openyida 2026.9.11 → 2026.9.13

package/lib/core/agent-capabilities.js

@@ -8,6 +8,7 @@ const { t } = require('./i18n');
 const { buildCommandManifest } = require('./command-manifest');
 const { buildEnvironmentSnapshot } = require('./env');
 const coreUtils = require('./utils');
+const { buildHostAssetCapabilities } = require('../asset/host-capabilities');
 const { findProjectRoot, getAuthStatus } = coreUtils;
 
 function redactLogin(login) {
@@ -127,6 +128,10 @@ function buildRuntimeSnapshot(projectRoot) {
   };
 }
 
+function buildAssetCapabilities(runtime, env = process.env) {
+  return buildHostAssetCapabilities({ runtime, env });
+}
+
 const BUILDER_CORE_COMMAND_IDS = Object.freeze([
   'agent-capabilities',
   'commands',
@@ -461,6 +466,7 @@ function buildFullAppArtifactRoute(manifest) {
     orchestrator_skill_id: workflow.orchestrator_skill_id,
     requirement_analysis_skill_id: workflow.requirement_analysis_skill_id,
     requirement_brief_path: workflow.requirement_brief_path,
+    optional_asset_branch: workflow.optional_asset_branch,
     design_mode_policy: workflow.design_mode_policy,
     navigation_policy: workflow.navigation_policy,
     plan_command_ids: workflow.plan_command_ids,
@@ -572,6 +578,7 @@ function buildAgentCapabilitiesSummary() {
   const skillsDiagnostics = compactSkillsDiagnostics(buildSkillsDiagnosticsCompat(projectResolution));
   const loginStatus = getAuthStatus({ projectRoot, includeSecrets: false });
   const runtime = buildRuntimeSnapshot(projectRoot);
+  const assetCapabilities = buildAssetCapabilities(runtime);
   const builderPath = compactBuilderPath(
     buildBuilderPath(loginStatus, projectRoot, manifest, process.env, runtime)
   );
@@ -598,6 +605,7 @@ function buildAgentCapabilitiesSummary() {
     full_app_artifact_route: buildFullAppArtifactRoute(manifest),
     application_entry_policy: applicationEntryPolicy,
     runtime,
+    asset_capabilities: assetCapabilities,
     builder_path: builderPath,
   };
 }
@@ -615,6 +623,7 @@ function buildAgentCapabilities() {
   const skillsDiagnostics = buildSkillsDiagnosticsCompat(projectResolution);
   const loginStatus = redactLogin(getAuthStatus({ projectRoot, includeSecrets: false }));
   const runtime = buildRuntimeSnapshot(projectRoot);
+  const assetCapabilities = buildAssetCapabilities(runtime);
   const builderPath = buildBuilderPath(loginStatus, projectRoot, manifest, process.env, runtime);
   const applicationEntryPolicy = buildApplicationEntryPolicy(builderPath, process.env);
   const manifestDigest = buildCommandManifestDigest(manifest);
@@ -633,6 +642,7 @@ function buildAgentCapabilities() {
     system: envSnapshot.system,
     active: envSnapshot.active,
     runtime,
+    asset_capabilities: assetCapabilities,
     login: loginStatus,
     application_entry_policy: applicationEntryPolicy,
     recommended: {
@@ -710,6 +720,7 @@ module.exports = {
   buildAgentCapabilities,
   buildAgentCapabilitiesSummary,
   buildApplicationEntryPolicy,
+  buildAssetCapabilities,
   compactBuilderPath,
   buildCommandManifestDigest,
   buildIdentity,

package/lib/core/command-manifest.js

@@ -422,10 +422,10 @@ const COMMAND_SIDE_EFFECTS = new Map([
   })],
 
   ['asset', sideEffect('mixed', {
-    mutates_yida: false,
+    mutates_yida: true,
     mutates_local: true,
-    read_actions: ['status', 'generate', 'resolve'],
-    mutating_actions: ['resolve --upload-assets', 'resolve --mirror-external'],
+    read_actions: ['status', 'sources', 'resolve --offline'],
+    mutating_actions: ['resolve', 'resolve --manifest', 'resolve --upload-assets'],
   })],
 
   ...sideEffectEntries([
@@ -757,7 +757,7 @@ const COMMAND_PERMISSIONS = new Map([
   ...permissionEntries([
     'asset',
   ], actionDependentPermission({
-    preauthorized_actions: ['generate', 'resolve --upload-assets', 'resolve --mirror-external'],
+    preauthorized_actions: ['resolve', 'resolve --manifest', 'resolve --upload-assets'],
   })),
 
   ...permissionEntries([
@@ -1251,7 +1251,7 @@ const COMMAND_GROUPS = [
       command('create-page', ['create-page'], 'create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_page'),
       command('build-page', ['build-page'], 'build-page <sourceFile> [--output file|--write]', 'help.cmd_build_page', { requiresLogin: false }),
       command('check-page', ['check-page'], 'check-page <src> [--compat]', 'help.cmd_check_page', { output: 'text|json' }),
-      command('compile', ['compile'], 'compile <src>', 'help.cmd_compile', { requiresLogin: false }),
+      command('compile', ['compile'], 'compile <src> [--canvas] [--json]', 'help.cmd_compile', { requiresLogin: false, output: 'text|json' }),
       command('publish', ['publish'], 'publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--auto-nav-order] [--open|--no-open]', 'help.cmd_publish'),
       command('update-form-config', ['update-form-config'], 'update-form-config <appType> <formUuid> <true|false|keep> "<title>" [--locale zh_CN|en_US|ja_JP]', 'help.cmd_update_form_config'),
       command('get-form-config', ['get-form-config'], 'get-form-config <appType> <formUuid> [--json]', 'help.cmd_get_form_config', { output: 'json' }),
@@ -1292,8 +1292,15 @@ const COMMAND_GROUPS = [
     id: 'process',
     titleKey: 'help.group_process',
     commands: [
-      command('configure-process', ['configure-process'], 'configure-process <appType> <formUuid> <definition> [processCode] [--replace]', 'help.cmd_configure_process'),
-      command('create-process', ['create-process'], 'create-process <appType> ... [--replace]', 'help.cmd_create_process'),
+      command('configure-process', ['configure-process'], 'configure-process <appType> <formUuid> <definition> [processCode] [--replace]', 'help.cmd_configure_process', {
+        examples: ['openyida configure-process APP_XXX FORM_XXX .cache/openyida/process/process-with-actions.json'],
+      }),
+      command('create-process', ['create-process'], 'create-process <appType> ... [--replace]', 'help.cmd_create_process', {
+        examples: [
+          'openyida create-process APP_XXX "Approval Form" .cache/openyida/process/fields.json .cache/openyida/process/process-with-actions.json',
+          'openyida create-process APP_XXX --formUuid FORM_XXX .cache/openyida/process/process-with-actions.json',
+        ],
+      }),
       command('ai-form-setting', ['ai-form-setting'], 'ai-form-setting <get|fields|models|enable|disable|save> <appType> ...', 'help.cmd_ai_form_setting', {
         output: 'json',
         aliases: ['ai-approve', 'aiFormSetting'],
@@ -1433,7 +1440,7 @@ const COMMAND_GROUPS = [
       command('ai', ['ai'], 'ai <text|image> [options]', 'help.cmd_ai', {
         output: 'text|json',
       }),
-      command('asset', ['asset'], 'asset <status|resolve|generate> [options]', 'help.cmd_asset', {
+      command('asset', ['asset'], 'asset <status|resolve|sources> [options]', 'help.cmd_asset', {
         requiresLogin: false,
         output: 'text|json',
       }),
@@ -1539,6 +1546,13 @@ function summarizeLocalizedCommands(commands) {
         default_ui_guidance_skill_id: 'yida-design',
         requirement_analysis_skill_id: 'yida-requirement-analysis',
         requirement_brief_path: '.cache/openyida/<project>/requirement-brief.json',
+        optional_asset_branch: {
+          skill_id: 'yida-image-assets',
+          trigger: 'Any page is imageNeed=required, or imageNeed=beneficial with declared image slots.',
+          output_path: 'prd/<project>/asset-manifest.json',
+          skip: 'All pages are imageNeed=none.',
+          dependency_policy: 'Only blocks pages that consume the declared image slots.',
+        },
         artifact_generation: {
           mode: 'parallel',
           audience: 'internal',
@@ -1555,10 +1569,10 @@ function summarizeLocalizedCommands(commands) {
         plan_command_ids: ['design-plan.init', 'design-plan.preview', 'design-plan.materialize', 'design-plan.patch'],
         theme_command_ids: ['sample', 'create-app', 'update-app'],
         navigation_command_ids: { platform: ['update-app', 'nav-group'], custom: ['update-app', 'update-form-config', 'get-form-config'] },
-        navigation_policy: 'Before PRD planning, reuse explicit navigation choices. During first-time intake, ask only when unknown: platform-l-shape, platform-top, platform-side, custom, with neutral descriptions and no preselection. For custom navigation also settle side/top/mixed/dock. Store type/source/reason/variant in the brief. Custom navigation requires app and per-page navigation hiding with readback; layout and navigation tone are separate choices.',
-        design_mode_policy: 'Analyze requirements first. First-time builds include new apps and existing apps without business pages. Reuse detailed supplied plans; if the mode is unspecified, ask whether to prepare a PRD for confirmation (Plan, more detailed and slower) or build from the supplied requirements (Fast). Without detailed requirements, offer Fast and Plan neutrally. Confirm unresolved navigation, custom navigation layout, visual style and page scope before planning or resource creation. Existing business apps only clarify the current change. A named resource-only request with explicitScope.allowInferredResources=false skips unrelated navigation and visual questions. Standard Plan uses design-plan init parallelTasks, then executes the returned materialize.command exactly once with business-file and visual-file; preview and --from-preview are only for explicitly incremental large plans. Confirm the displayed revision before building, and do not materialize or patch again after confirmation.',
+        navigation_policy: 'Before PRD planning, reuse explicit navigation choices. During first-time intake, ask only when ownership is unknown and offer exactly two neutral options with no preselection: "宜搭原生导航" (使用宜搭自带的导航菜单。) and "自定义导航" (在自定义页面里定制菜单的样式和操作方式，替代宜搭自带的导航菜单。). Native means platform navigation. The agent chooses layout from module count, hierarchy, switching frequency, content width and target device; do not ask layout or presentation-style questions. Prefer top for few shallow modules and wide content, side for many frequently accessed modules, L-shaped/mixed for business domains with child modules, and custom dock for lightweight mobile entries. Preserve user-specified layouts. Store resolved type/source/reason/variant in the brief, distinguishing user ownership from agent layout reasoning. Platform navigation uses update-app --layout top|side|l_shape --show-app-nav, which writes layoutDirection=top|side|l_shape and hideAppNav=n. Preserve stored navType unchanged; do not derive or invent it and do not add a --nav-type option. Without --layout, normalize stored legacy layoutDirection and navType using the yc-utils application rules (hoz plus top_side means l_shape; missing layout uses top_fold/top_side for top/l_shape). Shell page-level top_fold/none overrides do not belong in app settings. Custom side/top/mixed/dock is a page layout and requires app and per-page navigation hiding with readback. Verify persisted layoutDirection and hideAppNav; updatedFields and themeVerification do not prove navigation persistence. Navigation tone is separate from layout.',
+        design_mode_policy: 'Analyze requirements first. First-time builds include new apps and existing apps without business pages. Reuse detailed supplied plans; if the mode is unspecified, ask whether to prepare a PRD for confirmation (Plan, more detailed and slower) or build from the supplied requirements (Fast). Without detailed requirements, offer Fast and Plan neutrally. Confirm unresolved navigation ownership, visual style and page scope before planning or resource creation; the agent determines navigation layout from the business context without a layout question. Existing business apps only clarify the current change. A named resource-only request with explicitScope.allowInferredResources=false skips unrelated navigation and visual questions. Standard Plan uses design-plan init parallelTasks, then executes the returned materialize.command exactly once with business-file and visual-file; preview and --from-preview are only for explicitly incremental large plans. Confirm the displayed revision before building, and do not materialize or patch again after confirmation.',
         product_design_policy: 'yida-requirement-analysis owns shared facts and first-time intake. yida-prd owns business planning; yida-design owns visual design. Reuse the same confirmed brief and supplied details. Prepare business and base visuals concurrently, then bind visuals to settled page tasks. yida-app merges and checks the artifacts before creating resources. Plan uses the compact authoring contract and selected theme context; the CLI reads full templates and renders all artifacts.',
-        ui_guidance_policy: 'Page implementation consumes yida-prd prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, business-specific checks, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it consumes yida-design design.md for app custom theme CSS delivery, themeColor/navTheme, visual states, visualScaffold, surface material, rounded rules, density rules, components, and state styling. prd.md and design.md are the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by sending business conflicts to yida-prd and visual conflicts to yida-design before regenerating the spec. Core normal forms default to 1-3 business sample records before page implementation, followed by query readback. An explicit opt-out, configuration dictionary, sensitive data, or lack of safely constructible values requires a recorded skip reason. Screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
+        ui_guidance_policy: 'Page implementation consumes yida-prd prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, business-specific checks, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it consumes yida-design design.md for app custom theme CSS delivery, themeColor/navTheme, visual states, visualScaffold, surface material, rounded rules, density rules, components, state styling, and page-level imageNeed. When a page is imageNeed=required, or beneficial with declared image slots, yida-image-assets prepares a traceable asset manifest before that page is implemented; imageNeed=none skips the branch. prd.md and design.md remain the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by sending business conflicts to yida-prd and visual conflicts to yida-design before regenerating the spec. Core normal forms default to 1-3 business sample records before page implementation, followed by query readback. An explicit opt-out, configuration dictionary, sensitive data, or lack of safely constructible values requires a recorded skip reason. Screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
         default_nav_order_policy: 'For custom navigation, implement PRD navigation order in the custom shell and verify app/page navigation hiding; skip platform nav-group ordering. For platform navigation: after the primary page is successfully published, perform exactly one navigation order operation. If the PRD names a navigation order, publish without --auto-nav-order and then call openyida nav-group order <appType> <items...>. If the PRD only gives broad groups or is missing navigation order, use openyida publish ... --auto-nav-order and do not call nav-group order or auto-order afterward. Explicit and automatic ordering are mutually exclusive; never generate per-item move loops. The fallback priority is portal/home/workbench entry > business handling > data management > business analytics > system configuration.',
         final_link_policy: 'Return exactly one user-visible application entry group, never one artifact or link card per form, process, report, schema, manifest, PRD, design file, or intermediate artifact. The group always contains the app workbench URL. Add the clean custom page URL only when PRD entryMode=standalone and get-form-config readback confirms isRenderNav=false. Add the admin URL only when agent-capabilities application_entry_policy.entries.admin=include. Summarize other business resources in prose by default, but every resource count, seed-record count, and completed/verified claim must come from that resource\'s own successful result or readback. When the user or caller explicitly requests a resource manifest, resource UUIDs/IDs, publish status, or test-data summary, include one concise verified delivery manifest in the final prose and do not substitute link cards for it.',
         application_entry_policy: {

package/lib/core/locales/en.js

@@ -64,8 +64,8 @@ module.exports = {
     cmd_corp_manager: 'Manage platform admins and address book permissions',
     cmd_agent_center: 'Manage process and departure delegation',
     group_process: 'Process',
-    cmd_configure_process: 'Configure and publish process rules',
-    cmd_create_process: 'Create process form (all-in-one)',
+    cmd_configure_process: 'Configure and publish process rules; Supports append/forward via JSON nodes[].actions.normalActions/appendActions',
+    cmd_create_process: 'Create process form (all-in-one); Supports append/forward via JSON nodes[].actions.normalActions/appendActions',
     cmd_ai_form_setting: 'Manage process form AI approval prompts',
     cmd_process_preview: 'Preview process instance (visual flowchart)',
     group_share: 'Page Config & Sharing',
@@ -2070,3 +2070,7 @@ module.exports.connector_e2e = {
   test_contract_unverified: 'Connector testing did not prove the controlled fixture, marker, ownership, and auth runtime contract.',
   action_mutated: 'Connector testing mutated the persisted action definition.',
 };
+
+Object.assign(module.exports.process_errors || (module.exports.process_errors = {}), {
+  action_config_invalid: 'Invalid approval action configuration for node {0}: {1}',
+});

package/lib/core/locales/zh.js

@@ -64,8 +64,8 @@ module.exports = {
     cmd_corp_manager: '管理平台管理员与通讯录权限',
     cmd_agent_center: '管理流程代理和离职代理',
     group_process: '流程',
-    cmd_configure_process: '配置并发布流程规则',
-    cmd_create_process: '创建流程表单（一体化）',
+    cmd_configure_process: '配置并发布流程规则; 支持加签/转交，配置位于 JSON nodes[].actions.normalActions/appendActions',
+    cmd_create_process: '创建流程表单（一体化）; 支持加签/转交，配置位于 JSON nodes[].actions.normalActions/appendActions',
     cmd_ai_form_setting: '管理流程表单 AI 审批提示',
     cmd_process_preview: '预览流程实例（可视化流程图）',
     group_share: '页面配置 & 分享',
@@ -2024,3 +2024,7 @@ module.exports.connector_e2e = {
   test_contract_unverified: '连接器测试未能证明受控 fixture、标记、归属和鉴权运行时契约。',
   action_mutated: '连接器测试改变了持久化动作定义。',
 };
+
+Object.assign(module.exports.process_errors || (module.exports.process_errors = {}), {
+  action_config_invalid: '节点 {0} 的审批动作配置无效：{1}',
+});

package/lib/design-plan/materialize.js

@@ -590,14 +590,11 @@ function renderPageApplications(applications) {
 
 function assetSummary(assetStrategy) {
   const strategy = assetStrategy || {};
-  const values = [];
-  for (const [key, value] of Object.entries(strategy)) {
-    if (key === 'missingAssets' || key === 'notes' || value === undefined || value === null || value === '') {
-      continue;
-    }
-    values.push(`${key}: ${text(value)}`);
-  }
-  return values.join('；') || '无现成品牌素材';
+  const pages = Array.isArray(strategy.pages) ? strategy.pages : [];
+  return pages.map((page) => {
+    const slotCount = Array.isArray(page.slots) ? page.slots.length : 0;
+    return `${page.pageId || '未命名页面'}: ${page.imageNeed || 'none'}，${slotCount} 个槽位`;
+  }).join('；') || '无图片需求';
 }
 
 function componentReferences(markdown) {
@@ -653,7 +650,7 @@ function renderDesign(plan) {
     PRODUCT_TOPOLOGY_APPLICATION: text(forDesignMd.productTopologyApplication),
     PAGE_PATTERN_SUMMARY: renderPagePatterns(plan.pages || {}),
     PAGE_APPLICATIONS: renderPageApplications(forUser.pageApplications),
-    BRAND_ASSETS: assetSummary(forUser.assetStrategy),
+    PAGE_IMAGE_NEEDS: assetSummary(forUser.assetStrategy),
     ASSET_GAPS: text((forUser.assetStrategy || {}).missingAssets, '无'),
   };
   let output = template.replace(/\{\{([A-Z_]+)\}\}/g, (match, key) => {
@@ -746,6 +743,7 @@ function renderDesign(plan) {
   }
   output = output.replace(/^---\n/, () => [
     '---',
+    `assetStrategy: ${JSON.stringify({ pages: [], ...forUser.assetStrategy })}`,
     `themeProfile: ${JSON.stringify({ themeColor: primaryColor, navTheme: navigationStyle.tone, ...navigationConfig(plan), logoSource: 'appIcon', themeDelivery: 'app-custom-theme-file' })}`,
     `sceneRecipes: ${JSON.stringify(scenes)}`,
     `components: ${JSON.stringify(references.components)}`,

package/lib/design-plan/normalize.js

@@ -302,7 +302,17 @@ function ensureVisual(plan) {
   forUser.stateSummary = forUser.stateSummary || '默认、悬停、按下、聚焦、禁用、加载、空态、错误、无权限和选中状态保持一致。';
   forUser.responsiveSummary = forUser.responsiveSummary || '响应式断点、重排和触控规则保持统一，并维持页面主任务顺序。';
   forUser.iconSummary = forUser.iconSummary || '图标风格、尺寸和语义保持一致。';
-  forUser.assetStrategy = forUser.assetStrategy || { materialStatus: 'none', missingAssets: [], notes: '不得编造素材 URL。' };
+  forUser.assetStrategy = forUser.assetStrategy || {
+    materialStatus: 'none',
+    pages: list((plan.pages || {}).customPageDetails).map(page => ({
+      pageId: page.pageId,
+      imageNeed: 'none',
+      reason: '无图片槽位。',
+      slots: [],
+    })),
+    missingAssets: [],
+    notes: '需要图片时使用 yida-image-assets。',
+  };
   forUser.designMdReady = forUser.designMdReady || 'materialize 将从所选完整主题模板生成 design.md。';
 
   const forDesignMd = visual.forDesignMd = visual.forDesignMd || {};

package/lib/process/services/process-actions.js

@@ -0,0 +1,145 @@
+'use strict';
+
+const { buildYidaI18n } = require('../../core/yida-i18n');
+const { t } = require('../../core/i18n');
+
+function buildActions() {
+  const actionDefs = [
+    { action: 'agree', zh: '同意', en: 'Agree', ja: '同意', hidden: false },
+    { action: 'disagree', zh: '拒绝', en: 'Disagree', ja: '拒否', hidden: false },
+    { action: 'save', zh: '保存', en: 'Save', ja: '保存', hidden: true },
+    { action: 'forward', zh: '转交', en: 'Forward', ja: '転送', hidden: true },
+    { action: 'append', zh: '加签', en: 'Append', ja: '承認者を追加', hidden: true },
+    { action: 'return', zh: '退回', en: 'Return', ja: '差し戻し', hidden: true },
+  ];
+
+  return actionDefs.map(function (def) {
+    return {
+      hidden: def.hidden,
+      name: buildYidaI18n(def.zh, { en_US: def.en, ja_JP: def.ja }),
+      action: def.action,
+      text: buildYidaI18n(def.zh, { en_US: def.en, ja_JP: def.ja }),
+      alias: buildYidaI18n(def.zh, { en_US: def.en, ja_JP: def.ja }),
+    };
+  });
+}
+
+function invalid(nodeName, field) {
+  const error = new TypeError(t('process_errors.action_config_invalid', nodeName, field));
+  error.code = 'PROCESS_COMPILE_ACTION_CONFIG_INVALID';
+  error.details = { nodeName, field };
+  throw error;
+}
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function clone(value) {
+  return JSON.parse(JSON.stringify(value));
+}
+
+/** Merge partial button settings without changing unspecified permissions. */
+function normalizeActions(value, field, nodeName, complete = false) {
+  const defaults = buildActions();
+  if (value === undefined) { return defaults; }
+  if (!Array.isArray(value)) { invalid(nodeName, field); }
+  const seen = new Set();
+  const overrides = value.map(action => {
+    if (!isObject(action) || typeof action.action !== 'string' || !action.action.trim()
+      || (!complete && !['agree', 'disagree', 'save', 'forward', 'append', 'return', 'recall'].includes(action.action))
+      || seen.has(action.action) || (action.hidden !== undefined && typeof action.hidden !== 'boolean')) {
+      invalid(nodeName, field);
+    }
+    seen.add(action.action);
+    return clone(action);
+  });
+  const merge = (base, override) => {
+    const result = { ...base, ...override };
+    if (override && override.name !== undefined && override.alias === undefined) { result.alias = clone(override.name); }
+    if (override && override.alias !== undefined && override.name === undefined) { result.name = clone(override.alias); }
+    return result;
+  };
+  // Raw processProps arrays are complete lists, not partial overrides. Do not add
+  // agree/disagree permissions to a legacy list that intentionally omitted them.
+  if (complete) {
+    // NewProcessAdapter treats an omitted hidden field in a raw action as visible.
+    return overrides.map(item => merge({ ...defaults.find(action => action.action === item.action), hidden: false }, item));
+  }
+  const result = defaults.map(action => merge(action, overrides.find(item => item.action === action.action)));
+  // Native versions may include the additional recall button.
+  overrides.filter(item => item.action === 'recall').forEach(item => result.push({ hidden: true, ...item }));
+  return result;
+}
+
+/**
+ * Compile one shared action contract into designer and engine representations.
+ * Native node.actions takes precedence; legacy processProps lists remain accepted.
+ * Missing append settings use the same defaults as ActionSetter; invalid explicit
+ * settings fail before publishing. No config retains historical hidden defaults.
+ * @param {object|undefined} config native normalActions / appendActions overrides
+ * @param {object} rawProps legacy approver process properties
+ * @param {string} nodeName diagnostic node name
+ * @returns {{viewActions: object, processProps: object}} independent JSON values
+ */
+function buildNodeActions(config, rawProps = {}, nodeName = '') {
+  if (config !== undefined && (!isObject(config)
+    || Object.keys(config).some(key => !['normalActions', 'appendActions'].includes(key)))) {
+    invalid(nodeName, 'actions');
+  }
+  const input = config || {};
+  const normalActions = normalizeActions(input.normalActions === undefined ? rawProps.actions : input.normalActions,
+    'actions.normalActions', nodeName, input.normalActions === undefined);
+  const appendActions = normalizeActions(input.appendActions === undefined ? rawProps.appendActions : input.appendActions,
+    'actions.appendActions', nodeName, input.appendActions === undefined);
+  const append = normalActions.find(item => item.action === 'append') || { hidden: true };
+  const appendedAppend = appendActions.find(item => item.action === 'append') || { hidden: true };
+  const processProps = {};
+
+  // These engine fields are node-wide: the designer derives them from normalActions.
+  if (!appendedAppend.hidden && append.hidden) {
+    invalid(nodeName, 'actions.normalActions.append.hidden');
+  }
+  if (!append.hidden) {
+    if (append.appendPosition === undefined) {
+      append.appendPosition = rawProps.moldList === undefined ? ['BEFORE_APPEND'] : clone(rawProps.moldList);
+    }
+    if (append.appendResult === undefined) {
+      if (rawProps.isConsiderAppendedAction !== undefined && typeof rawProps.isConsiderAppendedAction !== 'boolean') {
+        invalid(nodeName, 'processProps.isConsiderAppendedAction');
+      }
+      append.appendResult = rawProps.isConsiderAppendedAction === undefined
+        ? 'valid' : (rawProps.isConsiderAppendedAction === true ? 'valid' : 'invalid');
+    }
+    if (!Array.isArray(append.appendPosition) || append.appendPosition.length === 0
+      || append.appendPosition.some(position => !['BEFORE_APPEND', 'AFTER_APPEND'].includes(position))
+      || new Set(append.appendPosition).size !== append.appendPosition.length) {
+      invalid(nodeName, 'actions.normalActions.append.appendPosition');
+    }
+    if (!['valid', 'invalid'].includes(append.appendResult)) {
+      invalid(nodeName, 'actions.normalActions.append.appendResult');
+    }
+    Object.assign(processProps, {
+      allowTaskAppend: true,
+      moldList: clone(append.appendPosition),
+      isConsiderAppendedAction: append.appendResult === 'valid',
+      isNeedEndTaskGroupChain: append.appendResult === 'valid',
+    });
+  } else if (['allowTaskAppend', 'moldList', 'isConsiderAppendedAction', 'isNeedEndTaskGroupChain']
+    .some(key => rawProps[key] !== undefined)) {
+    // Clear stale engine flags when the action is explicitly disabled.
+    Object.assign(processProps, {
+      allowTaskAppend: false, moldList: [], isConsiderAppendedAction: false, isNeedEndTaskGroupChain: false,
+    });
+  }
+  const viewActions = { normalActions, appendActions };
+  // Retain existing return settings in both representations.
+  ['realBackOriginator', 'triggerRule', 'backScope'].forEach(key => {
+    if (rawProps[key] !== undefined) { viewActions[key] = clone(rawProps[key]); }
+  });
+  processProps.actions = clone(normalActions);
+  processProps.appendActions = clone(appendActions);
+  return { viewActions, processProps };
+}
+
+module.exports = { buildNodeActions };

package/lib/process/services/process-compiler.js

@@ -8,6 +8,7 @@
 
 const { buildYidaI18n } = require('../../core/yida-i18n');
 const { t } = require('../../core/i18n');
+const { buildNodeActions } = require('./process-actions');
 
 const KEY_PATTERN = /^[A-Za-z][A-Za-z0-9_]*$/;
 
@@ -649,29 +650,6 @@ function buildFriendlyApproverConfig(node, approver) {
   return null;
 }
 
-// ── 构建审批/抄送动作列表 ────────────────────────────
-
-function buildActions() {
-  const actionDefs = [
-    { action: 'agree', zh: '同意', en: 'Agree', ja: '同意', hidden: false },
-    { action: 'disagree', zh: '拒绝', en: 'Disagree', ja: '拒否', hidden: false },
-    { action: 'save', zh: '保存', en: 'Save', ja: '保存', hidden: true },
-    { action: 'forward', zh: '转交', en: 'Forward', ja: '転送', hidden: true },
-    { action: 'append', zh: '加签', en: 'Append', ja: '承認者を追加', hidden: true },
-    { action: 'return', zh: '退回', en: 'Return', ja: '差し戻し', hidden: true },
-  ];
-
-  return actionDefs.map(function (def) {
-    return {
-      hidden: def.hidden,
-      name: i18n(def.zh, def.en, def.ja),
-      action: def.action,
-      text: i18n(def.zh, def.en, def.ja),
-      alias: i18n(def.zh, def.en, def.ja),
-    };
-  });
-}
-
 // ── 构建条件规则（严格匹配宜搭真实格式）─────────────
 
 function buildConditionRules(rules, logic) {
@@ -1162,10 +1140,9 @@ function buildApprovalNode(node, nextNodeId, nameToIdMap, nodeType) {
     formConfig = { behaviorList: behaviorList };
   }
 
+  const nodeActions = buildNodeActions(node.actions, approverConfig.processProps, displayName);
   const processNodeProps = {
     conditionalMode: 'conditional',
-    actions: buildActions(),
-    appendActions: buildActions(),
     openDigitalSign: false,
     noActionersType: 'stopProcess',
     routeRule: routeRule,
@@ -1173,7 +1150,7 @@ function buildApprovalNode(node, nextNodeId, nameToIdMap, nodeType) {
   if (approverConfig.approvals !== undefined) {
     processNodeProps.approvals = approverConfig.approvals;
   }
-  Object.assign(processNodeProps, approverConfig.processProps);
+  Object.assign(processNodeProps, approverConfig.processProps, nodeActions.processProps);
   let multiApproverRules;
   if (approvalNodeType === 'multiApproval') {
     const multiMode = node.approvalMode
@@ -1220,10 +1197,7 @@ function buildApprovalNode(node, nextNodeId, nameToIdMap, nodeType) {
     nodeName: componentName,
     name: i18n(displayName, titleText[1], displayName),
     description: nodeDescription,
-    actions: {
-      normalActions: buildActions(),
-      appendActions: buildActions(),
-    },
+    actions: nodeActions.viewActions,
     routeRule: routeRule,
   };
   if (multiApproverRules) {

package/lib/process/services/process-view-verifier.js

@@ -125,6 +125,7 @@ function verifyPlatformView(response, expectedViewJson, expectedFormUuid) {
       actual: actualNodes,
     });
   }
+  verifyActionSettings(expectedViewJson.schema.children, actualView.schema.children, errors);
   return {
     verificationLevel: errors.length === 0 ? 'PLATFORM_VIEW_VERIFIED' : 'PUBLISHED_UNVERIFIED',
     valid: errors.length === 0,
@@ -133,6 +134,36 @@ function verifyPlatformView(response, expectedViewJson, expectedFormUuid) {
   };
 }
 
+/** Compare permissions and append semantics, tolerating platform-added metadata. */
+function verifyActionSettings(expectedNodes, actualNodes, errors, parentPath = '') {
+  (expectedNodes || []).forEach((node, index) => {
+    const actual = (actualNodes || [])[index];
+    const path = parentPath + '/' + index;
+    const expectedActions = node.props && node.props.actions;
+    const actualActions = actual && actual.props && actual.props.actions;
+    if (isPlainObject(expectedActions)) {
+      ['normalActions', 'appendActions'].forEach(group => {
+        if (!Array.isArray(expectedActions[group])) { return; }
+        expectedActions[group].forEach(action => {
+          const matches = actualActions && Array.isArray(actualActions[group])
+            ? actualActions[group].filter(item => item && item.action === action.action) : [];
+          const found = matches[0];
+          const keys = ['hidden'];
+          if (group === 'normalActions' && action.action === 'append' && !action.hidden) {
+            keys.push('appendPosition', 'appendResult');
+          }
+          if (matches.length !== 1 || keys.some(key => JSON.stringify(action[key]) !== JSON.stringify(found[key]))) {
+            errors.push({ code: 'PROCESS_PLATFORM_VIEW_ACTION_MISMATCH', path, group, action: action.action });
+          }
+        });
+      });
+    }
+    if (Array.isArray(node.children)) {
+      verifyActionSettings(node.children, actual && actual.children, errors, path);
+    }
+  });
+}
+
 module.exports = {
   extractPlatformView,
   verifyPlatformView,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.9.11",
+  "version": "2026.9.13",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",

package/scripts/postinstall.js

@@ -311,7 +311,7 @@ openyida copy
 | --- | --- | --- |
 | \`yida-skills/context\` | 登录、退出、组织信息、Schema、fieldId、只读预检 | \`yida-login\`, \`yida-logout\`, \`yida-basic-info\`, \`yida-get-schema\`, \`yida-corp-efficiency\` |
 | \`yida-skills/app\` | 从零搭应用、导航、多语言 | \`yida-app\`, \`yida-create-app\`, \`yida-nav-group\`, \`yida-i18n\` |
-| \`yida-skills/design\` | 完整应用需求分析、产品 PRD、单页 UI 改造、主页面视觉设计、应用主题色、全局换肤 | \`yida-requirement-analysis\`, \`yida-prd\`, \`yida-design\` |
+| \`yida-skills/design\` | 完整应用需求分析、产品 PRD、单页 UI 改造、主页面视觉设计、应用主题色、全局换肤、图片素材 | \`yida-requirement-analysis\`, \`yida-prd\`, \`yida-design\`, \`yida-image-assets\` |
 | \`yida-skills/form\` | 表单字段、公式、校验、业务规则、批量录入、数据记录 | \`yida-create-form-page\`, \`yida-formula\`, \`yida-formula-evaluate\`, \`yida-business-rule\`, \`yida-canvas-table-form\`, \`yida-table-form\`, \`yida-data-management\` |
 | \`yida-skills/process\` | 审批、流程表单、流程规则、代理人 | \`yida-create-process\`, \`yida-process-rule\`, \`yida-agent-center\` |
 | \`yida-skills/page\` | 自定义展示页、YidaCodeCanvas 组件、历史平台 JSX 组件页面维护、发布、导航壳、PPT | \`yida-create-page\`, \`yida-canvas-custom-page\`, \`yida-custom-page\`, \`yida-canvas-data-binding\`, \`yida-canvas-upgrade\`, \`yida-publish-page\`, \`yida-openyida-publish-guard\`, \`yida-density\`, \`yida-nav-shell\`, \`yida-ppt-slider\` |

package/yida-skills/SKILL.md

@@ -101,7 +101,7 @@ description: >
 | --- | --- | --- |
 | `yida-skills/context` | 登录、退出、切换组织、组织版本/容量、Schema、fieldId、执行前检查 | `yida-login`、`yida-logout`、`yida-basic-info`、`yida-get-schema`、`yida-corp-efficiency` |
 | `yida-skills/app` | 从零搭应用、完整系统、应用启停、应用导航、多语言 | `yida-app`、`yida-create-app`、`yida-app-lifecycle`、`yida-nav-group`、`yida-i18n` |
-| `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤 | `yida-requirement-analysis`、`yida-prd`、`yida-design` |
+| `yida-skills/design` | 完整应用需求分析、PRD、视觉设计、单页 UI 改造、应用主题色、全局换肤、图片素材 | `yida-requirement-analysis`、`yida-prd`、`yida-design`、`yida-image-assets` |
 | `yida-skills/form` | 表单字段、公式、校验、业务关联规则、批量录入、数据记录 | `yida-create-form-page`、`yida-formula`、`yida-formula-evaluate`、`yida-business-rule`、`yida-canvas-table-form`、`yida-table-form`、`yida-data-management` |
 | `yida-skills/process` | 审批、流程表单、流程规则、节点/分支/字段权限、流程代理 | `yida-create-process`、`yida-process-rule`、`yida-agent-center` |
 | `yida-skills/page` | 自定义展示页、页面源码开发、平台 JSX 组件页面维护、页面发布、页面内导航、PPT 页面 | `yida-create-page`、`yida-canvas-custom-page`、`yida-custom-page`、`yida-canvas-data-binding`、`yida-canvas-upgrade`、`yida-publish-page`、`yida-openyida-publish-guard`、`yida-density`、`yida-nav-shell`、`yida-ppt-slider` |
@@ -128,7 +128,7 @@ description: >
 | 创建自定义展示页资源 | `yida-create-page`，之后交给 `yida-canvas-custom-page` 编写页面源码，再交给 `yida-publish-page` 发布 |
 | 开发表单字段结构 / 增删改字段 | 使用 `yida-create-form-page` 落地字段结构 |
 | 创建带审批的流程表单 | `yida-create-process` |
-| 修改已有流程节点/分支/字段权限 | `yida-process-rule` |
+| 修改已有流程节点/分支/字段权限，配置加签/转交操作权限 | `yida-process-rule`；加签/转交先读其 `references/approval-actions.md` |
 | 查字段 ID / 保存 Schema 证据 | `yida-get-schema`；凡涉及 fieldId 的数据、流程、公式、页面代码先取证 |
 | 改表单数据记录 | `yida-data-management`，不是 `yida-create-form-page` |
 | 配字段默认值、计算、校验 | `yida-formula`；静态检查用 `yida-formula-evaluate` |
@@ -145,6 +145,7 @@ description: >
 | 批量录入、表格填写、多行编辑 | 默认 `yida-canvas-table-form`；已检测到平台 JSX 组件页面、native 页面或存量源码使用 `this.utils.yida.saveFormData` 时用 `yida-table-form` |
 | 页面视觉方向、页面美化、去 AI 味 | `yida-design` 只产出或更新 `prd/<项目名>/design.md`；若业务/页面契约也变化，由 `yida-prd` 更新 `prd.md`；实现阶段默认交给 `yida-canvas-custom-page` |
 | 应用级主题、品牌色、全局换肤 | `yida-design` |
+| 图片需求、搜图、生图 | `yida-image-assets`；完整应用按 `design.md.assetStrategy` 加载 |
 | 平台左侧导航树分组/排序 | `yida-nav-group` |
 | 应用导航隐藏后自绘导航壳 | `yida-nav-shell` |
 | 普通报表/统计 | `yida-report` |

package/yida-skills/skills/yida-app/SKILL.md

@@ -64,7 +64,7 @@ Plan 模式只读取 `workflow/step-1-resource-context.md`、`workflow/step-2-de
 | 4 | [创建或更新业务资源](workflow/step-4-forms-processes.md) | 执行 `use_skill("yida-create-form-page")`；按 PRD 执行 `use_skill("yida-create-process")`、`use_skill("yida-get-schema")`、`use_skill("yida-report")` 和 `use_skill("yida-integration")` | 真实 `formUuid`、`processCode`、必要 `fieldId/reportId` |
 | 5 | [写入初始表单数据](workflow/step-5-seed-records.md) | 执行 `use_skill("yida-data-management")`，为核心普通表单写入 1-3 条业务化 seed records 并 query 抽查 | 真实表单记录或明确跳过原因 |
 | 6 | [创建或复用主页面](workflow/step-6-main-page.md) | 已有 display 页面直接复用；缺少主页面且允许创建时执行 `use_skill("yida-create-page")` | 真实主页面 `formUuid` |
-| 7 | [编写或更新页面](workflow/step-7-page-code.md) | 执行 `use_skill("yida-canvas-custom-page")`；看板/工作台/驾驶舱必须再执行 `use_skill("yida-dashboard")`，读取表单数据时必须执行 `use_skill("yida-canvas-data-binding")` | 页面源码和真实 dataBinding 通过校验 |
+| 7 | [编写或更新页面](workflow/step-7-page-code.md) | 按 `design.md.assetStrategy` 加载素材、页面、看板和数据绑定技能 | 素材状态明确；页面源码和 dataBinding 通过校验 |
 | 8 | [发布页面并排序导航](workflow/step-8-publish-navigation.md) | 执行 `use_skill("yida-publish-page")`，发布本轮源码到主页面并执行轻量导航排序 | 已发布主页面 URL |
 | 9 | [输出与收尾](workflow/step-9-output-finish.md) | 核对完成条件，按业务语言输出结果 | 2-3 句业务总结 + 一组应用访问入口 |
 

package/yida-skills/skills/yida-app/workflow/step-2-design.md

@@ -8,7 +8,7 @@
 
 ## 2.0 先分析并确认需求
 
-调用 `yida-requirement-analysis`，按 [需求分析与首次搭建确认](../../yida-requirement-analysis/workflow/prepare-brief.md) 整理来源、复用资源及用户已有计划，在同一轮一次性确认尚未明确的 Fast / Plan、业务模块、页面与表单、导航归属与布局及风格。导航选择直接包含平台或自定义及具体布局，并按 [导航选项说明](../../yida-requirement-analysis/workflow/prepare-brief.md#导航选项说明) 备注平台原生布局与自定义页面实现的区别，“自定义导航”大类不标记“推荐”；已选自定义顶部时，呈现样式默认推荐浮导，用户明确的其他样式优先；后续阶段复用答案。首次搭建在必要回答写回、`intake.confirmed=true` 后继续。
+调用 `yida-requirement-analysis`，按 [需求分析与首次搭建确认](../../yida-requirement-analysis/workflow/prepare-brief.md) 整理来源、复用资源及用户已有计划，在同一轮一次性确认尚未明确的 Fast / Plan、业务模块、页面与表单、导航归属及风格。导航 `ask_human` 仅提供“宜搭原生导航”和“自定义导航”两个选项，原生导航就是平台导航，并按 [导航选项说明](../../yida-requirement-analysis/workflow/prepare-brief.md#导航选项说明) 备注实现方式，不标记“推荐”。顶部、侧边、L 型等布局在用户所选归属内根据场景确定，不询问布局或样式；用户已明确的要求优先，后续阶段复用归属选择和布局依据。首次搭建在必要回答写回、`intake.confirmed=true` 后继续。
 
 回答齐全后直接保存内部需求记录并进入 2.1；不把“生成需求简报”列为独立任务，不再扩写或展示简报请用户确认。已有确认记录且需求未变化时直接复用。记录粒度、保存和校验规则统一遵守上述需求分析流程。
 
@@ -50,6 +50,16 @@ Plan 分支从已加载 `yida-app` 的 Available Files 读取精确路径 `workf
 
 校验未通过时 Step 2 未完成，不得进入资源创建。校验通过后，后续页面实现以 `prd.md` 和 `design.md` 为准；`page-spec.json` 只用于把要求传给页面实现阶段。
 
+## 2.4 条件式素材分支
+
+`design.md.assetStrategy` 按页面分级：
+
+- 商品目录、品牌、营销和媒体展示页通常为 `required`；
+- 门户、工作台、档案、知识库和引导页有图片槽位时为 `beneficial`；
+- 表单、审批、台账、设置和库存流水默认 `none`。
+
+存在 `required` 或带槽位的 `beneficial` 时启动 `yida-image-assets`，先选图并保存 `prd/<项目名>/manifest-draft.json`。宜搭附件上传需要真实 `appType`；已有应用可直接上传，否则等 Step 3 创建应用后再落地，不因缺少 appType 阻塞应用创建。素材只阻塞使用它的页面；Step 7 通过 `--design design.md --app-type <真实appType>` 上传并校验，以输出清单的页面级状态判断能否继续。
+
 ## 主题文件实现指令
 
 在设计中确定配色、导航明暗和布局。未禁止 `theme-file` 时，Plan 使用 CLI 返回的 `outputs.theme`，Fast 按 [主题文件生成与更新](../../yida-design/workflow/output-design.md#cli-token-契约fast--plan-共用) 准备主题 CSS；用户确认计划或主题后即可启动 CSS 生成，不等待表单或页面开发。Plan 已生成当前版本的 CSS 时直接复用。拿到真实 appType 后，在应用级配置同一份主题文件，与表单创建和页面开发并行；页面组件按已确认契约消费主题 token。若 `theme-file` 被禁止，跳过生成、复制、修改和上传，沿用现有平台主题并在交付中说明未更改主题。详见 [主题与业务资源的依赖](parallel-work.md#主题与业务资源的依赖)。