openyida 2026.10.8 → 2026.10.9

package/README.md

@@ -404,6 +404,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida design-plan materialize <build-plan.json> [--from-preview \| --business-file <json> --visual-file <json>] [--output-dir <dir>] [--rebase-parts] [--check] [--json]` | Generate or update plan documents and theme with consistency checks |
 | `openyida design-plan patch <build-plan.json> --set <path=value> [--set <path=value> ...] [--materialize] [--output-dir <dir>] [--json]` | Patch plan fields and optionally sync documents and theme |
 | `openyida update-app <appType> [--name "..."] [--desc "..."] [--icon <name>] [--icon-color <color>] [--colour <key>] [--theme-color <color>] [--theme-file <css>] [--nav-theme light\|dark\|white\|gray] [--logo-source appIcon\|customImage] [--layout side\|top\|l_shape] [--hide-app-nav\|--show-app-nav]` | Update app info |
+| `openyida upgrade-app-theme <appType> --explicit-request [--confirm \| --prepare --output-dir <dir>] [--json]` | Upgrade an AI-built legacy app theme (explicit request and ask_human confirmation required) |
 | `openyida app-online <appType> [--to-ding-app-center] [--show-app-center]` | Enable a Yida app |
 | `openyida app-offline <appType> [--to-ding-app-center] [--show-app-center]` | Disable a Yida app |
 | `openyida nav-group <list\|create\|rename\|delete\|move\|order\|auto-order\|hide\|show> <appType> ...` | Manage app sidebar navigation groups |

package/bin/yida.js

@@ -914,6 +914,11 @@ async function main() {
       break;
     }
 
+    case 'upgrade-app-theme': {
+      await require('../lib/app/upgrade-app-theme').run(args);
+      break;
+    }
+
     case 'app-online':
     case 'app-offline': {
       const { run: runAppLifecycle } = require('../lib/app/app-lifecycle');

package/lib/app/prepare-app-theme-upgrade.js

@@ -0,0 +1,104 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { fetchFormPageList } = require('./form-navigation');
+const { fetchSchemaRecord, resolveCodeBundleSchema } = require('./get-schema');
+const { throwCommandError } = require('../core/command-errors');
+const { t } = require('../core/i18n');
+
+const hash = value => crypto.createHash('sha256').update(value).digest('hex');
+const pointer = value => String(value).replace(/~/g, '~0').replace(/\//g, '~1');
+
+// Findings are review candidates, never a license to delete business code or all styles.
+function inspectUpgradeSchema(schema) {
+  const content = schema.content || schema;
+  const sources = [];
+  const styleCandidates = [];
+  const blockers = [];
+  let jsxCount = 0;
+  let canvasCount = 0;
+  function walk(value, at) {
+    if (typeof value === 'string') {
+      if (/\/(?:style|css|customStyle|customCss)(?:\/|$)/i.test(at) || /createElement\s*\(\s*['"]style['"]|insertRule\s*\(|(?:parent|top)\.document|contentDocument|formDetail|inject\w*(?:Theme|Style)|<style\b|--(?:pod-|color-brand)/i.test(value)) {
+        styleCandidates.push({ pointer: at, sha256: hash(value), reviewRequired: true });
+      }
+      return;
+    }
+    if (!value || typeof value !== 'object') { return; }
+    const isInstance = Boolean(value.id || value.props || value.children);
+    if (isInstance && value.componentName === 'Jsx') { jsxCount++; }
+    if (isInstance && value.componentName === 'YidaCodeCanvas') {
+      canvasCount++;
+      if (typeof value.props?.code === 'string' && value.props.code.trim()) {
+        sources.push({ kind: 'canvas', pointer: `${at}/props/code`, code: value.props.code });
+      } else { blockers.push({ code: 'CANVAS_SOURCE_MISSING', pointer: at }); }
+    }
+    for (const [key, child] of Object.entries(value)) { walk(child, `${at}/${pointer(key)}`); }
+  }
+  walk(content, '');
+  const moduleSource = content.actions?.module?.source;
+  if (typeof moduleSource === 'string' && moduleSource.trim()) {
+    sources.push({ kind: jsxCount ? 'legacy-jsx' : 'actions', pointer: '/actions/module/source', code: moduleSource });
+  } else if (jsxCount) { blockers.push({ code: 'LEGACY_JSX_SOURCE_MISSING', pointer: '/actions/module/source' }); }
+  // A multi-component page cannot safely be replaced by publish's single Canvas template.
+  if (canvasCount > 1 || jsxCount > 1 || (jsxCount && canvasCount)) {
+    blockers.push({ code: 'MIXED_PAGE_REQUIRES_SCHEMA_PRESERVING_MIGRATION', pointer: '/pages' });
+  }
+  return { sources, styleCandidates, blockers, jsxCount, canvasCount };
+}
+
+async function prepareAppThemeUpgrade(params, authRef) {
+  if (!params.outputDir) {
+    throwCommandError(t('upgrade_app_theme.prepare_output_required'), { code: 'APP_THEME_PREPARE_OUTPUT_REQUIRED' });
+  }
+  const outputDir = path.resolve(params.outputDir);
+  if (fs.existsSync(outputDir)) {
+    throwCommandError(t('upgrade_app_theme.prepare_exists'), { code: 'APP_THEME_PREPARE_OUTPUT_EXISTS' });
+  }
+  const forms = await fetchFormPageList(params.appType, authRef);
+  // Never overwrite a previous backup or trust resource names as filesystem paths.
+  fs.mkdirSync(path.dirname(outputDir), { recursive: true });
+  fs.mkdirSync(outputDir);
+  const records = [];
+  for (const [index, form] of forms.entries()) {
+    const dir = path.join(outputDir, `resource-${index + 1}`);
+    fs.mkdirSync(dir);
+    const resource = { ...form, sources: [], styleCandidates: [], blockers: [], status: 'pending-review' };
+    records.push(resource);
+    try {
+      const record = await fetchSchemaRecord(params.appType, form, authRef, 0, { resolveCodeBundles: false });
+      if (!record.success) { throw new Error(record.errorMsg); }
+      const raw = JSON.stringify(record.schema, null, 2);
+      fs.writeFileSync(path.join(dir, 'schema.original.json'), raw, { flag: 'wx' });
+      resource.schemaFile = path.join(dir, 'schema.original.json');
+      resource.schemaSha256 = hash(raw);
+      const resolved = await resolveCodeBundleSchema(JSON.parse(raw), params.appType, form.formUuid, authRef);
+      fs.writeFileSync(path.join(dir, 'schema.resolved.json'), JSON.stringify(resolved, null, 2), { flag: 'wx' });
+      const inspected = inspectUpgradeSchema(resolved);
+      Object.assign(resource, { styleCandidates: inspected.styleCandidates, blockers: inspected.blockers,
+        kind: inspected.jsxCount ? 'legacy-jsx' : inspected.canvasCount ? 'canvas' : 'native-form-or-page' });
+      for (const [sourceIndex, source] of inspected.sources.entries()) {
+        const ext = source.kind === 'canvas' ? 'canvas.jsx' : source.kind === 'legacy-jsx' ? 'oyd.jsx' : 'js';
+        const file = path.join(dir, `source-${sourceIndex + 1}.${ext}`);
+        fs.writeFileSync(file, source.code, { flag: 'wx' });
+        resource.sources.push({ kind: source.kind, pointer: source.pointer, file, sha256: hash(source.code) });
+      }
+    } catch (error) {
+      resource.blockers.push({ code: error.code || 'SCHEMA_OR_SOURCE_FETCH_FAILED', message: error.message });
+    }
+    if (resource.blockers.length) { resource.status = 'blocked'; }
+  }
+  const manifestFile = path.join(outputDir, 'upgrade-plan.json');
+  const blockedCount = records.filter(record => record.blockers.length).length;
+  const output = { success: blockedCount === 0, stage: blockedCount ? 'blocked' : 'prepared',
+    appType: params.appType, corpId: authRef.corpId, baseUrl: authRef.baseUrl,
+    createdAt: new Date().toISOString(), manifestFile, remoteModified: false, appUpgradeComplete: false,
+    inventorySource: 'form-navigation', inventoryCoverageVerified: false,
+    total: records.length, blockedCount, resources: records };
+  fs.writeFileSync(manifestFile, JSON.stringify(output, null, 2), { flag: 'wx' });
+  return output;
+}
+
+module.exports = { inspectUpgradeSchema, prepareAppThemeUpgrade };

package/lib/app/upgrade-app-theme.js

@@ -0,0 +1,169 @@
+'use strict';
+
+const querystring = require('querystring');
+const { httpGet, httpPost, requestWithAutoLogin } = require('../core/utils');
+const { createAuthRef } = require('../core/yida-client');
+const { throwCommandError, throwUsage } = require('../core/command-errors');
+const { t } = require('../core/i18n');
+
+function parseArgs(args = []) {
+  const params = { appType: null, explicitRequest: false, confirm: false, help: false };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--help' || arg === '-h') { params.help = true; }
+    else if (arg === '--prepare') { params.prepare = true; }
+    else if (arg === '--output-dir' && args[i + 1] && !args[i + 1].startsWith('-')) { params.outputDir = args[++i]; }
+    else if (arg === '--json') { params.json = true; }
+    else if (arg === '--explicit-request') { params.explicitRequest = true; }
+    else if (arg === '--confirm') { params.confirm = true; }
+    else if (!arg.startsWith('-') && !params.appType) { params.appType = arg; }
+    else { throwUsage(t('cli_argument.invalid', arg)); }
+  }
+  if (params.prepare && params.confirm) { throwUsage(t('upgrade_app_theme.prepare_output_required')); }
+  return params;
+}
+
+// Read only literal fields from the server-rendered admin configuration. Never execute HTML/JS.
+function parseThemeContext(html) {
+  const fail = () => throwCommandError(t('upgrade_app_theme.context_failed'), { code: 'APP_THEME_CONTEXT_UNVERIFIED' });
+  if (typeof html !== 'string') { return fail(); }
+  const contexts = [];
+  for (const match of html.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/gi)) {
+    if (!match[1].includes('window.pageConfig')) { continue; }
+    let ast;
+    try { ast = require('@babel/standalone').transform(match[1], { ast: true, code: false }).ast; }
+    catch (_) { return fail(); }
+    for (const statement of ast.program.body) {
+      const expr = statement.expression;
+      if (expr?.type !== 'AssignmentExpression' || expr.operator !== '=' ||
+          expr.left.type !== 'MemberExpression' || expr.left.computed ||
+          expr.left.object.name !== 'window' || expr.left.property.name !== 'pageConfig') { continue; }
+      if (expr.right.type !== 'ObjectExpression') { return fail(); }
+      const context = {};
+      const wanted = ['appType', 'corpId', 'agentAppType'];
+      for (const prop of expr.right.properties) {
+        if (prop.type === 'SpreadElement' || prop.computed) { return fail(); }
+        const key = prop.key.name || prop.key.value;
+        if (!wanted.includes(key)) { continue; }
+        if (Object.hasOwn(context, key) || prop.value?.type !== 'StringLiteral') { return fail(); }
+        context[key] = prop.value.value;
+      }
+      if (wanted.some(key => !Object.hasOwn(context, key))) { return fail(); }
+      contexts.push(context);
+    }
+  }
+  if (contexts.length !== 1) { return fail(); }
+  return contexts[0];
+}
+
+async function readThemeEligibility(appType, auth) {
+  const html = await requestWithAutoLogin(current => httpGet(current.baseUrl,
+    `/${encodeURIComponent(appType)}/admin`, { _stamp: Date.now() }, { responseType: 'text' }), auth);
+  const context = parseThemeContext(html);
+  if (context.appType !== appType || !auth.corpId || context.corpId !== auth.corpId) {
+    throwCommandError(t('upgrade_app_theme.context_failed'), { code: 'APP_THEME_CONTEXT_UNVERIFIED' });
+  }
+  // agentAppType is derived by Tianshu from FROM_BUILDER_AI and BUILDER_AI_SOURCE.
+  // aiApp/FROM_AI is a separate feature flag and must not be used as provenance.
+  if (!['local', 'cloud', 'qwenwork'].includes(context.agentAppType.trim().toLowerCase())) {
+    throwCommandError(t('upgrade_app_theme.ai_only'), { code: 'APP_THEME_AI_APP_REQUIRED' });
+  }
+  return context;
+}
+
+// Both attestations are required even for callers that bypass the CLI runner.
+// They record the agent's authorization checks; they cannot prove a human reply.
+async function upgradeAppTheme(params, authRef) {
+  if (!params.appType || !/^[A-Za-z0-9_-]+$/.test(params.appType)) {
+    throwUsage(t('upgrade_app_theme.usage'));
+  }
+  if (params.explicitRequest !== true || params.confirm !== true) {
+    throwCommandError(t('upgrade_app_theme.confirm_required'), { code: 'APP_THEME_CONFIRMATION_REQUIRED' });
+  }
+  const auth = authRef || createAuthRef();
+  await readThemeEligibility(params.appType, auth);
+  const targets = { CREATED_WITH_MODERN_THEME: 'y', APP_THEME_MODE: 'modern' };
+  const request = (endpoint, fields) => requestWithAutoLogin((current) => httpPost(
+    current.baseUrl,
+    `/${encodeURIComponent(params.appType)}/query/app/${endpoint}.json`,
+    querystring.stringify({ appType: params.appType, ...fields, _csrf_token: current.csrfToken })
+  ), auth);
+  const readConfig = async (key) => {
+    const response = await request('getSingleConfig', { key });
+    const emptyContent = response?.content && typeof response.content === 'object' &&
+      !Array.isArray(response.content) && Object.keys(response.content).length === 0;
+    if (response?.success !== true || (response.content !== null && typeof response.content !== 'string' && !emptyContent)) {
+      throwCommandError(t('upgrade_app_theme.read_failed'), { code: 'APP_THEME_READ_FAILED', details: { key } });
+    }
+    return emptyContent ? null : response.content;
+  };
+  // Read both before writing anything. The two endpoints are not transactional.
+  const previous = {};
+  for (const key of Object.keys(targets)) { previous[key] = await readConfig(key); }
+  const verifiedWrites = [];
+  let attemptedKey;
+  try {
+    for (const [key, value] of Object.entries(targets)) {
+      if (previous[key] === value) { continue; }
+      attemptedKey = key;
+      const response = await request('updateSingleConfig', { key, value });
+      if (response?.success !== true || response.content !== true) {
+        throwCommandError(t('upgrade_app_theme.write_failed'), { code: 'APP_THEME_UPGRADE_FAILED' });
+      }
+      if (await readConfig(key) !== value) {
+        throwCommandError(t('upgrade_app_theme.verify_failed'), { code: 'APP_THEME_NOT_PERSISTED' });
+      }
+      verifiedWrites.push(key);
+    }
+    // Verify the pair again after writes; never claim both succeeded from only one response.
+    if (attemptedKey) {
+      for (const [key, value] of Object.entries(targets)) {
+        if (await readConfig(key) !== value) {
+          throwCommandError(t('upgrade_app_theme.verify_failed'), { code: 'APP_THEME_NOT_PERSISTED' });
+        }
+      }
+    }
+  } catch (error) {
+    throwCommandError(attemptedKey ? t('upgrade_app_theme.incomplete') : error.message, {
+      code: error.code || 'APP_THEME_UPGRADE_FAILED',
+      details: { appType: params.appType, previous, attemptedKey, verifiedWrites,
+        configVerified: false, writeOutcomeMayBePartial: Boolean(attemptedKey) },
+    });
+  }
+  return { success: true, appType: params.appType, changed: verifiedWrites.length > 0,
+    verified: true, verificationScope: 'config', runtimeVerified: false, appUpgradeComplete: false,
+    nextStep: 'migrate-pages-and-clean-form-styles-with-yida-upgrade-app-theme', previous,
+    createdWithModernTheme: 'y', appThemeMode: 'modern', updatedKeys: verifiedWrites };
+
+}
+
+async function run(args = []) {
+  const params = parseArgs(args);
+  if (params.help) {
+    const { usage } = require('../core/chalk');
+    usage(t('upgrade_app_theme.usage'), t('upgrade_app_theme.confirm_required'));
+    return;
+  }
+  if (params.prepare) {
+    if (!params.appType || !/^[A-Za-z0-9_-]+$/.test(params.appType) || !params.explicitRequest || !params.outputDir) {
+      throwUsage(t('upgrade_app_theme.prepare_output_required'));
+    }
+    const auth = createAuthRef();
+    await readThemeEligibility(params.appType, auth);
+    const { prepareAppThemeUpgrade } = require('./prepare-app-theme-upgrade');
+    const prepared = await prepareAppThemeUpgrade(params, auth);
+    if (!prepared.success) {
+      throwCommandError(t('upgrade_app_theme.prepare_blocked'), {
+        code: 'APP_THEME_PREPARE_BLOCKED', details: { manifestFile: prepared.manifestFile, blockedCount: prepared.blockedCount },
+      });
+    }
+    console.log(JSON.stringify(prepared));
+    return prepared;
+  }
+  if (params.outputDir) { throwUsage(t('upgrade_app_theme.prepare_output_required')); }
+  const output = await upgradeAppTheme(params);
+  console.log(JSON.stringify(output));
+  return output;
+}
+
+module.exports = { parseArgs, parseThemeContext, readThemeEligibility, upgradeAppTheme, run };

package/lib/core/command-manifest.js

@@ -71,7 +71,7 @@ const PERMISSION_SCHEMA = Object.freeze({
   },
   modes: {
     allow: 'Allowed by the current OpenYida agent policy without an extra OpenYida-specific confirmation.',
-    ask: 'Requires user confirmation before agent execution; currently reserved for destructive/delete-like operations.',
+    ask: 'Requires user confirmation before agent execution; required for destructive operations and explicit-confirmation workflows such as legacy app theme upgrades.',
     deny: 'Should not be auto-executed by an agent.',
   },
   effects: {
@@ -367,6 +367,8 @@ function findCommandSuggestion(argv = []) {
 }
 
 const COMMAND_SIDE_EFFECTS = new Map([
+  ['upgrade-app-theme', sideEffect('mixed', { mutates_yida: true, mutates_local: true,
+    read_actions: ['--prepare'], mutating_actions: ['--confirm'] })],
   ['create-form.batch', sideEffect('remote_write', { mutates_local: true })],
   ...sideEffectEntries([
     'agent-capabilities',
@@ -748,6 +750,12 @@ const COMMAND_PERMISSIONS = new Map([
     reason: ALLOW_EXTERNAL_REASON,
   })),
 
+  ...permissionEntries(['upgrade-app-theme'], permission('ask', 'write', {
+    action_dependent: true, read_actions: ['--prepare'], ask_actions: ['--confirm'],
+    preauthorized_actions: [], preauthorized_patterns: [], ask_patterns: [], unknown_action_mode: 'ask',
+    reason: 'Only on an explicit user request to upgrade this existing app to the modern theme; require ask_human confirmation for the target app before execution. General beautification, app creation and blanket authorization do not qualify.',
+  })),
+
   ...permissionEntries([
     'app-offline',
     'connector.delete',
@@ -1155,6 +1163,18 @@ const COMMAND_GROUPS = [
           'Platform preset keys are used independently of --theme-file and --theme-color. Choose --hide-app-nav or --show-app-nav to set navigation visibility.',
         ],
       }),
+      command('upgrade-app-theme', ['upgrade-app-theme'], 'upgrade-app-theme <appType> --explicit-request [--confirm | --prepare --output-dir <dir>] [--json]', 'help.cmd_upgrade_app_theme', {
+        output: 'json',
+        args: [
+          { name: 'appType', type: 'string', required: true, source: 'positional', position: 0 },
+          { name: 'explicitRequest', type: 'boolean', required: true, source: 'option', builder_options: ['--explicit-request'] },
+          { name: 'prepare', type: 'boolean', source: 'option', builder_options: ['--prepare'] },
+          { name: 'outputDir', type: 'string', source: 'option', builder_options: ['--output-dir'] },
+          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
+          { name: 'confirm', type: 'boolean', source: 'option', builder_options: ['--confirm'] },
+        ],
+        notes: ['--prepare reads remote schemas/source bundles into a new local backup directory and produces a per-resource migration plan without remote writes; it requires explicit upgrade intent but no mutation confirmation. Before --confirm, use the independent upgrade Skill to prepare/review sources, migrate legacy JSX to Canvas without business/layout changes, and remove verified form-detail style injection. Only mutate after an explicit user request to upgrade an existing app to the modern theme AND an affirmative ask_human reply for that app. These flags attest to both checks; they do not replace human confirmation. If ask_human is unavailable, stop before mutation. Only agentAppType=local/cloud/qwenwork qualifies; verify target app/corp identity. Do not check V4, appThemeEnable, organization theme gray or upgrade gray. After ask_human approval, persist CREATED_WITH_MODERN_THEME=y and APP_THEME_MODE=modern, then read both back. Report partial/unknown writes on failure. Success verifies configuration only, not page migration or runtime rendering. appUpgradeComplete remains false until the Skill verifies all page/form migrations.'],
+      }),
       command('app-online', ['app-online'], 'app-online <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_online'),
       command('app-offline', ['app-offline'], 'app-offline <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_offline'),
       command('nav-group', ['nav-group'], 'nav-group <list|create|rename|delete|move|order|auto-order|hide|show> <appType> ...', 'help.cmd_nav_group', {

package/lib/core/locales/en.js

@@ -2162,3 +2162,19 @@ module.exports.sample_options = {
   'theme_help': 'app-theme: --output is a CSS file; --design-file reads a completed design. Omitting it resets CSS. Set theme values in the design.',
   'style_help': 'application-style: --style-id is required and accepts every complete application theme, never a separate navigation style. design.md owns visual tokens for navigation, shell, custom pages, forms and details; --output is a directory for three files. Existing bundle files cause an error.'
 };
+
+module.exports.upgrade_app_theme = {
+  prepare_output_required: 'Prepare source backups: upgrade-app-theme <appType> --explicit-request --prepare --output-dir <new-directory> [--json].',
+  prepare_exists: 'Backup directory already exists. Choose a new directory to preserve original sources.',
+  prepare_blocked: 'Some schemas or sources could not be retrieved or require manual migration. Inspect upgrade-plan.json; remote resources were not modified.',
+
+  context_failed: 'Cannot verify the server context for this app and organization. Upgrade stopped.',
+  ai_only: 'This app does not currently support upgrading to the new theme.',
+  usage: 'openyida upgrade-app-theme <appType> --explicit-request [--confirm | --prepare --output-dir <dir>] [--json]',
+  confirm_required: 'Requires an explicit upgrade request and ask_human approval of the upgrade scope. Both --explicit-request and --confirm are required.',
+  read_failed: 'Cannot read theme upgrade configuration. Complete upgrade status is unverified.',
+  write_failed: 'Theme upgrade configuration write failed.',
+  verify_failed: 'Could not verify the theme upgrade. Check the current app state.',
+  incomplete: 'The theme upgrade is incomplete. Some changes may have taken effect; further operations have stopped.',
+};
+module.exports.help.cmd_upgrade_app_theme = 'Upgrade an AI-built legacy app theme (explicit request and ask_human confirmation required)';

package/lib/core/locales/zh.js

@@ -2116,3 +2116,19 @@ module.exports.sample_options = {
   'theme_help': 'app-theme：--output 指向 CSS 文件；--design-file 读取已完成的设计。省略设计文件会重置 CSS，主题值通过设计填写。',
   'style_help': 'application-style：--style-id 必填，支持目录中全部整套应用主题，不单选导航风格；design.md 统一定义五类界面的视觉 token，--output 指向目录，输出三文件，有同名文件时报错。'
 };
+
+module.exports.upgrade_app_theme = {
+  prepare_output_required: '准备源码备份：upgrade-app-theme <appType> --explicit-request --prepare --output-dir <新目录> [--json]。',
+  prepare_exists: '备份目录已存在，请选择新目录，避免覆盖原始源码。',
+  prepare_blocked: '部分 Schema 或源码无法完整获取或迁移，请检查备份目录中的 upgrade-plan.json；未修改远端资源。',
+
+  context_failed: '无法验证目标应用及组织的服务端上下文，已停止升级。',
+  ai_only: '此应用暂不支持升级新版主题。',
+  usage: 'openyida upgrade-app-theme <appType> --explicit-request [--confirm | --prepare --output-dir <dir>] [--json]',
+  confirm_required: '仅在用户明确要求升级新版主题，并通过 ask_human 确认升级范围后执行；必须同时传入 --explicit-request 和 --confirm。',
+  read_failed: '读取主题升级配置失败，未确认完整升级状态。',
+  write_failed: '主题升级配置写入失败。',
+  verify_failed: '未能确认主题升级已生效，请检查应用当前状态。',
+  incomplete: '主题升级未完成，部分操作可能已生效，后续操作已停止。',
+};
+module.exports.help.cmd_upgrade_app_theme = 'AI 老应用升级新版主题（明确要求并经 ask_human 确认）';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.10.8",
+  "version": "2026.10.9",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/scripts/postinstall.js

@@ -310,7 +310,7 @@ openyida copy
 | 大类目录 | 第一层意图信号 | 子技能 |
 | --- | --- | --- |
 | \`yida-skills/context\` | 登录、退出、组织信息、Schema、fieldId、只读预检 | \`yida-login\`, \`yida-logout\`, \`yida-basic-info\`, \`yida-get-schema\`, \`yida-corp-efficiency\` |
-| \`yida-skills/app\` | 从零搭应用、导航、多语言 | \`yida-app\`, \`yida-create-app\`, \`yida-nav-group\`, \`yida-i18n\` |
+| \`yida-skills/app\` | 从零搭应用、导航、多语言、AI 老应用主题升级 | \`yida-app\`, \`yida-create-app\`, \`yida-nav-group\`, \`yida-i18n\`, \`yida-upgrade-app-theme\`（仅明确要求升级，必须 ask_human 确认） |
 | \`yida-skills/design\` | 完整应用需求分析、产品 PRD、单页 UI 改造、主页面视觉设计、应用主题色、全局换肤、图片素材 | \`yida-requirement-analysis\`, \`yida-prd\`, \`yida-design\`, \`yida-image-assets\` |
 | \`yida-skills/form\` | 表单字段、公式、校验、业务规则、批量录入、数据记录 | \`yida-create-form-page\`, \`yida-formula\`, \`yida-formula-evaluate\`, \`yida-business-rule\`, \`yida-canvas-table-form\`, \`yida-table-form\`, \`yida-data-management\` |
 | \`yida-skills/process\` | 审批、流程表单、流程规则、代理人 | \`yida-create-process\`, \`yida-process-rule\`, \`yida-agent-center\` |

package/yida-skills/SKILL.md

@@ -102,7 +102,7 @@ description: >
 | 大类目录 | 第一层意图信号 | 子技能 |
 | --- | --- | --- |
 | `yida-skills/context` | 登录、退出、切换组织、组织版本/容量、Schema、fieldId、执行前检查 | `yida-login`、`yida-logout`、`yida-basic-info`、`yida-get-schema`、`yida-corp-efficiency` |
-| `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n` |
+| `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言、AI 老应用主题升级 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n`、`yida-upgrade-app-theme`（仅明确升级要求并 ask_human 确认） |
 | `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤、图片素材 | `yida-requirement-analysis`、`yida-prd`、`yida-design`、`yida-image-assets` |
 | `yida-skills/form` | 表单字段、公式、校验、业务关联规则、批量录入、数据记录 | `yida-create-form-page`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
 | `yida-skills/process` | 审批、流程表单、流程规则、节点/分支/字段权限、流程代理 | `yida-create-process`、`yida-process-rule`、`yida-agent-center` |
@@ -126,6 +126,7 @@ description: >
 | 用户给 taskUuid 并要求转 PRD | 先用 `yida-tingji` 读取听记内容，再把已有内容交给 `yida-flash-note-to-prd` 生成 PRD |
 | 已有会议纪要/闪记内容转 PRD | `yida-flash-note-to-prd`，只处理已有内容，不负责按 taskUuid 拉取听记 |
 | 只创建应用壳并拿 appType | `yida-create-app`；若随后继续完整搭建，已经确认的 `requirement-brief.json`、`prd.md` 与 `design.md` 保持不变，真实 `appType` 只写入 schema 或当前任务资源上下文 |
+| 明确强制要求 AI 老应用升级成新版主题 | `yida-upgrade-app-theme`；必须先取得针对目标应用的 ask_human 肯定回复，普通美化/换色/建应用不得触发 |
 | 启用/上线或停用/下线已有应用 | `yida-app-lifecycle`；只有用户明确要求时执行，`app-offline` 执行前需再次确认目标应用 |
 | 创建自定义展示页资源 | `yida-create-page`，之后交给 `yida-canvas-custom-page` 编写页面源码，再交给 `yida-publish-page` 发布 |
 | 开发表单字段结构 / 增删改字段 | 使用 `yida-create-form-page` 落地字段结构 |

package/yida-skills/skills/yida-canvas-upgrade/SKILL.md

@@ -12,6 +12,10 @@ description: 将基于 JSX 组件 的自定义页面升级/迁移为使用 `Yida
 - 迁移前页面：OpenYida 平台 JSX 组件页面，通常是 `project/pages/src/*.oyd.jsx`、`export function renderJsx()`、`_customState`、`this.utils.yida.*`，`openyida publish` 发布为 `Jsx` 组件；用户称 `.oyb.jsx` 时先按平台 JSX 组件页面需求识别，再确认实际源码后缀。
 - 目标实现：页面 Schema 中承载 `YidaCodeCanvas` 组件，组件属性包含 `code`、`runtimeCode`、`importedModules`，运行时执行 `YidaComp`。
 
+## 从老应用主题升级进入
+
+从 `yida-upgrade-app-theme` 进入时，复用已备份的 Schema、源码和已确认的目标页面清单，逐页进行等价迁移。保持原业务逻辑、主要区块结构、字段 ID、请求参数、权限和跳转行为，不借迁移重做页面或更换业务模板。平台数据能力按当前 Canvas 数据桥规范适配，无法证明等价时停止发布，在应用升级清单记录未完成项。源码注入历史表单详情主题时，按已确认范围清理样式及专属监听，保留业务事件。
+
 ## 迁移前必须确认
 
 | 检查项 | 命令 / 做法 |

package/yida-skills/skills/yida-upgrade-app-theme/SKILL.md

@@ -0,0 +1,61 @@
+---
+name: yida-upgrade-app-theme
+description: 将老应用升级为新版主题，同步更新页面和表单样式。仅在用户明确要求升级时使用，执行前须通过 ask_human 确认；普通换色、美化不触发。
+---
+
+# 老应用升级新版主题
+
+保持业务逻辑和主要布局，升级应用主题、自定义页面和表单样式。
+
+## 1. 准备
+
+仅在用户明确要求升级新版主题时使用。普通美化、换色或创建应用不触发。
+
+确定目标应用，运行 `openyida agent-capabilities --summary-json`，再将页面备份到新目录：
+
+```bash
+openyida upgrade-app-theme <appType> --explicit-request --prepare --output-dir <projectRoot>/.cache/openyida/theme-upgrade/<appType>/<run-id> --json
+```
+
+准备命令不会修改远端页面。读取生成的 `upgrade-plan.json`，核对隐藏页、嵌入页和用户指定页面；遗漏项通过 `openyida get-schema <appType> <formUuid>` 补齐。无法获取源码的页面记录为未完成项。
+
+## 2. 判断应用风格
+
+先看原自定义页面的实际效果和源码，从主按钮、标题、链接、背景和卡片中判断主色、明暗及整体风格。优先遵循用户指定的风格；否则延续已有页面的品牌色。不要直接采用平台默认色，也不要把成功、警告等状态色当作主色。
+
+页面风格不一致或主色不明确时，用 **ask_human** 提供候选颜色和简短理由，确认后再改。将选定主色和判断依据记录在升级清单中，统一用于应用导航、页面和表单。
+
+## 3. 确认
+
+任何远端修改前，必须调用 **ask_human**，说明：
+
+- 目标应用、组织及涉及的页面和表单。
+- 拟采用的主色和风格，以及它与原页面的关系。
+- 将升级主题、迁移旧自定义页面、统一样式并重新发布。
+- 保留业务逻辑和主要布局。
+
+提供“确认升级”和“取消”，收到明确确认后继续。无回复、拒绝或工具不可用时停止写入，“直接做”不能替代确认。范围变更时只确认新增部分。
+
+## 4. 迁移并升级
+
+按 [页面和表单迁移](references/page-migration.md) 完成本地修改和验证：
+
+- JSX 页面转为 CodeCanvas。
+- 已有 CodeCanvas 页面更新主题样式。
+- 表单和详情页移除旧主题注入，保留业务代码。
+
+保留原应用和页面 ID。任一必要页面无法保留业务或结构时，停止升级并说明原因。
+
+本地验证通过后执行：
+
+```bash
+openyida upgrade-app-theme <appType> --explicit-request --confirm --json
+```
+
+成功后保存选定的应用主题，再按清单发布页面、保存表单并回读验证。命令失败时停止后续操作。向用户说明进度和结果，不展示内部检查、配置字段或诊断数据。
+
+## 5. 验收
+
+重新加载页面，验证业务操作、表单详情、主题样式和窄屏效果，逐页记录结果。编译或升级命令成功不能代替页面验收。
+
+全部目标页面和表单通过后，才能报告升级完成；否则列出已完成项和剩余问题。

package/yida-skills/skills/yida-upgrade-app-theme/references/page-migration.md

@@ -0,0 +1,61 @@
+# 页面和表单迁移
+
+## 1. 备份原页面
+
+使用准备命令生成的 Schema、源码和 `upgrade-plan.json`。在单独目录修改源码，保留原始备份。
+
+核对隐藏页、嵌入页和用户指定页面，补齐遗漏。根据 Schema 区分 JSX、CodeCanvas 和表单。缺少原源码时停止该页迁移，不根据编译产物猜写业务逻辑。
+
+## 2. 迁移自定义页面
+
+- **JSX 页面**：按 [yida-canvas-upgrade](../../yida-canvas-upgrade/SKILL.md) 转为 CodeCanvas，保留业务逻辑和主要布局。
+- **CodeCanvas 页面**：直接更新主题样式，保留原有状态和业务代码。
+- **混合组件页面**：保留原组件树、数据源和动作。不能用单 Canvas 发布命令覆盖；无法保留时停止该页迁移。
+
+迁移时保留字段 ID、请求参数、数据映射、权限、路由、筛选分页、提交回调和生命周期清理。平台 API 和数据源按 [数据桥规范](../../yida-canvas-custom-page/references/data-bridge-guide.md) 适配，验证可用后再发布，不用静态数据替代。
+
+按升级清单中选定的主色和风格准备应用主题 CSS，保留原页面的布局、圆角和密度。页面使用同一套主题 token，Provider 只作用于页面内部；成功、警告、失败等业务语义色保持不变。
+
+## 3. 清理表单旧样式
+
+检查表单 Schema、动作、CSS，以及自定义页面向表单详情、弹窗或 iframe 注入样式的代码。
+
+- 逐项确认 `styleCandidates`，只删除旧主题注入及其专属监听、定时器和清理代码。
+- 保留业务事件、页面内部样式、详情跳转、弹窗通信和提交回调。样式与业务混在同一函数时，只移除样式部分。
+- 表单使用 `create-form patch` 精确修改对应路径，保留字段、校验、公式、权限和流程。修改动作源码时同步更新编译内容。
+
+不能按关键词批量删除代码。无法确认影响范围或保存方式时，停止该项修改。`publish --fix-theme` 只辅助替换部分固定色，使用后检查差异，不能代替注入清理。
+
+## 4. 校验并发布
+
+先完成本地修改和编译，再执行升级 Skill 中的升级命令。发布前重新拉取 Schema；若有他人改动，合并并重新验证，避免覆盖。
+
+升级命令成功后，保存已确认的应用主题并核对回读结果，不能只让页面跟随默认主题：
+
+```bash
+openyida update-app <appType> --theme-file <working/app-theme.css>
+```
+
+只更新主题，保留应用名称、导航结构、Logo 和访问设置。
+
+单 Canvas 页面发布到原 `appType` 和 `formUuid`：
+
+```bash
+openyida compile <working/page.canvas.jsx> --json
+openyida publish <working/page.canvas.jsx> <appType> <原formUuid> --json
+openyida get-schema <appType> <原formUuid>
+```
+
+回读确认页面已保存为 CodeCanvas，源码、运行代码或 codeBundle 有效，业务绑定完整。表单保存后也要回读核对。
+
+## 5. 验收并记录
+
+重新加载页面，检查：
+
+- 查询、筛选、分页、增删改、提交、权限和详情开关正常。
+- 页面主要结构、图表和窄屏显示正常。
+- 应用导航、主按钮、链接、页面和表单符合选定主色及风格。
+- 表单录入、校验、公式和流程未变，页面与表单主题一致。
+- 旧样式没有被监听器或定时器重新注入。
+
+在 `upgrade-plan.json` 逐页记录备份、修改、发布、回读和验收结果。失败项写明原因，不自动回滚整个应用。全部目标资源通过后才能报告升级完成；否则列出已完成和未完成项。

package/yida-skills/skills-index.json

@@ -3,6 +3,34 @@
   "source": "openyida",
   "entry": "openyida",
   "skills": [
+    {
+      "name": "yida-upgrade-app-theme",
+      "path": "skills/yida-upgrade-app-theme/SKILL.md",
+      "display_name": "老应用升级新版主题",
+      "description": "将老应用升级为新版主题，同步更新页面和表单样式。仅在用户明确要求升级时使用，执行前须通过 ask_human 确认；普通换色、美化不触发。",
+      "category": "yida-skills/app",
+      "tags": [
+        "升级新版主题"
+      ],
+      "positive_signals": [
+        "将老应用升级成新版主题",
+        "把应用切换到新版主题"
+      ],
+      "negative_signals": [
+        "美化页面",
+        "换颜色",
+        "创建应用",
+        "升级 CLI"
+      ],
+      "command_ids": [
+        "upgrade-app-theme",
+        "update-app",
+        "get-schema",
+        "publish",
+        "create-form.patch"
+      ],
+      "requires_login": true
+    },
     {
       "name": "yida-agent-center",
       "path": "skills/yida-agent-center/SKILL.md",
@@ -1304,8 +1332,10 @@
     {
       "name": "yida-skills/app",
       "display_name": "应用架构与设置",
-      "description": "从零搭建应用、应用级导航树、多语言等应用整体架构和配置。",
+      "description": "从零搭建应用、应用级导航树、多语言和已有 AI 应用主题版本升级等应用管理与配置。",
       "signals": [
+        "升级新版主题",
+        "把应用切换到新版主题",
         "创建应用",
         "完整应用",
         "管理系统",