openyida 2026.9.21 → 2026.9.22-beta.1

package/lib/core/command-manifest.js

@@ -1,11 +1,5 @@
 'use strict';
 
-const { getMaterialSourcingGuidance } = require('../asset/ai-image');
-const { getVisualDecisionPolicy } = require('../design-plan/visual-policy');
-const { getPageNavigationContract } = require('../design-plan/navigation-policy');
-const { ENTRY_MODES } = require('../design-plan/entry-navigation');
-const { DIVIDER_TYPES, DEFAULT_DIVIDER_TYPE } = require('../app/form-field-validator');
-
 const SIDE_EFFECT_BASES = Object.freeze({
   local_read: Object.freeze({
     kind: 'local_read',
@@ -370,13 +364,11 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['create-form.batch', sideEffect('remote_write', { mutates_local: true })],
   ...sideEffectEntries([
     'agent-capabilities',
-    'check-design',
     'check-page',
     'commands',
     'create-form.icons',
     'create-form.validate-fields',
     'dingtalk-link',
-    'design-plan.catalog',
     'formula.evaluate',
     'integration.diagnose',
   ], sideEffect('local_read')),
@@ -515,8 +507,8 @@ const COMMAND_SIDE_EFFECTS = new Map([
   ['auth', sideEffect('mixed', {
     mutates_yida: false,
     mutates_local: true,
-    read_actions: ['status', 'profiles', 'profile list'],
-    mutating_actions: ['login', 'refresh', 'logout', 'profile switch'],
+    read_actions: ['status', 'profiles'],
+    mutating_actions: ['login', 'sync-dws', 'refresh', 'logout', 'profile switch'],
   })],
   ['batch', sideEffect('mixed', {
     mutates_yida: true,
@@ -634,7 +626,6 @@ const COMMAND_PERMISSIONS = new Map([
   ...permissionEntries([
     'agent-capabilities',
     'app-list',
-    'check-design',
     'check-prd-completeness',
     'check-page',
     'commands',
@@ -645,7 +636,6 @@ const COMMAND_PERMISSIONS = new Map([
     'create-form.icons',
     'create-form.validate-fields',
     'dingtalk-link',
-    'design-plan.catalog',
     'dws.contact-user-search',
     'formula.evaluate',
     'get-form-config',
@@ -798,7 +788,7 @@ const COMMAND_PERMISSIONS = new Map([
   ...permissionEntries([
     'auth',
   ], actionDependentPermission({
-    preauthorized_actions: ['login', 'refresh', 'logout', 'profile switch'],
+    preauthorized_actions: ['login', 'sync-dws', 'refresh', 'logout', 'profile switch'],
   })),
 
   ...permissionEntries([
@@ -1017,8 +1007,6 @@ function command(id, path, usage, descriptionKey, options = {}) {
     deprecatedPatterns: cloneJsonMetadata(options.deprecatedPatterns, []),
     repairPatterns: cloneJsonMetadata(options.repairPatterns, []),
     examples: cloneJsonMetadata(options.examples, []),
-    notes: cloneJsonMetadata(options.notes, []),
-    noteKeys: cloneJsonMetadata(options.noteKeys, []),
     hidden: options.hidden === true,
     sideEffect: cloneSideEffect(commandSideEffect),
     permission: clonePermission(normalizedPermission),
@@ -1035,7 +1023,7 @@ const COMMAND_GROUPS = [
         output: 'json',
       }),
       command('logout', ['logout'], 'logout', 'help.cmd_logout', { requiresLogin: false }),
-      command('auth', ['auth'], 'auth <status|login|refresh|logout|profiles|profile switch>', 'help.cmd_auth', { requiresLogin: false }),
+      command('auth', ['auth'], 'auth <status|login|sync-dws|refresh|logout|profiles|profile switch>', 'help.cmd_auth', { requiresLogin: false }),
       command('org', ['org'], 'org <list|switch> [--json] [--corp-id <corpId>]', 'help.cmd_org'),
       command('env', ['env'], 'env [--json|setup|list|show|switch|add|remove] [options]', 'help.cmd_env', {
         requiresLogin: false,
@@ -1047,24 +1035,14 @@ const COMMAND_GROUPS = [
     id: 'app',
     titleKey: 'help.group_app',
     commands: [
-      command('app-list', ['app-list'], 'app-list [--type managed|created] [--page N] [--size N]', 'help.cmd_app_list', {
-        notes: ['Successful results include appUrl/workbenchUrl for the business workspace and adminUrl for developer administration. Complete application delivery retains adminUrl regardless of auth runtime; route construction does not verify recipient access. Preserve the frontend URL from its own page result.'],
-      }),
+      command('app-list', ['app-list'], 'app-list [--type managed|created] [--page N] [--size N]', 'help.cmd_app_list'),
       command('corp-efficiency', ['corp-efficiency'], 'corp-efficiency [overview|details|detail|groups|notify] [options] [--open|--no-open]', 'help.cmd_corp_efficiency', {
         output: 'json',
       }),
-      command('create-app', ['create-app'], 'create-app "<name>"|--name <name> [options] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_app', {
-        notes: ['Successful results include appUrl/workbenchUrl for the business workspace and adminUrl for developer administration. Complete application delivery retains adminUrl regardless of auth runtime; route construction does not verify recipient access. Preserve the frontend URL from its own page result.'],
-      }),
-      command('design-plan.catalog', ['design-plan', 'catalog'], 'design-plan catalog [--json]', 'help.cmd_design_plan_catalog', {
-        requiresLogin: false, output: 'json',
-        args: [{ name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] }],
-        notes: ['Read available theme IDs and page patterns before init when the theme mapping is unknown. Theme summaries describe deep/light navigation and deep/light content in natural language; they do not expose navTheme/contentTheme assignment syntax. Reuse this result for the current planning session.'],
-      }),
+      command('create-app', ['create-app'], 'create-app "<name>"|--name <name> [options] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_app'),
       command('design-plan.init', ['design-plan', 'init'], 'design-plan init <requirement-brief.json> [--theme-id <id>] [--output-dir <dir>] [--json]', 'help.cmd_design_plan_init', {
         requiresLogin: false,
         output: 'text|json',
-        notes: ['Requires a selected theme from --theme-id or visualSelection.themeId. There is no navigation-tone argument: init reads navTheme from the selected theme template, overwrites stale navigationStyle.tone, and records toneSource=theme_derived. Free creative preserves an explicitly authored navigationStyle.tone and records toneSource=project_defined. Returns preserved business facts, authoring.pendingFields with file/path/message, typed examples in authoring-context.md, and materialize.command with materialize.shell (powershell on Windows, posix elsewhere). Execute the command in that shell. Complete the pending facts, review business coverage, then set ready=true. Author ordered page blocks as {name,purpose}; omitted contentPriority and contentRichness.contentLayers derive from these blocks, preserving explicit overrides. Author project-specific acceptanceCriteria; materialize merges them with resource-based checks. A string visualSelection.colorStrategy is preserved as usage text with primaryColor pending; invalid types fail before files are written. Init guidance is preliminary; materialize still validates the completed plan.'],
         args: [
           { name: 'requirementBrief', type: 'file', required: true, source: 'positional', position: 0, builder_options: ['--requirement-brief'] },
           { name: 'themeId', type: 'string', required: false, source: 'option', builder_options: ['--theme-id'] },
@@ -1081,14 +1059,12 @@ const COMMAND_GROUPS = [
         ],
         notes: ['Updates completed fact modules in preview/ drafts. Modules share a source base; one writer updates changed sections and preserves custom CSS. Final materialize validates the complete plan and writes PRD, design, HTML and theme together.'],
       }),
-      command('design-plan.materialize', ['design-plan', 'materialize'], 'design-plan materialize <build-plan.json> [--from-preview | --business-file <json> --visual-file <json>] [--output-dir <dir>] [--rebase-parts] [--check] [--json]', 'help.cmd_design_plan_materialize', {
-        notes: ['Derives navigationStyle.tone and appConfig.navTheme from the selected theme template. Navigation appearance tokens come directly from that template plus explicit visualStyle.tokens; mode-independent tokens such as --pod-nav-menu-item-selected-shadow flow through the base token contract; materialize does not synthesize a light/dark replacement palette. Free creative uses project-authored navigation tone and tokens. Validates image slots before writing artifacts. JSON assetTasks lists taskKey/taskState, independent searches ordered by required/hero/design order, collection-wide concurrency, host-enforced time budgets, two-round limits, resume policy, output paths and resolve argv. After matching plan confirmation, executionContract requires checking background Agent and Bash separately, dispatching only verified nonblocking tools or doing authorized business work before synchronous asset batches; record real job IDs and continue app/form/page work; replace <appType> with the real ID for upload. Materialized PRD execution pages include navigationPolicy derived from app/page navigation: platform-shell is content-only; standalone without a planned menu renders no application menu. This command performs no search or upload. Local asset inputs resolve against the command cwd; absolute paths survive page-task directory changes.'],
+      command('design-plan.materialize', ['design-plan', 'materialize'], 'design-plan materialize <build-plan.json> [--from-preview | --business-file <json> --visual-file <json>] [--output-dir <dir>] [--check] [--json]', 'help.cmd_design_plan_materialize', {
         requiresLogin: false,
         output: 'text|json',
         args: [
           { name: 'buildPlan', type: 'file', required: true, source: 'positional', position: 0, builder_options: ['--build-plan'] },
           { name: 'fromPreview', type: 'boolean', required: false, source: 'option', builder_options: ['--from-preview'] },
-          { name: 'rebaseParts', type: 'boolean', source: 'option', builder_options: ['--rebase-parts'] },
           { name: 'businessFile', type: 'file', required: false, source: 'option', builder_options: ['--business-file'] },
           { name: 'visualFile', type: 'file', required: false, source: 'option', builder_options: ['--visual-file'] },
           { name: 'outputDir', type: 'string', required: false, source: 'option', builder_options: ['--output-dir'] },
@@ -1097,41 +1073,17 @@ const COMMAND_GROUPS = [
         ],
       }),
       command('design-plan.patch', ['design-plan', 'patch'], 'design-plan patch <build-plan.json> --set <path=value> [--set <path=value> ...] [--materialize] [--output-dir <dir>] [--json]', 'help.cmd_design_plan_patch', {
-        notes: ['Edit the existing plan with one batch of --set assignments; do not restart init or rewrite business.json/visual.json. navigationStyle.tone, navigationStyle.toneSource and execution.appConfig.navTheme are derived and cannot be patched; change the selected theme instead. For free-creative only, navigationStyle.tone is authored and can be patched. With --materialize, update changed PRD/design/HTML sections and theme tokens, preserving unrelated local content and custom CSS. JSON updated lists artifact files actually written. The CLI maintains .build-plan-artifacts.json as the generated baseline; overlapping local edits fail before any writes. Without --materialize, validate and save source facts without rendering HTML or writing artifacts. Unpresented edits keep the draft revision; substantive edits to a presented version advance once and clear approval. Asset materialStatus/missingAssets updates preserve approval.'],
         requiresLogin: false,
         output: 'text|json',
         args: [
           { name: 'buildPlan', type: 'file', required: true, source: 'positional', position: 0, builder_options: ['--build-plan'] },
-          { name: 'set', type: 'string', required: true, source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes. CSS token overrides use visualStyle.tokens.<token>=<value>.' },
+          { name: 'set', type: 'string', required: true, source: 'option', builder_options: ['--set'], repeatable: true, description: 'Field assignment path=value; repeat --set for multiple changes.' },
           { name: 'materialize', type: 'boolean', source: 'option', builder_options: ['--materialize'] },
           { name: 'outputDir', type: 'string', source: 'option', builder_options: ['--output-dir'] },
           { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
         ],
       }),
-      command('update-app', ['update-app'], 'update-app <appType> [--name "..."] [--desc "..."] [--icon <name>] [--icon-color <color>] [--colour <key>] [--theme-color <color>] [--theme-file <css>] [--nav-theme light|dark|white|gray] [--logo-source appIcon|customImage] [--layout side|top|l_shape] [--hide-app-nav|--show-app-nav]', 'help.cmd_update_app', {
-        args: [
-          { name: 'appType', type: 'string', required: true, source: 'positional', position: 0 },
-          { name: 'name', type: 'string', source: 'option', builder_options: ['--name', '-n'] },
-          { name: 'desc', type: 'string', source: 'option', builder_options: ['--desc', '-d'] },
-          { name: 'icon', type: 'string', source: 'option', builder_options: ['--icon'] },
-          { name: 'iconColor', type: 'string', source: 'option', builder_options: ['--icon-color'] },
-          { name: 'colour', type: 'string', source: 'option', builder_options: ['--colour', '--theme'], description: 'Platform theme key or custom; CSS colors belong in themeColor.' },
-          { name: 'themeColor', type: 'string', source: 'option', builder_options: ['--theme-color', '--themeColor'], description: 'App primary color; themeFile supplies the effective color when both are provided.' },
-          { name: 'themeFile', type: 'file', source: 'option', builder_options: ['--theme-file', '--custom-theme-file'], description: 'Completed application theme CSS, not a placeholder authoring bundle. Reads --color-brand1-6, uploads CSS and sets colour=custom. Supports app-theme.css or app_theme.css; use the actual generated path.' },
-          { name: 'navTheme', type: 'string', source: 'option', builder_options: ['--nav-theme', '--navTheme'], description: 'Platform value: light, dark, white or gray. Generated design flows pass the selected template-derived light/dark value explicitly; this option has no implicit light default.' },
-          { name: 'logoSource', type: 'string', source: 'option', builder_options: ['--logo-source', '--logoSource'], description: 'appIcon or customImage; customImage requires an existing homepageLogo.' },
-          { name: 'layoutDirection', type: 'string', source: 'option', builder_options: ['--layout', '--layout-direction', '--layoutDirection'], description: 'side, top or l_shape.' },
-          { name: 'hideAppNav', type: 'boolean', source: 'option', builder_options: ['--hide-app-nav'] },
-          { name: 'showAppNav', type: 'boolean', source: 'option', builder_options: ['--show-app-nav'] },
-        ],
-        notes: [
-          'Upload application CSS with --theme-file; the primary color is read from CSS and saved with the theme resource. Edit navigation radius, three border states and selected shadow in design.md, regenerate CSS, then upload; these tokens are not separate update-app flags. Unknown options, missing values and combined --hide-app-nav/--show-app-nav are rejected.',
-          'One design document and theme CSS cover navigation, application shell, native forms, custom pages and record details. tokens.application-global.appearance.navigation defines navigation surfaces, text and interaction states, logo, groups, search, popups, borders, radius and density. Platform-supported tokens are applied through the active navigation mode; page content consumes the same application theme.',
-          'navigationVerification reads back explicitly requested navTheme, layoutDirection, hideAppNav and logoSource. A mismatch returns APP_NAVIGATION_NOT_PERSISTED and a nonzero exit code; only readback is retried. themeVerification independently verifies the uploaded theme resource. Verify rendered navigation, form, custom page and record detail after both checks pass.',
-          'For generated design artifacts, pass themeProfile.navTheme from design.md to --nav-theme. Do not infer it from the business brief or omit it expecting a light default.',
-          'Platform preset keys are used independently of --theme-file and --theme-color. Choose --hide-app-nav or --show-app-nav to set navigation visibility.',
-        ],
-      }),
+      command('update-app', ['update-app'], 'update-app <appType> [--name "..."] [--theme-file <css>] [--nav-theme light|dark|white|gray] [--logo-source appIcon|customImage] [--layout side|top|l_shape] [--hide-app-nav|--show-app-nav]', 'help.cmd_update_app'),
       command('app-online', ['app-online'], 'app-online <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_online'),
       command('app-offline', ['app-offline'], 'app-offline <appType> [--to-ding-app-center] [--show-app-center]', 'help.cmd_app_offline'),
       command('nav-group', ['nav-group'], 'nav-group <list|create|rename|delete|move|order|auto-order|hide|show> <appType> ...', 'help.cmd_nav_group', {
@@ -1165,9 +1117,9 @@ const COMMAND_GROUPS = [
           { name: 'check', type: 'boolean', source: 'option', builder_options: ['--check'], description: 'Validate definitions and dependency groups locally.' },
           { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
         ],
-        notes: ['Creates independent normal forms concurrently after dependency validation. Each plan item accepts layout (single/double/card/section), theme (default/compact/comfortable), labelAlign (top/left/right), icon and locale, and forwards them to create-form create. References resolve from successful schema readbacks. Existing formUuid entries are read-only reuse. Saves IDs and status beside the plan; recoveryAction and nextAction are enum values: rerun_unchanged_plan reuses successful results and resumes known form IDs; inspect_unknown_write_then_reconcile requires checking uncertain writes before rerunning. Results expose appUrl and formUrl; url remains the compatible form entry. Navigation ordering and shared app configuration follow the batch.'],
+        notes: ['Creates independent normal forms concurrently after dependency validation. References resolve from successful schema readbacks. Existing formUuid entries are read-only reuse. Saves IDs and status beside the plan; interrupted and failed creates require reconciliation. Navigation ordering and shared app configuration follow the batch.'],
       }),
-      command('create-form.create', ['create-form', 'create'], 'create-form create <appType> "<formTitle>" <fieldsJsonFile> [--layout single|double|card|section] [--theme default|compact|comfortable] [--label-align top|left|right] [--icon auto|<iconName>] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_form', {
+      command('create-form.create', ['create-form', 'create'], 'create-form create <appType> "<formTitle>" <fieldsJsonFile> [--icon auto|<iconName>] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_form', {
         args: [
           {
             name: 'appType',
@@ -1198,36 +1150,6 @@ const COMMAND_GROUPS = [
             inline_json_rejected_options: ['--fields'],
             description: 'Path to a local JSON file containing field definitions.',
           },
-          {
-            name: 'layout',
-            type: 'string',
-            required: false,
-            source: 'option',
-            builder_options: ['--layout'],
-            default: 'single',
-            values: ['single', 'double', 'card', 'section'],
-            description: 'Form-wide layout preset: single, double, card or section. Numeric aliases 1 and 2 remain accepted by the CLI.',
-          },
-          {
-            name: 'theme',
-            type: 'string',
-            required: false,
-            source: 'option',
-            builder_options: ['--theme'],
-            default: 'default',
-            values: ['default', 'compact', 'comfortable'],
-            description: 'Form density preset: default, compact or comfortable; this is not the application visual theme.',
-          },
-          {
-            name: 'labelAlign',
-            type: 'string',
-            required: false,
-            source: 'option',
-            builder_options: ['--label-align'],
-            default: 'top',
-            values: ['top', 'left', 'right'],
-            description: 'PC field-label alignment: top, left or right.',
-          },
           {
             name: 'icon',
             type: 'string',
@@ -1238,24 +1160,13 @@ const COMMAND_GROUPS = [
             value_catalog_command_id: 'create-form.icons',
             description: 'Form navigation icon name. Use auto for semantic selection or run create-form.icons for supported values.',
           },
-          {
-            name: 'contentLocale',
-            type: 'string',
-            required: false,
-            source: 'option',
-            builder_options: ['--locale', '--content-locale', '--lang'],
-            values: ['zh_CN', 'en_US', 'ja_JP'],
-            description: 'Content locale: zh_CN, en_US or ja_JP (normalized locale aliases are also accepted).',
-          },
-          { name: 'open', type: 'boolean', required: false, source: 'option', builder_options: ['--open'] },
-          { name: 'noOpen', type: 'boolean', required: false, source: 'option', builder_options: ['--no-open'] },
         ],
         canonical: {
           command_id: 'create-form.create',
           path: ['create-form', 'create'],
           argv_template: ['create-form', 'create', '<appType>', '<formTitle>', '<fieldsJsonFile>'],
           display: 'openyida create-form create <appType> "<formTitle>" <fieldsJsonFile>',
-          builder: 'openyida commands build create-form.create --app-type <appType> --form-title "<formTitle>" --fields-json-file <fieldsJsonFile> [--layout single|double|card|section] [--theme default|compact|comfortable] [--label-align top|left|right] [--icon <iconName>] [--locale zh_CN|en_US|ja_JP] [--open|--no-open] --json',
+          builder: 'openyida commands build create-form.create --app-type <appType> --form-title "<formTitle>" --fields-json-file <fieldsJsonFile> [--icon <iconName>] --json',
         },
         deprecatedPatterns: [
           {
@@ -1285,10 +1196,9 @@ const COMMAND_GROUPS = [
         ],
         examples: [
           'openyida create-form create APP_XXX "访客登记" .cache/openyida/visitor/fields.json',
-          'openyida create-form create APP_XXX "访客登记" .cache/openyida/visitor/fields.json --layout section --theme comfortable --label-align left --icon name-card --locale zh_CN --no-open',
-          'openyida commands build create-form.create --app-type APP_XXX --form-title "访客登记" --fields-json-file .cache/openyida/visitor/fields.json --layout section --theme comfortable --label-align left --locale zh_CN --no-open --json',
+          'openyida create-form create APP_XXX "访客登记" .cache/openyida/visitor/fields.json --icon name-card',
+          'openyida commands build create-form.create --app-type APP_XXX --form-title "访客登记" --fields-json-file .cache/openyida/visitor/fields.json --json',
         ],
-        notes: ['Divider accepts the 23 visible platform styles (none is excluded) through field JSON dividerType, not a CLI flag. Omission falls back to bold-with-thin; invalid supplied styles fail. Choose per business page and keep same-level sections consistent; see summary.core_workflows.full_app_build.divider_style_contract.'],
       }),
       command('create-form.icons', ['create-form', 'icons'], 'create-form icons [--json]', 'help.cmd_list_form_icons', {
         requiresLogin: false,
@@ -1316,9 +1226,7 @@ const COMMAND_GROUPS = [
         requiresLogin: false,
       }),
       command('create-form.update', ['create-form', 'update'], 'create-form update <appType> <formUuid> (<changesJsonOrFile> | --data-file <changesJsonOrFile>) [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_update_form'),
-      command('create-form.resume', ['create-form', 'resume'], 'create-form resume <appType> <formUuid> <fieldsJsonOrFile> [--json]', 'help.cmd_update_form', {
-        notes: ['On save-schema HTTP 5xx, read back the latest schema. Accept already-applied fields or retry missing compatible fields once with the latest revision; conflicts and other failures stop. Success includes appUrl, formUrl and the compatible url field.'],
-      }),
+      command('create-form.resume', ['create-form', 'resume'], 'create-form resume <appType> <formUuid> <fieldsJsonOrFile> [--json]', 'help.cmd_update_form'),
       command('create-form.patch', ['create-form', 'patch'], 'create-form patch <appType> <formUuid> <patchJsonOrFile> [--open|--no-open]', 'help.cmd_update_form'),
       command('create-form.rule', ['create-form', 'rule'], 'create-form rule <appType> <formUuid> <rulesJsonOrFile> [--open|--no-open]', 'help.cmd_update_form'),
       command('create-form.validation', ['create-form', 'validation'], 'create-form validation <appType> <formUuid> <validationsJsonOrFile> [--open|--no-open]', 'help.cmd_update_form'),
@@ -1336,100 +1244,17 @@ const COMMAND_GROUPS = [
       }),
       command('check-prd-completeness', ['check-prd-completeness'], 'check-prd-completeness <prd.md> --app-type <appType> [--build-manifest <file>] [--json]', 'help.cmd_check_prd_completeness', {
         output: 'json',
-        notes: ['Checks resource counts and optional build-manifest.assetExecution recorded intervals. Include materialize.assetTasks and taskState records plus businessWork startedAt/endedAt; missing dispatch proof, missing overlap or assets before business in synchronous fallback produces needs_review. This is record consistency, not independent verification of host events.'],
-      }),
-      command('check-design', ['check-design'], 'check-design <design.md> [--prd <prd.md>] [--base-dir <dir>] [--json]', 'help.cmd_check_design', {
-        requiresLogin: false,
-        output: 'text|json',
-        notes: ['Checks declared iconSystem.colorPairs against resolved design tokens. Each pair has a unique name, foreground, background and an opaque surface when the background is translucent. Icon contrast must reach 3:1; JSON iconContrast reports the checked pairs. Unsupported colors and missing surfaces fail rather than count as verified. This does not inspect browser styles, inherited opacity, gradients or undeclared icon colors.'],
-        args: [
-          { name: 'design', type: 'file', source: 'positional', position: 0, required: true },
-          { name: 'prd', type: 'file', source: 'option', builder_options: ['--prd'] },
-          { name: 'baseDir', type: 'string', source: 'option', builder_options: ['--base-dir'], description: 'Project root for PRD designFile references; defaults to the current working directory. Input file arguments remain relative to the working directory.' },
-          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
-        ],
       }),
       command('er', ['er'], 'er <appType> [--format mermaid|json] [--output file] [--include-system] [--include-pages]', 'help.cmd_er', {
         output: 'text|json',
       }),
-      command('create-page', ['create-page'], 'create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_page', {
-        output: 'text|json',
-        args: [
-          { name: 'appType', type: 'string', source: 'positional', position: 0, required: true },
-          { name: 'pageName', type: 'string', source: 'positional', position: 1, required: true },
-          { name: 'mode', type: 'string', source: 'option', builder_options: ['--mode'], description: 'default or dashboard; neither hides navigation automatically.' },
-          { name: 'hideNav', type: 'boolean', source: 'option', builder_options: ['--hide-nav', '--hide-navigation', '--no-nav'] },
-          { name: 'renderNav', type: 'string', source: 'option', builder_options: ['--render-nav', '--is-render-nav', '--isRenderNav'], description: 'Compatibility alias: false hides navigation, true retains the default. Accepts true/false, 1/0, yes/no, y/n; last navigation option wins.' },
-          { name: 'locale', type: 'string', source: 'option', builder_options: ['--locale', '--content-locale', '--lang'], description: 'Content locale: zh_CN, en_US or ja_JP (also accepts normalized locale aliases).' },
-          { name: 'open', type: 'boolean', source: 'option', builder_options: ['--open'] },
-          { name: 'noOpen', type: 'boolean', source: 'option', builder_options: ['--no-open'] },
-        ],
-        notes: [
-          'Returns a JSON result with progress text; there is no command-specific --json flag. pageId is the created display page formUuid.',
-          '--hide-nav updates the created page and reads its configuration back, with at most one repair write. navigationVerification contains requestedRenderNav, renderNav (boolean|null), verified and attempts. Read renderNav first; use isRenderNav only when renderNav is absent. URL query parameters are not readback evidence.',
-          'Without --hide-nav: hideNavRequested=false, hideNav=false, chromeless=false and navigationVerification=null. With --hide-nav: hideNav reports the readback result (null if unknown); chromeless=true and the hidden-navigation URL require verified=true.',
-          'Unverified hiding exits nonzero with success=false, pageCreated=true, pageId and CREATE_PAGE_NAVIGATION_NOT_VERIFIED. Use recovery.command/args and recovery.verifyCommand/verifyArgs on that existing page. Never repeat create-page to repair navigation.',
-        ],
-      }),
+      command('create-page', ['create-page'], 'create-page <appType> "<name>" [--mode dashboard] [--hide-nav] [--locale zh_CN|en_US|ja_JP] [--open|--no-open]', 'help.cmd_create_page'),
       command('build-page', ['build-page'], 'build-page <sourceFile> [--output file|--write]', 'help.cmd_build_page', { requiresLogin: false }),
-      command('check-page', ['check-page'], 'check-page <src> [--compat] [--json]', 'help.cmd_check_page', {
-        requiresLogin: false,
-        output: 'text|json',
-        args: [
-          { name: 'src', type: 'file', source: 'positional', position: 0, required: true },
-          { name: 'compat', type: 'boolean', source: 'option', builder_options: ['--compat', '--modern'] },
-          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
-        ],
-        notes: ['Local source validation, including form-open-container checks for recognized form links and drawer structure. Fails with CHECK_PAGE_FAILED and per-rule diagnostics. Dynamic interactions still require runtime verification.'],
-      }),
-      command('compile', ['compile'], 'compile <src> [--canvas] [--compat] [--skip-lint] [--json]', 'help.cmd_compile', {
-        requiresLogin: false,
-        output: 'text|json',
-        args: [
-          { name: 'src', type: 'file', source: 'positional', position: 0, required: true },
-          { name: 'canvas', type: 'boolean', source: 'option', builder_options: ['--canvas'] },
-          { name: 'compat', type: 'boolean', source: 'option', builder_options: ['--compat', '--modern'] },
-          { name: 'skipLint', type: 'boolean', source: 'option', builder_options: ['--skip-lint'], description: 'Legacy JSX lint only; does not bypass Canvas compilation checks.' },
-          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
-        ],
-        notes: ['Canvas compilation checks theme provider mounting, theme reads before the provider is active, module-level theme context declarations, fixed ConfigProvider brand colors, and known navigation destinations missing appType. Extract canvas-theme and canvas-navigation before coding. Form actions also require the maintained form-open-container fragment, hook and rendered container. Dynamic colors, resource identity and runtime rendering still require verification.'],
-      }),
-      command('publish', ['publish'], 'publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--compat] [--skip-lint] [--auto-nav-order] [--open|--no-open] [--json]', 'help.cmd_publish', {
-        args: [
-          { name: 'src', type: 'file', source: 'positional', position: 0, required: true },
-          { name: 'appType', type: 'string', source: 'positional', position: 1, required: true },
-          { name: 'formUuid', type: 'string', source: 'positional', position: 2, required: true },
-          { name: 'healthCheck', type: 'boolean', source: 'option', builder_options: ['--health-check', '--check'] },
-          { name: 'force', type: 'boolean', source: 'option', builder_options: ['--force'], description: 'Override target checks; does not bypass Canvas compilation checks.' },
-          { name: 'canvas', type: 'boolean', source: 'option', builder_options: ['--canvas'] },
-          { name: 'compat', type: 'boolean', source: 'option', builder_options: ['--compat', '--modern'] },
-          { name: 'skipLint', type: 'boolean', source: 'option', builder_options: ['--skip-lint'], description: 'Legacy JSX lint only; does not bypass Canvas compilation checks.' },
-          { name: 'autoNavOrder', type: 'boolean', source: 'option', builder_options: ['--auto-nav-order'] },
-          { name: 'open', type: 'boolean', source: 'option', builder_options: ['--open'] },
-          { name: 'noOpen', type: 'boolean', source: 'option', builder_options: ['--no-open'] },
-          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
-        ],
-        notes: ['Canvas publishing runs the same theme and form-open-container structure checks as compile before login or remote writes. --force does not bypass Canvas compilation checks. --health-check verifies saved content; inspect the actual page for runtime behavior.'],
-      }),
-      command('update-form-config', ['update-form-config'], 'update-form-config <appType> <formUuid> <true|false|keep> "<title>" [--locale zh_CN|en_US|ja_JP]', 'help.cmd_update_form_config', {
-        args: [
-          { name: 'appType', type: 'string', source: 'positional', position: 0, required: true },
-          { name: 'formUuid', type: 'string', source: 'positional', position: 1, required: true },
-          { name: 'isRenderNav', type: 'string', source: 'positional', position: 2, required: true, description: 'true, false or keep; use false for hide-navigation recovery.' },
-          { name: 'title', type: 'string', source: 'positional', position: 3, required: true },
-          { name: 'locale', type: 'string', source: 'option', builder_options: ['--locale', '--content-locale', '--lang'] },
-        ],
-        notes: ['A successful write acknowledgement is not navigation readback. Follow with get-form-config <appType> <formUuid> --json; inspect renderNav, falling back to isRenderNav only when renderNav is absent.'],
-      }),
-      command('get-form-config', ['get-form-config'], 'get-form-config <appType> <formUuid> [--json]', 'help.cmd_get_form_config', {
-        output: 'json',
-        args: [
-          { name: 'appType', type: 'string', source: 'positional', position: 0, required: true },
-          { name: 'formUuid', type: 'string', source: 'positional', position: 1, required: true },
-          { name: 'json', type: 'boolean', source: 'option', builder_options: ['--json'] },
-        ],
-        notes: ['Navigation readback uses renderNav first, falling back to isRenderNav only when renderNav is absent. true/false booleans and strings are recognized; missing or invalid values remain unknown. --json includes the raw configuration; the default summary preserves both navigation fields when present.'],
-      }),
+      command('check-page', ['check-page'], 'check-page <src> [--compat]', 'help.cmd_check_page', { output: 'text|json' }),
+      command('compile', ['compile'], 'compile <src> [--canvas] [--json]', 'help.cmd_compile', { requiresLogin: false, output: 'text|json' }),
+      command('publish', ['publish'], 'publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--auto-nav-order] [--open|--no-open]', 'help.cmd_publish'),
+      command('update-form-config', ['update-form-config'], 'update-form-config <appType> <formUuid> <true|false|keep> "<title>" [--locale zh_CN|en_US|ja_JP]', 'help.cmd_update_form_config'),
+      command('get-form-config', ['get-form-config'], 'get-form-config <appType> <formUuid> [--json]', 'help.cmd_get_form_config', { output: 'json' }),
     ],
   },
   {
@@ -1437,8 +1262,6 @@ const COMMAND_GROUPS = [
     titleKey: 'help.group_data',
     commands: [
       command('data', ['data'], 'data <query|get|create|update> <resource> ... | delete form <appType> <formUuid> --inst-id <id> --expect-form-name <name> --expect-form-type receipt --confirm [--json]', 'help.cmd_data', {
-        output: 'json',
-        noteKeys: ['help.data_notes'],
         examples: [
           'openyida data create form APP_XXX FORM_XXX --expect-form-name 客户 --expect-form-type receipt --data-json \'{"textField_name":"客户 A","dateField_followUp":1787932800000}\'',
           'openyida data delete form APP_XXX FORM_XXX --inst-id FINST_XXX --expect-form-name 客户 --expect-form-type receipt --confirm --json',
@@ -1472,9 +1295,7 @@ const COMMAND_GROUPS = [
       command('configure-process', ['configure-process'], 'configure-process <appType> <formUuid> <definition> [processCode] [--replace]', 'help.cmd_configure_process', {
         examples: ['openyida configure-process APP_XXX FORM_XXX .cache/openyida/process/process-with-actions.json'],
       }),
-      command('create-process', ['create-process'], 'create-process <appType> <formTitle> <fieldsJsonFile> <processDefinitionFile> [--replace] | create-process <appType> --formUuid <formUuid> <processDefinitionFile> [--replace]', 'help.cmd_create_process', {
-        output: 'json',
-        noteKeys: ['help.create_process_notes'],
+      command('create-process', ['create-process'], 'create-process <appType> ... [--replace]', 'help.cmd_create_process', {
         examples: [
           'openyida create-process APP_XXX "Approval Form" .cache/openyida/process/fields.json .cache/openyida/process/process-with-actions.json',
           'openyida create-process APP_XXX --formUuid FORM_XXX .cache/openyida/process/process-with-actions.json',
@@ -1520,7 +1341,7 @@ const COMMAND_GROUPS = [
       command('connector.update-action', ['connector', 'update-action'], 'connector update-action --connector-id <id> --action <operationId> --query-json JSON --confirm', 'help.cmd_connector_update_action'),
       command('connector.list-actions', ['connector', 'list-actions'], 'connector list-actions <id>', 'help.cmd_connector_list_actions'),
       command('connector.delete-action', ['connector', 'delete-action'], 'connector delete-action <id> <operation-id>', 'help.cmd_connector_delete_action'),
-      command('connector.test', ['connector', 'test'], 'connector test --connector-id <id> --action <actionId> [--path-json JSON] [--query-json JSON] [--header-json JSON] [--body-json JSON] [--account-id <id>] [--system-token-app <appType>] [--ignore-defaults]', 'help.cmd_connector_test'),
+      command('connector.test', ['connector', 'test'], 'connector test --connector-id <id> --action <actionId> [--path-json JSON] [--query-json JSON] [--header-json JSON] [--body-json JSON] [--account-id <id>] [--system-token-app <appType>]', 'help.cmd_connector_test'),
       command('connector.list-connections', ['connector', 'list-connections'], 'connector list-connections <id>', 'help.cmd_connector_list_connections'),
       command('connector.create-connection', ['connector', 'create-connection'], 'connector create-connection <id> <name> [--interactive]', 'help.cmd_connector_create_connection'),
       command('connector.smart-create', ['connector', 'smart-create'], 'connector smart-create --curl "..."', 'help.cmd_connector_smart'),
@@ -1585,31 +1406,15 @@ const COMMAND_GROUPS = [
         output: 'text|json',
       }),
       command('copy', ['copy'], 'copy [--force]', 'help.cmd_copy', { requiresLogin: false }),
-      command('sample', ['sample'], 'sample [--list] [<skill> <name>] [--output <file-or-directory>] [--var KEY=VALUE ...] [--design-file <design.md>] [--style-id <themeId|free-creative>]', 'help.cmd_sample', {
+      command('sample', ['sample'], 'sample [--list] [<skill> <name>] [--output <file>] [--var KEY=VALUE ...] [--design-file <design.md>]', 'help.cmd_sample', {
         requiresLogin: false,
-        output: 'text|json',
-        notes: [
-          'yida-design app-theme reads concrete tokens from --design-file and writes CSS plus a sibling <output>.tokens.md update snapshot. The same output path preserves project CSS and applies changed tokens. Without --design-file it resets the output to the public base template. Menu radius, normal/hover/selected borders and selected shadow apply to side, L-shaped and top navigation; older CSS gains missing menu-shape rules when the design supplies menu-border tokens.',
-          'yida-design application-style --style-id supports every catalog theme and exports a three-file design.md/app_theme.css/form-layout.json authoring bundle to an output directory without overwriting files. Brand primary and hover values remain project placeholders until app-theme --design-file generates concrete CSS. Use design-plan catalog for presets and its separate creativeOption; free creative requires independent business decisions and explicit design tokens.',
-          'Author menu radius, normal/hover/selected borders, selected shadow, item height, padding, gap and shell spacing together in design.md navigation tokens (Fast) or visualStyle.tokens (Plan). These are design values, not separate CLI flags. Preset appearance does not override the business navigation layout. Verify native data-management navigation and business pages in workbench access mode; /admin is the development configuration surface.',
-          'Native forms use a component tree with top, left, main, right and between-field regions. Platform form components include tabs, button groups, images/graphics, status areas, dividers, columns and business fields, serving navigation, actions, visual focus, feedback, hierarchy, decoration and data capture. Application-style form-layout.json provides an editable starting layout for openyida create-form: use the supported business fields, Divider and ColumnContainer, and retain other existing components when updating a form.',
-          'canvas-nav-side/top/mixed/dock consume the same menu radius, normal/hover/selected borders and selected shadow as platform navigation. Side and Dock items read menu item height/padding; top and mixed header items read top-tab height/padding/max-width. Side/top/mixed menus read menu-gap; Dock reads slide-collapsed-menu-gap. Side shell padding uses slide-aside-padding and mixed uses l-aside-padding. Re-export the fragment, integrate it into existing page source and republish to upgrade existing custom navigation. canvas-nav-tabs remains an in-page tab control.',
-          'Canvas form-drawer, table-form and trend-combo samples include the maintained CanvasThemeProvider, read the current application CSS variables, and prevent loading-mask border flashes caused by late CSS resets.',
-          'form-fields demonstrates field layout, not a default divider design. Choose dividerType for the current business page before creating forms; keep same-level sections consistent and vary different business pages when appropriate.',
-          'openyida-page-template canvas-theme outputs the same provider as a reusable fragment; combine its imports and code with the business page in one Canvas file, keeping its scoped loading-mask style. Existing pages must update their provider and be republished; changing application theme CSS alone does not upgrade embedded provider code.',
-          'openyida-page-template form-open-container extracts the maintained Canvas form drawer. Merge its imports, CanvasDrawer, FormOpenContainer, useYidaFormOpen and helpers; bind openForm(request) and render formOpenContainer. Do not replace it with a similarly named custom drawer.',
-          'canvas-admin-entry includes canvas-navigation and a theme-aware business-workbench button. Visibility uses the current app-scoped loginUser.isAppAdmin flag (y/true only), matching g_config/pageConfig app identity with conflicts kept unknown, never CLI identities or a copied admin list. Configure a verified business page ID; unknown identity stays hidden and backend authorization remains authoritative.',
-          'canvas-view-state restores the current local task view, allowlisted non-sensitive enum filters and page through URL state, preserving unrelated query/hash/history metadata. Use only without an existing router or unsaved-edit blockers; drafts, per-task caches and scroll need explicit policies. Verify iframe refresh/return behavior in the host. Business writes require verified server-side role, record, field and state-transition authorization; hidden buttons do not grant or enforce it.',
-          'Extract canvas-theme before antd UI and canvas-navigation before cross-page actions; use verified target types and resource IDs. Local tabs use state. Compile/publish reject known app-prefix omissions and fixed ConfigProvider brand colors; runtime theme and destination verification is still required.',
-        ],
         args: [
           { name: 'skill', type: 'string', source: 'positional', position: 0, description: 'Required when copying a sample.' },
           { name: 'name', type: 'string', source: 'positional', position: 1, description: 'Required when copying a sample; use --list for available names.' },
           { name: 'list', type: 'boolean', source: 'option', builder_options: ['--list'] },
-          { name: 'output', type: 'file', source: 'option', builder_options: ['--output'], description: 'Output file for ordinary samples/app-theme; output directory for application-style. Defaults under cwd/.cache/samples; application-style defaults to its application-style subdirectory and rejects an existing bundle file.' },
-          { name: 'var', type: 'string', source: 'option', builder_options: ['--var'], repeatable: true, description: 'Ordinary sample assignment KEY=VALUE; repeat --var for multiple variables. Not accepted by yida-design app-theme or application-style; complete design.md before generating theme CSS.' },
-          { name: 'designFile', type: 'file', source: 'option', builder_options: ['--design-file'], description: 'Only for yida-design app-theme: completed design.md with concrete tokens. Optional for a base-template reset; supply it to generate or incrementally update project CSS.' },
-          { name: 'styleId', type: 'string', source: 'option', builder_options: ['--style-id'], description: 'Required only for yida-design application-style. Accepts any themeId from design-plan catalog, including shared themes and free-creative. Exports design.md, app_theme.css and form-layout.json with brand placeholders; accepts neither --design-file nor --var.' },
+          { name: 'output', type: 'file', source: 'option', builder_options: ['--output'] },
+          { name: 'var', type: 'string', source: 'option', builder_options: ['--var'], repeatable: true, description: 'Template assignment KEY=VALUE; repeat --var for multiple variables.' },
+          { name: 'designFile', type: 'file', source: 'option', builder_options: ['--design-file'], description: 'Design tokens for yida-design app-theme; preserves custom CSS when updating.' },
         ],
       }),
       command('doctor', ['doctor'], 'doctor [--fix]', 'help.cmd_doctor', { requiresLogin: false }),
@@ -1636,13 +1441,6 @@ const COMMAND_GROUPS = [
         output: 'text|json',
       }),
       command('asset', ['asset'], 'asset <status|resolve|sources> [options]', 'help.cmd_asset', {
-        noteKeys: ['asset.sourceRecords'],
-        notes: ['resolve --page-id <pageId> selects a page from --design or input assetStrategy; output contains only that page. Use distinct --manifest paths for concurrent page jobs. Host search follows collection_policy; resolve performs one attempt per supplied candidate. Verified hotlink-allowed URLs are delivered directly without login or appType. Draft assets accept hotlinkAllowed/rehostAllowed booleans and deliveryMode=auto|upload. Stock CDN URLs allow hotlinking by default; Unsplash requires hotlinking unless separate rehosting permission is recorded. --upload-assets requests permitted hosting; upload failure keeps only a verified hotlink-allowed original URL.'],
-        args: [
-          { name: 'pageId', type: 'string', source: 'option', builder_options: ['--page-id'], description: 'Resolve only this page; requires design or input assetStrategy.' },
-          { name: 'appType', type: 'string', source: 'option', builder_options: ['--app-type'], description: 'Target application for uploads; direct URLs need no application.' },
-          { name: 'uploadAssets', type: 'boolean', source: 'option', builder_options: ['--upload-assets'], description: 'Request hosting where rehosting is allowed; otherwise use verified direct URLs by default.' },
-        ],
         requiresLogin: false,
         output: 'text|json',
       }),
@@ -1676,7 +1474,6 @@ function localizeCommand(entry, translate) {
     deprecated_patterns: cloneJsonMetadata(entry.deprecatedPatterns, []),
     repair_patterns: cloneJsonMetadata(entry.repairPatterns, []),
     examples: entry.examples,
-    notes: [...cloneJsonMetadata(entry.notes, []), ...(entry.noteKeys || []).map(key => translate(key))],
     hidden: entry.hidden,
     side_effect: cloneSideEffect(entry.sideEffect),
     permission: clonePermission(entry.permission),
@@ -1749,35 +1546,12 @@ function summarizeLocalizedCommands(commands) {
         default_ui_guidance_skill_id: 'yida-design',
         requirement_analysis_skill_id: 'yida-requirement-analysis',
         requirement_brief_path: '.cache/openyida/<project>/requirement-brief.json',
-        visual_decision_policy: getVisualDecisionPolicy(),
-        user_visible_expression_policy: {
-          reference: 'yida-skills/skills/yida-design/references/ask-human-interaction-contract.md',
-          audience: 'nontechnical_user',
-          wording: 'Use everyday language, concrete business names and short sentences. Lead with the result or action; explain necessary technical terms on first use.',
-          progress: 'Say what is happening and what happens next. Report completed work from verified results.',
-          image_progress: 'Use 素材采集&应用创建 as the progress description while image collection and app creation are both running; otherwise use the active stage name. Keep the todo items separate. Record image counts, slots, subtasks and execution details internally.',
-          todo: {
-            templates: 'yida-skills/skills/yida-design/references/ask-human-interaction-contract.md#步骤列表与进度',
-            titles: 'Use the exact short stage titles for the selected mode; keep app, forms, sample data, images, pages and publication as separate items.',
-            scope: 'Select stages needed by the agreed scope; omit app creation for an existing app and omit unused sample-data/image stages.',
-            updates: 'Keep titles and display order stable; update statuses and retain completed items. Display order permits parallel work.',
-            details: 'Put business details in progress messages; record commands, task IDs, authorization context and timings internally. Put requested timing summaries in the report.',
-          },
-          questions: 'Ask one concrete decision and explain each option by what the user can do.',
-          failures: 'State what failed, the actual impact and the next safe action. Explain only evidenced causes; describe unknown outcomes as pending verification.',
-          waiting: 'Explain what is taking time and what can continue. Give time estimates only with a basis and update them when circumstances change.',
-          diagnostics: 'Keep exact technical fields and error codes in tool results and implementation handoffs; explain them when the user asks for technical details.',
-        },
         optional_asset_branch: {
           skill_id: 'yida-image-assets',
-          collection_policy: getMaterialSourcingGuidance().collectionPolicy,
-          failure_policy: getMaterialSourcingGuidance().failurePolicy,
-          completion_policy: getMaterialSourcingGuidance().completionPolicy,
-          scheduling_policy: getMaterialSourcingGuidance().schedulingPolicy,
           trigger: 'Any page is imageNeed=required, or imageNeed=beneficial with declared image slots.',
-          output_path: 'prd/<project>/asset-manifests/<pageId>.json',
+          output_path: 'prd/<project>/asset-manifest.json',
           skip: 'All pages are imageNeed=none.',
-          dependency_policy: 'After Plan confirmation, dispatch materialize.assetTasks through host background tools, record actual task IDs in taskState and continue app/form/page creation, layout, data binding and interactions. Fast derives the same tasks from design.md. Reattach running tasks; preserve deadlines and used rounds on resume. Use scheduling_policy for collection-wide concurrency, priorities and host-enforced budgets. One writer owns each page draft/manifest. Verify direct URLs as each page draft becomes ready; uploads additionally need appType. Read results at own-page image binding, waiting only after independent work. Check background_agent and background_shell independently. QwenWork may use Bash run_in_background only when the actual tool schema supports it; synchronous Agent calls are not background dispatch. Without usable background execution, perform authorized resource/seed/independent page work first, then bounded asset batches. Record dispatch return and business start/end intervals in build-manifest.assetExecution for check-prd-completeness; never claim overlap from task names alone.',
+          dependency_policy: 'Only blocks pages that consume the declared image slots.',
         },
         artifact_generation: {
           mode: 'parallel',
@@ -1790,89 +1564,26 @@ function summarizeLocalizedCommands(commands) {
           join_owner_skill_id: 'yida-app',
         },
         ordinary_jsx_skill_id: 'yida-custom-page',
-        form_page_policy: 'Use yida-create-form-page for form structure and business actions. Use create-form.batch to create independent normal forms concurrently, resolve dependencies from real IDs and read back fields; apply shared app configuration, application theme, and navigation order afterward.',
-        divider_style_contract: {
-          reference: 'yida-skills/skills/yida-create-form-page/references/form-field-properties.md#divider',
-          input: 'fields[].dividerType (also inside layout children); field JSON, not a CLI flag',
-          schema_path: 'Divider.props.type',
-          supported_types: DIVIDER_TYPES,
-          fallback: DEFAULT_DIVIDER_TYPE,
-          selection: 'Choose by each page business task and visual weight; keep same-level sections consistent within a page. Prefer suitable variation across different business pages. If the scene is unclear or suitable candidates tie, shuffle compatible candidates and rotate across pages, preferring unused styles until exhausted. Record one choice per page in design.md and dividerType before compilation; retries reuse it. Preserve existing supported styles for local edits.',
-          invalid_input: 'INVALID_DIVIDER_TYPE diagnostics; create rejects with CREATE_FORM_INVALID_DIVIDER_TYPE. Never silently replace a supplied unsupported style.',
-        },
+        form_page_policy: 'Use yida-create-form-page for form structure. Use create-form.batch to create independent normal forms concurrently, resolve dependencies from real IDs and read back fields; apply shared app configuration and navigation order afterward. Never inject CSS, JavaScript, HTML, or theme code into native forms or formDetail pages; the platform renders those pages.',
         page_skill_policy: 'Use YidaCodeCanvas by default for new primary custom pages. Choose yida-custom-page only when the current target has been identified as existing .oyd.jsx/.oyb.jsx/renderJsx/platform Jsx component maintenance; do not switch to yida-custom-page merely because a page needs data, forms, uploads, this.utils.yida.*, or dataSourceMap-like capabilities.',
-        form_entry_policy: {
-          scope: 'Ordinary page-level form creation, submission and detail actions in frontend and backend, Fast and Plan; full-code pages are not exempt.',
-          reference: 'yida-skills/skills/yida-canvas-custom-page/references/navigation-and-entry-guide.md#标准-formopencontainer',
-          sample_command: 'openyida sample openyida-page-template form-open-container --output .cache/samples/form-open-container.jsx',
-          integration: 'Merge CanvasDrawer, FormOpenContainer, useYidaFormOpen, imports and helpers. Bind openForm(request) and render formOpenContainer. Keep iframe, header controls, resize handlers and close refresh; desktop uses the drawer, mobile opens the native form.',
-          validation_command_ids: ['check-page', 'compile', 'publish'],
-          verification: 'Canvas preflight uses compile <source> --json; check-page is the legacy platform JSX preflight. Source checks detect recognized direct links, homemade overlays and incomplete template wiring; verify actual form interactions after publishing. Static checks do not prove all dynamic actions.',
-          exceptions: 'Search/filter controls are not form submission. Explicit batch entry uses the table-form skill. Planned application navigation may embed a native form in its main content; this does not exempt page action buttons.',
-        },
-        plan_command_ids: ['design-plan.catalog', 'design-plan.init', 'design-plan.preview', 'design-plan.materialize', 'design-plan.patch'],
+        plan_command_ids: ['design-plan.init', 'design-plan.preview', 'design-plan.materialize', 'design-plan.patch'],
         theme_command_ids: ['sample', 'create-app', 'update-app'],
         navigation_command_ids: { platform: ['update-app', 'nav-group'], custom: ['update-app', 'update-form-config', 'get-form-config'] },
-        navigation_policy: 'Before PRD planning in Fast and Plan, the agent determines navigation ownership and layout from business context. Follow yida-design/references/navigation-decision.md for entry and layout decisions. Preserve explicit user requirements and existing navigation for local changes; resource-only requests operate on their specified resources and settings. Use native navigation by default for the application workspace, and custom navigation only for an explicitly justified application-level branded menu or special navigation interaction. A service frontend defaults to one coding page with its own menu and all selected business views; a single-step entry can use navigation.type=none. Choose backend native or coding pages by task efficiency. Backend coding pages in platform-shell are content-only: platform menus own cross-module navigation; local Tabs cover categories or states of the current task only. Never turn the management entry menu into a second page navbar, sidebar or module Tabs. Persistent filters/state alone do not justify custom application navigation. Plan handoff pages include derived navigationPolicy; Fast records the same boundary. Do not hide platform navigation to repair duplicate page menus. Store application navigation in navigationType and standalone entry menus in pageSpecHandoff.navigation. Configure a custom frontend menu at page scope and preserve workspace navigation. Record type/source/reason/variant using ai_default for agent ownership decisions and user_selected for explicit user requirements. Include navigation in the overall Plan confirmation; Fast implements the recorded decision. Platform navigation uses update-app --layout top|side|l_shape --show-app-nav, persisting layoutDirection and hideAppNav=n. Preserve stored navType. Without --layout, normalize legacy layoutDirection and navType using the application layout compatibility rules (hoz plus top_side means l_shape; missing layout uses top_fold/top_side for top/l_shape). Apply shell top_fold/none overrides at page scope. Application-wide custom side/top/mixed/dock uses app hiding plus per-page hiding within scope; a standalone frontend in a platform-navigation app uses only page configuration. Read back layoutDirection, hideAppNav and each configured page, then verify the planned frontend and workspace links. Navigation structure is separate from tone. Navigation tone is derived from the final selected theme template, never guessed from the business brief or implicitly defaulted to light; apply that explicit value with update-app --nav-theme. Custom top navigation defaults to edge-to-edge, not floating. Over a hero image, start transparent, add a surface on scroll, restore transparency at the top; expanded menus stay readable. Follow yida-design/references/page-continuity.md; floating requires an explicit design.',
-        design_mode_policy: 'Analyze requirements first with yida-requirement-analysis: read only necessary sources before the first question, offer concrete core-function candidates, clarify key usage, and preserve explicit scope and valid answers. Initial intake focuses on core functions and actual usage. Record actual user replies; proceed with dependent planning after a reply or explicit delegation. First-time builds include new apps and existing apps without business pages. After intake, reuse explicit mode choices and detailed supplied plans; if the user delegates the mode or asks for no more questions, use Fast unless Plan is explicit; otherwise, if the mode is unspecified, ask whether to prepare a PRD for confirmation (Plan, more detailed and slower) or build from the supplied requirements (Fast). Without detailed requirements, offer Fast and Plan neutrally. intake.confirmed records scope and key-usage clarification; the plan revision tracks plan approval separately. Fast and Plan share one three-direction visual generation rule. Fast compares exactly three directions internally and keeps the selected result. When Plan is explicit and the user has not supplied a complete visual direction, generate exactly three directions and use ask_human for the style choice before design-plan init; do not wait for the user to request a comparison. Planning preparation derives page scenes, selected theme mapping and navigation structure before init; mark AI suggestions and apply navigation_policy. Existing business apps only clarify the current change. A named resource-only request with explicitScope.allowInferredResources=false keeps planning within the specified resources. When theme mapping is missing, query design-plan catalog once and reuse its themes and pagePatterns. Init returns authoring.pendingFields and context with typed examples; complete pending facts and review coverage before setting ready=true. Reuse one complete agent-capabilities summary per unchanged environment. Standard Plan uses design-plan init parallelTasks, then executes the returned materialize.command exactly once with business-file and visual-file; preview and --from-preview are only for explicitly incremental large plans. Present the current plan without revision numbers in user-visible titles, summaries, attachments or questions. Keep revision in internal confirmation fields, validate it before building, and execute its generated artifacts.',
-        product_design_policy: 'yida-requirement-analysis owns shared facts and first-time intake. yida-prd owns business planning; yida-design owns visual design. Reuse the same confirmed brief and supplied details. Prepare business and base visuals concurrently, then bind visuals to settled page tasks. yida-app merges and checks the artifacts before creating resources. Plan authors scope, data and rules, page organization, business interactions and acceptance once. Ordered blocks {name,purpose} supply default priority and content layers; explicit designs remain authoritative. Project-specific acceptance criteria are merged with generated resource checks. Plan uses the compact authoring contract and selected theme context; the CLI reads full templates and renders all artifacts. Fast, Plan and single-page design share yida-design/templates/design-themes and the same three-direction generation rule. Theme templates declare application-global variables from basic-tokens.json with fixed typography, spacing and Tooltip colors, plus scoped custom-page variables; component recipes consume those variables. Each selected template is the authority for navTheme, its six navigation color tokens, and its selected-item shadow token; free-creative authors its own navigation tone and tokens. Explicit project customization stays in visualStyle.tokens. The CLI applies the selected template palette to its derived light or dark navigation mode, preserves mode-independent navigation appearance tokens, preserves inactive and white/gray platform modes, and never synthesizes a replacement navigation palette.',
-        ui_guidance_policy: 'Page implementation consumes yida-prd prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, business-specific checks, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it consumes yida-design design.md for app custom theme CSS delivery, themeColor/navTheme, visual states, visualScaffold, surface material, rounded rules, density rules, components, state styling, and page-level imageNeed. When a page is imageNeed=required, or beneficial with declared image slots, yida-image-assets prepares a traceable asset manifest alongside page layout and interaction work; wait for final images only at that page\'s image binding and acceptance. imageNeed=none skips the branch. prd.md and design.md remain the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by sending business conflicts to yida-prd and visual conflicts to yida-design before regenerating the spec. Core normal forms default to 1-3 business sample records before page implementation, followed by query readback. An explicit opt-out, configuration dictionary, sensitive data, or lack of safely constructible values requires a recorded skip reason. Screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
-        default_nav_order_policy: 'For application-wide custom navigation, implement each entry menu and verify app/page navigation hiding. A standalone frontend preserves platform navigation for the management workspace; frontend-only delivery skips platform ordering. After all scoped resources and page publications finish, perform exactly one navigation order operation. Use management tasks and their default destination, without creating a homepage or putting a frontend page first. When execution.entryRecommendation exists, derive navigationOrder from its management/workspace menus. Call openyida nav-group order <appType> <items...> for an explicit order; otherwise call openyida nav-group auto-order <appType> once for legacy single-workspace plans. Do not use openyida publish ... --auto-nav-order for per-page application builds. Explicit and automatic ordering are mutually exclusive; never generate per-item move loops.',
-        final_link_policy: 'Return exactly one user-visible application entry group, never one artifact or link card per form, process, report, schema, manifest, PRD, design file, or intermediate artifact. Include one verified management entry when a management or unified workspace is in scope: the app workbench URL or a planned workbench/formUuid URL with its real viewUuid. Backend-only returns its verified business backend entry and developer admin URL without adding a frontend. Native management does not require a display homepage; frontend-only delivery includes its verified frontend entry and developer admin URL, without inventing a business backend. Add the clean custom page URL only when PRD entryMode=standalone and get-form-config readback confirms renderNav=false (fallback to isRenderNav only when renderNav is absent). Complete application delivery defaults to 2-3 distinct entries: frontend or unified workspace, business backend when separately planned, and developer admin. agent-capabilities application_entry_policy.entries.admin=include is independent of auth runtime. Read adminUrl from create-app or app-list results; route construction does not verify recipient permissions. Explicit user exclusions take precedence; single-page tasks retain their scope. Put the business summary, verification results and remaining work in the terminal delivery artifact description; when no delivery tool is available, return the same content and entry group in the final response. Summarize business resources by capability or count, but every resource count, seed-record count, and completed/verified claim must come from that resource\'s own successful result or readback. When the user or caller explicitly requests a resource manifest, resource UUIDs/IDs, publish status, or test-data summary, include one concise verified delivery manifest in that description (or the final response when no delivery tool is available).',
-        entry_navigation_contract: {
-          reference: 'yida-skills/skills/yida-app/references/entry-navigation.md',
-          brief_path: 'entryRecommendation',
-          plan_path: 'execution.entryRecommendation',
-          input_transport: 'JSON file or design-plan patch --set execution.entryRecommendation=<json>; not a CLI flag',
-          modes: [...ENTRY_MODES],
-          mode_meaning: 'These modes describe how people use the application, not developer administration: unified shares business pages with role-based menus and permissions; service-management separates pages for people requesting a service and people processing it; frontend-only delivers only the requested frontend; backend-only delivers staff pages for recording, processing or maintaining business, with service requests originating elsewhere or no service entry required. For frontend-only submissions that need processing, record the existing system, staff entry or automation in reason and business flows; unresolved handling remains an open question. Backend-only entries use role management; new unified plans normally use workspace, while legacy unified plans retain their roles. Different roles alone do not require separate frontends and backends. Separate entries can share one application and its data.',
-          user_facing_explanation: 'Say whether the system has separate frontend and business-backend pages, then explain who uses each entry, what they see and what they can do. Choose from confirmed tasks; if actual usage is unclear and changes the page plan, ask a concrete business-use question.',
-          derived_summary: 'execution.entryModeSummary is generated for PRD and preview from the selected mode; do not author it in build-plan.json.',
-          roles: ['service', 'management', 'workspace'],
-          entry_required_fields: ['key', 'name', 'role', 'menu', 'defaultMenuKey'],
-          service_page_binding: 'sceneKey of a standalone page',
-          page_navigation_policy: getPageNavigationContract(),
-          local_menu_binding: 'Every entry containing local menus, including management/workspace, requires sceneKey matching exactly one page; each local menu requires resource equal to that page name and a nonempty viewKey.',
-          menu_target_types: ['local', 'submission', 'page', 'custom'],
-          menu_resource_reference: 'planned resource name; resolve to real formUuid before runtime',
-          menu_optional_fields: ['viewUuid', 'viewKey'],
-          planned_access_fields: ['resource', 'operation', 'dataScope', 'viewUuid?'],
-          leaf_access_required: 'Every leaf menu in every role requires access: OPERATE_CREATE for submission, OPERATE_VIEW otherwise, with matching target resource and viewUuid. These declarations do not grant permissions.',
-          runtime: {
-            applies_to: 'Confirmed page-owned application menus only. Platform-shell management pages use platform menus and content-only pages; same-task Tabs do not require canvas-nav-data or a navigation shell.',
-            sample: 'canvas-nav-data',
-            loader: 'loadCanvasNavigation',
-            parameters: ['items', 'appType?', 'formUuid?', 'csrfToken?', 'hiddenNav?', 'signal?', 'mode?', 'resolveAccess?'],
-            app_type_required: 'platform, independent or any declared access',
-            modes: ['local', 'platform', 'independent'],
-            local_policy: 'Presentation-only views require key/viewKey/targetType=local and no href/url; no platform navigation request. Declared access still requires real resolveAccess. Business data and mutations retain platform permission checks.',
-            platform_policy: 'Every leaf binds formUuid/navUuid. Local views must not be filtered through platform navigation; configuration errors fail before network requests.',
-            layout_policy: 'Long pages use canvas-nav-content layout=document with natural height; canvas-nav-top uses headerOnly and overlay. Default full-width sticky header; navigationPosition=fixed stays within page bounds when the host prevents sticky. Workspace retains bounded flex and inner scrolling.',
-            default_mode: 'platform',
-            mode_meaning: 'Permission/filtering source for an already planned custom menu; platform mode does not mean platform-shell pages should render another menu.',
-            resolve_access_required: 'independent mode or any declared access',
-            resolve_access_input: ['appType', 'requirements', 'signal'],
-            requirement_fields: ['formUuid', 'operation', 'viewUuid?'],
-            resolve_access_output: '{appType,grants:[{formUuid,operation,viewUuid?,allowed:boolean}]}',
-            builtin_permission_adapter: false,
-            permission_policy: 'Current viewer, exact resource/operation/view and allowed===true; errors never fall back to unrestricted menus. dataScope is enforced by platform permissions, not menu filtering.',
-          },
-        },
+        navigation_policy: 'Before PRD planning, reuse explicit navigation choices. During first-time intake, ask only when ownership is unknown and offer exactly two neutral options with no preselection: "宜搭原生导航" (使用宜搭自带的导航菜单。) and "自定义导航" (在自定义页面里定制菜单的样式和操作方式，替代宜搭自带的导航菜单。). Native means platform navigation. The agent chooses layout from module count, hierarchy, switching frequency, content width and target device; do not ask layout or presentation-style questions. Prefer top for few shallow modules and wide content, side for many frequently accessed modules, L-shaped/mixed for business domains with child modules, and custom dock for lightweight mobile entries. Preserve user-specified layouts. Store resolved type/source/reason/variant in the brief, distinguishing user ownership from agent layout reasoning. Platform navigation uses update-app --layout top|side|l_shape --show-app-nav, which writes layoutDirection=top|side|l_shape and hideAppNav=n. Preserve stored navType unchanged; do not derive or invent it and do not add a --nav-type option. Without --layout, normalize stored legacy layoutDirection and navType using the yc-utils application rules (hoz plus top_side means l_shape; missing layout uses top_fold/top_side for top/l_shape). Shell page-level top_fold/none overrides do not belong in app settings. Custom side/top/mixed/dock is a page layout and requires app and per-page navigation hiding with readback. Verify persisted layoutDirection and hideAppNav; updatedFields and themeVerification do not prove navigation persistence. Navigation tone is separate from layout.',
+        design_mode_policy: 'Analyze requirements first. First-time builds include new apps and existing apps without business pages. Reuse detailed supplied plans; if the mode is unspecified, ask whether to prepare a PRD for confirmation (Plan, more detailed and slower) or build from the supplied requirements (Fast). Without detailed requirements, offer Fast and Plan neutrally. Confirm unresolved navigation ownership, visual style and page scope before planning or resource creation; the agent determines navigation layout from the business context without a layout question. Existing business apps only clarify the current change. A named resource-only request with explicitScope.allowInferredResources=false skips unrelated navigation and visual questions. Standard Plan uses design-plan init parallelTasks, then executes the returned materialize.command exactly once with business-file and visual-file; preview and --from-preview are only for explicitly incremental large plans. Confirm the displayed revision before building, and do not materialize or patch again after confirmation.',
+        product_design_policy: 'yida-requirement-analysis owns shared facts and first-time intake. yida-prd owns business planning; yida-design owns visual design. Reuse the same confirmed brief and supplied details. Prepare business and base visuals concurrently, then bind visuals to settled page tasks. yida-app merges and checks the artifacts before creating resources. Plan uses the compact authoring contract and selected theme context; the CLI reads full templates and renders all artifacts.',
+        ui_guidance_policy: 'Page implementation consumes yida-prd prd.md for positioning, information architecture, page prototype, native form entry policy, material strategy, business-specific checks, resource creation order, page implementation delivery order, navigation order, and acceptance criteria; it consumes yida-design design.md for app custom theme CSS delivery, themeColor/navTheme, visual states, visualScaffold, surface material, rounded rules, density rules, components, state styling, and page-level imageNeed. When a page is imageNeed=required, or beneficial with declared image slots, yida-image-assets prepares a traceable asset manifest before that page is implemented; imageNeed=none skips the branch. prd.md and design.md remain the only design sources of truth. Page implementation may extract page-spec.json as a derived implementation handoff from prd.md + design.md; conflicts are resolved by sending business conflicts to yida-prd and visual conflicts to yida-design before regenerating the spec. Core normal forms default to 1-3 business sample records before page implementation, followed by query readback. An explicit opt-out, configuration dictionary, sensitive data, or lack of safely constructible values requires a recorded skip reason. Screenshots, public sharing, data-source deep binding, and fine navigation grouping are optional after explicit user request or PRD acceptance criteria.',
+        default_nav_order_policy: 'For custom navigation, implement PRD navigation order in the custom shell and verify app/page navigation hiding; skip platform nav-group ordering. For platform navigation: after the primary page is successfully published, perform exactly one navigation order operation. If the PRD names a navigation order, publish without --auto-nav-order and then call openyida nav-group order <appType> <items...>. If the PRD only gives broad groups or is missing navigation order, use openyida publish ... --auto-nav-order and do not call nav-group order or auto-order afterward. Explicit and automatic ordering are mutually exclusive; never generate per-item move loops. The fallback priority is portal/home/workbench entry > business handling > data management > business analytics > system configuration.',
+        final_link_policy: 'Return exactly one user-visible application entry group, never one artifact or link card per form, process, report, schema, manifest, PRD, design file, or intermediate artifact. The group always contains the app workbench URL. Add the clean custom page URL only when PRD entryMode=standalone and get-form-config readback confirms isRenderNav=false. Add the admin URL only when agent-capabilities application_entry_policy.entries.admin=include. Summarize other business resources in prose by default, but every resource count, seed-record count, and completed/verified claim must come from that resource\'s own successful result or readback. When the user or caller explicitly requests a resource manifest, resource UUIDs/IDs, publish status, or test-data summary, include one concise verified delivery manifest in the final prose and do not substitute link cards for it.',
         application_entry_policy: {
           delivery_unit: 'single_application_entry_group',
-          workbench: {
-            include: 'when_workspace_in_scope',
-            url: '{base_url}/{appType}/workbench',
-            task_url: '{base_url}/{appType}/workbench/{formUuid}',
-            view_parameter: 'viewUuid',
-            selection: 'one verified planned management default; use real resource/view IDs; no homepage required',
-          },
+          workbench: { include: 'always', url: '{base_url}/{appType}/workbench' },
           custom: {
             include: 'when_entry_mode_standalone_and_is_render_nav_false_readback',
             url: '{base_url}/{appType}/custom/{formUuid}',
           },
           admin: {
-            include: 'default_for_complete_application',
+            include: 'follow_agent_capabilities_application_entry_policy',
             url: '{base_url}/{appType}/admin',
           },
           internal_artifacts: 'never_user_visible',
@@ -1906,7 +1617,7 @@ function summarizeLocalizedCommands(commands) {
           'yida-data-source-connectors',
           'yida-dashboard',
         ],
-        completion_contract: 'Clarify core functions and actual usage first, then resolve the required resource context and settle entry navigation before PRD planning. Fast generates prd.md and design.md in parallel; Plan uses design-plan init/preview/materialize/patch and confirms the current revision. Validate both artifacts, create or reuse app and core forms/processes, seed and query-check core normal-form samples or record an allowed skip reason, then implement the primary page in PRD resource order, publish it, apply PRD navigation order or lightweight fallback navigation order for platform navigation, or verify app and per-page hiding for application-wide custom navigation. For a standalone frontend in a platform-navigation app, verify that page independently and retain workspace navigation. Return one named application entry group. Include workbench when a management or unified workspace is in scope; backend-only delivers its business backend and developer admin URL without adding a frontend; frontend-only delivery includes its verified frontend entry and developer admin URL, without inventing a business backend. Always include developer adminUrl for complete application delivery unless explicitly excluded by the user, regardless of auth runtime; this is separate from the optional business backend. Use create-app or app-list URL fields and state any unavailable entry instead of silently omitting it. Put the verified business summary, results and remaining work in the delivery artifact description; use the final response when no delivery tool is available.',
+        completion_contract: 'Resolve context, organize requirements and settle navigation before PRD planning. Fast generates prd.md and design.md in parallel; Plan uses design-plan init/preview/materialize/patch and confirms the current revision. Validate both artifacts, create or reuse app and core forms/processes, seed and query-check core normal-form samples or record an allowed skip reason, then implement the primary page in PRD resource order, publish it, apply PRD navigation order or lightweight fallback navigation order for platform navigation, or verify app and per-page hiding for custom navigation, and return one named application entry group. The group contains workbench, conditionally a verified standalone custom entry, and admin only for non-cloud agents. Business resources are summarized instead of emitted as individual delivery artifacts.',
       },
     },
   };