openyida 2026.10.14 → 2026.10.15-2

package/README.md

@@ -47,7 +47,7 @@ Example applications built with the themes below. Click an image to view it at f
   </tr>
 </table>
 
-Choose an **application theme or an independent creative direction**. The agent filters styles by your task and navigation needs. Pop art is offered only on an explicit request or for a primarily showcase-oriented task. [Browse more application examples](https://demo.aliwork.com/o/openyida/helpCenter?openyidaRoute=showcase).
+Use an **application theme or an independent creative direction**. Describe a style you like, or provide a reference website or design image to customize your app’s appearance. [Browse more application examples](https://demo.aliwork.com/o/openyida/helpCenter?openyidaRoute=showcase).
 
 ## Core Capabilities
 
@@ -64,7 +64,7 @@ Choose an **application theme or an independent creative direction**. The agent
 ## From Request to Delivery
 
 1. **Describe the goal.** Explain who will use the app, what they need to do, and any existing app or reference material.
-2. **Confirm requirements and style together.** Ready questions are grouped early. Style options use a name and a short explanation; reference images appear only when you ask to see them.
+2. **Share requirements and preferences.** Add the business details and appearance preferences that matter to you. Include any colors, websites, or design images you like.
 3. **Choose how to build.** Fast suits clear requirements you want to move forward with. Plan produces a reviewable proposal and waits for approval before creating resources.
 4. **Review and refine.** Check the delivered app and common actions, then request page, field, or workflow changes. Your chosen style is reused unless you ask to change it.
 
@@ -72,7 +72,7 @@ For existing-app improvements, review the visual proposal before backups and imp
 
 ## Recent Updates
 
-**2026.10.13** adds existing-app visual improvements and theme backup/restore, reopens five refined themes, and improves narrow-screen layouts, readability, and style selection. Optional previews show only titles and example images; selecting a style does not lead to repeated questions. [Read the full changelog](./CHANGELOG.md#20261013---2026-10-13).
+**2026.10.14-1** improves appearance customization, with better support for style descriptions, reference websites, and design images. [Read the full changelog](./CHANGELOG.md#20261014-1---2026-10-14).
 
 ## Quick Start
 
@@ -443,6 +443,9 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida design-plan materialize <build-plan.json> [--from-preview \| --business-file <json> --visual-file <json>] [--output-dir <dir>] [--rebase-parts] [--check] [--json]` | Generate or update plan documents and theme with consistency checks |
 | `openyida design-plan patch <build-plan.json> --set <path=value> [--set <path=value> ...] [--materialize] [--output-dir <dir>] [--json]` | Patch plan fields and optionally sync documents and theme |
 | `openyida update-app <appType> [--name "..."] [--desc "..."] [--icon <name>] [--icon-color <color>] [--colour <key>] [--theme-color <color>] [--theme-file <css>] [--confirm-legacy-app-style] [--disable-custom-theme] [--nav-theme light\|dark\|white\|gray] [--logo-source appIcon\|customImage] [--layout side\|top\|l_shape] [--hide-app-nav\|--show-app-nav]` | Update app info |
+| `openyida data-manage-style guide [--json]` | Inspect data-management UI directions, tokens and scoped CSS guidance |
+| `openyida data-manage-style list [--json]` | List optional data-management recipe examples |
+| `openyida data-manage-style generate --app <appType> --form <formUuid> --style <id> --base-css <theme.css> --output <new.css> [--focus balanced\|actions] [--field-id <actualId>]... [--emphasize-field <actualId>]... [--tag-field <selectFieldId>]... [--follow-shell] [--json]` | Generate data-management CSS from an optional recipe (local only) |
 | `openyida app-theme snapshot <appType> --output-dir <new-dir> [--json]` | Archive application theme settings and CSS (read-only) |
 | `openyida app-theme restore <appType> --snapshot <before.json> --expected-current <after.json> [--check \| --confirm --output-dir <new-dir>] [--json]` | Check or restore an application theme snapshot (supported exact values only) |
 | `openyida upgrade-app-theme <appType> --explicit-request [--confirm \| --prepare --output-dir <dir>] [--json]` | Upgrade an AI-built legacy app theme (explicit request and ask_human confirmation required) |
@@ -633,30 +636,17 @@ Form field definitions can include `alias` or `componentAlias` to populate Yida
 
 `openyida integration create` supports form events (`insert`, `update`, `delete`, `comment`) and approval events (`processFinish`, `activityTask`; aliases: `approval`, `approvalNode`). Approval events require `--approval-actions agree,disagree,terminated`; `activityTask` also requires `--approval-node-ids <nodeId,...>`. Passing `--process-code` selects a full graph replacement and now requires explicit `--replace`; it is not a safe update. `integration update` currently performs capability detection only: because full platform `processJson` + `viewJson` readback is unproven, it writes a redacted local probe artifact and returns `PLATFORM_PROBE_REQUIRED` before authentication, spec reading, or remote writes. It does not edit a flow.
 
-### Local Agent development preview
+### Connect a Local Agent
 
-`openyida agent` is a thin Node launcher for a separately supplied Go runtime. Node does not connect to the agent service or manage provider sessions. Four signed platform packages support macOS/Windows x64 and ARM64; npm installs the package matching the current platform. Node does not discover a Go executable on `PATH` or install provider CLIs.
+Use an installed Qoder or Codex CLI on your computer to run tasks from the Yida web app. Local Agent supports macOS and Windows; the ordinary OpenYida CLI also supports Linux.
 
-The Local Agent Beta production allowlist contains macOS and Windows only. Linux remains supported by the ordinary OpenYida CLI and by the explicit development-runtime workflow below, but Linux Local Agent packages are not published and production `connect`/`run` are rejected until native acceptance is complete.
+Check your local environment, then follow the connection instructions in the Yida web app:
 
 ```bash
 openyida agent doctor --json
-openyida agent doctor --development-runtime --runtime-path /absolute/path/openyida-runtime --runtime-manifest /absolute/path/runtime-manifest.json
-openyida agent connect --development-runtime --runtime-path /absolute/path/openyida-runtime --runtime-manifest /absolute/path/runtime-manifest.json --endpoint https://agent.example.test --endpoint-id configured-platform-id
-openyida agent run --development-runtime --runtime-path /absolute/path/openyida-runtime --runtime-manifest /absolute/path/runtime-manifest.json --endpoint https://agent.example.test --endpoint-id configured-platform-id --provider qoder --provider-path /absolute/path/qodercli
 ```
 
-Development manifest v1 specifies runtime version, protocol `1`, Node-style OS/architecture names, and `binary: {file, sha256}`; it requires the explicit `--development-runtime` flag. This is an integrity check, **not a publisher signature**. The production loader requires a strictly validated v2 manifest, exact approved platform-package version/digest, and an Ed25519 signature over the original manifest bytes using trust roots bundled in the Node host. The bundled catalog pins the approved runtime version, manifest digest and signing public key. See the [launcher contract](lib/agent/PROTOCOL.md).
-
-`connect` supports two equivalent enrollment entries. CLI-first opens the Yida browser approval page and returns through a state/PKCE-protected loopback callback. Web-first copies one five-minute command containing `--enroll`; the token is single-use and carries no business authority. Neither path reads or uploads an ordinary OpenYida login profile.
-
-One installation may connect to multiple organizations. Node keeps only a shared Installation ID at the installation root; each organization authorization gets an isolated private Connection state directory, device credentials, journals, control socket, and frozen bundle. `agent connect` and `agent run` start an independent background daemon by default and return once it is ready. `status`, `logs`, `disconnect`, and `logout` enumerate valid Connections. Background mode is not boot-time autostart. Each Connection registers all locally discovered Qoder and Codex Runtimes, and the web UI selects computer, CLI, and model.
-
-For each attempt, Go injects `OPENYIDA_MANAGED_RUN=1`, the cloud user/corp/app/run/attempt context, and a fixed-value Tianshu task grant with an initial 60-minute lease. The CLI uses that grant instead of local auth and sends scope-correlation headers. While the authenticated device connection and server-side Run remain active, yida-agent can renew the same bearer server-to-server; the CLI cannot renew it and never receives a task refresh token. Tianshu independently checks the grant against the requested app and rejects application creation, identity/environment changes, cross-application requests and unsupported organization-wide operations; declared application-bound batches are supported. `formUuid` remains optional per-turn page-focus context, so one app-bound session can work across pages in that application. Without `OPENYIDA_MANAGED_RUN`, existing login, token refresh, and command behavior are unchanged.
-
-Before `connect` or `run`, Node now freezes the verified runtime bytes, CLI, full production dependency closure, and packaged Skills into a private content-addressed bundle. Source changes during copying fail closed. Existing bundles are verified, never silently repaired or garbage-collected by Node, and survive replacement/removal of the original npm directory. Go owns active/session references and version activation; the external Node executable and provider installations are not copied or managed by npm. A separate parent-watch pipe and a 15-second stop grace prevent normal config EOF from being mistaken for parent death; an unconfirmed forced stop remains unknown.
-
-This is not an OS sandbox or an authorization boundary against arbitrary shell code. Production signing/release infrastructure, full Go/provider recovery and upgrade acceptance, and OS/architecture-specific provider E2E are not claimed by these fake-process tests. Auto-update is disabled for `agent` and managed invocations; ordinary CLI commands neither spawn nor download the runtime.
+After connecting, the service runs in the background. Use `openyida agent status` to check its status, `openyida agent logs` to view logs, and `openyida agent disconnect` to disconnect. After restarting your computer, run `openyida agent run` to reconnect.
 
 ## Agent Skills
 

package/bin/yida.js

@@ -942,6 +942,11 @@ async function main() {
       break;
     }
 
+    case 'data-manage-style': {
+      await require('../lib/style/data-manage-style').run(args);
+      break;
+    }
+
     case 'app-theme': {
       await require('../lib/app/app-theme').run(args);
       break;

package/lib/agent/cmd.js

@@ -285,7 +285,7 @@ async function run(argv = [], options = {}) {
     // Inventory includes signed-out CLIs. Runtime reports their auth status;
     // the control plane independently enforces task readiness.
     config.providers = providerCheck.providers.filter(p => p.registrable).map(p => ({
-      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable,
+      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable, ...(p.version ? { version: p.version } : {}),
     }));
   }
   if (managedConnections && args.command === 'connect') {

package/lib/agent/frozen-bundle.js

@@ -3,9 +3,11 @@
 const fs = require('fs');
 const path = require('path');
 const { CliError } = require('../core/cli-error');
+const { randomUUID } = require('crypto');
+const { mkdirPrivate, mkdirPrivateDirectories } = require('./private-directory');
 const { t } = require('../core/i18n');
-const { digest, readRegularFile, platformPackageName } = require('./runtime-package');
-const { parseStrictJson, PRODUCTION_RUNTIME_PLATFORMS } = require('./runtime-manifest');
+const { digest, readRegularFile, platformPackageName, canonicalPath } = require('./runtime-package');
+const { parseStrictJson } = require('./runtime-manifest');
 
 const MAX_FILE_BYTES = 256 * 1024 * 1024;
 const MAX_BUNDLE_BYTES = 1024 * 1024 * 1024;
@@ -37,7 +39,7 @@ function privateDirectory(directory) {
   let ancestor = directory;
   while (!fs.existsSync(ancestor)) {suffix.unshift(path.basename(ancestor)); ancestor = path.dirname(ancestor);}
   if (fs.lstatSync(ancestor).isSymbolicLink()) {throw bundleError();}
-  let current = fs.realpathSync(ancestor);
+  let current = canonicalPath(ancestor);
   const uid = typeof process.getuid === 'function' ? process.getuid() : null;
   for (let parent = current; ; parent = path.dirname(parent)) {
     const stat = fs.lstatSync(parent);
@@ -46,6 +48,7 @@ function privateDirectory(directory) {
         (stat.mode & 0o022) && !(stat.uid === 0 && stat.mode & 0o1000))) {throw bundleError('AGENT_BUNDLE_UNSAFE_DIRECTORY');}
     if (parent === path.dirname(parent)) {break;}
   }
+  if (process.platform === 'win32' && suffix.length) {mkdirPrivate(path.join(current, ...suffix));}
   for (const component of suffix) {
     current = path.join(current, component);
     try {fs.mkdirSync(current, { mode: 0o700 });} catch (error) {if (error.code !== 'EEXIST') {throw error;}}
@@ -67,7 +70,7 @@ function findDependency(root, name) {
   // npm subprocess, or an install hook. Preserve each package's own resolution.
   for (let current = root; ; current = path.dirname(current)) {
     const candidate = path.join(current, 'node_modules', name);
-    if (fs.existsSync(path.join(candidate, 'package.json'))) {return fs.realpathSync(candidate);}
+    if (fs.existsSync(path.join(candidate, 'package.json'))) {return canonicalPath(candidate);}
     if (current === path.dirname(current)) {return null;}
   }
 }
@@ -126,7 +129,7 @@ function verifyBundle(root, expectedId) {
 }
 
 function materializeBundle(runtime, config, options = {}) {
-  const sourceRoot = fs.realpathSync(config.node.packageRoot);
+  const sourceRoot = canonicalPath(config.node.packageRoot);
   const cache = privateDirectory(options.bundleCache || path.join(config.stateDir, 'bundles'));
   let stage;
   const pendingFiles = [];
@@ -197,10 +200,7 @@ function materializeBundle(runtime, config, options = {}) {
   try {
     const metadata = packageMetadata(sourceRoot);
     if (metadata.name !== 'openyida' || typeof metadata.version !== 'string') {throw bundleError();}
-    // Explicit development runtimes may run on CI platforms without a public
-    // runtime package. Keep the production gate and supported-package exclusion.
-    runtimePackage = runtime.development === true && !PRODUCTION_RUNTIME_PLATFORMS.includes(process.platform)
-      ? undefined : platformPackageName(process.platform, process.arch);
+    runtimePackage = runtime.development === true ? `@openyida/local-agent-runtime-${process.platform}-${process.arch}` : platformPackageName(process.platform, process.arch);
     // Deliberate installed CLI allowlist: no checkout, private state, user
     // project, devDependencies, postinstall execution, or global Skills links.
     for (const directory of ['bin', 'lib', 'yida-skills']) {
@@ -256,13 +256,23 @@ function materializeBundle(runtime, config, options = {}) {
     const id = digest(raw);
     const root = path.join(cache, id);
     if (!fs.existsSync(root)) {
-      stage = fs.mkdtempSync(path.join(cache, '.staging-'));
+      // Windows may otherwise assign the elevated process's Administrators
+      // group as owner. Go requires the current user, as for credential state.
+      if (process.platform === 'win32') {
+        stage = path.join(cache, '.staging-' + randomUUID());
+        mkdirPrivate(stage);
+      } else {stage = fs.mkdtempSync(path.join(cache, '.staging-'));}
       fs.chmodSync(stage, 0o700);
+      if (process.platform === 'win32') {
+        // Inherited DACLs do not bind nested owners under an elevated token.
+        // Create every parent privately in one PowerShell invocation before writes.
+        mkdirPrivateDirectories(pendingFiles.map(file => path.dirname(path.join(stage, file.relative))));
+      }
       for (const file of pendingFiles) {
         const bytes = file.source ? readRegularFile(file.source, MAX_FILE_BYTES).bytes : file.bytes;
         if (digest(bytes) !== file.sha256) {throw bundleError('AGENT_BUNDLE_SOURCE_CHANGED');}
         const target = path.join(stage, file.relative);
-        fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });
+        if (process.platform !== 'win32') {fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });}
         fs.writeFileSync(target, bytes, { flag: 'wx', mode: file.mode });
         fs.chmodSync(target, file.mode);
       }
@@ -275,11 +285,11 @@ function materializeBundle(runtime, config, options = {}) {
       catch (error) {
         if (!['EEXIST', 'ENOTEMPTY', 'EACCES', 'EPERM'].includes(error.code) || !fs.existsSync(root)) {throw error;}
       }
-    } else {
-      // Never trust a version or mtime cache. Check source stability and every
-      // byte of the existing bundle, including unexpected entries, on reuse.
-      verifySources();
     }
+    // On reuse, source bytes were hashed to compute this exact manifest ID.
+    // We execute only the existing bundle, whose complete inventory and bytes
+    // are verified below. Reopening the source snapshot cannot make that bundle
+    // more trustworthy. New publication still checks source stability above.
     if (published) {fs.chmodSync(root, 0o500);}
     verifyBundle(root, id);
     const bundle = { schemaVersion: 1, id, root, manifestPath: path.join(root, 'bundle-manifest.json'), manifestSha256: id,

package/lib/agent/private-directory.js

@@ -13,26 +13,32 @@ function directoryError() {
 // Node's mkdir mode is ignored on Windows. Create each missing directory with
 // an inheritable private DACL before any credentials or logs are written.
 // Existing directories are never re-permissioned here.
-function mkdirPrivate(directory) {
+function mkdirPrivateDirectories(directories) {
   if (process.platform !== 'win32') {
-    fs.mkdirSync(directory, { recursive: true, mode: 0o700 });
+    for (const directory of directories) {fs.mkdirSync(directory, { recursive: true, mode: 0o700 });}
     return;
   }
-  const target = path.resolve(directory);
-  const missing = [];
-  let ancestor = target;
-  while (!fs.existsSync(ancestor)) {
-    missing.unshift(ancestor);
-    ancestor = path.dirname(ancestor);
-  }
-  for (let parent = ancestor; ; parent = path.dirname(parent)) {
-    const stat = fs.lstatSync(parent);
-    if (!stat.isDirectory() || stat.isSymbolicLink()) {throw directoryError();}
-    if (parent === path.dirname(parent)) {break;}
+  const targets = [...new Set(directories.map(directory => path.resolve(directory)))];
+  const pending = new Set();
+  for (const target of targets) {
+    const missing = [];
+    let ancestor = target;
+    while (!fs.existsSync(ancestor)) {
+      missing.unshift(ancestor);
+      ancestor = path.dirname(ancestor);
+    }
+    for (let parent = ancestor; ; parent = path.dirname(parent)) {
+      const stat = fs.lstatSync(parent);
+      if (!stat.isDirectory() || stat.isSymbolicLink()) {throw directoryError();}
+      if (parent === path.dirname(parent)) {break;}
+    }
+    for (const directory of missing) {pending.add(directory);}
   }
+  const missing = [...pending];
   if (!missing.length) {return;}
   const script = `
 $ErrorActionPreference = 'Stop'
+$reader = [System.IO.StreamReader]::new([Console]::OpenStandardInput(), [System.Text.Encoding]::UTF8)
 $identity = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
 $acl = New-Object System.Security.AccessControl.DirectorySecurity
 $acl.SetOwner($identity)
@@ -42,22 +48,43 @@ foreach ($sid in @($identity.Value, 'S-1-5-18', 'S-1-5-32-544')) {
   $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($principal, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
   $acl.AddAccessRule($rule)
 }
-foreach ($directory in ($env:OPENYIDA_PRIVATE_DIRECTORIES | ConvertFrom-Json)) {
-  if ([System.IO.Directory]::Exists($directory)) {throw 'Directory changed during creation'}
-  [System.IO.Directory]::CreateDirectory($directory, $acl) | Out-Null
+foreach ($directory in ($reader.ReadToEnd() | ConvertFrom-Json)) {
+  # Concurrent launchers may create the same parent. Never rewrite a winner;
+  # accept it only when its actual owner and grants meet the same private policy.
+  # Extended-length paths avoid the .NET Framework MAX_PATH limit. Paths
+  # are already absolute and validated by the Node caller.
+  $nativePath = $directory
+  if (-not $directory.StartsWith('\\\\?\\')) {
+    if ($directory.StartsWith('\\\\')) { $nativePath = '\\\\?\\UNC\\' + $directory.Substring(2) }
+    else { $nativePath = '\\\\?\\' + $directory }
+  }
+  [System.IO.Directory]::CreateDirectory($nativePath, $acl) | Out-Null
+  $actual = (New-Object System.IO.DirectoryInfo($nativePath)).GetAccessControl()
+  if ($actual.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $identity.Value) {throw 'Private directory owner differs'}
+  foreach ($rule in $actual.Access) {
+    $sid = $rule.IdentityReference.Translate([System.Security.Principal.SecurityIdentifier]).Value
+    if ($rule.AccessControlType -ne 'Allow' -or $sid -notin @($identity.Value, 'S-1-5-18', 'S-1-5-32-544')) {throw 'Private directory access differs'}
+  }
 }
 `;
   try {
     execFileSync(path.join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe'),
       ['-NoProfile', '-NonInteractive', '-Command', script], {
         windowsHide: true, timeout: 15000, stdio: 'pipe',
-        env: { ...process.env, OPENYIDA_PRIVATE_DIRECTORIES: JSON.stringify(missing) },
+        // Stdin avoids Windows environment-variable size limits for full bundles.
+        input: JSON.stringify(missing),
       });
   } catch {
     throw directoryError();
   }
-  const stat = fs.lstatSync(target);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) {throw directoryError();}
+  for (const target of targets) {
+    const stat = fs.lstatSync(target);
+    if (!stat.isDirectory() || stat.isSymbolicLink()) {throw directoryError();}
+  }
+}
+
+function mkdirPrivate(directory) {
+  mkdirPrivateDirectories([directory]);
 }
 
-module.exports = { mkdirPrivate };
+module.exports = { mkdirPrivate, mkdirPrivateDirectories };

package/lib/agent/provider-preflight.js

@@ -99,18 +99,14 @@ function discoverProviders(env = process.env, platform = process.platform, home)
   }));
 }
 
-function powerShellLiteral(value) {
-  return `'${String(value).replace(/'/g, "''")}'`;
-}
-
-// Match the Go Runtime's npm launcher handling without cmd.exe interpolation.
+// Use the npm PowerShell sibling without cmd.exe or command-string interpolation.
 function probeCommand(executable, args, platform = process.platform, env = process.env) {
   if (platform !== 'win32' || !/\.(cmd|bat)$/i.test(executable)) { return { executable, args }; }
   const script = executable.replace(/\.(cmd|bat)$/i, '.ps1');
   if (!exists(script)) { throw new Error('npm launcher has no PowerShell sibling; select a native CLI'); }
-  const command = `& ${[script, ...args].map(powerShellLiteral).join(' ')}`;
   return { executable: path.join(env.SystemRoot || env.SYSTEMROOT || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe'),
-    args: ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-Command', command] };
+    // -File keeps redirected stdin available to ACP and passes arguments as data.
+    args: ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-File', script, ...args] };
 }
 
 // No prompts, model calls, login flows or provider output enter our report.
@@ -190,7 +186,14 @@ async function checkProvider(provider, executable, options) {
   if (version.status !== 'passed') { return { status: version.status, cliDetected: false }; }
   // Installation evidence is independent of authentication/protocol readiness.
   // Apply this consistently to every enabled provider, including future adapters.
-  const detected = { cliDetected: true };
+  // Reuse only a bounded, recognizable version line from this exact probe.
+  // Arbitrary provider banners/stderr never become launch metadata.
+  const versionLine = String(version.output || '').split(/\r?\n/).map(line => line.trim()).find(line =>
+    line.length <= 64 && /^(?:(?:codex(?:-cli)?|qoder(?:cli| cli)?|opencode)\s+)?v?\d+\.\d+\.\d+(?:[-+][0-9a-z.-]+)?(?:\s+\([0-9a-z ._-]+\))?$/i.test(line));
+  const detected = { cliDetected: true, ...(versionLine ? { version: versionLine } : {}) };
+  // Connect/run only establish installation inventory. The runtime discovers live
+  // protocol, login and models for EVERY registered provider; doctor probes them here.
+  if (options.inventoryOnly) { return { ...detected, status: 'cli_detected', authKnown: false, protocolProbe: 'not_run' }; }
   if (provider === 'opencode') { return { ...detected, status: 'available', authKnown: false, protocolProbe: 'not_run' }; }
   const protocol = await execute(executable, provider === 'qoder' ? ['--acp'] : ['app-server', '--listen', 'stdio://'], provider, options);
   if (protocol.status === 'login_required') {
@@ -234,9 +237,9 @@ async function preflight(args, options = {}) {
     };
     for (const candidate of entry.candidates.slice(0, 4)) {
       executable = candidate;
-      result = await checkProvider(entry.provider, executable, { ...options, probe: boundedProbe });
+      result = await checkProvider(entry.provider, executable, { ...options, inventoryOnly: ['connect', 'run'].includes(args.command), probe: boundedProbe });
       if (result.cliDetected && !discovered) { discovered = { result, executable }; }
-      if (Date.now() >= deadline || ['ready', 'available', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
+      if (Date.now() >= deadline || ['ready', 'available', 'cli_detected', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
     }
     if (!result.cliDetected && result.status !== 'probe_cancelled' && discovered) {
       ({ result, executable } = discovered);

package/lib/agent/runtime-catalog.json

@@ -3,6 +3,9 @@
   "keys": {
     "openyida-runtime-public-beta-20260923-1": {
       "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEApl2Q+64rX997KxEQUY2yU8Xnc7sM3NRQ8Nf0bAi9Hck=\n-----END PUBLIC KEY-----\n"
+    },
+    "openyida-runtime-public-beta-20261012-1": {
+      "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKaA5RBJXWVhQa+9ehmR3x7WQCAlVGxbJULG9T17qmRc=\n-----END PUBLIC KEY-----\n"
     }
   },
   "releases": [
@@ -10,33 +13,33 @@
       "platform": "darwin",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-darwin-arm64",
-      "packageVersion": "0.1.1",
-      "runtimeVersion": "0.1.1",
-      "manifestSha256": "7f3d8e2596210b50db6b664db902f1036a1d51a87fd80e298a50d337d6a44205"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "1a9f5e148491c350457a41f095de9598775a2a349d872c43877c9fad63c09e28"
     },
     {
       "platform": "darwin",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-darwin-x64",
-      "packageVersion": "0.1.1",
-      "runtimeVersion": "0.1.1",
-      "manifestSha256": "e4922eaff8f0000737ede59a7beeb30f88c8a2c97f7a93c871bfe9938d16dc3d"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "46918d51efd40b73a645487525f2f7bdca94124ffb3ad6cdae6e9641f28b3963"
     },
     {
       "platform": "win32",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-win32-x64",
-      "packageVersion": "0.1.1",
-      "runtimeVersion": "0.1.1",
-      "manifestSha256": "3f18fd2f73870e96af8d6eab8edb7594575cf870f90ac9cf1d1506f03f854023"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "64d471a37c54650e25c214e08d7ca7fa8dde068decfcbe71bd8abcbb2b7e74c6"
     },
     {
       "platform": "win32",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-win32-arm64",
-      "packageVersion": "0.1.1",
-      "runtimeVersion": "0.1.1",
-      "manifestSha256": "0af4afe0bb61466e702500609948b0c3ad24546fe2f80de31cf20ff86ad87266"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "7b1ff527dc54285084eac0773d273fdfb892ce5ca352a810767c64eefc8e59c0"
     }
   ]
 }

package/lib/agent/runtime-package.js

@@ -11,6 +11,10 @@ const bundledCatalog = require('./runtime-catalog.json');
 
 const PROTOCOL_VERSION = 1;
 
+function canonicalPath(value) {
+  return process.platform === 'win32' ? fs.realpathSync.native(value) : fs.realpathSync(value);
+}
+
 function runtimeError(code, key) {
   return new CliError(t(`agent.${key}`), { code });
 }
@@ -28,7 +32,7 @@ function requireAbsoluteFile(value, code) {
   if (!stat.isFile() || stat.isSymbolicLink()) {
     throw runtimeError(code, 'unsafe_file');
   }
-  return { path: fs.realpathSync(value), stat };
+  return { path: canonicalPath(value), stat };
 }
 
 function readRegularFile(filename, maxBytes, code = 'AGENT_RUNTIME_INVALID_PATH') {
@@ -122,7 +126,7 @@ function resolveProduction(options) {
     const main = parseStrictJson(readRegularFile(path.join(packageRoot, 'package.json'), MAX_MANIFEST_BYTES).bytes);
     if (!main.optionalDependencies || main.optionalDependencies[name] !== release.packageVersion) {throw new Error('unapproved dependency');}
     const localRequire = createRequire(path.join(packageRoot, 'package.json'));
-    installedRoot = path.dirname(fs.realpathSync(localRequire.resolve(`${name}/package.json`)));
+    installedRoot = path.dirname(canonicalPath(localRequire.resolve(`${name}/package.json`)));
     const metadata = parseStrictJson(readRegularFile(safePackageFile(installedRoot, 'package.json'), MAX_MANIFEST_BYTES).bytes);
     if (metadata.name !== name || metadata.version !== release.packageVersion ||
         !Array.isArray(metadata.os) || metadata.os.length !== 1 || metadata.os[0] !== platform ||
@@ -152,4 +156,4 @@ function resolveRuntime(options = {}) {
   return resolveProduction(options);
 }
 
-module.exports = { PROTOCOL_VERSION, resolveRuntime, requireAbsoluteFile, readRegularFile, digest, platformPackageName };
+module.exports = { PROTOCOL_VERSION, resolveRuntime, requireAbsoluteFile, readRegularFile, digest, platformPackageName, canonicalPath };

package/lib/agent/stdio.js

@@ -69,6 +69,7 @@ function launchRuntime(runtime, config, options = {}) {
   const watchesParent = ['connect', 'run'].includes(config.command);
   if (watchesParent) {config = process.platform === 'win32'
     ? { ...config, parentPID: process.pid } : { ...config, parentWatchFD: 3 };}
+  const watchesPipe = watchesParent && process.platform !== 'win32';
   const payload = JSON.stringify(config);
   if (Buffer.byteLength(payload) > MAX_CONFIG_BYTES) {
     throw new CliError(t('agent.input_invalid'), { code: 'AGENT_INPUT_INVALID' });
@@ -126,7 +127,13 @@ function launchRuntime(runtime, config, options = {}) {
           diagnostic('error', 'runtime_action_failed', {
             command: config.command, component: 'node', errorCode: code, retryable: event.retryable === true,
           });
-          failure = new CliError(t('agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
+          const enrollmentMessages = {
+            ENROLLMENT_EXPIRED: 'agent.enrollment_expired',
+            ENROLLMENT_REJECTED: 'agent.enrollment_rejected',
+            ENROLLMENT_CONFLICT: 'agent.enrollment_conflict',
+            ENROLLMENT_REQUEST_FAILED: 'agent.enrollment_request_failed',
+          };
+          failure = new CliError(t(enrollmentMessages[code] || 'agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
           stop('SIGTERM');
           return;
         }
@@ -137,7 +144,11 @@ function launchRuntime(runtime, config, options = {}) {
       child = (options.spawn || spawn)(runtime.executable, [config.command, '--stdio-config'], {
         cwd: config.node.packageRoot,
         env: runtimeEnvironment(options.env),
-        stdio: watchesParent ? ['pipe', 'pipe', 'pipe', 'pipe'] : ['pipe', 'pipe', 'pipe'],
+        stdio: watchesPipe ? ['pipe', 'pipe', 'pipe', 'pipe'] : ['pipe', 'pipe', 'pipe'],
+        // Escape libuv's kill-on-parent-close job on Windows. The native PID
+        // handle monitor owns cancellation/draining; retain our Node handle
+        // (no unref) so normal foreground execution still waits for completion.
+        detached: process.platform === 'win32' && watchesParent,
         windowsHide: true,
         shell: false,
       });
@@ -149,10 +160,10 @@ function launchRuntime(runtime, config, options = {}) {
     }
     signals.on('SIGINT', forwardInterrupt);
     signals.on('SIGTERM', forwardTerminate);
-    // Config stdin intentionally reaches EOF after one JSON. This distinct
-    // pipe remains open for the parent lifetime; Go treats EOF as stop/drain,
+    // Config stdin intentionally reaches EOF after one JSON. On Unix this
+    // separate pipe remains open for the parent lifetime; Go treats EOF as stop/drain,
     // not successful completion. Do not send credentials on the watch pipe.
-    const parentWatch = watchesParent && child.stdio && child.stdio[3];
+    const parentWatch = watchesPipe && child.stdio && child.stdio[3];
     if (parentWatch) {parentWatch.on('error', () => {if (!closed) {fail('AGENT_RUNTIME_PARENT_WATCH_FAILED');}});}
     child.stdout.on('data', (chunk) => {
       pending += decoder.write(chunk);

package/lib/app/app-entry.js

@@ -4,6 +4,8 @@ const { createAuthRef, createYidaClient, unwrapYidaResponse } = require('../core
 const { t } = require('../core/i18n');
 const { throwUsage } = require('../core/command-errors');
 const { fetchFormPageList } = require('./form-navigation');
+const { fetchFormSchemaInfo } = require('./get-form-config');
+const { buildDisplayPageEntryUrls } = require('./application-entry-urls');
 
 /** Keep complete runtime URLs; the server verifies tenant and resource ownership. */
 function normalizeUrl(value, appType) {
@@ -54,7 +56,16 @@ async function resolveEntryUrl(authRef, appType, key, formUuid) {
   if (key === 'frontend') {
     if (String(form.formType).toLowerCase() !== 'display') { throw new Error(t('app_entry.frontend_display_required', formUuid)); }
     if (!form.pathName) { throw new Error(t('app_entry.page_offline', formUuid)); }
-    return normalizeUrl(`${authRef.baseUrl}/${appType}/custom/${formUuid}`, appType);
+    const response = await fetchFormSchemaInfo(authRef, appType, formUuid);
+    if (!response || response.success === false || response.__needLogin || response.__csrfExpired) {
+      throw new Error(t('app_entry.invalid_response'));
+    }
+    const config = response.content || response.result || response.data;
+    const entry = buildDisplayPageEntryUrls({ appType, formUuid, baseUrl: authRef.baseUrl, config, formType: 'display' });
+    if (!entry.standaloneUrl || entry.navigationVerification?.renderNav !== false) {
+      throw new Error(t('app_entry.frontend_nav_required', formUuid));
+    }
+    return normalizeUrl(entry.standaloneUrl, appType);
   }
   return normalizeUrl(`${authRef.baseUrl}/${appType}/workbench/${formUuid}`, appType);
 }
@@ -137,8 +148,10 @@ async function run(args = []) {
       urls[key] = normalizeUrl(result.accessEntries[key].url, appType);
     }
   }
-  console.log(JSON.stringify({ appType, ...result, urls }, null, 2));
-  return result;
+  const output = { ...result, appType, urls,
+    verification: { configurationReadback: true, runtimeVerified: false } };
+  console.log(JSON.stringify(output, null, 2));
+  return output;
 }
 
 module.exports = { run, parseArgs, normalizeUrl, resolveEntryUrl };

package/lib/app/update-form-config.js

@@ -5,6 +5,7 @@ const { t } = require('../core/i18n');
 const { buildYidaTitleI18n, normalizeYidaLocale, resolveContentLocale } = require('../core/yida-i18n');
 const { banner, step, label, success, fail, warn, info, error, result, usage } = require('../core/chalk');
 const { throwCommandError, throwUsage } = require('../core/command-errors');
+const { readRenderNav } = require('./application-entry-urls');
 
 function parseArgs(inputArgs = process.argv.slice(2)) {
   const args = [...inputArgs];
@@ -158,12 +159,14 @@ async function run(args = process.argv.slice(2)) {
   success(t('update_form_config.read_ok'));
 
   // A keep request must not silently switch navigation when the read is incomplete.
-  if (keepNav && ![true, false, 'true', 'false'].includes(currentConfig.isRenderNav)) {
+  const currentRenderNav = readRenderNav(currentConfig);
+  if (keepNav && currentRenderNav === null) {
     throwCommandError(t('get_form_config.read_failed', t('common.request_failed_label')), {
       code: 'CONFIG_READ_FAILED',
     });
   }
-  const effectiveNav = keepNav ? String(currentConfig.isRenderNav) : isRenderNav;
+  // The read API exposes renderNav; the write API still accepts isRenderNav.
+  const effectiveNav = keepNav ? String(currentRenderNav) : isRenderNav;
 
   step(3, t('update_form_config.step_update'));
   info(t('update_form_config.sending_request'));

package/lib/core/agent-capabilities.js

@@ -472,6 +472,7 @@ function buildFullAppArtifactRoute(manifest) {
     user_visible_expression_policy: workflow.user_visible_expression_policy,
     optional_asset_branch: workflow.optional_asset_branch,
     design_mode_policy: workflow.design_mode_policy,
+    plan_confirmation_policy: workflow.plan_confirmation_policy,
     navigation_policy: workflow.navigation_policy,
     form_entry_policy: workflow.form_entry_policy,
     divider_style_contract: workflow.divider_style_contract,