ||
+    env.QODER_WORK_INTEGRATION_PRODUCT ||
     env.QWENWORK_INTEGRATION_MODE ||
     env.QWENWORKCN_INTEGRATION_MODE ||
+    env.QWENWORK ||
+    env.QWENWORK_CLIENT ||
+    env.QWENWORK_WORKSPACE_DIR ||
+    env.QWENWORK_SANDBOX_ID ||
+    env.QWENWORK_PREVIEW_URL ||
+    env.QWENWORK_VNC_URL ||
+    (env.AGENT_PLATFORM || '').toLowerCase().includes('qwenwork') ||
     env.CURSOR_TRACE_ID ||
     env.AGENT_WORK_ROOT ||
     env.OPENYIDA_AGENT_MODE ||
@@ -266,6 +275,12 @@ function printLoginResult(result) {
     status: result.status || (tokenUsable ? 'ok' : 'token_not_issued'),
     auth_mode: 'token',
     auth_source: result.auth_source || result.authSource,
+    auth_store: result.auth_store || result.authStore,
+    auth_profile: result.auth_profile || result.authProfile,
+    persistence_scope: result.persistence_scope || result.persistenceScope,
+    user_auth_store_writable: result.user_auth_store_writable !== undefined
+      ? result.user_auth_store_writable
+      : result.userAuthStoreWritable,
     can_auto_use: result.can_auto_use !== undefined ? !!result.can_auto_use : tokenUsable,
     token_type: result.token_type || 'Bearer',
     access_token: maskSensitiveAuthOutput({ access_token: result.access_token }).access_token,
@@ -276,6 +291,7 @@ function printLoginResult(result) {
     user_name: result.user_name,
     failure_reason: result.failure_reason,
     message: result.message,
+    warning: result.warning,
     raw: tokenUsable ? undefined : result.raw,
   };
   console.log(JSON.stringify(summary));
@@ -412,6 +428,7 @@ function applyLoginEnvironmentFlags(cliArgs, options = {}) {
   const valuePassthroughFlags = new Set([
     '--corp-id',
     '--client-id',
+    '--profile',
     '--user-id',
   ]);
   const targetUrlFlags = new Set([
@@ -520,6 +537,17 @@ function printLoginHelp() {
   printCommandUsage(t('cli.login_usage'), t('cli.login_example'));
 }
 
+function buildTokenLoginOptions(loginArgs) {
+  return {
+    clientId: getArgValue(loginArgs, '--client-id'),
+    corpId: getArgValue(loginArgs, '--corp-id'),
+    userId: getArgValue(loginArgs, '--user-id'),
+    authProfile: getArgValue(loginArgs, '--profile'),
+    quiet: process.env.YIDA_QUIET === '1' || loginArgs.includes('--quiet'),
+    noBrowser: loginArgs.includes('--no-browser'),
+  };
+}
+
 function printAuthHelp() {
   printCommandUsage(t('cli.auth_usage'), t('cli.auth_example'));
 }
@@ -618,15 +646,12 @@ async function main() {
       } else {
         assertNoUnsupportedLegacyLoginFlags(rawArgs, loginArgs);
         if (loginArgs.includes('--check-only')) {
-          console.log(JSON.stringify(getAuthStatus(), null, 2));
+          console.log(JSON.stringify(getAuthStatus(buildTokenLoginOptions(loginArgs)), null, 2));
         } else if (isEnvAuthMode()) {
-          printLoginResult(getAuthStatus());
+          printLoginResult(getAuthStatus(buildTokenLoginOptions(loginArgs)));
         } else {
           const { tokenLogin } = require('../lib/auth/token-auth');
-          const result = await tokenLogin({
-            clientId: getArgValue(loginArgs, '--client-id'),
-            quiet: loginArgs.includes('--quiet'),
-          });
+          const result = await tokenLogin(buildTokenLoginOptions(loginArgs));
           printLoginResult(result);
         }
       }
@@ -647,18 +672,15 @@ async function main() {
       if (!subCommand || subCommand === '--help' || subCommand === '-h') {
         printAuthHelp();
       } else if (subCommand === 'status') {
-        console.log(JSON.stringify(getAuthStatus(), null, 2));
+        console.log(JSON.stringify(getAuthStatus(buildTokenLoginOptions(authArgs)), null, 2));
       } else if (subCommand === 'login') {
         if (hasHelpFlag(authArgs)) {
           printLoginHelp();
         } else {
           assertNoUnsupportedLegacyLoginFlags(rawArgs.slice(1), authArgs);
           const result = isEnvAuthMode()
-            ? getAuthStatus()
-            : await tokenLogin({
-              clientId: getArgValue(authArgs, '--client-id'),
-              quiet: authArgs.includes('--quiet'),
-            });
+            ? getAuthStatus(buildTokenLoginOptions(authArgs))
+            : await tokenLogin(buildTokenLoginOptions(authArgs));
           printLoginResult(result);
         }
       } else if (subCommand === 'refresh') {
@@ -732,6 +754,12 @@ async function main() {
       break;
     }
 
+    case 'check-prd-completeness': {
+      const { run } = require('../lib/app/check-prd-completeness');
+      await run(args);
+      break;
+    }
+
     case 'er': {
       const { run } = require('../lib/app/er');
       await run(args);