openyida 2026.9.2-beta.1 → 2026.9.3

package/README.md

@@ -153,7 +153,7 @@ openyida/
 │   ├── core/                   # Environment detection, i18n, diagnostics, data commands
 │   ├── process/                # Process form creation, configuration, preview
 │   ├── report/                 # Yida report and chart generation
-│   └── samples/                # Sample skeletons emitted by openyida sample
+│   └── samples/                # Reusable code templates emitted by openyida sample
 ├── project/                    # Default workspace template for generated Yida projects
 ├── yida-skills/                # Source skill docs and Yida API references
 └── scripts/                    # CI, packaging, and installation helpers
@@ -167,13 +167,14 @@ For a user-facing list of supported features and matching CLI commands, see [Ope
 
 ```bash
 openyida create-app "CRM"
-openyida create-app --name "CRM" --desc "Customer management" --theme-file ./app-theme.css --nav-theme light --logo-source appIcon --layout l_shape
+openyida sample yida-design app-theme --output .cache/openyida/crm/app-theme.css
+openyida create-app --name "CRM" --desc "Customer management" --theme-file .cache/openyida/crm/app-theme.css --nav-theme light --logo-source appIcon --layout l_shape
 openyida app-list --size 20
 openyida corp-efficiency
 openyida create-form create APP_XXX "Customer" .cache/openyida/forms/customer-fields.json
 openyida create-form update APP_XXX FORM_XXX .cache/openyida/forms/customer-changes.json
-openyida sample openyida-scaffold form-fields --output .cache/openyida/forms/customer-fields.json
-openyida sample openyida-scaffold canvas-form-drawer --output project/pages/src/customer-entry.canvas.jsx --var APP_TYPE=APP_XXX --var FORM_UUID=FORM_XXX
+openyida sample openyida-page-template form-fields --output .cache/openyida/forms/customer-fields.json
+openyida sample openyida-page-template canvas-form-drawer --output project/pages/src/customer-entry.canvas.jsx --var APP_TYPE=APP_XXX --var FORM_UUID=FORM_XXX
 openyida get-schema APP_XXX FORM_XXX
 openyida get-schema APP_XXX FORM_XXX --compact --resolve-fields "Customer Name,Status"
 openyida get-schema APP_XXX --all --output-dir .cache/schemas
@@ -519,7 +520,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida batch <file>\|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]` | Run OpenYida commands in batch |
 | `openyida flash-to-prd --file <path> --name "<project>"` | Convert flash notes or meeting notes to a PRD prompt |
 | `openyida ai <text\|image> [options]` | Call Yida AI text and image recognition APIs |
-| `openyida asset <status\|verify-url\|resolve\|generate> [options]` | Detect asset capability / verify image URLs / resolve materials |
+| `openyida asset <status\|resolve\|generate> [options]` | Detect asset capability / resolve materials |
 | `openyida cdn-config [options]` | Configure CDN / OSS upload |
 | `openyida cdn-upload <image-path>` | Upload image to CDN |
 | `openyida cdn-refresh [options]` | Refresh CDN cache |
@@ -550,7 +551,7 @@ The runner rejects public generic echo services such as httpbin and example.com.
 
 The opt-in `node scripts/e2e-real/connector/action-update-runner.js` regression uses the owner-confirmed login-free `www.aliwork.com` fixture and a single owned NONE-auth connector containing a target action plus one preservation sentinel. Enable it with `OPENYIDA_E2E=1 OPENYIDA_E2E_CONNECTOR_ACTION_UPDATE=1`. It verifies isolated `currentPage`, `pageSize`, `userLanguage`, `searchFieldJson`, and dynamic `_stamp` edits, restores each field and the final baseline, and persists only response structure, data count, and SHA-256. It never stores response row values or auth/profile/corp identifiers, never retries unknown writes, and intentionally leaves the owned connector as a `cleanup_blocked` residual because no proven delete API exists.
 
-`openyida asset resolve --hero <path-or-url> --product <path-or-url> --require-hero --upload-assets --json` is the preferred preflight for homepage visuals. It verifies public image URLs, uploads local images when CDN is configured, mirrors verified external images to CDN when `--upload-assets` is passed, and returns `materialStatus: final|draft|none` so agents do not claim an unfinished visual page is final.
+`openyida asset resolve --hero <path-or-url> --product <path-or-url> --require-hero --upload-assets --json` is the preferred preflight for homepage visuals. It handles local files and external image references in one flow, uploads or mirrors them when CDN is configured, and returns `materialStatus: final|draft|none` so agents do not claim an unfinished visual page is final.
 
 #### Environment and Localization
 

package/lib/app/display-page-readback.js

@@ -23,30 +23,10 @@ function fingerprint(value) {
   return crypto.createHash('sha256').update(normalized).digest('hex');
 }
 
-function rawFingerprint(value) {
-  if (typeof value !== 'string' || !value) {
-    return '';
-  }
-  return crypto.createHash('sha256').update(value, 'utf8').digest('hex');
-}
-
-function positiveSize(value) {
-  const size = Number(value);
-  return Number.isFinite(size) && size > 0 ? size : 0;
-}
-
-function sha256(value) {
-  const digest = String(value || '').toLowerCase();
-  return /^[a-f0-9]{64}$/.test(digest) ? digest : '';
-}
-
 function createEmptyDisplayInfo() {
   return {
     hasYidaCodeCanvas: false,
-    hasCodeBundle: false,
     hasNativeJsx: false,
-    codeBundleCount: 0,
-    bundleIds: [],
     runtimeCodeBytes: 0,
     sourceCodeBytes: 0,
     compiledCodeBytes: 0,
@@ -54,8 +34,6 @@ function createEmptyDisplayInfo() {
     componentCount: 0,
     canvasRuntimeCode: '',
     canvasSourceCode: '',
-    canvasRuntimeSha256: '',
-    canvasSourceSha256: '',
     nativeCompiledCode: '',
     nativeSourceCode: '',
   };
@@ -101,37 +79,12 @@ function traverseDisplayNodes(node, info) {
 
   if (node.componentName === 'YidaCodeCanvas') {
     const props = node.props || {};
-    const codeBundle = props.codeBundle && typeof props.codeBundle === 'object'
-      ? props.codeBundle
-      : null;
     info.hasYidaCodeCanvas = true;
     info.componentCount++;
-    if (typeof props.runtimeCode === 'string' && props.runtimeCode) {
-      info.canvasRuntimeCode = props.runtimeCode;
-    }
-    if (typeof props.code === 'string' && props.code) {
-      info.canvasSourceCode = props.code;
-    }
+    info.canvasRuntimeCode = props.runtimeCode || '';
+    info.canvasSourceCode = props.code || '';
     info.runtimeCodeBytes += codeBytes(props.runtimeCode);
     info.sourceCodeBytes += codeBytes(props.code);
-    if (codeBundle) {
-      const bundleId = String(codeBundle.bundleId || '');
-      const runtime = codeBundle.runtime && typeof codeBundle.runtime === 'object'
-        ? codeBundle.runtime
-        : {};
-      const source = codeBundle.source && typeof codeBundle.source === 'object'
-        ? codeBundle.source
-        : {};
-      info.hasCodeBundle = true;
-      info.codeBundleCount++;
-      if (bundleId && !info.bundleIds.includes(bundleId)) {
-        info.bundleIds.push(bundleId);
-      }
-      info.runtimeCodeBytes += positiveSize(runtime.size);
-      info.sourceCodeBytes += positiveSize(source.size);
-      info.canvasRuntimeSha256 = sha256(runtime.sha256) || info.canvasRuntimeSha256;
-      info.canvasSourceSha256 = sha256(source.sha256) || info.canvasSourceSha256;
-    }
     addImportedModules(info.importedModules, props.importedModules);
   } else if (node.componentName === 'Jsx') {
     info.hasNativeJsx = true;
@@ -180,9 +133,7 @@ function hasExpectedDisplayComponent(info, publishMode) {
     return false;
   }
   if (publishMode === 'canvas') {
-    return info.hasYidaCodeCanvas && (
-      info.runtimeCodeBytes > 0 || !!info.canvasRuntimeSha256
-    );
+    return info.hasYidaCodeCanvas && info.runtimeCodeBytes > 0;
   }
   return info.hasNativeJsx && info.compiledCodeBytes > 0;
 }
@@ -193,10 +144,7 @@ function summarizeDisplayPublishInfo(info) {
   }
   return {
     hasYidaCodeCanvas: info.hasYidaCodeCanvas,
-    hasCodeBundle: info.hasCodeBundle,
     hasNativeJsx: info.hasNativeJsx,
-    codeBundleCount: info.codeBundleCount,
-    bundleIds: info.bundleIds.slice(),
     runtimeCodeBytes: info.runtimeCodeBytes,
     sourceCodeBytes: info.sourceCodeBytes,
     compiledCodeBytes: info.compiledCodeBytes,
@@ -211,13 +159,8 @@ function verifyPublishedContentMatch(readbackSchema, expectedSchemaContent, publ
   const displayComponentPresent = hasExpectedDisplayComponent(readbackInfo, publishMode);
   const readbackArtifact = getPublishArtifact(readbackInfo, publishMode);
   const expectedArtifact = getPublishArtifact(expectedInfo, publishMode);
-  const codeBundleReadback = publishMode === 'canvas' && readbackInfo && readbackInfo.hasCodeBundle;
-  const readbackFingerprint = codeBundleReadback
-    ? readbackInfo.canvasRuntimeSha256
-    : fingerprint(readbackArtifact);
-  const expectedFingerprint = codeBundleReadback
-    ? rawFingerprint(expectedArtifact)
-    : fingerprint(expectedArtifact);
+  const readbackFingerprint = fingerprint(readbackArtifact);
+  const expectedFingerprint = fingerprint(expectedArtifact);
 
   return {
     readbackInfo,
@@ -237,7 +180,6 @@ function verifyPublishedContentMatch(readbackSchema, expectedSchemaContent, publ
 module.exports = {
   extractDisplayPublishInfo,
   fingerprint,
-  rawFingerprint,
   hasExpectedDisplayComponent,
   parseSchemaContent,
   summarizeDisplayPublishInfo,

package/lib/app/get-schema.js

@@ -9,7 +9,6 @@
 
 'use strict';
 
-const crypto = require('crypto');
 const fs = require('fs');
 const path = require('path');
 const {
@@ -17,7 +16,6 @@ const {
   triggerLogin,
   resolveBaseUrl,
   httpGet,
-  httpGetRedirectText,
   requestWithAutoLogin,
 } = require('../core/utils');
 const { t } = require('../core/i18n');
@@ -229,122 +227,6 @@ function resolveSchemaContent(schemaResult) {
   return parseJsonObject(content);
 }
 
-function validateCodeBundleDescriptor(codeBundle) {
-  const bundleId = String(codeBundle && codeBundle.bundleId || '');
-  const source = codeBundle && codeBundle.source;
-  const runtime = codeBundle && codeBundle.runtime;
-  const validSha256 = value => /^[a-f0-9]{64}$/.test(String(value || ''));
-  const validSize = value => Number.isFinite(Number(value)) && Number(value) > 0
-    && Number(value) <= 5 * 1024 * 1024;
-  if (!validSha256(bundleId)
-    || !source || !runtime
-    || !validSha256(source.sha256) || !validSize(source.size)
-    || !validSha256(runtime.sha256) || !validSize(runtime.size)
-    || Number(source.size) + Number(runtime.size) > 5 * 1024 * 1024) {
-    throw new Error('YidaCodeCanvas codeBundle 描述不合法');
-  }
-  return { bundleId, source, runtime };
-}
-
-function collectCodeBundleCanvases(content) {
-  const canvases = [];
-  function traverse(node) {
-    if (Array.isArray(node)) {
-      node.forEach(traverse);
-      return;
-    }
-    if (!node || typeof node !== 'object') {
-      return;
-    }
-    if (node.componentName === 'YidaCodeCanvas' && node.id && node.props
-      && node.props.codeBundle && typeof node.props.codeBundle === 'object') {
-      canvases.push({ props: node.props, descriptor: validateCodeBundleDescriptor(node.props.codeBundle) });
-    }
-    Object.values(node).forEach(traverse);
-  }
-  traverse(content);
-  return canvases;
-}
-
-async function downloadCodeBundleArtifact(appType, formUuid, bundleId, artifact, descriptor, authRef) {
-  let responseMetadata = null;
-  const expectedContentTypes = artifact === 'source'
-    ? ['text/plain']
-    : ['application/javascript', 'text/javascript', 'application/x-javascript'];
-  const value = await requestWithAutoLogin((auth) => httpGetRedirectText(
-    auth.baseUrl,
-    `/alibaba/web/${appType}/query/codeBundle/download.json`,
-    { formUuid, bundleId, artifact },
-    {
-      silentStatus: true,
-      maxBytes: 5 * 1024 * 1024,
-      expectedContentTypes,
-      onResponseMetadata: metadata => {
-        responseMetadata = metadata;
-      },
-    }
-  ), authRef);
-  if (typeof value !== 'string') {
-    const message = value && (value.errorMsg || value.message);
-    throw new Error(message || `下载 CodeBundle ${artifact} 失败`);
-  }
-  const size = Buffer.byteLength(value, 'utf8');
-  const digest = crypto.createHash('sha256').update(value, 'utf8').digest('hex');
-  if (size !== Number(descriptor.size) || digest !== descriptor.sha256) {
-    const context = responseMetadata && responseMetadata.context
-      ? responseMetadata.context
-      : `baseUrl=${authRef && authRef.baseUrl || 'unknown'}`;
-    const error = new Error(t('common.code_bundle_integrity_failed', artifact, context));
-    error.code = 'CODE_BUNDLE_INTEGRITY_MISMATCH';
-    error.details = {
-      artifact,
-      expectedSize: Number(descriptor.size),
-      actualSize: size,
-      expectedSha256: descriptor.sha256,
-      actualSha256: digest,
-      ...(responseMetadata || {}),
-    };
-    throw error;
-  }
-  return value;
-}
-
-async function resolveCodeBundleSchema(schemaResult, appType, formUuid, authRef) {
-  const content = resolveSchemaContent(schemaResult);
-  if (!content) {
-    return schemaResult;
-  }
-  const canvases = collectCodeBundleCanvases(content);
-  if (canvases.length === 0) {
-    return schemaResult;
-  }
-
-  const downloaded = new Map();
-  for (const canvas of canvases) {
-    const { bundleId, source, runtime } = canvas.descriptor;
-    let code = downloaded.get(bundleId);
-    if (!code) {
-      const [sourceCode, runtimeCode] = await Promise.all([
-        downloadCodeBundleArtifact(appType, formUuid, bundleId, 'source', source, authRef),
-        downloadCodeBundleArtifact(appType, formUuid, bundleId, 'runtime', runtime, authRef),
-      ]);
-      code = { sourceCode, runtimeCode };
-      downloaded.set(bundleId, code);
-    }
-    canvas.props.code = code.sourceCode;
-    canvas.props.runtimeCode = code.runtimeCode;
-    delete canvas.props.codeBundle;
-  }
-
-  if (schemaResult && Object.prototype.hasOwnProperty.call(schemaResult, 'content')) {
-    schemaResult.content = typeof schemaResult.content === 'string'
-      ? JSON.stringify(content)
-      : content;
-    return schemaResult;
-  }
-  return content;
-}
-
 function addImportedModules(target, value) {
   let modules = value;
   if (typeof modules === 'string') {
@@ -387,10 +269,7 @@ function extractDisplayPageSummary(schemaResult) {
 
   const displayPage = {
     hasYidaCodeCanvas: false,
-    hasCodeBundle: false,
     hasNativeJsx: false,
-    codeBundleCount: 0,
-    bundleIds: [],
     runtimeCodeBytes: 0,
     sourceCodeBytes: 0,
     compiledCodeBytes: 0,
@@ -412,29 +291,10 @@ function extractDisplayPageSummary(schemaResult) {
 
     if (node.componentName === 'YidaCodeCanvas' && isComponentInstance(node)) {
       const props = node.props || {};
-      const codeBundle = props.codeBundle && typeof props.codeBundle === 'object'
-        ? props.codeBundle
-        : null;
       displayPage.hasYidaCodeCanvas = true;
       displayPage.componentCount++;
       displayPage.runtimeCodeBytes += codeBytes(props.runtimeCode);
       displayPage.sourceCodeBytes += codeBytes(props.code);
-      if (codeBundle) {
-        const source = codeBundle.source && typeof codeBundle.source === 'object'
-          ? codeBundle.source
-          : {};
-        const runtime = codeBundle.runtime && typeof codeBundle.runtime === 'object'
-          ? codeBundle.runtime
-          : {};
-        const bundleId = String(codeBundle.bundleId || '');
-        displayPage.hasCodeBundle = true;
-        displayPage.codeBundleCount++;
-        displayPage.sourceCodeBytes += Number(source.size) || 0;
-        displayPage.runtimeCodeBytes += Number(runtime.size) || 0;
-        if (bundleId && !displayPage.bundleIds.includes(bundleId)) {
-          displayPage.bundleIds.push(bundleId);
-        }
-      }
       addImportedModules(displayPage.importedModules, props.importedModules);
     } else if (node.componentName === 'Jsx' && isComponentInstance(node)) {
       displayPage.hasNativeJsx = true;
@@ -721,15 +581,12 @@ async function mapLimit(items, limit, iterator) {
   return results;
 }
 
-async function fetchSchemaRecord(appType, form, authRef, retries, options = {}) {
+async function fetchSchemaRecord(appType, form, authRef, retries) {
   let lastError = null;
   for (let attempt = 0; attempt <= retries; attempt++) {
     try {
       const result = await fetchSchema(appType, form.formUuid, authRef);
       if (isSuccessfulSchemaResult(result)) {
-        const resolvedResult = options.resolveCodeBundles
-          ? await resolveCodeBundleSchema(result, appType, form.formUuid, authRef)
-          : result;
         const record = {
           formUuid: form.formUuid,
           formName: form.formName,
@@ -737,10 +594,10 @@ async function fetchSchemaRecord(appType, form, authRef, retries, options = {})
           pathName: form.pathName,
           success: true,
           attempts: attempt + 1,
-          fieldSummary: extractFieldSummary(resolvedResult),
-          schema: resolvedResult,
+          fieldSummary: extractFieldSummary(result),
+          schema: result,
         };
-        const displayPage = extractDisplayPageSummary(resolvedResult);
+        const displayPage = extractDisplayPageSummary(result);
         if (displayPage) {
           record.displayPage = displayPage;
         }
@@ -837,10 +694,6 @@ async function runSingle(parsed, authRef) {
     throwCommandError(errorMsg);
   }
 
-  if (!parsed.field && !parsed.compact && !parsed.summaryJson) {
-    result = await resolveCodeBundleSchema(result, parsed.appType, parsed.formUuid, authRef);
-  }
-
   // 保留既有 --field 返回结构；新 contract 仅由 --compact / --resolve-fields 触发。
   if (parsed.field) {
     const allFieldNodes = collectFieldNodes(result);
@@ -929,9 +782,7 @@ async function runBatch(parsed, authRef) {
   info(`  批量获取 ${forms.length} 个表单 Schema，并发 ${parsed.concurrency}，重试 ${parsed.retries}`);
 
   const records = await mapLimit(forms, parsed.concurrency, async (form) => {
-    const record = await fetchSchemaRecord(parsed.appType, form, authRef, parsed.retries, {
-      resolveCodeBundles: !parsed.summaryJson,
-    });
+    const record = await fetchSchemaRecord(parsed.appType, form, authRef, parsed.retries);
     if (record.success && parsed.analysisJson) {
       record.semanticAnalysis = buildSemanticAnalysis(
         parsed.appType,
@@ -997,9 +848,5 @@ module.exports = {
   fetchSchemaRecord,
   collectFieldNodes,
   findFieldNode,
-  validateCodeBundleDescriptor,
-  collectCodeBundleCanvases,
-  downloadCodeBundleArtifact,
-  resolveCodeBundleSchema,
   run,
 };