openyida 2026.7.7 → 2026.7.9

package/lib/auth/auth.js

@@ -32,6 +32,13 @@ const { t } = require('../core/i18n');
 
 const AUTH_CACHE_FILE = '.cache/auth.json';
 
+function maskIdentifier(value) {
+  const text = String(value || '');
+  if (!text) {return null;}
+  if (text.length <= 8) {return `${text.slice(0, 2)}***${text.slice(-1)}`;}
+  return `${text.slice(0, 4)}***${text.slice(-4)}`;
+}
+
 // ── 配置读取 ──────────────────────────────────────────
 
 function loadAuthConfig() {
@@ -90,6 +97,7 @@ function authStatus() {
   const userId = cookieData.user_id || cookieData.userId || cookieData.staffId || cookieInfo.userId;
   const baseUrl = resolveBaseUrl(cookieData);
   const authConfig = loadAuthConfig();
+  const isEnvAuth = cookieData.auth_source === 'env';
 
   if (!csrfToken) {
     warn(t('auth.no_csrf_token'), false);
@@ -105,12 +113,12 @@ function authStatus() {
   chalkSuccess(t('auth.logged_in'), false);
   label('Base URL', baseUrl, { stderr: false });
   if (corpId) {
-    label('Corp ID', corpId, { stderr: false });
+    label('Corp ID', isEnvAuth ? maskIdentifier(corpId) : corpId, { stderr: false });
   }
   if (userId) {
-    label('User ID', userId, { stderr: false });
+    label('User ID', isEnvAuth ? maskIdentifier(userId) : userId, { stderr: false });
   }
-  label('CSRF', `${csrfToken.slice(0, 16)}…`, { stderr: false });
+  label('CSRF', isEnvAuth ? '<redacted>' : `${csrfToken.slice(0, 16)}…`, { stderr: false });
 
   // 显示登录信息
   if (authConfig) {

package/lib/auth/login.js

@@ -27,7 +27,8 @@ const {
   loadCookieData,
   resolveBaseUrl,
   detectActiveTool,
-  isInjectedAuthMode,
+  isEnvAuthMode,
+  getLastEnvAuthError,
 } = require('../core/utils');
 const { t } = require('../core/i18n');
 
@@ -48,6 +49,9 @@ function loadConfig() {
 // ── Cookie 持久化 ─────────────────────────────────────
 
 function saveCookieCache(cookies, baseUrl) {
+  if (isEnvAuthMode()) {
+    return;
+  }
   const projectRoot = findProjectRoot();
   const cacheDir = path.join(projectRoot, '.cache');
 
@@ -61,6 +65,13 @@ function saveCookieCache(cookies, baseUrl) {
   process.stderr.write(`  ${c.green}✔${c.reset} Cookie saved to ${c.dim}${cookieFile}${c.reset}\n`);
 }
 
+function maskIdentifier(value) {
+  const text = String(value || '');
+  if (!text) {return null;}
+  if (text.length <= 8) {return `${text.slice(0, 2)}***${text.slice(-1)}`;}
+  return `${text.slice(0, 4)}***${text.slice(-4)}`;
+}
+
 // ── 仅检查登录态 ──────────────────────────────────────
 
 /**
@@ -79,9 +90,12 @@ function checkLoginOnly(options = {}) {
   const legacyCookieFile = path.join(projectRoot, '.cache', 'cookies.json');
   const cookieData = loadCookieData(projectRoot);
   const cookies = cookieData && Array.isArray(cookieData.cookies) ? cookieData.cookies : [];
-  const authMode = isInjectedAuthMode() ? 'injected' : 'default';
+  const envAuthError = getLastEnvAuthError();
+  const isEnvAuth = !!(cookieData && cookieData.auth_source === 'env');
+  const authMode = isEnvAuth || isEnvAuthMode() ? 'env' : 'default';
   const baseDiagnostics = {
     authMode,
+    authSource: authMode === 'env' ? 'env' : 'cache',
     activeTool: activeTool ? activeTool.tool : null,
     isWukong: !!(activeTool && activeTool.tool === 'wukong'),
     projectRoot,
@@ -106,10 +120,12 @@ function checkLoginOnly(options = {}) {
         corp_id_found: false,
         user_id_found: false,
         base_url_found: false,
-        failure_reason: baseDiagnostics.cookieFileFound ? 'cookie_cache_unreadable_or_invalid' : 'cookie_cache_missing',
+        failure_reason: envAuthError
+          ? envAuthError.failure_reason
+          : (baseDiagnostics.cookieFileFound ? 'cookie_cache_unreadable_or_invalid' : 'cookie_cache_missing'),
       },
-      message: authMode === 'injected'
-        ? 'No injected Cookie cache, host page refresh required'
+      message: authMode === 'env'
+        ? 'No env Cookie, host page refresh required'
         : 'No local Cookie cache, QR scan login required',
     };
   }
@@ -119,6 +135,9 @@ function checkLoginOnly(options = {}) {
   const corpId = cookieData.corp_id || cookieData.corpId || cookieInfo.corpId;
   const userId = cookieData.user_id || cookieData.userId || cookieData.staffId || cookieInfo.userId;
   const baseUrl = resolveBaseUrl(cookieData);
+  const canIncludeSecrets = includeSecrets && !isEnvAuth;
+  const outputCorpId = isEnvAuth ? maskIdentifier(corpId) : corpId;
+  const outputUserId = isEnvAuth ? maskIdentifier(userId) : userId;
   const diagnostics = {
     ...baseDiagnostics,
     cache_readable: true,
@@ -136,8 +155,8 @@ function checkLoginOnly(options = {}) {
       status: 'not_logged_in',
       can_auto_use: false,
       diagnostics,
-      message: authMode === 'injected'
-        ? 'No csrf_token in injected Cookie cache, host page refresh required'
+      message: authMode === 'env'
+        ? 'No csrf_token in env Cookie, host page refresh required'
         : 'No tianshu_csrf_token in Cookie, re-login required',
     };
   }
@@ -145,15 +164,15 @@ function checkLoginOnly(options = {}) {
   const result = {
     status: 'ok',
     can_auto_use: true,
-    csrf_token: includeSecrets ? csrfToken : `${csrfToken.slice(0, 8)}…`,
-    corp_id: corpId,
-    user_id: userId,
+    csrf_token: canIncludeSecrets ? csrfToken : `${csrfToken.slice(0, 8)}…`,
+    corp_id: outputCorpId,
+    user_id: outputUserId,
     base_url: baseUrl,
     cookies_count: cookies.length,
     diagnostics,
-    message: `✅ Valid login credentials found\n  Org: ${corpId}\n  User: ${userId}\n  Domain: ${baseUrl}`,
+    message: `✅ Valid login credentials found\n  Org: ${outputCorpId || ''}\n  User: ${outputUserId || ''}\n  Domain: ${baseUrl}`,
   };
-  if (includeSecrets) {
+  if (canIncludeSecrets) {
     result.cookies = cookies;
   }
   return result;
@@ -209,8 +228,8 @@ function refreshCsrfFromCache() {
  */
 function ensureLogin(options = {}) {
   const force = !!options.force;
-  const injectedAuth = isInjectedAuthMode();
-  if (!force || injectedAuth) {
+  const envAuth = isEnvAuthMode();
+  if (!force || envAuth) {
     const cookieData = loadCookieData();
 
     if (cookieData && cookieData.cookies) {
@@ -235,7 +254,7 @@ function ensureLogin(options = {}) {
     }
   }
 
-  if (injectedAuth) {
+  if (envAuth) {
     return null;
   }
 

package/lib/core/command-manifest.js

@@ -86,7 +86,7 @@ const COMMAND_GROUPS = [
       command('build-page', ['build-page'], 'build-page <sourceFile> [--output file|--write]', 'help.cmd_build_page', { requiresLogin: false }),
       command('check-page', ['check-page'], 'check-page <src> [--compat]', 'help.cmd_check_page', { output: 'text|json' }),
       command('compile', ['compile'], 'compile <src>', 'help.cmd_compile', { requiresLogin: false }),
-      command('publish', ['publish'], 'publish <src> <appType> <formUuid> [--health-check] [--force] [--open|--no-open]', 'help.cmd_publish'),
+      command('publish', ['publish'], 'publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--open|--no-open]', 'help.cmd_publish'),
       command('update-form-config', ['update-form-config'], 'update-form-config <appType> ...', 'help.cmd_update_form_config'),
     ],
   },

package/lib/core/env.js

@@ -16,6 +16,7 @@ const {
   resolveBaseUrl,
   extractInfoFromCookies,
   resolveWukongWorkspaceRoot,
+  getLastEnvAuthError,
 } = require('./utils');
 const { t } = require('./i18n');
 
@@ -110,6 +111,7 @@ function detectLoginStatus(projectRoot) {
   const cookieDiagnostics = getCookieDiagnostics(projectRoot);
   const cookieData = loadCookieData(projectRoot);
   const cookies = cookieData && Array.isArray(cookieData.cookies) ? cookieData.cookies : [];
+  const envAuthError = getLastEnvAuthError();
 
   if (!cookieData || !cookieData.cookies) {
     return {
@@ -128,7 +130,9 @@ function detectLoginStatus(projectRoot) {
         corpIdFound: false,
         userIdFound: false,
         baseUrlFound: false,
-        failureReason: cookieDiagnostics.cookieFileFound ? 'cookie_cache_unreadable_or_invalid' : 'cookie_cache_missing',
+        failureReason: envAuthError
+          ? envAuthError.failure_reason
+          : (cookieDiagnostics.cookieFileFound ? 'cookie_cache_unreadable_or_invalid' : 'cookie_cache_missing'),
       },
     };
   }
@@ -139,6 +143,7 @@ function detectLoginStatus(projectRoot) {
   const userId = cookieData.user_id || cookieData.userId || cookieData.staffId || cookieInfo.userId;
   const baseUrl = resolveBaseUrl(cookieData);
   const loggedIn = !!csrfToken;
+  const isEnvAuth = cookieData.auth_source === 'env';
 
   return {
     loggedIn,
@@ -148,8 +153,10 @@ function detectLoginStatus(projectRoot) {
     userId,
     baseUrl,
     cookiesCount: cookies.length,
+    authSource: isEnvAuth ? 'env' : 'cache',
     diagnostics: {
       ...cookieDiagnostics,
+      authSource: isEnvAuth ? 'env' : 'cache',
       cacheReadable: true,
       cookiesArrayFound: Array.isArray(cookieData.cookies),
       csrfTokenFound: !!csrfToken,
@@ -166,6 +173,13 @@ function maskSecret(value) {
   return `${value.slice(0, 16)}...`;
 }
 
+function maskIdentifier(value) {
+  const text = String(value || '');
+  if (!text) {return null;}
+  if (text.length <= 8) {return `${text.slice(0, 2)}***${text.slice(-1)}`;}
+  return `${text.slice(0, 4)}***${text.slice(-4)}`;
+}
+
 /**
  * 构建适合 AI agent 读取的环境快照。
  */
@@ -198,9 +212,10 @@ function buildEnvironmentSnapshot() {
       loggedIn: loginStatus.loggedIn,
       canAutoUse: loginStatus.canAutoUse,
       baseUrl: loginStatus.baseUrl,
-      corpId: loginStatus.corpId,
-      userId: loginStatus.userId,
-      csrfToken: maskSecret(loginStatus.csrfToken),
+      authSource: loginStatus.authSource || null,
+      corpId: loginStatus.authSource === 'env' ? maskIdentifier(loginStatus.corpId) : loginStatus.corpId,
+      userId: loginStatus.authSource === 'env' ? maskIdentifier(loginStatus.userId) : loginStatus.userId,
+      csrfToken: loginStatus.authSource === 'env' ? null : maskSecret(loginStatus.csrfToken),
       cookiesCount: loginStatus.cookiesCount,
       diagnostics: loginStatus.diagnostics,
     },

package/lib/core/locales/ar.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) قد يفقد this داخل callbacks؛ استخدم بدلا من ذلك .{0}((item) => ...)',
     lint_foreach_callback_function: '.forEach(function ...) قد يفقد this داخل callbacks؛ يفضل استخدام .forEach((item) => ...)',
     lint_controlled_input: 'يستخدم input وضع value المتحكم به. يجب أن تستخدم صفحات Yida defaultValue + onChange لتحديث _customState',
-    lint_native_select_ui: 'تم العثور على <select> أصلي. في صفحات الكود المخصصة يمكنك استخدام مكون Yida <SelectField> مباشرة (يتم حقنه عالميا في وقت التشغيل، ولا يحتاج import)، أو استخدام قائمة مخصصة div+button+onClick للحفاظ على تناسق التصميم وتوافق الجوال',
+    lint_native_select_ui: 'تم العثور على <select> أصلي. في الصفحات المخصصة العادية استخدم قائمة div+button+onClick للحفاظ على تناسق التصميم وتوافق الجوال. استخدم مكونات حقول Yida في Code Canvas فقط بعد التحقق من ربط التبعيات',
     lint_iframe_self_navigation: 'تعمل صفحات Yida المخصصة داخل iframe. استخدم target="_top"/target="_blank" أو window.top.location للتنقل إلى صفحات Yida لتجنب الصفحات المتداخلة.',
     lint_page_size_limit: 'pageSize={0} يتجاوز حد واجهة Yida API وهو 100؛ استخدم 100 أو أقل',
     lint_page_size_recommend: 'pageSize={0} كبير؛ القيمة الموصى بها هي 50 (أفضل أداء، الحد الأقصى 100). يفضل 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] جارٍ بناء المخطط...',
     formula_prefix_fixed: '  🔧 تم تصحيح {0} من مراجع بادئة صيغة الجدول الفرعي تلقائيًا',
     schema_built: '  ✅ تم بناء المخطط بنجاح!',
+    step_canvas_compile: '\n📦 Step 1: تجميع مصدر Code Canvas\n',
+    canvas_compiling: '  🎨 جارٍ تجميع مصدر Code Canvas محليًا...',
+    canvas_compile_done: '  ✅ تم تجميع Code Canvas!',
+    canvas_compile_failed: '  ❌ فشل تجميع Code Canvas: {0}',
     step_login: '\n🔑 Step 2: قراءة بيانات تسجيل الدخول',
     step_publish: '\n📤 Step 3: نشر المخطط\n',
     publish_failed: '\n❌ فشل النشر: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ خطأ في النشر: {0}',
     source_not_found: '❌ لم يتم العثور على ملف المصدر: {0}',
-    usage: 'الاستخدام: openyida publish <ملفالمصدر> <appType> <formUuid> [--health-check]',
+    usage: 'الاستخدام: openyida publish <ملفالمصدر> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'مثال: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/de.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) kann this in Callbacks verlieren; verwenden Sie stattdessen .{0}((item) => ...)',
     lint_foreach_callback_function: '.forEach(function ...) kann this in Callbacks verlieren; bevorzugen Sie .forEach((item) => ...)',
     lint_controlled_input: 'input verwendet den kontrollierten value-Modus. Yida-Seiten sollten defaultValue + onChange verwenden, um _customState zu aktualisieren',
-    lint_native_select_ui: 'Natives <select> gefunden. In Code-Benutzerdefinierten Seiten können Sie die Yida-Komponente <SelectField> direkt verwenden (zur Laufzeit global injiziert, kein Import nötig) oder auf ein benutzerdefiniertes Dropdown mit div+button+onClick zurückgreifen, für konsistentes Styling und mobile Kompatibilität',
+    lint_native_select_ui: 'Natives <select> gefunden. In normalen benutzerdefinierten Seiten verwenden Sie ein div+button+onClick-Dropdown für konsistentes Styling und mobile Kompatibilität. Yida-Feldkomponenten nur in Code Canvas nach Prüfung des Dependency-Mappings verwenden',
     lint_iframe_self_navigation: 'Yida-Benutzerdefinierte Seiten laufen in einer iframe. Verwenden Sie target="_top"/target="_blank" oder window.top.location für die Navigation zu Yida-Seiten, um verschachtelte Seiten zu vermeiden.',
     lint_page_size_limit: 'pageSize={0} überschreitet das Yida-API-Limit von 100; verwenden Sie 100 oder weniger',
     lint_page_size_recommend: 'pageSize={0} ist groß; der empfohlene Wert ist 50 (beste Performance, maximal 100). Bevorzugen Sie 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] Schema wird erstellt...',
     formula_prefix_fixed: '  🔧 {0} Untertabellen-Formelpräfix-Referenz(en) automatisch korrigiert',
     schema_built: '  ✅ Schema erfolgreich erstellt!',
+    step_canvas_compile: '\n📦 Step 1: Code-Canvas-Quelle kompilieren\n',
+    canvas_compiling: '  🎨 Code-Canvas-Quelle wird lokal kompiliert...',
+    canvas_compile_done: '  ✅ Code Canvas kompiliert!',
+    canvas_compile_failed: '  ❌ Code-Canvas-Kompilierung fehlgeschlagen: {0}',
     step_login: '\n🔑 Step 2: Anmeldedaten lesen',
     step_publish: '\n📤 Step 3: Schema veröffentlichen\n',
     publish_failed: '\n❌ Veröffentlichung fehlgeschlagen: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ Veröffentlichungsfehler: {0}',
     source_not_found: '❌ Quelldatei nicht gefunden: {0}',
-    usage: 'Verwendung: openyida publish <Quelldatei> <appType> <formUuid> [--health-check]',
+    usage: 'Verwendung: openyida publish <Quelldatei> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Beispiel: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/en.js

@@ -249,7 +249,7 @@ Examples:
     generate_page_example: 'Example: openyida generate-page product-homepage --brand-name OpenKuma --brand-initials OK --output pages/src/home.oyd.jsx --compile',
     build_page_usage: 'Usage: openyida build-page <sourceFile> [--output pages/build/page.yida.jsx|--write] [--json]',
     build_page_example: 'Example: openyida build-page pages/src/dashboard.oyd.jsx --output pages/build/dashboard.yida.jsx',
-    publish_usage: 'Usage: openyida publish <sourceFile> <appType> <formUuid> [--health-check]',
+    publish_usage: 'Usage: openyida publish <sourceFile> <appType> <formUuid> [--health-check] [--canvas]',
     publish_example: 'Example: openyida publish pages/src/home.oyd.jsx APP_XXX FORM-XXX --health-check',
     formula_usage: 'Usage: openyida formula evaluate <formula|file> [--schema schema.json] [--json] [--strict]',
     formula_example: 'Example: openyida formula evaluate \'IF(GT(#{numberField_total}, 100), "high", "low")\' --schema .cache/schema.json',
@@ -1064,7 +1064,7 @@ Examples:
     lint_array_callback_function: '.{0}(function ...) may lose this in callbacks; use .{0}((item) => ...) instead',
     lint_foreach_callback_function: '.forEach(function ...) may lose this in callbacks; prefer .forEach((item) => ...)',
     lint_controlled_input: 'input uses controlled value mode. Yida pages should use defaultValue + onChange to update _customState',
-    lint_native_select_ui: 'Found a native <select>. In code custom pages you can use the Yida <SelectField> component directly (globally injected at runtime, no import needed), or fall back to a div+button+onClick custom dropdown, for consistent styling and mobile compatibility',
+    lint_native_select_ui: 'Found a native <select>. In normal custom pages, use a div+button+onClick custom dropdown for consistent styling and mobile compatibility. Only use Yida field components in Code Canvas after verifying the dependency mapping.',
     lint_iframe_self_navigation: 'Yida custom pages run in an iframe. Use target="_top"/target="_blank" or window.top.location for Yida page navigation to avoid nested pages.',
     lint_page_size_limit: 'pageSize={0} exceeds the Yida API limit of 100; use 100 or less',
     lint_page_size_recommend: 'pageSize={0} is large; the recommended value is 50 (best performance, max 100). Prefer 10/20/50',
@@ -1111,6 +1111,10 @@ Examples:
     building_schema: '[4/4] Building Schema...',
     formula_prefix_fixed: '  🔧 Auto-fixed {0} subtable formula prefix reference(s)',
     schema_built: '  ✅ Schema built successfully!',
+    step_canvas_compile: '\n📦 Step 1: Compile Code Canvas source\n',
+    canvas_compiling: '  🎨 Compiling Code Canvas source locally...',
+    canvas_compile_done: '  ✅ Code Canvas compiled!',
+    canvas_compile_failed: '  ❌ Code Canvas compile failed: {0}',
     step_login: '\n🔑 Step 2: Read login credentials',
     step_publish: '\n📤 Step 3: Publish Schema\n',
     resend_save_csrf: '  🔄 Resending saveFormSchema request (csrf_token refreshed)...',
@@ -1140,7 +1144,7 @@ Examples:
     exception: '\n❌ Publish error: {0}',
     error: '\n❌ Publish error: {0}',
     source_not_found: '❌ Source file not found: {0}',
-    usage: 'Usage: openyida publish <sourceFile> <appType> <formUuid> [--health-check]',
+    usage: 'Usage: openyida publish <sourceFile> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Example: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/es.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) puede perder this en callbacks; use .{0}((item) => ...) en su lugar',
     lint_foreach_callback_function: '.forEach(function ...) puede perder this en callbacks; prefiera .forEach((item) => ...)',
     lint_controlled_input: 'input usa el modo controlado con value. Las páginas de Yida deben usar defaultValue + onChange para actualizar _customState',
-    lint_native_select_ui: 'Se encontró un <select> nativo. En páginas personalizadas de código puede usar directamente el componente Yida <SelectField> (inyectado globalmente en runtime, sin import), o usar un desplegable personalizado div+button+onClick para mantener estilo consistente y compatibilidad móvil',
+    lint_native_select_ui: 'Se encontró un <select> nativo. En páginas personalizadas normales use un desplegable div+button+onClick para mantener estilo consistente y compatibilidad móvil. Use componentes de campo Yida en Code Canvas solo tras verificar el mapeo de dependencias',
     lint_iframe_self_navigation: 'Las páginas personalizadas de Yida se ejecutan en un iframe. Use target="_top"/target="_blank" o window.top.location para navegar a páginas de Yida y evitar páginas anidadas.',
     lint_page_size_limit: 'pageSize={0} supera el límite de la API de Yida de 100; use 100 o menos',
     lint_page_size_recommend: 'pageSize={0} es grande; el valor recomendado es 50 (mejor rendimiento, máximo 100). Prefiera 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] Construyendo esquema...',
     formula_prefix_fixed: '  🔧 {0} referencia(s) de prefijo de fórmula de subtabla corregida(s) automáticamente',
     schema_built: '  ✅ ¡Esquema construido exitosamente!',
+    step_canvas_compile: '\n📦 Step 1: Compilar fuente de Code Canvas\n',
+    canvas_compiling: '  🎨 Compilando la fuente de Code Canvas localmente...',
+    canvas_compile_done: '  ✅ ¡Code Canvas compilado!',
+    canvas_compile_failed: '  ❌ Error al compilar Code Canvas: {0}',
     step_login: '\n🔑 Step 2: Leer credenciales de sesión',
     step_publish: '\n📤 Step 3: Publicar esquema\n',
     publish_failed: '\n❌ Error al publicar: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ Error de publicación: {0}',
     source_not_found: '❌ Archivo fuente no encontrado: {0}',
-    usage: 'Uso: openyida publish <archivoFuente> <appType> <formUuid> [--health-check]',
+    usage: 'Uso: openyida publish <archivoFuente> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Ejemplo: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/fr.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) peut perdre this dans les callbacks ; utilisez plutôt .{0}((item) => ...)',
     lint_foreach_callback_function: '.forEach(function ...) peut perdre this dans les callbacks ; préférez .forEach((item) => ...)',
     lint_controlled_input: 'input utilise le mode contrôlé par value. Les pages Yida doivent utiliser defaultValue + onChange pour mettre à jour _customState',
-    lint_native_select_ui: 'Un <select> natif a été détecté. Dans les pages personnalisées de code, vous pouvez utiliser directement le composant Yida <SelectField> (injecté globalement à l\'exécution, sans import), ou un menu personnalisé div+button+onClick pour un style cohérent et une compatibilité mobile',
+    lint_native_select_ui: 'Un <select> natif a été détecté. Dans les pages personnalisées classiques, utilisez un menu div+button+onClick pour un style cohérent et une compatibilité mobile. Utilisez les composants de champ Yida dans Code Canvas uniquement après avoir vérifié le mapping des dépendances',
     lint_iframe_self_navigation: 'Les pages personnalisées Yida s\'exécutent dans une iframe. Utilisez target="_top"/target="_blank" ou window.top.location pour naviguer vers une page Yida afin d\'éviter les pages imbriquées.',
     lint_page_size_limit: 'pageSize={0} dépasse la limite de l\'API Yida de 100 ; utilisez 100 ou moins',
     lint_page_size_recommend: 'pageSize={0} est élevé ; la valeur recommandée est 50 (meilleures performances, maximum 100). Préférez 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] Construction du schéma...',
     formula_prefix_fixed: '  🔧 {0} référence(s) de préfixe de formule de sous-table corrigée(s) automatiquement',
     schema_built: '  ✅ Schéma construit avec succès !',
+    step_canvas_compile: '\n📦 Step 1 : Compilation de la source Code Canvas\n',
+    canvas_compiling: '  🎨 Compilation locale de la source Code Canvas...',
+    canvas_compile_done: '  ✅ Code Canvas compilé !',
+    canvas_compile_failed: '  ❌ Échec de la compilation Code Canvas : {0}',
     step_login: '\n🔑 Step 2 : Lecture des identifiants',
     step_publish: '\n📤 Step 3 : Publication du schéma\n',
     publish_failed: '\n❌ Échec de la publication : {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ Erreur de publication : {0}',
     source_not_found: '❌ Fichier source introuvable : {0}',
-    usage: 'Utilisation : openyida publish <fichierSource> <appType> <formUuid> [--health-check]',
+    usage: 'Utilisation : openyida publish <fichierSource> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Exemple : openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/hi.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) callbacks में this खो सकता है; इसके बजाय .{0}((item) => ...) उपयोग करें',
     lint_foreach_callback_function: '.forEach(function ...) callbacks में this खो सकता है; .forEach((item) => ...) बेहतर है',
     lint_controlled_input: 'input controlled value mode का उपयोग करता है। Yida पेजों को _customState update करने के लिए defaultValue + onChange उपयोग करना चाहिए',
-    lint_native_select_ui: 'Native <select> मिला। Code custom pages में आप Yida <SelectField> component सीधे उपयोग कर सकते हैं (runtime पर वैश्विक रूप से inject होता है, import की जरूरत नहीं), या consistent styling और mobile compatibility के लिए div+button+onClick custom dropdown उपयोग करें',
+    lint_native_select_ui: 'Native <select> मिला। Normal custom pages में consistent styling और mobile compatibility के लिए div+button+onClick custom dropdown उपयोग करें। Yida field components को Code Canvas में dependency mapping verify करने के बाद ही उपयोग करें',
     lint_iframe_self_navigation: 'Yida custom pages iframe में चलते हैं। Nested pages से बचने के लिए Yida page navigation में target="_top"/target="_blank" या window.top.location उपयोग करें।',
     lint_page_size_limit: 'pageSize={0} Yida API की 100 सीमा से अधिक है; 100 या उससे कम उपयोग करें',
     lint_page_size_recommend: 'pageSize={0} बड़ा है; अनुशंसित मान 50 है (best performance, max 100)। 10/20/50 को प्राथमिकता दें',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] स्कीमा बनाया जा रहा है...',
     formula_prefix_fixed: '  🔧 {0} सबटेबल फ़ॉर्मूला उपसर्ग संदर्भ स्वतः ठीक किए गए',
     schema_built: '  ✅ स्कीमा सफलतापूर्वक बना!',
+    step_canvas_compile: '\n📦 Step 1: Code Canvas स्रोत संकलित करें\n',
+    canvas_compiling: '  🎨 Code Canvas स्रोत को स्थानीय रूप से संकलित किया जा रहा है...',
+    canvas_compile_done: '  ✅ Code Canvas संकलित!',
+    canvas_compile_failed: '  ❌ Code Canvas संकलन विफल: {0}',
     step_login: '\n🔑 Step 2: लॉगिन जानकारी पढ़ें',
     step_publish: '\n📤 Step 3: स्कीमा प्रकाशित करें\n',
     publish_failed: '\n❌ प्रकाशन विफल: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ प्रकाशन त्रुटि: {0}',
     source_not_found: '❌ स्रोत फ़ाइल नहीं मिली: {0}',
-    usage: 'उपयोग: openyida publish <स्रोतफ़ाइल> <appType> <formUuid> [--health-check]',
+    usage: 'उपयोग: openyida publish <स्रोतफ़ाइल> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'उदाहरण: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/ja.js

@@ -230,7 +230,7 @@ openyida - Yida CLI ツール
     check_page_example: 'Example: openyida check-page pages/src/home.oyd.jsx --json',
     generate_page_usage: 'Usage: openyida generate-page <template> --output pages/src/home.oyd.jsx [--spec .cache/openyida/page-specs/home.json] [--compile]',
     generate_page_example: 'Example: openyida generate-page product-homepage --brand-name OpenKuma --brand-initials OK --output pages/src/home.oyd.jsx --compile',
-    publish_usage: '使用方法: openyida publish <ソースファイル> <appType> <formUuid> [--health-check]',
+    publish_usage: '使用方法: openyida publish <ソースファイル> <appType> <formUuid> [--health-check] [--canvas]',
     publish_example: '例: openyida publish pages/src/home.oyd.jsx APP_XXX FORM-XXX --health-check',
     verify_usage: '使用方法: openyida verify-short-url <appType> <formUuid> <url>',
     verify_example: '例: openyida verify-short-url APP_XXX FORM-XXX /o/myapp',
@@ -899,7 +899,7 @@ openyida - Yida CLI ツール
     lint_array_callback_function: '.{0}(function ...) はコールバック内で this を失う可能性があります。代わりに .{0}((item) => ...) を使用してください',
     lint_foreach_callback_function: '.forEach(function ...) はコールバック内で this を失う可能性があります。.forEach((item) => ...) を推奨します',
     lint_controlled_input: 'input が value による controlled モードを使用しています。Yida ページでは defaultValue + onChange で _customState を更新してください',
-    lint_native_select_ui: 'ネイティブの <select> が見つかりました。コードカスタムページでは Yida の <SelectField> コンポーネントを直接使用できます（ランタイムでグローバル注入、import 不要）。または、一貫したスタイルとモバイル互換性のため div+button+onClick のカスタムドロップダウンを使用してください',
+    lint_native_select_ui: 'ネイティブの <select> が見つかりました。通常のカスタムページでは div+button+onClick のカスタムドロップダウンを使用してください。Yida フィールドコンポーネントは、Code Canvas で依存関係マッピングを確認した場合のみ使用してください',
     lint_iframe_self_navigation: 'Yida カスタムページは iframe 内で実行されます。Yida ページへ遷移する場合は、ネストしたページを避けるため target="_top"/target="_blank" または window.top.location を使用してください。',
     lint_page_size_limit: 'pageSize={0} は Yida API の上限 100 を超えています。100 以下を使用してください',
     lint_page_size_recommend: 'pageSize={0} は大きすぎます。推奨値は 50（最高のパフォーマンス、最大 100）です。10/20/50 を優先してください',
@@ -946,6 +946,10 @@ openyida - Yida CLI ツール
     building_schema: '[4/4] Schema を構築中...',
     formula_prefix_fixed: '  🔧 サブテーブル数式の接頭辞参照を {0} 件自動修正しました',
     schema_built: '  ✅ Schema の構築が完了しました！',
+    step_canvas_compile: '\n📦 Step 1: Code Canvas ソースをコンパイル\n',
+    canvas_compiling: '  🎨 Code Canvas ソースをローカルでコンパイル中...',
+    canvas_compile_done: '  ✅ Code Canvas のコンパイルが完了しました！',
+    canvas_compile_failed: '  ❌ Code Canvas のコンパイルに失敗しました：{0}',
     step_login: '\n🔑 Step 2: ログイン情報を読み込む',
     step_publish: '\n📤 Step 3: Schema を公開\n',
     resend_save_csrf: '  🔄 saveFormSchema リクエストを再送信中（csrf_token を更新済み）...',
@@ -975,7 +979,7 @@ openyida - Yida CLI ツール
     exception: '\n❌ 公開エラー: {0}',
     error: '\n❌ 公開エラー: {0}',
     source_not_found: '❌ ソースファイルが見つかりません：{0}',
-    usage: '使用方法: openyida publish <ソースファイル> <appType> <formUuid> [--health-check]',
+    usage: '使用方法: openyida publish <ソースファイル> <appType> <formUuid> [--health-check] [--canvas]',
     example: '例: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/ko.js

@@ -480,7 +480,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...)은 콜백에서 this를 잃을 수 있습니다. 대신 .{0}((item) => ...)를 사용하세요',
     lint_foreach_callback_function: '.forEach(function ...)은 콜백에서 this를 잃을 수 있습니다. .forEach((item) => ...)를 권장합니다',
     lint_controlled_input: 'input이 value 제어 모드를 사용합니다. Yida 페이지는 defaultValue + onChange로 _customState를 업데이트해야 합니다',
-    lint_native_select_ui: '네이티브 <select>가 발견되었습니다. 코드 사용자 정의 페이지에서는 Yida <SelectField> 컴포넌트를 직접 사용할 수 있습니다(런타임에 전역 주입, import 불필요). 또는 일관된 스타일과 모바일 호환성을 위해 div+button+onClick 사용자 정의 드롭다운을 사용하세요',
+    lint_native_select_ui: '네이티브 <select>가 발견되었습니다. 일반 사용자 정의 페이지에서는 스타일과 모바일 호환성을 위해 div+button+onClick 사용자 정의 드롭다운을 사용하세요. Yida 필드 컴포넌트는 Code Canvas에서 의존성 매핑을 확인한 뒤에만 사용하세요',
     lint_iframe_self_navigation: 'Yida 사용자 정의 페이지는 iframe 안에서 실행됩니다. 중첩 페이지를 피하려면 Yida 페이지 이동에 target="_top"/target="_blank" 또는 window.top.location을 사용하세요.',
     lint_page_size_limit: 'pageSize={0}이 Yida API 제한 100을 초과합니다. 100 이하를 사용하세요',
     lint_page_size_recommend: 'pageSize={0}이 큽니다. 권장값은 50입니다(최고 성능, 최대 100). 10/20/50을 우선 사용하세요',
@@ -524,6 +524,10 @@ module.exports = {
     building_schema: '[4/4] 스키마 빌드 중...',
     formula_prefix_fixed: '  🔧 하위 테이블 수식 접두사 참조 {0}개를 자동 수정했습니다',
     schema_built: '  ✅ 스키마 빌드 완료!',
+    step_canvas_compile: '\n📦 Step 1: Code Canvas 소스 컴파일\n',
+    canvas_compiling: '  🎨 Code Canvas 소스를 로컬에서 컴파일하는 중...',
+    canvas_compile_done: '  ✅ Code Canvas 컴파일 완료!',
+    canvas_compile_failed: '  ❌ Code Canvas 컴파일 실패: {0}',
     step_login: '\n🔑 Step 2: 로그인 정보 읽기',
     step_publish: '\n📤 Step 3: 스키마 배포\n',
     publish_failed: '\n❌ 배포 실패: {0}',
@@ -537,7 +541,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ 배포 오류: {0}',
     source_not_found: '❌ 소스 파일을 찾을 수 없습니다: {0}',
-    usage: '사용법: openyida publish <소스 파일> <appType> <formUuid> [--health-check]',
+    usage: '사용법: openyida publish <소스 파일> <appType> <formUuid> [--health-check] [--canvas]',
     example: '예시: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/pt.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) pode perder this em callbacks; use .{0}((item) => ...) em vez disso',
     lint_foreach_callback_function: '.forEach(function ...) pode perder this em callbacks; prefira .forEach((item) => ...)',
     lint_controlled_input: 'input usa modo controlado por value. Páginas do Yida devem usar defaultValue + onChange para atualizar _customState',
-    lint_native_select_ui: 'Foi encontrado um <select> nativo. Em páginas personalizadas de código, você pode usar diretamente o componente Yida <SelectField> (injetado globalmente no runtime, sem import), ou usar um dropdown personalizado com div+button+onClick para manter estilo consistente e compatibilidade móvel',
+    lint_native_select_ui: 'Foi encontrado um <select> nativo. Em páginas personalizadas normais, use um dropdown div+button+onClick para manter estilo consistente e compatibilidade móvel. Use componentes de campo Yida no Code Canvas somente após verificar o mapeamento de dependências',
     lint_iframe_self_navigation: 'Páginas personalizadas do Yida rodam em um iframe. Use target="_top"/target="_blank" ou window.top.location para navegar para páginas do Yida e evitar páginas aninhadas.',
     lint_page_size_limit: 'pageSize={0} excede o limite da API do Yida de 100; use 100 ou menos',
     lint_page_size_recommend: 'pageSize={0} é grande; o valor recomendado é 50 (melhor desempenho, máximo 100). Prefira 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] Construindo esquema...',
     formula_prefix_fixed: '  🔧 {0} referência(s) de prefixo de fórmula de subtabela corrigida(s) automaticamente',
     schema_built: '  ✅ Esquema construído com sucesso!',
+    step_canvas_compile: '\n📦 Step 1: Compilar fonte do Code Canvas\n',
+    canvas_compiling: '  🎨 Compilando a origem do Code Canvas localmente...',
+    canvas_compile_done: '  ✅ Code Canvas compilado!',
+    canvas_compile_failed: '  ❌ Falha na compilação do Code Canvas: {0}',
     step_login: '\n🔑 Step 2: Ler credenciais de login',
     step_publish: '\n📤 Step 3: Publicar esquema\n',
     publish_failed: '\n❌ Falha na publicação: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ Erro de publicação: {0}',
     source_not_found: '❌ Arquivo fonte não encontrado: {0}',
-    usage: 'Uso: openyida publish <arquivoFonte> <appType> <formUuid> [--health-check]',
+    usage: 'Uso: openyida publish <arquivoFonte> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Exemplo: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/vi.js

@@ -478,7 +478,7 @@ module.exports = {
     lint_array_callback_function: '.{0}(function ...) có thể mất this trong callback; hãy dùng .{0}((item) => ...) thay thế',
     lint_foreach_callback_function: '.forEach(function ...) có thể mất this trong callback; nên dùng .forEach((item) => ...)',
     lint_controlled_input: 'input dùng chế độ controlled value. Trang Yida nên dùng defaultValue + onChange để cập nhật _customState',
-    lint_native_select_ui: 'Phát hiện <select> native. Trong trang tùy chỉnh bằng code, bạn có thể dùng trực tiếp component Yida <SelectField> (được inject global lúc runtime, không cần import), hoặc dùng dropdown tùy chỉnh div+button+onClick để giữ style nhất quán và tương thích mobile',
+    lint_native_select_ui: 'Phát hiện <select> native. Với trang tùy chỉnh thông thường, dùng dropdown div+button+onClick để giữ style nhất quán và tương thích mobile. Chỉ dùng component trường Yida trong Code Canvas sau khi xác minh mapping dependency',
     lint_iframe_self_navigation: 'Trang tùy chỉnh Yida chạy trong iframe. Dùng target="_top"/target="_blank" hoặc window.top.location khi điều hướng trang Yida để tránh trang lồng nhau.',
     lint_page_size_limit: 'pageSize={0} vượt quá giới hạn API Yida là 100; hãy dùng 100 hoặc nhỏ hơn',
     lint_page_size_recommend: 'pageSize={0} lớn; giá trị khuyến nghị là 50 (hiệu năng tốt nhất, tối đa 100). Ưu tiên 10/20/50',
@@ -522,6 +522,10 @@ module.exports = {
     building_schema: '[4/4] Đang xây dựng schema...',
     formula_prefix_fixed: '  🔧 Đã tự động sửa {0} tham chiếu tiền tố công thức bảng con',
     schema_built: '  ✅ Xây dựng schema thành công!',
+    step_canvas_compile: '\n📦 Step 1: Biên dịch mã nguồn Code Canvas\n',
+    canvas_compiling: '  🎨 Đang biên dịch mã nguồn Code Canvas cục bộ...',
+    canvas_compile_done: '  ✅ Đã biên dịch Code Canvas!',
+    canvas_compile_failed: '  ❌ Biên dịch Code Canvas thất bại: {0}',
     step_login: '\n🔑 Step 2: Đọc thông tin đăng nhập',
     step_publish: '\n📤 Step 3: Xuất bản schema\n',
     publish_failed: '\n❌ Xuất bản thất bại: {0}',
@@ -535,7 +539,7 @@ module.exports = {
     health_check_failed: '  ⚠️  Health check failed: HTTP {0} {1}',
     exception: '\n❌ Lỗi xuất bản: {0}',
     source_not_found: '❌ Không tìm thấy tệp nguồn: {0}',
-    usage: 'Cách dùng: openyida publish <tệpNguồn> <appType> <formUuid> [--health-check]',
+    usage: 'Cách dùng: openyida publish <tệpNguồn> <appType> <formUuid> [--health-check] [--canvas]',
     example: 'Ví dụ: openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },
 

package/lib/core/locales/zh-HK.js

@@ -229,7 +229,7 @@ openyida - 宜搭命令列工具
     check_page_example: '範例：openyida check-page pages/src/home.oyd.jsx --json',
     generate_page_usage: '用法：openyida generate-page <template> --output pages/src/home.oyd.jsx [--spec .cache/openyida/page-specs/home.json] [--compile]',
     generate_page_example: '範例：openyida generate-page product-homepage --brand-name OpenKuma --brand-initials OK --output pages/src/home.oyd.jsx --compile',
-    publish_usage: '用法：openyida publish <原始檔路徑> <appType> <formUuid> [--health-check]',
+    publish_usage: '用法：openyida publish <原始檔路徑> <appType> <formUuid> [--health-check] [--canvas]',
     publish_example: '範例：openyida publish pages/src/home.oyd.jsx APP_XXX FORM-XXX --health-check',
     verify_usage: '用法：openyida verify-short-url <appType> <formUuid> <url>',
     verify_example: '範例：openyida verify-short-url APP_XXX FORM-XXX /o/myapp',
@@ -810,7 +810,7 @@ openyida - 宜搭命令列工具
     lint_array_callback_function: '.{0}(function ...) 會導致回調內 this 遺失，請改為 .{0}((item) => ...)',
     lint_foreach_callback_function: '.forEach(function ...) 可能導致回調內 this 遺失，建議改為 .forEach((item) => ...)',
     lint_controlled_input: 'input 使用了 value 受控模式，宜搭頁面應使用 defaultValue + onChange 寫入 _customState',
-    lint_native_select_ui: '偵測到原生 <select>，樣式不一致且行動端相容性差。請改用宜搭內建的 SelectField 組件（this.$(fieldId) 或 <SelectField>），或用 div+button+onClick 實作自訂下拉',
+    lint_native_select_ui: '偵測到原生 <select>，樣式不一致且行動端相容性差。一般自訂頁請用 div+button+onClick 實作自訂下拉；只有 Code Canvas 場景在確認依賴映射可用後，才使用宜搭欄位組件。',
     lint_iframe_self_navigation: '宜搭自訂頁面運行在 iframe 中，跳轉宜搭頁面時請使用 target="_top"/target="_blank" 或 window.top.location，避免頁面套娃',
     lint_page_size_limit: 'pageSize={0} 超過宜搭 API 上限 100，請改為 100 或更小',
     lint_page_size_recommend: 'pageSize={0} 偏大，推薦使用 50（效能最佳，最大 100），優先選擇 10/20/50',
@@ -857,6 +857,10 @@ openyida - 宜搭命令列工具
     building_schema: '[4/4] 建構 Schema...',
     formula_prefix_fixed: '  🔧 已自動修正 {0} 處子表公式前綴引用',
     schema_built: '  ✅ Schema 建構完成！',
+    step_canvas_compile: '\n📦 Step 1: 編譯 Code Canvas 原始碼\n',
+    canvas_compiling: '  🎨 本機編譯 Code Canvas 源碼...',
+    canvas_compile_done: '  ✅ Code Canvas 編譯完成！',
+    canvas_compile_failed: '  ❌ Code Canvas 編譯失敗：{0}',
     step_login: '\n🔑 Step 2：讀取登入態',
     step_publish: '\n📤 Step 3：發布 Schema\n',
     resend_save_csrf: '  🔄 重新傳送 saveFormSchema 請求（csrf_token 已刷新）...',
@@ -886,7 +890,7 @@ openyida - 宜搭命令列工具
     exception: '\n❌ 發布異常：{0}',
     error: '\n❌ 發布異常：{0}',
     source_not_found: '❌ 原始檔案不存在：{0}',
-    usage: '用法：openyida publish <原始檔路徑> <appType> <formUuid> [--health-check]',
+    usage: '用法：openyida publish <原始檔路徑> <appType> <formUuid> [--health-check] [--canvas]',
     example: '範例：openyida publish pages/src/xxx.js APP_XXX FORM-XXX --health-check',
   },