create-windy 0.2.33 → 0.2.34

package/template/docs/platform/agent-runtime.md

@@ -37,12 +37,34 @@ providerEgress: {
   mode: "configured-endpoint",
   deploymentKey: "ai.openai-compatible",
 },
+providerDataPolicy: {
+  inputFields: [
+    {
+      jsonPointer: "/content",
+      classification: "internal",
+      dlpAction: "redact",
+    },
+  ],
+  envelopeFields: [
+    {
+      field: "instructions",
+      classification: "internal",
+      dlpAction: "reject",
+    },
+    {
+      field: "user-prompt",
+      classification: "internal",
+      dlpAction: "redact",
+    },
+  ],
+},
 toolNetworkPolicy: {
   mode: "forbidden",
 },
 ```
 
-Provider URL 与 Secret 不在 Manifest 或浏览器 DTO 中；Agent Server 只允许当前启动
+Provider URL 与 Secret 不在 Manifest 或浏览器 DTO 中；Server 只把 `inputFields`
+选出的治理后输入交给 Handler，Agent Server 只允许当前启动
 配置的 Deployment。Tool policy 缺省为 forbidden，且不继承 Provider egress。完整
 威胁模型、兼容行为与尚未覆盖项见
 [Agent Provider 与 Tool 网络边界](../architecture/ai-egress.md)。
@@ -104,6 +126,7 @@ QWEN_API_URL=https://dashscope-intl.aliyuncs.com/compatible-mode/v1
 QWEN_API_KEY=<服务端密钥>
 QWEN_MODEL=qwen-plus
 AI_PROVIDER_HTTPS_HOST_ALLOWLIST=dashscope-intl.aliyuncs.com
+AI_PROVIDER_AUDIT_RETENTION_DAYS=90
 
 # 可选安全上限
 # AI_PROVIDER_CONNECT_TIMEOUT_MS=5000
@@ -125,10 +148,30 @@ bun run dev:agent
 ```text
 GET http://agent-server:8080/health/live
 GET http://agent-server:8080/health/ready
+GET http://agent-server:8080/health/provider-governance
 ```
 
 `ready` 会访问 Provider 的 `/models`。失败只返回稳定错误，不回显 Provider body、
 Authorization、Secret、Endpoint query 或底层异常文本。
+`provider-governance` 需要内部 Bearer Token，只返回留存、允许/拒绝/脱敏和 TTL 清理
+聚合，不返回 Run ID、prompt 或正文。
+
+## 字段治理迁移
+
+启用 `providerEgress.mode=configured-endpoint` 的既有业务 Operation 必须同时新增
+`providerDataPolicy`。升级后缺少策略会在 Manifest Composition 阶段以
+`Provider 字段发送 allowlist 缺失` fail fast，不会静默发送或降级放行。
+
+迁移时先枚举业务 input schema 中确实需要出境的最小 JSON Pointer；为每个字段声明
+分类与 `reject/redact`。再枚举 outbound envelope：无 Tool 的单轮问答通常只需要
+`instructions` 和 `user-prompt`；Tool schema、模型上一轮 Tool Call 和 Tool result
+分别需要 `tool-definitions`、`provider-output`、`tool-results`。不要为消除启动错误
+一次性允许全部字段。原始 input 会在进入 `prepare` 前裁剪，因此 Handler 必须只依赖
+allowlist 中的字段。
+
+Agent profile 还必须挂载 `AI_PROVIDER_AUDIT_STORE_PATH`。create-windy Starter 使用
+`/app/data/agent/provider-audit.sqlite3` 并复用单副本持久卷；自行维护 Compose 的项目
+需要显式补齐该变量。未配置时 Provider 启动 fail closed，并给出缺失变量名。
 
 ## 客户端协议
 

package/template/docs/platform/business-user-directory.md

@@ -0,0 +1,82 @@
+# 业务模块只读用户目录
+
+## Ownership 与 Seam
+
+用户账号、启停状态、部门关系和数据范围属于 `system.identity`。业务模块需要选择案件
+成员、协作人或负责人时，不得导入 Admin Repository、Drizzle schema 或 Server 内部
+`RequestActor`。稳定 seam 是 `ModuleRequestContext.userDirectory`，其公开 Interface
+只有一个方法：
+
+```ts
+const page = await context.userDirectory.list({
+  page: 1,
+  pageSize: 20,
+  q: "张",
+});
+// page.items: Array<{ id: string; displayName: string }>
+```
+
+这个深 Module 把授权、范围、状态过滤、搜索、分页、投影和审计藏在宿主 Adapter 中，
+业务调用方只需学习查询条件与稳定错误码。删除该 Module 会迫使每个业务模块重复实现
+同一组安全约束，因此该 seam 提供了跨模块的 leverage 和维护 locality。
+
+## 安全不变量
+
+- Actor、租户、部门和 Data Scope 只来自已验证请求的宿主
+  `RequestGuardContext`。Interface 不接受这些字段；HTTP body/query 中同名字段不能覆盖。
+- V1 的 `tenantId` 是宿主 nominal `ScopeContext` 中的固定
+  `single-tenant`，不是忽略租户。`tenant` grant 仍经 Repository predicate 执行；未来
+  多租户只替换宿主 Adapter，不扩大业务 Interface。
+- `all`、`tenant`、`department`、`department-and-children`、`custom` 和 `self`
+  都编译为用户 Repository 的查询条件，与启用状态、搜索、count 和分页共用同一个
+  `WHERE`。缺少 nominal `ScopeContext` 时返回 `data-scope-denied`，不会回退全量。
+- 只返回启用、未删除用户的 `id` 和 `displayName`。部门、用户名、联系方式、角色、
+  凭据状态和审计字段不跨 seam 暴露。
+- 调用者必须同时具备启用的 `system.user-directory` Feature 和
+  `system.user-directory.read` Permission。拒绝走统一 `security.denied` 审计。
+- 每次成功查询在返回结果前以 critical 策略持久化
+  `system.user-directory.query`，元数据只含页码、页大小、结果数和总数，不记录搜索词
+  或返回用户明细；生产审计不可用时查询 fail closed。
+- 页码与页大小必须为正整数；页码最多 10000、页大小最多 100，搜索词必须是最多 100
+  字符的字符串。非法输入返回 `USER_DIRECTORY_INVALID_QUERY`。
+
+## 业务角色接入
+
+业务 `ModuleRolePreset` 只能注册本模块命名空间内的 Permission，不能夹带
+`system.user-directory.read` 绕过平台 ownership。部署管理员应在角色管理中显式为
+需要选择用户的办案角色授予该平台 Permission，并根据角色配置 `all`、`tenant`、
+部门、`custom` 或 `self` 数据范围。
+
+业务 Handler 不要把浏览器提交的 `actorId`、`tenantId`、`departmentId` 或 scope
+转发为授权参数：
+
+```ts
+handler: async (context) => {
+  const page = await context.userDirectory.list({
+    page: Number(context.query.page || 1),
+    pageSize: Number(context.query.pageSize || 20),
+    q: context.query.q,
+  });
+  return page;
+};
+```
+
+未挂载平台 Adapter 时返回 `USER_DIRECTORY_UNAVAILABLE`；Permission 或 Feature 拒绝
+返回 `USER_DIRECTORY_FORBIDDEN`。业务路由可以把稳定错误码映射为自己的 HTTP 错误
+语义，但不得捕获后改用 Admin 用户接口或裸 Repository。
+
+## 生成与升级
+
+`packages/server-sdk` 的 Interface、Server Adapter、Composition Root、Manifest、
+本文件和 Starter skill 都是 Windy 模板受管内容。新项目自动生成这些文件；既有项目
+由 `windy update` 通过 Base/Ours/Theirs 创建新增文件并合并 Composition Root。
+升级后由管理员授予 Permission，再由 project-owned 业务 Handler 调用 Port；升级器
+不会自动修改客户业务角色或业务页面。
+
+运维排查顺序：
+
+1. 确认 `system.user-directory` 在 Feature 管理中启用；
+2. 确认 Actor 拥有 `system.user-directory.read`；
+3. 检查 Actor 的角色数据范围与部门关系；
+4. 查询 `security.denied` 和 `system.user-directory.query` 审计；
+5. 若返回 `USER_DIRECTORY_UNAVAILABLE`，检查 Starter Composition Root 是否完成升级。

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/src/ai-operation-composition.test.ts

@@ -112,6 +112,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: "ai.openai-compatible",
         },
+        providerDataPolicy: providerDataPolicy(),
         toolNetworkPolicy: { mode: "forbidden" },
       },
     ];
@@ -133,6 +134,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: " ",
         },
+        providerDataPolicy: providerDataPolicy(),
       },
     ];
     expect(() => validateModuleComposition([module])).toThrow(
@@ -148,6 +150,48 @@ describe("AI Operation Composition", () => {
     );
   });
 
+  test("Provider 字段策略必须完整、唯一且与出网授权绑定", () => {
+    const module = fixture("business");
+    module.aiOperations = [
+      {
+        ...operation("business.generate"),
+        providerEgress: {
+          mode: "configured-endpoint",
+          deploymentKey: "ai.openai-compatible",
+        },
+      },
+    ];
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送 allowlist 缺失",
+    );
+
+    module.aiOperations[0] = {
+      ...module.aiOperations[0],
+      providerDataPolicy: {
+        ...providerDataPolicy(),
+        envelopeFields: [
+          ...providerDataPolicy().envelopeFields,
+          {
+            field: "instructions",
+            classification: "internal",
+            dlpAction: "reject",
+          },
+        ],
+      },
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送规则重复",
+    );
+
+    module.aiOperations[0] = {
+      ...operation("business.generate"),
+      providerDataPolicy: providerDataPolicy(),
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "禁止 Provider 出网时不能声明字段发送策略",
+    );
+  });
+
   test("Operation Handler 必须与 Manifest 声明一一对应", () => {
     const module = fixture("business");
     module.aiOperations = [operation("business.generate")];
@@ -190,6 +234,30 @@ function operation(
   };
 }
 
+function providerDataPolicy() {
+  return {
+    inputFields: [
+      {
+        jsonPointer: "/question",
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+    envelopeFields: [
+      {
+        field: "instructions" as const,
+        classification: "internal" as const,
+        dlpAction: "reject" as const,
+      },
+      {
+        field: "user-prompt" as const,
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+  };
+}
+
 function fixture(name: string): ModuleManifest {
   const permissionKey = `${name}.ai.execute`;
   const featureKey = `${name}.ai`;

package/template/packages/modules/src/ai-operation-composition.ts

@@ -102,9 +102,124 @@ function validateOperation(
   validateCapabilities(operation);
   validateTools(operation, catalogs.tools);
   validateAiNetworkPolicy(operation);
+  validateProviderDataPolicy(operation);
   validateLimits(operation);
 }
 
+const providerDataFields = new Set([
+  "instructions",
+  "user-prompt",
+  "tool-definitions",
+  "provider-output",
+  "tool-results",
+]);
+
+export function validateProviderDataPolicy(
+  operation: ModuleAiOperationDefinition,
+): void {
+  const policy = operation.providerDataPolicy;
+  if (operation.providerEgress?.mode !== "configured-endpoint") {
+    if (policy) {
+      throw new Error(
+        `${operation.key} 禁止 Provider 出网时不能声明字段发送策略`,
+      );
+    }
+    return;
+  }
+  if (!policy?.inputFields.length || !policy.envelopeFields.length) {
+    throw new Error(`${operation.key} Provider 字段发送 allowlist 缺失`);
+  }
+  validateInputFields(operation.key, policy.inputFields);
+  const fields = new Set<string>();
+  for (const rule of policy.envelopeFields) {
+    if (!providerDataFields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 含未知字段`,
+      );
+    }
+    if (fields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送规则重复：${rule.field}`,
+      );
+    }
+    fields.add(rule.field);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operation.key} Provider 字段分类无效：${rule.field}`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operation.key} Provider DLP 动作无效：${rule.field}`);
+    }
+  }
+  for (const field of ["instructions", "user-prompt"]) {
+    if (!fields.has(field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 缺少 ${field}`,
+      );
+    }
+  }
+  if (operation.allowedToolKeys.length) {
+    for (const field of [
+      "tool-definitions",
+      "provider-output",
+      "tool-results",
+    ]) {
+      if (!fields.has(field)) {
+        throw new Error(
+          `${operation.key} 使用 Tool 时 Provider 字段发送 allowlist 缺少 ${field}`,
+        );
+      }
+    }
+  }
+}
+
+function validateInputFields(
+  operationKey: string,
+  fields: NonNullable<
+    ModuleAiOperationDefinition["providerDataPolicy"]
+  >["inputFields"],
+): void {
+  const pointers = new Set<string>();
+  for (const rule of fields) {
+    const segments = rule.jsonPointer
+      .slice(1)
+      .split("/")
+      .map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~"));
+    if (
+      !rule.jsonPointer.startsWith("/") ||
+      rule.jsonPointer === "/" ||
+      rule.jsonPointer.endsWith("/") ||
+      rule.jsonPointer.includes("//") ||
+      /~(?:[^01]|$)/u.test(rule.jsonPointer) ||
+      segments.some((segment) =>
+        ["__proto__", "prototype", "constructor"].includes(segment),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段 JSON Pointer 无效`);
+    }
+    if (
+      [...pointers].some(
+        (pointer) =>
+          pointer.startsWith(`${rule.jsonPointer}/`) ||
+          rule.jsonPointer.startsWith(`${pointer}/`),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段规则不能父子重叠`);
+    }
+    if (pointers.has(rule.jsonPointer)) {
+      throw new Error(
+        `${operationKey} Provider 输入字段规则重复：${rule.jsonPointer}`,
+      );
+    }
+    pointers.add(rule.jsonPointer);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operationKey} Provider 输入字段分类无效`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operationKey} Provider 输入字段 DLP 动作无效`);
+    }
+  }
+}
+
 function validateCapabilities(operation: ModuleAiOperationDefinition): void {
   if (!operation.requiredCapabilities.length) {
     throw new Error(`${operation.key} 至少需要一个 capability`);

package/template/packages/modules/src/manifest.ts

@@ -98,6 +98,31 @@ export interface AiToolNetworkPolicy {
   mode: "forbidden";
 }
 
+export type AiProviderDataField =
+  | "instructions"
+  | "user-prompt"
+  | "tool-definitions"
+  | "provider-output"
+  | "tool-results";
+export type AiProviderDlpAction = "reject" | "redact";
+
+export interface AiProviderFieldPolicy {
+  field: AiProviderDataField;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderInputFieldPolicy {
+  jsonPointer: string;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderDataPolicy {
+  inputFields: readonly AiProviderInputFieldPolicy[];
+  envelopeFields: readonly AiProviderFieldPolicy[];
+}
+
 export interface AiOperationLimits {
   maxDurationSeconds: number;
   maxInputBytes: number;
@@ -119,6 +144,7 @@ export interface ModuleAiOperationDefinition {
   /** @deprecated 使用 providerEgress 与 toolNetworkPolicy 拆分两类网络边界。 */
   publicNetworkAccess?: AiOperationPublicNetworkAccess;
   providerEgress?: AiProviderEgressPolicy;
+  providerDataPolicy?: AiProviderDataPolicy;
   toolNetworkPolicy?: AiToolNetworkPolicy;
   limits: AiOperationLimits;
 }

package/template/packages/modules/src/provider-data-policy-composition.test.ts

@@ -0,0 +1,74 @@
+import { describe, expect, test } from "bun:test";
+import { validateProviderDataPolicy } from "./ai-operation-composition.js";
+import type { ModuleAiOperationDefinition } from "./manifest.js";
+
+describe("Provider 输入字段 Schema", () => {
+  test.each(["/bad~2escape", "/__proto__/polluted", "/constructor/value"])(
+    "拒绝危险或非法 JSON Pointer：%s",
+    (jsonPointer) => {
+      expect(() =>
+        validateProviderDataPolicy(operation([jsonPointer])),
+      ).toThrow("JSON Pointer 无效");
+    },
+  );
+
+  test("拒绝父子重叠路径，避免规则顺序改变结果", () => {
+    expect(() =>
+      validateProviderDataPolicy(operation(["/case", "/case/name"])),
+    ).toThrow("不能父子重叠");
+  });
+
+  test("使用 Tool 时要求声明定义、上一轮输出和 Tool 结果", () => {
+    expect(() =>
+      validateProviderDataPolicy(operation(["/question"], ["business.query"])),
+    ).toThrow("使用 Tool 时");
+  });
+});
+
+function operation(
+  inputPointers: readonly string[],
+  allowedToolKeys: readonly string[] = [],
+): ModuleAiOperationDefinition {
+  return {
+    key: "business.answer",
+    kind: "agent",
+    featureKey: "business.ai",
+    permissionKey: "business.ai.execute",
+    auditAction: "business.ai.execute",
+    inputSchemaKey: "business.input.v1",
+    outputSchemaKey: "business.output.v1",
+    requiredCapabilities: ["text-generation"],
+    allowedToolKeys,
+    dataClassification: "internal",
+    execution: "streaming",
+    providerEgress: {
+      mode: "configured-endpoint",
+      deploymentKey: "ai.openai-compatible",
+    },
+    providerDataPolicy: {
+      inputFields: inputPointers.map((jsonPointer) => ({
+        jsonPointer,
+        classification: "internal",
+        dlpAction: "redact",
+      })),
+      envelopeFields: [
+        {
+          field: "instructions",
+          classification: "internal",
+          dlpAction: "reject",
+        },
+        {
+          field: "user-prompt",
+          classification: "internal",
+          dlpAction: "redact",
+        },
+      ],
+    },
+    toolNetworkPolicy: { mode: "forbidden" },
+    limits: {
+      maxDurationSeconds: 60,
+      maxInputBytes: 4096,
+      maxOutputBytes: 4096,
+    },
+  };
+}

package/template/packages/modules/src/system-audit-actions.ts

@@ -8,6 +8,11 @@ export const systemAuditActions: ModuleManifest["auditActions"] = [
   "crud.create",
   "crud.update",
   "crud.delete",
+  {
+    key: "system.user-directory.query",
+    label: "查询业务用户目录",
+    description: "业务模块在平台授权与数据范围内查询启用用户最小投影。",
+  },
   // @windy-module system.configuration begin
   "config.update",
   "config.rollback",

package/template/packages/modules/src/system-features.ts

@@ -17,6 +17,11 @@ export const systemFeatures: ModuleManifest["features"] = [
     "RBAC 权限链路",
     "用户、角色、权限点与数据范围的统一访问控制链路。",
   ),
+  feature(
+    "system.user-directory",
+    "业务用户目录",
+    "向获授权业务模块提供受数据范围约束的启用用户最小只读投影。",
+  ),
   feature(
     "system.profile",
     "个人设置",

package/template/packages/modules/src/system-module-catalog.test.ts

@@ -116,6 +116,22 @@ describe("系统能力模块目录", () => {
       "system.workflow.timeout-dispatch",
     ]);
     expect(identity.dataPolicies).toEqual([]);
+    expect(identity.features.map(({ key }) => key)).toContain(
+      "system.user-directory",
+    );
+    expect(identity.permissions.map(({ key }) => key)).toContain(
+      "system.user-directory.read",
+    );
+    expect(
+      identity.auditActions.map((action) =>
+        typeof action === "string" ? action : action.key,
+      ),
+    ).toContain("system.user-directory.query");
+    expect(
+      systemFoundationModule().auditActions.map((action) =>
+        typeof action === "string" ? action : action.key,
+      ),
+    ).toContain("system.user-directory.query");
     expect(
       systemModuleManifest("system.data-governance").dataPolicies?.map(
         ({ key }) => key,

package/template/packages/modules/src/system-module-catalog.ts

@@ -27,9 +27,17 @@ export const systemModuleDefinitions = [
     version: "0.1.0",
     label: "身份与权限",
     description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
-    resources: ["user", "role", "department", "menu", "dict", "profile"],
+    resources: [
+      "user",
+      "user-directory",
+      "role",
+      "department",
+      "menu",
+      "dict",
+      "profile",
+    ],
     excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: ["system.rbac", "system.profile"],
+    featureKeys: ["system.rbac", "system.user-directory", "system.profile"],
   },
   // @windy-module system.settings begin
   {
@@ -226,11 +234,26 @@ function createSystemCapabilityModule(
       definition.name === "system.data-governance"
         ? aggregate.dataPolicies
         : [],
-    auditActions: isCore ? aggregate.auditActions : [],
+    auditActions: isCore
+      ? aggregate.auditActions.filter(
+          (action) => auditActionKey(action) !== "system.user-directory.query",
+        )
+      : definition.name === "system.identity"
+        ? aggregate.auditActions.filter(
+            (action) =>
+              auditActionKey(action) === "system.user-directory.query",
+          )
+        : [],
     metadata: { kind: "platform-capability" },
   };
 }
 
+function auditActionKey(
+  action: ModuleManifest["auditActions"][number],
+): string {
+  return typeof action === "string" ? action : action.key;
+}
+
 function permissionResource(permissionKey: string): string {
   const parts = permissionKey.split(".");
   return parts.length >= 3 ? parts.slice(1, -1).join(".") : "";

package/template/packages/modules/src/system-permissions.ts

@@ -3,6 +3,7 @@ import type { ModuleManifest } from "./manifest.js";
 const systemResourceLabels = {
   admin: "管理面准入",
   user: "用户管理",
+  "user-directory": "业务用户目录",
   role: "角色与权限",
   department: "部门组织",
   menu: "菜单管理",
@@ -75,6 +76,7 @@ export const systemPermissions: ModuleManifest["permissions"] = [
   permission("user", "export", "governed-export"),
   // @windy-module system.data-governance end
   permission("user", "manage"),
+  permission("user-directory", "read"),
   permission("role", "read"),
   permission("role", "manage"),
   permission("department", "read"),

package/template/packages/server-sdk/index.ts

@@ -32,9 +32,20 @@ export type {
   ModuleSearchQuery,
 } from "./src/search-provider-port.js";
 export type {
+  ModuleOpenedResourceFile,
+  ModuleResourceFileAccessContext,
+  ModuleResourceFileAccessPolicy,
+  ModuleResourceFileRequest,
   ModuleStoragePort,
   ModuleUploadSessionInput,
 } from "./src/storage-port.js";
+export type {
+  ModuleUserDirectoryEntry,
+  ModuleUserDirectoryPage,
+  ModuleUserDirectoryPort,
+  ModuleUserDirectoryQuery,
+} from "./src/user-directory-port.js";
+export { ModuleUserDirectoryError } from "./src/user-directory-port.js";
 export type {
   ModuleTaskHandler,
   ModuleTaskHandlerRegistration,

package/template/packages/server-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/server-sdk",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -21,7 +21,8 @@
     "src/storage-port.ts",
     "src/task-registration.ts",
     "src/tool-registration.ts",
-    "src/tool-host-port.ts"
+    "src/tool-host-port.ts",
+    "src/user-directory-port.ts"
   ],
   "scripts": {
     "test": "bun test",

package/template/packages/server-sdk/src/ai-operation-registration.ts

@@ -9,7 +9,8 @@ export interface ModuleAiOperationContext {
 }
 
 /**
- * 业务模块只负责把类型化输入收敛为模型无关的指令和用户消息。
+ * 业务模块只接收 Manifest `providerDataPolicy.inputFields` allowlist 选出并完成
+ * DLP 的最小输入，再将其收敛为模型无关的指令和用户消息。
  * Provider、Deployment、Secret、Execution Grant 与 Tool 授权均由宿主持有。
  */
 export interface ModuleAiOperationPlan {