openyida 2026.8.17 → 2026.8.19-1

package/README.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-![OpenYida](https://img.alicdn.com/imgextra/i2/O1CN01wTOPxK1nEA3rWDp6I_!!6000000005057-2-tps-1672-941.png)
+![OpenYida](https://img.alicdn.com/imgextra/i2/O1CN01fwUxry9qUtJ3OTaP_!!6000000008165-2-tps-1672-941.png)
 
 # OpenYida
 
@@ -68,9 +68,9 @@ OpenYida returns a compact machine-readable summary with the version, login stat
 openyida login
 ```
 
-OpenYida login defaults to OAuth token mode. It opens the DingTalk OAuth authorization page, receives the local loopback callback, exchanges `code` / `authCode` with the Yida server, and stores `access_token` / `refresh_token` in the current project cache.
+OpenYida login defaults to OAuth token mode. It opens the DingTalk OAuth authorization page, receives the local loopback callback, exchanges `code` / `authCode` with the Yida server, and stores `access_token` / `refresh_token` in the user auth store when available. If the user auth store is not writable, OpenYida explicitly falls back to the current project cache and reports that narrower persistence scope.
 
-When the user names a target Yida entry URL, pass it to the login command so OpenYida can select the matching environment and token session file. For example, Alibaba intranet Yida uses `auth-token-alibaba.json`:
+When the user names a target Yida entry URL, pass it to the login command so OpenYida can select the matching environment and auth profile. For example:
 
 ```bash
 openyida login https://yida-group.alibaba-inc.com/
@@ -84,6 +84,15 @@ openyida login --check-only --json
 openyida auth status
 ```
 
+To reuse an existing shared login profile for the current project, switch first instead of starting a new OAuth login:
+
+```bash
+openyida auth profiles
+openyida auth profile switch <auth_profile>
+```
+
+If the target profile is not listed, run `openyida login` to add it, then switch to the new profile.
+
 OpenYida does not install Playwright by default.
 
 ### 4. Build With an AI Agent
@@ -356,9 +365,9 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | Command | Description |
 |---------|-------------|
 | `openyida login [target-url] [--env <name>\|--intl\|--overseas\|--global\|--yidaapps\|--alibaba] [--client-id <clientId>] [--endpoint <url>] [--no-browser]` | Login with OAuth token mode |
-| `openyida logout` | Logout / clear token |
-| `openyida auth <status\|login\|refresh\|logout>` | Token login state management |
-| `openyida org <list\|switch> [--json] [--corp-id <corpId>]` | Organization management (list / switch by OAuth re-login) |
+| `openyida logout` | Logout / unbind current project auth |
+| `openyida auth <status\|login\|refresh\|logout\|profiles\|profile switch>` | Token login state and profile management |
+| `openyida org <list\|switch> [--json] [--corp-id <corpId>]` | Organization management (list / switch existing profiles first) |
 | `openyida env [--json\|setup\|list\|show\|switch\|add\|remove] [options]` | Detect AI tool environment & token login state |
 
 ### App Management
@@ -368,7 +377,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida app-list [--size N]` | List my Yida apps |
 | `openyida corp-efficiency [overview\|details\|detail\|groups\|notify] [options] [--open\|--no-open]` | Query enterprise efficiency overview and detail reports |
 | `openyida create-app "<name>"\|--name <name> [options] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a Yida app |
-| `openyida update-app <appType> [--name "..."] [--layout slide\|ver] [--theme deepBlue]` | Update app info |
+| `openyida update-app <appType> [--name "..."] [--layout slide\|ver] [--theme deepBlue] [--hide-app-nav\|--show-app-nav]` | Update app info |
 | `openyida app-online <appType> [--to-ding-app-center] [--show-app-center]` | Enable a Yida app |
 | `openyida app-offline <appType> [--to-ding-app-center] [--show-app-center]` | Disable a Yida app |
 | `openyida nav-group <list\|create\|rename\|delete\|move\|order\|auto-order\|hide\|show> <appType> ...` | Manage app sidebar navigation groups |
@@ -393,6 +402,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json]` | Get one form Schema or all form Schemas |
+| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check PRD page/resource count risk |
 | `openyida er <appType> [--format mermaid\|json] [--output file] [--include-system] [--include-pages]` | Export app entity relationship diagram |
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |
 | `openyida build-page <sourceFile> [--output file\|--write]` | Build Yida-compatible page source |

package/bin/yida.js

@@ -30,13 +30,22 @@ function isAgentEnvironment(env) {
     env.CLAUDE_CODE_ENTRYPOINT ||
     env.MULERUN_CHAT_ID ||
     env.MULE_DATA_DIR ||
+    env.MULE_WORKSPACE_DIR ||
     env.OPENCODE ||
     env.OPENCODE_CLIENT ||
     env.QODER_IDE ||
     env.QODER_AGENT ||
     env.QODERCLI_INTEGRATION_MODE ||
+    env.QODER_WORK_INTEGRATION_PRODUCT ||
     env.QWENWORK_INTEGRATION_MODE ||
     env.QWENWORKCN_INTEGRATION_MODE ||
+    env.QWENWORK ||
+    env.QWENWORK_CLIENT ||
+    env.QWENWORK_WORKSPACE_DIR ||
+    env.QWENWORK_SANDBOX_ID ||
+    env.QWENWORK_PREVIEW_URL ||
+    env.QWENWORK_VNC_URL ||
+    (env.AGENT_PLATFORM || '').toLowerCase().includes('qwenwork') ||
     env.CURSOR_TRACE_ID ||
     env.AGENT_WORK_ROOT ||
     env.OPENYIDA_AGENT_MODE ||
@@ -266,6 +275,12 @@ function printLoginResult(result) {
     status: result.status || (tokenUsable ? 'ok' : 'token_not_issued'),
     auth_mode: 'token',
     auth_source: result.auth_source || result.authSource,
+    auth_store: result.auth_store || result.authStore,
+    auth_profile: result.auth_profile || result.authProfile,
+    persistence_scope: result.persistence_scope || result.persistenceScope,
+    user_auth_store_writable: result.user_auth_store_writable !== undefined
+      ? result.user_auth_store_writable
+      : result.userAuthStoreWritable,
     can_auto_use: result.can_auto_use !== undefined ? !!result.can_auto_use : tokenUsable,
     token_type: result.token_type || 'Bearer',
     access_token: maskSensitiveAuthOutput({ access_token: result.access_token }).access_token,
@@ -274,8 +289,12 @@ function printLoginResult(result) {
     corp_id: result.corp_id,
     user_id: result.user_id,
     user_name: result.user_name,
+    already_logged_in: result.already_logged_in,
+    login_action: result.login_action,
+    previous_status: result.previous_status,
     failure_reason: result.failure_reason,
     message: result.message,
+    warning: result.warning,
     raw: tokenUsable ? undefined : result.raw,
   };
   console.log(JSON.stringify(summary));
@@ -320,6 +339,29 @@ function getArgValue(cliArgs, name) {
   return cliArgs[index + 1];
 }
 
+function getFirstPositionalArg(cliArgs, startIndex = 0) {
+  const valueFlags = new Set([
+    '--client-id',
+    '--corp-id',
+    '--endpoint',
+    '--base-url',
+    '--login-url',
+    '--profile',
+    '--user-id',
+  ]);
+  for (let index = startIndex; index < cliArgs.length; index++) {
+    const arg = cliArgs[index];
+    if (valueFlags.has(arg)) {
+      index++;
+      continue;
+    }
+    if (!arg.startsWith('--')) {
+      return arg;
+    }
+  }
+  return null;
+}
+
 const UNSUPPORTED_LEGACY_LOGIN_FLAGS = new Set([
   '--qr',
   '--qr-code',
@@ -412,6 +454,7 @@ function applyLoginEnvironmentFlags(cliArgs, options = {}) {
   const valuePassthroughFlags = new Set([
     '--corp-id',
     '--client-id',
+    '--profile',
     '--user-id',
   ]);
   const targetUrlFlags = new Set([
@@ -523,11 +566,21 @@ function printLoginHelp() {
 function buildTokenLoginOptions(loginArgs) {
   return {
     clientId: getArgValue(loginArgs, '--client-id'),
+    corpId: getArgValue(loginArgs, '--corp-id'),
+    userId: getArgValue(loginArgs, '--user-id'),
+    authProfile: getArgValue(loginArgs, '--profile'),
     quiet: process.env.YIDA_QUIET === '1' || loginArgs.includes('--quiet'),
     noBrowser: loginArgs.includes('--no-browser'),
   };
 }
 
+function buildLogoutOptions(logoutArgs) {
+  return {
+    authProfile: getArgValue(logoutArgs, '--profile'),
+    allProfiles: logoutArgs.includes('--all'),
+  };
+}
+
 function printAuthHelp() {
   printCommandUsage(t('cli.auth_usage'), t('cli.auth_example'));
 }
@@ -620,15 +673,13 @@ async function main() {
 
     case 'login': {
       const loginArgs = applyLoginEnvironmentFlags(args, { inferTargetUrl: true });
-      const { getAuthStatus, isEnvAuthMode } = require('../lib/core/utils');
+      const { getAuthStatus } = require('../lib/core/utils');
       if (hasHelpFlag(loginArgs)) {
         printLoginHelp();
       } else {
         assertNoUnsupportedLegacyLoginFlags(rawArgs, loginArgs);
         if (loginArgs.includes('--check-only')) {
-          console.log(JSON.stringify(getAuthStatus(), null, 2));
-        } else if (isEnvAuthMode()) {
-          printLoginResult(getAuthStatus());
+          console.log(JSON.stringify(getAuthStatus(buildTokenLoginOptions(loginArgs)), null, 2));
         } else {
           const { tokenLogin } = require('../lib/auth/token-auth');
           const result = await tokenLogin(buildTokenLoginOptions(loginArgs));
@@ -640,33 +691,43 @@ async function main() {
 
     case 'logout': {
       const { tokenLogout } = require('../lib/auth/token-auth');
-      console.log(JSON.stringify(await tokenLogout(), null, 2));
+      console.log(JSON.stringify(await tokenLogout(buildLogoutOptions(args)), null, 2));
       break;
     }
 
     case 'auth': {
       const subCommand = args[0];
       const authArgs = applyLoginEnvironmentFlags(args.slice(1), { inferTargetUrl: true });
-      const { getAuthStatus, isEnvAuthMode } = require('../lib/core/utils');
+      const { getAuthStatus } = require('../lib/core/utils');
       const { tokenLogin, tokenLogout, tokenRefresh } = require('../lib/auth/token-auth');
       if (!subCommand || subCommand === '--help' || subCommand === '-h') {
         printAuthHelp();
       } else if (subCommand === 'status') {
-        console.log(JSON.stringify(getAuthStatus(), null, 2));
+        console.log(JSON.stringify(getAuthStatus(buildTokenLoginOptions(authArgs)), null, 2));
+      } else if (subCommand === 'profiles') {
+        const { listAuthProfiles } = require('../lib/auth/profile');
+        console.log(JSON.stringify(listAuthProfiles(buildTokenLoginOptions(authArgs)), null, 2));
+      } else if (subCommand === 'profile') {
+        const profileSubCommand = authArgs[0];
+        if (profileSubCommand === 'switch') {
+          const target = getFirstPositionalArg(authArgs, 1);
+          const { switchAuthProfile } = require('../lib/auth/profile');
+          console.log(JSON.stringify(switchAuthProfile(target, buildTokenLoginOptions(authArgs)), null, 2));
+        } else {
+          throwCliUsage(t('cli.auth_usage'), t('cli.auth_example'));
+        }
       } else if (subCommand === 'login') {
         if (hasHelpFlag(authArgs)) {
           printLoginHelp();
         } else {
           assertNoUnsupportedLegacyLoginFlags(rawArgs.slice(1), authArgs);
-          const result = isEnvAuthMode()
-            ? getAuthStatus()
-            : await tokenLogin(buildTokenLoginOptions(authArgs));
+          const result = await tokenLogin(buildTokenLoginOptions(authArgs));
           printLoginResult(result);
         }
       } else if (subCommand === 'refresh') {
         console.log(JSON.stringify(maskSensitiveAuthOutput(await tokenRefresh()), null, 2));
       } else if (subCommand === 'logout') {
-        console.log(JSON.stringify(await tokenLogout(), null, 2));
+        console.log(JSON.stringify(await tokenLogout(buildLogoutOptions(authArgs)), null, 2));
       } else {
         throwCliUsage(t('cli.auth_usage'), t('cli.auth_example'));
       }
@@ -734,6 +795,12 @@ async function main() {
       break;
     }
 
+    case 'check-prd-completeness': {
+      const { run } = require('../lib/app/check-prd-completeness');
+      await run(args);
+      break;
+    }
+
     case 'er': {
       const { run } = require('../lib/app/er');
       await run(args);

package/docs/capabilities.md

@@ -1,6 +1,6 @@
 # OpenYida 功能完整列表
 
-这份清单面向宜搭使用者和 AI Agent，按本地 OpenYida `2026.8.12-1` 的 101 条命令和技能路由整理。参数细节可以继续查看 `openyida --help`、`openyida <command> --help` 或 `openyida commands --json`。
+这份清单面向宜搭使用者和 AI Agent，按本地 OpenYida `2026.8.19` 的 101 条命令和技能路由整理。参数细节可以继续查看 `openyida --help`、`openyida <command> --help` 或 `openyida commands --json`。
 
 <Note>
 日常使用建议先运行 `openyida agent-capabilities --summary-json`，它会轻量返回版本、登录态、组织、工作目录和命令清单摘要。只有排查命令契约、权限元数据或登录异常时，再使用完整的 `openyida agent-capabilities --json`。
@@ -30,12 +30,12 @@
 |---|---|
 | 查询我的应用 | `openyida app-list [--size N]` |
 | 创建应用 | `openyida create-app "<应用名称>"` |
-| 更新应用名称、布局、主题 | `openyida update-app <appType> [--name "..."] [--layout slide\|ver] [--theme deepBlue]` |
+| 更新应用名称、布局、主题、访问态应用导航显示 | `openyida update-app <appType> [--name "..."] [--layout slide\|ver] [--theme deepBlue] [--hide-app-nav\|--show-app-nav]` |
 | 启用应用 / 上线应用 | `openyida app-online <appType> [--to-ding-app-center] [--show-app-center]` |
 | 停用应用 / 下线应用 | `openyida app-offline <appType> [--to-ding-app-center] [--show-app-center]` |
 | 导出应用迁移包 | `openyida export <appType> [output]` |
 | 导入应用迁移包 | `openyida import <file> [name]` |
-| 管理左侧导航分组 | `openyida nav-group <list\|create\|rename\|delete\|move\|order\|hide\|show> <appType> ...` |
+| 管理左侧导航分组 | `openyida nav-group <list\|create\|rename\|delete\|move\|order\|auto-order\|hide\|show> <appType> ...` |
 | 管理应用管理员 | `openyida app-permission <get\|set\|add\|remove\|search-user> ...` |
 | 管理应用多语言 | `openyida i18n <overview\|config\|languages\|list\|upsert\|delete\|translate\|translate-all\|upgrade> <appType> ...` |
 | 查询组织基础信息、容量、额度、域名 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` |

package/lib/app/app-lifecycle.js

@@ -66,8 +66,7 @@ async function changeAppLifecycle(action, params, authRef = createAuthRef()) {
   const response = await requestWithAutoLogin((auth) => httpPost(
     auth.baseUrl,
     buildRequestPath(action, params.appType),
-    buildPostData(params, auth),
-    auth.cookies
+    buildPostData(params, auth)
   ), authRef);
 
   if (!response || response.success !== true || response.content !== true) {

package/lib/app/builder-ai-source.js

@@ -0,0 +1,39 @@
+'use strict';
+
+const { detectActiveTool } = require('../core/utils');
+
+const BUILDER_AI_SOURCE_FALLBACK = 'local';
+const SUPPORTED_BUILDER_AI_SOURCES = new Set([
+  BUILDER_AI_SOURCE_FALLBACK,
+  'codex',
+  'qwenwork',
+  'qoderwork',
+  'qoder',
+  'wukong',
+  'mulerun',
+  'claude-code',
+  'opencode',
+  'cursor',
+  'aone-copilot',
+]);
+
+function normalizeBuilderAiSource(source) {
+  const normalized = String(source || '').trim().toLowerCase();
+  return SUPPORTED_BUILDER_AI_SOURCES.has(normalized) ? normalized : null;
+}
+
+function resolveBuilderAiSource() {
+  try {
+    const activeTool = detectActiveTool();
+    return normalizeBuilderAiSource(activeTool && activeTool.tool) || BUILDER_AI_SOURCE_FALLBACK;
+  } catch (err) {
+    return BUILDER_AI_SOURCE_FALLBACK;
+  }
+}
+
+module.exports = {
+  BUILDER_AI_SOURCE_FALLBACK,
+  SUPPORTED_BUILDER_AI_SOURCES,
+  normalizeBuilderAiSource,
+  resolveBuilderAiSource,
+};