openyida 2026.10.30 → 2026.10.31

package/lib/app/app-theme-state.js

@@ -0,0 +1,80 @@
+'use strict';
+
+const { httpGet, requestWithAutoLogin } = require('../core/utils');
+const { throwCommandError } = require('../core/command-errors');
+const { t } = require('../core/i18n');
+const { isAgentAppType } = require('./agent-app-type');
+
+function themeContextFailure(reason) {
+  throwCommandError(t('upgrade_app_theme.context_failed'), {
+    code: 'APP_THEME_CONTEXT_UNVERIFIED', details: { reason },
+  });
+}
+
+// The application API exposes persisted mode/provenance. These establish the
+// configured theme, not proof that a browser loaded the stylesheet.
+function resolveAppThemeState(app = {}) {
+  const config = app.config && typeof app.config === 'object' && !Array.isArray(app.config) ? app.config : {};
+  const mode = app.appThemeMode ?? config.APP_THEME_MODE;
+  const enabled = app.appThemeEnable;
+  const createdModern = config.CREATED_WITH_MODERN_THEME;
+  if (enabled === 'n' || mode === 'legacy' || createdModern === 'n') {
+    return { mode: 'legacy', source: 'server_settings' };
+  }
+  if (enabled === 'y' && mode === 'modern') {
+    return { mode: 'modern', source: 'server_theme_state' };
+  }
+  if (enabled !== undefined && enabled !== null && enabled !== 'y') {
+    return { mode: 'unknown', source: 'server_settings' };
+  }
+  if (createdModern === 'y' &&
+      (mode === 'modern' || ((mode === undefined || mode === null || mode === '') && isAgentAppType(app.agentAppType)))) {
+    return { mode: 'modern', source: 'server_creation_config' };
+  }
+  return { mode: 'unknown', source: 'server_settings' };
+}
+
+async function fetchCurrentApp(appType, authRef, verifyIdentity = false) {
+  const target = { baseUrl: authRef.baseUrl, corpId: authRef.corpId, userId: authRef.userId };
+  if (verifyIdentity && (typeof appType !== 'string' || !/^[A-Za-z0-9_-]+$/.test(appType) ||
+      typeof target.corpId !== 'string' || !target.corpId || !target.baseUrl)) {
+    themeContextFailure('invalid_target');
+  }
+  const assertIdentity = auth => {
+    if (verifyIdentity && Object.keys(target).some(key => auth[key] !== target[key])) {
+      themeContextFailure('identity_changed');
+    }
+  };
+  const response = await requestWithAutoLogin((auth) => {
+    assertIdentity(auth);
+    return httpGet(
+      auth.baseUrl,
+      `/${encodeURIComponent(appType)}/query/app/getAppIncludingAecpInfo.json`,
+      {
+        _api: 'nattyFetch',
+        _mock: 'false',
+        appKey: appType,
+        _csrf_token: auth.csrfToken,
+        _stamp: Date.now(),
+      }
+    );
+  }, authRef);
+  assertIdentity(authRef);
+
+  if (verifyIdentity) {
+    const app = response?.content;
+    if (response?.success !== true || !app || typeof app !== 'object' || Array.isArray(app)) {
+      themeContextFailure('app_query_failed');
+    }
+    if (app.appType !== appType || app.corpId !== target.corpId) {
+      themeContextFailure('app_identity_mismatch');
+    }
+  }
+
+  if (!response || !response.success) {
+    throw new Error(response ? response.errorMsg || '查询应用详情失败' : '查询应用详情失败');
+  }
+  return response.content || {};
+}
+
+module.exports = { fetchCurrentApp, resolveAppThemeState };

package/lib/app/create-app.js

@@ -22,6 +22,7 @@ const { parseOpenOption, withBrowserHandoff } = require('../core/browser-handoff
 const { throwCommandError } = require('../core/command-errors');
 const { isPermissionGuidanceError } = require('../core/permission-guidance');
 const { resolveBuilderAiSource } = require('./builder-ai-source');
+const { fetchCurrentApp, resolveAppThemeState } = require('./app-theme-state');
 
 const DEFAULT_APP_OPTIONS = {
   iconColor: '#0089FF',
@@ -376,6 +377,35 @@ async function run(args) {
     const appUrl = entryUrls.appUrl;
     const corpId = authRef.corpId || (authRef.authData && authRef.authData.corp_id) || '';
 
+    let themeVerification;
+    try {
+      const app = await fetchCurrentApp(appType, authRef, true);
+      const theme = resolveAppThemeState(app);
+      if (theme.mode !== 'modern') {
+        throwCommandError(t('create_app.modern_theme_unverified'), {
+          code: 'APP_THEME_NOT_MODERN', details: { themeMode: theme.mode },
+        });
+      }
+      themeVerification = { verified: true, appThemeMode: 'modern', source: theme.source,
+        scope: 'configuration_readback', runtimeVerified: false };
+    } catch (error) {
+      const created = { appCreated: true, appType, corpId, url: appUrl, retryCreate: false,
+        partial: true, residual: { appType, corpId }, retrySafe: false, mutationPerformed: true,
+        sideEffectState: 'applied', readbackAllowed: true };
+      if (isPermissionGuidanceError(error)) {
+        error.details = { ...error.details, ...created };
+        throw error;
+      }
+      throwCommandError(t('create_app.modern_theme_unverified'), {
+        code: 'APP_CREATED_THEME_UNVERIFIED', details: {
+          ...created,
+          causeCode: error.code || 'APP_THEME_READ_FAILED',
+          ...(error.details?.themeMode ? { themeMode: error.details.themeMode } : {}),
+          ...(error.details?.reason ? { reason: error.details.reason } : {}),
+        },
+      });
+    }
+
     chalkResult(true, t('create_app.success'), [
       ['appType', appType],
       ['Corp ID', corpId || t('common.unknown_error')],
@@ -391,6 +421,7 @@ async function run(args) {
         appType,
         appName,
         corpId,
+        themeVerification,
         url: appUrl,
         ...entryUrls,
       },

package/lib/app/update-app.js

@@ -7,8 +7,8 @@
 'use strict';
 
 const querystring = require('querystring');
+const { fetchCurrentApp, resolveAppThemeState } = require('./app-theme-state');
 const {
-  httpGet,
   httpPost,
   requestWithAutoLogin,
 } = require('../core/utils');
@@ -376,35 +376,24 @@ function preserveBasicSettings(payload, app) {
   }
 }
 
-function requireAppStyleConfirmation(params, context) {
-  const modern = pickAppField(context, 'appThemeEnable', 'APP_THEME_ENABLE') === 'y' &&
-    pickAppField(context, 'appThemeMode', 'APP_THEME_MODE') === 'modern';
-  if (!modern && params.confirmLegacyAppStyle !== true) {
+function requireAppStyleConfirmation(params, app) {
+  const theme = resolveAppThemeState(app);
+  if (theme.mode !== 'modern' && params.confirmLegacyAppStyle !== true) {
+    const storedMode = pickAppField(app, 'appThemeMode', 'APP_THEME_MODE');
     throwCommandError(t('update_app.legacy_style_confirm_required'), {
       code: 'LEGACY_APP_CUSTOM_THEME_CONFIRMATION_REQUIRED',
-      details: { appType: params.appType, applicationSettingsWritten: false, nextAction: 'ask_user_for_application_style_injection' },
+      details: { appType: params.appType, applicationSettingsWritten: false,
+        themeCapability: theme.mode, storedThemeMode: typeof storedMode === 'string' ? storedMode : null,
+        nextAction: 'ask_user_for_application_style_injection' },
     });
   }
 }
 
-// Runtime capability is resolved by the server. Stored APP_THEME_MODE alone is insufficient.
 async function checkAppStyleInjection(params, authRef) {
-  const html = await requestWithAutoLogin(auth => httpGet(auth.baseUrl,
-    `/${encodeURIComponent(params.appType)}/admin`, { _stamp: Date.now() }, { responseType: 'text' }), authRef);
-  const { parseThemeContext } = require('./upgrade-app-theme');
-  // Even human approval cannot waive target application and organization identity.
-  const identity = parseThemeContext(html, ['appType', 'corpId']);
-  if (identity.appType !== params.appType || !authRef.corpId || identity.corpId !== authRef.corpId) {
-    throwCommandError(t('upgrade_app_theme.context_failed'), { code: 'APP_THEME_CONTEXT_UNVERIFIED' });
-  }
-  let context;
-  try {
-    context = parseThemeContext(html, ['appType', 'corpId', 'appThemeEnable', 'appThemeMode']);
-  } catch (error) {
-    if (error.code !== 'APP_THEME_CONTEXT_UNVERIFIED') {throw error;}
-    return requireAppStyleConfirmation(params, {});
-  }
-  requireAppStyleConfirmation(params, context);
+  // AppRpc#getAppIncludingAecpInfo returns the application's own identity.
+  // Never open /admin or follow a browser login redirect to validate an API write.
+  const app = await fetchCurrentApp(params.appType, authRef, true);
+  requireAppStyleConfirmation(params, app);
 }
 
 function buildUpdateAppPostData(params, currentApp = {}, authRef) {
@@ -520,25 +509,6 @@ function buildUpdateAppPostData(params, currentApp = {}, authRef) {
   return postDataObj;
 }
 
-async function fetchCurrentApp(appType, authRef) {
-  const response = await requestWithAutoLogin((auth) => httpGet(
-    auth.baseUrl,
-    `/${appType}/query/app/getAppIncludingAecpInfo.json`,
-    {
-      _api: 'nattyFetch',
-      _mock: 'false',
-      appKey: appType,
-      _csrf_token: auth.csrfToken,
-      _stamp: Date.now(),
-    }
-  ), authRef);
-
-  if (!response || !response.success) {
-    throw new Error(response ? response.errorMsg || '查询应用详情失败' : '查询应用详情失败');
-  }
-  return response.content || {};
-}
-
 function getThemeSettings(app) {
   const rawStyle = pickAppField(app, 'customThemeStyle', 'CUSTOM_THEME_STYLE');
   let customThemeStyle = rawStyle || null;
@@ -573,6 +543,32 @@ function themeReadbackEvidence(params, details) {
   return { ...details, scope: 'configuration_readback', operation, runtimeVerified: false };
 }
 
+/** Configuration completion is separate from rendering. */
+function getThemeCompletion(params, currentApp, app, themeVerified, navigationVerified) {
+  const before = resolveAppThemeState(currentApp);
+  const theme = resolveAppThemeState(app);
+  const operation = params.customThemeStyle ? 'application_css'
+    : params.disableCustomTheme ? 'disable'
+      : params.colour && params.colour !== 'custom' ? 'preset' : 'partial_update';
+  const actual = getThemeSettings(app);
+  const checks = {
+    themeModeVerified: theme.mode !== 'unknown' && theme.mode === before.mode,
+    settingsVerified: themeVerified === true,
+    navigationVerified: navigationVerified === true,
+  };
+  if (operation === 'application_css') {
+    checks.resourceBound = actual.colour === 'custom' && !!normalizeCssColorToHex(actual.themeColor) &&
+      actual.customThemeStyle?.enabled === true &&
+      typeof actual.customThemeStyle?.cssUrl === 'string' && !!actual.customThemeStyle.cssUrl.trim();
+    // Legacy overlays require scope approval.
+    if (theme.mode === 'legacy') {checks.legacyScopeConfirmed = params.confirmLegacyAppStyle === true;}
+  }
+  const complete = operation !== 'partial_update' && Object.values(checks).every(value => value === true);
+  return { scope: 'configuration_readback', operation, mode: theme.mode, modeSource: theme.source,
+    complete, status: complete ? 'complete' : operation === 'partial_update' ? 'partial' : 'incomplete',
+    checks, missing: Object.keys(checks).filter(key => !checks[key]), runtimeVerified: false };
+}
+
 function noThemeUpload(appType) {
   return { requested: false, status: 'not_requested', uploadedThisRun: false, appType };
 }
@@ -633,6 +629,7 @@ async function saveAppSettings(params, authRef) {
   const navigationFields = Object.keys(expectedNavigation);
   if (!verifyTheme && !navigationFields.length) {return response;}
   let actual;
+  let actualApp = {};
   let actualNavigation;
   let readbackError;
   let themeVerified = !verifyTheme;
@@ -642,13 +639,15 @@ async function saveAppSettings(params, authRef) {
     if (attempt) { await new Promise((resolve) => setTimeout(resolve, attempt * 250)); }
     try {
       const app = await fetchCurrentApp(params.appType, authRef);
+      actualApp = app;
       actual = getThemeSettings(app);
       actualNavigation = getNavigationSettings(app, navigationFields, currentApp, params.disableCustomTheme);
       readbackError = undefined;
       themeVerified = !verifyTheme || themeSettingsMatch(expected, actual);
       navigationVerified = navigationFields.every((name) => expectedNavigation[name] === actualNavigation[name]);
-      if (themeVerified && navigationVerified) {
-        return { ...response,
+      const themeCompletion = getThemeCompletion(params, currentApp, app, themeVerified, navigationVerified);
+      if (themeVerified && navigationVerified && (!params.customThemeStyle || themeCompletion.complete)) {
+        return { ...response, themeCompletion,
           ...(submittedFields ? { submittedFields } : {}),
           ...(verifyTheme ? { themeVerification: themeReadbackEvidence(params, { verified: true, ...actual }) } : {}),
           ...(navigationFields.length ? { navigationVerification: { verified: true, ...actualNavigation } } : {}),
@@ -662,9 +661,12 @@ async function saveAppSettings(params, authRef) {
   }
   return {
     success: false,
+    themeCompletion: getThemeCompletion(params, currentApp, actualApp, themeVerified, navigationVerified),
     ...(submittedFields ? { submittedFields } : {}),
-    errorCode: themeVerified ? 'APP_NAVIGATION_NOT_PERSISTED' : 'APP_THEME_NOT_PERSISTED',
-    errorMsg: t(themeVerified ? 'update_app.navigation_not_persisted' : 'update_app.theme_not_persisted'),
+    errorCode: !themeVerified ? 'APP_THEME_NOT_PERSISTED' : !navigationVerified
+      ? 'APP_NAVIGATION_NOT_PERSISTED' : 'APP_THEME_CONFIGURATION_INCOMPLETE',
+    errorMsg: t(!themeVerified ? 'update_app.theme_not_persisted' : !navigationVerified
+      ? 'update_app.navigation_not_persisted' : 'update_app.theme_configuration_incomplete'),
     ...(verifyTheme ? { themeVerification: themeReadbackEvidence(params, themeVerified
       ? { verified: true, ...actual } : { verified: false, expected, actual, readbackError }) } : {}),
     ...(navigationFields.length ? { navigationVerification: navigationVerified
@@ -813,6 +815,7 @@ async function run(args) {
       success: true,
       appType: params.appType,
       themeVerification: response.themeVerification,
+      themeCompletion: response.themeCompletion,
       themeUpload,
       nameVerification,
       navigationVerification: response.navigationVerification,
@@ -838,11 +841,12 @@ async function run(args) {
       themeUpload,
       runtimeVerification: { verified: false, status: 'not_checked' },
       submittedFields: response && response.submittedFields,
+      themeCompletion: response && response.themeCompletion,
       errorCode: response && response.errorCode, themeVerification: response && response.themeVerification,
       navigationVerification: response && response.navigationVerification }));
     throwCommandError(errorMsg, { code: response && response.errorCode,
       details: response && { ...(response.errorCode === 'APP_NAVIGATION_NOT_PERSISTED' ? response.navigationVerification : response.themeVerification),
-        ...themeFailureEvidence(themeUpload) } });
+        themeCompletion: response.themeCompletion, ...themeFailureEvidence(themeUpload) } });
   }
 }
 

package/lib/auth/qwenwork-desktop.js

@@ -17,7 +17,8 @@ const MAX_RESPONSE_BYTES = 65536;
 function fail(code) {
   return new CliError(t('qwenwork.desktop_login_failed'), {
     code: `QWENWORK_DESKTOP_${code}`,
-    details: { invocation: buildQwenWorkLoginInvocation() },
+    details: { stage: 'authentication', owner: 'openyida', retryable: false,
+      nextAction: 'retry_after_host_state_changes', output_visibility: 'internal', invocation: buildQwenWorkLoginInvocation() },
   });
 }
 

package/lib/auth/qwenwork-login.js

@@ -9,7 +9,13 @@ const { exchangeQwenWorkCloudSession } = require('./qwenwork-cloud');
 const { tokenLogin, tokenRefresh, isRefreshAuthRequired } = require('./token-auth');
 
 function failure(code) {
-  return new CliError(t('qwenwork.login_check_failed'), { code });
+  return new CliError(t('qwenwork.login_check_failed'), { code, details: {
+    stage: 'authentication', owner: 'openyida',
+    retryable: false,
+    nextAction: code === 'QWENWORK_LOGIN_IDENTITY_MISMATCH'
+      ? 'select_target_organization_in_host_then_retry' : 'retry_after_host_state_changes',
+    output_visibility: 'internal',
+  } });
 }
 function summary(ok, session = {}) { return { ok, status: ok ? 'ok' : 'not_logged_in', can_auto_use: ok, ...(ok ? sessionIdentity(session) : {}) }; }
 
@@ -72,7 +78,8 @@ async function verify(session, options = {}) {
       throw failure('QWENWORK_LOGIN_CHECK_FAILED');
     }
     if (value.corp_id !== session.corp_id || value.user_id !== session.user_id ||
-      (options.corpId && value.corp_id !== options.corpId)) { throw failure('QWENWORK_LOGIN_IDENTITY_MISMATCH'); }
+      (options.corpId && value.corp_id !== options.corpId) ||
+      (options.userId && value.user_id !== options.userId)) { throw failure('QWENWORK_LOGIN_IDENTITY_MISMATCH'); }
     return true;
   } catch (error) {
     if (error instanceof CliError) { throw error; }
@@ -81,7 +88,7 @@ async function verify(session, options = {}) {
 }
 
 /** 网页态优先消费宿主凭据，认证失败回退普通 OAuth；其他宿主保持原流程。 */
-async function ensureQwenWorkLogin(options = {}, dependencies = {}) {
+async function performQwenWorkLogin(options = {}, dependencies = {}) {
   const env = options.env || process.env;
   const runtime = options.runtime || detectRuntimeCapabilities({ env });
   if (isQwenWorkWebRuntime(runtime) && !isEnvTokenAuthMode(env) && !hasEnvTokenCredential(env)) {
@@ -110,12 +117,26 @@ async function ensureQwenWorkLogin(options = {}, dependencies = {}) {
     return summary(true, session);
   }
   const resolution = resolveTokenSession(options);
-  if (resolution.status === 'profile_required') { throw failure('AUTH_PROFILE_REQUIRED'); }
+  if (resolution.status === 'profile_required') {
+    // 受管桌面的身份由客户端绑定；历史 profile 歧义不能让状态检查跳过宿主签票。
+    // 只返回未就绪，不选择凭据、发起 OAuth 或放宽显式身份约束。
+    const hostCheck = options.checkOnly && runtime.tool === 'qwenwork' && runtime.subtype === 'qwenwork_desktop' &&
+      /^[a-f0-9]{64}$/.test(env.QWENWORK_CLIENT_OPENYIDA_IDENTITY || '') &&
+      ![options.authProfile, options.profile, options.corpId, options.userId,
+        env.OPENYIDA_AUTH_PROFILE, env.OPENYIDA_AUTH_CORP_ID, env.OPENYIDA_AUTH_USER_ID].some(Boolean);
+    if (hostCheck) { return summary(false); }
+    throw failure('AUTH_PROFILE_REQUIRED');
+  }
+  if (runtime.tool === 'qwenwork' && resolution.status === 'profile_not_found' &&
+    (options.corpId || options.userId || env.OPENYIDA_AUTH_CORP_ID || env.OPENYIDA_AUTH_USER_ID)) {
+    throw failure('QWENWORK_LOGIN_IDENTITY_MISMATCH');
+  }
   let session = loadTokenSession(options);
   if (session && options.endpoint && new URL(session.base_url).origin !== new URL(options.endpoint).origin) {
     session = null;
   }
   if (await verify(session, options)) { return summary(true, session); }
+  if (options.checkOnly) { return summary(false); }
   if (session?.refresh_token) {
     try {
       const refreshed = await (dependencies.refresh || tokenRefresh)(options);
@@ -129,7 +150,6 @@ async function ensureQwenWorkLogin(options = {}, dependencies = {}) {
       }
     }
   }
-  if (options.checkOnly) { return summary(false); }
   if (isEnvTokenAuthMode(env) || isQwenWorkWebRuntime(runtime)) { throw failure('QWENWORK_LOGIN_FAILED'); }
   const result = await (dependencies.login || tokenLogin)(options);
   if (!result || result.ok === false || !result.access_token || !await verify(result, options)) {
@@ -138,6 +158,21 @@ async function ensureQwenWorkLogin(options = {}, dependencies = {}) {
   return summary(true, result);
 }
 
+async function ensureQwenWorkLogin(options = {}, dependencies = {}) {
+  try {
+    const result = await performQwenWorkLogin(options, dependencies);
+    return result.ok && (options.corpId || options.userId) ? { ...result, target_match: 'matched' } : result;
+  } catch (error) {
+    const terminal = failure(error instanceof CliError ? error.code : 'QWENWORK_LOGIN_FAILED');
+    if (error instanceof CliError) {
+      error.details = { ...terminal.details, ...error.details,
+        retryable: false, nextAction: terminal.details.nextAction, output_visibility: 'internal' };
+      throw error;
+    }
+    throw terminal;
+  }
+}
+
 async function run(args, options = {}) {
   const result = await ensureQwenWorkLogin({ ...options, checkOnly: args.includes('--check-only') });
   if (args.includes('--json') && !args.includes('--quiet') && process.env.YIDA_QUIET !== '1') {

package/lib/core/agent-capabilities.js

@@ -3,7 +3,7 @@
 const crypto = require('crypto');
 const fs = require('fs');
 const path = require('path');
-const { version, openyidaLocalBeta: localBeta } = require('../../package.json');
+const { version } = require('../../package.json');
 const { t } = require('./i18n');
 const { buildCommandManifest, buildEntryDeliveryPolicy } = require('./command-manifest');
 const { buildEnvironmentSnapshot } = require('./env');
@@ -231,25 +231,26 @@ function buildAuthPath(login, env = process.env, runtime = null) {
       ? 'STOP_AND_REQUEST_ENV_TOKEN'
       : 'RUN_OPENYIDA_LOGIN_IF_USER_APPROVES',
   };
+  if (runtime?.tool === 'qwenwork') {
+    for (const key of ['auth_profile', 'corp_id', 'corp_name', 'user_id', 'user_name', 'store', 'persistence_scope', 'warning']) { delete authPath[key]; }
+  }
   if (isQwenWorkWebRuntime(runtime) && !envTokenSession) {
     const invocation = buildQwenWorkLoginInvocation({ subtype: 'qwenwork_web' });
     authPath.auth_runtime = 'qwenwork_cloud_exchange';
     authPath.interactive_login_allowed = true;
     authPath.missing_token_action = 'RUN_OPENYIDA_LOGIN_QWENWORK';
-    for (const key of ['auth_profile', 'corp_id', 'corp_name', 'user_id', 'user_name', 'store', 'persistence_scope', 'warning']) { delete authPath[key]; }
     authPath.next_step = authPath.can_auto_use
       ? 'Silently continue the requested business operation and report its business result.'
       : 'Run the recommended login command and wait. The CLI first tries cloud credentials, then uses normal OAuth if authentication fails. If it prints an authorization URL, follow oauth_fallback browser guidance without starting another login process. Never inspect or display credentials.';
     authPath.next_step_commands = authPath.can_auto_use ? [] : [invocation.command];
     return authPath;
   }
-  // 桌面换票仅由当前活跃宿主和发行配置共同启用，不影响其他宿主的认证路径。
-  if (localBeta?.desktopTicketLogin && runtime?.tool === 'qwenwork' && runtime?.subtype === 'qwenwork_desktop' && !envTokenSession) {
+  // 公开入口已随正式包提供；宿主处理票据，模型只执行能力快照的命令。
+  if (runtime?.tool === 'qwenwork' && runtime?.subtype === 'qwenwork_desktop' && !envTokenSession) {
     const invocation = buildQwenWorkLoginInvocation();
     authPath.auth_runtime = 'qwenwork_desktop_exchange_ticket';
     authPath.interactive_login_allowed = true;
     authPath.missing_token_action = 'RUN_OPENYIDA_LOGIN_QWENWORK';
-    for (const key of ['auth_profile', 'corp_id', 'corp_name', 'user_id', 'user_name', 'store', 'persistence_scope', 'warning']) { delete authPath[key]; }
     authPath.next_step = authPath.can_auto_use
       ? 'Silently continue the requested business operation and report its business result.'
       : `Run the recommended login command as returned: ${invocation.command}. No extra PATH or output setup is needed. After success silently continue the requested business operation. If it fails, follow the returned invocation guidance.`;
@@ -277,7 +278,7 @@ function buildInteractiveLogin(auth, runtime) {
       invocation: buildQwenWorkLoginInvocation(),
       agent_action: auth.can_auto_use ? 'continue_business_command' : 'run_login_qwenwork_and_wait',
       user_visible: false, success_action: 'continue_business_command_without_message',
-      reason: 'qwenwork_desktop_pre_beta', completion_signal: 'process_exit_and_final_json', playwright_required: false,
+      reason: 'qwenwork_desktop_host', completion_signal: 'process_exit_and_final_json', playwright_required: false,
     };
   }
   const base = {
@@ -358,12 +359,44 @@ function buildBuilderPath(login, projectRoot, manifest, env = process.env, runti
     runtime,
     browser_verification: require('./browser-handoff').browserVerificationPolicy(runtime, env),
     interactive_login: buildInteractiveLogin(auth, runtime),
-    communication: isQwenWorkWebRuntime(runtime) || (runtime.tool === 'qwenwork' && runtime.subtype === 'qwenwork_desktop') ? {
+    communication: {
       preparation_visibility: 'silent',
+      authentication_narration: 'forbidden_in_messages_progress_todos_cards_and_tool_titles',
+      readiness_announcement: 'never_announce_environment_login_or_organization_readiness',
+      preparation_success_action: 'continue_business_operation_without_transition_message',
+      tool_title_content: 'current_business_stage_only_preserve_raw_command_in_execution_record',
+      app_build_task: {
+        title_template: '在{organization_name}组织下搭建宜搭应用',
+        applies_to: 'controllable_task_title_and_start_message_conversation_title_when_host_supports_update',
+        organization_source: 'verified_current_host_organization_display_name_never_environment_label_domain_id_or_history',
+        unknown_organization_title: '在当前组织下搭建宜搭应用',
+        update_title_after_organization_is_verified: true,
+        append_authentication_or_preparation_status: false,
+      },
+      app_creation_notice: {
+        template: '当前在{organization_name}组织下为您创建{app_name}应用',
+        when: 'once_immediately_before_creating_new_app_not_preparation_retries_or_resume',
+        organization_source: 'verified_current_host_organization_display_name_never_environment_label_domain_id_or_history',
+        app_name_source: 'confirmed_app_name',
+        unknown_organization: '当前组织',
+        append_authentication_or_preparation_status: false,
+      },
       completion_content: 'business_result_and_business_link_only',
       disclose_authentication_identity_environment: false,
-      report_preparation_only_when_user_action_is_required: true,
+      disclose_implementation_details: false,
+      progress_content: 'business_stage_only_never_authentication_or_internal_repair',
+      user_action_content: 'minimal_action_and_business_impact_without_technical_explanation',
+      report_preparation_only_when_user_action_is_required: false,
       bundled_skill_path: path.resolve(__dirname, '../../yida-skills'),
+    },
+    host_context: runtime.tool === 'qwenwork' ? {
+      default_organization: 'current_host_organization',
+      ask_organization_by_default: false,
+      explicit_target_policy: 'preserve_user_target_and_stop_if_unmatched',
+      organization_switch: 'host_supported_flow_only_never_copy_profiles_or_rewrite_environment',
+      recovery: auth.auth_runtime === 'env_token_bootstrap'
+        ? { max_attempts: 0, failure_next_step: 'stop_and_request_host_preparation' }
+        : buildQwenWorkLoginInvocation({ subtype: runtime.subtype }),
     } : undefined,
     environment_check_simplification: {
       contract_role: 'machine_readable_builder_runtime_not_yida_agent_business_logic',
@@ -488,6 +521,7 @@ function compactBuilderPath(builderPath) {
     browser_verification: builderPath.browser_verification,
     interactive_login: builderPath.interactive_login,
     communication: builderPath.communication,
+    host_context: builderPath.host_context,
     environment_check_simplification: {
       minimal_probe_commands: environment.minimal_probe_commands,
       can_skip_default_exploration_when_summary_ok: environment.can_skip_default_exploration_when_summary_ok,
@@ -657,8 +691,12 @@ function buildAgentCapabilitiesSummary() {
     schema_version: 1,
     name: 'openyida-agent-capabilities-summary',
     version,
-    login: ['qwenwork_desktop_exchange_ticket', 'qwenwork_cloud_exchange'].includes(builderPath.auth.auth_runtime)
-      ? { status: loginStatus.status, can_auto_use: loginStatus.can_auto_use === true }
+    login: runtime.tool === 'qwenwork'
+      ? { status: loginStatus.status, can_auto_use: loginStatus.can_auto_use === true,
+        ...(builderPath.auth.auth_runtime === 'env_token_bootstrap' ? {
+          auth_mode: loginStatus.auth_mode, auth_source: loginStatus.auth_source,
+          failure_reason: loginStatus.failure_reason,
+        } : {}) }
       : compactLogin(loginStatus),
     workdir: projectRoot,
     workdir_exists: !!projectResolution.exists,

package/lib/core/command-manifest.js

@@ -1344,7 +1344,7 @@ const COMMAND_GROUPS = [
         output: 'json',
       }),
       command('create-app', ['create-app'], 'create-app "<name>"|--name <name> [options] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_app', { managedRun: { scope: 'denied', reason: 'scope_not_audited' },
-        notes: ['Successful results include appUrl/workbenchUrl for the business workspace and adminUrl for developer administration. Complete application delivery retains adminUrl regardless of auth runtime; route construction does not verify recipient access. Preserve the frontend URL from its own page result.', 'In QwenWork, permission failures return a nonzero exit and structured status=permission_required. YIDA_PLATFORM_ACCESS_REQUIRED and YIDA_APP_CREATE_PERMISSION_REQUIRED include details.permissionLabel/permissionUrl and nextAction.label/url; YIDA_PERMISSION_REQUIRED preserves an unclassified permission reason without inventing a link. Explain the missing permission, display the semantic label as a Markdown link to its paired URL (or reuse nextStep), and pause resource writes; do not automatically open it, send an application, switch spaces, log in again or retry creation. Resume only after the user requests continuation and the host identity, organization and permissions are verified.'],
+        notes: ['Creation always requests createWithModernTheme=y and verifies the new app identity and modern configuration through getAppIncludingAecpInfo.json before reporting success. APP_CREATED_THEME_UNVERIFIED preserves details.appCreated/appType/retryCreate=false; inspect that app and never recreate or silently downgrade it. themeVerification is configuration readback, not browser rendering proof.', 'Successful results include appUrl/workbenchUrl for the business workspace and adminUrl for developer administration. Complete application delivery retains adminUrl regardless of auth runtime; route construction does not verify recipient access. Preserve the frontend URL from its own page result.', 'In QwenWork, permission failures return a nonzero exit and structured status=permission_required. YIDA_PLATFORM_ACCESS_REQUIRED and YIDA_APP_CREATE_PERMISSION_REQUIRED include details.permissionLabel/permissionUrl and nextAction.label/url; YIDA_PERMISSION_REQUIRED preserves an unclassified permission reason without inventing a link. Explain the missing permission, display the semantic label as a Markdown link to its paired URL (or reuse nextStep), and pause resource writes; do not automatically open it, send an application, switch spaces, log in again or retry creation. Resume only after the user requests continuation and the host identity, organization and permissions are verified.'],
       }),
       command('design-plan.catalog', ['design-plan', 'catalog'], 'design-plan catalog [--json]', 'help.cmd_design_plan_catalog', { managedRun: { scope: 'local' },
         requiresLogin: false, output: 'json',
@@ -1419,12 +1419,13 @@ const COMMAND_GROUPS = [
           { name: 'showAppNav', type: 'boolean', source: 'option', builder_options: ['--show-app-nav'] },
         ],
         notes: [
-          'Before uploading or binding CSS, read server-resolved appThemeEnable/appThemeMode and verify app/corp identity. Only y/modern allows automatic app-level injection. Legacy or unknown capability requires asking the human about this exact application and reviewed stylesheet scope before --confirm-legacy-app-style; unavailable confirmation means stop before uploading. Prefer page-scoped styles for legacy applications. --disable-custom-theme retains the existing resource URL/name and sets enabled/iframePropagation to boolean false. Never submit an empty style or remove the resource URL. Inspect strict configuration readback. Checking that link#yida-app-custom-theme is absent and CSS is not requested follows builder_path.browser_verification; HTTP success alone is insufficient.',
+          'Before uploading or binding CSS, verify app/corp identity through getAppIncludingAecpInfo.json, never an admin HTML route. Recognize modern when server appThemeEnable=y and appThemeMode=modern, or when CREATED_WITH_MODERN_THEME=y with explicit modern mode or an unset mode and server-derived AI provenance (including qwenwork). Explicit disabled/legacy facts take precedence. A mode name or host alone is insufficient; missing evidence remains unknown. Configuration readback never proves browser CSS rendering. Legacy or unknown capability requires asking the human about this exact application and reviewed stylesheet scope before --confirm-legacy-app-style; unavailable confirmation means stop before uploading. Prefer page-scoped styles for legacy applications. --disable-custom-theme retains the existing resource URL/name and sets enabled/iframePropagation to boolean false. Never submit an empty style or remove the resource URL. Inspect strict configuration readback. Checking that link#yida-app-custom-theme is absent and CSS is not requested follows builder_path.browser_verification; HTTP success alone is insufficient.',
           'Upload application CSS with --theme-file; the primary color is read from CSS and saved with the theme resource. Edit navigation radius, three border states and selected shadow in design.md, regenerate CSS, then upload; these tokens are not separate update-app flags. Unknown options, missing values and combined --hide-app-nav/--show-app-nav are rejected.',
           'themeUpload records this invocation: target app/environment, source name/bytes/SHA-256, themeColor and resource URL. resourceContentVerified=false means no remote byte comparison. Without --theme-file it is not_requested/uploadedThisRun=false. Unknown upload or failed binding needs readback before another upload; accepted uploads retain their receipt.',
           'One design document and theme CSS cover navigation, application shell, native forms, custom pages and record details. tokens.application-global.appearance.navigation defines navigation surfaces, text and interaction states, logo, groups, search, popups, borders, radius and density. Platform-supported tokens are applied through the active navigation mode; page content consumes the same application theme.',
           'Applications with appThemeEnable=n or appThemeMode=legacy persist side/top/l_shape as ver/hoz/ver and map unsupported white/gray navigation colors to legacy light. Existing legacy layouts and navType are preserved. Unknown theme capability keeps the existing save protocol.',
           'navigationVerification checks requested navTheme/layoutDirection/hideAppNav/logoSource; mismatch is APP_NAVIGATION_NOT_PERSISTED, nonzero, with read-only retries. themeVerification.scope=configuration_readback; operation is bind_resource/update_theme/disable/preserve. preserve is not upload evidence. New themes need an uploaded receipt and matching enabled resource/color. runtimeVerification stays false/not_checked. Browser checks follow builder_path.browser_verification; only a local agent on the user machine may run them. Cloud/sandbox/remote/unknown keep not_checked internal and deliver confirmed results and entry URLs, without default user verification tasks.',
+          'themeCompletion.complete requires stable proven modern mode, or legacy mode with scope confirmation, plus matching CSS/color and requested navigation. Unknown/changed mode fails with APP_THEME_CONFIGURATION_INCOMPLETE after read-only retries. Color/navigation-only is partial; preset/disable are separate operations. Never replace requested CSS with colors after a historical redirect. sample is optional; configuration is not rendering proof.',
           'For generated design artifacts, pass themeProfile.navTheme from design.md to --nav-theme. Do not infer it from the business brief or omit it expecting a light default.',
           'Platform preset keys are used independently of --theme-file and --theme-color. Choose --hide-app-nav or --show-app-nav to set navigation visibility.',
         ],
@@ -1899,6 +1900,7 @@ const COMMAND_GROUPS = [
         output: 'json',
         noteKeys: ['help.data_notes', 'query_data.approver_query_help'],
         notes: [
+          'Ordinary form updates read record edit permission and native edit-schema field behaviors before writing. Only verified NORMAL fields are accepted; readonly, hidden, disabled, unknown or dynamically unverifiable fields reject the entire update. Restricted subform replacements require the native editor. This CLI preflight does not replace server-side authorization.',
           'Application tasks: data query tasks <appType> --type todo|created|done|cc [--normalized] [--transport app-v1|app-query]. submitted remains an alias of created. --normalized returns items/total/page/pageSize with native detail targets; an unknown total is null. app-v1 is the compatible default; only cc adds --process-codes and --instance-status. Explicit app-query fixes appKeys to the target app and supports the per-kind filters in task-center capabilities: --originators, --process-codes, --instance-create-from/to, --task-create-from/to, --task-finish-from/to, --carbon-create-from/to. Date values are Unix milliseconds. Unsupported filters and caller scope/identity overrides are rejected; transports never silently fall back.',
           'Each condition uses key (field ID), componentName, type, operator and value. Query types: TextField/TextareaField/TableField TEXT; NumberField/RateField/DateField/CascadeDateField DOUBLE; RadioField/SelectField/CheckboxField/MultiSelectField/DepartmentSelectField ARRAY; EmployeeField/CascadeSelectField/CitySelectField STRING; ImageField/AttachmentField TEXT.',
           'Ordinary form searchFormDatas accepts AND condition arrays via --search-json/--search-file. DateField: type DOUBLE, is/is_not, value ""; zero is filled. Query range endpoints as DateField with .start/.end: both empty means unfilled, both filled means complete.',
@@ -2332,7 +2334,9 @@ function summarizeLocalizedCommands(commands) {
           reference: 'yida-skills/skills/yida-design/references/ask-human-interaction-contract.md',
           audience: 'nontechnical_user',
           wording: 'Use everyday language, concrete business names and short sentences. Lead with the result or action; explain necessary technical terms on first use.',
-          progress: 'Say what is happening and what happens next. Report completed work from verified results.',
+          progress: 'Report only the actual business stage and verified business results. Never announce environment, login or current-organization readiness.',
+          preparation: 'Strictly internal: installation, environment checks, authentication, ticket exchange, refresh and recovery must never appear in messages, todos, cards or tool-call titles/descriptions. On success continue the business operation without a transition message. If user action is essential, state only the minimal action and business impact.',
+          app_creation_notice: 'Immediately before creating a new app, say once: 当前在{组织名称}组织下为您创建{应用名称}应用. Use the verified current host organization display name and confirmed app name; never substitute an environment label, domain, organization ID or historical account. If the display name is unavailable, say 当前组织. Do not repeat on retries or existing-app continuation, or append authentication/preparation status.',
           image_progress: 'Use 素材采集&应用创建 as the progress description while image collection and app creation are both running; otherwise use the active stage name. Keep the todo items separate. Record image counts, slots, subtasks and execution details internally.',
           todo: {
             templates: 'yida-skills/skills/yida-design/references/ask-human-interaction-contract.md#步骤列表与进度',