openyida 2026.8.20 → 2026.8.25

package/lib/app-permission/app-permission.js

@@ -2,6 +2,7 @@
 
 const { createAuthRef, createYidaClient, isAuthRefReady } = require('../core/yida-client');
 const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
 const { searchUsers } = require('../corp-manager/api');
 
 const ROLE_CONFIGS = {
@@ -140,6 +141,12 @@ function unique(values) {
   return [...new Set((values || []).map(value => String(value).trim()).filter(Boolean))];
 }
 
+function sameUserIds(left, right) {
+  const leftIds = unique(left).sort();
+  const rightIds = unique(right).sort();
+  return JSON.stringify(leftIds) === JSON.stringify(rightIds);
+}
+
 function toPositiveInt(value, defaultValue) {
   const parsed = Number.parseInt(value || `${defaultValue}`, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
@@ -310,11 +317,7 @@ async function updateRoleManagers(options = {}, authRef = getAuthRef()) {
   const action = options.action || 'set';
   const inputUserIds = unique(options.userIds || options.users || []);
 
-  if (action === 'set') {
-    return saveRoleManagers({ appType, roleType, userIds: inputUserIds }, authRef);
-  }
-
-  if (inputUserIds.length === 0) {
+  if (action !== 'set' && inputUserIds.length === 0) {
     throw new Error(`${action} 操作必须提供 --users`);
   }
 
@@ -323,7 +326,9 @@ async function updateRoleManagers(options = {}, authRef = getAuthRef()) {
   const previousUserIds = current.roles[roleKey].userIds;
   let nextUserIds;
 
-  if (action === 'add') {
+  if (action === 'set') {
+    nextUserIds = inputUserIds;
+  } else if (action === 'add') {
     nextUserIds = unique(previousUserIds.concat(inputUserIds));
   } else if (action === 'remove') {
     const removeSet = new Set(inputUserIds);
@@ -387,9 +392,22 @@ async function runUpdate(action, positionals, options) {
   });
   const current = await getAppPermission(appType);
   const roleKey = ROLE_CONFIGS[saved.roleType].key;
+  if (!sameUserIds(saved.userIds, current.roles[roleKey].userIds)) {
+    throw new CliError(t('app_permission.verify_failed'), {
+      code: 'APP_PERMISSION_VERIFY_FAILED',
+      details: {
+        expected: saved.userIds,
+        actual: current.roles[roleKey].userIds,
+      },
+    });
+  }
 
   printJson({
     ...saved,
+    before: {
+      userIds: saved.previousUserIds,
+    },
+    after: current.roles[roleKey],
     currentRole: current.roles[roleKey],
   });
 }
@@ -420,6 +438,7 @@ module.exports = {
   USAGE,
   parseCliOptions,
   splitList,
+  sameUserIds,
   normalizeRole,
   normalizeText,
   normalizeMember,

package/lib/core/locales/en.js

@@ -402,6 +402,7 @@ Examples:
     create_example1: '  openyida integration create APP_XXX FORM-XXX "New record notice" --receivers user123 --publish',
     create_example2: '  openyida integration create APP_XXX FORM-XXX "Get self then notify" --get-self --publish',
     create_missing_args: 'Missing required arguments.',
+    create_flow_name_too_long: 'Logic-flow names cannot exceed {0} characters (received {1}).',
     create_invalid_events: 'No valid trigger event was recognized.',
     create_no_receivers: 'No notification receiver or user field specified; no message node will be generated.',
     create_title: 'Create integration automation flow',
@@ -906,6 +907,56 @@ Examples:
   },
 
   // ── lib/get-page-config.js ─────────────────────────
+  // ── Permission write safety verification ────────────────────
+  app_permission: {
+    verify_failed: 'App administrator save verification failed',
+  },
+  corp_manager: {
+    address_book_verify_failed: 'Address book permission save verification failed: expected={0}, actual={1}',
+    admin_verify_failed: 'Administrator save verification failed: {0} was not found in the {1} list',
+    sub_admin_scope_verify_failed: 'Sub-administrator scope save verification failed: expected={0}, actual={1}',
+    admin_remove_verify_failed: 'Administrator removal verification failed: {0} is still in the {1} list',
+  },
+  save_permission: {
+    confirm_member_replace_usage: 'Replacing composite members also requires --confirm-member-replace',
+    data_object_required: 'Data permission must be a JSON object',
+    data_rule_required: 'Data permission rule must not be empty',
+    data_rule_type_required: 'Every data permission rule item must include type',
+    data_rule_value_invalid: 'The value of data permission rule {0} must be y/n or boolean',
+    data_enabled_required: 'Data permission must enable at least one data range',
+    custom_department_ids_required: 'CUSTOM_DEPARTMENT requires non-empty customDepartmentData.departmentIds',
+    formula_data_required: 'FORMULA requires non-empty formulaData',
+    data_range_required: 'Data permission requires a non-empty dataRange or rule',
+    action_enabled_required: 'Action permission must contain at least one operation set to true',
+    action_value_boolean: 'Action permission {0} must be boolean',
+    field_range_invalid: 'Field permission fieldRange only supports FORM or CUSTOM',
+    field_status_required: 'CUSTOM field permission requires a non-empty fieldStatus array',
+    field_status_item_required: 'Every fieldStatus item must include label, fieldName, componentName, and value',
+    field_status_value_invalid: 'Invalid field permission value: {0}; valid values: {1}',
+    json_object_required: '{0} must be a JSON object',
+    parse_failed: 'Failed to parse {0}: {1}',
+    role_conflict: 'Permission arguments specify inconsistent roles: {0}',
+    matrix_role_only: '--matrix can only update a role=MATRIX permission group',
+    all_members_role_only: '--all-members can only update a role=DEFAULT permission group',
+    target_role_invalid: 'Invalid role: {0}; valid values: {1}',
+    unnamed_package: 'Unnamed',
+    missing_package_uuid: 'No UUID',
+    target_no_match: 'No permission group matched role={0}; aborted with zero writes to prevent an unintended update. Current permission groups:\n{2}',
+    target_ambiguous: 'role={0} matched {1} permission groups; aborted with zero writes to prevent an unintended update.\n{2}',
+    unknown_operate_keys: 'The current permission group contains operation keys unknown to the CLI, so action-permission cannot be changed: {0}. Other dimensions may still be changed and unknown keys will be preserved verbatim.',
+    matrix_role_value_required: 'MATRIX roleData.roleValue must be a non-empty array',
+    matrix_data_required: 'When members use MATRIX, the data permission rule must include MATRIX',
+    data_matrix_member_required: 'When data permission includes MATRIX, members must select a valid permission matrix',
+    members_all_conflict: '--members and --all-members are mutually exclusive',
+    invalid_arguments: 'Argument validation failed: {0}',
+    query_limit: 'The permission-group query reached the current 20-item limit, so global role uniqueness cannot be proven. Aborted with zero writes.\n{0}',
+    unique_target: '  ✅ Unique target: {0}',
+    member_before: '  Members before: {0}',
+    member_after: '  Members after:  {0}',
+    member_removed: '  Member roles to remove: {0}',
+    member_replace_confirm: 'Member replacement will remove existing composite roles. Review before/after and add --confirm-member-replace. Entries to be lost: {0}',
+  },
+
   get_page_config: {
     usage: 'Usage: openyida get-page-config <appType> <formUuid>',
     example: 'Example: openyida get-page-config APP_XXX FORM-XXX',
@@ -946,7 +997,10 @@ Examples:
     err_open_auth_invalid: 'openAuth must be y or n, current value: {0}',
     err_open_url_required: 'openUrl is required when enabling public access',
     err_open_url_prefix: 'openUrl must start with /o/, current value: {0}',
+    err_page_url_prefix: 'openUrl must start with /o/ or /s/, current value: {0}',
     err_open_url_chars: 'openUrl path only supports a-z A-Z 0-9 _ - and / as a segment separator, current value: {0}',
+    verify_failed: 'Post-save verification failed: {0}',
+    current_state_incomplete: 'Save aborted: current public-access config lacks openPageAuthConfig, so safe preservation cannot be proven',
   },
 
   // ── lib/update-app.js ─────────────────────────────

package/lib/core/locales/zh.js

@@ -399,6 +399,7 @@ openyida - 宜搭命令行工具
     create_example1: '  openyida integration create APP_XXX FORM-XXX "新增通知" --receivers user123 --publish',
     create_example2: '  openyida integration create APP_XXX FORM-XXX "获取自身后通知" --get-self --publish',
     create_missing_args: '缺少必要参数。',
+    create_flow_name_too_long: '逻辑流名称不能超过 {0} 个字符（当前 {1} 个）。',
     create_invalid_events: '未识别到有效触发事件。',
     create_no_receivers: '未指定通知接收人或成员字段，将不会生成消息通知节点。',
     create_title: '创建集成自动化逻辑流',
@@ -834,6 +835,56 @@ openyida - 宜搭命令行工具
   org_usage: '用法: openyida org <list|switch> [--json] [--corp-id <corpId>]',
   org_example: '示例:\n  openyida org list --json                    # 列出可访问的组织\n  openyida org switch --corp-id dingXXX       # 优先切换已有 profile；不存在时登录新增',
   title: '  openyida import - 宜搭应用导入工具',
+
+  // ── 权限写入安全验证 ───────────────────────────
+  app_permission: {
+    verify_failed: '应用管理员保存后验证失败',
+  },
+  corp_manager: {
+    address_book_verify_failed: '保存通讯录权限后验证失败：expected={0}, actual={1}',
+    admin_verify_failed: '管理员保存后验证失败：{0} 未出现在 {1} 列表中',
+    sub_admin_scope_verify_failed: '平台子管理员保存后范围验证失败：expected={0}, actual={1}',
+    admin_remove_verify_failed: '管理员移除后验证失败：{0} 仍在 {1} 列表中',
+  },
+  save_permission: {
+    confirm_member_replace_usage: '复合成员替换需要额外传入 --confirm-member-replace',
+    data_object_required: '数据权限必须是 JSON 对象',
+    data_rule_required: '数据权限 rule 不能为空',
+    data_rule_type_required: '数据权限 rule 每一项都必须包含 type',
+    data_rule_value_invalid: '数据权限 rule {0} 的 value 只支持 y/n 或 boolean',
+    data_enabled_required: '数据权限至少需要一个启用的数据范围',
+    custom_department_ids_required: 'CUSTOM_DEPARTMENT 必须提供非空 customDepartmentData.departmentIds',
+    formula_data_required: 'FORMULA 必须提供非空 formulaData',
+    data_range_required: '数据权限必须提供非空 dataRange 或 rule',
+    action_enabled_required: '操作权限至少需要一个值为 true 的操作',
+    action_value_boolean: '操作权限 {0} 的值必须是 boolean',
+    field_range_invalid: '字段权限 fieldRange 只支持 FORM 或 CUSTOM',
+    field_status_required: 'CUSTOM 字段权限必须包含非空 fieldStatus 数组',
+    field_status_item_required: 'fieldStatus 每一项必须包含 label、fieldName、componentName 和 value',
+    field_status_value_invalid: '无效字段权限值: {0}，有效值: {1}',
+    json_object_required: '{0} 必须是 JSON 对象',
+    parse_failed: '{0} 解析失败: {1}',
+    role_conflict: '权限参数中的 role 不一致: {0}',
+    matrix_role_only: '--matrix 只能更新 role=MATRIX 的权限组',
+    all_members_role_only: '--all-members 只能更新 role=DEFAULT 的权限组',
+    target_role_invalid: '无效 role: {0}，有效值: {1}',
+    unnamed_package: '未命名',
+    missing_package_uuid: '无 UUID',
+    target_no_match: 'role={0} 未匹配；为防止误更新已中止（零写入）。当前权限组：\n{2}',
+    target_ambiguous: 'role={0} 匹配 {1} 个权限组；为防止误更新已中止（零写入）。\n{2}',
+    unknown_operate_keys: '当前权限组包含 CLI 未识别的操作权限键，不能修改 action-permission: {0}。可只修改其他维度，未知键会原样保留。',
+    matrix_role_value_required: 'MATRIX roleData.roleValue 必须是非空数组',
+    matrix_data_required: '成员选择为 MATRIX 时，数据权限 rule 必须包含 MATRIX',
+    data_matrix_member_required: '数据权限包含 MATRIX 时，成员必须选择有效权限矩阵',
+    members_all_conflict: '--members 与 --all-members 互斥，请勿同时指定',
+    invalid_arguments: '参数验证失败: {0}',
+    query_limit: '权限组查询已达到当前 20 条上限，无法证明 role 目标全局唯一，已中止（零写入）。\n{0}',
+    unique_target: '  ✅ 唯一目标: {0}',
+    member_before: '  成员 before: {0}',
+    member_after: '  成员 after:  {0}',
+    member_removed: '  将移除成员角色: {0}',
+    member_replace_confirm: '成员替换会移除现有复合角色，请核对 before/after 后添加 --confirm-member-replace。会丢失: {0}',
+  },
   // ── lib/get-page-config.js ─────────────────────────
   get_page_config: {
     usage: '用法: openyida get-page-config <appType> <formUuid>',
@@ -875,7 +926,10 @@ openyida - 宜搭命令行工具
     err_open_auth_invalid: 'openAuth 必须为 y 或 n，当前值: {0}',
     err_open_url_required: '开启公开访问时，openUrl 不能为空',
     err_open_url_prefix: 'openUrl 必须以 /o/ 开头，当前值: {0}',
+    err_page_url_prefix: 'openUrl 必须以 /o/ 或 /s/ 开头，当前值: {0}',
     err_open_url_chars: 'openUrl 路径部分只支持 a-z A-Z 0-9 _ -，可用 / 分隔多级路径，当前值: {0}',
+    verify_failed: '保存后验证失败: {0}',
+    current_state_incomplete: '保存已中止：当前公开访问配置缺少 openPageAuthConfig，无法证明可安全保留',
   },
 
   // ── lib/update-app.js ─────────────────────────────

package/lib/corp-manager/api.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const { createAuthRef, createYidaClient, isAuthRefReady } = require('../core/yida-client');
+const { t } = require('../core/i18n');
 
 const ROLE_ALIASES = {
   app: 'applicationCreateRole',
@@ -248,9 +249,9 @@ async function getAddressBookVisible(authRef = getAuthRef()) {
 }
 
 async function saveAddressBookVisible(options = {}, authRef = getAuthRef()) {
-  const current = await getAddressBookVisible(authRef);
-  const isAllVisible = options.isAllVisible || options.allVisible || current.isAllVisible;
-  const isAdminVisible = options.isAdminVisible || options.adminVisible || current.isAdminVisible;
+  const before = await getAddressBookVisible(authRef);
+  const isAllVisible = options.isAllVisible || options.allVisible || before.isAllVisible;
+  const isAdminVisible = options.isAdminVisible || options.adminVisible || before.isAdminVisible;
 
   const result = await corpPost('/query/corpadmin/saveAddressBoolVisible.json', {
     isAllVisible,
@@ -258,10 +259,21 @@ async function saveAddressBookVisible(options = {}, authRef = getAuthRef()) {
   }, authRef);
   assertSuccess(result, '保存通讯录权限');
 
+  const after = await getAddressBookVisible(authRef);
+  if (after.isAllVisible !== isAllVisible || after.isAdminVisible !== isAdminVisible) {
+    throw new Error(t(
+      'corp_manager.address_book_verify_failed',
+      JSON.stringify({ isAllVisible, isAdminVisible }),
+      JSON.stringify(after)
+    ));
+  }
+
   return {
     success: true,
     isAllVisible,
     isAdminVisible,
+    before,
+    after,
     content: result.content || {},
   };
 }

package/lib/corp-manager/corp-manager.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const { throwUsage } = require('../core/command-errors');
+const { t } = require('../core/i18n');
 
 const {
   buildSubAdminConfig,
@@ -65,6 +66,13 @@ function splitList(value) {
   return String(value).split(',').map(item => item.trim()).filter(Boolean);
 }
 
+function sameStringSet(left, right) {
+  const normalize = values => [...new Set((Array.isArray(values) ? values : splitList(values))
+    .map(value => String(value).trim())
+    .filter(Boolean))].sort();
+  return JSON.stringify(normalize(left)) === JSON.stringify(normalize(right));
+}
+
 function toPositiveInt(value, defaultValue) {
   const parsed = Number.parseInt(value || `${defaultValue}`, 10);
   if (!Number.isFinite(parsed) || parsed <= 0) {
@@ -130,13 +138,29 @@ async function runAdd(positionals, options) {
     fail('缺少 --user <userId>');
   }
 
+  const deptIds = splitList(options.dept_ids || options.department_ids);
+  const scenes = splitList(options.scenes || 'appManage,bulletinBoard');
+  const before = await listAdmins({ role, userId });
   const result = await saveAdmin({
     role,
     userId,
-    deptIds: splitList(options.dept_ids || options.department_ids),
-    scenes: splitList(options.scenes || 'appManage,bulletinBoard'),
+    deptIds,
+    scenes,
   });
-  printJson(result);
+  const after = await listAdmins({ role, userId });
+  const savedAdmin = after.admins.find(admin => admin.userId === userId);
+  if (!savedAdmin) {
+    throw new Error(t('corp_manager.admin_verify_failed', userId, role));
+  }
+  if (result.roleType === 'subCorpAdminRole'
+    && (!sameStringSet(savedAdmin.manageDeptIds, deptIds) || !sameStringSet(savedAdmin.manageScene, scenes))) {
+    throw new Error(t(
+      'corp_manager.sub_admin_scope_verify_failed',
+      JSON.stringify({ deptIds, scenes }),
+      JSON.stringify({ deptIds: savedAdmin.manageDeptIds, scenes: savedAdmin.manageScene })
+    ));
+  }
+  printJson({ ...result, before, after });
 }
 
 async function runRemove(positionals, options) {
@@ -149,8 +173,13 @@ async function runRemove(positionals, options) {
     fail('缺少 --user <userId>');
   }
 
+  const before = await listAdmins({ role, userId });
   const result = await removeAdmin({ role, userId });
-  printJson(result);
+  const after = await listAdmins({ role, userId });
+  if (after.admins.some(admin => admin.userId === userId)) {
+    throw new Error(t('corp_manager.admin_remove_verify_failed', userId, role));
+  }
+  printJson({ ...result, before, after });
 }
 
 async function runAddressBook(positionals, options) {
@@ -204,6 +233,7 @@ module.exports = {
   USAGE,
   parseCliOptions,
   splitList,
+  sameStringSet,
   normalizeVisible,
   buildSubAdminConfig,
   run,

package/lib/integration/connector-presets.js

@@ -2,6 +2,7 @@
 
 const fs = require('fs');
 const path = require('path');
+const { normalizeTypedLiteral } = require('./integration-process-builder');
 
 /**
  * connector-presets.js - 已知连接器 action 的真实 inputs/outputs schema 预设
@@ -150,9 +151,7 @@ function buildConnectorRulesFromInputs(inputsSchema, assignments) {
       innerBase.id = input.name;
       innerBase.parentId = '';
       innerBase.valueType = assign.valueType || 'processVar';
-      innerBase.value = assign.valueType === 'literal' && !Number.isNaN(Number(assign.value))
-        ? Number(assign.value)
-        : assign.value;
+      innerBase.value = normalizeTypedLiteral(assign.valueType, assign.value, input.componentName);
       innerBase.ruleId = assign.ruleId || generateConnectorRuleId();
       innerBase.valueLabel = assign.valueLabel || input.label || input.name;
       base.rules = [innerBase];