openyida 2026.10.20 → 2026.10.21

package/README.md

@@ -446,6 +446,8 @@ openyida feedback report --input summary.json --output-dir feedback-draft-001
 
 Your AI prepares the summary from observed evidence and selected reproduction screenshots. PRs include before/after test comparisons. Before anything is published, review the final text and images, confirm sensitive information, and remove anything you do not want to share. See the [report input format](yida-skills/skills/yida-feedback/references/report-input.md). Review business information before sharing. With a GitHub account, authorize your AI to submit an Issue or contribute a verified public OpenYida fix through your personal Fork. Without an account, create a GitHub account first. If that is not possible, share the report in the AI开发者群 (AI developer group).
 
+When you choose to submit an OpenYida Issue, the feedback Skill can check your signed-in GitHub account with `openyida feedback github status --json`. Star and a personal Fork are optional: `feedback github star --confirm` and `feedback github fork --confirm` run only after you choose them. Existing actions are reused. This check is separate from installation and automatic updates; neither action is required to submit an Issue.
+
 <!-- OPENYIDA_COMMANDS_START -->
 <!-- This section is generated by `npm run docs:commands`. Do not edit command rows by hand. -->
 
@@ -509,6 +511,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida create-form add-option <appType> <formUuid> <fieldLabel> <option1> [option2] ...` | Update a form page |
 | `openyida list-forms <appType> [--keyword <text>]` | List forms/pages in an app |
 | `openyida aggregate-table <list\|create-empty\|inspect\|preview\|save\|publish\|status> <appType> ...` | Manage aggregate tables (virtualView) |
+| `openyida print-template <list\|inspect\|fields\|build\|create\|copy\|save\|restore\|settings\|status\|order\|render\|files> <appType> <formUuid> [templateId] [--config <file>] [--scene <order\|quotation\|delivery\|receipt\|approval\|codes>] [--bindings <file>] [--name <title>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--status START\|STOP] [--instance <id>] [--page <n>] [--size <n>] [--allow-permission-change] [--json] \| print-template <list\|render> --detail-url <url> [--template-id <id>] [--json]` | Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs |
 | `openyida form-view <list\|inspect\|save\|create\|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]` | Native form views: list, inspect and configure columns, widths, frozen columns and filters |
 | `openyida custom-button <list\|inspect\|options\|create\|update\|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]` | Native custom buttons: inspect and configure form edits, automation flows and page links |
 | `openyida get-schema <appType> <formUuid\|--all> [--summary-json\|--field-map-json\|--analysis-json]` | Get one form Schema or all form Schemas |
@@ -628,7 +631,7 @@ Your AI prepares the summary from observed evidence and selected reproduction sc
 | `openyida formula test <appType> <formUuid> [formula\|file] [--data-file file \| --cases file] [--field fieldId] [--timezone-offset minutes] [--context form\|validation] [--binding platform\|numeric-literals] [--expect JSON] [--json]` | Evaluate a non-writing formula in Yida and compare its result |
 | `openyida update` | Check and update to latest version |
 | `openyida export-conversation [options]` | Export AI conversation records |
-| `openyida feedback <report\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
+| `openyida feedback <report\|github\|setup\|url\|dismiss\|status> [options]` | Prepare local issue reports, configure feedback forms and reminders |
 | `openyida batch <file>\|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]` | Run OpenYida commands in batch |
 | `openyida flash-to-prd --file <path> --name "<project>"` | Convert flash notes or meeting notes to a PRD prompt |
 | `openyida ai <text\|image> [options]` | Call Yida AI text and image recognition APIs |

package/bin/yida.js

@@ -837,6 +837,11 @@ async function main() {
       await run(args);
       break;
     }
+    case 'print-template': {
+      const { run } = require('../lib/print-template/print-template');
+      await run(args);
+      break;
+    }
     case 'form-view': {
       const { run } = require('../lib/app/form-view');
       await run(args);
@@ -1333,6 +1338,10 @@ async function main() {
     }
 
     case 'feedback': {
+      if (args[0] === 'github') {
+        await require('../lib/feedback/github').run(args.slice(1));
+        break;
+      }
       const { run: runFeedback } = require('../lib/feedback/feedback');
       await runFeedback(args);
       break;

package/lib/app/agent-app-type.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Server-derived provenance: channels may grow; only absence or "none" means non-AI.
+function isAgentAppType(value) {
+  if (typeof value !== 'string') {
+    return false;
+  }
+  const type = value.trim().toLowerCase();
+  return type !== '' && type !== 'none';
+}
+
+module.exports = { isAgentAppType };

package/lib/app/cool-card.js

@@ -6,6 +6,7 @@ const crypto = require('crypto');
 const { CliError } = require('../core/cli-error');
 const { t } = require('../core/i18n');
 const { createAuthRef, createYidaClient } = require('../core/yida-client');
+const { inferEnvironmentNameFromUrl } = require('../core/env-manager');
 const { buildApplicationSettingsUrls } = require('./application-entry-urls');
 
 const object = value => value !== null && typeof value === 'object' && !Array.isArray(value);
@@ -124,6 +125,10 @@ async function execute(parsed, client) {
   let { cardPageCode } = checked;
   if (flags['--out'] && fs.existsSync(path.resolve(flags['--out']))) { fail('OUTPUT_EXISTS', flags['--out']); }
   client = client || createYidaClient({ authRef: createAuthRef() });
+  // Use the authenticated target, not a global environment preference, before creating any resource.
+  if (action === 'create' && inferEnvironmentNameFromUrl(client.getAuthRef().baseUrl) === 'alibaba') {
+    fail('UNSUPPORTED_ENVIRONMENT', t('cool_card.unsupported_environment'), { environment: 'alibaba' });
+  }
   const prefix = `/${appType}/query/cardDesign/`;
   const get = async (name, params) => unwrap(await client.get(prefix + name + '.json', params), name);
   const base = { success: true, action, appType, resourceType: 'native-cool-card', capabilities };

package/lib/app/upgrade-app-theme.js

@@ -1,6 +1,7 @@
 'use strict';
 
 const querystring = require('querystring');
+const { isAgentAppType } = require('./agent-app-type');
 const { httpGet, httpPost, requestWithAutoLogin } = require('../core/utils');
 const { createAuthRef } = require('../core/yida-client');
 const { throwCommandError, throwUsage } = require('../core/command-errors');
@@ -64,7 +65,7 @@ async function readThemeEligibility(appType, auth) {
   }
   // agentAppType is derived by Tianshu from FROM_BUILDER_AI and BUILDER_AI_SOURCE.
   // aiApp/FROM_AI is a separate feature flag and must not be used as provenance.
-  if (!['local', 'cloud', 'qwenwork'].includes(context.agentAppType.trim().toLowerCase())) {
+  if (!isAgentAppType(context.agentAppType)) {
     throwCommandError(t('upgrade_app_theme.ai_only'), { code: 'APP_THEME_AI_APP_REQUIRED' });
   }
   return context;

package/lib/core/command-manifest.js

@@ -8,6 +8,7 @@ const { getPageNavigationContract } = require('../design-plan/navigation-policy'
 const { ENTRY_MODES } = require('../design-plan/entry-navigation');
 const { DIVIDER_TYPES, DEFAULT_DIVIDER_TYPE } = require('../app/form-field-validator');
 const { FORMULA_COMMANDS } = require('../formula/cli-contract');
+const { printTemplateCommand, printTemplateEffects, printTemplatePermission } = require('../print-template/contract');
 
 const SIDE_EFFECT_BASES = Object.freeze({
   local_read: Object.freeze({
@@ -550,6 +551,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
   })],
   ['cool-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'templates', 'get'], mutating_actions: ['create'] })],
   ['data-card', sideEffect('mixed', { mutates_yida: true, mutates_local: true, read_actions: ['list', 'get', 'probe', 'release-check', 'refs'], mutating_actions: ['create', 'save', 'publish', 'release-get', 'release-save', 'release-test'], note: 'release-get reads broadcast settings but the native backend may initialize the application cool app; classify it conservatively as a possible mutation.' })],
+  ['print-template', sideEffect('mixed', printTemplateEffects)],
   ['form-view', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
@@ -645,8 +647,8 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['feedback', sideEffect('mixed', {
     mutates_yida: true,
     mutates_local: true,
-    read_actions: ['url', 'status'],
-    mutating_actions: ['setup', 'dismiss', 'report'],
+    read_actions: ['url', 'status', 'github status'],
+    mutating_actions: ['setup', 'dismiss', 'report', 'github star', 'github fork'],
   })],
   ['i18n', sideEffect('mixed', {
     mutates_yida: true,
@@ -845,6 +847,7 @@ const COMMAND_PERMISSIONS = new Map([
     ask_actions: ['connect', 'run', 'disconnect', 'logout'],
   })),
 
+  ...permissionEntries(['print-template'], actionDependentPermission(printTemplatePermission)),
   ...permissionEntries(['cool-card'], actionDependentPermission({ preauthorized_actions: ['create'] })),
   ...permissionEntries(['data-card'], actionDependentPermission({ preauthorized_actions: ['create', 'save', 'publish', 'release-get'], ask_actions: ['release-save', 'release-test'] })),
   ...permissionEntries([
@@ -1383,7 +1386,7 @@ const COMMAND_GROUPS = [
           { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
           { name: 'confirm', type: 'boolean', source: 'option', builder_options: ['--confirm'] },
         ],
-        notes: ['--prepare reads remote schemas/source bundles into a new local backup directory and produces a per-resource migration plan without remote writes; it requires explicit upgrade intent but no mutation confirmation. Before --confirm, use the independent upgrade Skill to prepare/review sources, migrate legacy JSX to Canvas without business/layout changes, and remove verified form-detail style injection. Only mutate after an explicit user request to upgrade an existing app to the modern theme AND an affirmative ask_human reply for that app. These flags attest to both checks; they do not replace human confirmation. If ask_human is unavailable, stop before mutation. The CLI itself checks server-derived agentAppType and app/corp identity before offering any confirmation or preparing backups. agentAppType comes from FROM_BUILDER_AI=y plus BUILDER_AI_SOURCE; source alone or FROM_AI does not qualify. Only local/cloud/qwenwork qualifies. Reject non-AI or unverified apps without offering an upgrade or exposing source fields. Skill guidance and confirmation flags cannot bypass this gate. Do not check V4, appThemeEnable, organization theme gray or upgrade gray. After ask_human approval, migrate legacy navigation layout and colors before persisting CREATED_WITH_MODERN_THEME=y and APP_THEME_MODE=modern, then read all changed settings back. Already modern navigation colors stay unchanged. Report partial/unknown writes on failure. Success verifies configuration only, not page migration or runtime rendering. appUpgradeComplete remains false until the Skill verifies all page/form migrations.'],
+        notes: ['--prepare reads remote schemas/source bundles into a new local backup directory and produces a per-resource migration plan without remote writes; it requires explicit upgrade intent but no mutation confirmation. Before --confirm, use the independent upgrade Skill to prepare/review sources, migrate legacy JSX to Canvas without business/layout changes, and remove verified form-detail style injection. Only mutate after an explicit user request to upgrade an existing app to the modern theme AND an affirmative ask_human reply for that app. These flags attest to both checks; they do not replace human confirmation. If ask_human is unavailable, stop before mutation. The CLI itself checks server-derived agentAppType and app/corp identity before offering any confirmation or preparing backups. agentAppType comes from FROM_BUILDER_AI=y plus BUILDER_AI_SOURCE; source alone or FROM_AI does not qualify. Use the centralized server-derived AI application type check (including web_local). Reject non-AI or unverified apps without offering an upgrade or exposing source fields. Skill guidance and confirmation flags cannot bypass this gate. Do not check V4, appThemeEnable, organization theme gray or upgrade gray. After ask_human approval, migrate legacy navigation layout and colors before persisting CREATED_WITH_MODERN_THEME=y and APP_THEME_MODE=modern, then read all changed settings back. Already modern navigation colors stay unchanged. Report partial/unknown writes on failure. Success verifies configuration only, not page migration or runtime rendering. appUpgradeComplete remains false until the Skill verifies all page/form migrations.'],
       }),
       command('app-online', ['app-online'], 'app-online <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_online', { managedRun: {'scope':'denied','reason':'scope_not_audited'} }),
       command('app-offline', ['app-offline'], 'app-offline <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_offline', { managedRun: {'scope':'denied','reason':'scope_not_audited'} }),
@@ -1609,6 +1612,7 @@ const COMMAND_GROUPS = [
       },
       output: 'json',
       }),
+      command(...printTemplateCommand),
       command('form-view', ['form-view'], 'form-view <list|inspect|save|create|order> <appType> <formUuid> [viewUuid] [--config <file>] [--name <title>] [--with-config] [--expected-hash <hash>] [--backup <file>] [--replace] [--json]', 'help.cmd_form_view', {
         managedRun: { scope: 'actions', actions: {
           list: { scope: 'app', appPosition: 1 },
@@ -2047,11 +2051,12 @@ const COMMAND_GROUPS = [
       command('export-conversation', ['export-conversation'], 'export-conversation [options]', 'help.cmd_export_conversation', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         requiresLogin: false,
       }),
-      command('feedback', ['feedback'], 'feedback <report|setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'actions', actions: { report: { scope: 'local' } } },
+      command('feedback', ['feedback'], 'feedback <report|github|setup|url|dismiss|status> [options]', 'help.cmd_feedback', { managedRun: { scope: 'actions', actions: { report: { scope: 'local' } } },
+        permission: actionDependentPermission({ preauthorized_actions: ['report', 'url', 'status', 'dismiss', 'github status'], ask_actions: ['setup', 'github star', 'github fork'] }),
         requiresLogin: false,
         output: 'text|json',
         examples: ['openyida feedback report --input summary.json --output-dir feedback-draft-001'],
-        notes: ['report prepares local review drafts only; no login, source checkout, update check or network submission.'],
+        notes: ['report prepares local review drafts only; no login, source checkout, update check or network submission. github status [--json] checks the authenticated github.com user, Star and personal Fork through an existing gh installation; it performs no writes. github star|fork --confirm [--json] requires the user to explicitly choose that account action. Missing gh/login, unknown status and declined actions never block Issue submission. Already applied actions are reused; writes are single-attempt with readback. No auto-update/install hook, Issue submission, clone or git remote modification. Managed runs permit only offline report preparation.'],
       }),
       command('batch', ['batch'], 'batch <file>|--commands "cmd1 ; cmd2" [--stop-on-error] [--json]', 'help.cmd_batch', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
         output: 'text|json',

package/lib/core/locales/en.js

@@ -4,6 +4,11 @@
 'use strict';
 
 module.exports = {
+  print_template: {
+    'description': 'Manage native YiDA print templates, generate document layouts, back up, restore and request PDFs',
+    'error': 'Print template operation failed: {0}',
+    'usage': 'Usage: openyida print-template <list|inspect|fields|build|create|copy|save|restore|settings|status|order|render|files> <appType> <formUuid> [templateId]. Use --config <file>, build --scene order|quotation|delivery|receipt|approval|codes --bindings <file>, create --config <file>, --name <title>, --expected-hash <inspect-hash>, --backup <file>, --out <file>, --status START|STOP, --instance <id>, --page <n>, --size <n>, --allow-permission-change, --json as documented. For native record links: list|render --detail-url <url> [--template-id <id>].'
+  },
   custom_button: {
     'usage': 'Usage: openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
     'invalid_config': 'Invalid configuration or argument: {0}',
@@ -15,7 +20,7 @@ module.exports = {
     'readback_mismatch': 'Saved custom button does not match readback. Keep the backup and inspect remote state.'
   },
   dws_external: {'note': 'dws is an independent external tool. OpenYida only shows installation instructions; it does not download or install it.', 'install_guide': 'Show official DingTalk CLI installation instructions'},
-  cool_card: {'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
+  cool_card: {'unsupported_environment': 'The Alibaba Group edition does not support building cool cards.', 'description': 'Create and read native YiDA cool cards (interactive and pinned)', 'usage': 'Usage: openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': 'Native cool card operation stopped: {0}'},
   data_card: {'description':'Create, configure, publish and distribute native YiDA data cards','usage':'Usage: openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'Native data card operation stopped: {0}','conflict':'The draft changed. Read it again before saving or publishing.','mismatch':'Readback does not match the expected schema or published state. Keep the backup and inspect the card before retrying.'},
   app_settings: {'description':'Read theme, frontend/backend, native data card and cool card management links','usage':'Usage: openyida app-settings <appType> [--section theme|basic|data-card|cool-card] [--json]','failed':'Application settings could not be read: {0}'},
   form_view: {
@@ -2507,3 +2512,9 @@ module.exports.task_center = {
   'filter_carbonCreateFrom': 'Copied from',
   'filter_carbonCreateTo': 'Copied to'
 };
+
+module.exports.feedback_github = {
+  usage: 'Usage: openyida feedback github <status|star|fork> [--confirm] [--json]',
+  confirmation: 'Star or Fork requires the user to explicitly choose that action before --confirm. Neither is required to submit an Issue.',
+  failed: 'The GitHub action could not be verified. Inspect its status before retrying; this does not block Issue submission.',
+};

package/lib/core/locales/zh.js

@@ -4,6 +4,11 @@
 'use strict';
 
 module.exports = {
+  print_template: {
+    'description': '管理宜搭原生打印模板、按字段生成多种单据、备份恢复与生成PDF',
+    'error': '打印模板操作失败：{0}',
+    'usage': 'Usage: openyida print-template <list|inspect|fields|build|create|copy|save|restore|settings|status|order|render|files> <appType> <formUuid> [templateId]. Use --config <file>, build --scene order|quotation|delivery|receipt|approval|codes --bindings <file>, create --config <file>, --name <title>, --expected-hash <inspect-hash>, --backup <file>, --out <file>, --status START|STOP, --instance <id>, --page <n>, --size <n>, --allow-permission-change, --json as documented. For native record links: list|render --detail-url <url> [--template-id <id>].'
+  },
   custom_button: {
     'usage': '用法：openyida custom-button <list|inspect|options|create|update|delete> <appType> <formUuid> [buttonUuid] [--config <file>] [--expected-hash <hash>] [--backup <file>] [--yes] [--json]',
     'invalid_config': '配置或参数无效：{0}',
@@ -15,7 +20,7 @@ module.exports = {
     'readback_mismatch': '保存后的配置与回读不一致，请保留备份并检查远端状态。'
   },
   dws_external: {'note': 'dws 是独立的外部工具；OpenYida 仅提供安装指引，不下载或安装它。', 'install_guide': '显示钉钉 CLI 官方安装指引'},
-  cool_card: {'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
+  cool_card: {'unsupported_environment': '集团版不支持酷卡片搭建。', 'description': '创建和读取宜搭原生酷卡片（交互卡片与置顶卡片）', 'usage': '用法： openyida cool-card <list|templates|create|get> <appType> [cardPageCode] [--type im|onebox] [--name <title>] [--page <n>] [--size <n>] [--search <text>] [--out <file>] [--json]', 'failed': '原生酷卡片操作已停止：{0}'},
   data_card: {'description':'创建、配置、发布原生数据卡片并管理投放播报','usage':'用法： openyida data-card <list|create|get|save|publish|probe|release-get|release-save|release-check|release-test|refs> <appType> [cardCode] [--name <title>] [--description <text>] [--schema <file>|--config <file>] [--expected-hash <hash>] [--backup <file>] [--out <file>] [--published|--version <version>] [--page <n>] [--size <n>] [--search <text>] [--allow-send] [--json]','failed':'原生数据卡片操作已停止：{0}','conflict':'卡片草稿已发生变化，请重新读取后再保存或发布。','mismatch':'回读配置或发布状态与预期不一致，请保留备份并检查卡片后再重试。'},
   app_settings: {'description':'获取主题、业务前后台、原生数据卡片和酷卡片管理入口','usage':'用法： openyida app-settings <appType> [--section theme|basic|data-card|cool-card] [--json]','failed':'无法读取应用设置：{0}'},
   form_view: {
@@ -2461,3 +2466,9 @@ module.exports.task_center = {
   'filter_carbonCreateFrom': '抄送时间起',
   'filter_carbonCreateTo': '抄送时间止'
 };
+
+module.exports.feedback_github = {
+  usage: '用法：openyida feedback github <status|star|fork> [--confirm] [--json]',
+  confirmation: 'Star 或 Fork 需要用户明确选择后再传入 --confirm；提交 Issue 不要求这两项操作。',
+  failed: 'GitHub 操作未能核实完成，请先查询状态；这不影响提交 Issue。',
+};

package/lib/core/sample.js

@@ -23,6 +23,7 @@ const { t } = require('./i18n');
 // ── Sample 索引表 ─────────────────────────────────────────────────────
 
 const SAMPLES = {
+  'yida-print-template': Object.fromEntries(require('../print-template/scenes').names.map(name => [name, `${name}.json`])),
   'yida-chart': {
     'line-trend':        'line-trend.js',
     'multi-bar-compare': 'multi-bar-compare.js',

package/lib/core/task-center.js

@@ -226,7 +226,9 @@ async function run(args) {
     const client = createYidaClient({ authRef });
     const params = auth => ({ _api: 'nattyFetch', _mock: 'false', _csrf_token: auth.csrfToken, ...request.params });
     const payload = request.method === 'POST' ? await client.postForm(request.path, params) : await client.get(request.path, params);
-    const result = lookups.normalize(options.type, payload, { appType: positionals[1] });
+    const result = lookups.normalize(options.type, payload, {
+      appType: positionals[1], keyword: request.params.key, pageSize: request.params.pageSize,
+    });
     console.log(JSON.stringify(result, null, 2));
     return result;
   }

package/lib/core/update.js

@@ -159,7 +159,7 @@ function getAutoUpdateIntervalMs(env = process.env) {
 
 function shouldSkipAutoUpdateCommand(command, args = []) {
   // Report preparation must work offline even in a global npm installation.
-  if (command === 'feedback' && args[0] === 'report') {return true;}
+  if (command === 'feedback' && ['report', 'github'].includes(args[0])) {return true;}
   if (!command || ['--help', '-h', '--version', '-v'].includes(command)) {
     return true;
   }

package/lib/feedback/feedback.js

@@ -51,6 +51,7 @@ function printUsage() {
   openyida feedback setup <appType> [--name "OpenYida 体验反馈"] [--path /o/openyida-feedback] [--open|--no-open]
   openyida feedback setup --create-app [--app-name "OpenYida 体验反馈"] [--name "OpenYida 体验反馈"]
   openyida feedback report --input <summary.json> --output-dir <new-directory>
+  openyida feedback github <status|star|fork> [--confirm] [--json]
   openyida feedback url [--tool Codex] [--model gpt-5] [--command publish] [--diagnostics "..."]
   openyida feedback dismiss --today|--forever|--reset
   openyida feedback status

package/lib/feedback/github.js

@@ -0,0 +1,130 @@
+'use strict';
+
+const { spawnSync } = require('child_process');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+
+const REPOSITORY = 'openyida/openyida';
+const links = Object.freeze({ repository: `https://github.com/${REPOSITORY}`,
+  issue: `https://github.com/${REPOSITORY}/issues/new`, fork: `https://github.com/${REPOSITORY}/fork` });
+
+/** Parse explicit account actions; submitting an Issue never implies Star or Fork consent. */
+function parseArgs(args = []) {
+  const [action, ...flags] = args;
+  if (!['status', 'star', 'fork'].includes(action) || new Set(flags).size !== flags.length
+    || flags.some(flag => !['--json', '--confirm'].includes(flag))
+    || (action === 'status' && flags.includes('--confirm'))) {
+    throw new CliError(t('feedback_github.usage'), { code: 'FEEDBACK_GITHUB_USAGE' });
+  }
+  if (action !== 'status' && !flags.includes('--confirm')) {
+    throw new CliError(t('feedback_github.confirmation'), { code: 'FEEDBACK_GITHUB_CONFIRMATION_REQUIRED' });
+  }
+  return { action, confirm: flags.includes('--confirm') };
+}
+
+/** Run gh against github.com only. Never expose its raw output or credential diagnostics. */
+function request(method, endpoint, options, fields = []) {
+  const spawn = options.spawnSyncFn || spawnSync;
+  const result = spawn('gh', ['api', '--hostname', 'github.com', '--include', '--method', method, endpoint, ...fields], {
+    encoding: 'utf8', timeout: 15000, maxBuffer: 1024 * 1024,
+    env: { ...(options.env || process.env), GH_HOST: 'github.com', GH_PROMPT_DISABLED: '1', GIT_TERMINAL_PROMPT: '0' },
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  const output = String(result.stdout || '');
+  const status = Number(output.match(/^HTTP\/[\d.]+\s+(\d{3})\b/)?.[1]) || null;
+  const separator = output.match(/\r?\n\r?\n/);
+  let data = null;
+  try { data = separator ? JSON.parse(output.slice(separator.index + separator[0].length)) : null; }
+  catch { /* Empty responses and invalid JSON remain unverified. */ }
+  return { status, data, ok: result.status === 0 && status >= 200 && status < 300,
+    unavailable: result.error?.code === 'ENOENT' };
+}
+
+/** Verify ownership and upstream before offering an existing personal Fork for contributions. */
+function readFork(response, login) {
+  if (response.status === 404) { return { state: 'absent', url: null }; }
+  if (!response.ok) { return { state: 'unknown', url: null }; }
+  const repo = response.data;
+  if (repo?.fork === true && repo.parent?.full_name?.toLowerCase() === REPOSITORY
+    && repo.full_name?.toLowerCase() === `${login}/openyida`.toLowerCase()
+    && repo.owner?.login?.toLowerCase() === login.toLowerCase()) {
+    return { state: 'ready', url: `https://github.com/${login}/openyida` };
+  }
+  return { state: 'conflict', url: null };
+}
+
+/** Include renamed personal Forks; never infer absence from an incomplete or failed query. */
+function inspectFork(login, options) {
+  const query = 'query { repository(owner:"openyida", name:"openyida") { forks(first:100, affiliations:[OWNER]) { nodes { nameWithOwner isFork owner { login } parent { nameWithOwner } } pageInfo { hasNextPage } } } }';
+  const response = request('POST', 'graphql', options, ['--raw-field', `query=${query}`]);
+  const connection = response.data?.data?.repository?.forks;
+  if (!response.ok || response.data?.errors || !Array.isArray(connection?.nodes)
+    || typeof connection.pageInfo?.hasNextPage !== 'boolean') { return { state: 'unknown', url: null }; }
+  for (const repo of connection.nodes) {
+    const [owner, name, extra] = String(repo?.nameWithOwner || '').split('/');
+    if (repo?.isFork === true && repo.parent?.nameWithOwner?.toLowerCase() === REPOSITORY
+      && owner.toLowerCase() === login.toLowerCase() && repo.owner?.login?.toLowerCase() === login.toLowerCase()
+      && /^[A-Za-z0-9_.-]+$/.test(name || '') && !extra) {
+      return { state: 'ready', url: `https://github.com/${owner}/${name}` };
+    }
+  }
+  if (connection.nodes.length || connection.pageInfo.hasNextPage) { return { state: 'unknown', url: null }; }
+  return readFork(request('GET', `repos/${login}/openyida`, options), login);
+}
+
+/** Read account, Star and personal Fork state without changing it; unknown is never treated as absent. */
+function inspect(options) {
+  const account = request('GET', 'user', options);
+  const login = account.data?.login;
+  const base = { success: true, repository: REPOSITORY, links, mutationPerformed: false, issueRequiresStarOrFork: false };
+  if (!account.ok || account.data?.type !== 'User' || !/^[A-Za-z0-9][A-Za-z0-9-]{0,38}$/.test(login || '')) {
+    return { ...base, authenticated: false, reason: account.unavailable ? 'gh_unavailable' : 'account_unverified',
+      login: null, starred: null, fork: { state: 'unknown', url: null }, suggestedActions: [] };
+  }
+  const star = request('GET', `user/starred/${REPOSITORY}`, options);
+  const starred = star.ok && star.status === 204 ? true : star.status === 404 ? false : null;
+  const fork = inspectFork(login, options);
+  return { ...base, authenticated: true, login, starred, fork,
+    suggestedActions: [...(starred === false ? ['star'] : []), ...(fork.state === 'absent' ? ['fork'] : [])] };
+}
+
+/** Execute one explicitly authorized action, then read it back. No retry, clone, remote change or Issue submission. */
+function execute(parsed, options = {}) {
+  const { action } = parseArgs([parsed.action, ...(parsed.confirm === true ? ['--confirm'] : [])]);
+  if ((options.env || process.env).OPENYIDA_MANAGED_RUN === '1') {
+    throw new CliError(t('feedback_github.failed'), { code: 'FEEDBACK_GITHUB_MANAGED_DENIED' });
+  }
+  const result = inspect(options);
+  if (action === 'status') { return result; }
+  const fail = (stage, mutationPerformed = false) => {
+    throw new CliError(t('feedback_github.failed'), { code: 'FEEDBACK_GITHUB_FAILED',
+      details: { stage, action, mutationPerformed, inspectBeforeRetry: true } });
+  };
+  if (!result.authenticated) { fail('account'); }
+  if (action === 'star') {
+    if (result.starred === true) { return { ...result, action, alreadyApplied: true }; }
+    if (result.starred !== false) { fail('star-status'); }
+    const written = request('PUT', `user/starred/${REPOSITORY}`, options);
+    if (!written.ok) { fail('star-write', 'unknown'); }
+    const verified = request('GET', `user/starred/${REPOSITORY}`, options);
+    if (!verified.ok || verified.status !== 204) { fail('star-readback', true); }
+    return { ...result, action, starred: true, mutationPerformed: true, readbackVerified: true,
+      suggestedActions: result.suggestedActions.filter(item => item !== 'star') };
+  }
+  if (result.fork.state === 'ready') { return { ...result, action, alreadyApplied: true }; }
+  if (result.fork.state !== 'absent') { fail('fork-status'); }
+  const created = request('POST', `repos/${REPOSITORY}/forks`, options, ['--field', 'default_branch_only=true']);
+  if (!created.ok) { fail('fork-write', 'unknown'); }
+  const fork = readFork(request('GET', `repos/${result.login}/openyida`, options), result.login);
+  return { ...result, action, fork, mutationPerformed: true, readbackVerified: fork.state === 'ready',
+    completion: fork.state === 'ready' ? 'verified' : 'pending-verification',
+    suggestedActions: result.suggestedActions.filter(item => item !== 'fork') };
+}
+
+/** CLI entrypoint. The confirmation flag attests to the user's explicit choice of this action. */
+function run(args = []) {
+  const parsed = parseArgs(args);
+  console.log(JSON.stringify(execute(parsed), null, 2));
+}
+
+module.exports = { parseArgs, execute, run };