create-windy 0.2.29 → 0.2.31

package/dist/cli.js

@@ -394,8 +394,9 @@ var optionalModuleManifests = [
       "apps/server/src/example-permissions.ts"
     ],
     documentation: ["docs/development/example-work-order.md"],
-    schemaFiles: ["packages/database/src/schema/work-orders.ts"],
-    databaseTables: ["work_orders"]
+    schemaFiles: ["packages/example-work-order/src/drizzle-schema.ts"],
+    databaseTables: ["work_orders"],
+    databaseLineageOwner: "module"
   }
 ];
 function module(name, label, description, dependencies) {
@@ -414,6 +415,7 @@ function module(name, label, description, dependencies) {
     documentation: [],
     schemaFiles: [],
     databaseTables: [],
+    databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
     uninstallPolicy: "retain-data"
@@ -628,6 +630,7 @@ function module2(name, label, description, selection, dependencies = []) {
     documentation: [],
     schemaFiles: [],
     databaseTables: [],
+    databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
     uninstallPolicy: "retain-data"
@@ -735,6 +738,7 @@ var helpText = `create-windy <项目名> [选项]
   create-windy update --check [--cwd <目录>]
   create-windy update --dry-run [--to <版本>] [--cwd <目录>]
   create-windy update [--to <版本>] [--cwd <目录>]
+  create-windy schema handoff [--config <JSON>] [--cwd <目录>]
 
 选项：
   --profile private-enterprise  单组织、单租户、私有部署 profile
@@ -1200,8 +1204,11 @@ var ignoredFiles = new Set([
   ".windy/update-state.json"
 ]);
 var projectOwnedRoots = [
+  "module-schema.lineages.json",
+  "module-schema",
   "apps/web/src/app",
   "apps/server/src/installed-business-modules.ts",
+  "apps/server/src/domain-schema",
   "apps/server/src/work-order",
   "packages/example-work-order"
 ];
@@ -1320,10 +1327,13 @@ async function materializeSelectedModules(targetDirectory, selectedNames) {
     removedPackageNames.add(dependency.name);
   }
   await stripModuleBlocks(targetDirectory, selected);
-  await pruneDatabaseArtifacts(targetDirectory, removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
-    ...databaseTables,
-    ...transientDatabaseTables
-  ]), removed.flatMap(({ databaseStatementTokens }) => databaseStatementTokens));
+  await pruneDatabaseArtifacts(targetDirectory, [
+    ...removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
+      ...databaseTables,
+      ...transientDatabaseTables
+    ]),
+    ...moduleDistributionCatalog.filter(({ databaseLineageOwner }) => databaseLineageOwner === "module").flatMap(({ databaseTables }) => databaseTables)
+  ], removed.flatMap(({ databaseStatementTokens }) => databaseStatementTokens));
   const removedRoots = removed.flatMap((manifest) => [
     ...manifest.packages,
     ...manifest.fileRoots,
@@ -1575,6 +1585,7 @@ var agentComposeService = `  agent-server:
       QWEN_API_URL: \${QWEN_API_URL:-}
       QWEN_API_KEY: \${QWEN_API_KEY:-}
       QWEN_MODEL: \${QWEN_MODEL:-}
+      AI_PROVIDER_HTTPS_HOST_ALLOWLIST: \${AI_PROVIDER_HTTPS_HOST_ALLOWLIST:-}
       AI_PROVIDER_CONNECT_TIMEOUT_MS: \${AI_PROVIDER_CONNECT_TIMEOUT_MS:-5000}
       AI_PROVIDER_REQUEST_TIMEOUT_MS: \${AI_PROVIDER_REQUEST_TIMEOUT_MS:-60000}
       AI_PROVIDER_MAX_RESPONSE_BYTES: \${AI_PROVIDER_MAX_RESPONSE_BYTES:-2097152}
@@ -1596,12 +1607,13 @@ function environmentExample(includeExample, includeAgent = true) {
 POSTGRES_PASSWORD=
 WINDY_BOOTSTRAP_ADMIN_PASSWORD=
 ${includeAgent ? `
-# Agent profile 仅由 Server 读取；不要使用 VITE_ 前缀。
+# Agent profile 仅由服务端 Agent Runtime 读取；不要使用 VITE_ 前缀。
 PLATFORM_ENABLE_AI=false
 AGENT_SERVER_INTERNAL_TOKEN=
 QWEN_API_URL=
 QWEN_API_KEY=
 QWEN_MODEL=
+AI_PROVIDER_HTTPS_HOST_ALLOWLIST=
 # AI_PROVIDER_CONNECT_TIMEOUT_MS=5000
 # AI_PROVIDER_REQUEST_TIMEOUT_MS=60000
 # AI_PROVIDER_MAX_RESPONSE_BYTES=2097152
@@ -1624,6 +1636,7 @@ License 签发中心、独立签名服务、Vault、发布治理、内部任务
 规划属于软件供应方控制面，不进入客户 Starter。
 
 - 架构：从 [Module Manifest 组合](./architecture/module-manifest-composition.md) 开始。
+- 数据库：业务表使用 [Migration Bundle 与独立 Drizzle lineage](./architecture/migration-bundle.md)。
 - 平台开发：从 [系统 CRUD API](./platform/system-crud-api.md) 和 [CRUD 生成器](./development/crud-generator.md) 开始。
 ${includeOfflineLicense ? "- License 消费端：[离线激活与安装协议](./license/license-offline-activation-code.md)；运行时能力由 npm 依赖 `@southwind-ai/license` 提供。" : ""}
 - 运维：[可观测性](./operations/observability.md) 与 [运维总览](./platform/operations-overview.md)。
@@ -1701,7 +1714,9 @@ bun run dev:agent
 \`\`\`
 
 公网 Provider URL 必须使用 HTTPS；本机、容器服务名和内网地址允许 HTTP。
-\`QWEN_API_KEY\` 只进入 Agent Server，不会进入 Web 环境或返回给客户端。运行与模块
+\`QWEN_API_KEY\`、Endpoint 和 Host allowlist 只进入 Agent Server，不会进入 Web
+环境或返回给客户端。公网 HTTPS Endpoint 的主机必须显式加入
+\`AI_PROVIDER_HTTPS_HOST_ALLOWLIST\`。运行与模块
 接入细节见 [Agent Runtime 接入](./docs/platform/agent-runtime.md)。
 
 MCP 客户端使用 \`http://localhost:9747/api/mcp\`，并通过平台 Bearer Token 或 Session
@@ -1748,6 +1763,9 @@ create-windy 在本机 \`.env\` 中随机生成的 \`WINDY_BOOTSTRAP_ADMIN_PASSW
 | ---------- | -------- | ------------ | ---- |
 ${moduleRows}
 
+项目自有业务模块以 \`apps/server/src/installed-business-modules.ts\` 装配的 Module Manifest
+为准；shared-scaffold README 不复制项目业务 Key，避免平台升级固化产品命名。
+
 精确生成来源和选择记录在 \`.windy/generation.json\`。当前版本已提供可回滚的
 \`windy update\`；通用 \`module add/remove\` 尚未交付，不要把 Feature Flag 关闭当成
 模块已经卸载。
@@ -1876,6 +1894,7 @@ var templateRootFiles = [
   "bunfig.toml",
   "docker-compose.yml",
   "drizzle.config.ts",
+  "module-schema.lineages.json",
   "package.json"
 ];
 var templateDirectories = [
@@ -1898,10 +1917,12 @@ var templateDirectories = [
 var templateDocumentationFiles = [
   "docs/adapters/ruoyi-vue-compatibility.md",
   "docs/architecture/admin-surface-boundary.md",
+  "docs/architecture/ai-egress.md",
   "docs/architecture/ai-runtime.md",
   "docs/architecture/data-scope-query-enforcement.md",
   "docs/architecture/durable-jobs.md",
   "docs/architecture/minimal-approval-workflow.md",
+  "docs/architecture/migration-bundle.md",
   "docs/architecture/module-manifest-composition.md",
   "docs/architecture/object-storage.md",
   "docs/architecture/search-provider-protocol.md",
@@ -4338,7 +4359,9 @@ var recipes = [
   { id: "starter-0.2.25-to-0.2.26", from: "0.2.25", to: "0.2.26" },
   { id: "starter-0.2.26-to-0.2.27", from: "0.2.26", to: "0.2.27" },
   { id: "starter-0.2.27-to-0.2.28", from: "0.2.27", to: "0.2.28" },
-  { id: "starter-0.2.28-to-0.2.29", from: "0.2.28", to: "0.2.29" }
+  { id: "starter-0.2.28-to-0.2.29", from: "0.2.28", to: "0.2.29" },
+  { id: "starter-0.2.29-to-0.2.30", from: "0.2.29", to: "0.2.30" },
+  { id: "starter-0.2.30-to-0.2.31", from: "0.2.30", to: "0.2.31" }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
   if (sourceVersion === targetVersion)
@@ -4466,11 +4489,32 @@ var known023DownstreamHashes = new Map([
     "81fb08f26e5baa3238606d62b9c46761a68c90f3967ea639b178c80c74c69fc1"
   ]
 ]);
+var known029DownstreamHashes = new Map([
+  [
+    "README.md",
+    "a8b10907e151c28768678c016d102f98c3414981a65a314d75b2049fb1f9fe35"
+  ],
+  [
+    "drizzle.config.ts",
+    "c765b611d68b3a42375ea3530048fc7f32b1c7161257fa16f9dd093b580963e3"
+  ],
+  [
+    "packages/database/src/schema/index.ts",
+    "250682d5182b580a9e1fae27e7a596e6a503b41d6f5dca9e4322f5c6094d0976"
+  ],
+  [
+    "apps/web/src/router/shared-scaffold-neutrality.webtest.ts",
+    "420f1093eefcccf2a321e12c403628854c9a4a0b459ee14e96883557cd71dcaa"
+  ]
+]);
 var wrongExampleDescription = "创建时包含了 `work-order` 示例模块，用于演示 Module Manifest 接入；它不是生产工单产品，可以在正式开发前替换。";
 var correctCoreDescription = "创建时未选择 `work-order` 示例模块，当前项目只包含平台模块。";
 var wrongExampleRow = /^\|\s*示例工单\s*\|\s*已包含\s*\|$/m;
 var correctCoreRow = /^\|\s*示例工单\s*\|\s*未包含\s*\|$/m;
 function repairKnownDerivedFile(input) {
+  const ownershipRepair = repairKnown029Downstream(input);
+  if (ownershipRepair !== undefined)
+    return ownershipRepair;
   const neutralRouterRepair = repairKnown026Downstream(input);
   if (neutralRouterRepair !== undefined)
     return neutralRouterRepair;
@@ -4494,6 +4538,46 @@ function repairKnownDerivedFile(input) {
   }
   return input.content.replace(wrongExampleDescription, correctCoreDescription).replace(wrongExampleRow, targetRow);
 }
+function repairKnown029Downstream(input) {
+  if (input.sourceVersion !== "0.2.29" || known029DownstreamHashes.get(input.path) !== contentHash(input.content)) {
+    return;
+  }
+  if (input.path === "drizzle.config.ts" || input.path === "apps/web/src/router/shared-scaffold-neutrality.webtest.ts") {
+    return input.targetContent;
+  }
+  if (input.path === "packages/database/src/schema/index.ts") {
+    return removeUnknownSchemaExports(input.content, input.targetContent);
+  }
+  if (input.path === "README.md") {
+    return removeProjectModuleRows(input.content, input.targetContent);
+  }
+}
+function removeUnknownSchemaExports(content, targetContent) {
+  const targetExports = new Set(targetContent.split(`
+`).filter((line) => line.startsWith("export ") && line.includes(" from ")));
+  return content.split(`
+`).filter((line) => !line.startsWith("export ") || !line.includes(" from ") || targetExports.has(line)).join(`
+`);
+}
+function removeProjectModuleRows(content, targetContent) {
+  const neutralNote = extractProjectModuleNote(targetContent);
+  const withoutProjectRows = content.split(`
+`).filter((line) => !/^\|.*\|\s*产品模块\s*\|.*\|$/.test(line)).join(`
+`);
+  if (!neutralNote || withoutProjectRows.includes(neutralNote.trim())) {
+    return withoutProjectRows;
+  }
+  return replaceKnown(withoutProjectRows, `
+精确生成来源和选择记录在`, `
+${neutralNote}
+精确生成来源和选择记录在`);
+}
+function extractProjectModuleNote(content) {
+  const start = content.indexOf("项目自有业务模块以");
+  const end = content.indexOf(`
+精确生成来源和选择记录在`, start);
+  return start < 0 || end < 0 ? undefined : content.slice(start, end);
+}
 function repairKnown026Downstream(input) {
   if (input.sourceVersion !== "0.2.26")
     return;
@@ -5458,9 +5542,301 @@ function compareVersions2(left, right) {
   return 0;
 }
 
+// src/module-schema/cli.ts
+import { resolve as resolve7 } from "node:path";
+
+// src/module-schema/handoff.ts
+import {
+  access as access4,
+  cp,
+  mkdir as mkdir8,
+  mkdtemp as mkdtemp3,
+  readFile as readFile18,
+  readdir as readdir7,
+  rename,
+  rm as rm9,
+  writeFile as writeFile13
+} from "node:fs/promises";
+import { dirname as dirname5, join as join18, relative as relative4 } from "node:path";
+
+// src/module-schema/config.ts
+import { readFile as readFile17 } from "node:fs/promises";
+import { isAbsolute, relative as relative3, resolve as resolve6 } from "node:path";
+async function readModuleSchemaLineageConfig(projectDirectory, configPath) {
+  const absolutePath = resolveProjectPath(projectDirectory, configPath);
+  const parsed = JSON.parse(await readFile17(absolutePath, "utf8"));
+  if (!isConfig(parsed)) {
+    throw new Error("Module schema lineage 配置无效");
+  }
+  validatePaths(projectDirectory, parsed);
+  validateUniqueness(parsed);
+  if (parsed.modules.length === 0) {
+    throw new Error("Module schema lineage 配置没有待交接的业务模块");
+  }
+  return parsed;
+}
+function resolveProjectPath(projectDirectory, path2) {
+  if (isAbsolute(path2))
+    throw new Error(`路径必须相对项目根目录：${path2}`);
+  const resolved = resolve6(projectDirectory, path2);
+  const projectRelative = relative3(projectDirectory, resolved);
+  if (projectRelative.startsWith("..") || isAbsolute(projectRelative)) {
+    throw new Error(`路径越出项目根目录：${path2}`);
+  }
+  return resolved;
+}
+function isConfig(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const config = value;
+  return config.schemaVersion === 1 && isPlatform(config.platform) && Array.isArray(config.modules) && config.modules.every(isModule);
+}
+function isPlatform(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const platform = value;
+  return isStringList(platform.schema) && typeof platform.out === "string";
+}
+function isModule(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const module3 = value;
+  return typeof module3.key === "string" && /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/.test(module3.key) && isStringList(module3.schema) && typeof module3.out === "string" && isStringList(module3.legacyPlatformTables) && module3.legacyPlatformTables.every(isTableName);
+}
+function isStringList(value) {
+  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && item.length > 0);
+}
+function isTableName(value) {
+  return /^[a-z_][a-z0-9_]*(?:\.[a-z_][a-z0-9_]*)?$/.test(value);
+}
+function validatePaths(projectDirectory, config) {
+  for (const path2 of [
+    ...config.platform.schema,
+    config.platform.out,
+    ...config.modules.flatMap(({ schema, out }) => [...schema, out])
+  ]) {
+    resolveProjectPath(projectDirectory, path2);
+  }
+  const platformOut = resolveProjectPath(projectDirectory, config.platform.out);
+  for (const module3 of config.modules) {
+    const moduleOut = resolveProjectPath(projectDirectory, module3.out);
+    if (moduleOut === platformOut || moduleOut.startsWith(`${platformOut}/`) || platformOut.startsWith(`${moduleOut}/`)) {
+      throw new Error(`${module3.key} 的 lineage 输出不能与平台目录重叠`);
+    }
+  }
+}
+function validateUniqueness(config) {
+  const keys = new Set;
+  const outputs = new Set;
+  const tables = new Set;
+  for (const module3 of config.modules) {
+    if (keys.has(module3.key))
+      throw new Error(`Module key 重复：${module3.key}`);
+    if (outputs.has(module3.out))
+      throw new Error(`Module lineage 输出重复：${module3.out}`);
+    keys.add(module3.key);
+    outputs.add(module3.out);
+    for (const table of module3.legacyPlatformTables) {
+      if (tables.has(table))
+        throw new Error(`旧平台表重复声明：${table}`);
+      tables.add(table);
+    }
+  }
+}
+
+// src/module-schema/sql.ts
+function validatePlatformHandoffSql(sql, allowedTables) {
+  const allowed = new Set(allowedTables);
+  const dropped = new Set;
+  const statements = sql.replaceAll("--> statement-breakpoint", "").split(";").map((statement) => statement.trim()).filter(Boolean);
+  for (const statement of statements) {
+    const match = statement.match(/^DROP TABLE(?: IF EXISTS)? (?:(?:"([^"]+)")\.)?"([^"]+)"(?: CASCADE)?$/i);
+    if (!match) {
+      throw new Error(`交接差异包含非 DROP TABLE DDL：${statement}`);
+    }
+    const table = normalizeTableName(match[1], match[2]);
+    if (!allowed.has(table)) {
+      throw new Error(`交接差异试图删除未声明的表：${table}`);
+    }
+    dropped.add(table);
+  }
+  const missing = [...allowed].filter((table) => !dropped.has(table));
+  if (missing.length > 0) {
+    throw new Error(`平台 snapshot 未包含声明的旧表：${missing.join("、")}`);
+  }
+}
+function metadataOnlySql(kind) {
+  const owner = kind === "platform" ? "platform lineage release" : "module lineage baseline";
+  return `-- Windy ${owner}.
+-- Metadata-only migration: intentionally no executable DDL.
+`;
+}
+function normalizeTableName(schema, table) {
+  return schema && schema !== "public" ? `${schema}.${table}` : table;
+}
+
+// src/module-schema/handoff.ts
+async function handoffModuleSchemaLineages(options) {
+  const project = options.projectDirectory;
+  await assertCleanGit(project);
+  const config = await readModuleSchemaLineageConfig(project, options.configPath || "module-schema.lineages.json");
+  await validateSchemaSources(project, config);
+  const temporaryRoot = await createTemporaryRoot(project);
+  const execute = options.execute || executeDrizzleGenerate;
+  try {
+    const stagedModules = await stageModuleLineages(project, temporaryRoot, config, execute);
+    const stagedPlatform = await stagePlatformLineage(project, temporaryRoot, config, execute);
+    await installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform);
+  } finally {
+    await rm9(temporaryRoot, { recursive: true, force: true });
+  }
+  return {
+    moduleCount: config.modules.length,
+    tableCount: config.modules.reduce((total, module3) => total + module3.legacyPlatformTables.length, 0)
+  };
+}
+async function stageModuleLineages(project, temporaryRoot, config, execute) {
+  const outputs = [];
+  for (const [index, module3] of config.modules.entries()) {
+    const output = join18(temporaryRoot, `module-${index}`);
+    await mkdir8(output, { recursive: true });
+    const generatedConfig = join18(temporaryRoot, `module-${index}.config.ts`);
+    await writeDrizzleConfig(generatedConfig, project, module3.schema, relative4(temporaryRoot, output));
+    await execute(generatedConfig, temporaryRoot);
+    const sqlFiles = await listSqlFiles(output);
+    if (sqlFiles.length !== 1) {
+      throw new Error(`${module3.key} baseline 必须恰好生成一个 migration`);
+    }
+    await writeFile13(join18(output, sqlFiles[0]), metadataOnlySql("module"));
+    await writeFile13(join18(output, "lineage.json"), `${JSON.stringify({
+      schemaVersion: 1,
+      moduleKey: module3.key,
+      schema: module3.schema,
+      legacyPlatformTables: module3.legacyPlatformTables,
+      productionExecutor: "module-migration-bundle"
+    }, null, 2)}
+`);
+    outputs.push(output);
+  }
+  return outputs;
+}
+async function stagePlatformLineage(project, temporaryRoot, config, execute) {
+  const source = resolveProjectPath(project, config.platform.out);
+  const output = join18(temporaryRoot, "platform");
+  await cp(source, output, { recursive: true });
+  const before = new Set(await listSqlFiles(output));
+  const generatedConfig = join18(temporaryRoot, "platform.config.ts");
+  await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative4(temporaryRoot, output));
+  await execute(generatedConfig, temporaryRoot);
+  const created = (await listSqlFiles(output)).filter((path2) => !before.has(path2));
+  if (created.length !== 1) {
+    throw new Error("平台 lineage handoff 必须恰好生成一个 migration");
+  }
+  const sqlPath = join18(output, created[0]);
+  const allowed = config.modules.flatMap(({ legacyPlatformTables }) => legacyPlatformTables);
+  validatePlatformHandoffSql(await readFile18(sqlPath, "utf8"), allowed);
+  await writeFile13(sqlPath, metadataOnlySql("platform"));
+  return output;
+}
+async function installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform) {
+  const platform = resolveProjectPath(project, config.platform.out);
+  const backup = join18(temporaryRoot, "platform-backup");
+  const installed = [];
+  await rename(platform, backup);
+  try {
+    await rename(stagedPlatform, platform);
+    for (const [index, module3] of config.modules.entries()) {
+      const output = resolveProjectPath(project, module3.out);
+      if (await exists2(output)) {
+        throw new Error(`${module3.key} lineage 输出已存在，禁止覆盖`);
+      }
+      await mkdir8(dirname5(output), { recursive: true });
+      await rename(stagedModules[index], output);
+      installed.push(output);
+    }
+  } catch (error) {
+    await rm9(platform, { recursive: true, force: true });
+    await rename(backup, platform);
+    for (const output of installed)
+      await rm9(output, { recursive: true, force: true });
+    throw error;
+  }
+}
+async function writeDrizzleConfig(path2, project, schemas, out) {
+  const absoluteSchemas = schemas.map((schema) => resolveProjectPath(project, schema));
+  await writeFile13(path2, `import { defineConfig } from "drizzle-kit";
+export default defineConfig(${JSON.stringify({
+    dialect: "postgresql",
+    schema: absoluteSchemas,
+    out,
+    casing: "snake_case"
+  })});
+`);
+}
+async function validateSchemaSources(project, config) {
+  for (const schema of [
+    ...config.platform.schema,
+    ...config.modules.flatMap(({ schema: schema2 }) => schema2)
+  ]) {
+    await access4(resolveProjectPath(project, schema));
+  }
+  for (const module3 of config.modules) {
+    if (await exists2(resolveProjectPath(project, module3.out))) {
+      throw new Error(`${module3.key} lineage 输出已存在，禁止覆盖`);
+    }
+  }
+}
+async function createTemporaryRoot(project) {
+  const windy = join18(project, ".windy");
+  await mkdir8(windy, { recursive: true });
+  return await mkdtemp3(join18(windy, "module-schema-handoff-"));
+}
+async function listSqlFiles(root) {
+  return (await readdir7(root)).filter((path2) => path2.endsWith(".sql")).sort();
+}
+async function executeDrizzleGenerate(configPath, cwd) {
+  await assertProcess("bunx", ["--bun", "drizzle-kit", "generate", "--config", configPath], cwd, true);
+}
+async function assertCleanGit(project) {
+  const result2 = await captureProcess("git", ["status", "--porcelain"], project);
+  if (result2.code !== 0 || result2.stdout.trim()) {
+    throw new Error("schema lineage handoff 前必须保持 Git 工作区干净");
+  }
+}
+async function exists2(path2) {
+  try {
+    await access4(path2);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/module-schema/cli.ts
+async function runModuleSchemaCommand(args) {
+  if (args[0] !== "schema")
+    return false;
+  if (args[1] !== "handoff") {
+    throw new Error("当前 schema 命令只支持 handoff");
+  }
+  const projectDirectory = resolve7(readValue3(args, "--cwd") || process.cwd());
+  const result2 = await handoffModuleSchemaLineages({
+    projectDirectory,
+    configPath: readValue3(args, "--config")
+  });
+  console.log(`Module schema lineage 交接完成：${result2.moduleCount} 个模块、${result2.tableCount} 张旧平台 snapshot 表`);
+  return true;
+}
+function readValue3(args, flag) {
+  const index = args.indexOf(flag);
+  return index >= 0 ? args[index + 1] : undefined;
+}
+
 // src/cli.ts
 async function main() {
   const args = process.argv.slice(2);
+  if (await runModuleSchemaCommand(args))
+    return;
   if (await runLifecycleCommand(args))
     return;
   const options = parseArguments(args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.2.29",
+  "version": "0.2.31",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "fc15ecb10194385be79afcd4738b71c7966a9272",
-  "generatorVersion": "0.2.29",
+  "templateCommit": "5d781a968ffc243b9c29c1ee31382cd61a5f4ab7",
+  "generatorVersion": "0.2.31",
   "modules": [
     {
       "name": "system",

package/template/README.md

@@ -107,6 +107,9 @@ create-windy 在本机 `.env` 中随机生成的 `WINDY_BOOTSTRAP_ADMIN_PASSWORD
 | `system.data-governance` | 未包含 | H2 | 敏感字段、明文访问和治理导出。 |
 | `work-order` | 未包含 | H2 | 可替换的业务模块接入示例。 |
 
+项目自有业务模块以 `apps/server/src/installed-business-modules.ts` 装配的 Module Manifest
+为准；shared-scaffold README 不复制项目业务 Key，避免平台升级固化产品命名。
+
 精确生成来源和选择记录在 `.windy/generation.json`。当前版本已提供可回滚的
 `windy update`；通用 `module add/remove` 尚未交付，不要把 Feature Flag 关闭当成
 模块已经卸载。

package/template/apps/agent-server/README.md

@@ -30,12 +30,14 @@ export AGENT_SERVER_INTERNAL_TOKEN='<random-token>'
 export QWEN_API_URL='https://dashscope-intl.aliyuncs.com/compatible-mode/v1'
 export QWEN_API_KEY='<server-secret>'
 export QWEN_MODEL='qwen-plus'
+export AI_PROVIDER_HTTPS_HOST_ALLOWLIST='dashscope-intl.aliyuncs.com'
 export AGENT_RUN_STORE_PATH='.data/agent-runs.sqlite3'
 uv run uvicorn southwind_agent_server.app:app
 ```
 
-公网 URL 必须使用 HTTPS，本机、容器服务名和内网地址允许 HTTP。Provider 请求包含连接
-和总超时、响应大小限制、错误脱敏与 `/models` readiness。缺少 URL/Model 时回退
+公网 URL 必须使用 HTTPS 且 Host 精确命中 allowlist；本机、容器服务名和内网地址允许
+HTTP。Provider 请求包含连接和总超时、响应大小限制、错误脱敏与 `/models`
+readiness。缺少 URL/Model 时回退
 `AdkEngineAdapter` 并返回 unavailable，不调用模型。测试另使用
 `DeterministicEngineAdapter`。
 

package/template/apps/agent-server/src/southwind_agent_server/config.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 import ipaddress
 import os
+import re
 from collections.abc import Mapping
 from dataclasses import dataclass
 from urllib.parse import urlsplit, urlunsplit
@@ -35,6 +36,13 @@ class OpenAiCompatibleConfig:
     request_timeout_seconds: float = 60.0
     max_response_bytes: int = 2 * 1024 * 1024
     max_tool_rounds: int = 8
+    https_host_allowlist: tuple[str, ...] = ()
+    deployment_key: str = "ai.openai-compatible"
+
+    def __post_init__(self) -> None:
+        normalized = normalize_base_url(self.base_url)
+        object.__setattr__(self, "base_url", normalized)
+        require_allowed_https_host(normalized, self.https_host_allowlist)
 
     @classmethod
     def from_environment(
@@ -55,6 +63,9 @@ class OpenAiCompatibleConfig:
                 if environment.get("QWEN_API_KEY", "").strip()
                 else None
             ),
+            https_host_allowlist=normalize_https_host_allowlist(
+                environment.get("AI_PROVIDER_HTTPS_HOST_ALLOWLIST", "")
+            ),
             connect_timeout_seconds=read_milliseconds(
                 environment,
                 "AI_PROVIDER_CONNECT_TIMEOUT_MS",
@@ -100,6 +111,43 @@ def normalize_base_url(raw: str) -> str:
     return urlunsplit((parsed.scheme, parsed.netloc, path, "", ""))
 
 
+def normalize_https_host_allowlist(raw: str) -> tuple[str, ...]:
+    hosts: list[str] = []
+    for item in raw.split(","):
+        candidate = item.strip().lower().rstrip(".")
+        if not candidate:
+            continue
+        if candidate in hosts or not valid_hostname(candidate):
+            raise ValueError("Provider HTTPS Host allowlist 无效")
+        hosts.append(candidate)
+    return tuple(hosts)
+
+
+def require_allowed_https_host(
+    base_url: str,
+    allowed_hosts: tuple[str, ...],
+) -> None:
+    endpoint = urlsplit(base_url)
+    hostname = (endpoint.hostname or "").lower().rstrip(".")
+    if endpoint.scheme == "https" and hostname not in allowed_hosts:
+        raise ValueError("OpenAI-compatible Endpoint 未命中 HTTPS Host allowlist")
+
+
+def valid_hostname(value: str) -> bool:
+    try:
+        ipaddress.ip_address(value)
+        return True
+    except ValueError:
+        return bool(
+            len(value) <= 253
+            and re.fullmatch(
+                r"(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*"
+                r"[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?",
+                value,
+            )
+        )
+
+
 def private_hostname(hostname: str) -> bool:
     if (
         hostname == "localhost"