openyida 2026.9.2 → 2026.9.3

package/lib/asset/asset-cmd.js

@@ -2,13 +2,12 @@
 /**
  * asset-cmd.js - `openyida asset` 素材能力命令
  *
- * P3 素材工具化的统一入口，把「检测素材能力 / 校验图片 URL / 解析回填 /
- * 素材来源引导」暴露为可脚本化命令，供本地智能体在生成官网/落地页前调用，
+ * 素材工具的统一入口，把「检测素材能力 / 解析回填 / 素材来源引导」
+ * 暴露为可脚本化命令，供本地智能体在生成官网/落地页前调用，
  * 从而做到：无 CDN 不谎称已上传、无可用素材不交付「最终版」。
  *
  * 子命令：
  *   status                     检测当前素材能力（CDN / 生成 / 推荐策略）
- *   verify-url <url...>        校验一个或多个公开图片 URL 是否真实可达且为图片
  *   resolve --hero <..> [--product <..>] [--upload-assets]  解析并回填一组素材，输出 materialStatus/缺口
  *   generate                   输出素材来源引导（免费素材库清单 + 纪律）
  *
@@ -18,7 +17,6 @@
 'use strict';
 
 const { getAssetStatus } = require('./asset-status');
-const { verifyImageUrls } = require('./url-verify');
 const { resolveAssets } = require('./asset-resolve');
 const {
   detectImageGenerator,
@@ -30,32 +28,28 @@ function printHelp() {
   console.log(`
 用法:
   openyida asset status [--offline] [--json]
-  openyida asset verify-url <url> [<url> ...] [--min-bytes N] [--timeout ms] [--json]
   openyida asset resolve --hero <路径或URL> [--product <路径或URL> ...] [--require-hero] [--upload-assets] [--offline] [--json]
   openyida asset generate [--json]
 
 子命令:
   status       检测当前素材能力：是否配置 CDN、是否可生成、推荐素材策略
-  verify-url   校验公开图片 URL 是否真实可达且确为图片（HEAD/GET，跟随重定向）
   resolve      把本地/外链素材解析为稳定 URL 并回填，输出 materialStatus(final|draft|none) 与缺口
   generate     输出素材来源引导（免费可商用素材库清单 + 使用纪律，供智能体检索真实图片）
 
 说明:
   openyida 无内置文生图能力；图片应由智能体自行生成或到免费素材库检索，
-  再经 verify-url 校验、（有 CDN 时）resolve 转存 CDN 后回填 spec。
+  再通过 resolve 解析，并在配置 CDN 时转存后回填 spec。
 `);
 }
 
 function parseArgs(args) {
   const parsed = {
     subCommand: args[0],
-    urls: [],
     hero: '',
     products: [],
     requireHero: false,
     offline: false,
     uploadAssets: false,
-    minBytes: 0,
     timeout: 0,
     json: false,
     help: false,
@@ -78,12 +72,8 @@ function parseArgs(args) {
     } else if (arg === '--product') {
       const v = args[++i];
       if (v) {parsed.products.push(v);}
-    } else if (arg === '--min-bytes') {
-      parsed.minBytes = parseInt(args[++i], 10) || 0;
     } else if (arg === '--timeout') {
       parsed.timeout = parseInt(args[++i], 10) || 0;
-    } else if (!arg.startsWith('--')) {
-      parsed.urls.push(arg);
     }
   }
 
@@ -109,39 +99,6 @@ function runStatus(options) {
   status.reasons.forEach((r) => console.log('  - ' + r));
 }
 
-async function runVerifyUrl(options) {
-  if (!options.urls.length) {
-    throwCommandError('错误：请至少提供一个图片 URL。用法：openyida asset verify-url <url> [<url> ...]', {
-      code: 'ASSET_VERIFY_URL_INVALID_ARGUMENTS',
-    });
-  }
-  const results = await verifyImageUrls(options.urls, {
-    minBytes: options.minBytes,
-    timeout: options.timeout || undefined,
-  });
-  if (options.json) {
-    console.log(JSON.stringify(results, null, 2));
-    return;
-  }
-  let allOk = true;
-  results.forEach((r) => {
-    if (!r.ok) {allOk = false;}
-    console.log((r.ok ? '[OK]  ' : '[FAIL]') + ' ' + r.url);
-    console.log(
-      '       status=' + r.status +
-      ' type=' + (r.contentType || '-') +
-      ' bytes=' + (r.bytes || '-') +
-      ' reason=' + r.reason
-    );
-  });
-  if (!allOk) {
-    throwCommandError('图片 URL 校验失败', {
-      code: 'ASSET_VERIFY_URL_FAILED',
-      details: { results },
-    });
-  }
-}
-
 async function runResolve(options) {
   const assets = {
     heroImage: options.hero,
@@ -210,9 +167,6 @@ async function run(args) {
     case 'status':
       runStatus(options);
       break;
-    case 'verify-url':
-      await runVerifyUrl(options);
-      break;
     case 'resolve':
       await runResolve(options);
       break;

package/lib/asset/asset-resolve.js

@@ -11,10 +11,8 @@
  *   - 本地文件（存在于磁盘）：
  *       · 有 CDN → 转存 CDN，替换为稳定 CDN URL（source: cdn）；
  *       · 无 CDN → 无法交付浏览器可访问的稳定 URL → 记为缺口。
- *   - http(s) 外链：
- *       · 经 url-verify 校验可达且为图片 → 保留（source: verified-external）；
- *         若有 CDN 且 options.mirror=true，可后续扩展为镜像转存；
- *       · 校验失败 → 记为缺口（绝不带病写进页面）。
+ *   - http(s) 外链：由 resolve 流程确认可用后保留（source: external）；
+ *     有 CDN 且 options.mirror=true 时镜像转存；不可用时记为缺口。
  *   - 空 / 占位：记为对应槽位缺口。
  *
  * materialStatus：
@@ -116,7 +114,7 @@ async function resolveOne(candidate, ctx) {
     return { resolved: false, url: '', source: 'empty', reason: 'EMPTY' };
   }
 
-  // 外链 URL：先校验可达且为图片
+  // 外链素材：由 resolve 流程统一确认并按需镜像
   if (isHttpUrl(raw)) {
     const v = await (ctx.verifyFn || verifyImageUrl)(raw, { timeout: ctx.timeout });
     if (v.ok) {
@@ -148,11 +146,11 @@ async function resolveOne(candidate, ctx) {
       return {
         resolved: true,
         url: v.finalUrl || raw,
-        source: 'verified-external',
+        source: 'external',
         reason: 'OK',
       };
     }
-    return { resolved: false, url: raw, source: 'external', reason: v.reason || 'VERIFY_FAILED' };
+    return { resolved: false, url: raw, source: 'external', reason: v.reason || 'ASSET_UNAVAILABLE' };
   }
 
   // 本地文件：需要 CDN 才能转存为浏览器可访问的稳定 URL
@@ -184,7 +182,7 @@ async function resolveOne(candidate, ctx) {
     }
   }
 
-  // 既不是可达 URL 也不是磁盘文件 → 视为未落地的占位引用
+  // 既不是外链也不是磁盘文件 → 视为未落地的占位引用
   return { resolved: false, url: raw, source: 'unknown', reason: 'NOT_FOUND' };
 }
 
@@ -193,8 +191,8 @@ async function resolveOne(candidate, ctx) {
  * @param {object} assets { heroImage, heroImageAlt, productImages, materialStrategy }
  * @param {object} [options]
  * @param {boolean} [options.requireHero] 页面是否必须有 Hero 图（官网/落地页通常 true）
- * @param {boolean} [options.online] 是否可联网校验外链（默认 true）
- * @param {number}  [options.timeout] 单个 URL 校验超时
+ * @param {boolean} [options.online] 是否可联网处理外链（默认 true）
+ * @param {number}  [options.timeout] 单个外链处理超时
  * @param {function} [options.uploadFn] 自定义上传函数（默认懒加载 cdn-upload.performUpload）
  * @returns {Promise<{
  *   assets: object,

package/lib/asset/asset-status.js

@@ -20,19 +20,19 @@ const { detectImageGenerator } = require('./ai-image');
 /**
  * 素材策略枚举
  * - cdn-upload      : 有 CDN，可把本地/生成的图片转存为稳定 CDN URL
- * - verified-url    : 无 CDN，但可使用「已验证可达」的公开图片 URL
+ * - external-url    : 无 CDN，外链素材由 asset resolve 统一处理
  * - low-fidelity    : 既无 CDN 也无可用素材 → 只能交付低保真草稿并标注素材缺口
  */
 const STRATEGY = {
   CDN_UPLOAD: 'cdn-upload',
-  VERIFIED_URL: 'verified-url',
+  EXTERNAL_URL: 'external-url',
   LOW_FIDELITY: 'low-fidelity-draft',
 };
 
 /**
  * 检测当前素材能力
  * @param {object} [options]
- * @param {boolean} [options.online] 是否可联网（用于是否允许 verified-url 策略）
+ * @param {boolean} [options.online] 是否可联网（用于是否允许处理外链素材）
  * @returns {{
  *   cdnConfigured: boolean,
  *   canUpload: boolean,
@@ -43,7 +43,7 @@ const STRATEGY = {
  * }}
  */
 function getAssetStatus(options = {}) {
-  const online = options.online !== false; // 默认认为可联网校验公开 URL
+  const online = options.online !== false; // 默认认为可联网处理外链素材
   const config = loadCdnConfig();
   const { valid, missing } = validateCdnConfig(config);
 
@@ -55,12 +55,12 @@ function getAssetStatus(options = {}) {
     recommendedStrategy = STRATEGY.CDN_UPLOAD;
     reasons.push('CDN 已配置：本地或 AI 生成图片可转存为稳定 CDN URL 并回填 spec。');
   } else if (online) {
-    recommendedStrategy = STRATEGY.VERIFIED_URL;
-    reasons.push('未配置 CDN：只能使用已通过 verify-url 校验的公开图片 URL，或交付草稿。');
+    recommendedStrategy = STRATEGY.EXTERNAL_URL;
+    reasons.push('未配置 CDN：外链素材交给 `openyida asset resolve` 统一处理，或交付草稿。');
     reasons.push('缺失 CDN 字段：' + (missing.join(', ') || '(未知)') + '，运行 `openyida cdn-config` 可开启上传能力。');
   } else {
     recommendedStrategy = STRATEGY.LOW_FIDELITY;
-    reasons.push('未配置 CDN 且无法联网校验素材：只能交付低保真草稿并标注素材缺口。');
+    reasons.push('未配置 CDN 且无法处理外链素材：只能交付低保真草稿并标注素材缺口。');
   }
 
   if (!generator.available) {

package/lib/core/agent-capabilities.js

@@ -142,6 +142,7 @@ const BUILDER_CORE_COMMAND_IDS = Object.freeze([
   'save-permission',
   'create-app',
   'create-form.create',
+  'create-form.icons',
   'create-page',
   'publish',
 ]);
@@ -159,6 +160,8 @@ function commandBriefs(manifest, commandIds) {
       permission_mode: entry.permission && entry.permission.mode,
       side_effect_kind: entry.side_effect && entry.side_effect.kind,
       examples: entry.examples || [],
+      args: entry.args || [],
+      canonical: entry.canonical || null,
     }));
 }
 
@@ -443,6 +446,37 @@ function compactBuilderPath(builderPath) {
   };
 }
 
+function buildFullAppArtifactRoute(manifest) {
+  const workflow = manifest.summary.core_workflows.full_app_build;
+  return {
+    orchestrator_skill_id: workflow.orchestrator_skill_id,
+    requirement_analysis_skill_id: workflow.requirement_analysis_skill_id,
+    requirement_brief_path: workflow.requirement_brief_path,
+    artifact_generation: workflow.artifact_generation,
+  };
+}
+
+function buildApplicationEntryPolicy(builderPath, env = process.env) {
+  const runtime = builderPath.runtime || {};
+  const managedRuntime = String(env.OPENYIDA_MANAGED_RUNTIME || '').trim().toLowerCase();
+  const managedCloudAgent = managedRuntime === 'cloud' ||
+    runtime.runtime === 'web_sandbox' ||
+    runtime.tool === 'mulerun';
+
+  return {
+    schema_version: 1,
+    environment: managedCloudAgent ? 'managed_cloud_agent' : 'non_cloud_agent',
+    delivery_unit: 'single_application_entry_group',
+    resource_delivery: 'summary_only',
+    internal_artifact_delivery: 'never',
+    entries: {
+      workbench: 'always',
+      custom: 'when_entry_mode_standalone_and_is_render_nav_false_readback',
+      admin: managedCloudAgent ? 'omit' : 'include',
+    },
+  };
+}
+
 function canonicalize(value) {
   if (Array.isArray(value)) {
     return value.map(canonicalize);
@@ -484,6 +518,8 @@ function buildCommandManifestDigest(manifest) {
       side_effect_kind: entry.side_effect && entry.side_effect.kind,
       permission_mode: entry.permission && entry.permission.mode,
       permission_effect: entry.permission && entry.permission.effect,
+      args: entry.args || [],
+      canonical: entry.canonical || null,
     })),
   };
 
@@ -509,6 +545,7 @@ function buildAgentCapabilitiesSummary() {
   const builderPath = compactBuilderPath(
     buildBuilderPath(loginStatus, projectRoot, manifest, process.env, runtime)
   );
+  const applicationEntryPolicy = buildApplicationEntryPolicy(builderPath, process.env);
 
   return {
     schema_version: 1,
@@ -527,6 +564,8 @@ function buildAgentCapabilitiesSummary() {
     command_manifest_digest_algorithm: 'sha256',
     command_count: manifest.summary.command_count,
     full_capabilities_command: 'openyida agent-capabilities --json',
+    full_app_artifact_route: buildFullAppArtifactRoute(manifest),
+    application_entry_policy: applicationEntryPolicy,
     runtime,
     builder_path: builderPath,
   };
@@ -546,6 +585,7 @@ function buildAgentCapabilities() {
   const loginStatus = redactLogin(getAuthStatus({ projectRoot, includeSecrets: false }));
   const runtime = buildRuntimeSnapshot(projectRoot);
   const builderPath = buildBuilderPath(loginStatus, projectRoot, manifest, process.env, runtime);
+  const applicationEntryPolicy = buildApplicationEntryPolicy(builderPath, process.env);
 
   return {
     schema_version: 1,
@@ -559,6 +599,7 @@ function buildAgentCapabilities() {
     active: envSnapshot.active,
     runtime,
     login: loginStatus,
+    application_entry_policy: applicationEntryPolicy,
     recommended: {
       preflight_command: 'openyida agent-capabilities --summary-json',
       full_capabilities_command: 'openyida agent-capabilities --json',
@@ -602,7 +643,7 @@ function buildAgentCapabilities() {
       ],
       retry_policy: 'Do not repeat the same failed command without changing login state, organization, parameters, files, or field IDs.',
       completion_contracts: {
-        full_app: 'Default full-app build is complete after creating or reusing the app, core forms, primary page, publishing it, and returning access URLs. If three or more resources/links are returned, present them in a Markdown table with type, purpose/name, URL, and status.',
+        full_app: 'Default full-app build is complete after creating or reusing the app, core forms, primary page, publishing it, and returning one named application entry group. Summarize business resources in prose; do not deliver one artifact or link card per resource.',
       },
       full_app_data_contract: 'Default full-app page code must not call this.dataSourceMap.* unless the same run created and bound a designer data source; use this.utils.yida.* or an entry-only page by default.',
     },
@@ -633,6 +674,7 @@ async function run(args = []) {
 module.exports = {
   buildAgentCapabilities,
   buildAgentCapabilitiesSummary,
+  buildApplicationEntryPolicy,
   compactBuilderPath,
   buildCommandManifestDigest,
   run,

package/lib/core/cli-error.js

@@ -50,6 +50,10 @@ function toErrorPayload(error) {
         'deleted',
         'alreadyAbsent',
         'mutationAccepted',
+        'mutationPerformed',
+        'changed',
+        'alreadyApplied',
+        'recoveredByReadback',
         'readbackVerified',
         'status',
       ].forEach((key) => {
@@ -86,7 +90,8 @@ function shouldUseStructuredErrorOutput(error, args = []) {
     && details.retrySafe === false
     && details.sideEffectState === 'unknown'
   );
-  return ownedPartial || mutationOutcomeUnknown;
+  const navigationOrderFailure = /^NAV_ORDER_/.test(error.code || '');
+  return ownedPartial || mutationOutcomeUnknown || navigationOrderFailure;
 }
 
 module.exports = {

package/lib/core/command-contract.js

@@ -163,10 +163,19 @@ function quoteDisplayArg(value, force) {
 
 function normalizeEntryArgs(entry) {
   return (entry.args || [])
+    .filter(arg => arg.source !== 'option')
     .slice()
     .sort((left, right) => (left.position || 0) - (right.position || 0));
 }
 
+function normalizeEntryOptions(entry) {
+  return (entry.args || []).filter(arg => arg.source === 'option');
+}
+
+function primaryBuilderOption(arg) {
+  return (arg.builder_options || [])[0] || `--${optionNameToken(arg.name)}`;
+}
+
 function getCreateFormCreateCanonical(entry = getCreateFormCreateEntry()) {
   return cloneJson(entry.canonical, null);
 }
@@ -193,9 +202,25 @@ function getArgPlaceholder(entry, arg) {
 
 function buildCreateFormCreateCommand(params = {}, entry = getCreateFormCreateEntry()) {
   const args = normalizeEntryArgs(entry);
+  const optionArgv = [];
+  const optionDisplay = [];
+  normalizeEntryOptions(entry).forEach(arg => {
+    const value = params[arg.name];
+    if (value === undefined || value === null || value === false || value === '') {
+      return;
+    }
+    const option = primaryBuilderOption(arg);
+    optionArgv.push(option);
+    optionDisplay.push(option);
+    if (arg.type !== 'boolean') {
+      optionArgv.push(String(value));
+      optionDisplay.push(quoteDisplayArg(value, false));
+    }
+  });
   const argv = [
     ...canonicalPath(entry),
     ...args.map(arg => String(params[arg.name] || getArgPlaceholder(entry, arg))),
+    ...optionArgv,
   ];
   return {
     argv,
@@ -203,6 +228,7 @@ function buildCreateFormCreateCommand(params = {}, entry = getCreateFormCreateEn
       'openyida',
       ...canonicalPath(entry),
       ...args.map(arg => quoteDisplayArg(params[arg.name] || getArgPlaceholder(entry, arg), !!arg.display_quote)),
+      ...optionDisplay,
     ].join(' '),
   };
 }
@@ -317,11 +343,12 @@ function detectDeprecatedCreateFormInvocation(argv = [], options = {}) {
 function validateCreateFormCreateInvocation(tokens, entry = getCreateFormCreateEntry()) {
   const path = canonicalPath(entry);
   const args = normalizeEntryArgs(entry);
+  const parsed = parseOptionArgs(tokens.slice(path.length));
   const params = {};
   const missing = [];
 
   args.forEach(arg => {
-    const value = tokens[path.length + (arg.position || 0)];
+    const value = parsed.positionals[arg.position || 0];
     if (value) {
       params[arg.name] = value;
     } else if (arg.required) {
@@ -329,6 +356,13 @@ function validateCreateFormCreateInvocation(tokens, entry = getCreateFormCreateE
     }
   });
 
+  normalizeEntryOptions(entry).forEach(arg => {
+    const source = readParam(parsed, arg, undefined);
+    if (source.value !== undefined) {
+      params[arg.name] = source.value;
+    }
+  });
+
   if (missing.length === 0) {
     const command = buildCreateFormCreateCommand(params, entry);
     return {
@@ -417,6 +451,13 @@ function buildCreateFormCreateFromArgs(args = [], entry = getCreateFormCreateEnt
     }
   });
 
+  normalizeEntryOptions(entry).forEach(arg => {
+    const source = readParam(parsed, arg, undefined);
+    if (source.value !== undefined) {
+      params[arg.name] = source.value;
+    }
+  });
+
   if (missing.length > 0) {
     return {
       ok: false,

package/lib/core/command-manifest.js

@@ -365,6 +365,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
     'agent-capabilities',
     'check-page',
     'commands',
+    'create-form.icons',
     'create-form.validate-fields',
     'dingtalk-link',
     'formula.evaluate',
@@ -418,7 +419,7 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['asset', sideEffect('mixed', {
     mutates_yida: false,
     mutates_local: true,
-    read_actions: ['status', 'verify-url', 'generate', 'resolve'],
+    read_actions: ['status', 'generate', 'resolve'],
     mutating_actions: ['resolve --upload-assets', 'resolve --mirror-external'],
   })],
 
@@ -626,6 +627,7 @@ const COMMAND_PERMISSIONS = new Map([
     'connector.list',
     'connector.list-actions',
     'connector.list-connections',
+    'create-form.icons',
     'create-form.validate-fields',
     'dingtalk-link',
     'dws.contact-user-search',
@@ -1051,7 +1053,7 @@ const COMMAND_GROUPS = [
     id: 'form',
     titleKey: 'help.group_form',
     commands: [
-      command('create-form.create', ['create-form', 'create'], 'create-form create <appType> "<formTitle>" <fieldsJsonFile> [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_form', {
+      command('create-form.create', ['create-form', 'create'], 'create-form create <appType> "<formTitle>" <fieldsJsonFile> [--icon auto|<iconName>] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_form', {
         args: [
           {
             name: 'appType',
@@ -1082,13 +1084,23 @@ const COMMAND_GROUPS = [
             inline_json_rejected_options: ['--fields'],
             description: 'Path to a local JSON file containing field definitions.',
           },
+          {
+            name: 'icon',
+            type: 'string',
+            required: false,
+            source: 'option',
+            builder_options: ['--icon'],
+            default: 'auto',
+            value_catalog_command_id: 'create-form.icons',
+            description: 'Form navigation icon name. Use auto for semantic selection or run create-form.icons for supported values.',
+          },
         ],
         canonical: {
           command_id: 'create-form.create',
           path: ['create-form', 'create'],
           argv_template: ['create-form', 'create', '<appType>', '<formTitle>', '<fieldsJsonFile>'],
           display: 'openyida create-form create <appType> "<formTitle>" <fieldsJsonFile>',
-          builder: 'openyida commands build create-form.create --app-type <appType> --form-title "<formTitle>" --fields-json-file <fieldsJsonFile> --json',
+          builder: 'openyida commands build create-form.create --app-type <appType> --form-title "<formTitle>" --fields-json-file <fieldsJsonFile> [--icon <iconName>] --json',
         },
         deprecatedPatterns: [
           {
@@ -1118,9 +1130,32 @@ const COMMAND_GROUPS = [
         ],
         examples: [
           'openyida create-form create APP_XXX "访客登记" .cache/openyida/visitor/fields.json',
+          'openyida create-form create APP_XXX "访客登记" .cache/openyida/visitor/fields.json --icon name-card',
           'openyida commands build create-form.create --app-type APP_XXX --form-title "访客登记" --fields-json-file .cache/openyida/visitor/fields.json --json',
         ],
       }),
+      command('create-form.icons', ['create-form', 'icons'], 'create-form icons [--json]', 'help.cmd_list_form_icons', {
+        requiresLogin: false,
+        output: 'json',
+        args: [
+          {
+            name: 'json',
+            type: 'boolean',
+            required: false,
+            source: 'option',
+            builder_options: ['--json'],
+            default: false,
+            description: 'Pretty-print the icon catalog as JSON.',
+          },
+        ],
+        canonical: {
+          command_id: 'create-form.icons',
+          path: ['create-form', 'icons'],
+          argv_template: ['create-form', 'icons', '[--json]'],
+          display: 'openyida create-form icons [--json]',
+        },
+        examples: ['openyida create-form icons --json'],
+      }),
       command('create-form.validate-fields', ['create-form', 'validate-fields'], 'create-form validate-fields <fieldsJsonOrFile> [--json]', 'help.cmd_validate_form', {
         requiresLogin: false,
       }),
@@ -1321,7 +1356,7 @@ const COMMAND_GROUPS = [
       command('ai', ['ai'], 'ai <text|image> [options]', 'help.cmd_ai', {
         output: 'text|json',
       }),
-      command('asset', ['asset'], 'asset <status|verify-url|resolve|generate> [options]', 'help.cmd_asset', {
+      command('asset', ['asset'], 'asset <status|resolve|generate> [options]', 'help.cmd_asset', {
         requiresLogin: false,
         output: 'text|json',
       }),
@@ -1421,17 +1456,44 @@ function summarizeLocalizedCommands(commands) {
     core_workflows: {
       full_app_build: {
         mode: 'unified_build',
+        orchestrator_skill_id: 'yida-app',
         trigger_phrases: ['默认方案', '不要追问', '直接创建', '尽快搭建'],
-        default_form_visual_guidance_skill_id: 'yida-form-detail',
         default_page_skill_id: 'yida-canvas-custom-page',
         default_ui_guidance_skill_id: 'yida-design',
+        requirement_analysis_skill_id: 'yida-requirement-analysis',
+        requirement_brief_path: '.cache/openyida/<project>/requirement-brief.json',
+        artifact_generation: {
+          mode: 'parallel',
+          audience: 'internal',
+          user_visible_delivery: false,
+          tasks: [
+            { skill_id: 'yida-prd', output_path: 'prd/<project>/prd.md' },
+            { skill_id: 'yida-design', output_path: 'prd/<project>/design.md' },
+          ],
+          join_owner_skill_id: 'yida-app',
+        },
         ordinary_jsx_skill_id: 'yida-custom-page',
-        form_visual_guidance_policy: 'Default form page development loads yida-form-detail as form visual guidance and merges Divider semantic grouping into field JSON. The runtime loads the same application custom theme CSS file in custom pages, forms, submissions, formDetail pages, and FormOpenContainer iframes so all contexts use aligned theme variables.',
+        form_page_policy: 'Use yida-create-form-page for form structure. Never inject CSS, JavaScript, HTML, or theme code into native forms or formDetail pages; the platform renders those pages.',
         page_skill_policy: 'Use YidaCodeCanvas by default for new primary custom pages. Choose yida-custom-page only when the current target has been identified as existing .oyd.jsx/.oyb.jsx/renderJsx/platform Jsx component maintenance; do not switch to yida-custom-page merely because a page needs data, forms, uploads, this.utils.yida.*, or dataSourceMap-like capabilities.',
-        product_design_policy: 'Full app creation first resolves resource context, then uses yida-design for requirement analysis and product design before creating or filling missing app/form/process/page resources. yida-design outputs prd/<project>/prd.md with app information, app configuration, data structures, page functions, business rules, interaction states, resource blueprint, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it outputs prd/<project>/design.md with theme tokens, app custom theme CSS delivery, themeColor/navTheme, visual DNA, layout density, rounded rules, scene recipes, component rules, state rules, and visual acceptance checks.',
-        ui_guidance_policy: 'Default full-app primary page creation consumes yida-design prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, and business-specific checks; it consumes design.md for theme system, visual states, visualScaffold, surface material, rounded rules, density rules, components, and state styling. prd.md and design.md are the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by regenerating the spec from prd.md/design.md. Demo data, screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
-        default_nav_order_policy: 'After the primary page is successfully published, immediately run a lightweight navigation order update. If the PRD names a navigation order, call openyida nav-group order <appType> <items...>. If the PRD only gives broad groups or is missing navigation order, use openyida publish ... --auto-nav-order or openyida nav-group auto-order <appType> as a fallback with portal/home/workbench entry > business handling > data management > business analytics > system configuration.',
-        final_link_policy: 'Return exactly one primary user-facing link. For single-page create/update/publish intent, return the current page URL. For full app, form, process, permission, theme, navigation, or batch-resource work, return the app workbench URL: {base_url}/{appType}/workbench. Summarize other resources by type/name/ID/status only; do not output static asset, CDN build, locale JSON, admin, config, schema, or intermediate-file URLs unless explicitly requested.',
+        product_design_policy: 'Full app creation first resolves resource context. yida-requirement-analysis writes one shared requirement brief. yida-prd and yida-design start in parallel from that brief and own prd/<project>/prd.md and prd/<project>/design.md independently; neither waits for or overwrites the other. yida-app joins both artifacts, validates their references, and only then creates or fills missing app/form/process/page resources.',
+        ui_guidance_policy: 'Page implementation consumes yida-prd prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, business-specific checks, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it consumes yida-design design.md for app custom theme CSS delivery, themeColor/navTheme, visual states, visualScaffold, surface material, rounded rules, density rules, components, and state styling. prd.md and design.md are the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by sending business conflicts to yida-prd and visual conflicts to yida-design before regenerating the spec. Demo data, screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
+        default_nav_order_policy: 'After the primary page is successfully published, perform exactly one navigation order operation. If the PRD names a navigation order, publish without --auto-nav-order and then call openyida nav-group order <appType> <items...>. If the PRD only gives broad groups or is missing navigation order, use openyida publish ... --auto-nav-order and do not call nav-group order or auto-order afterward. Explicit and automatic ordering are mutually exclusive; never generate per-item move loops. The fallback priority is portal/home/workbench entry > business handling > data management > business analytics > system configuration.',
+        final_link_policy: 'Return exactly one user-visible application entry group, never one artifact or link card per form, process, report, schema, manifest, PRD, design file, or intermediate artifact. The group always contains the app workbench URL. Add the clean custom page URL only when PRD entryMode=standalone and get-form-config readback confirms isRenderNav=false. Add the admin URL only when agent-capabilities application_entry_policy.entries.admin=include. Summarize other business resources in prose unless the user explicitly asks for technical IDs.',
+        application_entry_policy: {
+          delivery_unit: 'single_application_entry_group',
+          workbench: { include: 'always', url: '{base_url}/{appType}/workbench' },
+          custom: {
+            include: 'when_entry_mode_standalone_and_is_render_nav_false_readback',
+            url: '{base_url}/{appType}/custom/{formUuid}',
+          },
+          admin: {
+            include: 'follow_agent_capabilities_application_entry_policy',
+            url: '{base_url}/{appType}/admin',
+          },
+          internal_artifacts: 'never_user_visible',
+          business_resources: 'summary_only',
+        },
+        conditional_entry_command_ids: ['update-form-config', 'get-form-config'],
         required_command_ids: [
           'agent-capabilities',
           'create-app',
@@ -1461,7 +1523,7 @@ function summarizeLocalizedCommands(commands) {
           'yida-data-management',
           'yida-dashboard',
         ],
-        completion_contract: 'Resolve context, write the yida-design PRD, create or reuse app, core forms/processes, and primary page in PRD resource order, publish it, apply PRD navigation order or lightweight fallback navigation order, and return access URLs. If three or more resources/links are returned, present them in a Markdown table with type, purpose/name, URL, and status.',
+        completion_contract: 'Resolve context, write the shared requirement brief, complete and join the internal parallel yida-prd and yida-design artifacts, create or reuse app, core forms/processes, and primary page in PRD resource order, publish it, apply PRD navigation order or lightweight fallback navigation order, and return one named application entry group. The group contains workbench, conditionally a verified standalone custom entry, and admin only for non-cloud agents. Business resources are summarized instead of emitted as individual delivery artifacts.',
       },
     },
   };

package/lib/core/locales/en.js

@@ -32,6 +32,7 @@ module.exports = {
     cmd_import: 'Import migration package, rebuild app',
     group_form: 'Forms & Pages',
     cmd_create_form: 'Create a form page',
+    cmd_list_form_icons: 'List available form navigation icons',
     cmd_validate_form: 'Validate form field JSON locally',
     cmd_update_form: 'Update a form page',
     cmd_list_forms: 'List forms/pages in an app',
@@ -112,7 +113,7 @@ module.exports = {
     cmd_batch: 'Run OpenYida commands in batch',
     cmd_flash_to_prd: 'Convert flash notes or meeting notes to a PRD prompt',
     cmd_ai: 'Call Yida AI text and image recognition APIs',
-    cmd_asset: 'Detect asset capability / verify image URLs / resolve materials',
+    cmd_asset: 'Detect asset capability / resolve materials',
     cmd_cdn: 'CDN image management (config/upload/refresh)',
     cmd_cdn_config: 'Configure CDN / OSS upload',
     cmd_cdn_upload: 'Upload image to CDN',
@@ -1848,6 +1849,8 @@ Options:
 };
 
 Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
+  association_derived_field_read_only: 'Derived association-form query field {0} is read-only and cannot be saved or updated. Write the source association field without the _id suffix.',
+  association_value_invalid: 'The write value for association-form field {0} is invalid. Use an array of objects where every item includes appType, formUuid, formType, instanceId, and title.',
   command_unsupported: 'Unsupported data command: {0} {1}. Run openyida commands --json to inspect the actual capability.',
   delete_confirmation_required: 'Before deleting a form instance, query it, show the target summary to the user, and add --confirm only after explicit approval. No delete was performed.',
   delete_preflight_failed: 'Could not read form instance {0} for delete preflight. No delete was performed.',
@@ -1856,6 +1859,7 @@ Object.assign(module.exports.query_data || (module.exports.query_data = {}), {
   delete_result_unknown: 'The delete outcome for form instance {0} is unknown. Perform read-only inspection and do not retry the delete automatically.',
   delete_target_mismatch: 'Form instance {0} does not belong to target form {1}. The operation stopped before delete.',
   delete_target_unverified: 'Could not verify the identity and ownership of form instance {0}. The operation stopped before delete.',
+  field_reference_unknown: 'Field reference {0} is not a real fieldId or component alias in the target form. The operation stopped before mutation.',
   form_mode_unverified: 'Could not verify the type of form {0}. Creation stopped before any data write.',
   instance_target_mismatch: 'Instance {0} does not belong to expected business resource {1}. The operation stopped before mutation.',
   instance_target_unverified: 'Could not verify the business resource ownership of instance {0}. The operation stopped before mutation.',