create-windy 0.2.33 → 0.3.0

package/template/packages/database/drizzle/meta/_journal.json

@@ -246,6 +246,34 @@
       "when": 1784976420447,
       "tag": "0034_funny_mesmero",
       "breakpoints": true
+    },
+    {
+      "idx": 35,
+      "version": "7",
+      "when": 1785008351360,
+      "tag": "0035_material_nightshade",
+      "breakpoints": true
+    },
+    {
+      "idx": 36,
+      "version": "7",
+      "when": 1785009127636,
+      "tag": "0036_hesitant_speed",
+      "breakpoints": true
+    },
+    {
+      "idx": 37,
+      "version": "7",
+      "when": 1785012884328,
+      "tag": "0037_absent_nick_fury",
+      "breakpoints": true
+    },
+    {
+      "idx": 38,
+      "version": "7",
+      "when": 1785013875842,
+      "tag": "0038_uneven_wasp",
+      "breakpoints": true
     }
   ]
 }

package/template/packages/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/database",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/database/src/schema/identity.ts

@@ -27,7 +27,14 @@ export const departments = pgTable(
   },
   (table) => [
     uniqueIndex("uk_departments_code").on(table.code),
+    uniqueIndex("uk_departments_single_root")
+      .on(sql`((1))`)
+      .where(sql`${table.parentId} is null and ${table.deletedAt} is null`),
     index("idx_departments_parent").on(table.parentId),
+    check(
+      "departments_parent_not_self",
+      sql`${table.parentId} is null or ${table.parentId} <> ${table.id}`,
+    ),
   ],
 );
 

package/template/packages/database/src/schema/notifications.ts

@@ -1,5 +1,7 @@
 import {
+  boolean,
   index,
+  integer,
   pgTable,
   primaryKey,
   text,
@@ -9,6 +11,10 @@ import {
   varchar,
 } from "drizzle-orm/pg-core";
 import type { TargetRef } from "@southwind-ai/shared";
+import type {
+  ExternalNotificationChannel,
+  NotificationDeliveryStatus,
+} from "@southwind-ai/shared";
 import { auditColumns, idColumn, statusColumn } from "./common.js";
 import { users } from "./identity.js";
 
@@ -22,15 +28,32 @@ export const platformNotifications = pgTable(
     category: varchar("category", { length: 40 }).notNull(),
     status: statusColumn().notNull(),
     publishedAt: timestamp("published_at", { withTimezone: true }).notNull(),
+    scheduledFor: timestamp("scheduled_for", { withTimezone: true }),
     archivedAt: timestamp("archived_at", { withTimezone: true }),
     archivedBy: varchar("archived_by", { length: 64 }),
     target: jsonb("target").$type<TargetRef>(),
     recipientUserId: varchar("recipient_user_id", { length: 64 }),
+    recipientUserIds: jsonb("recipient_user_ids")
+      .$type<string[]>()
+      .notNull()
+      .default([]),
     recipientRoleCodes: jsonb("recipient_role_codes")
       .$type<string[]>()
       .notNull()
       .default([]),
+    recipientDepartmentIds: jsonb("recipient_department_ids")
+      .$type<string[]>()
+      .notNull()
+      .default([]),
+    includeChildDepartments: boolean("include_child_departments")
+      .notNull()
+      .default(false),
+    deliveryChannels: jsonb("delivery_channels")
+      .$type<ExternalNotificationChannel[]>()
+      .notNull()
+      .default([]),
     sourceKey: varchar("source_key", { length: 180 }),
+    revision: integer("revision").notNull().default(1),
     ...auditColumns,
   },
   (table) => [
@@ -42,6 +65,96 @@ export const platformNotifications = pgTable(
   ],
 );
 
+export const notificationPreferences = pgTable("notification_preferences", {
+  userId: varchar("user_id", { length: 64 })
+    .primaryKey()
+    .references(() => users.id, { onDelete: "restrict" }),
+  enabledChannels: jsonb("enabled_channels")
+    .$type<ExternalNotificationChannel[]>()
+    .notNull()
+    .default([]),
+  disabledCategories: jsonb("disabled_categories")
+    .$type<string[]>()
+    .notNull()
+    .default([]),
+  updatedAt: timestamp("updated_at", { withTimezone: true })
+    .notNull()
+    .defaultNow(),
+  updatedBy: varchar("updated_by", { length: 64 }).notNull(),
+});
+
+export const notificationDeliveryOutbox = pgTable(
+  "notification_delivery_outbox",
+  {
+    id: idColumn().primaryKey(),
+    notificationId: varchar("notification_id", { length: 64 })
+      .notNull()
+      .references(() => platformNotifications.id, { onDelete: "restrict" }),
+    userId: varchar("user_id", { length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "restrict" }),
+    channel: varchar("channel", { length: 16 })
+      .$type<ExternalNotificationChannel>()
+      .notNull(),
+    status: varchar("status", { length: 16 })
+      .$type<NotificationDeliveryStatus>()
+      .notNull(),
+    subject: varchar("subject", { length: 120 }).notNull(),
+    content: text("content").notNull(),
+    attemptCount: integer("attempt_count").notNull().default(0),
+    nextAttemptAt: timestamp("next_attempt_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    leaseToken: varchar("lease_token", { length: 64 }),
+    leaseExpiresAt: timestamp("lease_expires_at", { withTimezone: true }),
+    deliveredAt: timestamp("delivered_at", { withTimezone: true }),
+    providerMessageId: varchar("provider_message_id", { length: 180 }),
+    lastErrorCode: varchar("last_error_code", { length: 64 }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("uk_notification_delivery_target").on(
+      table.notificationId,
+      table.userId,
+      table.channel,
+    ),
+    index("idx_notification_delivery_claim").on(
+      table.status,
+      table.nextAttemptAt,
+      table.leaseExpiresAt,
+    ),
+    index("idx_notification_delivery_notification").on(table.notificationId),
+  ],
+);
+
+export const notificationRevisions = pgTable(
+  "notification_revisions",
+  {
+    notificationId: varchar("notification_id", { length: 64 })
+      .notNull()
+      .references(() => platformNotifications.id, { onDelete: "restrict" }),
+    revision: integer("revision").notNull(),
+    title: varchar("title", { length: 120 }).notNull(),
+    summary: varchar("summary", { length: 240 }).notNull(),
+    content: text("content").notNull(),
+    category: varchar("category", { length: 40 }).notNull(),
+    editedAt: timestamp("edited_at", { withTimezone: true }).notNull(),
+    editedBy: varchar("edited_by", { length: 64 }).notNull(),
+  },
+  (table) => [
+    primaryKey({ columns: [table.notificationId, table.revision] }),
+    index("idx_notification_revisions_time").on(
+      table.notificationId,
+      table.editedAt,
+    ),
+  ],
+);
+
 export const notificationReads = pgTable(
   "notification_reads",
   {
@@ -58,3 +171,25 @@ export const notificationReads = pgTable(
     index("idx_notification_reads_user").on(table.userId, table.readAt),
   ],
 );
+
+export const notificationFavorites = pgTable(
+  "notification_favorites",
+  {
+    notificationId: varchar("notification_id", { length: 64 })
+      .notNull()
+      .references(() => platformNotifications.id, { onDelete: "restrict" }),
+    userId: varchar("user_id", { length: 64 })
+      .notNull()
+      .references(() => users.id, { onDelete: "restrict" }),
+    favoritedAt: timestamp("favorited_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    primaryKey({ columns: [table.notificationId, table.userId] }),
+    index("idx_notification_favorites_user").on(
+      table.userId,
+      table.favoritedAt,
+    ),
+  ],
+);

package/template/packages/database/src/schema-notification-delivery.test.ts

@@ -0,0 +1,54 @@
+import { describe, expect, test } from "bun:test";
+import { getTableConfig } from "drizzle-orm/pg-core";
+import {
+  notificationDeliveryOutbox,
+  notificationPreferences,
+  platformNotifications,
+} from "./schema/index.js";
+
+describe("通知策略与投递 schema", () => {
+  test("定时、多受众、偏好与 outbox 使用可迁移的 PostgreSQL 结构", async () => {
+    expect(platformNotifications.scheduledFor).toBeDefined();
+    expect(platformNotifications.recipientUserIds.notNull).toBe(true);
+    expect(platformNotifications.recipientDepartmentIds.notNull).toBe(true);
+    expect(platformNotifications.includeChildDepartments.notNull).toBe(true);
+    expect(platformNotifications.deliveryChannels.notNull).toBe(true);
+
+    expect(getTableConfig(notificationPreferences).name).toBe(
+      "notification_preferences",
+    );
+    expect(notificationPreferences.userId.primary).toBe(true);
+    expect(notificationPreferences.enabledChannels.notNull).toBe(true);
+    expect(notificationPreferences.disabledCategories.notNull).toBe(true);
+
+    const outbox = getTableConfig(notificationDeliveryOutbox);
+    expect(outbox.name).toBe("notification_delivery_outbox");
+    expect(
+      outbox.indexes.some(
+        ({ config }) => config.name === "uk_notification_delivery_target",
+      ),
+    ).toBe(true);
+    expect(
+      outbox.indexes.some(
+        ({ config }) => config.name === "idx_notification_delivery_claim",
+      ),
+    ).toBe(true);
+    expect(
+      outbox.foreignKeys.every(
+        (foreignKey) => foreignKey.onDelete === "restrict",
+      ),
+    ).toBe(true);
+
+    const migration = await Bun.file(
+      new URL("../drizzle/0038_uneven_wasp.sql", import.meta.url),
+    ).text();
+    expect(migration).toContain('CREATE TABLE "notification_preferences"');
+    expect(migration).toContain('CREATE TABLE "notification_delivery_outbox"');
+    expect(migration).toContain(
+      'ALTER TABLE "platform_notifications" ADD COLUMN "scheduled_for"',
+    );
+    expect(migration).toContain(
+      'CREATE INDEX "idx_notification_delivery_claim"',
+    );
+  });
+});

package/template/packages/database/src/schema-workflow-notification.test.ts

@@ -1,7 +1,9 @@
 import { describe, expect, test } from "bun:test";
 import { getTableConfig } from "drizzle-orm/pg-core";
 import {
+  notificationFavorites,
   notificationReads,
+  notificationRevisions,
   platformNotifications,
   workflowTransitions,
   workflowWorkItems,
@@ -30,7 +32,7 @@ describe("审批与通知 schema", () => {
     );
   });
 
-  test("站内通知持久化发布状态、受众、业务目标和用户已读回执", async () => {
+  test("站内通知持久化发布状态、受众、已读与独立收藏回执", async () => {
     expect(getTableConfig(platformNotifications).name).toBe(
       "platform_notifications",
     );
@@ -52,6 +54,21 @@ describe("审批与通知 schema", () => {
         (foreignKey) => foreignKey.onDelete === "restrict",
       ),
     ).toBe(true);
+    expect(getTableConfig(notificationFavorites).name).toBe(
+      "notification_favorites",
+    );
+    expect(getTableConfig(notificationFavorites).primaryKeys).toHaveLength(1);
+    expect(notificationFavorites.favoritedAt.notNull).toBe(true);
+    expect(
+      getTableConfig(notificationFavorites).foreignKeys.every(
+        (foreignKey) => foreignKey.onDelete === "restrict",
+      ),
+    ).toBe(true);
+    expect(getTableConfig(notificationRevisions).name).toBe(
+      "notification_revisions",
+    );
+    expect(getTableConfig(notificationRevisions).primaryKeys).toHaveLength(1);
+    expect(platformNotifications.revision.notNull).toBe(true);
     const migration = await Bun.file(
       new URL("../drizzle/0027_tiny_diamondback.sql", import.meta.url),
     ).text();
@@ -59,5 +76,27 @@ describe("审批与通知 schema", () => {
     expect(migration).toContain(
       'CREATE UNIQUE INDEX "uk_platform_notifications_source_key"',
     );
+    const favoritesMigration = await Bun.file(
+      new URL("../drizzle/0035_material_nightshade.sql", import.meta.url),
+    ).text();
+    expect(favoritesMigration).toContain(
+      'CREATE TABLE "notification_favorites"',
+    );
+    expect(favoritesMigration).toContain(
+      'PRIMARY KEY("notification_id","user_id")',
+    );
+    expect(favoritesMigration).toContain("ON DELETE restrict");
+    const revisionsMigration = await Bun.file(
+      new URL("../drizzle/0036_hesitant_speed.sql", import.meta.url),
+    ).text();
+    expect(revisionsMigration).toContain(
+      'CREATE TABLE "notification_revisions"',
+    );
+    expect(revisionsMigration).toContain(
+      'ALTER TABLE "platform_notifications" ADD COLUMN "revision"',
+    );
+    expect(revisionsMigration).toContain(
+      'INSERT INTO "notification_revisions"',
+    );
   });
 });

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/src/ai-operation-composition.test.ts

@@ -112,6 +112,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: "ai.openai-compatible",
         },
+        providerDataPolicy: providerDataPolicy(),
         toolNetworkPolicy: { mode: "forbidden" },
       },
     ];
@@ -133,6 +134,7 @@ describe("AI Operation Composition", () => {
           mode: "configured-endpoint",
           deploymentKey: " ",
         },
+        providerDataPolicy: providerDataPolicy(),
       },
     ];
     expect(() => validateModuleComposition([module])).toThrow(
@@ -148,6 +150,48 @@ describe("AI Operation Composition", () => {
     );
   });
 
+  test("Provider 字段策略必须完整、唯一且与出网授权绑定", () => {
+    const module = fixture("business");
+    module.aiOperations = [
+      {
+        ...operation("business.generate"),
+        providerEgress: {
+          mode: "configured-endpoint",
+          deploymentKey: "ai.openai-compatible",
+        },
+      },
+    ];
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送 allowlist 缺失",
+    );
+
+    module.aiOperations[0] = {
+      ...module.aiOperations[0],
+      providerDataPolicy: {
+        ...providerDataPolicy(),
+        envelopeFields: [
+          ...providerDataPolicy().envelopeFields,
+          {
+            field: "instructions",
+            classification: "internal",
+            dlpAction: "reject",
+          },
+        ],
+      },
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "字段发送规则重复",
+    );
+
+    module.aiOperations[0] = {
+      ...operation("business.generate"),
+      providerDataPolicy: providerDataPolicy(),
+    };
+    expect(() => validateModuleComposition([module])).toThrow(
+      "禁止 Provider 出网时不能声明字段发送策略",
+    );
+  });
+
   test("Operation Handler 必须与 Manifest 声明一一对应", () => {
     const module = fixture("business");
     module.aiOperations = [operation("business.generate")];
@@ -190,6 +234,30 @@ function operation(
   };
 }
 
+function providerDataPolicy() {
+  return {
+    inputFields: [
+      {
+        jsonPointer: "/question",
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+    envelopeFields: [
+      {
+        field: "instructions" as const,
+        classification: "internal" as const,
+        dlpAction: "reject" as const,
+      },
+      {
+        field: "user-prompt" as const,
+        classification: "internal" as const,
+        dlpAction: "redact" as const,
+      },
+    ],
+  };
+}
+
 function fixture(name: string): ModuleManifest {
   const permissionKey = `${name}.ai.execute`;
   const featureKey = `${name}.ai`;

package/template/packages/modules/src/ai-operation-composition.ts

@@ -102,9 +102,124 @@ function validateOperation(
   validateCapabilities(operation);
   validateTools(operation, catalogs.tools);
   validateAiNetworkPolicy(operation);
+  validateProviderDataPolicy(operation);
   validateLimits(operation);
 }
 
+const providerDataFields = new Set([
+  "instructions",
+  "user-prompt",
+  "tool-definitions",
+  "provider-output",
+  "tool-results",
+]);
+
+export function validateProviderDataPolicy(
+  operation: ModuleAiOperationDefinition,
+): void {
+  const policy = operation.providerDataPolicy;
+  if (operation.providerEgress?.mode !== "configured-endpoint") {
+    if (policy) {
+      throw new Error(
+        `${operation.key} 禁止 Provider 出网时不能声明字段发送策略`,
+      );
+    }
+    return;
+  }
+  if (!policy?.inputFields.length || !policy.envelopeFields.length) {
+    throw new Error(`${operation.key} Provider 字段发送 allowlist 缺失`);
+  }
+  validateInputFields(operation.key, policy.inputFields);
+  const fields = new Set<string>();
+  for (const rule of policy.envelopeFields) {
+    if (!providerDataFields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 含未知字段`,
+      );
+    }
+    if (fields.has(rule.field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送规则重复：${rule.field}`,
+      );
+    }
+    fields.add(rule.field);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operation.key} Provider 字段分类无效：${rule.field}`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operation.key} Provider DLP 动作无效：${rule.field}`);
+    }
+  }
+  for (const field of ["instructions", "user-prompt"]) {
+    if (!fields.has(field)) {
+      throw new Error(
+        `${operation.key} Provider 字段发送 allowlist 缺少 ${field}`,
+      );
+    }
+  }
+  if (operation.allowedToolKeys.length) {
+    for (const field of [
+      "tool-definitions",
+      "provider-output",
+      "tool-results",
+    ]) {
+      if (!fields.has(field)) {
+        throw new Error(
+          `${operation.key} 使用 Tool 时 Provider 字段发送 allowlist 缺少 ${field}`,
+        );
+      }
+    }
+  }
+}
+
+function validateInputFields(
+  operationKey: string,
+  fields: NonNullable<
+    ModuleAiOperationDefinition["providerDataPolicy"]
+  >["inputFields"],
+): void {
+  const pointers = new Set<string>();
+  for (const rule of fields) {
+    const segments = rule.jsonPointer
+      .slice(1)
+      .split("/")
+      .map((segment) => segment.replaceAll("~1", "/").replaceAll("~0", "~"));
+    if (
+      !rule.jsonPointer.startsWith("/") ||
+      rule.jsonPointer === "/" ||
+      rule.jsonPointer.endsWith("/") ||
+      rule.jsonPointer.includes("//") ||
+      /~(?:[^01]|$)/u.test(rule.jsonPointer) ||
+      segments.some((segment) =>
+        ["__proto__", "prototype", "constructor"].includes(segment),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段 JSON Pointer 无效`);
+    }
+    if (
+      [...pointers].some(
+        (pointer) =>
+          pointer.startsWith(`${rule.jsonPointer}/`) ||
+          rule.jsonPointer.startsWith(`${pointer}/`),
+      )
+    ) {
+      throw new Error(`${operationKey} Provider 输入字段规则不能父子重叠`);
+    }
+    if (pointers.has(rule.jsonPointer)) {
+      throw new Error(
+        `${operationKey} Provider 输入字段规则重复：${rule.jsonPointer}`,
+      );
+    }
+    pointers.add(rule.jsonPointer);
+    if (!["public", "internal", "sensitive"].includes(rule.classification)) {
+      throw new Error(`${operationKey} Provider 输入字段分类无效`);
+    }
+    if (!["reject", "redact"].includes(rule.dlpAction)) {
+      throw new Error(`${operationKey} Provider 输入字段 DLP 动作无效`);
+    }
+  }
+}
+
 function validateCapabilities(operation: ModuleAiOperationDefinition): void {
   if (!operation.requiredCapabilities.length) {
     throw new Error(`${operation.key} 至少需要一个 capability`);

package/template/packages/modules/src/manifest.ts

@@ -98,6 +98,31 @@ export interface AiToolNetworkPolicy {
   mode: "forbidden";
 }
 
+export type AiProviderDataField =
+  | "instructions"
+  | "user-prompt"
+  | "tool-definitions"
+  | "provider-output"
+  | "tool-results";
+export type AiProviderDlpAction = "reject" | "redact";
+
+export interface AiProviderFieldPolicy {
+  field: AiProviderDataField;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderInputFieldPolicy {
+  jsonPointer: string;
+  classification: AiOperationDataClassification;
+  dlpAction: AiProviderDlpAction;
+}
+
+export interface AiProviderDataPolicy {
+  inputFields: readonly AiProviderInputFieldPolicy[];
+  envelopeFields: readonly AiProviderFieldPolicy[];
+}
+
 export interface AiOperationLimits {
   maxDurationSeconds: number;
   maxInputBytes: number;
@@ -119,6 +144,7 @@ export interface ModuleAiOperationDefinition {
   /** @deprecated 使用 providerEgress 与 toolNetworkPolicy 拆分两类网络边界。 */
   publicNetworkAccess?: AiOperationPublicNetworkAccess;
   providerEgress?: AiProviderEgressPolicy;
+  providerDataPolicy?: AiProviderDataPolicy;
   toolNetworkPolicy?: AiToolNetworkPolicy;
   limits: AiOperationLimits;
 }