create-windy 0.2.28 → 0.2.30

package/dist/cli.js

@@ -394,8 +394,9 @@ var optionalModuleManifests = [
       "apps/server/src/example-permissions.ts"
     ],
     documentation: ["docs/development/example-work-order.md"],
-    schemaFiles: ["packages/database/src/schema/work-orders.ts"],
-    databaseTables: ["work_orders"]
+    schemaFiles: ["packages/example-work-order/src/drizzle-schema.ts"],
+    databaseTables: ["work_orders"],
+    databaseLineageOwner: "module"
   }
 ];
 function module(name, label, description, dependencies) {
@@ -414,6 +415,7 @@ function module(name, label, description, dependencies) {
     documentation: [],
     schemaFiles: [],
     databaseTables: [],
+    databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
     uninstallPolicy: "retain-data"
@@ -628,6 +630,7 @@ function module2(name, label, description, selection, dependencies = []) {
     documentation: [],
     schemaFiles: [],
     databaseTables: [],
+    databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
     uninstallPolicy: "retain-data"
@@ -735,6 +738,7 @@ var helpText = `create-windy <项目名> [选项]
   create-windy update --check [--cwd <目录>]
   create-windy update --dry-run [--to <版本>] [--cwd <目录>]
   create-windy update [--to <版本>] [--cwd <目录>]
+  create-windy schema handoff [--config <JSON>] [--cwd <目录>]
 
 选项：
   --profile private-enterprise  单组织、单租户、私有部署 profile
@@ -1200,8 +1204,11 @@ var ignoredFiles = new Set([
   ".windy/update-state.json"
 ]);
 var projectOwnedRoots = [
+  "module-schema.lineages.json",
+  "module-schema",
   "apps/web/src/app",
   "apps/server/src/installed-business-modules.ts",
+  "apps/server/src/domain-schema",
   "apps/server/src/work-order",
   "packages/example-work-order"
 ];
@@ -1320,10 +1327,13 @@ async function materializeSelectedModules(targetDirectory, selectedNames) {
     removedPackageNames.add(dependency.name);
   }
   await stripModuleBlocks(targetDirectory, selected);
-  await pruneDatabaseArtifacts(targetDirectory, removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
-    ...databaseTables,
-    ...transientDatabaseTables
-  ]), removed.flatMap(({ databaseStatementTokens }) => databaseStatementTokens));
+  await pruneDatabaseArtifacts(targetDirectory, [
+    ...removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
+      ...databaseTables,
+      ...transientDatabaseTables
+    ]),
+    ...moduleDistributionCatalog.filter(({ databaseLineageOwner }) => databaseLineageOwner === "module").flatMap(({ databaseTables }) => databaseTables)
+  ], removed.flatMap(({ databaseStatementTokens }) => databaseStatementTokens));
   const removedRoots = removed.flatMap((manifest) => [
     ...manifest.packages,
     ...manifest.fileRoots,
@@ -1624,6 +1634,7 @@ License 签发中心、独立签名服务、Vault、发布治理、内部任务
 规划属于软件供应方控制面，不进入客户 Starter。
 
 - 架构：从 [Module Manifest 组合](./architecture/module-manifest-composition.md) 开始。
+- 数据库：业务表使用 [Migration Bundle 与独立 Drizzle lineage](./architecture/migration-bundle.md)。
 - 平台开发：从 [系统 CRUD API](./platform/system-crud-api.md) 和 [CRUD 生成器](./development/crud-generator.md) 开始。
 ${includeOfflineLicense ? "- License 消费端：[离线激活与安装协议](./license/license-offline-activation-code.md)；运行时能力由 npm 依赖 `@southwind-ai/license` 提供。" : ""}
 - 运维：[可观测性](./operations/observability.md) 与 [运维总览](./platform/operations-overview.md)。
@@ -1748,6 +1759,9 @@ create-windy 在本机 \`.env\` 中随机生成的 \`WINDY_BOOTSTRAP_ADMIN_PASSW
 | ---------- | -------- | ------------ | ---- |
 ${moduleRows}
 
+项目自有业务模块以 \`apps/server/src/installed-business-modules.ts\` 装配的 Module Manifest
+为准；shared-scaffold README 不复制项目业务 Key，避免平台升级固化产品命名。
+
 精确生成来源和选择记录在 \`.windy/generation.json\`。当前版本已提供可回滚的
 \`windy update\`；通用 \`module add/remove\` 尚未交付，不要把 Feature Flag 关闭当成
 模块已经卸载。
@@ -1876,6 +1890,7 @@ var templateRootFiles = [
   "bunfig.toml",
   "docker-compose.yml",
   "drizzle.config.ts",
+  "module-schema.lineages.json",
   "package.json"
 ];
 var templateDirectories = [
@@ -1902,6 +1917,7 @@ var templateDocumentationFiles = [
   "docs/architecture/data-scope-query-enforcement.md",
   "docs/architecture/durable-jobs.md",
   "docs/architecture/minimal-approval-workflow.md",
+  "docs/architecture/migration-bundle.md",
   "docs/architecture/module-manifest-composition.md",
   "docs/architecture/object-storage.md",
   "docs/architecture/search-provider-protocol.md",
@@ -4337,7 +4353,9 @@ var recipes = [
   { id: "starter-0.2.24-to-0.2.25", from: "0.2.24", to: "0.2.25" },
   { id: "starter-0.2.25-to-0.2.26", from: "0.2.25", to: "0.2.26" },
   { id: "starter-0.2.26-to-0.2.27", from: "0.2.26", to: "0.2.27" },
-  { id: "starter-0.2.27-to-0.2.28", from: "0.2.27", to: "0.2.28" }
+  { id: "starter-0.2.27-to-0.2.28", from: "0.2.27", to: "0.2.28" },
+  { id: "starter-0.2.28-to-0.2.29", from: "0.2.28", to: "0.2.29" },
+  { id: "starter-0.2.29-to-0.2.30", from: "0.2.29", to: "0.2.30" }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
   if (sourceVersion === targetVersion)
@@ -4436,8 +4454,13 @@ var known026DownstreamHashes = new Map([
   [
     "apps/server/src/module-bootstrap.ts",
     "4b79ab5d0271b3111c7cb546e0b581d483da8c5de263f8d2f9671d53f60c5099"
+  ],
+  [
+    "apps/web/src/router/router-test-fixtures.ts",
+    "e498fa34cf6ab6dbabf014ec11233772f30995dceab250ff4f993323834ebc82"
   ]
 ]);
+var known026RouterHash = "55a60a28d7a8e88386a38cab763b1eac43d66a11e60b84a21acefacc29c6f44d";
 var known023DownstreamHashes = new Map([
   [
     "apps/server/src/http-app.ts",
@@ -4460,11 +4483,32 @@ var known023DownstreamHashes = new Map([
     "81fb08f26e5baa3238606d62b9c46761a68c90f3967ea639b178c80c74c69fc1"
   ]
 ]);
+var known029DownstreamHashes = new Map([
+  [
+    "README.md",
+    "a8b10907e151c28768678c016d102f98c3414981a65a314d75b2049fb1f9fe35"
+  ],
+  [
+    "drizzle.config.ts",
+    "c765b611d68b3a42375ea3530048fc7f32b1c7161257fa16f9dd093b580963e3"
+  ],
+  [
+    "packages/database/src/schema/index.ts",
+    "250682d5182b580a9e1fae27e7a596e6a503b41d6f5dca9e4322f5c6094d0976"
+  ],
+  [
+    "apps/web/src/router/shared-scaffold-neutrality.webtest.ts",
+    "420f1093eefcccf2a321e12c403628854c9a4a0b459ee14e96883557cd71dcaa"
+  ]
+]);
 var wrongExampleDescription = "创建时包含了 `work-order` 示例模块，用于演示 Module Manifest 接入；它不是生产工单产品，可以在正式开发前替换。";
 var correctCoreDescription = "创建时未选择 `work-order` 示例模块，当前项目只包含平台模块。";
 var wrongExampleRow = /^\|\s*示例工单\s*\|\s*已包含\s*\|$/m;
 var correctCoreRow = /^\|\s*示例工单\s*\|\s*未包含\s*\|$/m;
 function repairKnownDerivedFile(input) {
+  const ownershipRepair = repairKnown029Downstream(input);
+  if (ownershipRepair !== undefined)
+    return ownershipRepair;
   const neutralRouterRepair = repairKnown026Downstream(input);
   if (neutralRouterRepair !== undefined)
     return neutralRouterRepair;
@@ -4488,29 +4532,55 @@ function repairKnownDerivedFile(input) {
   }
   return input.content.replace(wrongExampleDescription, correctCoreDescription).replace(wrongExampleRow, targetRow);
 }
-function repairKnown026Downstream(input) {
-  if (input.sourceVersion !== "0.2.26")
+function repairKnown029Downstream(input) {
+  if (input.sourceVersion !== "0.2.29" || known029DownstreamHashes.get(input.path) !== contentHash(input.content)) {
     return;
-  if (known026DownstreamHashes.get(input.path) === contentHash(input.content)) {
+  }
+  if (input.path === "drizzle.config.ts" || input.path === "apps/web/src/router/shared-scaffold-neutrality.webtest.ts") {
     return input.targetContent;
   }
-  if (input.path === "apps/web/src/router/index.ts" && input.targetContent.includes("@/pages/auth/LoginPage.vue")) {
-    return replaceKnown(input.content, 'import LoginPage from "@/app/auth/LijianLoginPage.vue";', 'import LoginPage from "@/pages/auth/LoginPage.vue";');
+  if (input.path === "packages/database/src/schema/index.ts") {
+    return removeUnknownSchemaExports(input.content, input.targetContent);
   }
-  if (input.path !== "apps/web/src/router/router-test-fixtures.ts" || input.targetContent.includes("lijian.")) {
-    return;
+  if (input.path === "README.md") {
+    return removeProjectModuleRows(input.content, input.targetContent);
   }
-  const replacements2 = [
-    ["lijian.case.read", "case.read"],
-    ["lijian.evidence.read", "evidence.read"],
-    ["lijian.case", "case"],
-    ["lijian.evidence.import", "evidence.import"],
-    ["lijian.evidence", "evidence"]
-  ];
-  if (!replacements2.every(([source]) => input.content.includes(source))) {
+}
+function removeUnknownSchemaExports(content, targetContent) {
+  const targetExports = new Set(targetContent.split(`
+`).filter((line) => line.startsWith("export ") && line.includes(" from ")));
+  return content.split(`
+`).filter((line) => !line.startsWith("export ") || !line.includes(" from ") || targetExports.has(line)).join(`
+`);
+}
+function removeProjectModuleRows(content, targetContent) {
+  const neutralNote = extractProjectModuleNote(targetContent);
+  const withoutProjectRows = content.split(`
+`).filter((line) => !/^\|.*\|\s*产品模块\s*\|.*\|$/.test(line)).join(`
+`);
+  if (!neutralNote || withoutProjectRows.includes(neutralNote.trim())) {
+    return withoutProjectRows;
+  }
+  return replaceKnown(withoutProjectRows, `
+精确生成来源和选择记录在`, `
+${neutralNote}
+精确生成来源和选择记录在`);
+}
+function extractProjectModuleNote(content) {
+  const start = content.indexOf("项目自有业务模块以");
+  const end = content.indexOf(`
+精确生成来源和选择记录在`, start);
+  return start < 0 || end < 0 ? undefined : content.slice(start, end);
+}
+function repairKnown026Downstream(input) {
+  if (input.sourceVersion !== "0.2.26")
     return;
+  if (known026DownstreamHashes.get(input.path) === contentHash(input.content)) {
+    return input.targetContent;
+  }
+  if (input.path === "apps/web/src/router/index.ts" && contentHash(input.content) === known026RouterHash && input.targetContent.includes("@/pages/auth/LoginPage.vue")) {
+    return replaceKnown(input.content, /import LoginPage from "@\/app\/auth\/[^"\n]+LoginPage\.vue";/, 'import LoginPage from "@/pages/auth/LoginPage.vue";');
   }
-  return replacements2.reduce((content, [source, target]) => content.replaceAll(source, target), input.content);
 }
 function repairKnown023Downstream(input) {
   if (input.sourceVersion !== "0.2.23" || known023DownstreamHashes.get(input.path) !== contentHash(input.content)) {
@@ -5466,9 +5536,301 @@ function compareVersions2(left, right) {
   return 0;
 }
 
+// src/module-schema/cli.ts
+import { resolve as resolve7 } from "node:path";
+
+// src/module-schema/handoff.ts
+import {
+  access as access4,
+  cp,
+  mkdir as mkdir8,
+  mkdtemp as mkdtemp3,
+  readFile as readFile18,
+  readdir as readdir7,
+  rename,
+  rm as rm9,
+  writeFile as writeFile13
+} from "node:fs/promises";
+import { dirname as dirname5, join as join18, relative as relative4 } from "node:path";
+
+// src/module-schema/config.ts
+import { readFile as readFile17 } from "node:fs/promises";
+import { isAbsolute, relative as relative3, resolve as resolve6 } from "node:path";
+async function readModuleSchemaLineageConfig(projectDirectory, configPath) {
+  const absolutePath = resolveProjectPath(projectDirectory, configPath);
+  const parsed = JSON.parse(await readFile17(absolutePath, "utf8"));
+  if (!isConfig(parsed)) {
+    throw new Error("Module schema lineage 配置无效");
+  }
+  validatePaths(projectDirectory, parsed);
+  validateUniqueness(parsed);
+  if (parsed.modules.length === 0) {
+    throw new Error("Module schema lineage 配置没有待交接的业务模块");
+  }
+  return parsed;
+}
+function resolveProjectPath(projectDirectory, path2) {
+  if (isAbsolute(path2))
+    throw new Error(`路径必须相对项目根目录：${path2}`);
+  const resolved = resolve6(projectDirectory, path2);
+  const projectRelative = relative3(projectDirectory, resolved);
+  if (projectRelative.startsWith("..") || isAbsolute(projectRelative)) {
+    throw new Error(`路径越出项目根目录：${path2}`);
+  }
+  return resolved;
+}
+function isConfig(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const config = value;
+  return config.schemaVersion === 1 && isPlatform(config.platform) && Array.isArray(config.modules) && config.modules.every(isModule);
+}
+function isPlatform(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const platform = value;
+  return isStringList(platform.schema) && typeof platform.out === "string";
+}
+function isModule(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const module3 = value;
+  return typeof module3.key === "string" && /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/.test(module3.key) && isStringList(module3.schema) && typeof module3.out === "string" && isStringList(module3.legacyPlatformTables) && module3.legacyPlatformTables.every(isTableName);
+}
+function isStringList(value) {
+  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && item.length > 0);
+}
+function isTableName(value) {
+  return /^[a-z_][a-z0-9_]*(?:\.[a-z_][a-z0-9_]*)?$/.test(value);
+}
+function validatePaths(projectDirectory, config) {
+  for (const path2 of [
+    ...config.platform.schema,
+    config.platform.out,
+    ...config.modules.flatMap(({ schema, out }) => [...schema, out])
+  ]) {
+    resolveProjectPath(projectDirectory, path2);
+  }
+  const platformOut = resolveProjectPath(projectDirectory, config.platform.out);
+  for (const module3 of config.modules) {
+    const moduleOut = resolveProjectPath(projectDirectory, module3.out);
+    if (moduleOut === platformOut || moduleOut.startsWith(`${platformOut}/`) || platformOut.startsWith(`${moduleOut}/`)) {
+      throw new Error(`${module3.key} 的 lineage 输出不能与平台目录重叠`);
+    }
+  }
+}
+function validateUniqueness(config) {
+  const keys = new Set;
+  const outputs = new Set;
+  const tables = new Set;
+  for (const module3 of config.modules) {
+    if (keys.has(module3.key))
+      throw new Error(`Module key 重复：${module3.key}`);
+    if (outputs.has(module3.out))
+      throw new Error(`Module lineage 输出重复：${module3.out}`);
+    keys.add(module3.key);
+    outputs.add(module3.out);
+    for (const table of module3.legacyPlatformTables) {
+      if (tables.has(table))
+        throw new Error(`旧平台表重复声明：${table}`);
+      tables.add(table);
+    }
+  }
+}
+
+// src/module-schema/sql.ts
+function validatePlatformHandoffSql(sql, allowedTables) {
+  const allowed = new Set(allowedTables);
+  const dropped = new Set;
+  const statements = sql.replaceAll("--> statement-breakpoint", "").split(";").map((statement) => statement.trim()).filter(Boolean);
+  for (const statement of statements) {
+    const match = statement.match(/^DROP TABLE(?: IF EXISTS)? (?:(?:"([^"]+)")\.)?"([^"]+)"(?: CASCADE)?$/i);
+    if (!match) {
+      throw new Error(`交接差异包含非 DROP TABLE DDL：${statement}`);
+    }
+    const table = normalizeTableName(match[1], match[2]);
+    if (!allowed.has(table)) {
+      throw new Error(`交接差异试图删除未声明的表：${table}`);
+    }
+    dropped.add(table);
+  }
+  const missing = [...allowed].filter((table) => !dropped.has(table));
+  if (missing.length > 0) {
+    throw new Error(`平台 snapshot 未包含声明的旧表：${missing.join("、")}`);
+  }
+}
+function metadataOnlySql(kind) {
+  const owner = kind === "platform" ? "platform lineage release" : "module lineage baseline";
+  return `-- Windy ${owner}.
+-- Metadata-only migration: intentionally no executable DDL.
+`;
+}
+function normalizeTableName(schema, table) {
+  return schema && schema !== "public" ? `${schema}.${table}` : table;
+}
+
+// src/module-schema/handoff.ts
+async function handoffModuleSchemaLineages(options) {
+  const project = options.projectDirectory;
+  await assertCleanGit(project);
+  const config = await readModuleSchemaLineageConfig(project, options.configPath || "module-schema.lineages.json");
+  await validateSchemaSources(project, config);
+  const temporaryRoot = await createTemporaryRoot(project);
+  const execute = options.execute || executeDrizzleGenerate;
+  try {
+    const stagedModules = await stageModuleLineages(project, temporaryRoot, config, execute);
+    const stagedPlatform = await stagePlatformLineage(project, temporaryRoot, config, execute);
+    await installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform);
+  } finally {
+    await rm9(temporaryRoot, { recursive: true, force: true });
+  }
+  return {
+    moduleCount: config.modules.length,
+    tableCount: config.modules.reduce((total, module3) => total + module3.legacyPlatformTables.length, 0)
+  };
+}
+async function stageModuleLineages(project, temporaryRoot, config, execute) {
+  const outputs = [];
+  for (const [index, module3] of config.modules.entries()) {
+    const output = join18(temporaryRoot, `module-${index}`);
+    await mkdir8(output, { recursive: true });
+    const generatedConfig = join18(temporaryRoot, `module-${index}.config.ts`);
+    await writeDrizzleConfig(generatedConfig, project, module3.schema, relative4(temporaryRoot, output));
+    await execute(generatedConfig, temporaryRoot);
+    const sqlFiles = await listSqlFiles(output);
+    if (sqlFiles.length !== 1) {
+      throw new Error(`${module3.key} baseline 必须恰好生成一个 migration`);
+    }
+    await writeFile13(join18(output, sqlFiles[0]), metadataOnlySql("module"));
+    await writeFile13(join18(output, "lineage.json"), `${JSON.stringify({
+      schemaVersion: 1,
+      moduleKey: module3.key,
+      schema: module3.schema,
+      legacyPlatformTables: module3.legacyPlatformTables,
+      productionExecutor: "module-migration-bundle"
+    }, null, 2)}
+`);
+    outputs.push(output);
+  }
+  return outputs;
+}
+async function stagePlatformLineage(project, temporaryRoot, config, execute) {
+  const source = resolveProjectPath(project, config.platform.out);
+  const output = join18(temporaryRoot, "platform");
+  await cp(source, output, { recursive: true });
+  const before = new Set(await listSqlFiles(output));
+  const generatedConfig = join18(temporaryRoot, "platform.config.ts");
+  await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative4(temporaryRoot, output));
+  await execute(generatedConfig, temporaryRoot);
+  const created = (await listSqlFiles(output)).filter((path2) => !before.has(path2));
+  if (created.length !== 1) {
+    throw new Error("平台 lineage handoff 必须恰好生成一个 migration");
+  }
+  const sqlPath = join18(output, created[0]);
+  const allowed = config.modules.flatMap(({ legacyPlatformTables }) => legacyPlatformTables);
+  validatePlatformHandoffSql(await readFile18(sqlPath, "utf8"), allowed);
+  await writeFile13(sqlPath, metadataOnlySql("platform"));
+  return output;
+}
+async function installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform) {
+  const platform = resolveProjectPath(project, config.platform.out);
+  const backup = join18(temporaryRoot, "platform-backup");
+  const installed = [];
+  await rename(platform, backup);
+  try {
+    await rename(stagedPlatform, platform);
+    for (const [index, module3] of config.modules.entries()) {
+      const output = resolveProjectPath(project, module3.out);
+      if (await exists2(output)) {
+        throw new Error(`${module3.key} lineage 输出已存在，禁止覆盖`);
+      }
+      await mkdir8(dirname5(output), { recursive: true });
+      await rename(stagedModules[index], output);
+      installed.push(output);
+    }
+  } catch (error) {
+    await rm9(platform, { recursive: true, force: true });
+    await rename(backup, platform);
+    for (const output of installed)
+      await rm9(output, { recursive: true, force: true });
+    throw error;
+  }
+}
+async function writeDrizzleConfig(path2, project, schemas, out) {
+  const absoluteSchemas = schemas.map((schema) => resolveProjectPath(project, schema));
+  await writeFile13(path2, `import { defineConfig } from "drizzle-kit";
+export default defineConfig(${JSON.stringify({
+    dialect: "postgresql",
+    schema: absoluteSchemas,
+    out,
+    casing: "snake_case"
+  })});
+`);
+}
+async function validateSchemaSources(project, config) {
+  for (const schema of [
+    ...config.platform.schema,
+    ...config.modules.flatMap(({ schema: schema2 }) => schema2)
+  ]) {
+    await access4(resolveProjectPath(project, schema));
+  }
+  for (const module3 of config.modules) {
+    if (await exists2(resolveProjectPath(project, module3.out))) {
+      throw new Error(`${module3.key} lineage 输出已存在，禁止覆盖`);
+    }
+  }
+}
+async function createTemporaryRoot(project) {
+  const windy = join18(project, ".windy");
+  await mkdir8(windy, { recursive: true });
+  return await mkdtemp3(join18(windy, "module-schema-handoff-"));
+}
+async function listSqlFiles(root) {
+  return (await readdir7(root)).filter((path2) => path2.endsWith(".sql")).sort();
+}
+async function executeDrizzleGenerate(configPath, cwd) {
+  await assertProcess("bunx", ["--bun", "drizzle-kit", "generate", "--config", configPath], cwd, true);
+}
+async function assertCleanGit(project) {
+  const result2 = await captureProcess("git", ["status", "--porcelain"], project);
+  if (result2.code !== 0 || result2.stdout.trim()) {
+    throw new Error("schema lineage handoff 前必须保持 Git 工作区干净");
+  }
+}
+async function exists2(path2) {
+  try {
+    await access4(path2);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/module-schema/cli.ts
+async function runModuleSchemaCommand(args) {
+  if (args[0] !== "schema")
+    return false;
+  if (args[1] !== "handoff") {
+    throw new Error("当前 schema 命令只支持 handoff");
+  }
+  const projectDirectory = resolve7(readValue3(args, "--cwd") || process.cwd());
+  const result2 = await handoffModuleSchemaLineages({
+    projectDirectory,
+    configPath: readValue3(args, "--config")
+  });
+  console.log(`Module schema lineage 交接完成：${result2.moduleCount} 个模块、${result2.tableCount} 张旧平台 snapshot 表`);
+  return true;
+}
+function readValue3(args, flag) {
+  const index = args.indexOf(flag);
+  return index >= 0 ? args[index + 1] : undefined;
+}
+
 // src/cli.ts
 async function main() {
   const args = process.argv.slice(2);
+  if (await runModuleSchemaCommand(args))
+    return;
   if (await runLifecycleCommand(args))
     return;
   const options = parseArguments(args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.2.28",
+  "version": "0.2.30",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "1cdccb9ee1b4e496461282ed7bdab3689fc7009f",
-  "generatorVersion": "0.2.28",
+  "templateCommit": "c61be0fc258ae679c0c0b43d7a838688985d7f0f",
+  "generatorVersion": "0.2.30",
   "modules": [
     {
       "name": "system",

package/template/README.md

@@ -107,6 +107,9 @@ create-windy 在本机 `.env` 中随机生成的 `WINDY_BOOTSTRAP_ADMIN_PASSWORD
 | `system.data-governance` | 未包含 | H2 | 敏感字段、明文访问和治理导出。 |
 | `work-order` | 未包含 | H2 | 可替换的业务模块接入示例。 |
 
+项目自有业务模块以 `apps/server/src/installed-business-modules.ts` 装配的 Module Manifest
+为准；shared-scaffold README 不复制项目业务 Key，避免平台升级固化产品命名。
+
 精确生成来源和选择记录在 `.windy/generation.json`。当前版本已提供可回滚的
 `windy update`；通用 `module add/remove` 尚未交付，不要把 Feature Flag 关闭当成
 模块已经卸载。

package/template/apps/server/src/work-order/drizzle-repository.ts

@@ -1,5 +1,4 @@
-import { workOrders } from "@southwind-ai/database";
-import type { WorkOrder } from "@southwind-ai/example-work-order";
+import { workOrders, type WorkOrder } from "@southwind-ai/example-work-order";
 import type { NodePgDatabase } from "drizzle-orm/node-postgres";
 import {
   DrizzleScopedEntityRepository,

package/template/apps/web/src/router/router-test-fixtures.ts

@@ -1,7 +1,9 @@
 import type { WebAccessSnapshot } from "@/layout/navigation";
+import type { RouteRecordRaw } from "vue-router";
 // @windy-module system.license begin
 import type { PlatformLicenseSnapshot } from "@/services/license-api";
 // @windy-module system.license end
+import { routes } from "./index";
 
 export function provider(snapshot: WebAccessSnapshot) {
   return { refresh: async () => snapshot };
@@ -41,6 +43,7 @@ export function authProvider(
 }
 
 export function accessSnapshot(): WebAccessSnapshot {
+  const routeAccess = collectRouteAccess(routes);
   return {
     actor: {
       id: "user_1",
@@ -51,6 +54,7 @@ export function accessSnapshot(): WebAccessSnapshot {
         "system.admin.access",
         "system.audit.read",
         "system.feature.read",
+        ...routeAccess.permissionKeys,
       ],
     },
     menus: [],
@@ -70,6 +74,34 @@ export function accessSnapshot(): WebAccessSnapshot {
         allowed: true,
         reason: "allowed",
       },
+      ...routeAccess.featureKeys.map((key) => ({
+        key,
+        enabled: true,
+        visible: "visible" as const,
+        allowed: true,
+        reason: "allowed" as const,
+      })),
     ],
   };
 }
+
+export function collectRouteAccess(routeRecords: RouteRecordRaw[]) {
+  const permissionKeys = new Set<string>();
+  const featureKeys = new Set<string>();
+  const visit = (records: RouteRecordRaw[]) => {
+    for (const route of records) {
+      if (typeof route.meta?.permissionKey === "string") {
+        permissionKeys.add(route.meta.permissionKey);
+      }
+      if (typeof route.meta?.featureKey === "string") {
+        featureKeys.add(route.meta.featureKey);
+      }
+      if (route.children) visit(route.children);
+    }
+  };
+  visit(routeRecords);
+  return {
+    permissionKeys: [...permissionKeys],
+    featureKeys: [...featureKeys],
+  };
+}

package/template/apps/web/src/router/shared-scaffold-neutrality.webtest.ts

@@ -1,14 +1,46 @@
 import { describe, expect, test } from "vitest";
+import type { RouteRecordRaw } from "vue-router";
 import routerSource from "./index.ts?raw";
 import fixtureSource from "./router-test-fixtures.ts?raw";
+import { collectRouteAccess } from "./router-test-fixtures";
 
 describe("Router shared-scaffold 中性契约", () => {
-  test("平台登录页与测试快照不固化下游产品命名", () => {
+  test("平台登录页使用中性共享页面", () => {
     expect(routerSource).toContain(
       'import LoginPage from "@/pages/auth/LoginPage.vue";',
     );
-    expect(`${routerSource}\n${fixtureSource}`).not.toMatch(
-      /LijianLoginPage|lijian\./,
-    );
+    expect(fixtureSource).toContain("collectRouteAccess");
+  });
+
+  test("测试快照只从项目注入路由递归派生访问键", () => {
+    expect(collectRouteAccess([])).toEqual({
+      permissionKeys: [],
+      featureKeys: [],
+    });
+    const projectRoutes: RouteRecordRaw[] = [
+      {
+        path: "/records",
+        component: {},
+        meta: {
+          permissionKey: "records.read",
+          featureKey: "records",
+        },
+        children: [
+          {
+            path: "import",
+            component: {},
+            meta: {
+              permissionKey: "records.import",
+              featureKey: "records.import",
+            },
+          },
+        ],
+      },
+    ];
+
+    expect(collectRouteAccess(projectRoutes)).toEqual({
+      permissionKeys: ["records.read", "records.import"],
+      featureKeys: ["records", "records.import"],
+    });
   });
 });