openyida 2026.9.3 → 2026.9.4

package/README.md

@@ -166,9 +166,9 @@ For a user-facing list of supported features and matching CLI commands, see [Ope
 ### Application and Form Management
 
 ```bash
-openyida create-app "CRM"
+openyida create-app --name "CRM" --desc "Customer management"
 openyida sample yida-design app-theme --output .cache/openyida/crm/app-theme.css
-openyida create-app --name "CRM" --desc "Customer management" --theme-file .cache/openyida/crm/app-theme.css --nav-theme light --logo-source appIcon --layout l_shape
+openyida update-app APP_XXX --theme-file .cache/openyida/crm/app-theme.css --nav-theme light --logo-source appIcon --layout l_shape
 openyida app-list --size 20
 openyida corp-efficiency
 openyida create-form create APP_XXX "Customer" .cache/openyida/forms/customer-fields.json
@@ -391,6 +391,10 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida app-list [--size N]` | List my Yida apps |
 | `openyida corp-efficiency [overview\|details\|detail\|groups\|notify] [options] [--open\|--no-open]` | Query enterprise efficiency overview and detail reports |
 | `openyida create-app "<name>"\|--name <name> [options] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a Yida app |
+| `openyida design-plan init <requirement-brief.json> [--theme-id <id>] [--output-dir <dir>] [--json]` | Initialize a plan draft from confirmed requirements |
+| `openyida design-plan preview <build-plan.json> --part-file <module.json> [--json]` | Update plan drafts by module |
+| `openyida design-plan materialize <build-plan.json> [--from-preview \| --business-file <json> --visual-file <json>] [--output-dir <dir>] [--check] [--json]` | Generate and validate design-plan artifacts from build-plan.json |
+| `openyida design-plan patch <build-plan.json> --set <path=value> [--set <path=value> ...] [--materialize] [--output-dir <dir>] [--json]` | Patch a design plan by field path and invalidate prior confirmation |
 | `openyida update-app <appType> [--name "..."] [--theme-file <css>] [--nav-theme light\|dark\|white\|gray] [--logo-source appIcon\|customImage] [--layout side\|top\|l_shape] [--hide-app-nav\|--show-app-nav]` | Update app info |
 | `openyida app-online <appType> [--to-ding-app-center] [--show-app-center]` | Enable a Yida app |
 | `openyida app-offline <appType> [--to-ding-app-center] [--show-app-center]` | Disable a Yida app |
@@ -404,6 +408,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 
 | Command | Description |
 |---------|-------------|
+| `openyida create-form batch <appType> <plan.json> [--concurrency 1..4] [--check] [--json]` | Create forms concurrently by dependency |
 | `openyida create-form create <appType> "<formTitle>" <fieldsJsonFile> [--icon auto\|<iconName>] [--locale zh_CN\|en_US\|ja_JP] [--open\|--no-open]` | Create a form page |
 | `openyida create-form icons [--json]` | List available form navigation icons |
 | `openyida create-form validate-fields <fieldsJsonOrFile> [--json]` | Validate form field JSON locally |
@@ -424,7 +429,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida check-page <src> [--compat]` | Check custom page standards |
 | `openyida compile <src>` | Compile custom page locally |
 | `openyida publish <src> <appType> <formUuid> [--health-check] [--force] [--canvas] [--auto-nav-order] [--open\|--no-open]` | Compile and publish custom page |
-| `openyida update-form-config <appType> ...` | Update form configuration |
+| `openyida update-form-config <appType> <formUuid> <true\|false\|keep> "<title>" [--locale zh_CN\|en_US\|ja_JP]` | Update form configuration |
 | `openyida get-form-config <appType> <formUuid> [--json]` | Query form configuration |
 
 ### Data & Permissions
@@ -510,7 +515,7 @@ Run `openyida --help` or `openyida <command> --help` for detailed usage.
 | `openyida a2a <serve\|agent-card> [options]` | Start local read-only A2A adapter or print Agent Card |
 | `openyida bridge start [--token <pair-token>] [--port 6736] [--origin https://demo.aliwork.com] [--open\|--no-open]` | Start OpenYida local web bridge service |
 | `openyida copy [--force]` | Copy project working directory |
-| `openyida sample [--list]` | Output code samples/templates |
+| `openyida sample [--list] [<skill> <name>] [--output <file>] [--var KEY=VALUE ...] [--design-file <design.md>]` | Output code samples/templates |
 | `openyida doctor [--fix]` | Environment diagnostics & auto-fix |
 | `openyida db-seq-fix [--fix]` | Detect and repair PostgreSQL sequence drift |
 | `openyida formula evaluate <formula\|file> [--schema file]` | Static-check Yida formula syntax and field refs |

package/bin/yida.js

@@ -746,6 +746,12 @@ async function main() {
       break;
     }
 
+    case 'design-plan': {
+      const { run } = require('../lib/design-plan/design-plan');
+      await run(args);
+      break;
+    }
+
     case 'create-page': {
       const { run } = require('../lib/app/create-page');
       await run(args);

package/lib/app/canvas-compile.js

@@ -48,6 +48,7 @@ const {
   formatFormDetailLinkMessage,
 } = require('./form-detail-link-guard');
 const { t } = require('../core/i18n');
+const { assertInlineCssStructure } = require('./inline-css-guard');
 
 /**
  * 依赖 → window 别名白名单，用于把 import 改写到运行时全局对象。
@@ -791,6 +792,7 @@ function compileCanvasLocal(source, options = {}) {
   assertNoUnavailableCanvasInstanceApis(source, options);
   assertNoBareDependencyGlobals(source, options);
   assertNoManualDependencyGlobals(source, options);
+  assertInlineCssStructure(source, options);
 
   const importedModules = extractImportedModules(source);
 

package/lib/app/create-app.js

@@ -1,8 +1,8 @@
 /**
  * create-app.js - 宜搭应用创建命令
  *
- * 用法：openyida create-app "<appName>" [description] [icon] [iconColor] [colour] [navTheme] [layoutDirection]
- *       openyida create-app --name "<appName>" --theme-file ./app-theme.css [--nav-theme light] [--logo-source appIcon] [--layout l_shape]
+ * 用法：openyida create-app "<appName>" [description] [icon] [iconColor]
+ *       openyida create-app --name "<appName>" [--desc "<description>"]
  */
 
 'use strict';
@@ -19,19 +19,10 @@ const { t } = require('../core/i18n');
 const { buildYidaI18n, normalizeYidaLocale, resolveContentLocale } = require('../core/yida-i18n');
 const { parseOpenOption, withBrowserHandoff } = require('../core/browser-handoff');
 const { throwCommandError } = require('../core/command-errors');
-const { assertPresetThemeKey } = require('./theme-presets');
 const { resolveBuilderAiSource } = require('./builder-ai-source');
-const { normalizeCssColorToHex, readThemeCssFile } = require('./custom-theme');
-const {
-  applyCustomThemeUpdate,
-  assertLogoSource,
-  assertNavTheme,
-  normalizeLayoutDirection,
-} = require('./update-app');
 
 const DEFAULT_APP_OPTIONS = {
   iconColor: '#0089FF',
-  colour: 'podBlue',
 };
 
 // 与 yida-next/src/components/IconSelect/Icon.js 保持一致。
@@ -61,25 +52,12 @@ const APP_ICON_NAMES = Object.freeze([
   'shenbao',
   'daka',
 ]);
-const DEFAULT_CREATE_LAYOUT_DIRECTION = 'l_shape';
 
 function selectRandomAppIcon(random = Math.random) {
   const index = Math.min(APP_ICON_NAMES.length - 1, Math.floor(random() * APP_ICON_NAMES.length));
   return APP_ICON_NAMES[Math.max(0, index)];
 }
 
-function applyThemeFileCreateDefaults(params, themeFileInfo) {
-  if (!params || !params.themeFile || !themeFileInfo) {return params;}
-  const iconColor = normalizeCssColorToHex(themeFileInfo.themeColor);
-  if (!iconColor) {
-    throw new Error(`--color-brand1-6 无法转换为应用图标色: ${themeFileInfo.themeColor}`);
-  }
-  return {
-    ...params,
-    iconColor,
-  };
-}
-
 const INDUSTRY_APP_DEFAULTS = [
   {
     name: 'legal',
@@ -87,7 +65,6 @@ const INDUSTRY_APP_DEFAULTS = [
     options: {
       icon: 'xian-falv',
       iconColor: '#5C72FF',
-      colour: 'podBlue',
     },
   },
   {
@@ -96,7 +73,6 @@ const INDUSTRY_APP_DEFAULTS = [
     options: {
       icon: 'xian-diqiu',
       iconColor: '#00B853',
-      colour: 'podGreen',
     },
   },
   {
@@ -105,7 +81,6 @@ const INDUSTRY_APP_DEFAULTS = [
     options: {
       icon: 'xian-baogao',
       iconColor: '#14A9FF',
-      colour: 'podBlue',
     },
   },
   {
@@ -114,7 +89,6 @@ const INDUSTRY_APP_DEFAULTS = [
     options: {
       icon: 'xian-qiye',
       iconColor: '#5C72FF',
-      colour: 'podBlue',
     },
   },
 ];
@@ -206,11 +180,7 @@ function parseCreateAppArgs(args, random = Math.random) {
     description: null,
     icon: null,
     iconColor: null,
-    colour: null,
-    navTheme: null,
-    logoSource: null,
-    layoutDirection: null,
-    themeFile: null,
+
     locale: null,
   };
   const positional = [];
@@ -241,30 +211,20 @@ function parseCreateAppArgs(args, random = Math.random) {
         break;
       case '--theme':
       case '--colour':
-        params.colour = readOptionValue(args, index, arg);
-        index++;
-        break;
       case '--nav-theme':
       case '--navTheme':
-        params.navTheme = readOptionValue(args, index, arg);
-        index++;
-        break;
       case '--logo-source':
       case '--logoSource':
-        params.logoSource = readOptionValue(args, index, arg);
-        index++;
-        break;
       case '--theme-file':
       case '--custom-theme-file':
-        params.themeFile = readOptionValue(args, index, arg);
-        index++;
-        break;
+      case '--theme-color':
+      case '--themeColor':
+      case '--hide-app-nav':
+      case '--show-app-nav':
       case '--layout':
       case '--layout-direction':
       case '--layoutDirection':
-        params.layoutDirection = readOptionValue(args, index, arg);
-        index++;
-        break;
+        throw new Error(t('create_app.update_only_option', arg));
       case '--locale':
       case '--content-locale':
       case '--lang':
@@ -282,8 +242,8 @@ function parseCreateAppArgs(args, random = Math.random) {
     }
   }
 
-  if (positional.length > 7) {
-    throw new Error(`Too many positional arguments: ${positional.slice(7).join(' ')}`);
+  if (positional.length > 4) {
+    throw new Error(t('create_app.update_only_option', 'colour/navTheme/layoutDirection'));
   }
 
   params.appName = params.appName || positional[0] || null;
@@ -298,24 +258,6 @@ function parseCreateAppArgs(args, random = Math.random) {
       : inferredDefaults.icon
   );
   params.iconColor = params.iconColor || positional[3] || inferredDefaults.iconColor;
-  params.colour = params.colour || positional[4] || inferredDefaults.colour;
-  assertPresetThemeKey(params.colour);
-  params.navTheme = params.navTheme || positional[5] || null;
-  params.layoutDirection = normalizeLayoutDirection(
-    params.layoutDirection || positional[6] || DEFAULT_CREATE_LAYOUT_DIRECTION
-  );
-  assertNavTheme(params.navTheme);
-  assertLogoSource(params.logoSource);
-  if (params.logoSource && !params.themeFile) {
-    throw new Error('--logo-source must be used with --theme-file so the navigation theme is saved atomically');
-  }
-  if (params.themeFile) {
-    params.navTheme = params.navTheme || 'light';
-    params.logoSource = params.logoSource || 'appIcon';
-    if (params.logoSource !== 'appIcon') {
-      throw new Error('create-app only supports --logo-source appIcon because a new app has no homepageLogo image yet');
-    }
-  }
   params.industry = inferredDefaults.industry;
 
   return params;
@@ -337,9 +279,6 @@ function buildCreateAppPayload(params, auth, contentLocale, openExclusive, openP
     description,
     icon,
     iconColor,
-    colour,
-    navTheme,
-    layoutDirection,
   } = params;
   const iconValue = `${icon}%%${iconColor}`;
   const payload = {
@@ -348,7 +287,6 @@ function buildCreateAppPayload(params, auth, contentLocale, openExclusive, openP
     description: JSON.stringify(buildYidaI18n(description, { en_US: description, ja_JP: description })),
     icon: iconValue,
     iconUrl: iconValue,
-    colour,
     defaultLanguage: contentLocale,
     openExclusive,
     openPhysicColumn,
@@ -359,12 +297,6 @@ function buildCreateAppPayload(params, auth, contentLocale, openExclusive, openP
     builderAiSource: resolveBuilderAiSource(),
     createWithModernTheme: 'y',
   };
-  if (navTheme) {
-    payload.navTheme = navTheme;
-  }
-  if (layoutDirection) {
-    payload.layoutDirection = layoutDirection;
-  }
   return payload;
 }
 
@@ -390,13 +322,7 @@ async function run(args) {
     chalkError(t('create_app.usage'), { hint: t('create_app.example') });
   }
 
-  // 在远端创建应用前先完成本地主题校验，避免 CSS 缺失或 token 非法时留下半成品应用。
-  if (params.themeFile) {
-    const themeFileInfo = readThemeCssFile(params.themeFile);
-    Object.assign(params, applyThemeFileCreateDefaults(params, themeFileInfo));
-  }
-
-  const { appName, description, icon, iconColor, colour, navTheme, logoSource, layoutDirection, themeFile } = params;
+  const { appName, description, icon, iconColor } = params;
 
   const { c, banner, step, label, success: chalkSuccess, result: chalkResult } = require('../core/chalk');
 
@@ -404,7 +330,6 @@ async function run(args) {
   label('Name', appName);
   label('Desc', description);
   label('Icon', `${icon} ${c.dim}(${iconColor})${c.reset}`);
-  label('Theme', `${themeFile || colour} / ${navTheme || 'default'} / ${logoSource || 'default'} / ${layoutDirection || 'default'}`);
 
   // Step 1: 读取登录态
   step(1, t('common.step_login', 1));
@@ -447,29 +372,6 @@ async function run(args) {
     const appUrl = `${authRef.baseUrl}/${appType}/workbench`;
     const corpId = authRef.corpId || (authRef.authData && authRef.authData.corp_id) || '';
 
-    if (themeFile) {
-      step(3, t('update_app.step_update'));
-      const themeResponse = await applyCustomThemeUpdate(appType, {
-        themeFile,
-        navTheme,
-        logoSource,
-        layoutDirection,
-      }, authRef);
-      if (!themeResponse || !themeResponse.success) {
-        const errorMsg = themeResponse
-          ? themeResponse.errorMsg || t('common.unknown_error')
-          : t('common.request_failed');
-        console.log(JSON.stringify({
-          success: false,
-          appCreated: true,
-          appType,
-          themeApplied: false,
-          error: errorMsg,
-        }));
-        throwCommandError(t('create_app.failed', errorMsg));
-      }
-    }
-
     chalkResult(true, t('create_app.success'), [
       ['appType', appType],
       ['Corp ID', corpId || t('common.unknown_error')],
@@ -486,10 +388,6 @@ async function run(args) {
         appName,
         corpId,
         url: appUrl,
-        themeFile: themeFile || undefined,
-        navTheme: themeFile ? navTheme : undefined,
-        logoSource: themeFile ? logoSource : undefined,
-        layoutDirection,
       },
       appUrl,
       { stage: 'create_app_success', title: appName },
@@ -505,11 +403,9 @@ async function run(args) {
 
 module.exports = {
   APP_ICON_NAMES,
-  DEFAULT_CREATE_LAYOUT_DIRECTION,
   run,
   parseCreateAppArgs,
   inferAppDefaults,
   selectRandomAppIcon,
-  applyThemeFileCreateDefaults,
   buildCreateAppPayload,
 };

package/lib/app/create-form/batch.js

@@ -0,0 +1,204 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { execFile } = require('child_process');
+const { CliError } = require('../../core/cli-error');
+const { t } = require('../../core/i18n');
+
+function invalid(reason) {
+  throw new CliError(t('create_form.batch_invalid'), { code: 'FORM_BATCH_INVALID', details: { reason } });
+}
+
+function parseArgs(args) {
+  const options = { concurrency: 3, check: false };
+  const positional = [];
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--concurrency') {
+      options.concurrency = Number(args[++i]);
+    } else if (args[i] === '--check') {
+      options.check = true;
+    } else if (args[i] !== '--json' && args[i] !== '--quiet') {
+      if (args[i].startsWith('--')) { invalid(args[i]); }
+      positional.push(args[i]);
+    }
+  }
+  if (positional.length !== 2 || !Number.isInteger(options.concurrency) || options.concurrency < 1 || options.concurrency > 4) {
+    invalid('create-form batch <appType> <plan.json> [--concurrency 1..4] [--check] [--json]');
+  }
+  return { ...options, appType: positional[0], file: path.resolve(positional[1]) };
+}
+
+// References occupy a complete JSON value; ordinary text is preserved.
+function mapReferences(value, resolve) {
+  if (Array.isArray(value)) { return value.map(item => mapReferences(item, resolve)); }
+  if (!value || typeof value !== 'object') { return value; }
+  if ('$form' in value) {
+    if (typeof value.$form !== 'string' || Object.keys(value).some(key => !['$form', 'field'].includes(key)) ||
+      ('field' in value && (typeof value.field !== 'string' || !value.field.trim()))) { invalid('reference'); }
+    return resolve(value.$form, value.field);
+  }
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, mapReferences(item, resolve)]));
+}
+
+function loadPlan(file) {
+  const input = JSON.parse(fs.readFileSync(file, 'utf8'));
+  if (!Array.isArray(input.forms) || !input.forms.length) { invalid('forms'); }
+  const forms = input.forms.map(form => {
+    if (!form || !/^[a-zA-Z][\w-]*$/.test(form.key || '') || typeof form.title !== 'string' || !form.title.trim() ||
+      (form.fields === undefined) === (form.fieldsFile === undefined) ||
+      (form.dependsOn !== undefined && (!Array.isArray(form.dependsOn) || form.dependsOn.some(key => typeof key !== 'string')))) { invalid('form'); }
+    if (Object.keys(form).some(key => !['key', 'title', 'fields', 'fieldsFile', 'dependsOn', 'formUuid', 'icon', 'locale'].includes(key))) { invalid(form.key); }
+    if (form.formUuid !== undefined && (typeof form.formUuid !== 'string' || !form.formUuid.startsWith('FORM'))) { invalid(form.key); }
+    for (const key of ['icon', 'locale']) { if (form[key] !== undefined && typeof form[key] !== 'string') { invalid(key); } }
+    const fields = form.fieldsFile === undefined ? form.fields : JSON.parse(fs.readFileSync(path.resolve(path.dirname(file), form.fieldsFile), 'utf8'));
+    const dependencies = new Set(form.dependsOn || []);
+    mapReferences(fields, key => { dependencies.add(key); return 'FORM-PRECHECK'; });
+    return { ...form, fields, dependsOn: [...dependencies] };
+  });
+  const remaining = new Set(forms.map(form => form.key));
+  if (remaining.size !== forms.length) { invalid('duplicate key'); }
+  for (const form of forms) {
+    if (form.dependsOn.some(key => !remaining.has(key))) { invalid(`unknown dependency: ${form.key}`); }
+  }
+  const groups = [];
+  while (remaining.size) {
+    const group = forms.filter(form => remaining.has(form.key) && form.dependsOn.every(key => !remaining.has(key))).map(form => form.key);
+    if (!group.length) { invalid('cyclic dependency'); }
+    groups.push(group);
+    group.forEach(key => remaining.delete(key));
+  }
+  return { forms, groups };
+}
+
+function parseOutput(stdout) {
+  const text = String(stdout || '').trim();
+  try { return JSON.parse(text); } catch (_) { /* Some commands emit progress before JSON. */ }
+  let output = null;
+  for (const line of text.split('\n').reverse()) {
+    try {
+      const item = JSON.parse(line);
+      if (!output) { output = item; }
+      const formUuid = item.formUuid || item.details?.formUuid;
+      if (output && typeof output === 'object' && formUuid && !output.formUuid) { output.formUuid = formUuid; }
+    } catch (_) { /* Read the last result and preserve any earlier created ID. */ }
+  }
+  return output;
+}
+
+function execute(args) {
+  return new Promise((resolve, reject) => {
+    execFile(process.execPath, [path.resolve(__dirname, '../../../bin/yida.js'), ...args, '--quiet'], {
+      env: { ...process.env, YIDA_QUIET: '1' }, timeout: 180000, maxBuffer: 8 * 1024 * 1024,
+    }, (error, stdout) => {
+      const output = parseOutput(stdout);
+      if (error || !output || typeof output !== 'object' || output.success === false) {
+        reject(Object.assign(new Error(output?.errorMsg || output?.error || error?.message || 'Missing command result'), { output }));
+      } else { resolve(output); }
+    });
+  });
+}
+
+async function schedule(forms, concurrency, results, worker, save) {
+  const pending = new Set(forms.filter(form => !results[form.key] || results[form.key].status === 'blocked').map(form => form.key));
+  const active = new Map();
+  try {
+    while (pending.size || active.size) {
+      const pendingBefore = pending.size;
+      for (const form of forms) {
+        if (!pending.has(form.key)) { continue; }
+        const deps = form.dependsOn.map(key => results[key]?.status);
+        if (form.dependsOn.some(key => !pending.has(key) && !active.has(key) && ['failed', 'running', 'blocked'].includes(results[key]?.status))) {
+          results[form.key] = { status: 'blocked' }; pending.delete(form.key); save(); continue;
+        }
+        if (active.size >= concurrency || deps.some(status => status !== 'success')) { continue; }
+        pending.delete(form.key);
+        results[form.key] = { status: 'running' };
+        save(); // Record intent before the request; an interrupted create is never retried automatically.
+        const task = Promise.resolve().then(() => worker(form)).then(output => {
+          results[form.key] = { ...output, status: 'success' };
+        }, error => {
+          results[form.key] = { ...results[form.key], status: 'failed', error: error.message,
+            ...((error.output?.formUuid || error.output?.details?.formUuid) ? { formUuid: error.output.formUuid || error.output.details.formUuid } : {}) };
+        }).then(() => { save(); }).finally(() => active.delete(form.key));
+        active.set(form.key, task);
+      }
+      if (active.size) {
+        await Promise.race(active.values());
+      } else if (pending.size === pendingBefore && pending.size) { invalid('unresolved dependency'); }
+    }
+  } catch (error) {
+    await Promise.allSettled(active.values());
+    throw error;
+  }
+  return results;
+}
+
+async function run(args, dependencies = {}) {
+  const options = parseArgs(args);
+  const { forms, groups } = loadPlan(options.file);
+  const call = dependencies.execute || execute;
+  // Preflight all definitions before the first remote mutation.
+  await schedule(forms.map(form => ({ ...form, dependsOn: [] })), options.concurrency, {}, async form => {
+    const fields = mapReferences(form.fields, (_, field) => field ? 'textField_precheck' : 'FORM-PRECHECK');
+    return call(['create-form', 'validate-fields', JSON.stringify(fields), '--json']);
+  }, () => {}).then(results => {
+    if (Object.values(results).some(item => item.status !== 'success')) { invalid(results); }
+  });
+  if (options.check) {
+    const output = { success: true, checked: true, groups, concurrency: options.concurrency };
+    console.log(JSON.stringify(output)); return output;
+  }
+  const stateFile = `${options.file}.state.json`;
+  const lock = `${stateFile}.lock`;
+  const fingerprint = crypto.createHash('sha256').update(JSON.stringify({ appType: options.appType, forms })).digest('hex');
+  const fd = fs.openSync(lock, 'wx');
+  const save = state => {
+    fs.writeFileSync(`${stateFile}.tmp`, JSON.stringify(state, null, 2));
+    fs.renameSync(`${stateFile}.tmp`, stateFile);
+  };
+  try {
+    const state = fs.existsSync(stateFile) ? JSON.parse(fs.readFileSync(stateFile, 'utf8')) : { fingerprint, appType: options.appType, results: {} };
+    if (state.fingerprint !== fingerprint) { invalid('state belongs to a different plan; reconcile existing resources before preparing a new batch'); }
+    await call(['login', '--check-only', '--json']);
+    // Read back completed resources before their IDs can be used by dependent forms.
+    for (const form of forms.filter(item => state.results[item.key]?.status === 'success')) {
+      const item = state.results[form.key];
+      const schema = await call(['get-schema', options.appType, item.formUuid, '--field-map-json']);
+      if (schema.formUuid !== item.formUuid || !Array.isArray(schema.fields)) { invalid(`schema: ${form.key}`); }
+      item.fields = schema.fields;
+    }
+    const resolve = (key, field) => {
+      const item = state.results[key];
+      if (item?.status !== 'success') { invalid(`dependency: ${key}`); }
+      if (!field) { return item.formUuid; }
+      const matches = item.fields.filter(value => value.fieldId === field || value.label === field);
+      if (matches.length !== 1) { invalid(`field: ${key}.${field}`); }
+      return matches[0].fieldId;
+    };
+    await schedule(forms, options.concurrency, state.results, async form => {
+      let formUuid = form.formUuid;
+      if (!formUuid) {
+        const argv = ['create-form', 'create', options.appType, form.title, JSON.stringify(mapReferences(form.fields, resolve)), '--no-open'];
+        for (const key of ['icon', 'locale']) { if (form[key]) { argv.push(`--${key}`, form[key]); } }
+        const created = await call(argv);
+        if (typeof created.formUuid !== 'string' || !created.formUuid.startsWith('FORM')) { invalid(`create result: ${form.key}`); }
+        formUuid = created.formUuid;
+      }
+      state.results[form.key].formUuid = formUuid;
+      save(state);
+      const schema = await call(['get-schema', options.appType, formUuid, '--field-map-json']);
+      if (schema.formUuid !== formUuid || !Array.isArray(schema.fields)) { invalid(`schema: ${form.key}`); }
+      return { formUuid, fields: schema.fields };
+    }, () => save(state));
+    const output = { success: Object.values(state.results).every(item => item.status === 'success'), groups, stateFile, results: state.results };
+    console.log(JSON.stringify(output));
+    if (!output.success) { process.exitCode = 1; }
+    return output;
+  } finally {
+    fs.closeSync(fd); fs.unlinkSync(lock);
+  }
+}
+
+module.exports = { run, parseArgs, loadPlan, mapReferences, schedule, parseOutput };

package/lib/app/create-form.js

@@ -6079,6 +6079,7 @@ async function mainUpdate(parsedArgs, authRef) {
 // ── 主入口 ────────────────────────────────────────────
 
 async function run(args) {
+  if (args?.[0] === 'batch') { return require('./create-form/batch').run(args.slice(1)); }
   const parsedArgs = parseArgs(args);
   if (parsedArgs.help) {
     return parsedArgs;

package/lib/app/inline-css-guard.js

@@ -0,0 +1,79 @@
+'use strict';
+
+const Babel = require('@babel/standalone');
+const { CliError } = require('../core/cli-error');
+const { t } = require('../core/i18n');
+
+// 检查 CSS 的结构闭合，避免一个未闭合 var() 吞掉后续规则。
+// 不执行页面代码，也不把动态插值当成完整 CSS 进行猜测性校验。
+function findCssStructureIssue(css) {
+  const stack = [];
+  const pairs = { '(': ')', '[': ']', '{': '}' };
+  for (let index = 0; index < css.length; index++) {
+    const char = css[index];
+    if (char === '\\') { index++; continue; }
+    if (char === '/' && css[index + 1] === '*') {
+      const end = css.indexOf('*/', index + 2);
+      if (end < 0) { return { index, type: 'unclosed_comment' }; }
+      index = end + 1;
+    } else if (char === '"' || char === "'") {
+      const start = index;
+      for (index++; index < css.length; index++) {
+        if (css[index] === '\\') { index++; continue; }
+        if (css[index] === char) { break; }
+      }
+      if (index >= css.length) { return { index: start, type: 'unclosed_string' }; }
+    } else if (pairs[char]) {
+      stack.push({ char, index });
+    } else if (')]}'.includes(char)) {
+      const open = stack.pop();
+      if (!open || pairs[open.char] !== char) {
+        return { index: open ? open.index : index, type: 'mismatched_delimiter', expected: open && pairs[open.char], actual: char };
+      }
+    }
+  }
+  const open = stack.pop();
+  return open ? { index: open.index, type: 'unclosed_delimiter', expected: pairs[open.char] } : null;
+}
+
+function resolveStaticCss(pathRef, seen = new Set()) {
+  if (pathRef.isStringLiteral()) { return { text: pathRef.node.value, node: pathRef.node }; }
+  if (pathRef.isTemplateLiteral() && pathRef.node.expressions.length === 0) {
+    return { text: pathRef.node.quasis[0].value.cooked, node: pathRef.node };
+  }
+  if (pathRef.isIdentifier()) {
+    const binding = pathRef.scope.getBinding(pathRef.node.name);
+    if (binding && binding.constant && binding.path.isVariableDeclarator() && !seen.has(binding)) {
+      seen.add(binding);
+      return resolveStaticCss(binding.path.get('init'), seen);
+    }
+  }
+  return null;
+}
+
+function assertInlineCssStructure(source, options = {}) {
+  let ast;
+  try {
+    ast = Babel.packages.parser.parse(source, { sourceType: 'module', plugins: ['jsx', 'typescript'] });
+  } catch { return; } // JSX/TS 解析错误由主编译器报告。
+  const traverse = Babel.packages.traverse.default || Babel.packages.traverse;
+  traverse(ast, {
+    JSXElement(pathRef) {
+      const name = pathRef.node.openingElement.name;
+      if (name.type !== 'JSXIdentifier' || name.name !== 'style') { return; }
+      for (const child of pathRef.get('children')) {
+        const resolved = child.isJSXExpressionContainer() ? resolveStaticCss(child.get('expression')) : null;
+        if (!resolved || typeof resolved.text !== 'string') { continue; }
+        const issue = findCssStructureIssue(resolved.text);
+        if (!issue) { continue; }
+        const line = resolved.node.loc.start.line + resolved.text.slice(0, issue.index).split('\n').length - 1;
+        throw new CliError(t('publish.canvas_inline_css_invalid', line), {
+          code: 'OPENYIDA_CANVAS_INLINE_CSS_INVALID',
+          details: { stage: 'canvas_compile', sourcePath: options.sourcePath || '', line, ...issue },
+        });
+      }
+    },
+  });
+}
+
+module.exports = { assertInlineCssStructure, findCssStructureIssue };