create-windy 0.2.34 → 0.3.1

package/template/packages/modules/src/system-modules.test.ts

@@ -220,7 +220,7 @@ describe("系统模块能力注册", () => {
     expect(catalogs).toEqual(["组织与权限", "平台配置", "安全与合规", "运维"]);
   });
 
-  test("部门快捷创建使用独立权限并绑定真实 API", () => {
+  test("部门创建与迁移处置绑定独立权限、Feature 和审计动作", () => {
     const manifest = systemFoundationModule();
     expect(
       manifest.permissions.some(
@@ -234,6 +234,18 @@ describe("系统模块能力注册", () => {
       featureKey: "system.rbac",
       anonymous: undefined,
     });
+    expect(manifest.apiPermissions).toContainEqual({
+      method: "POST",
+      path: "/api/system/departments/:id/transition",
+      permissionKey: "system.department.manage",
+      featureKey: "system.rbac",
+      anonymous: undefined,
+    });
+    expect(manifest.auditActions).toContainEqual(
+      expect.objectContaining({
+        key: "organization.department.transition",
+      }),
+    );
   });
 
   test("所有权限都由 Manifest 提供稳定中文分组元数据", () => {
@@ -305,59 +317,6 @@ describe("系统模块能力注册", () => {
     ]);
   });
   // @windy-module system.configuration end
-
-  test("管理面准入使用独立 Feature 与 access 权限", () => {
-    const manifest = systemFoundationModule();
-
-    expect(manifest.features).toContainEqual(
-      expect.objectContaining({ key: "system.admin", enabled: true }),
-    );
-    expect(manifest.permissions).toContainEqual(
-      expect.objectContaining({
-        key: "system.admin.access",
-        action: "access",
-      }),
-    );
-    expect(manifest.apiPermissions).toContainEqual({
-      method: "GET",
-      path: "/api/admin/bootstrap",
-      permissionKey: "system.admin.access",
-      featureKey: "system.admin",
-      anonymous: undefined,
-    });
-  });
-
-  // @windy-module system.agent begin
-  test("MCP Streamable HTTP 入口统一绑定 Agent Feature 与读取权限", () => {
-    const bindings = systemFoundationModule().apiPermissions.filter(
-      ({ path }) => path === "/api/mcp",
-    );
-
-    expect(bindings).toEqual([
-      {
-        method: "GET",
-        path: "/api/mcp",
-        permissionKey: "system.agent.read",
-        featureKey: "system.agent",
-        anonymous: undefined,
-      },
-      {
-        method: "POST",
-        path: "/api/mcp",
-        permissionKey: "system.agent.read",
-        featureKey: "system.agent",
-        anonymous: undefined,
-      },
-      {
-        method: "DELETE",
-        path: "/api/mcp",
-        permissionKey: "system.agent.read",
-        featureKey: "system.agent",
-        anonymous: undefined,
-      },
-    ]);
-  });
-  // @windy-module system.agent end
 });
 
 function flattenMenuKeys(

package/template/packages/modules/src/system-modules.ts

@@ -12,6 +12,7 @@ import { systemAuditActions } from "./system-audit-actions.js";
 import { systemDataPolicies } from "./system-data-governance.js";
 // @windy-module system.data-governance end
 import { systemFeatures } from "./system-features.js";
+import { systemModuleTasks } from "./system-module-tasks.js";
 import { systemPermissions } from "./system-permissions.js";
 
 export function systemFoundationModule(): ModuleManifest {
@@ -257,78 +258,7 @@ export function systemFoundationModule(): ModuleManifest {
       ...systemAgentToolSchemas,
       // @windy-module system.agent end
     ],
-    tasks: [
-      // @windy-module system.scheduler begin
-      {
-        key: "system.scheduler.health-snapshot",
-        label: "调度器健康快照",
-        description: "周期验证调度、Guard、执行历史和重试链路可用。",
-        permissionKey: "system.scheduler.manage",
-        featureKey: "system.scheduler",
-        intervalSeconds: 300,
-        maxAttempts: 3,
-        retryDelaySeconds: 30,
-      },
-      // @windy-module system.scheduler end
-      // @windy-module system.bulk-data begin
-      {
-        key: "system.bulk-data.dispatch",
-        label: "批量数据任务派发",
-        description: "领取一个已排队或到期重试的批量导入导出任务。",
-        permissionKey: "system.bulk-data.manage",
-        featureKey: "system.bulk-data",
-        intervalSeconds: 5,
-        maxAttempts: 3,
-        retryDelaySeconds: 30,
-      },
-      {
-        key: "system.bulk-data.cleanup",
-        label: "批量数据文件清理",
-        description: "清理超过留存期限的源文件、结果和失败明细。",
-        permissionKey: "system.bulk-data.manage",
-        featureKey: "system.bulk-data",
-        intervalSeconds: 3_600,
-        maxAttempts: 3,
-        retryDelaySeconds: 60,
-      },
-      // @windy-module system.bulk-data end
-      // @windy-module system.storage begin
-      {
-        key: "system.storage.cleanup",
-        label: "文件存储清理",
-        description: "清理过期上传、文件、临时分片和超过宽限期的孤儿对象。",
-        permissionKey: "system.storage.manage",
-        featureKey: "system.storage",
-        intervalSeconds: 3_600,
-        maxAttempts: 3,
-        retryDelaySeconds: 60,
-      },
-      // @windy-module system.storage end
-      // @windy-module system.workflow begin
-      {
-        key: "system.workflow.timeout-dispatch",
-        label: "审批超时派发",
-        description: "补偿登记并执行一个到期审批任务，进程重启后继续处理。",
-        permissionKey: "system.workflow.manage",
-        featureKey: "system.workflow",
-        intervalSeconds: 5,
-        maxAttempts: 3,
-        retryDelaySeconds: 30,
-      },
-      // @windy-module system.workflow end
-      // @windy-module system.data-governance begin
-      {
-        key: "system.governed-export.dispatch",
-        label: "受治理导出派发",
-        description: "领取并执行一个已批准的敏感数据导出任务。",
-        permissionKey: "system.user.export",
-        featureKey: "system.rbac",
-        intervalSeconds: 5,
-        maxAttempts: 3,
-        retryDelaySeconds: 30,
-      },
-      // @windy-module system.data-governance end
-    ],
+    tasks: systemModuleTasks,
     tools: [
       // @windy-module system.agent begin
       ...systemAgentTools,

package/template/packages/modules/src/system-permissions.ts

@@ -33,6 +33,7 @@ type SystemAction =
   | "approve"
   | "export"
   | "reveal"
+  | "update"
   | "manage";
 
 function permission(
@@ -54,11 +55,13 @@ function permission(
             ? "新建"
             : action === "approve"
               ? "处理"
-              : action === "reveal"
-                ? "查看明文"
-                : action === "export"
-                  ? "治理导出"
-                  : "管理",
+              : action === "update"
+                ? "修改"
+                : action === "reveal"
+                  ? "查看明文"
+                  : action === "export"
+                    ? "治理导出"
+                    : "管理",
     module: "system",
     moduleLabel: "系统基础设施",
     resource,
@@ -125,6 +128,7 @@ export const systemPermissions: ModuleManifest["permissions"] = [
   // @windy-module system.scheduler end
   // @windy-module system.notification begin
   permission("notification", "read"),
+  permission("notification", "update"),
   permission("notification", "manage"),
   // @windy-module system.notification end
   // @windy-module system.bulk-data begin

package/template/packages/server-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/server-sdk",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/shared/index.ts

@@ -7,6 +7,7 @@ export * from "./src/license-catalog.js";
 export * from "./src/json.js";
 export * from "./src/migration.js";
 export * from "./src/migration-bundle-validation.js";
+export * from "./src/mcp.js";
 export * from "./src/module-configuration.js";
 export * from "./src/correlation.js";
 export * from "./src/notification.js";

package/template/packages/shared/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/shared",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/shared/src/audit.ts

@@ -145,11 +145,36 @@ export const AUDIT_ACTION_DEFINITIONS = [
     label: "通知发布",
     description: "发布站内通知。",
   },
+  {
+    key: "notification.schedule",
+    label: "通知定时发布",
+    description: "创建等待调度器发布的通知。",
+  },
+  {
+    key: "notification.preference.update",
+    label: "通知偏好更新",
+    description: "用户更新外部通知渠道和分类偏好。",
+  },
+  {
+    key: "notification.update",
+    label: "通知修改",
+    description: "修改已发布通知并保留版本历史。",
+  },
   {
     key: "notification.read",
     label: "通知已读",
     description: "用户阅读站内通知。",
   },
+  {
+    key: "notification.favorite",
+    label: "收藏通知",
+    description: "用户收藏可见的站内通知。",
+  },
+  {
+    key: "notification.unfavorite",
+    label: "取消收藏通知",
+    description: "用户取消收藏可见的站内通知。",
+  },
   {
     key: "notification.archive",
     label: "通知归档",

package/template/packages/shared/src/mcp.test.ts

@@ -0,0 +1,12 @@
+import { describe, expect, test } from "bun:test";
+import { MCP_API_PATH, MCP_ROUTE_PATH, MCP_SERVER_INFO } from "./mcp.js";
+
+describe("MCP public contract", () => {
+  test("HTTP 路径与 Server 身份使用稳定单一来源", () => {
+    expect(MCP_API_PATH).toBe(`/api${MCP_ROUTE_PATH}`);
+    expect(MCP_SERVER_INFO).toEqual({
+      name: "windy-platform",
+      version: "0.1.0",
+    });
+  });
+});

package/template/packages/shared/src/mcp.ts

@@ -0,0 +1,7 @@
+export const MCP_ROUTE_PATH = "/mcp";
+export const MCP_API_PATH = `/api${MCP_ROUTE_PATH}`;
+
+export const MCP_SERVER_INFO = {
+  name: "windy-platform",
+  version: "0.1.0",
+} as const;

package/template/packages/shared/src/module-configuration.ts

@@ -5,8 +5,11 @@ export type ModuleConfigApplyStatus =
   | "applying"
   | "effective"
   | "failed"
+  | "pending-restart"
   | "superseded";
 
+export type ModuleConfigApplyMode = "live" | "restart";
+
 export interface ModuleConfigDiffEntry {
   path: string;
   before?: ModuleConfigValue;
@@ -18,6 +21,7 @@ export interface ModuleConfigFieldDescriptor {
   label: string;
   description: string;
   input: "boolean" | "integer" | "text";
+  applyMode?: ModuleConfigApplyMode;
   minimum?: number;
   maximum?: number;
 }
@@ -42,6 +46,7 @@ export interface ModuleConfigSummary {
   label: string;
   fields: ModuleConfigFieldDescriptor[];
   effectiveValues: ModuleConfigValues;
+  pendingValues?: ModuleConfigValues;
   effectiveSource: "environment" | "version";
   effectiveVersion?: number;
   latestVersion?: number;

package/template/packages/shared/src/notification.ts

@@ -1,7 +1,14 @@
 import type { ISODateTime } from "./primitives.js";
 import type { TargetRef } from "./workflow.js";
 
-export type NotificationStatus = "published" | "archived";
+export type NotificationStatus = "scheduled" | "published" | "archived";
+export type ExternalNotificationChannel = "email" | "sms";
+export type NotificationDeliveryStatus =
+  | "pending"
+  | "processing"
+  | "retrying"
+  | "delivered"
+  | "dead";
 
 export interface PlatformNotification {
   id: string;
@@ -11,6 +18,7 @@ export interface PlatformNotification {
   category: string;
   status: NotificationStatus;
   publishedAt: ISODateTime;
+  scheduledFor?: ISODateTime;
   createdAt: ISODateTime;
   createdBy: string;
   updatedAt: ISODateTime;
@@ -19,13 +27,29 @@ export interface PlatformNotification {
   archivedBy?: string;
   target?: TargetRef;
   recipientUserId?: string;
+  recipientUserIds?: string[];
   recipientRoleCodes?: string[];
+  recipientDepartmentIds?: string[];
+  includeChildDepartments?: boolean;
+  deliveryChannels?: ExternalNotificationChannel[];
   sourceKey?: string;
+  revision: number;
 }
 
 export interface NotificationInboxItem extends PlatformNotification {
   read: boolean;
   readAt?: ISODateTime;
+  favorite: boolean;
+  favoritedAt?: ISODateTime;
+}
+
+export type NotificationReadFilter = "read" | "unread";
+
+export interface NotificationInboxFilters {
+  q?: string;
+  category?: string;
+  read?: NotificationReadFilter;
+  favorite?: boolean;
 }
 
 export interface PublishNotificationInput {
@@ -35,12 +59,79 @@ export interface PublishNotificationInput {
   category: string;
   target?: TargetRef;
   recipientUserId?: string;
+  recipientUserIds?: string[];
   recipientRoleCodes?: string[];
+  recipientDepartmentIds?: string[];
+  includeChildDepartments?: boolean;
+  deliveryChannels?: ExternalNotificationChannel[];
+  scheduledFor?: ISODateTime;
   sourceKey?: string;
 }
 
+export interface NotificationPreference {
+  userId: string;
+  enabledChannels: ExternalNotificationChannel[];
+  disabledCategories: string[];
+  updatedAt?: ISODateTime;
+}
+
+export type UpdateNotificationPreferenceInput = Pick<
+  NotificationPreference,
+  "enabledChannels" | "disabledCategories"
+>;
+
+export interface NotificationAudienceOption {
+  id: string;
+  label: string;
+  code?: string;
+}
+
+export interface NotificationAudienceOptions {
+  users: NotificationAudienceOption[];
+  roles: NotificationAudienceOption[];
+  departments: NotificationAudienceOption[];
+}
+
+export interface NotificationDelivery {
+  id: string;
+  notificationId: string;
+  userId: string;
+  channel: ExternalNotificationChannel;
+  status: NotificationDeliveryStatus;
+  attemptCount: number;
+  nextAttemptAt: ISODateTime;
+  deliveredAt?: ISODateTime;
+  lastErrorCode?: string;
+  createdAt: ISODateTime;
+  updatedAt: ISODateTime;
+}
+
+export type UpdateNotificationInput = Pick<
+  PublishNotificationInput,
+  "title" | "summary" | "content" | "category"
+>;
+
+export interface NotificationRevision extends UpdateNotificationInput {
+  notificationId: string;
+  revision: number;
+  editedAt: ISODateTime;
+  editedBy: string;
+}
+
+export interface UpdateNotificationResult {
+  notification: PlatformNotification;
+  changed: boolean;
+}
+
 export interface MarkNotificationReadResult {
   success: true;
   alreadyRead: boolean;
   readAt: ISODateTime;
 }
+
+export interface SetNotificationFavoriteResult {
+  success: true;
+  favorite: boolean;
+  changed: boolean;
+  favoritedAt?: ISODateTime;
+}

package/template/packages/shared/src/password.ts

@@ -1,4 +1,9 @@
-export const PASSWORD_POLICY = {
+export interface PasswordPolicy {
+  minLength: number;
+  maxLength: number;
+}
+
+export const PASSWORD_POLICY: Readonly<PasswordPolicy> = {
   minLength: 12,
   maxLength: 128,
-} as const;
+};

package/template/packages/shared/src/platform-settings.ts

@@ -2,6 +2,8 @@ export interface PlatformBrandingSettings {
   softwareName: string;
   logoUrl?: string;
   description?: string;
+  /** Runtime display timezone. It is managed by platform.runtime, not branding storage. */
+  timeZone?: string;
 }
 
 export const WATERMARK_DENSITIES = ["low", "medium", "high"] as const;

package/template/packages/storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/storage",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/storage/src/upload-service.test.ts

@@ -191,6 +191,22 @@ describe("UploadService", () => {
       service.appendPart(partInput(session.id, 1, 1, bytes("{}"))),
     ).rejects.toMatchObject({ code: "UPLOAD_OFFSET_CONFLICT" });
   });
+
+  test("运行时更新用途策略只影响后续上传会话", async () => {
+    const { service } = fixture();
+    const original = policies[0]!;
+    service.setPolicy({ ...original, maxByteSize: 1 });
+
+    await expect(
+      service.create({
+        ownerId: "user_1",
+        purpose: "bulk-data",
+        filename: "data.json",
+        mimeType: "application/json",
+        expectedByteSize: 2,
+      }),
+    ).rejects.toMatchObject({ code: "UPLOAD_TOO_LARGE" });
+  });
 });
 
 function fixture() {

package/template/packages/storage/src/upload-service.ts

@@ -37,7 +37,7 @@ export interface CleanupResult {
 export class UploadService {
   private readonly now: () => Date;
   private readonly createId: (prefix: "upload" | "file") => string;
-  private readonly policies: ReadonlyMap<string, UploadPolicy>;
+  private readonly policies: Map<string, UploadPolicy>;
 
   constructor(private readonly options: UploadServiceOptions) {
     this.now = options.now ?? (() => new Date());
@@ -47,6 +47,10 @@ export class UploadService {
     );
   }
 
+  setPolicy(policy: UploadPolicy): void {
+    this.policies.set(policy.purpose, { ...policy });
+  }
+
   async create(input: CreateUploadInput): Promise<UploadSession> {
     const policy = this.requirePolicy(input.purpose);
     const filename = validFilename(input.filename);

package/template/scripts/notification-postgres-regression.ts

@@ -0,0 +1,27 @@
+import {
+  PostgresRegressionHarness,
+  runCommand,
+} from "./lib/postgres-regression.js";
+
+const postgres = new PostgresRegressionHarness("windy-notification-test");
+
+try {
+  await postgres.start();
+  await runCommand(
+    [
+      "bun",
+      "test",
+      "apps/server/src/notification/drizzle-repository.integration.test.ts",
+    ],
+    {
+      stdout: "inherit",
+      stderr: "inherit",
+      env: {
+        ...process.env,
+        NOTIFICATION_TEST_DATABASE_URL: postgres.databaseUrl(),
+      },
+    },
+  );
+} finally {
+  await postgres.close();
+}