openyida 2026.9.11 → 2026.9.12

package/README.md

@@ -210,6 +210,8 @@ openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-fo
 openyida get-permission APP_XXX FORM_XXX
 ```
 
+Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-process-rule/references/approval-actions.md) for the JSON example, defaults, and verification limits.
+
 `configure-process` 的流程 JSON 中，审批人可配置为发起人、指定成员、指定角色、部门主管或直属主管，例如：
 
 ```json
@@ -431,7 +433,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |
 | `openyida build-page <sourceFile> [--output file\|--write]` | Build Yida-compatible page source |
 | `openyida check-page <src> [--compat]` | Check custom page standards |
-| `openyida compile <src>` | Compile custom page locally |
+| `openyida compile <src> [--canvas] [--json]` | Compile custom page locally |
 | `openyida publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--auto-nav-order] [--open\|--no-open]` | Compile and publish custom page |
 | `openyida update-form-config <appType> <formUuid> <true\|false\|keep> "<title>" [--locale zh_CN\|en_US\|ja_JP]` | Update form configuration |
 | `openyida get-form-config <appType> <formUuid> [--json]` | Query form configuration |
@@ -454,8 +456,8 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
-| `openyida configure-process <appType> <formUuid> <definition> [processCode] [--replace]` | Configure and publish process rules |
-| `openyida create-process <appType> ... [--replace]` | Create process form (all-in-one) |
+| `openyida configure-process <appType> <formUuid> <definition> [processCode] [--replace]` | Configure and publish process rules; Supports append/forward via JSON nodes[].actions.normalActions/appendActions |
+| `openyida create-process <appType> ... [--replace]` | Create process form (all-in-one); Supports append/forward via JSON nodes[].actions.normalActions/appendActions |
 | `openyida ai-form-setting <get\|fields\|models\|enable\|disable\|save> <appType> ...` | Manage process form AI approval prompts |
 | `openyida process preview <appType> ...` | Preview process instance (visual flowchart) |
 
@@ -529,7 +531,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida batch <file>\|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]` | Run OpenYida commands in batch |
 | `openyida flash-to-prd --file <path> --name "<project>"` | Convert flash notes or meeting notes to a PRD prompt |
 | `openyida ai <text\|image> [options]` | Call Yida AI text and image recognition APIs |
-| `openyida asset <status\|resolve\|generate> [options]` | Detect asset capability / resolve materials |
+| `openyida asset <status\|resolve\|sources> [options]` | Detect asset capability / resolve materials |
 | `openyida cdn-config [options]` | Configure CDN / OSS upload |
 | `openyida cdn-upload <image-path>` | Upload image to CDN |
 | `openyida cdn-refresh [options]` | Refresh CDN cache |
@@ -560,7 +562,7 @@ The runner rejects public generic echo services such as httpbin and example.com.
 
 The opt-in `node scripts/e2e-real/connector/action-update-runner.js` regression uses the owner-confirmed login-free `www.aliwork.com` fixture and a single owned NONE-auth connector containing a target action plus one preservation sentinel. Enable it with `OPENYIDA_E2E=1 OPENYIDA_E2E_CONNECTOR_ACTION_UPDATE=1`. It verifies isolated `currentPage`, `pageSize`, `userLanguage`, `searchFieldJson`, and dynamic `_stamp` edits, restores each field and the final baseline, and persists only response structure, data count, and SHA-256. It never stores response row values or auth/profile/corp identifiers, never retries unknown writes, and intentionally leaves the owned connector as a `cleanup_blocked` residual because no proven delete API exists.
 
-`openyida asset resolve --hero <path-or-url> --product <path-or-url> --require-hero --upload-assets --json` is the preferred preflight for homepage visuals. It handles local files and external image references in one flow, uploads or mirrors them when CDN is configured, and returns `materialStatus: final|draft|none` so agents do not claim an unfinished visual page is final.
+`openyida asset resolve --input manifest-draft.json --manifest asset-manifest.json --json` validates every image slot and writes a traceable manifest. Search assets only accept Unsplash/Pexels; draft results exit with code 2. Use `--offline` to block URL checks and uploads.
 
 #### Environment and Localization
 

package/bin/yida.js

@@ -496,6 +496,7 @@ const MANIFEST_HELP_PATHS = Object.freeze({
   data: ['data'],
   report: ['report'],
   'create-process': ['create-process'],
+  'configure-process': ['configure-process'],
   'create-report': ['create-report'],
   'append-chart': ['append-chart'],
   'save-share-config': ['save-share-config'],

package/lib/ai/ai.js

@@ -31,6 +31,7 @@ const IMAGE_MIME_TYPES = {
   '.gif': 'image/gif',
   '.webp': 'image/webp',
   '.bmp': 'image/bmp',
+  '.svg': 'image/svg+xml',
 };
 
 function printHelp() {
@@ -500,6 +501,7 @@ module.exports = {
   getAuthRef,
   callTextFromAI,
   uploadImageForAI,
+  inferAppType,
   invokeImageRecognition,
   normalizeImageResult,
   parseArgs,

package/lib/app/compile.js

@@ -3,6 +3,8 @@
 const fs = require('fs');
 const path = require('path');
 const { compileSource } = require('./page-compiler');
+const { compileCanvasPageSource } = require('./services/canvas-page-compiler');
+const { loadPageSource } = require('./services/page-source-loader');
 const { runLintCheck } = require('./page-linter');
 const { buildPageFile, shouldBuildPageSource } = require('./page-compat');
 const { warnLargePageSource } = require('./page-size-guard');
@@ -23,7 +25,20 @@ async function run(args) {
 
   const skipLint = args.includes('--skip-lint');
   const compat = args.includes('--compat') || args.includes('--modern');
-  const filteredArgs = args.filter(arg => arg !== '--skip-lint' && arg !== '--compat' && arg !== '--modern');
+  const canvas = args.includes('--canvas');
+  const json = args.includes('--json');
+  const filteredArgs = args.filter(arg => ![
+    '--skip-lint',
+    '--compat',
+    '--modern',
+    '--canvas',
+    '--json',
+  ].includes(arg));
+  if (filteredArgs.length < 1) {
+    throwUsage(t('cli.compile_usage'), t('cli.compile_example'), {
+      code: 'COMPILE_INVALID_ARGUMENTS',
+    });
+  }
   let sourcePath = path.resolve(filteredArgs[0]);
   if (!fs.existsSync(sourcePath)) {
     throwCommandError(t('publish.source_not_found', sourcePath), {
@@ -32,6 +47,29 @@ async function run(args) {
     });
   }
 
+  if (canvas || /\.canvas\.(?:jsx?|tsx?)$/i.test(sourcePath)) {
+    const workspaceRoot = process.cwd();
+    const relativeSourcePath = path.relative(workspaceRoot, sourcePath);
+    const loadedSource = loadPageSource(relativeSourcePath, { workspaceRoot });
+    const compiled = compileCanvasPageSource(loadedSource);
+    const payload = {
+      ok: true,
+      pageType: 'canvas',
+      sourcePath: fs.realpathSync(sourcePath),
+      profile: compiled.profile,
+      inputHash: compiled.inputHash,
+      sourceHash: compiled.sourceHash,
+      compiledHash: compiled.compiledHash,
+      importedModules: JSON.parse(compiled.importedModules),
+    };
+    if (json) {
+      console.log(JSON.stringify(payload));
+    } else {
+      info(JSON.stringify(payload, null, 2));
+    }
+    return payload;
+  }
+
   const initialSourceCode = fs.readFileSync(sourcePath, 'utf-8');
   warnLargePageSource(initialSourceCode, sourcePath);
   if (shouldBuildPageSource(initialSourceCode, sourcePath, { modern: compat })) {

package/lib/app/update-app.js

@@ -221,6 +221,16 @@ function normalizeLayoutDirection(layoutDirection) {
   return normalized;
 }
 
+/** 与 yc-utils 的应用配置归一化一致；不应用详情页 Shell 的 top_fold 覆盖。 */
+function normalizeStoredLayoutDirection(layoutDirection, navType) {
+  if (SUPPORTED_LAYOUT_DIRECTIONS.includes(layoutDirection)) {return layoutDirection;}
+  if (layoutDirection === 'hoz') {return navType === 'top_side' ? 'l_shape' : 'top';}
+  if (layoutDirection === 'ver') {return 'side';}
+  if (navType === 'top_fold') {return 'top';}
+  if (navType === 'top_side') {return 'l_shape';}
+  return 'side';
+}
+
 function pickAppField(currentApp, fieldName, configName) {
   if (currentApp[fieldName] !== undefined && currentApp[fieldName] !== null) {
     return currentApp[fieldName];
@@ -296,6 +306,8 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
   const currentCustomThemeStyle = pickAppField(currentApp, 'customThemeStyle', 'CUSTOM_THEME_STYLE');
   const addWaterMark = pickAppField(currentApp, 'addWaterMark', 'ADDWATERMARK');
   const sentryMode = pickAppField(currentApp, 'sentryMode', 'SENTRY_MODE');
+  const currentNavType = currentApp.navType || (currentApp.config && currentApp.config.NAVTYPE);
+  const currentLayoutDirection = currentApp.layoutDirection || (currentApp.config && currentApp.config.LAY_OUT_DIRECTION);
   if (params.colour === 'custom' && !params.themeColor && !currentThemeColor) {
     throw new Error(t('update_app.custom_theme_color_required'));
   }
@@ -319,9 +331,10 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
     mode: currentApp.mode || (currentApp.config && currentApp.config.APPMODE) || 'normal',
     type: currentApp.type || (currentApp.config && currentApp.config.APPTYPE) || 'single',
     navTheme: params.navTheme || currentApp.navTheme || (currentApp.config && currentApp.config.NAV_THEME) || 'light',
-    navType: currentApp.navType || (currentApp.config && currentApp.config.NAVTYPE) || 'top_side',
     navLayout: currentApp.navLayout || (currentApp.config && currentApp.config.NAVLAYOUT) || 'auto',
-    layoutDirection: params.layoutDirection || currentApp.layoutDirection || (currentApp.config && currentApp.config.LAY_OUT_DIRECTION) || 'side',
+    layoutDirection: params.layoutDirection
+      ? normalizeLayoutDirection(params.layoutDirection)
+      : normalizeStoredLayoutDirection(currentLayoutDirection, currentNavType),
     homepageLogo: currentApp.homepageLogo || (currentApp.config && currentApp.config.HOMEPAGELOGO) || '',
     logoSource: params.logoSource || currentApp.logoSource || (currentApp.config && currentApp.config.LOGO_SOURCE) || 'appIcon',
     logoLink: currentApp.logoLink || (currentApp.config && currentApp.config.LOGOLINK) || '',
@@ -346,6 +359,8 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
     pageFooter: currentApp.pageFooter || '',
   };
 
+  // ThemeNavSetting 保存现有 navType；新布局由 layoutDirection 控制，不反写或补造旧字段。
+  if (currentNavType) {postDataObj.navType = currentNavType;}
   if (addWaterMark !== undefined && addWaterMark !== null) {
     postDataObj.addWaterMark = addWaterMark;
   }

package/lib/asset/ai-image.js

@@ -1,89 +1,60 @@
 
-/**
- * ai-image.js - 图片素材来源能力检测（诚实降级 + 引导本地 agent）
- *
- * P3 素材工具化的关键澄清：openyida 本身没有内置「文生图」API，
- * `openyida ai` 只支持文生文与识图，不能凭空生成图片 URL。
- *
- * 因此本模块不假装能生成图片，而是：
- *   1. 诚实地检测「是否存在内置图片生成能力」（目前恒为 false）；
- *   2. 把「生成/寻找素材」这件事交回给正在驱动本 CLI 的智能体（Claude/Codex 等），
- *      由 skill 文档引导它：能自己生成就生成，否则去免费素材库搜真实图片；
- *   3. 提供推荐的免费/可商用素材库清单与使用纪律，供 skill / agent 参考。
- *
- * 无论走哪条路，候选素材都交给 asset resolve 统一解析；有 CDN 时再转存，
- * 绝不把编造的 URL 直接写进页面。
- *
- * 用法：
- *   const { detectImageGenerator, getFreeStockLibraries, getMaterialSourcingGuidance } = require('./ai-image');
- *   const g = detectImageGenerator();  // { available:false, reason, delegateToAgent:true }
- */
-
 'use strict';
 
-/**
- * 推荐的免费 / 可商用图片素材库
- * 说明：这些站点提供免费可商用（多为 CC0 / 自有免费授权）的高质量图片，
- * 适合官网 Hero、产品图、场景配图。agent 应优先从这里取真实图片 URL，
- * 取到后交给 `openyida asset resolve` 统一处理。
- */
 const FREE_STOCK_LIBRARIES = [
   {
     name: 'Unsplash',
     site: 'https://unsplash.com',
-    license: 'Unsplash License（免费可商用，无需署名）',
-    bestFor: '高质量摄影级 Hero 大图、生活方式/场景图',
-    directImageHint:
-      'images.unsplash.com/photo-... 形式的直链可直接用于 <img>；页面链接需先取得图片直链。',
+    license: '遵守 Unsplash License 和 API Guidelines',
+    bestFor: 'Hero、生活方式和场景图',
+    directImageHint: '使用 API 返回的 images.unsplash.com URL。',
+    deliveryPolicy: '下载授权图片后上传宜搭附件；保留署名和 download_location 记录。',
   },
   {
     name: 'Pexels',
     site: 'https://www.pexels.com',
-    license: 'Pexels License（免费可商用，无需署名）',
-    bestFor: '产品/办公/团队/自然等主题摄影图与短视频',
+    license: '遵守 Pexels License 和 API Guidelines',
+    bestFor: '产品、办公、人物和场景图',
     directImageHint: 'images.pexels.com/photos/... 形式为图片直链。',
-  },
-  {
-    name: 'Pixabay',
-    site: 'https://pixabay.com',
-    license: 'Pixabay Content License（免费可商用）',
-    bestFor: '插画、矢量、照片综合库',
-    directImageHint: 'cdn.pixabay.com/photo/... 形式为图片直链。',
-  },
-  {
-    name: 'Undraw',
-    site: 'https://undraw.co/illustrations',
-    license: 'unDraw open-source license（免费可商用，可改色）',
-    bestFor: '扁平风品牌插画、空状态/引导插画（SVG，可随品牌色变量着色）',
-    directImageHint: '导出 SVG 或使用官方 CDN SVG 直链。',
+    deliveryPolicy: '下载后上传宜搭附件；保留 Pexels 链接和摄影师信息。',
   },
 ];
 
 /**
  * 检测是否存在「内置图片生成能力」。
  *
- * 目前 openyida 无内置文生图连接器，恒返回 available:false，并显式声明
- * 由 agent 接管素材来源（避免任何模块据此伪造图片 URL）。
+ * openyida 无内置文生图连接器。宿主能力未确认时返回 available:null，
+ * 由 Agent 检查真实工具清单。
  *
  * @param {object} [options]
- * @param {boolean} [options.hasImageGenConnector] 预留：未来若配置了文生图连接器可置 true
- * @returns {{ available: boolean, reason: string, delegateToAgent: boolean }}
+ * @returns {{ status: string, available: boolean|null, reason: string, delegateToAgent: boolean }}
  */
 function detectImageGenerator(options = {}) {
-  if (options.hasImageGenConnector) {
+  const capability = options.hostCapabilities && options.hostCapabilities.image_generation;
+  if (capability && capability.status === 'available') {
     return {
+      status: 'available',
       available: true,
-      reason: '检测到已配置的文生图连接器，可由连接器生成图片后再转存 CDN。',
+      reason: '当前宿主可生成图片；生成后交给 asset resolve。',
+      delegateToAgent: true,
+      source: capability.source || 'host_capability',
+    };
+  }
+  if (capability && capability.status === 'unavailable') {
+    return {
+      status: 'unavailable',
+      available: false,
+      reason: '当前宿主不支持图片生成。',
       delegateToAgent: false,
+      source: capability.source,
     };
   }
   return {
-    available: false,
-    reason:
-      'openyida 无内置文生图能力（`openyida ai` 仅支持文生文/识图）。' +
-      '图片素材应由智能体自行生成，或到免费素材库（Unsplash/Pexels 等）检索真实图片，' +
-      '再交给 `openyida asset resolve` 解析、（有 CDN 时）转存 CDN 后回填 spec。',
+    status: 'unknown',
+    available: null,
+    reason: '当前宿主未确认图片生成能力。',
     delegateToAgent: true,
+    source: (capability && capability.source) || 'host_tool_inventory_required',
   };
 }
 
@@ -102,17 +73,18 @@ function getFreeStockLibraries() {
 function getMaterialSourcingGuidance() {
   return {
     steps: [
-      '1. 判断页面是否需要真实图片（官网 Hero / 产品图 / 场景图通常需要）。',
-      '2. 优先：若智能体自身具备图片生成能力，按品牌调性生成图片并保存到本地。',
-      '3. 备选：到免费可商用素材库（见 libraries）检索与主题匹配的真实图片，拿到图片直链。',
-      '4. 解析：把本地文件或外链交给 `openyida asset resolve` 统一处理并回填 spec.assets；已配置 CDN 时转存为稳定 URL。',
-      '5. 兜底：若既无生成能力又找不到可用素材，交付「标注素材缺口」的低保真草稿，绝不编造图片 URL 或声称已上传。',
+      '1. 先用用户提供的素材。',
+      '2. 再从 Unsplash / Pexels 搜图。',
+      '3. 仍有缺口时使用宿主生图。',
+      '4. 最后使用中性占位并保持 draft。',
+      '5. 所有候选图通过 asset resolve 写入 manifest。',
     ],
     libraries: getFreeStockLibraries(),
     rules: [
-      '绝不编造图片 URL；素材经 `openyida asset resolve` 统一处理后再写进页面。',
-      '无 CDN 时不得声称「已上传」或「已是最终版」。',
-      '素材授权需为免费可商用；如不确定授权，改用文字排版/数据图示/插画（如 unDraw）替代。',
+      '不编造图片 URL；按 manifest 的页面状态继续，只使用当前页 materialStatus=final 的图片。',
+      '默认下载并上传宜搭图片附件；超过 20 MiB 保留原链接；不额外探测 URL，下载失败跳过并记录缺口。',
+      '联网搜图仅使用 Unsplash / Pexels。',
+      '来源不明时使用中性占位或宿主生成图。',
     ],
   };
 }