openyida 2026.9.4 → 2026.9.7

package/lib/app/services/canvas-page-schema-builder.js

@@ -269,14 +269,187 @@ function openyidaCreateUtilsBridge(context, yidaBridge) {
   return bridge;
 }
 
+function openyidaConnectorCsrfToken() {
+  var targets = openyidaYidaApiBridgeTargets();
+  for (var i = 0; i < targets.length; i += 1) {
+    try {
+      var config = targets[i] && targets[i].g_config;
+      if (config && config._csrf_token) {
+        return String(config._csrf_token);
+      }
+    } catch (err) {}
+  }
+  return '';
+}
+
+function openyidaConnectorBridgeError(code, message) {
+  var error = new Error(message);
+  error.code = code;
+  return error;
+}
+
+function openyidaResolveConnectorName(binding) {
+  var connectorName = binding && binding.connectorName ? String(binding.connectorName) : '';
+  var legacyConnectorId = binding && binding.connectorId ? String(binding.connectorId) : '';
+  if (!connectorName && legacyConnectorId.indexOf('Http_') === 0) {
+    connectorName = legacyConnectorId;
+  }
+  if (!connectorName || connectorName.indexOf('Http_') !== 0) {
+    throw openyidaConnectorBridgeError(
+      'CONNECTOR_RUNTIME_NAME_REQUIRED',
+      'connectorName must be the internal Http_* connector name; numeric connectorId is only for CLI management'
+    );
+  }
+  if (legacyConnectorId.indexOf('Http_') === 0 && legacyConnectorId !== connectorName) {
+    throw openyidaConnectorBridgeError(
+      'CONNECTOR_RUNTIME_IDENTITY_MISMATCH',
+      'connectorName and legacy connectorId refer to different connectors'
+    );
+  }
+  return connectorName;
+}
+
+function openyidaParseConnectorJson(value) {
+  if (typeof value !== 'string') { return value; }
+  try { return JSON.parse(value); } catch (err) { return value; }
+}
+
+function openyidaConnectorErrorMessage(value, depth) {
+  if (depth > 4 || value === null || value === undefined) { return ''; }
+  var parsed = openyidaParseConnectorJson(value);
+  if (typeof parsed === 'string') { return parsed; }
+  if (typeof parsed !== 'object') { return ''; }
+  var directKeys = ['errorMsg', 'errorMessage', 'message'];
+  for (var i = 0; i < directKeys.length; i += 1) {
+    var direct = parsed[directKeys[i]];
+    if (direct !== undefined && direct !== null && String(direct).trim()) {
+      return String(direct);
+    }
+  }
+  if (parsed.error && typeof parsed.error === 'object') {
+    var nestedError = openyidaConnectorErrorMessage(parsed.error, depth + 1);
+    if (nestedError) { return nestedError; }
+  }
+  if (Array.isArray(parsed.errors) && parsed.errors.length > 0) {
+    var listedError = openyidaConnectorErrorMessage(parsed.errors[0], depth + 1);
+    if (listedError) { return listedError; }
+  }
+  var nestedKeys = ['content', 'serviceReturnValue', 'result', 'data'];
+  for (var j = 0; j < nestedKeys.length; j += 1) {
+    if (parsed[nestedKeys[j]] !== undefined && parsed[nestedKeys[j]] !== null) {
+      var nested = openyidaConnectorErrorMessage(parsed[nestedKeys[j]], depth + 1);
+      if (nested) { return nested; }
+    }
+  }
+  return '';
+}
+
+function openyidaConnectorPayloadFailed(value) {
+  var parsed = openyidaParseConnectorJson(value);
+  return !!(parsed && typeof parsed === 'object'
+    && (parsed.success === false || parsed.hasError === true));
+}
+
+function openyidaNormalizeConnectorInputs(inputs) {
+  var source = inputs && typeof inputs === 'object' ? inputs : {};
+  var body = Object.prototype.hasOwnProperty.call(source, 'body') ? source.body : {};
+  if (body === null || body === undefined) { body = {}; }
+  if (typeof body !== 'object' || Array.isArray(body)) {
+    throw openyidaConnectorBridgeError(
+      'CONNECTOR_BODY_OBJECT_REQUIRED',
+      'connector inputs.body must be an object; pass the value directly instead of JSON.stringify(...)'
+    );
+  }
+  return {
+    path: source.path && typeof source.path === 'object' ? source.path : {},
+    query: source.query && typeof source.query === 'object' ? source.query : {},
+    header: source.header && typeof source.header === 'object' ? source.header : {},
+    body: body
+  };
+}
+
+function openyidaCreateConnectorApiBridge() {
+  function invoke(binding, inputs) {
+    if (!binding || !binding.operationId) {
+      return Promise.reject(openyidaConnectorBridgeError(
+        'CONNECTOR_RUNTIME_IDENTITY_REQUIRED',
+        'connectorName and operationId are required'
+      ));
+    }
+    var connectorName;
+    var normalizedInputs;
+    try {
+      connectorName = openyidaResolveConnectorName(binding);
+      normalizedInputs = openyidaNormalizeConnectorInputs(inputs);
+    } catch (error) {
+      return Promise.reject(error);
+    }
+    var connectorInfo = {
+      connectorId: connectorName,
+      actionId: String(binding.operationId),
+      type: 'httpConnector'
+    };
+    if (binding.connectionId !== undefined && binding.connectionId !== null && binding.connectionId !== '') {
+      connectorInfo.connection = String(binding.connectionId);
+    }
+    var csrfToken = openyidaConnectorCsrfToken();
+    var endpoint = '/query/publicService/invokeService.json';
+    if (csrfToken) {
+      endpoint += '?_csrf_token=' + encodeURIComponent(csrfToken);
+    }
+    var body = 'inputs=' + encodeURIComponent(JSON.stringify(normalizedInputs))
+      + '&serviceInfo=' + encodeURIComponent(JSON.stringify({ connectorInfo: connectorInfo }));
+    var headers = { 'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8' };
+    if (csrfToken) {
+      headers.global_csrf_token = csrfToken;
+    }
+    if (typeof window === 'undefined' || typeof window.fetch !== 'function') {
+      return Promise.reject(new Error('window.fetch is not available'));
+    }
+    return window.fetch(endpoint, {
+      method: 'POST',
+      credentials: 'include',
+      headers: headers,
+      body: body
+    }).then(function(response) {
+      if (!response || response.ok === false || typeof response.json !== 'function') {
+        throw new Error('connector invocation HTTP request failed');
+      }
+      return response.json();
+    }).then(function(payload) {
+      if (!payload || openyidaConnectorPayloadFailed(payload)) {
+        throw openyidaConnectorBridgeError(
+          'CONNECTOR_INVOCATION_FAILED',
+          openyidaConnectorErrorMessage(payload, 0) || 'connector invocation failed'
+        );
+      }
+      var value = payload.content && Object.prototype.hasOwnProperty.call(payload.content, 'serviceReturnValue')
+        ? payload.content.serviceReturnValue
+        : payload.content;
+      value = openyidaParseConnectorJson(value);
+      if (openyidaConnectorPayloadFailed(value)) {
+        throw openyidaConnectorBridgeError(
+          'CONNECTOR_SERVICE_FAILED',
+          openyidaConnectorErrorMessage(value, 0) || 'connector service returned failure'
+        );
+      }
+      return value;
+    });
+  }
+  return { ready: true, invoke: invoke };
+}
+
 function openyidaInstallYidaApiBridge() {
   var bridge = openyidaCreateYidaApiBridge(this);
   var utilsBridge = openyidaCreateUtilsBridge(this, bridge);
+  var connectorBridge = openyidaCreateConnectorApiBridge();
   try {
     window.__OPENYIDA_YIDA_API__ = bridge;
     window.openyidaYidaApi = bridge;
     window.__OPENYIDA_UTILS__ = utilsBridge;
     window.openyidaUtils = utilsBridge;
+    window.__OPENYIDA_CONNECTOR_API__ = connectorBridge;
+    window.openyidaConnectorApi = connectorBridge;
   } catch (err) {}
   openyidaYidaApiBridgeTargets().forEach(function(target) {
     try {
@@ -284,6 +457,8 @@ function openyidaInstallYidaApiBridge() {
       target.openyidaYidaApi = bridge;
       target.__OPENYIDA_UTILS__ = utilsBridge;
       target.openyidaUtils = utilsBridge;
+      target.__OPENYIDA_CONNECTOR_API__ = connectorBridge;
+      target.openyidaConnectorApi = connectorBridge;
     } catch (err) {}
   });
   return bridge;

package/lib/app/update-app.js

@@ -294,6 +294,8 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
 
   const currentThemeColor = pickAppField(currentApp, 'themeColor', 'THEME_COLOR');
   const currentCustomThemeStyle = pickAppField(currentApp, 'customThemeStyle', 'CUSTOM_THEME_STYLE');
+  const addWaterMark = pickAppField(currentApp, 'addWaterMark', 'ADDWATERMARK');
+  const sentryMode = pickAppField(currentApp, 'sentryMode', 'SENTRY_MODE');
   if (params.colour === 'custom' && !params.themeColor && !currentThemeColor) {
     throw new Error(t('update_app.custom_theme_color_required'));
   }
@@ -342,10 +344,14 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
     navigation: currentApp.navigation || (currentApp.config && currentApp.config.NAVIGATION) || 'TODO,DONE,SUBMIT',
     pageHeader: currentApp.pageHeader || '',
     pageFooter: currentApp.pageFooter || '',
-    addWaterMark: currentApp.addWaterMark || (currentApp.config && currentApp.config.ADDWATERMARK) || 'y',
-    sentryMode: currentApp.sentryMode || (currentApp.config && currentApp.config.SENTRY_MODE) || 'y',
   };
 
+  if (addWaterMark !== undefined && addWaterMark !== null) {
+    postDataObj.addWaterMark = addWaterMark;
+  }
+  if (sentryMode !== undefined && sentryMode !== null) {
+    postDataObj.sentryMode = sentryMode;
+  }
   if (params.hideAppNav !== null && params.hideAppNav !== undefined) {
     postDataObj.hideAppNav = params.hideAppNav;
   } else {

package/lib/bridge/bridge.js

@@ -389,11 +389,19 @@ function normalizeCreateAppInput(body = {}) {
 }
 
 function normalizeAppListInput(body = {}) {
-  const size = Number(body.size || body.pageSize || 20);
+  const type = String(body.type ?? 'managed').trim();
+  const page = Number(body.page ?? body.pageIndex ?? 1);
+  const size = Number(body.size ?? body.pageSize ?? 16);
+  if (!['managed', 'created'].includes(type)) {
+    throw new Error('type must be managed or created');
+  }
+  if (!Number.isInteger(page) || page < 1) {
+    throw new Error('page must be a positive integer');
+  }
   if (!Number.isInteger(size) || size < 1 || size > 100) {
     throw new Error('size must be an integer between 1 and 100');
   }
-  return { size };
+  return { type, page, size };
 }
 
 function parseCreateAppJsonOutput(stdout) {
@@ -723,8 +731,12 @@ function defaultListApps(params = {}) {
   const args = [
     cliPath,
     'app-list',
+    '--type',
+    params.type ?? 'managed',
+    '--page',
+    String(params.page ?? 1),
     '--size',
-    String(params.size || 20),
+    String(params.size ?? 16),
   ];
 
   return new Promise((resolve, reject) => {

package/lib/connector/api.js

@@ -322,9 +322,11 @@ async function saveConnector(params, authRef) {
   }, authRef);
   assertConnectorReadback(params, detail);
 
+  const detailConnectorId = detail && (detail.id || detail.connectorId);
+
   return {
     ...result,
-    connectorId,
+    connectorId: detailConnectorId || connectorId,
     connectorName,
     detail,
     readbackVerified: true,

package/lib/connector/connector-add-action.js

@@ -28,6 +28,7 @@ const {
   createActionSnapshot,
   mergeAddedOperations,
 } = require('./connector-action-update');
+const { assertNoExplicitSystemToken } = require('./yida-system-token');
 
 function showUsage() {
   console.log(`
@@ -105,6 +106,7 @@ async function run(args) {
       newOperations = [newOperations];
     }
     newOperations = normalizeOperations(newOperations);
+    assertNoExplicitSystemToken(newOperations, { source: '--operations' });
     console.log(`✓ 已加载 ${newOperations.length} 个执行动作`);
     newOperations.forEach((operation, index) => {
       console.log(`  [${index + 1}] ${operation.operationId}: ${operation.summary}`);

package/lib/connector/connector-create-connection.js

@@ -7,14 +7,15 @@
  *   --username <username>   基本身份验证 - 用户名
  *   --password <password>   基本身份验证 - 密码
  *   --api-key <key>         API 密钥 - 密钥值
- *   --app-key <key>         钉钉开放平台 - App Key
- *   --app-secret <secret>   钉钉开放平台 - App Secret
  *   --app-code <code>       阿里云 API 网关 - AppCode
+ *   --interactive           在当前终端隐藏输入钉钉 App Key / App Secret
  */
 
 'use strict';
 const { fail } = require('../core/chalk');
 const { safeJsonStringify } = require('../core/redact');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
 
 const {
   getAuthRef,
@@ -36,14 +37,13 @@ function showUsage() {
   --username <username>   基本身份验证 - 用户名
   --password <password>   基本身份验证 - 密码
   --api-key <key>         API 密钥 - 密钥值
-  --app-key <key>         钉钉开放平台 - App Key
-  --app-secret <secret>   钉钉开放平台 - App Secret
   --app-code <code>       阿里云 API 网关 - AppCode
+  --interactive           在 TTY 终端隐藏输入钉钉 App Key / App Secret（推荐）
 
 示例:
   openyida connector create-connection 910264 "测试账号" --username "admin" --password "123456"
   openyida connector create-connection 910258 "生产密钥" --api-key "sk-xxxxxxxx"
-  openyida connector create-connection 910244 "钉钉账号" --app-key "dingxxx" --app-secret "xxx"
+  openyida connector create-connection 910244 "钉钉账号" --interactive
   openyida connector create-connection 910264 "阿里云账号" --app-code "your-app-code"
 `);
 }
@@ -85,6 +85,98 @@ function buildSecurityValue(options, authType) {
   }
 }
 
+function secretInputError(code, message, details = {}) {
+  return new CliError(message, {
+    code,
+    details: {
+      retrySafe: true,
+      sideEffectState: 'none',
+      ...details,
+    },
+  });
+}
+
+function readHiddenLine(prompt, input = process.stdin, output = process.stderr) {
+  if (!input || !output || input.isTTY !== true || typeof input.setRawMode !== 'function') {
+    return Promise.reject(secretInputError(
+      'CONNECTOR_SECRET_INPUT_TTY_REQUIRED',
+      t('connector_auth.tty_required'),
+      { nextStep: t('connector_auth.tty_next_step') }
+    ));
+  }
+
+  return new Promise((resolve, reject) => {
+    let value = '';
+    const wasRaw = !!input.isRaw;
+    const cleanup = () => {
+      input.removeListener('data', onData);
+      if (!wasRaw) {input.setRawMode(false);}
+      input.pause();
+    };
+    const finish = () => {
+      cleanup();
+      output.write('\n');
+      resolve(value);
+    };
+    const abort = () => {
+      cleanup();
+      output.write('\n');
+      reject(secretInputError('CONNECTOR_SECRET_INPUT_CANCELLED', t('connector_auth.input_cancelled')));
+    };
+    const onData = (chunk) => {
+      const text = String(chunk);
+      for (const char of text) {
+        if (char === '\u0003') {abort(); return;}
+        if (char === '\r' || char === '\n') {finish(); return;}
+        if (char === '\u007f' || char === '\b') {
+          value = Array.from(value).slice(0, -1).join('');
+        } else if (char >= ' ') {
+          value += char;
+        }
+      }
+    };
+
+    output.write(prompt);
+    input.setEncoding('utf8');
+    input.setRawMode(true);
+    input.resume();
+    input.on('data', onData);
+  });
+}
+
+async function collectInteractiveCredentials(options, authType, deps = {}) {
+  if (!options.interactive) {return options;}
+  if (options.appKey || options.appSecret) {
+    throw secretInputError(
+      'CONNECTOR_SECRET_INPUT_CONFLICT',
+      t('connector_auth.interactive_conflict')
+    );
+  }
+  if (authType !== 'DingAuth' && authType !== 'DingTrustGW') {
+    throw secretInputError(
+      'CONNECTOR_INTERACTIVE_AUTH_UNSUPPORTED',
+      t('connector_auth.interactive_auth_unsupported', authType)
+    );
+  }
+
+  const readSecret = deps.readSecret || readHiddenLine;
+  const input = deps.input || process.stdin;
+  const output = deps.output || process.stderr;
+  if (input.isTTY !== true || typeof input.setRawMode !== 'function') {
+    throw secretInputError(
+      'CONNECTOR_SECRET_INPUT_TTY_REQUIRED',
+      t('connector_auth.tty_required'),
+      { nextStep: t('connector_auth.tty_next_step') }
+    );
+  }
+  const appKey = await readSecret(t('connector_auth.prompt_app_key'), input, output);
+  const appSecret = await readSecret(t('connector_auth.prompt_app_secret'), input, output);
+  if (!appKey || !appSecret) {
+    throw secretInputError('CONNECTOR_SECRET_INPUT_EMPTY', t('connector_auth.input_empty'));
+  }
+  return { ...options, appKey, appSecret };
+}
+
 function parseArgs(args) {
   const options = {
     connectorId: args[0],
@@ -111,6 +203,9 @@ function parseArgs(args) {
       case '--app-code':
         options.appCode = args[++i];
         break;
+      case '--interactive':
+        options.interactive = true;
+        break;
       case '--json':
         options.json = true;
         break;
@@ -120,18 +215,19 @@ function parseArgs(args) {
   return options;
 }
 
-async function run(args) {
+async function run(args, deps = {}) {
   if (!args || args.length < 2 || args[0] === '--help' || args[0] === '-h') {
     showUsage();
     process.exit(0);
   }
 
   const options = parseArgs(args);
+  const log = options.json ? () => {} : console.log;
   const authRef = getAuthRef();
 
-  console.log('🔧 正在创建鉴权账号...\n');
-  console.log(`连接器 ID: ${options.connectorId}`);
-  console.log(`账号名称: ${options.connectionName}\n`);
+  log('🔧 正在创建鉴权账号...\n');
+  log(`连接器 ID: ${options.connectorId}`);
+  log(`账号名称: ${options.connectionName}\n`);
 
   const connector = await findConnectorById(options.connectorId, authRef);
   if (!connector) {
@@ -139,8 +235,8 @@ async function run(args) {
     process.exit(1);
   }
 
-  console.log(`连接器: ${connector.displayName}`);
-  console.log(`连接器名: ${connector.connectorName}\n`);
+  log(`连接器: ${connector.displayName}`);
+  log(`连接器名: ${connector.connectorName}\n`);
 
   const detail = await getConnectorDetail(connector.connectorName, authRef);
   const securitySchemes = JSON.parse(detail.securitySchemes || '{}');
@@ -151,9 +247,10 @@ async function run(args) {
     process.exit(1);
   }
 
-  console.log(`鉴权类型: ${authType}\n`);
+  log(`鉴权类型: ${authType}\n`);
 
-  const securityValue = buildSecurityValue(options, authType);
+  const credentialOptions = await collectInteractiveCredentials(options, authType, deps);
+  const securityValue = buildSecurityValue(credentialOptions, authType);
 
   const result = await createConnection({
     connectionName: options.connectionName,
@@ -163,8 +260,8 @@ async function run(args) {
     authType: AUTH_TYPE_CODES[authType] ?? AUTH_TYPE_CODES.NONE,
   }, authRef);
 
-  console.log('✅ 鉴权账号创建成功!');
-  console.log(`账号 ID: ${result.id || result.connectionId || '-'}`);
+  log('✅ 鉴权账号创建成功!');
+  log(`账号 ID: ${result.id || result.connectionId || '-'}`);
   const output = {
     success: true,
     connectionId: result.id || result.connectionId,
@@ -177,4 +274,10 @@ async function run(args) {
   return output;
 }
 
-module.exports = { run };
+module.exports = {
+  buildSecurityValue,
+  collectInteractiveCredentials,
+  parseArgs,
+  readHiddenLine,
+  run,
+};

package/lib/connector/connector-create.js

@@ -13,8 +13,6 @@
  *   --api-key-label <label>    API Key 显示标签
  *   --api-key-name <name>      API Key 参数名
  *   --api-key-location <loc>   API Key 位置: HEADER 或 QUERY
- *   --app-key <key>            钉钉 App Key
- *   --app-secret <secret>      钉钉 App Secret
  *   --desc <description>       连接器描述
  *   --icon <icon>              图标代码
  *   --operations <file>        执行动作配置文件 (JSON 格式，创建时必填)
@@ -33,8 +31,11 @@ const {
 } = require('./api');
 const { normalizeOperations } = require('./operation-normalizer');
 const { safeJsonStringify } = require('../core/redact');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
 const { HTTP_CONNECTOR_MODE } = require('./contract');
 const { buildConnectorSaveParams, createActionSnapshot } = require('./connector-action-update');
+const { assertNoExplicitSystemToken } = require('./yida-system-token');
 
 function showUsage() {
   console.log(`
@@ -53,8 +54,6 @@ function showUsage() {
   --api-key-label <label>    API Key 显示标签 (默认: API Key)
   --api-key-name <name>      API Key 参数名 (默认: X-API-Key)
   --api-key-location <loc>   API Key 位置: HEADER 或 QUERY (默认: HEADER)
-  --app-key <key>            钉钉 App Key
-  --app-secret <secret>      钉钉 App Secret
   --desc <description>       连接器描述
   --icon <icon>              图标代码 (默认: chaxun%%#FFA200)
   --operations <file>        执行动作配置文件 (JSON 格式，创建时必填)
@@ -136,11 +135,15 @@ function parseArgs(args) {
         options.apiKeyLocation = args[++i]?.toUpperCase();
         break;
       case '--app-key':
-        options.appKey = args[++i];
-        break;
       case '--app-secret':
-        options.appSecret = args[++i];
-        break;
+        throw new CliError(t('connector_auth.create_rejects_credentials'), {
+          code: 'CONNECTOR_CREDENTIALS_NOT_ACCEPTED_ON_CREATE',
+          details: {
+            retrySafe: true,
+            sideEffectState: 'none',
+            nextStep: t('connector_auth.create_credentials_next_step'),
+          },
+        });
       case '--desc':
         options.description = args[++i];
         break;
@@ -179,9 +182,6 @@ function buildSecuritySchemes(options) {
         },
       });
     case 'DINGTALK':
-      if (!options.appKey || !options.appSecret) {
-        throw new Error('钉钉鉴权需要提供 --app-key 和 --app-secret');
-      }
       return JSON.stringify({ DingAuth: {} });
     case 'ALIYUN':
       return JSON.stringify({ AliyunApiGateway: {} });
@@ -222,12 +222,13 @@ async function run(args) {
   }
 
   const options = parseArgs(args);
+  const log = options.json ? () => {} : console.log;
   const authRef = getAuthRef();
 
   // 更新模式
   if (options.isUpdateMode) {
-    console.log('🔧 正在更新连接器...\n');
-    console.log(`连接器 ID: ${options.connectorId}\n`);
+    log('🔧 正在更新连接器...\n');
+    log(`连接器 ID: ${options.connectorId}\n`);
 
     const connector = await findConnectorById(options.connectorId, authRef);
     if (!connector) {
@@ -235,8 +236,8 @@ async function run(args) {
       process.exit(1);
     }
 
-    console.log(`找到连接器: ${connector.displayName}`);
-    console.log(`当前描述: ${connector.connectorDesc || '(空)'}\n`);
+    log(`找到连接器: ${connector.displayName}`);
+    log(`当前描述: ${connector.connectorDesc || '(空)'}\n`);
 
     const detail = await getConnectorDetail(connector.connectorName, authRef);
     const snapshot = createActionSnapshot({
@@ -251,17 +252,17 @@ async function run(args) {
       connectorDesc: newDesc,
     }, authRef);
 
-    console.log('✅ 连接器更新成功!');
-    console.log('\n新描述:');
-    console.log(newDesc);
+    log('✅ 连接器更新成功!');
+    log('\n新描述:');
+    log(newDesc);
     return;
   }
 
   // 创建模式
-  console.log('🔧 正在创建连接器...\n');
-  console.log(`名称: ${options.name}`);
-  console.log(`基础域名: ${options.baseUrl}`);
-  console.log(`鉴权方式: ${options.authType}`);
+  log('🔧 正在创建连接器...\n');
+  log(`名称: ${options.name}`);
+  log(`基础域名: ${options.baseUrl}`);
+  log(`鉴权方式: ${options.authType}`);
 
   if (!options.operationsFile) {
     fail('错误: 创建连接器必须提供 --operations 参数');
@@ -278,7 +279,8 @@ async function run(args) {
       process.exit(1);
     }
     operations = normalizeOperations(operations);
-    console.log(`✓ 已加载 ${operations.length} 个执行动作`);
+    assertNoExplicitSystemToken(operations, { source: '--operations' });
+    log(`✓ 已加载 ${operations.length} 个执行动作`);
   } catch (e) {
     fail(`读取执行动作配置文件失败: ${e.message}`);
     process.exit(1);
@@ -309,25 +311,31 @@ async function run(args) {
   const detailUrl = connectorId
     ? `https://yidalogin.aliwork.com/platformManage/customConnectorFactory/update?id=${connectorId}&connectorName=${connectorName}&mode=http`
     : null;
+  const accountManageUrl = connectorName
+    ? `https://yidalogin.aliwork.com/platformManage/customConnectorFactory?connectorName=${encodeURIComponent(connectorName)}&action=accountManage`
+    : null;
 
-  console.log('\n✅ 连接器创建成功!');
+  log('\n✅ 连接器创建成功!');
   if (connectorId) {
-    console.log(`\nID: ${connectorId}`);
+    log(`\nID: ${connectorId}`);
   }
-  console.log(`连接器名称: ${connectorName}`);
-  console.log(`显示名称: ${options.name}`);
-  console.log(`基础域名: ${options.baseUrl}`);
+  log(`连接器名称: ${connectorName}`);
+  log(`显示名称: ${options.name}`);
+  log(`基础域名: ${options.baseUrl}`);
   if (detailUrl) {
-    console.log(`\n🔗 查看连接器:\n   ${detailUrl}`);
+    log(`\n🔗 查看连接器:\n   ${detailUrl}`);
+    log(`\n🔐 添加授权账号:\n   ${accountManageUrl}`);
   } else {
-    console.log('\n💡 下一步: 查看连接器列表获取 ID');
-    console.log('   openyida connector list');
+    log('\n💡 下一步: 查看连接器列表获取 ID');
+    log('   openyida connector list');
   }
   const result = {
     success: true,
     connectorId,
     connectorName,
     displayName: options.name,
+    detailUrl,
+    accountManageUrl,
     readbackVerified: saveResult.readbackVerified === true,
   };
   if (options.json) {
@@ -336,4 +344,4 @@ async function run(args) {
   return result;
 }
 
-module.exports = { buildSecuritySchemes, parseBaseUrl, run };
+module.exports = { buildSecuritySchemes, parseArgs, parseBaseUrl, run };

package/lib/connector/connector-detail.js

@@ -42,6 +42,7 @@ async function run(args) {
   const result = {
     success: true,
     connectorId: String(connectorId),
+    connectorName: detail.connectorName || connector.connectorName,
     detail: { ...detail, id: detail.id === undefined ? connector.id : detail.id },
   };
   if (json) {
@@ -53,7 +54,7 @@ async function run(args) {
   console.log('📋 基本信息');
   console.log('─'.repeat(50));
   console.log(`显示名称: ${detail.displayName || '-'}`);
-  console.log(`连接器名: ${detail.connectorName || '-'}`);
+  console.log(`连接器名: ${result.connectorName || '-'}`);
   console.log(`描述: ${detail.connectorDesc ? detail.connectorDesc.split('---')[0].trim() : '-'}`);
   console.log(`域名: ${detail.host || '-'}`);
   console.log(`基础路径: ${detail.baseUrl || '-'}`);