openyida 2026.8.30 → 2026.8.31

package/README.md

@@ -430,7 +430,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida data <query\|get\|create\|update\|delete> <form\|process\|subform\|tasks\|operation-records\|task> [args]` | Unified data management (form/process/task/subform) |
+| `openyida data <query\|get\|create\|update> <resource> ... \| delete form <appType> <formUuid> --inst-id <id> --confirm [--json]` | Unified data management (form/process/task/subform) |
 | `openyida task-center <type> [options]` | Global task center (todo/processed/cc etc.) |
 | `openyida basic-info <overview\|commodity\|grant\|capacity\|quota\|abs-path\|dataflow\|i18n\|domain>` | Query organization basic info, capacity, quotas, and domain settings |
 | `openyida read-dingtalk-doc <docUrl> [--output <file>] [--json]` | Fetch Markdown content from a DingTalk document |
@@ -462,8 +462,8 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida create-report <appType> "<name>" ... [--open\|--no-open]` | Create a Yida report |
-| `openyida append-chart <appType> <reportId> ... [--open\|--no-open]` | Append chart to existing report |
+| `openyida create-report <appType> "<name>" ... [--json] [--open\|--no-open]` | Create a Yida report |
+| `openyida append-chart <appType> <reportId> ... [--json] [--open\|--no-open]` | Append chart to existing report |
 | `openyida report inspect <appType> <reportId> --json` | Inspect report runtime bindings (read-only) |
 
 ### Connectors

package/bin/yida.js

@@ -13,7 +13,12 @@
 const { version: currentVersion } = require('../package.json');
 const { t } = require('../lib/core/i18n');
 const { warn } = require('../lib/core/chalk');
-const { CliError, isCliError, toErrorPayload } = require('../lib/core/cli-error');
+const {
+  CliError,
+  isCliError,
+  shouldUseStructuredErrorOutput,
+  toErrorPayload,
+} = require('../lib/core/cli-error');
 const { COMMAND_GROUPS, buildCommandManifest, findCommandSuggestion } = require('../lib/core/command-manifest');
 
 const command = process.argv[2];
@@ -492,11 +497,13 @@ const MANIFEST_HELP_PATHS = Object.freeze({
   report: ['report'],
   'create-process': ['create-process'],
   'create-report': ['create-report'],
+  'append-chart': ['append-chart'],
   'save-share-config': ['save-share-config'],
   'verify-short-url': ['verify-short-url'],
   'integration-create': ['integration', 'create'],
   'save-permission': ['save-permission'],
   'get-permission': ['get-permission'],
+  copy: ['copy'],
 });
 
 function printManifestCommandHelp(commandName) {
@@ -1261,7 +1268,7 @@ async function main() {
 
 main()
   .catch((err) => {
-    if (isCliError(err) && args.includes('--json')) {
+    if (shouldUseStructuredErrorOutput(err, args)) {
       console.error(JSON.stringify(toErrorPayload(err), null, 2));
     } else if (isCliError(err)) {
       warn(t('cli.exec_failed', err.message));

package/lib/app/build-page.js

@@ -65,6 +65,31 @@ async function run(args) {
     modern: options.modern,
   });
 
+  const throwBuildFailure = () => {
+    const matchedPrimaryIssue = buildResult.errors.find(issue => issue.code === 'UNSUPPORTED_HOOK') || buildResult.errors[0];
+    const primaryIssue = matchedPrimaryIssue ? JSON.parse(JSON.stringify(matchedPrimaryIssue)) : undefined;
+    throwCommandError(t('build_page.failed'), {
+      code: 'BUILD_PAGE_FAILED',
+      details: {
+        errors: buildResult.errors,
+        primaryIssue,
+        retryable: false,
+        retrySafe: true,
+        sideEffectState: 'none',
+        sourceRepairable: buildResult.errors.length > 0,
+        nextAction: {
+          type: 'edit_source_then_recheck',
+          commandId: 'check-page',
+          args: { sourcePath },
+        },
+      },
+    });
+  };
+
+  if (!buildResult.ok && options.json) {
+    throwBuildFailure();
+  }
+
   if (options.json) {
     console.log(JSON.stringify({
       ok: buildResult.ok,
@@ -92,10 +117,7 @@ async function run(args) {
   }
 
   if (!buildResult.ok) {
-    throwCommandError(t('build_page.failed'), {
-      code: 'BUILD_PAGE_FAILED',
-      details: { errors: buildResult.errors },
-    });
+    throwBuildFailure();
   }
 
   if (!options.json) {

package/lib/app/check-page.js

@@ -44,6 +44,32 @@ async function run(args) {
   const buildErrors = buildResult && buildResult.errors ? buildResult.errors : [];
   const ok = buildErrors.length === 0 && lintResult.errors.length === 0;
 
+  const throwCheckFailure = () => {
+    const matchedPrimaryIssue = buildErrors.find(issue => issue.code === 'UNSUPPORTED_HOOK') || buildErrors[0] || lintResult.errors[0];
+    const primaryIssue = matchedPrimaryIssue ? JSON.parse(JSON.stringify(matchedPrimaryIssue)) : undefined;
+    throwCommandError(t('check_page.failed'), {
+      code: 'CHECK_PAGE_FAILED',
+      details: {
+        errors: lintResult.errors,
+        buildErrors,
+        primaryIssue,
+        retryable: false,
+        retrySafe: true,
+        sideEffectState: 'none',
+        sourceRepairable: buildErrors.length > 0,
+        nextAction: buildErrors.length > 0 ? {
+          type: 'edit_source_then_recheck',
+          commandId: 'check-page',
+          args: { sourcePath },
+        } : undefined,
+      },
+    });
+  };
+
+  if (!ok && options.json) {
+    throwCheckFailure();
+  }
+
   if (options.json) {
     console.log(JSON.stringify({
       ok,
@@ -67,13 +93,7 @@ async function run(args) {
   }
 
   if (!ok) {
-    throwCommandError(t('check_page.failed'), {
-      code: 'CHECK_PAGE_FAILED',
-      details: {
-        errors: lintResult.errors,
-        buildErrors,
-      },
-    });
+    throwCheckFailure();
   }
 }
 

package/lib/app/create-form/field-normalizers.js

@@ -352,6 +352,7 @@ function createFieldNormalizers(deps) {
       'mac',
       'chineseID',
       'customValidate',
+      'regex',
     ].indexOf(rule.type) !== -1;
   }
 

package/lib/app/page-compat.js

@@ -31,6 +31,12 @@ const SUPPORTED_REMOVABLE_IMPORTS = new Set([
 ]);
 
 const SUPPORTED_HOOKS = new Set(['useState', 'useEffect']);
+const UNSUPPORTED_HOOK_REPAIRS = Object.freeze({
+  useReducer: 'Replace the reducer with supported useState state updates, or move the page to .canvas.jsx when reducer semantics are required.',
+  useMemo: 'Compute the derived value with a plain local expression, or move the page to .canvas.jsx when memoization is required.',
+  useCallback: 'Use a plain local function, or move the page to .canvas.jsx when stable callback identity is required.',
+  useLayoutEffect: 'Use supported useEffect(..., []) for mount-only work, or move the page to .canvas.jsx when layout effects are required.',
+});
 const REQUIRED_RUNTIME_EXPORTS = {
   getCustomState: [
     'export function getCustomState(key) {',
@@ -783,7 +789,20 @@ function collectUnsupportedHooks(ast, errors) {
         errors.push({
           code: 'UNSUPPORTED_HOOK',
           message: `${name} is not supported in OpenYida authoring mode.`,
+          hook: name,
           line: pathRef.node.loc && pathRef.node.loc.start && pathRef.node.loc.start.line,
+          retryable: false,
+          retrySafe: true,
+          sideEffectState: 'none',
+          sourceRepairable: true,
+          supportedHooks: [...SUPPORTED_HOOKS],
+          recommendedAuthoringMode: 'canvas',
+          replacement: UNSUPPORTED_HOOK_REPAIRS[name]
+            || 'Use only supported useState/useEffect(..., []) authoring, or move the page to .canvas.jsx for full React Hook support.',
+          nextAction: {
+            type: 'edit_source_then_recheck',
+            commandId: 'check-page',
+          },
         });
       }
     },

package/lib/app/publish.js

@@ -564,7 +564,28 @@ async function runMain(argv) {
         buildResult.errors.forEach((issue) => warn(`${issue.code}: ${issue.message}`));
         const lintErrors = buildResult.lint && buildResult.lint.errors ? buildResult.lint.errors : [];
         lintErrors.forEach((issue) => warn(`${issue.rule}: ${issue.message}`));
-        process.exit(1);
+        const matchedPrimaryIssue = buildResult.errors.find(issue => issue.code === 'UNSUPPORTED_HOOK')
+          || buildResult.errors[0]
+          || lintErrors[0];
+        const primaryIssue = matchedPrimaryIssue ? JSON.parse(JSON.stringify(matchedPrimaryIssue)) : undefined;
+        throw new CliError(t('build_page.failed'), {
+          code: 'BUILD_PAGE_FAILED',
+          details: {
+            sourcePath,
+            errors: buildResult.errors,
+            lintErrors,
+            primaryIssue,
+            retryable: false,
+            retrySafe: true,
+            sideEffectState: 'none',
+            sourceRepairable: buildResult.errors.length > 0,
+            nextAction: {
+              type: 'edit_source_then_recheck',
+              commandId: 'check-page',
+              args: { sourcePath },
+            },
+          },
+        });
       }
       sourcePath = buildResult.outputPath;
       success(t('build_page.output', sourcePath));

package/lib/app/services/form-validation.js

@@ -154,6 +154,7 @@ function isNativeFieldValidationRule(rule) {
     'mac',
     'chineseID',
     'customValidate',
+    'regex',
   ].indexOf(rule.type) !== -1;
 }
 

package/lib/auth/token-store.js

@@ -368,7 +368,7 @@ function toAuthProfileCandidate(session = {}) {
 function buildAuthProfileNextStep(status) {
   if (status === 'profile_required') {
     return {
-      next_step: 'Multiple auth profiles are available. Run openyida auth profiles, then run openyida auth profile switch <auth_profile> with the exact profile id. For one command, pass --profile <auth_profile>.',
+      next_step: 'Multiple auth profiles are available. Run openyida auth profiles, then run openyida auth profile switch <auth_profile> with the exact profile id. The switch updates the current project auth pointer.',
       next_step_commands: [
         'openyida auth profiles',
         'openyida auth profile switch <auth_profile>',
@@ -754,7 +754,7 @@ function selectUserProfileSession(options = {}, selection = {}) {
       status: 'profile_required',
       candidate_count: candidates.length,
       candidates: candidates.map(toAuthProfileCandidate),
-      message: 'multiple auth profiles found; pass --corp-id, --profile, or OPENYIDA_AUTH_PROFILE',
+      message: 'multiple auth profiles found; switch the current project auth pointer with openyida auth profile switch <auth_profile>',
       ...buildAuthProfileNextStep('profile_required'),
     };
   }

package/lib/core/cli-error.js

@@ -37,6 +37,26 @@ function toErrorPayload(error) {
       if (details.nextStep) {
         payload.nextStep = details.nextStep;
       }
+      [
+        'partial',
+        'residual',
+        'retryable',
+        'retrySafe',
+        'sideEffectState',
+        'readbackAllowed',
+        'recommendedRecovery',
+        'nextAction',
+        'target',
+        'deleted',
+        'alreadyAbsent',
+        'mutationAccepted',
+        'readbackVerified',
+        'status',
+      ].forEach((key) => {
+        if (Object.prototype.hasOwnProperty.call(details, key)) {
+          payload[key] = details[key];
+        }
+      });
     }
     payload.details = details;
   }
@@ -44,8 +64,34 @@ function toErrorPayload(error) {
   return payload;
 }
 
+function shouldUseStructuredErrorOutput(error, args = []) {
+  if (!isCliError(error)) {return false;}
+  if (Array.isArray(args) && args.includes('--json')) {return true;}
+  const details = error.details;
+  const ownedPartial = !!(
+    details
+    && typeof details === 'object'
+    && !Array.isArray(details)
+    && details.partial === true
+    && details.residual
+    && typeof details.residual === 'object'
+    && details.retrySafe === false
+  );
+  const mutationOutcomeUnknown = !!(
+    details
+    && typeof details === 'object'
+    && !Array.isArray(details)
+    && details.target
+    && typeof details.target === 'object'
+    && details.retrySafe === false
+    && details.sideEffectState === 'unknown'
+  );
+  return ownedPartial || mutationOutcomeUnknown;
+}
+
 module.exports = {
   CliError,
   isCliError,
+  shouldUseStructuredErrorOutput,
   toErrorPayload,
 };

package/lib/core/command-manifest.js

@@ -1168,9 +1168,10 @@ const COMMAND_GROUPS = [
     id: 'data',
     titleKey: 'help.group_data',
     commands: [
-      command('data', ['data'], 'data <query|get|create|update|delete> <form|process|subform|tasks|operation-records|task> [args]', 'help.cmd_data', {
+      command('data', ['data'], 'data <query|get|create|update> <resource> ... | delete form <appType> <formUuid> --inst-id <id> --confirm [--json]', 'help.cmd_data', {
         examples: [
           'openyida data create form APP_XXX FORM_XXX --data-json \'{"textField_name":"客户 A","dateField_followUp":1787932800000}\'',
+          'openyida data delete form APP_XXX FORM_XXX --inst-id FINST_XXX --confirm --json',
         ],
       }),
       command('task-center', ['task-center'], 'task-center <type> [options]', 'help.cmd_task_center'),
@@ -1223,8 +1224,8 @@ const COMMAND_GROUPS = [
     id: 'report',
     titleKey: 'help.group_report',
     commands: [
-      command('create-report', ['create-report'], 'create-report <appType> "<name>" ... [--open|--no-open]', 'help.cmd_create_report'),
-      command('append-chart', ['append-chart'], 'append-chart <appType> <reportId> ... [--open|--no-open]', 'help.cmd_append_chart'),
+      command('create-report', ['create-report'], 'create-report <appType> "<name>" ... [--json] [--open|--no-open]', 'help.cmd_create_report'),
+      command('append-chart', ['append-chart'], 'append-chart <appType> <reportId> ... [--json] [--open|--no-open]', 'help.cmd_append_chart'),
       command('report.inspect', ['report', 'inspect'], 'report inspect <appType> <reportId> --json', 'help.cmd_report_inspect', { output: 'json' }),
     ],
   },

package/lib/core/copy.js

@@ -23,6 +23,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const { CliError } = require('./cli-error');
 const { detectEnvironment } = require('./env');
 const { buildSkillsDiagnostics, resolveProjectRoot } = require('./utils');
 const { t } = require('./i18n');
@@ -128,6 +129,55 @@ function resolveExistingPath(targetPath) {
   }
 }
 
+function resolveCanonicalPath(targetPath) {
+  let current = path.resolve(targetPath);
+  const missingSegments = [];
+
+  while (!fs.existsSync(current)) {
+    const parent = path.dirname(current);
+    if (parent === current) {
+      break;
+    }
+    missingSegments.unshift(path.basename(current));
+    current = parent;
+  }
+
+  const existingBase = fs.existsSync(current) ? fs.realpathSync(current) : current;
+  return path.resolve(existingBase, ...missingSegments);
+}
+
+function isSameOrDescendantPath(candidatePath, parentPath) {
+  const relative = path.relative(parentPath, candidatePath);
+  return relative === '' || (
+    relative !== '..' &&
+    !relative.startsWith(`..${path.sep}`) &&
+    !path.isAbsolute(relative)
+  );
+}
+
+function assertCopyDestinationSafe(sourceDir, destDir) {
+  const sourcePath = resolveCanonicalPath(sourceDir);
+  const destinationPath = resolveCanonicalPath(destDir);
+  const destinationInsideSource = isSameOrDescendantPath(destinationPath, sourcePath);
+  const sourceInsideDestination = isSameOrDescendantPath(sourcePath, destinationPath);
+
+  if (!destinationInsideSource && !sourceInsideDestination) {
+    return;
+  }
+
+  throw new CliError(t('copy.source_destination_overlap', sourcePath, destinationPath), {
+    code: 'COPY_SOURCE_DESTINATION_OVERLAP',
+    details: {
+      sourcePath,
+      destinationPath,
+      relation: destinationInsideSource ? 'destination_inside_source' : 'source_inside_destination',
+      sideEffectState: 'none',
+      retryable: false,
+      retrySafe: true,
+    },
+  });
+}
+
 function isSameDirectory(a, b) {
   const pathA = resolveExistingPath(a);
   const pathB = resolveExistingPath(b);
@@ -244,6 +294,7 @@ function resolveDestBaseFromEnv(activeToolName, activeProjectRoot, envResults, o
  * 执行单项复制任务，打印结果。
  */
 function copyItem(label, sourceDir, destDir, isForce, options = {}) {
+  assertCopyDestinationSafe(sourceDir, destDir);
   console.log(t('copy.copying_label', label));
   const count = isForce
     ? forceCopyDir(sourceDir, destDir, options)
@@ -256,6 +307,9 @@ function copyItem(label, sourceDir, destDir, isForce, options = {}) {
  * @param {string[]} [args=process.argv.slice(3)] 命令参数
  */
 function run(args = process.argv.slice(3)) {
+  if (args.includes('--help') || args.includes('-h')) {
+    return { help: true };
+  }
   const { c, sep, banner, info, success, label, fail: chalkFail, listItem } = require('./chalk');
 
   banner(t('copy.title'), { stderr: false });
@@ -339,6 +393,7 @@ function run(args = process.argv.slice(3)) {
     const selectedSkills = skillsDiagnostics.selected;
 
     if (selectedSkills && selectedSkills.path) {
+      assertCopyDestinationSafe(packageYidaSkillsDir, selectedSkills.path);
       // 清理旧版遗留在根目录的错误安装
       if (activeResult && selectedSkills.scope === 'user') {
         removeSkillsLink(path.join(os.homedir(), activeResult.dirName, 'yida-skills'));
@@ -359,6 +414,7 @@ function run(args = process.argv.slice(3)) {
     } else {
       // 未检测到 AI 工具，复制到当前目录下
       const destSkillsDest = path.join(destBase, 'yida-skills');
+      assertCopyDestinationSafe(packageYidaSkillsDir, destSkillsDest);
       removeSkillsLink(destSkillsDest);
       const count = mergeCopyDir(packageYidaSkillsDir, destSkillsDest);
       results.push({
@@ -397,6 +453,7 @@ function run(args = process.argv.slice(3)) {
 module.exports = {
   run,
   _internal: {
+    assertCopyDestinationSafe,
     forceCopyDir,
     ensureProjectWorkspaceDirs,
     resolveDestBaseFromEnv,

package/lib/core/locales/en.js

@@ -1199,6 +1199,7 @@ Examples:
     remove_failed: '    ❌ Remove failed: {0} ({1})',
     symlink_fallback_copy: '    ⚠️  Windows symlink creation failed (requires admin privileges), falling back to directory copy: {0}',
     symlink_failed: '    ❌ Symlink creation failed: {0} ({1})',
+    source_destination_overlap: 'Copy stopped because the source and destination directories overlap. Source: {0}; destination: {1}',
     result_symlink: '   {0} → {1} (symlink)',
     result_copy: '   {0} → {1} ({2} files)',
   },
@@ -1843,6 +1844,14 @@ Options:
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  command_unsupported: 'Unsupported data command: {0} {1}. Run openyida commands --json to inspect the actual capability.',
+  delete_confirmation_required: 'Before deleting a form instance, query it, show the target summary to the user, and add --confirm only after explicit approval. No delete was performed.',
+  delete_preflight_failed: 'Could not read form instance {0} for delete preflight. No delete was performed.',
+  delete_process_unsupported: 'Deleting process instances is not supported in this version. Stop and report the capability gap; do not try scripts or private APIs.',
+  delete_readback_mismatch: 'The delete request was accepted, but form instance {0} is still present on readback. The result is unverified; do not retry the delete automatically.',
+  delete_result_unknown: 'The delete outcome for form instance {0} is unknown. Perform read-only inspection and do not retry the delete automatically.',
+  delete_target_mismatch: 'Form instance {0} does not belong to target form {1}. The operation stopped before delete.',
+  delete_target_unverified: 'Could not verify the identity and ownership of form instance {0}. The operation stopped before delete.',
   form_mode_unverified: 'Could not verify the type of form {0}. Creation stopped before any data write.',
   resource_required: 'data query is missing the form resource type. Suggested command: {0}',
 });

package/lib/core/locales/zh.js

@@ -1172,6 +1172,7 @@ openyida - 宜搭命令行工具
     remove_failed: '    ❌ 删除失败: {0} ({1})',
     symlink_fallback_copy: '    ⚠️  Windows 软链创建失败（需要管理员权限），降级为目录复制: {0}',
     symlink_failed: '    ❌ 软链接创建失败: {0} ({1})',
+    source_destination_overlap: '复制已停止：源目录与目标目录重叠。源目录：{0}；目标目录：{1}',
   },
 
   // ── lib/check-update.js ────────────────────────────
@@ -1798,6 +1799,14 @@ openyida - 宜搭命令行工具
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  command_unsupported: '不支持的数据命令：{0} {1}。请使用 openyida commands --json 查询真实能力。',
+  delete_confirmation_required: '删除表单实例前必须先查询并向用户展示目标摘要，获得明确确认后追加 --confirm。未执行删除。',
+  delete_preflight_failed: '无法读取表单实例 {0} 完成删除前校验，未执行删除。',
+  delete_process_unsupported: '当前版本不支持删除流程实例。请停止并报告能力缺口，不要尝试脚本或底层 API。',
+  delete_readback_mismatch: '删除请求已被接受，但回读仍能找到表单实例 {0}。结果未验证，禁止自动重试删除。',
+  delete_result_unknown: '表单实例 {0} 的删除结果未知。请只读回查目标，不要自动重试删除。',
+  delete_target_mismatch: '表单实例 {0} 不属于目标表单 {1}，已停止且未执行删除。',
+  delete_target_unverified: '无法验证表单实例 {0} 的身份和归属，已停止且未执行删除。',
   form_mode_unverified: '无法验证表单 {0} 的类型，已停止创建；未执行任何数据写入。',
   resource_required: 'data query 缺少资源类型 form。建议：{0}',
 });