openyida 2026.10.15 → 2026.10.16

package/lib/agent/cmd.js

@@ -285,7 +285,7 @@ async function run(argv = [], options = {}) {
     // Inventory includes signed-out CLIs. Runtime reports their auth status;
     // the control plane independently enforces task readiness.
     config.providers = providerCheck.providers.filter(p => p.registrable).map(p => ({
-      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable,
+      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable, ...(p.version ? { version: p.version } : {}),
     }));
   }
   if (managedConnections && args.command === 'connect') {

package/lib/agent/frozen-bundle.js

@@ -285,11 +285,11 @@ function materializeBundle(runtime, config, options = {}) {
       catch (error) {
         if (!['EEXIST', 'ENOTEMPTY', 'EACCES', 'EPERM'].includes(error.code) || !fs.existsSync(root)) {throw error;}
       }
-    } else {
-      // Never trust a version or mtime cache. Check source stability and every
-      // byte of the existing bundle, including unexpected entries, on reuse.
-      verifySources();
     }
+    // On reuse, source bytes were hashed to compute this exact manifest ID.
+    // We execute only the existing bundle, whose complete inventory and bytes
+    // are verified below. Reopening the source snapshot cannot make that bundle
+    // more trustworthy. New publication still checks source stability above.
     if (published) {fs.chmodSync(root, 0o500);}
     verifyBundle(root, id);
     const bundle = { schemaVersion: 1, id, root, manifestPath: path.join(root, 'bundle-manifest.json'), manifestSha256: id,

package/lib/agent/private-directory.js

@@ -51,8 +51,15 @@ foreach ($sid in @($identity.Value, 'S-1-5-18', 'S-1-5-32-544')) {
 foreach ($directory in ($reader.ReadToEnd() | ConvertFrom-Json)) {
   # Concurrent launchers may create the same parent. Never rewrite a winner;
   # accept it only when its actual owner and grants meet the same private policy.
-  [System.IO.Directory]::CreateDirectory($directory, $acl) | Out-Null
-  $actual = (New-Object System.IO.DirectoryInfo($directory)).GetAccessControl()
+  # Extended-length paths avoid the .NET Framework MAX_PATH limit. Paths
+  # are already absolute and validated by the Node caller.
+  $nativePath = $directory
+  if (-not $directory.StartsWith('\\\\?\\')) {
+    if ($directory.StartsWith('\\\\')) { $nativePath = '\\\\?\\UNC\\' + $directory.Substring(2) }
+    else { $nativePath = '\\\\?\\' + $directory }
+  }
+  [System.IO.Directory]::CreateDirectory($nativePath, $acl) | Out-Null
+  $actual = (New-Object System.IO.DirectoryInfo($nativePath)).GetAccessControl()
   if ($actual.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $identity.Value) {throw 'Private directory owner differs'}
   foreach ($rule in $actual.Access) {
     $sid = $rule.IdentityReference.Translate([System.Security.Principal.SecurityIdentifier]).Value

package/lib/agent/provider-preflight.js

@@ -186,7 +186,14 @@ async function checkProvider(provider, executable, options) {
   if (version.status !== 'passed') { return { status: version.status, cliDetected: false }; }
   // Installation evidence is independent of authentication/protocol readiness.
   // Apply this consistently to every enabled provider, including future adapters.
-  const detected = { cliDetected: true };
+  // Reuse only a bounded, recognizable version line from this exact probe.
+  // Arbitrary provider banners/stderr never become launch metadata.
+  const versionLine = String(version.output || '').split(/\r?\n/).map(line => line.trim()).find(line =>
+    line.length <= 64 && /^(?:(?:codex(?:-cli)?|qoder(?:cli| cli)?|opencode)\s+)?v?\d+\.\d+\.\d+(?:[-+][0-9a-z.-]+)?(?:\s+\([0-9a-z ._-]+\))?$/i.test(line));
+  const detected = { cliDetected: true, ...(versionLine ? { version: versionLine } : {}) };
+  // Connect/run only establish installation inventory. The runtime discovers live
+  // protocol, login and models for EVERY registered provider; doctor probes them here.
+  if (options.inventoryOnly) { return { ...detected, status: 'cli_detected', authKnown: false, protocolProbe: 'not_run' }; }
   if (provider === 'opencode') { return { ...detected, status: 'available', authKnown: false, protocolProbe: 'not_run' }; }
   const protocol = await execute(executable, provider === 'qoder' ? ['--acp'] : ['app-server', '--listen', 'stdio://'], provider, options);
   if (protocol.status === 'login_required') {
@@ -230,9 +237,9 @@ async function preflight(args, options = {}) {
     };
     for (const candidate of entry.candidates.slice(0, 4)) {
       executable = candidate;
-      result = await checkProvider(entry.provider, executable, { ...options, probe: boundedProbe });
+      result = await checkProvider(entry.provider, executable, { ...options, inventoryOnly: ['connect', 'run'].includes(args.command), probe: boundedProbe });
       if (result.cliDetected && !discovered) { discovered = { result, executable }; }
-      if (Date.now() >= deadline || ['ready', 'available', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
+      if (Date.now() >= deadline || ['ready', 'available', 'cli_detected', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
     }
     if (!result.cliDetected && result.status !== 'probe_cancelled' && discovered) {
       ({ result, executable } = discovered);

package/lib/agent/runtime-catalog.json

@@ -3,6 +3,9 @@
   "keys": {
     "openyida-runtime-public-beta-20260923-1": {
       "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEApl2Q+64rX997KxEQUY2yU8Xnc7sM3NRQ8Nf0bAi9Hck=\n-----END PUBLIC KEY-----\n"
+    },
+    "openyida-runtime-public-beta-20261012-1": {
+      "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKaA5RBJXWVhQa+9ehmR3x7WQCAlVGxbJULG9T17qmRc=\n-----END PUBLIC KEY-----\n"
     }
   },
   "releases": [
@@ -10,33 +13,33 @@
       "platform": "darwin",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-darwin-arm64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "98909c5b049544aa287abb781796a6b2261948eae8a4eb4ee6a345edc3ebb8b4"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "1a9f5e148491c350457a41f095de9598775a2a349d872c43877c9fad63c09e28"
     },
     {
       "platform": "darwin",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-darwin-x64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "29d95d796890fcf6047e79e1a101d68f70506bcd53a5e813d19bf7b833ddb899"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "46918d51efd40b73a645487525f2f7bdca94124ffb3ad6cdae6e9641f28b3963"
     },
     {
       "platform": "win32",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-win32-x64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "44aff218711c120d4d24e3c34ce2867a34d6f78bab5c1682a4808b4b9c3cfd56"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "64d471a37c54650e25c214e08d7ca7fa8dde068decfcbe71bd8abcbb2b7e74c6"
     },
     {
       "platform": "win32",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-win32-arm64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "742e21e97f7c72ca78030d43f10d42e7470da2aabc0af6a8536dde6767390680"
+      "packageVersion": "0.1.3",
+      "runtimeVersion": "0.1.3",
+      "manifestSha256": "7b1ff527dc54285084eac0773d273fdfb892ce5ca352a810767c64eefc8e59c0"
     }
   ]
 }

package/lib/agent/stdio.js

@@ -127,7 +127,13 @@ function launchRuntime(runtime, config, options = {}) {
           diagnostic('error', 'runtime_action_failed', {
             command: config.command, component: 'node', errorCode: code, retryable: event.retryable === true,
           });
-          failure = new CliError(t('agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
+          const enrollmentMessages = {
+            ENROLLMENT_EXPIRED: 'agent.enrollment_expired',
+            ENROLLMENT_REJECTED: 'agent.enrollment_rejected',
+            ENROLLMENT_CONFLICT: 'agent.enrollment_conflict',
+            ENROLLMENT_REQUEST_FAILED: 'agent.enrollment_request_failed',
+          };
+          failure = new CliError(t(enrollmentMessages[code] || 'agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
           stop('SIGTERM');
           return;
         }

package/lib/auth/token-auth.js

@@ -229,6 +229,26 @@ function createTokenAuthRequiredError(reason, sourceError) {
   );
 }
 
+function createAuthProfileSelectionError(status) {
+  const reason = status.failure_reason || status.status;
+  if (!['profile_required', 'profile_not_found'].includes(reason)) {return null;}
+  const { CliError } = require('../core/cli-error');
+  const { t } = require('../core/i18n');
+  return new CliError(t(`common.auth_${reason}`), {
+    code: reason === 'profile_required' ? 'AUTH_PROFILE_REQUIRED' : 'AUTH_PROFILE_NOT_FOUND',
+    details: {
+      authMode: 'token',
+      status: reason,
+      failure_reason: reason,
+      auth_profile: status.auth_profile,
+      candidate_count: status.candidate_count,
+      candidates: status.candidates,
+      next_step: status.next_step,
+      next_step_commands: status.next_step_commands,
+    },
+  });
+}
+
 function createTokenRefreshFailedError(reason, sourceError) {
   const { CliError } = require('../core/cli-error');
   return new CliError(
@@ -630,7 +650,12 @@ async function tokenLogout(options = {}) {
 }
 
 async function getAccessToken(options = {}) {
-  let session = loadTokenSession(options);
+  const resolution = resolveTokenSession(options);
+  let session = resolution.session;
+  if (!session) {
+    const selectionError = createAuthProfileSelectionError(resolution);
+    if (selectionError) {throw selectionError;}
+  }
   // Do not reject a token from local expiry metadata. The business endpoint is
   // the authority: requestWithAutoLogin refreshes only after it rejects the
   // access token, then retries with the newly persisted local session.
@@ -675,4 +700,5 @@ module.exports = {
   resolveTokenBaseUrl,
   isRefreshAuthRequired,
   createTokenRefreshFailedError,
+  createAuthProfileSelectionError,
 };

package/lib/auth/token-store.js

@@ -472,12 +472,31 @@ function saveAuthProfilePointer(session, options = {}) {
   return pointer;
 }
 
-function loadAuthProfilePointer(options = {}) {
-  const pointerFile = getAuthProfilePointerFilePath(options);
-  if (!fs.existsSync(pointerFile)) {
+function getWorkspaceAuthProfilePointerFilePath(options = {}) {
+  const root = path.resolve(resolveProjectRoot(options));
+  const workspace = path.dirname(root);
+  if (isEnvTokenAuthMode(options.env || process.env) || path.basename(root) !== 'project' ||
+      fs.existsSync(path.join(workspace, 'config.json'))) {
     return null;
   }
   try {
+    // Only bridge the conventional workspace -> workspace/project transition.
+    // A symlinked project belongs to its own workspace, not its lexical parent.
+    if (fs.realpathSync(root) !== path.join(fs.realpathSync(workspace), 'project')) {return null;}
+    return getAuthProfilePointerFilePath({ ...options, projectRoot: workspace, envName: resolveEnvName(options) });
+  } catch {return null;}
+}
+
+function loadAuthProfilePointer(options = {}) {
+  try {
+    let pointerFile = getAuthProfilePointerFilePath(options);
+    // An explicit child selection (including an unbound/corrupt pointer) wins.
+    // Reading inherited metadata never copies credentials or writes a pointer.
+    if (!fs.existsSync(pointerFile)) {
+      if (fs.existsSync(getTokenFilePath(options))) {return null;}
+      pointerFile = getWorkspaceAuthProfilePointerFilePath(options);
+    }
+    if (!pointerFile || !fs.existsSync(pointerFile)) {return null;}
     const pointer = JSON.parse(fs.readFileSync(pointerFile, 'utf8'));
     if (!pointer || typeof pointer !== 'object' || !pointer.auth_profile) {
       return null;
@@ -491,6 +510,13 @@ function loadAuthProfilePointer(options = {}) {
 function clearAuthProfilePointer(options = {}) {
   try {
     const pointerFile = getAuthProfilePointerFilePath(options);
+    const workspacePointerFile = getWorkspaceAuthProfilePointerFilePath(options);
+    if (workspacePointerFile && fs.existsSync(workspacePointerFile)) {
+      // Detaching this project must not revive its inherited workspace choice
+      // on the next command, or clear another project's workspace selection.
+      writeJsonFileAtomic(pointerFile, { version: AUTH_PROFILE_VERSION, detached: true });
+      return;
+    }
     if (fs.existsSync(pointerFile)) {
       fs.unlinkSync(pointerFile);
     }

package/lib/core/command-manifest.js

@@ -1165,7 +1165,8 @@ const COMMAND_GROUPS = [
         output: 'text|json',
         args: [
           { name: 'buildPlan', type: 'file', required: true, source: 'positional', position: 0, builder_options: ['--build-plan'] },
-          { name: 'set', type: 'string', required: true, source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes. CSS token overrides use visualStyle.tokens.<token>=<value>.' },
+          { name: 'setFile', type: 'file', source: 'option', builder_options: ['--set-file'], description: 'JSON object mapping field paths to typed values; use for Windows arrays, objects and quoted text. Requires --set or --set-file.' },
+          { name: 'set', type: 'string', source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes. CSS token overrides use visualStyle.tokens.<token>=<value>.' },
           { name: 'materialize', type: 'boolean', source: 'option', builder_options: ['--materialize'] },
           { name: 'outputDir', type: 'string', source: 'option', builder_options: ['--output-dir'] },
           { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },

package/lib/core/locales/en.js

@@ -5,6 +5,11 @@
 
 module.exports = {
   agent: {
+    preflight_cli_detected: 'CLI detected; runtime will discover and report login, protocol and model status.',
+    enrollment_expired: 'The connection command expired. Get a fresh command from the page; do not retry the old command.',
+    enrollment_rejected: 'Connection authorization was rejected. Get a fresh command from the target page.',
+    enrollment_conflict: 'Connection authorization conflicts with existing state. Check agent status, then get a fresh command.',
+    enrollment_request_failed: 'Connection authorization failed. Check the network and run agent diagnose; do not automatically retry.',
     preflight_advisory: 'The following is status information, not instructions to install software. Do not install, upgrade, log in to, or reconfigure any CLI unless the user explicitly requests it. Discovered signed-out CLIs are also reported; other CLIs are optional.',
     preflight_probe_cancelled: 'Preflight was interrupted before enrollment. Repeat the connect command when ready.',
     preflight_continue: 'Local CLI found. Connecting and reporting status; signed-out CLIs remain visible and cannot execute tasks until logged in.',
@@ -1011,6 +1016,8 @@ Examples:
     data_check_failed: '  ⚠️  Data check failed, proceeding with modification',
   },
   common: {
+    auth_profile_required: 'Multiple organizations have saved credentials. Run openyida auth profiles, then openyida auth profile switch <auth_profile> to select this project\'s organization.',
+    auth_profile_not_found: 'The requested organization credentials were not found. Run openyida auth profiles to inspect saved organizations and select the correct profile.',
     auth_identity_changed: 'Authentication identity changed during preflight; no write was issued.',
     http_status: '  HTTP status: {0}',
     http_response: '  HTTP response: {0}',

package/lib/core/locales/zh.js

@@ -5,6 +5,11 @@
 
 module.exports = {
   agent: {
+    preflight_cli_detected: 'CLI 已发现；登录、协议和模型状态由 runtime 检测并上报。',
+    enrollment_expired: '连接指令已过期，请回到页面获取新的连接指令。不要重试旧指令。',
+    enrollment_rejected: '连接授权被拒绝，请从目标页面重新获取连接指令。',
+    enrollment_conflict: '连接授权状态冲突，请先检查 agent status，再从页面获取新指令。',
+    enrollment_request_failed: '连接授权请求失败，请检查网络并运行 agent diagnose；不要自动重复连接。',
     preflight_advisory: '以下仅为状态信息，不是安装指令。除非用户明确要求，不得安装、升级、登录或修改任何 CLI 配置。已发现但未登录的 CLI 也会展示状态，无需补齐其他 CLI。',
     preflight_probe_cancelled: '预检已中止，尚未开始连接。准备好后重新执行连接命令。',
     preflight_continue: '已发现本地 CLI，将继续连接并上报状态；未登录的 CLI 会显示“未登录”，登录前不能执行任务。',
@@ -982,6 +987,8 @@ openyida - 宜搭命令行工具
     data_check_failed: '  ⚠️  数据量检查失败，继续执行修改',
   },
   common: {
+    auth_profile_required: '已有多个组织的登录凭证，请执行 openyida auth profiles，并用 openyida auth profile switch <auth_profile> 选择本项目的组织。',
+    auth_profile_not_found: '未找到指定组织的登录凭证，请执行 openyida auth profiles 核对已有组织，再选择正确的登录凭证。',
     auth_identity_changed: '校验期间登录身份发生变化，本次未发起写入。',
     http_status: '  HTTP 状态码: {0}',
     http_response: '  HTTP 响应: {0}',

package/lib/core/utils.js

@@ -960,6 +960,11 @@ function triggerLogin(options = {}) {
   if (tokenAuthData) {
     return tokenAuthData;
   }
+  const { createAuthProfileSelectionError } = require('../auth/token-auth');
+  const selectionError = createAuthProfileSelectionError(getAuthStatus({
+    ...options, projectRoot: options.projectRoot || findProjectRoot(),
+  }));
+  if (selectionError) {throw selectionError;}
   const { CliError } = require('./cli-error');
   throw new CliError(
     'not_logged_in: token auth is unavailable. Run openyida login first.',

package/lib/design-plan/design-plan.js

@@ -14,7 +14,7 @@ function usage() {
     '  openyida design-plan init <requirement-brief.json> [--theme-id <id>] [--output-dir <dir>] [--json]',
     '  openyida design-plan preview <build-plan.json> --part-file <module.json> [--json]',
     '  openyida design-plan materialize <build-plan.json> [--from-preview | --business-file <json> --visual-file <json>] [--output-dir <dir>] [--rebase-parts] [--check] [--json]',
-    '  openyida design-plan patch <build-plan.json> --set <path=value> [--set <path=value> ...] [--materialize] [--output-dir <dir>] [--json]',
+    '  openyida design-plan patch <build-plan.json> [--set <path=value> ...] [--set-file <changes.json>] [--materialize] [--output-dir <dir>] [--json]',
   ].join('\n');
 }
 
@@ -56,7 +56,7 @@ const OPTION_SCHEMA = Object.freeze({
   init: { flags: ['--json'], values: ['--theme-id', '--output-dir'] },
   preview: { flags: ['--json'], values: ['--part-file'] },
   materialize: { flags: ['--from-preview', '--rebase-parts', '--check', '--json'], values: ['--business-file', '--visual-file', '--output-dir'] },
-  patch: { flags: ['--materialize', '--json'], values: ['--set', '--output-dir'], inlineValues: ['--set'] },
+  patch: { flags: ['--materialize', '--json'], values: ['--set', '--set-file', '--output-dir'], inlineValues: ['--set'] },
 });
 
 function assertKnownOptions(subcommand, args) {
@@ -126,7 +126,7 @@ async function run(args) {
         ? preview(input, { partFile: optionValue(options, '--part-file') })
         : subcommand === 'materialize'
           ? materialize(input, { outputDir, check: options.includes('--check'), rebaseParts: options.includes('--rebase-parts'), fromPreview: options.includes('--from-preview'), businessFile: optionValue(options, '--business-file'), visualFile: optionValue(options, '--visual-file') })
-          : patchPlan(input, setValues(options), { outputDir, materialize: options.includes('--materialize') });
+          : patchPlan(input, setValues(options), { outputDir, setFile: optionValue(options, '--set-file'), materialize: options.includes('--materialize') });
   } catch (error) {
     const files = [input, ...['--business-file', '--visual-file', '--part-file'].map(flag => optionValue(options, flag))];
     if (subcommand !== 'init') {

package/lib/design-plan/patch.js

@@ -156,9 +156,16 @@ function isAssetProgressOnly(original, patched) {
 
 function patchPlan(inputPath, setExpressions, options = {}) {
   const resolvedInput = path.resolve(inputPath);
-  const expressions = Array.isArray(setExpressions) ? setExpressions : [];
+  const expressions = Array.isArray(setExpressions) ? [...setExpressions] : [];
+  if (options.setFile) {
+    const changes = readJson(path.resolve(options.setFile));
+    if (!changes || Array.isArray(changes) || typeof changes !== 'object') {
+      throw new CliError('--set-file requires a JSON object mapping field paths to values', { code: 'DESIGN_PLAN_INVALID_SET_FILE' });
+    }
+    for (const [field, value] of Object.entries(changes)) { expressions.push(field + '=' + JSON.stringify(value)); }
+  }
   if (expressions.length === 0) {
-    throw new CliError('design-plan patch 至少需要一个 --set path=value', {
+    throw new CliError('design-plan patch 至少需要一个 --set path=value 或 --set-file changes.json', {
       code: 'DESIGN_PLAN_SET_REQUIRED',
     });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.10.15",
+  "version": "2026.10.16",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",
@@ -114,9 +114,9 @@
     "endpoint": "https://www.aliwork.com/openyida/agent-api"
   },
   "optionalDependencies": {
-    "@openyida/local-agent-runtime-darwin-arm64": "0.1.2",
-    "@openyida/local-agent-runtime-darwin-x64": "0.1.2",
-    "@openyida/local-agent-runtime-win32-x64": "0.1.2",
-    "@openyida/local-agent-runtime-win32-arm64": "0.1.2"
+    "@openyida/local-agent-runtime-darwin-arm64": "0.1.3",
+    "@openyida/local-agent-runtime-darwin-x64": "0.1.3",
+    "@openyida/local-agent-runtime-win32-x64": "0.1.3",
+    "@openyida/local-agent-runtime-win32-arm64": "0.1.3"
   }
 }

package/yida-skills/references/local-agent-preflight.md

@@ -29,7 +29,9 @@ openyida agent doctor --provider codex --json
 
 桌面版是否存在与 CLI 是否可用是两个独立事实。Qoder 桌面程序不会作为 CLI 启动；Codex 内置程序被发现后仍需通过检查。
 
-Qoder 检查版本、ACP 初始化和 CLI 模型列表；Codex 检查版本、app-server 初始化和登录状态。不发送模型 prompt、不创建业务对象、不自动安装程序、不发起登录、不复制其他应用的凭据。Windows 单次子进程检查超时为 45 秒，每个 Provider 总预算为 135 秒；其他平台分别为 15 秒与 30 秒。总预算耗尽即停止探测，不把超时当作未安装。
+连接和重连先检查所有已安装 CLI 的版本，全部可上报 CLI 都会交给 Runtime，不会因第一个 CLI 可用而跳过其他 CLI。登录、协议和模型状态由 Runtime 检测并持续上报；预检成功仅表示已安装，不表示已登录。版本输出符合严格格式时，通过已有 version 字段复用，避免 Runtime 再次启动同一版本查询。
+
+完整 `doctor` 诊断仍检查：Qoder 版本、ACP 初始化和 CLI 模型列表；Codex 版本、app-server 初始化和登录状态。不发送模型 prompt、不创建业务对象、不自动安装程序、不发起登录、不复制其他应用的凭据。Windows 单次子进程检查超时为 45 秒，每个 Provider 总预算为 135 秒；其他平台分别为 15 秒与 30 秒。总预算耗尽即停止探测，不把超时当作未安装。
 
 当前接入范围为 Qoder 和 Codex。
 
@@ -37,6 +39,7 @@ Qoder 检查版本、ACP 初始化和 CLI 模型列表；Codex 检查版本、ap
 
 | status | 含义 | 下一步 |
 | --- | --- | --- |
+| cli_detected | 连接预检已确认 CLI 可执行，登录/协议尚未检查 | 继续注册，等待 Runtime 上报实际状态；不要重复连接 |
 | ready | CLI 登录和协议检查通过 | 继续连接 |
 | available | 可启动，但有能力尚未验证 | 继续现有接入流程，保留未验证标记 |
 | cli_not_found | 未找到 CLI | 仅报告缺失；用户明确要求后才协助安装或指定路径 |
@@ -47,7 +50,7 @@ Qoder 检查版本、ACP 初始化和 CLI 模型列表；Codex 检查版本、ap
 | probe_cancelled | 用户中止预检 | 清理本轮检查进程，停止连接 |
 | probe_failed | 命令检查失败，原因不能可靠归类 | 直接运行 CLI 检查配置、账号或网络 |
 
-`--json` 返回 `schemaVersion=1`、逐 provider 状态、`desktopDetected`、`cliDetected`、`usable`、`registrable` 和 `remediation`。诊断信息标记 INFORMATION_ONLY、requiresExplicitUserRequest=true 和 automaticActionAllowed=false，提供文档、路径选项及复查命令，不输出安装或登录命令；不包含原始 Provider 输出、用户标识或凭据。
+`--json` 返回 `schemaVersion=1`、逐 provider 状态、`desktopDetected`、`cliDetected`、`usable`、`registrable` 和按需提供的 `remediation`；识别到严格格式版本时附带 `version`。诊断信息标记 INFORMATION_ONLY、requiresExplicitUserRequest=true 和 automaticActionAllowed=false，提供文档、路径选项及复查命令，不输出安装或登录命令；不包含原始 Provider 输出、用户标识或凭据。
 
 `doctor.providerReady` 表示本地 CLI 检查结果，`runtime.installed` 表示 Runtime 制品校验结果。两者通过仍不等于宜搭连接已授权或真实业务 E2E 通过，因此 doctor 的 `ready` 不表示连接在线。`cliDetected` 表示 CLI 版本探测成功，`registrable` 表示已发现且可上报，登录或协议检查失败不会删除安装清单（用户取消除外）；`usable` 表示执行就绪。`readyForEnrollment` 只要求至少一个可上报 CLI 且用户未取消。`connect` 和 `run` 将这些 CLI 交给 Runtime，未登录状态由 Runtime 上报，前端显示“未登录”，服务端拒绝任务执行。即使全部已发现 CLI 都未登录，也允许连接电脑并展示状态。
 

package/yida-skills/skills/yida-app/workflow/plan/workflow.md

@@ -73,3 +73,13 @@ build-plan.json（业务和视觉的源事实）
 如果已经改动主计划并出现 DESIGN_PLAN_STALE_PART，在原 materialize 命令增加 --rebase-parts。CLI 使用 init 保存的 .build-plan-base.json 做三方核对，保留已完成 facts；冲突按 details.conflicts 明确选择后重试。基线缺失或无法核实时告知阻塞并恢复可信文件，不手填 digest、不删除重建、不重新 init。方案确认后调整一律走 patch --materialize；确认前重复物化仍可用 --rebase-parts 与基线核对，但改动内容以当前 build-plan.json 为准。
 
 本地校验失败统一按[本地校验修复](../../../../references/source-repair.md)处理：先修正并回读源文件，未变化不重跑，连续两次修复无进展时保留产物并报告阻塞。
+
+
+### Windows 参数传递
+
+修改方案中的数组、对象或包含双引号的文本时，先用文件写入工具保存 UTF-8 JSON 文件，再执行
+
+`openyida design-plan patch prd/build-plan.json --set-file prd/changes.json --materialize --json`
+
+changes.json 是字段路径到值的映射，例如 {"dataModels[0].fields":[{"name":"物品名称","type":"TextField","required":true}]}。
+不要把整个 JSON 内联到 PowerShell 或 cmd 参数中；文件输入仍经过相同字段保护、方案校验和确认失效处理。

package/yida-skills/skills/yida-design/templates/design-themes/dark-rail-fine-lines/app_theme.css

@@ -106,8 +106,8 @@
   --corner-3: 2px;
   --corner-4: 2px;
   --corner-5: 2px;
-  --corner-circle: var(--corner-2);
-  --corner-semicircle: 2px;
+  --corner-circle: 999px;
+  --corner-semicircle: var(--corner-2);
 
   /* 阴影 */
   --shadow-1: 0px 2px 4px 0px rgba(0, 0, 0, 0.12);
@@ -158,7 +158,7 @@
   /* 卡片 */
   --pod-card-padding: 20px;
   --pod-card-border-radius: var(--pod-xl-border-radius, 20px);
-  --pod-card-border: none;
+  --pod-card-border: 1px solid var(--color-line1-1);
   --pod-card-spacing: var(--pod-md-gap-pad-margin);
 
   /* 导航：顶导与侧导布局 */

package/yida-skills/skills/yida-design/templates/design-themes/dark-rail-fine-lines/design.md

@@ -11,6 +11,7 @@ tokens:
         "--pod-app-root-bg-image": "none" # 仅作用于根节点；本主题不使用背景图
         "--pod-page-bg-color": "#FFFFFF" # neutral-gray；白色内容画布
         "--pod-card-bg-color": "#FFFFFF" # neutral-gray；一级内容表面
+        "--pod-card-border": "1px solid var(--color-line1-1)"
         "--pod-table-cell-color": "var(--pod-card-bg-color)" # 表格正文跟随卡片表面
         "--pod-shell-padding": "0px"
       navigation:
@@ -112,8 +113,8 @@ tokens:
       "--corner-3": 2px # 气泡、浮层、弹窗外轮廓
       "--corner-4": 2px # 小型嵌入摘要与内部组合容器
       "--corner-5": 2px # 卡片、独立面板与抽屉外轮廓
-      "--corner-circle": "var(--corner-2)" # 等宽高头像、图例圆点
-      "--corner-semicircle": 2px # 胶囊按钮、计数标记、进度条圆头
+      "--corner-circle": 999px # 等宽高头像、图例圆点
+      "--corner-semicircle": "var(--corner-2)" # 胶囊按钮、计数标记、进度条圆头
     shadow:
       "--shadow-1": "0px 2px 4px 0px rgba(0, 0, 0, 0.12)"
       "--shadow-2": "0px 4px 20px -1px rgba(0, 0, 0, 0.16)"