create-windy 0.2.32 → 0.2.34

package/template/packages/database/drizzle/meta/_journal.json

@@ -239,6 +239,13 @@
       "when": 1784925586891,
       "tag": "0033_rich_george_stacy",
       "breakpoints": true
+    },
+    {
+      "idx": 34,
+      "version": "7",
+      "when": 1784976420447,
+      "tag": "0034_funny_mesmero",
+      "breakpoints": true
     }
   ]
 }

package/template/packages/database/src/schema/platform-settings.ts

@@ -19,11 +19,16 @@ import {
 // @windy-module system.settings begin
 import {
   boolean,
+  jsonb as settingsJsonb,
   pgTable as settingsTable,
   text,
   varchar as settingsVarchar,
 } from "drizzle-orm/pg-core";
 import { auditColumns } from "./common.js";
+import type {
+  WatermarkContentField,
+  WatermarkDensity,
+} from "@southwind-ai/shared";
 // @windy-module system.settings end
 
 // @windy-module system.settings begin
@@ -44,6 +49,14 @@ export const platformWatermarkPolicies = settingsTable(
     id: settingsVarchar("id", { length: 64 }).primaryKey(),
     enabled: boolean("enabled").notNull(),
     businessPagesEnabled: boolean("business_pages_enabled").notNull(),
+    density: settingsVarchar("density", { length: 16 })
+      .$type<WatermarkDensity>()
+      .default("medium")
+      .notNull(),
+    contentFields: settingsJsonb("content_fields")
+      .$type<WatermarkContentField[]>()
+      .default(["username", "displayName"])
+      .notNull(),
     customContent: settingsVarchar("custom_content", { length: 80 }).notNull(),
     ...auditColumns,
   },

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/src/ai-operation-composition.test.ts

@@ -112,6 +112,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: "ai.openai-compatible",
         },
+        providerDataPolicy: providerDataPolicy(),
         toolNetworkPolicy: { mode: "forbidden" },
       },
     ];
@@ -133,6 +134,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: " ",
         },
+        providerDataPolicy: providerDataPolicy(),
       },
     ];
     expect(() => validateModuleComposition([module])).toThrow(
@@ -148,6 +150,48 @@ describe("AI Operation Composition", () => {
     );
   });
 
+  test("Provider 字段策略必须完整、唯一且与出网授权绑定", () => {
+    const module = fixture("business");
+    module.aiOperations = [
+      {
+        ...operation("business.generate"),
+        providerEgress: {
+          mode: "configured-endpoint",
+          deploymentKey: "ai.openai-compatible",
+        },
+      },
+    ];
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送 allowlist 缺失",
+    );
+
+    module.aiOperations[0] = {
+      ...module.aiOperations[0],
+      providerDataPolicy: {
+        ...providerDataPolicy(),
+        envelopeFields: [
+          ...providerDataPolicy().envelopeFields,
+          {
+            field: "instructions",
+            classification: "internal",
+            dlpAction: "reject",
+          },
+        ],
+      },
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送规则重复",
+    );
+
+    module.aiOperations[0] = {
+      ...operation("business.generate"),
+      providerDataPolicy: providerDataPolicy(),
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "禁止 Provider 出网时不能声明字段发送策略",
+    );
+  });
+
   test("Operation Handler 必须与 Manifest 声明一一对应", () => {
     const module = fixture("business");
     module.aiOperations = [operation("business.generate")];
@@ -190,6 +234,30 @@ function operation(
   };
 }
 
+function providerDataPolicy() {
+  return {
+    inputFields: [
+      {
+        jsonPointer: "/question",
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+    envelopeFields: [
+      {
+        field: "instructions" as const,
+        classification: "internal" as const,
+        dlpAction: "reject" as const,
+      },
+      {
+        field: "user-prompt" as const,
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+  };
+}
+
 function fixture(name: string): ModuleManifest {
   const permissionKey = `${name}.ai.execute`;
   const featureKey = `${name}.ai`;

package/template/packages/modules/src/ai-operation-composition.ts

@@ -102,9 +102,124 @@ function validateOperation(
   validateCapabilities(operation);
   validateTools(operation, catalogs.tools);
   validateAiNetworkPolicy(operation);
+  validateProviderDataPolicy(operation);
   validateLimits(operation);
 }
 
+const providerDataFields = new Set([
+  "instructions",
+  "user-prompt",
+  "tool-definitions",
+  "provider-output",
+  "tool-results",
+]);
+
+export function validateProviderDataPolicy(
+  operation: ModuleAiOperationDefinition,
+): void {
+  const policy = operation.providerDataPolicy;
+  if (operation.providerEgress?.mode !== "configured-endpoint") {
+    if (policy) {
+      throw new Error(
+        `${operation.key} 禁止 Provider 出网时不能声明字段发送策略`,
+      );
+    }
+    return;
+  }
+  if (!policy?.inputFields.length || !policy.envelopeFields.length) {
+    throw new Error(`${operation.key} Provider 字段发送 allowlist 缺失`);
+  }
+  validateInputFields(operation.key, policy.inputFields);
+  const fields = new Set<string>();
+  for (const rule of policy.envelopeFields) {
+    if (!providerDataFields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 含未知字段`,
+      );
+    }
+    if (fields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送规则重复：${rule.field}`,
+      );
+    }
+    fields.add(rule.field);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operation.key} Provider 字段分类无效：${rule.field}`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operation.key} Provider DLP 动作无效：${rule.field}`);
+    }
+  }
+  for (const field of ["instructions", "user-prompt"]) {
+    if (!fields.has(field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 缺少 ${field}`,
+      );
+    }
+  }
+  if (operation.allowedToolKeys.length) {
+    for (const field of [
+      "tool-definitions",
+      "provider-output",
+      "tool-results",
+    ]) {
+      if (!fields.has(field)) {
+        throw new Error(
+          `${operation.key} 使用 Tool 时 Provider 字段发送 allowlist 缺少 ${field}`,
+        );
+      }
+    }
+  }
+}
+
+function validateInputFields(
+  operationKey: string,
+  fields: NonNullable<
+    ModuleAiOperationDefinition["providerDataPolicy"]
+  >["inputFields"],
+): void {
+  const pointers = new Set<string>();
+  for (const rule of fields) {
+    const segments = rule.jsonPointer
+      .slice(1)
+      .split("/")
+      .map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~"));
+    if (
+      !rule.jsonPointer.startsWith("/") ||
+      rule.jsonPointer === "/" ||
+      rule.jsonPointer.endsWith("/") ||
+      rule.jsonPointer.includes("//") ||
+      /~(?:[^01]|$)/u.test(rule.jsonPointer) ||
+      segments.some((segment) =>
+        ["__proto__", "prototype", "constructor"].includes(segment),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段 JSON Pointer 无效`);
+    }
+    if (
+      [...pointers].some(
+        (pointer) =>
+          pointer.startsWith(`${rule.jsonPointer}/`) ||
+          rule.jsonPointer.startsWith(`${pointer}/`),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段规则不能父子重叠`);
+    }
+    if (pointers.has(rule.jsonPointer)) {
+      throw new Error(
+        `${operationKey} Provider 输入字段规则重复：${rule.jsonPointer}`,
+      );
+    }
+    pointers.add(rule.jsonPointer);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operationKey} Provider 输入字段分类无效`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operationKey} Provider 输入字段 DLP 动作无效`);
+    }
+  }
+}
+
 function validateCapabilities(operation: ModuleAiOperationDefinition): void {
   if (!operation.requiredCapabilities.length) {
     throw new Error(`${operation.key} 至少需要一个 capability`);

package/template/packages/modules/src/manifest.ts

@@ -98,6 +98,31 @@ export interface AiToolNetworkPolicy {
   mode: "forbidden";
 }
 
+export type AiProviderDataField =
+  | "instructions"
+  | "user-prompt"
+  | "tool-definitions"
+  | "provider-output"
+  | "tool-results";
+export type AiProviderDlpAction = "reject" | "redact";
+
+export interface AiProviderFieldPolicy {
+  field: AiProviderDataField;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderInputFieldPolicy {
+  jsonPointer: string;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderDataPolicy {
+  inputFields: readonly AiProviderInputFieldPolicy[];
+  envelopeFields: readonly AiProviderFieldPolicy[];
+}
+
 export interface AiOperationLimits {
   maxDurationSeconds: number;
   maxInputBytes: number;
@@ -119,6 +144,7 @@ export interface ModuleAiOperationDefinition {
   /** @deprecated 使用 providerEgress 与 toolNetworkPolicy 拆分两类网络边界。 */
   publicNetworkAccess?: AiOperationPublicNetworkAccess;
   providerEgress?: AiProviderEgressPolicy;
+  providerDataPolicy?: AiProviderDataPolicy;
   toolNetworkPolicy?: AiToolNetworkPolicy;
   limits: AiOperationLimits;
 }

package/template/packages/modules/src/provider-data-policy-composition.test.ts

@@ -0,0 +1,74 @@
+import { describe, expect, test } from "bun:test";
+import { validateProviderDataPolicy } from "./ai-operation-composition.js";
+import type { ModuleAiOperationDefinition } from "./manifest.js";
+
+describe("Provider 输入字段 Schema", () => {
+  test.each(["/bad~2escape", "/__proto__/polluted", "/constructor/value"])(
+    "拒绝危险或非法 JSON Pointer：%s",
+    (jsonPointer) => {
+      expect(() =>
+        validateProviderDataPolicy(operation([jsonPointer])),
+      ).toThrow("JSON Pointer 无效");
+    },
+  );
+
+  test("拒绝父子重叠路径，避免规则顺序改变结果", () => {
+    expect(() =>
+      validateProviderDataPolicy(operation(["/case", "/case/name"])),
+    ).toThrow("不能父子重叠");
+  });
+
+  test("使用 Tool 时要求声明定义、上一轮输出和 Tool 结果", () => {
+    expect(() =>
+      validateProviderDataPolicy(operation(["/question"], ["business.query"])),
+    ).toThrow("使用 Tool 时");
+  });
+});
+
+function operation(
+  inputPointers: readonly string[],
+  allowedToolKeys: readonly string[] = [],
+): ModuleAiOperationDefinition {
+  return {
+    key: "business.answer",
+    kind: "agent",
+    featureKey: "business.ai",
+    permissionKey: "business.ai.execute",
+    auditAction: "business.ai.execute",
+    inputSchemaKey: "business.input.v1",
+    outputSchemaKey: "business.output.v1",
+    requiredCapabilities: ["text-generation"],
+    allowedToolKeys,
+    dataClassification: "internal",
+    execution: "streaming",
+    providerEgress: {
+      mode: "configured-endpoint",
+      deploymentKey: "ai.openai-compatible",
+    },
+    providerDataPolicy: {
+      inputFields: inputPointers.map((jsonPointer) => ({
+        jsonPointer,
+        classification: "internal",
+        dlpAction: "redact",
+      })),
+      envelopeFields: [
+        {
+          field: "instructions",
+          classification: "internal",
+          dlpAction: "reject",
+        },
+        {
+          field: "user-prompt",
+          classification: "internal",
+          dlpAction: "redact",
+        },
+      ],
+    },
+    toolNetworkPolicy: { mode: "forbidden" },
+    limits: {
+      maxDurationSeconds: 60,
+      maxInputBytes: 4096,
+      maxOutputBytes: 4096,
+    },
+  };
+}

package/template/packages/modules/src/system-audit-actions.ts

@@ -8,6 +8,11 @@ export const systemAuditActions: ModuleManifest["auditActions"] = [
   "crud.create",
   "crud.update",
   "crud.delete",
+  {
+    key: "system.user-directory.query",
+    label: "查询业务用户目录",
+    description: "业务模块在平台授权与数据范围内查询启用用户最小投影。",
+  },
   // @windy-module system.configuration begin
   "config.update",
   "config.rollback",

package/template/packages/modules/src/system-features.ts

@@ -17,6 +17,11 @@ export const systemFeatures: ModuleManifest["features"] = [
     "RBAC 权限链路",
     "用户、角色、权限点与数据范围的统一访问控制链路。",
   ),
+  feature(
+    "system.user-directory",
+    "业务用户目录",
+    "向获授权业务模块提供受数据范围约束的启用用户最小只读投影。",
+  ),
   feature(
     "system.profile",
     "个人设置",

package/template/packages/modules/src/system-module-catalog.test.ts

@@ -116,6 +116,22 @@ describe("系统能力模块目录", () => {
       "system.workflow.timeout-dispatch",
     ]);
     expect(identity.dataPolicies).toEqual([]);
+    expect(identity.features.map(({ key }) => key)).toContain(
+      "system.user-directory",
+    );
+    expect(identity.permissions.map(({ key }) => key)).toContain(
+      "system.user-directory.read",
+    );
+    expect(
+      identity.auditActions.map((action) =>
+        typeof action === "string" ? action : action.key,
+      ),
+    ).toContain("system.user-directory.query");
+    expect(
+      systemFoundationModule().auditActions.map((action) =>
+        typeof action === "string" ? action : action.key,
+      ),
+    ).toContain("system.user-directory.query");
     expect(
       systemModuleManifest("system.data-governance").dataPolicies?.map(
         ({ key }) => key,

package/template/packages/modules/src/system-module-catalog.ts

@@ -27,9 +27,17 @@ export const systemModuleDefinitions = [
     version: "0.1.0",
     label: "身份与权限",
     description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
-    resources: ["user", "role", "department", "menu", "dict", "profile"],
+    resources: [
+      "user",
+      "user-directory",
+      "role",
+      "department",
+      "menu",
+      "dict",
+      "profile",
+    ],
     excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: ["system.rbac", "system.profile"],
+    featureKeys: ["system.rbac", "system.user-directory", "system.profile"],
   },
   // @windy-module system.settings begin
   {
@@ -226,11 +234,26 @@ function createSystemCapabilityModule(
       definition.name === "system.data-governance"
         ? aggregate.dataPolicies
         : [],
-    auditActions: isCore ? aggregate.auditActions : [],
+    auditActions: isCore
+      ? aggregate.auditActions.filter(
+          (action) => auditActionKey(action) !== "system.user-directory.query",
+        )
+      : definition.name === "system.identity"
+        ? aggregate.auditActions.filter(
+            (action) =>
+              auditActionKey(action) === "system.user-directory.query",
+          )
+        : [],
     metadata: { kind: "platform-capability" },
   };
 }
 
+function auditActionKey(
+  action: ModuleManifest["auditActions"][number],
+): string {
+  return typeof action === "string" ? action : action.key;
+}
+
 function permissionResource(permissionKey: string): string {
   const parts = permissionKey.split(".");
   return parts.length >= 3 ? parts.slice(1, -1).join(".") : "";

package/template/packages/modules/src/system-permissions.ts

@@ -3,6 +3,7 @@ import type { ModuleManifest } from "./manifest.js";
 const systemResourceLabels = {
   admin: "管理面准入",
   user: "用户管理",
+  "user-directory": "业务用户目录",
   role: "角色与权限",
   department: "部门组织",
   menu: "菜单管理",
@@ -75,6 +76,7 @@ export const systemPermissions: ModuleManifest["permissions"] = [
   permission("user", "export", "governed-export"),
   // @windy-module system.data-governance end
   permission("user", "manage"),
+  permission("user-directory", "read"),
   permission("role", "read"),
   permission("role", "manage"),
   permission("department", "read"),

package/template/packages/server-sdk/index.ts

@@ -32,9 +32,20 @@ export type {
   ModuleSearchQuery,
 } from "./src/search-provider-port.js";
 export type {
+  ModuleOpenedResourceFile,
+  ModuleResourceFileAccessContext,
+  ModuleResourceFileAccessPolicy,
+  ModuleResourceFileRequest,
   ModuleStoragePort,
   ModuleUploadSessionInput,
 } from "./src/storage-port.js";
+export type {
+  ModuleUserDirectoryEntry,
+  ModuleUserDirectoryPage,
+  ModuleUserDirectoryPort,
+  ModuleUserDirectoryQuery,
+} from "./src/user-directory-port.js";
+export { ModuleUserDirectoryError } from "./src/user-directory-port.js";
 export type {
   ModuleTaskHandler,
   ModuleTaskHandlerRegistration,

package/template/packages/server-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/server-sdk",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -21,7 +21,8 @@
     "src/storage-port.ts",
     "src/task-registration.ts",
     "src/tool-registration.ts",
-    "src/tool-host-port.ts"
+    "src/tool-host-port.ts",
+    "src/user-directory-port.ts"
   ],
   "scripts": {
     "test": "bun test",

package/template/packages/server-sdk/src/ai-operation-registration.ts

@@ -9,7 +9,8 @@ export interface ModuleAiOperationContext {
 }
 
 /**
- * 业务模块只负责把类型化输入收敛为模型无关的指令和用户消息。
+ * 业务模块只接收 Manifest `providerDataPolicy.inputFields` allowlist 选出并完成
+ * DLP 的最小输入，再将其收敛为模型无关的指令和用户消息。
  * Provider、Deployment、Secret、Execution Grant 与 Tool 授权均由宿主持有。
  */
 export interface ModuleAiOperationPlan {

package/template/packages/server-sdk/src/module-host.ts

@@ -3,6 +3,7 @@ import type { ModuleAiOperationHandlerRegistration } from "./ai-operation-regist
 import type { ModuleRolePreset } from "./role-preset.js";
 import type { ModuleRouteDefinition } from "./route-definition.js";
 import type { ModuleSearchProvider } from "./search-provider-port.js";
+import type { ModuleResourceFileAccessPolicy } from "./storage-port.js";
 import type { ModuleTaskHandlerRegistration } from "./task-registration.js";
 import type { ModuleToolHandlerRegistration } from "./tool-registration.js";
 
@@ -25,6 +26,13 @@ export interface ModuleUploadPolicy {
 export interface ModuleHost {
   readonly moduleName: string;
   registerUploadPolicy(policy: ModuleUploadPolicy): void;
+  /**
+   * 注册跨上传者资源文件读取策略；purpose 必须由本模块或 Manifest 显式依赖模块的
+   * Upload Policy 声明，Feature、Permission 与 Audit Action 必须来自当前 Manifest。
+   */
+  registerResourceFileAccessPolicies(
+    policies: readonly ModuleResourceFileAccessPolicy[],
+  ): void;
   registerDurableHandler<T>(definition: DurableHandlerDefinition<T>): void;
   /** 注册 Guarded API 路由；须与 Manifest `apiPermissions` 声明一致。 */
   registerRoutes(routes: readonly ModuleRouteDefinition[]): void;

package/template/packages/server-sdk/src/request-context.ts

@@ -2,6 +2,7 @@ import type { ModuleActor } from "./actor.js";
 import type { ModuleAuditEmitter } from "./audit-port.js";
 import type { ModuleJobSubmitter } from "./jobs-port.js";
 import type { ModuleStoragePort } from "./storage-port.js";
+import type { ModuleUserDirectoryPort } from "./user-directory-port.js";
 
 /**
  * 模块路由 Handler 的受限请求上下文。
@@ -18,4 +19,5 @@ export interface ModuleRequestContext {
   readonly audit: ModuleAuditEmitter;
   readonly jobs: ModuleJobSubmitter;
   readonly storage: ModuleStoragePort;
+  readonly userDirectory: ModuleUserDirectoryPort;
 }

package/template/packages/server-sdk/src/storage-port.ts

@@ -1,4 +1,5 @@
 import type { OpenedFile, UploadSession } from "@southwind-ai/storage";
+import type { ModuleActor } from "./actor.js";
 
 export interface ModuleUploadSessionInput {
   readonly purpose: string;
@@ -9,6 +10,62 @@ export interface ModuleUploadSessionInput {
   readonly fileExpiresAt?: Date;
 }
 
+export interface ModuleResourceFileRequest {
+  /** 平台文件元数据 ID；不能是 ArtifactRef、对象存储 Key 或主机路径。 */
+  readonly fileId: string;
+  /**
+   * 必须与本模块或 Manifest 显式依赖模块注册的 Upload Policy，以及当前模块的
+   * 资源文件访问策略完全一致。
+   */
+  readonly purpose: string;
+  /** 本模块命名空间内的稳定业务资源类型，例如 `evidence.file`。 */
+  readonly resourceType: string;
+  /** 由授权策略回查业务 Repository 的稳定资源 ID。 */
+  readonly resourceId: string;
+}
+
+/** 资源授权读取仅返回业务所需的最小元数据与受限文件流。 */
+export interface ModuleOpenedResourceFile {
+  readonly id: string;
+  readonly purpose: string;
+  readonly filename: string;
+  readonly mimeType: string;
+  readonly byteSize: number;
+  readonly sha256: string;
+  readonly body: ReadableStream<Uint8Array>;
+}
+
+export interface ModuleResourceFileAccessContext {
+  readonly actor: ModuleActor;
+  readonly requestId: string;
+  readonly signal: AbortSignal;
+}
+
+/**
+ * 业务模块注册的资源到平台文件关联授权策略。
+ *
+ * `authorize` 必须从 project-owned Repository 回查 resourceId，确认当前 Actor
+ * 可访问该业务资源且该资源实际绑定 fileId；客户端或 Tool 输入不是授权证据。
+ */
+export interface ModuleResourceFileAccessPolicy {
+  /**
+   * 本模块或 Manifest 显式依赖模块拥有的 Upload Policy purpose；
+   * 平台基础 purpose 与未声明跨模块 purpose 均不可引用。
+   */
+  readonly purpose: string;
+  readonly resourceType: string;
+  readonly featureKey: string;
+  readonly permissionKey: string;
+  readonly auditAction: string;
+  authorize(
+    input: Readonly<{
+      fileId: string;
+      resourceId: string;
+    }>,
+    context: ModuleResourceFileAccessContext,
+  ): Promise<boolean> | boolean;
+}
+
 /**
  * 模块受限 Upload / BlobRead Port。
  *
@@ -22,4 +79,13 @@ export interface ModuleStoragePort {
   createUploadSession(input: ModuleUploadSessionInput): Promise<UploadSession>;
   openFile(fileId: string): Promise<OpenedFile>;
   openPublicFile(fileId: string, purpose: string): Promise<OpenedFile>;
+  /**
+   * 经 Host Feature / Permission 与业务资源策略双重授权后读取文件。
+   *
+   * 允许同一业务范围内跨上传者读取，但不授予任意 manage、Repository、BlobStore
+   * 或 ArtifactRef 能力。
+   */
+  openResourceFile(
+    input: ModuleResourceFileRequest,
+  ): Promise<ModuleOpenedResourceFile>;
 }