openyida 2026.10.15 → 2026.10.16-2

package/README.md

@@ -245,10 +245,13 @@ openyida configure-process APP_XXX FORM_XXX .cache/openyida/process/process.json
 openyida process preview APP_XXX PROC_INST_XXX --output .cache/openyida/process/process.html
 openyida data query form APP_XXX FORM_XXX --page 1 --size 20
 openyida data query form APP_XXX FORM_XXX --dynamic-order '{"dateField_xxx":"-"}'
+openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count
 openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-file .cache/openyida/data-import/record.json
 openyida get-permission APP_XXX FORM_XXX
 ```
 
+`--current-approver` takes an exact userId, not a display name. It scans running instances and their current TODO records, counts each matching instance once, and respects the current login's server-authorized data scope. Omit `--count` to include matching instance data. An incomplete scan or permission failure is reported as an error; the result does not claim application-wide visibility.
+
 Append and forward permissions are configured in the process definition through `nodes[].actions.normalActions/appendActions`. Both `create-process` and `configure-process` compile these settings into matching designer and runtime properties. See [approval action configuration](yida-skills/skills/yida-process-rule/references/approval-actions.md) for the JSON example, defaults, and verification limits.
 
 `configure-process` 的流程 JSON 中，审批人可配置为发起人、指定成员、指定角色、部门主管或直属主管，例如：
@@ -476,7 +479,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
-| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check PRD page/resource count risk |
+| `openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]` | Check resources, frontend menu hiding and application theme delivery |
 | `openyida check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]` | Validate design documents, theme tokens and PRD handoff |
 | `openyida er <appType> [--format mermaid\|json] [--output file] [--include-system] [--include-pages]` | Export app entity relationship diagram |
 | `openyida create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a custom display page |

package/lib/agent/cmd.js

@@ -285,7 +285,7 @@ async function run(argv = [], options = {}) {
     // Inventory includes signed-out CLIs. Runtime reports their auth status;
     // the control plane independently enforces task readiness.
     config.providers = providerCheck.providers.filter(p => p.registrable).map(p => ({
-      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable,
+      profileId: 'openyida.' + p.provider, provider: p.provider, executable: p.executable, ...(p.version ? { version: p.version } : {}),
     }));
   }
   if (managedConnections && args.command === 'connect') {

package/lib/agent/frozen-bundle.js

@@ -285,11 +285,11 @@ function materializeBundle(runtime, config, options = {}) {
       catch (error) {
         if (!['EEXIST', 'ENOTEMPTY', 'EACCES', 'EPERM'].includes(error.code) || !fs.existsSync(root)) {throw error;}
       }
-    } else {
-      // Never trust a version or mtime cache. Check source stability and every
-      // byte of the existing bundle, including unexpected entries, on reuse.
-      verifySources();
     }
+    // On reuse, source bytes were hashed to compute this exact manifest ID.
+    // We execute only the existing bundle, whose complete inventory and bytes
+    // are verified below. Reopening the source snapshot cannot make that bundle
+    // more trustworthy. New publication still checks source stability above.
     if (published) {fs.chmodSync(root, 0o500);}
     verifyBundle(root, id);
     const bundle = { schemaVersion: 1, id, root, manifestPath: path.join(root, 'bundle-manifest.json'), manifestSha256: id,

package/lib/agent/private-directory.js

@@ -51,8 +51,15 @@ foreach ($sid in @($identity.Value, 'S-1-5-18', 'S-1-5-32-544')) {
 foreach ($directory in ($reader.ReadToEnd() | ConvertFrom-Json)) {
   # Concurrent launchers may create the same parent. Never rewrite a winner;
   # accept it only when its actual owner and grants meet the same private policy.
-  [System.IO.Directory]::CreateDirectory($directory, $acl) | Out-Null
-  $actual = (New-Object System.IO.DirectoryInfo($directory)).GetAccessControl()
+  # Extended-length paths avoid the .NET Framework MAX_PATH limit. Paths
+  # are already absolute and validated by the Node caller.
+  $nativePath = $directory
+  if (-not $directory.StartsWith('\\\\?\\')) {
+    if ($directory.StartsWith('\\\\')) { $nativePath = '\\\\?\\UNC\\' + $directory.Substring(2) }
+    else { $nativePath = '\\\\?\\' + $directory }
+  }
+  [System.IO.Directory]::CreateDirectory($nativePath, $acl) | Out-Null
+  $actual = (New-Object System.IO.DirectoryInfo($nativePath)).GetAccessControl()
   if ($actual.GetOwner([System.Security.Principal.SecurityIdentifier]).Value -ne $identity.Value) {throw 'Private directory owner differs'}
   foreach ($rule in $actual.Access) {
     $sid = $rule.IdentityReference.Translate([System.Security.Principal.SecurityIdentifier]).Value

package/lib/agent/provider-preflight.js

@@ -186,7 +186,14 @@ async function checkProvider(provider, executable, options) {
   if (version.status !== 'passed') { return { status: version.status, cliDetected: false }; }
   // Installation evidence is independent of authentication/protocol readiness.
   // Apply this consistently to every enabled provider, including future adapters.
-  const detected = { cliDetected: true };
+  // Reuse only a bounded, recognizable version line from this exact probe.
+  // Arbitrary provider banners/stderr never become launch metadata.
+  const versionLine = String(version.output || '').split(/\r?\n/).map(line => line.trim()).find(line =>
+    line.length <= 64 && /^(?:(?:codex(?:-cli)?|qoder(?:cli| cli)?|opencode)\s+)?v?\d+\.\d+\.\d+(?:[-+][0-9a-z.-]+)?(?:\s+\([0-9a-z ._-]+\))?$/i.test(line));
+  const detected = { cliDetected: true, ...(versionLine ? { version: versionLine } : {}) };
+  // Connect/run only establish installation inventory. The runtime discovers live
+  // protocol, login and models for EVERY registered provider; doctor probes them here.
+  if (options.inventoryOnly) { return { ...detected, status: 'cli_detected', authKnown: false, protocolProbe: 'not_run' }; }
   if (provider === 'opencode') { return { ...detected, status: 'available', authKnown: false, protocolProbe: 'not_run' }; }
   const protocol = await execute(executable, provider === 'qoder' ? ['--acp'] : ['app-server', '--listen', 'stdio://'], provider, options);
   if (protocol.status === 'login_required') {
@@ -230,9 +237,9 @@ async function preflight(args, options = {}) {
     };
     for (const candidate of entry.candidates.slice(0, 4)) {
       executable = candidate;
-      result = await checkProvider(entry.provider, executable, { ...options, probe: boundedProbe });
+      result = await checkProvider(entry.provider, executable, { ...options, inventoryOnly: ['connect', 'run'].includes(args.command), probe: boundedProbe });
       if (result.cliDetected && !discovered) { discovered = { result, executable }; }
-      if (Date.now() >= deadline || ['ready', 'available', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
+      if (Date.now() >= deadline || ['ready', 'available', 'cli_detected', 'login_required', 'probe_cancelled'].includes(result.status)) { break; }
     }
     if (!result.cliDetected && result.status !== 'probe_cancelled' && discovered) {
       ({ result, executable } = discovered);

package/lib/agent/runtime-catalog.json

@@ -3,6 +3,9 @@
   "keys": {
     "openyida-runtime-public-beta-20260923-1": {
       "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEApl2Q+64rX997KxEQUY2yU8Xnc7sM3NRQ8Nf0bAi9Hck=\n-----END PUBLIC KEY-----\n"
+    },
+    "openyida-runtime-public-beta-20261012-1": {
+      "publicKey": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAKaA5RBJXWVhQa+9ehmR3x7WQCAlVGxbJULG9T17qmRc=\n-----END PUBLIC KEY-----\n"
     }
   },
   "releases": [
@@ -10,33 +13,33 @@
       "platform": "darwin",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-darwin-arm64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "98909c5b049544aa287abb781796a6b2261948eae8a4eb4ee6a345edc3ebb8b4"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "48dc2a4473422c663e3330840c4f96e6646b2ff70ed61452fef8f1e68bf4a258"
     },
     {
       "platform": "darwin",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-darwin-x64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "29d95d796890fcf6047e79e1a101d68f70506bcd53a5e813d19bf7b833ddb899"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "1c93114b7fc9f2af7de1088d801ccbd3eaf32aabd967b5bd56917e8c1ec0661b"
     },
     {
       "platform": "win32",
       "arch": "x64",
       "packageName": "@openyida/local-agent-runtime-win32-x64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "44aff218711c120d4d24e3c34ce2867a34d6f78bab5c1682a4808b4b9c3cfd56"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "13a7fc58b87a7f3f2592ba5239992c415463ab8b3fbf32312944db8c611fb813"
     },
     {
       "platform": "win32",
       "arch": "arm64",
       "packageName": "@openyida/local-agent-runtime-win32-arm64",
-      "packageVersion": "0.1.2",
-      "runtimeVersion": "0.1.2",
-      "manifestSha256": "742e21e97f7c72ca78030d43f10d42e7470da2aabc0af6a8536dde6767390680"
+      "packageVersion": "0.1.4",
+      "runtimeVersion": "0.1.4",
+      "manifestSha256": "49e63f81730e1ee495863a48b9e90f687e9529e700788665196c169a630ed094"
     }
   ]
 }

package/lib/agent/stdio.js

@@ -127,7 +127,13 @@ function launchRuntime(runtime, config, options = {}) {
           diagnostic('error', 'runtime_action_failed', {
             command: config.command, component: 'node', errorCode: code, retryable: event.retryable === true,
           });
-          failure = new CliError(t('agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
+          const enrollmentMessages = {
+            ENROLLMENT_EXPIRED: 'agent.enrollment_expired',
+            ENROLLMENT_REJECTED: 'agent.enrollment_rejected',
+            ENROLLMENT_CONFLICT: 'agent.enrollment_conflict',
+            ENROLLMENT_REQUEST_FAILED: 'agent.enrollment_request_failed',
+          };
+          failure = new CliError(t(enrollmentMessages[code] || 'agent.runtime_failed'), { code, details: { retryable: event.retryable === true } });
           stop('SIGTERM');
           return;
         }

package/lib/app/check-prd-completeness.js

@@ -268,8 +268,19 @@ function extractResources(markdown) {
 }
 
 function parsePrdMarkdown(markdown) {
+  const navigationVisibility = [];
+  let applicationTheme;
+  for (const match of String(markdown || '').matchAll(/```json\s*\n([\s\S]*?)\n```/g)) {
+    try {
+      const handoff = JSON.parse(match[1]);
+      if (Array.isArray(handoff.navigationVisibility)) {navigationVisibility.push(...handoff.navigationVisibility);}
+      if (Object.prototype.hasOwnProperty.call(handoff, 'applicationTheme')) {applicationTheme = handoff.applicationTheme;}
+    } catch { /* Other fenced examples are not the structured execution handoff. */ }
+  }
   return {
     resources: extractResources(markdown),
+    navigationVisibility,
+    ...(applicationTheme !== undefined ? { applicationTheme } : {}),
   };
 }
 
@@ -451,6 +462,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const parsedManifest = parseBuildManifest(options.buildManifest);
   const items = [];
   const assetExecution = auditAssetExecution(options.buildManifest?.assetExecution, options.buildManifest?.assetTasks);
+  let themeVerification;
 
   function addItem(id, source, status, severity, message, details = {}) {
     items.push(makeRiskItem(id, source, status, severity, message, details));
@@ -465,6 +477,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
       verdict,
       mode: 'delivery_risk_radar',
       assetExecution,
+      ...(themeVerification ? { themeVerification } : {}),
       appType,
       prdPath: options.prdPath || '',
       buildManifestPath: options.buildManifestPath || '',
@@ -510,7 +523,7 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const fetchForms = deps.fetchForms || fetchFormPageList;
   let forms = [];
   try {
-    forms = await fetchForms(appType, authRef);
+    forms = await fetchForms(appType, authRef, { includeNavigation: true });
   } catch (error) {
     addItem('app_resource_list_read_failed', 'remote.resource_list', 'fail', 'blocker', '目标应用资源列表读取失败，无法执行数量完整性检查', {
       expected: { appType, readable: true },
@@ -522,6 +535,55 @@ async function evaluatePrdCompleteness(markdown, options = {}, deps = {}) {
   const actualResources = forms.map(makeActualResource);
   const manifestResources = parsedManifest.resources.filter(resource => resource.required);
 
+  if (parsedPrd.applicationTheme !== undefined) {
+    const expected = parsedPrd.applicationTheme;
+    const { normalizeCssColorToHex } = require('./custom-theme');
+    const expectedColor = normalizeCssColorToHex(expected?.themeColor);
+    themeVerification = { configurationReadback: false, verified: false, runtimeVerified: false };
+    try {
+      if (!expectedColor || !['light', 'dark'].includes(expected?.navTheme)) {throw new Error('INVALID_THEME_EXPECTATION');}
+      const { fetchCurrentApp, getThemeSettings, getNavigationSettings } = require('./update-app');
+      const app = await (deps.fetchApp || fetchCurrentApp)(appType, authRef);
+      if (!app || typeof app !== 'object' || Array.isArray(app) || !Object.keys(app).length) {throw new Error('APP_SETTINGS_UNAVAILABLE');}
+      const settings = getThemeSettings(app);
+      const rawNav = getNavigationSettings(app, ['navTheme']).navTheme;
+      const actual = {
+        colour: settings.colour,
+        themeColor: normalizeCssColorToHex(settings.themeColor),
+        navTheme: ['white', 'gray'].includes(rawNav) ? 'light' : rawNav,
+        customThemeEnabled: settings.customThemeStyle?.enabled,
+        hasCssUrl: typeof settings.customThemeStyle?.cssUrl === 'string' && !!settings.customThemeStyle.cssUrl.trim(),
+      };
+      const matched = actual.colour === 'custom' && actual.themeColor === expectedColor
+        && actual.navTheme === expected.navTheme && actual.customThemeEnabled === true && actual.hasCssUrl;
+      themeVerification = { ...themeVerification, configurationReadback: true, verified: matched, expected, actual };
+      if (!matched) {
+        addItem('application_theme_mismatch', 'remote.application_theme', 'fail', 'blocker',
+          t('check_prd_completeness.application_theme_mismatch'), { expected, actual });
+      }
+    } catch {
+      addItem('application_theme_not_checked', 'remote.application_theme', 'not_checked', 'warning',
+        t('check_prd_completeness.application_theme_not_checked'), { expected });
+    }
+  }
+
+  // Reuse the resource-list readback. Page renderNav and menu visibility are
+  // independent; a successful publication cannot prove the latter.
+  for (const expected of parsedPrd.navigationVisibility) {
+    const matches = parsedManifest.resources.filter(resource => resource.name === expected?.name && resource.kind === 'display-page');
+    const ids = [...new Set(matches.map(resource => resource.formUuid).filter(Boolean))];
+    const actual = ids.length === 1 ? forms.find(form => form.formUuid === ids[0]) : undefined;
+    const known = value => typeof value === 'boolean';
+    const valid = expected?.hidden === true && expected?.mobileHidden === true;
+    if (valid && actual && (actual.hidden === false || actual.mobileHidden === false)) {
+      addItem('frontend_navigation_visible', 'remote.navigation', 'fail', 'blocker',
+        t('check_prd_completeness.frontend_navigation_visible', expected.name), { expected, actual });
+    } else if (!valid || !actual || !known(actual.hidden) || !known(actual.mobileHidden)) {
+      addItem('frontend_navigation_not_checked', 'prd.navigationVisibility', 'not_checked', 'warning',
+        t('check_prd_completeness.frontend_navigation_not_checked', expected?.name || ''), { expected, actual: actual || null });
+    }
+  }
+
   if (!options.buildManifest) {
     addItem('build_manifest_missing', 'build_manifest', 'not_checked', 'info', '未提供 build-manifest.json，只能基于 PRD 资源 hints 做风险提示', {
       expected: '--build-manifest <file>',

package/lib/app/form-navigation.js

@@ -8,7 +8,7 @@ function resolveLocalizedText(value, fallback = '') {
   return parseYidaI18n(value, fallback, { parseJson: false });
 }
 
-function normalizeFormNavigationNode(node) {
+function normalizeFormNavigationNode(node, options = {}) {
   if (!node || node.navType === 'SYSTEM' || !node.formUuid) {
     return null;
   }
@@ -21,10 +21,14 @@ function normalizeFormNavigationNode(node) {
     ),
     formType: node.formType || '',
     pathName: node.pathName || '',
+    ...(options.includeNavigation ? {
+      hidden: ['y', true].includes(node.hidden) ? true : ['n', false].includes(node.hidden) ? false : null,
+      mobileHidden: ['y', true].includes(node.mobileHidden) ? true : ['n', false].includes(node.mobileHidden) ? false : null,
+    } : {}),
   };
 }
 
-async function fetchFormPageList(appType, authRef) {
+async function fetchFormPageList(appType, authRef, options = {}) {
   const result = await createYidaClient({ authRef }).get(
     `/dingtalk/web/${appType}/query/formnav/getFormNavigationListByOrder.json`,
     { _api: 'Nav.queryList', _mock: false }
@@ -39,7 +43,7 @@ async function fetchFormPageList(appType, authRef) {
 
   const items = Array.isArray(result.content) ? result.content : [];
   return items
-    .map(normalizeFormNavigationNode)
+    .map(node => normalizeFormNavigationNode(node, options))
     .filter(Boolean);
 }
 

package/lib/app/update-app.js

@@ -819,6 +819,9 @@ async function run(args) {
 }
 
 module.exports = {
+  fetchCurrentApp,
+  getThemeSettings,
+  getNavigationSettings,
   run,
   parseArgs,
   hasShellUpdate,

package/lib/auth/token-auth.js

@@ -229,6 +229,26 @@ function createTokenAuthRequiredError(reason, sourceError) {
   );
 }
 
+function createAuthProfileSelectionError(status) {
+  const reason = status.failure_reason || status.status;
+  if (!['profile_required', 'profile_not_found'].includes(reason)) {return null;}
+  const { CliError } = require('../core/cli-error');
+  const { t } = require('../core/i18n');
+  return new CliError(t(`common.auth_${reason}`), {
+    code: reason === 'profile_required' ? 'AUTH_PROFILE_REQUIRED' : 'AUTH_PROFILE_NOT_FOUND',
+    details: {
+      authMode: 'token',
+      status: reason,
+      failure_reason: reason,
+      auth_profile: status.auth_profile,
+      candidate_count: status.candidate_count,
+      candidates: status.candidates,
+      next_step: status.next_step,
+      next_step_commands: status.next_step_commands,
+    },
+  });
+}
+
 function createTokenRefreshFailedError(reason, sourceError) {
   const { CliError } = require('../core/cli-error');
   return new CliError(
@@ -630,7 +650,12 @@ async function tokenLogout(options = {}) {
 }
 
 async function getAccessToken(options = {}) {
-  let session = loadTokenSession(options);
+  const resolution = resolveTokenSession(options);
+  let session = resolution.session;
+  if (!session) {
+    const selectionError = createAuthProfileSelectionError(resolution);
+    if (selectionError) {throw selectionError;}
+  }
   // Do not reject a token from local expiry metadata. The business endpoint is
   // the authority: requestWithAutoLogin refreshes only after it rejects the
   // access token, then retries with the newly persisted local session.
@@ -675,4 +700,5 @@ module.exports = {
   resolveTokenBaseUrl,
   isRefreshAuthRequired,
   createTokenRefreshFailedError,
+  createAuthProfileSelectionError,
 };

package/lib/auth/token-store.js

@@ -472,12 +472,31 @@ function saveAuthProfilePointer(session, options = {}) {
   return pointer;
 }
 
-function loadAuthProfilePointer(options = {}) {
-  const pointerFile = getAuthProfilePointerFilePath(options);
-  if (!fs.existsSync(pointerFile)) {
+function getWorkspaceAuthProfilePointerFilePath(options = {}) {
+  const root = path.resolve(resolveProjectRoot(options));
+  const workspace = path.dirname(root);
+  if (isEnvTokenAuthMode(options.env || process.env) || path.basename(root) !== 'project' ||
+      fs.existsSync(path.join(workspace, 'config.json'))) {
     return null;
   }
   try {
+    // Only bridge the conventional workspace -> workspace/project transition.
+    // A symlinked project belongs to its own workspace, not its lexical parent.
+    if (fs.realpathSync(root) !== path.join(fs.realpathSync(workspace), 'project')) {return null;}
+    return getAuthProfilePointerFilePath({ ...options, projectRoot: workspace, envName: resolveEnvName(options) });
+  } catch {return null;}
+}
+
+function loadAuthProfilePointer(options = {}) {
+  try {
+    let pointerFile = getAuthProfilePointerFilePath(options);
+    // An explicit child selection (including an unbound/corrupt pointer) wins.
+    // Reading inherited metadata never copies credentials or writes a pointer.
+    if (!fs.existsSync(pointerFile)) {
+      if (fs.existsSync(getTokenFilePath(options))) {return null;}
+      pointerFile = getWorkspaceAuthProfilePointerFilePath(options);
+    }
+    if (!pointerFile || !fs.existsSync(pointerFile)) {return null;}
     const pointer = JSON.parse(fs.readFileSync(pointerFile, 'utf8'));
     if (!pointer || typeof pointer !== 'object' || !pointer.auth_profile) {
       return null;
@@ -491,6 +510,13 @@ function loadAuthProfilePointer(options = {}) {
 function clearAuthProfilePointer(options = {}) {
   try {
     const pointerFile = getAuthProfilePointerFilePath(options);
+    const workspacePointerFile = getWorkspaceAuthProfilePointerFilePath(options);
+    if (workspacePointerFile && fs.existsSync(workspacePointerFile)) {
+      // Detaching this project must not revive its inherited workspace choice
+      // on the next command, or clear another project's workspace selection.
+      writeJsonFileAtomic(pointerFile, { version: AUTH_PROFILE_VERSION, detached: true });
+      return;
+    }
     if (fs.existsSync(pointerFile)) {
       fs.unlinkSync(pointerFile);
     }

package/lib/core/command-manifest.js

@@ -1165,7 +1165,8 @@ const COMMAND_GROUPS = [
         output: 'text|json',
         args: [
           { name: 'buildPlan', type: 'file', required: true, source: 'positional', position: 0, builder_options: ['--build-plan'] },
-          { name: 'set', type: 'string', required: true, source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes. CSS token overrides use visualStyle.tokens.<token>=<value>.' },
+          { name: 'setFile', type: 'file', source: 'option', builder_options: ['--set-file'], description: 'JSON object mapping field paths to typed values; use for Windows arrays, objects and quoted text. Requires --set or --set-file.' },
+          { name: 'set', type: 'string', source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes. CSS token overrides use visualStyle.tokens.<token>=<value>.' },
           { name: 'materialize', type: 'boolean', source: 'option', builder_options: ['--materialize'] },
           { name: 'outputDir', type: 'string', source: 'option', builder_options: ['--output-dir'] },
           { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
@@ -1492,7 +1493,7 @@ const COMMAND_GROUPS = [
       }),
       command('check-prd-completeness', ['check-prd-completeness'], 'check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]', 'help.cmd_check_prd_completeness', { managedRun: { scope: 'app', appParser: 'prd-completeness' },
         output: 'json',
-        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.'],
+        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.', 'When the PRD execution handoff contains navigationVisibility, resolves frontend display pages through build-manifest resource IDs and checks PC/mobile menu hiding using the same remote resource-list read. A visible menu fails; unknown visibility or missing ID binding needs review. Checks PRD applicationTheme against live application settings: selected brand color, custom CSS enabled with a resource URL, and navigation tone. Mismatch fails; unreadable settings or invalid expectations need review. Reuses update-app readback field handling. Does not verify page renderNav, actual CSS content/loading, default routes or browser appearance.'],
       }),
       command('check-design', ['check-design'], 'check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]', 'help.cmd_check_design', { managedRun: { scope: 'local' },
         requiresLogin: false,
@@ -1624,13 +1625,14 @@ const COMMAND_GROUPS = [
           } },
         } },
         output: 'json',
-        noteKeys: ['help.data_notes'],
+        noteKeys: ['help.data_notes', 'query_data.approver_query_help'],
         notes: [
           'Each condition uses key (field ID), componentName, type, operator and value. Query types: TextField/TextareaField/TableField TEXT; NumberField/RateField/DateField/CascadeDateField DOUBLE; RadioField/SelectField/CheckboxField/MultiSelectField/DepartmentSelectField ARRAY; EmployeeField/CascadeSelectField/CitySelectField STRING; ImageField/AttachmentField TEXT.',
           'Ordinary form searchFormDatas accepts AND condition arrays via --search-json/--search-file. DateField: type DOUBLE, is/is_not, value ""; zero is filled. Query range endpoints as DateField with .start/.end: both empty means unfilled, both filled means complete.',
           'Use synchronized NumberField counts (eq 0/gt 0) for any filled endpoint, multi-choice options or subform rows; maintain every write entry and backfill history. --resolve-aliases supports rangeAlias.start/.end and parentId aliases. Use server pagination and dynamicOrder. Guide: yida-skills/references/query-condition-guide.md; sample: yida-data-management empty-query.',
         ],
         examples: [
+          'openyida data query process APP_XXX FORM_XXX --current-approver USER_ID --count',
           'openyida data query form APP_XXX FORM_XXX --page 1 --size 20 --search-json \'[{"key":"dateField_due","componentName":"DateField","type":"DOUBLE","operator":"is","value":""}]\'',
           'openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-json \'{"textField_name":"客户 A","dateField_followUp":1787932800000}\'',
           'openyida data delete form APP_XXX FORM_XXX --inst-id FINST_XXX --expect-form-name 客户 --expect-form-type receipt --confirm --json',
@@ -2083,7 +2085,9 @@ function summarizeLocalizedCommands(commands) {
           derived_summary: 'execution.entryModeSummary is generated for PRD and preview from the selected mode; do not author it in build-plan.json.',
           roles: ['service', 'management', 'workspace'],
           entry_required_fields: ['key', 'name', 'role', 'menu', 'defaultMenuKey'],
-          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell',
+          service_page_binding: 'sceneKey of the frontend page; standalone by default, preserve explicit platform-shell. Missing page navigation for a multi-task service entry derives a custom top menu; single-task entries and explicit none retain their choice.',
+          application_theme_handoff: 'Derived applicationTheme in the PRD execution handoff records final design themeColor/navTheme/designFile for full builds. Fast records the same contract. check-prd-completeness reads current application settings; publish does not install application themes. Resource-only changes add no theme task. Configuration matching is separate from browser acceptance and custom-page token consumption.',
+          menu_visibility_handoff: 'Derived navigationVisibility in the PRD execution handoff, not a build-plan input: service-management hides frontend-only standalone display pages in PC/mobile platform menus. Shared forms and explicitly management-linked pages are preserved. Resolve names to build-manifest resource IDs; nav-group hide and readback are separate from page renderNav=false. Resource-only changes schedule no menu hiding.',
           page_navigation_policy: getPageNavigationContract(),
           local_menu_binding: 'Every entry containing local menus, including management/workspace, requires sceneKey matching exactly one page; each local menu requires resource equal to that page name and a nonempty viewKey.',
           menu_target_types: ['local', 'submission', 'page', 'custom'],

package/lib/core/locales/en.js

@@ -5,6 +5,11 @@
 
 module.exports = {
   agent: {
+    preflight_cli_detected: 'CLI detected; runtime will discover and report login, protocol and model status.',
+    enrollment_expired: 'The connection command expired. Get a fresh command from the page; do not retry the old command.',
+    enrollment_rejected: 'Connection authorization was rejected. Get a fresh command from the target page.',
+    enrollment_conflict: 'Connection authorization conflicts with existing state. Check agent status, then get a fresh command.',
+    enrollment_request_failed: 'Connection authorization failed. Check the network and run agent diagnose; do not automatically retry.',
     preflight_advisory: 'The following is status information, not instructions to install software. Do not install, upgrade, log in to, or reconfigure any CLI unless the user explicitly requests it. Discovered signed-out CLIs are also reported; other CLIs are optional.',
     preflight_probe_cancelled: 'Preflight was interrupted before enrollment. Repeat the connect command when ready.',
     preflight_continue: 'Local CLI found. Connecting and reporting status; signed-out CLIs remain visible and cannot execute tasks until logged in.',
@@ -136,7 +141,7 @@ module.exports = {
     cmd_list_forms: 'List forms/pages in an app',
     cmd_aggregate_table: 'Manage aggregate tables (virtualView)',
     cmd_get_schema: 'Get one form Schema or all form Schemas',
-    cmd_check_prd_completeness: 'Check PRD page/resource count risk',
+    cmd_check_prd_completeness: 'Check resources, frontend menu hiding and application theme delivery',
     cmd_er: 'Export app entity relationship diagram',
     cmd_create_page: 'Create a custom display page',
     cmd_build_page: 'Build Yida-compatible page source',
@@ -1011,6 +1016,8 @@ Examples:
     data_check_failed: '  ⚠️  Data check failed, proceeding with modification',
   },
   common: {
+    auth_profile_required: 'Multiple organizations have saved credentials. Run openyida auth profiles, then openyida auth profile switch <auth_profile> to select this project\'s organization.',
+    auth_profile_not_found: 'The requested organization credentials were not found. Run openyida auth profiles to inspect saved organizations and select the correct profile.',
     auth_identity_changed: 'Authentication identity changed during preflight; no write was issued.',
     http_status: '  HTTP status: {0}',
     http_response: '  HTTP response: {0}',
@@ -1548,6 +1555,10 @@ Examples:
   },
 
   check_prd_completeness: {
+    application_theme_mismatch: 'The application theme does not match the selected project theme.',
+    application_theme_not_checked: 'Application theme settings could not be verified; theme delivery remains unverified.',
+    frontend_navigation_not_checked: 'Frontend menu hiding has not been verified: {0}',
+    frontend_navigation_visible: 'Frontend page remains visible in the desktop or mobile management menu: {0}',
     usage: 'Usage: openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]',
     example: 'Example: openyida check-prd-completeness prd/order-management/prd.md --app-type APP_XXX --build-manifest prd/order-management/build-manifest.json --json',
     prd_not_found: 'PRD file not found: {0}',
@@ -2036,6 +2047,11 @@ Options:
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  approver_query_help: 'Current process approver: --current-approver <userId> [--count] scans all visible pages and counts distinct instances. Incomplete scans or permission failures are errors.',
+  approver_option_invalid: 'Invalid current-approver query option: {0}. Use an exact userId and scan RUNNING instances from page 1.',
+  approver_incomplete: 'The current-approver scan could not complete. No complete count was returned; check error details, permissions and pagination.',
+  approver_response_invalid: 'The process API response could not be verified; a current-approver count cannot be determined.',
+  approver_scope_note: 'Counts only instances visible to the current login under server authorization; this does not imply access to all application data.',
   association_derived_field_read_only: 'Derived association-form query field {0} is read-only and cannot be saved or updated. Write the source association field without the _id suffix.',
   association_value_invalid: 'The write value for association-form field {0} is invalid. Use an array of objects where every item includes appType, formUuid, formType, instanceId, and title.',
   command_unsupported: 'Unsupported data command: {0} {1}. Run openyida commands --json to inspect the actual capability.',

package/lib/core/locales/zh.js

@@ -5,6 +5,11 @@
 
 module.exports = {
   agent: {
+    preflight_cli_detected: 'CLI 已发现；登录、协议和模型状态由 runtime 检测并上报。',
+    enrollment_expired: '连接指令已过期，请回到页面获取新的连接指令。不要重试旧指令。',
+    enrollment_rejected: '连接授权被拒绝，请从目标页面重新获取连接指令。',
+    enrollment_conflict: '连接授权状态冲突，请先检查 agent status，再从页面获取新指令。',
+    enrollment_request_failed: '连接授权请求失败，请检查网络并运行 agent diagnose；不要自动重复连接。',
     preflight_advisory: '以下仅为状态信息，不是安装指令。除非用户明确要求，不得安装、升级、登录或修改任何 CLI 配置。已发现但未登录的 CLI 也会展示状态，无需补齐其他 CLI。',
     preflight_probe_cancelled: '预检已中止，尚未开始连接。准备好后重新执行连接命令。',
     preflight_continue: '已发现本地 CLI，将继续连接并上报状态；未登录的 CLI 会显示“未登录”，登录前不能执行任务。',
@@ -136,7 +141,7 @@ module.exports = {
     cmd_list_forms: '列出应用下的表单/页面',
     cmd_aggregate_table: '管理聚合表（virtualView）',
     cmd_get_schema: '获取单个或全部表单 Schema',
-    cmd_check_prd_completeness: '检查 PRD 页面/资源数量风险',
+    cmd_check_prd_completeness: '检查资源数量、前台菜单隐藏及应用主题同步',
     cmd_er: '导出应用实体关系图',
     cmd_create_page: '创建自定义展示页面',
     cmd_build_page: '构建宜搭兼容页面源码',
@@ -982,6 +987,8 @@ openyida - 宜搭命令行工具
     data_check_failed: '  ⚠️  数据量检查失败，继续执行修改',
   },
   common: {
+    auth_profile_required: '已有多个组织的登录凭证，请执行 openyida auth profiles，并用 openyida auth profile switch <auth_profile> 选择本项目的组织。',
+    auth_profile_not_found: '未找到指定组织的登录凭证，请执行 openyida auth profiles 核对已有组织，再选择正确的登录凭证。',
     auth_identity_changed: '校验期间登录身份发生变化，本次未发起写入。',
     http_status: '  HTTP 状态码: {0}',
     http_response: '  HTTP 响应: {0}',
@@ -1545,6 +1552,10 @@ openyida - 宜搭命令行工具
   },
 
   check_prd_completeness: {
+    application_theme_mismatch: '应用主题与已选项目主题不一致，尚未完成统一换肤。',
+    application_theme_not_checked: '应用主题配置未能核验，不能确认已完成统一换肤。',
+    frontend_navigation_not_checked: '前台页面的后台菜单隐藏尚未核验：{0}',
+    frontend_navigation_visible: '前台页面仍出现在后台 PC 或移动端菜单：{0}',
     usage: '用法: openyida check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]',
     example: '示例: openyida check-prd-completeness prd/订单管理/prd.md --app-type APP_XXX --build-manifest prd/订单管理/build-manifest.json --json',
     prd_not_found: 'PRD 文件不存在：{0}',
@@ -1990,6 +2001,11 @@ openyida - 宜搭命令行工具
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  approver_query_help: '流程当前审批人：--current-approver <userId> [--count]，完整分页并按实例去重；结果仅限当前登录人的可见范围，不完整或无权限会报错。',
+  approver_option_invalid: '当前审批人查询参数无效：{0}。请使用真实 userId，并从第1页查询运行中实例。',
+  approver_incomplete: '无法完成当前审批人统计，未返回完整条数。请检查错误详情、权限及分页范围。',
+  approver_response_invalid: '流程接口返回结构无法确认，不能据此统计当前审批人条数。',
+  approver_scope_note: '仅统计当前登录人经平台服务端授权可见的实例；不代表拥有全应用数据权限。',
   association_derived_field_read_only: '关联表单查询派生字段 {0} 只读，不能用于保存或更新。请写入不带 _id 后缀的原始关联表单字段。',
   association_value_invalid: '关联表单字段 {0} 的写入值无效。必须使用对象数组，每项完整包含 appType、formUuid、formType、instanceId 和 title。',
   command_unsupported: '不支持的数据命令：{0} {1}。请使用 openyida commands --json 查询真实能力。',