create-windy 0.2.6 → 0.2.8

package/README.md

@@ -66,6 +66,12 @@ npx create-windy@latest my-dashboard \
 法律许可证与离线 `system.license` 是两项独立选择：前者决定项目代码授权，后者
 为离线部署提供运行时验签与限制态。
 
+选择 `system.license` 时，Server 与 Web 通过 npm 依赖
+`@southwind-ai/license@^0.1.1` 使用运行时能力；生成项目及 `create-windy` 模板快照都不包含
+`packages/license-sdk` 源码。公网 npm 已发布兼容的 `@southwind-ai/license@0.1.1`；
+发布包含该模块的新版创建器前，必须先确认目标 registry 中存在兼容版本，并完成真实
+安装回归。
+
 未选择的模块会从 package、源码、依赖、Composition、Manifest、schema、migration
 和模块文档中物理排除，而不是只隐藏菜单或关闭 Feature。模块依赖会自动补齐；未知
 模块和不闭合组合会在写入前拒绝。
@@ -99,9 +105,14 @@ bun run dev
 ```
 
 create-windy 会生成仅供本机使用、被 Git 忽略且权限为 `0600` 的 `.env`，其中数据库
-与管理员开发密码均为随机值。`bun run dev` 会通过 Docker Compose 等待 PostgreSQL、
-执行 migration，再启动 Server 与 Web；首次运行前需安装并启动 Docker 与 Docker
-Compose。
+与管理员开发密码均为随机值。全新数据库的初始平台账号固定为 `admin`，初始密码查看
+`.env` 中的 `WINDY_BOOTSTRAP_ADMIN_PASSWORD`；创建器只提示密码位置，不会把随机密码
+直接打印在终端。首次登录必须修改密码，新密码需要 12-128 个字符，且不能与当前密码
+相同。
+
+`bun run dev` 会通过 Docker Compose 等待 PostgreSQL、执行 migration，再启动 Server
+与 Web；首次运行前需安装并启动 Docker 与 Docker Compose。环境变量只负责初始化全新
+数据库，数据库已有管理员后，重启服务不会重新覆盖其密码。
 
 只调试单个应用时可分别使用 `bun run dev:web` 和 `bun run dev:server`。`dev:web` 不会
 隐式启动后端；`dev:server` 也不会自动启动 PostgreSQL 或执行 migration。

package/dist/cli.js

@@ -359,7 +359,8 @@ var optionalModuleManifests = [
       "system",
       "system.identity",
       "system.search",
-      "system.scheduler"
+      "system.scheduler",
+      "system.storage"
     ]),
     packages: ["packages/example-work-order"],
     fileRoots: [
@@ -383,6 +384,7 @@ function module(name, label, description, dependencies) {
     dependencies,
     conflicts: [],
     packages: [],
+    registryDependencies: [],
     fileRoots: [],
     documentation: [],
     schemaFiles: [],
@@ -435,7 +437,13 @@ var platformModules = [
   },
   {
     ...module2("system.license", "离线 License", "离线验签、安装和限制态。", "optional", ["system"]),
-    packages: ["packages/license-sdk"],
+    registryDependencies: [
+      {
+        sourceName: "@southwind-ai/license",
+        name: "@southwind-ai/license",
+        version: "^0.1.1"
+      }
+    ],
     fileRoots: [
       "apps/server/src/license",
       "apps/web/src/components/license",
@@ -582,6 +590,7 @@ function module2(name, label, description, selection, dependencies = []) {
     dependencies,
     conflicts: [],
     packages: [],
+    registryDependencies: [],
     fileRoots: [],
     documentation: [],
     schemaFiles: [],
@@ -711,7 +720,7 @@ var helpText = `create-windy <项目名> [选项]
 `;
 
 // src/create-project.ts
-import { mkdir as mkdir4, readdir as readdir4, rm as rm4 } from "node:fs/promises";
+import { mkdir as mkdir4, readdir as readdir5, rm as rm4 } from "node:fs/promises";
 
 // src/commands.ts
 import { spawn } from "node:child_process";
@@ -902,14 +911,14 @@ function isAlreadyExists(error) {
 // src/generator.ts
 import {
   copyFile,
-  lstat as lstat3,
+  lstat as lstat4,
   mkdir as mkdir3,
-  readFile as readFile8,
-  readdir as readdir3,
+  readFile as readFile9,
+  readdir as readdir4,
   rm as rm3,
-  writeFile as writeFile7
+  writeFile as writeFile8
 } from "node:fs/promises";
-import { basename as basename2, extname as extname2, join as join8 } from "node:path";
+import { basename as basename3, extname as extname3, join as join9 } from "node:path";
 
 // src/customer-docker.ts
 import { readFile as readFile2, writeFile } from "node:fs/promises";
@@ -919,6 +928,7 @@ var supplierWorkspaceCopies = [
   "COPY apps/signing-service/package.json apps/signing-service/package.json",
   "COPY packages/create-windy/package.json packages/create-windy/package.json"
 ];
+var supplierWorkspacePaths = ["packages/license-sdk"];
 async function prepareCustomerDockerfiles(root) {
   await Promise.all(["apps/server/Dockerfile", "apps/web/Dockerfile"].map(async (path) => {
     const absolutePath = join2(root, path);
@@ -929,7 +939,7 @@ async function prepareCustomerDockerfiles(root) {
 function rewriteCustomerDockerfile(source) {
   const lines = source.split(`
 `).filter((line) => {
-    return !supplierWorkspaceCopies.includes(line) && !line.includes("deploy/production/server-entrypoint.sh");
+    return !supplierWorkspaceCopies.includes(line) && !supplierWorkspacePaths.some((path) => line.includes(path)) && !line.includes("deploy/production/server-entrypoint.sh");
   });
   return lines.join(`
 `).replace("COPY package.json bun.lock ./", "COPY package.json ./").replace("RUN bun install --frozen-lockfile", "RUN bun install");
@@ -1131,6 +1141,10 @@ async function materializeSelectedModules(targetDirectory, selectedNames) {
   const selected = new Set(selectedNames);
   const removed = moduleDistributionCatalog.filter(({ name }) => !selected.has(name));
   const removedPackageNames = await readRemovedPackageNames(targetDirectory, removed.flatMap(({ packages }) => packages));
+  for (const dependency of removed.flatMap(({ registryDependencies }) => registryDependencies)) {
+    removedPackageNames.add(dependency.sourceName);
+    removedPackageNames.add(dependency.name);
+  }
   await stripModuleBlocks(targetDirectory, selected);
   await pruneDatabaseArtifacts(targetDirectory, removed.flatMap(({ databaseTables, transientDatabaseTables }) => [
     ...databaseTables,
@@ -1380,7 +1394,7 @@ License 签发中心、独立签名服务、Vault、发布治理、内部任务
 
 - 架构：从 [Module Manifest 组合](./architecture/module-manifest-composition.md) 开始。
 - 平台开发：从 [系统 CRUD API](./platform/system-crud-api.md) 和 [CRUD 生成器](./development/crud-generator.md) 开始。
-${includeOfflineLicense ? "- License 消费端：[离线激活与安装协议](./license/license-offline-activation-code.md)；运行时 SDK 位于 `packages/license-sdk`。" : ""}
+${includeOfflineLicense ? "- License 消费端：[离线激活与安装协议](./license/license-offline-activation-code.md)；运行时能力由 npm 依赖 `@southwind-ai/license` 提供。" : ""}
 - 运维：[可观测性](./operations/observability.md) 与 [运维总览](./platform/operations-overview.md)。
 - 兼容：[RuoYi-Vue Adapter](./adapters/ruoyi-vue-compatibility.md)。
 `;
@@ -1443,6 +1457,14 @@ bun run dev:server
 
 ## 页面与登录
 
+全新数据库的初始平台账号为 \`admin\`。初始密码不是所有项目共用的固定值，而是
+create-windy 在本机 \`.env\` 中随机生成的 \`WINDY_BOOTSTRAP_ADMIN_PASSWORD\`；该文件已
+被 Git 忽略，请在本机直接查看，不要把密码提交到仓库或复制到文档。首次登录会要求
+立即修改密码，新密码必须为 12-128 个字符，且不能与当前密码相同。
+
+\`.env\` 只负责全新数据库的首次初始化。账号密码写入数据库后，重启不会用环境变量
+覆盖已有密码；如果已经完成首次改密，应使用修改后的密码登录。
+
 | 路径 | 访问要求 | 说明 |
 | ---- | -------- | ---- |
 | \`/login\` | 公开 | 登录成功后回到安全的站内目标，默认进入 \`/\` |
@@ -1563,7 +1585,8 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
       typecheck: [
         "bun run --cwd apps/web typecheck",
         "bun run --cwd apps/server typecheck",
-        ...selectedModules.includes("system.license") ? ["bun run --cwd packages/license-sdk typecheck"] : [],
+        "bun run --cwd packages/jobs typecheck",
+        "bun run --cwd packages/server-sdk typecheck",
         ...selectedModules.includes("system.storage") ? ["bun run --cwd packages/storage typecheck"] : [],
         "bun run --cwd packages/database typecheck",
         "bun run --cwd packages/crud-generator typecheck"
@@ -1604,8 +1627,9 @@ var templateDirectories = [
   "packages/crud-generator",
   "packages/database",
   "packages/example-work-order",
-  "packages/license-sdk",
+  "packages/jobs",
   "packages/modules",
+  "packages/server-sdk",
   "packages/shared",
   "packages/storage"
 ];
@@ -1741,6 +1765,81 @@ function isModuleVersion(value) {
   return typeof module3.name === "string" && module3.name.length > 0 && typeof module3.version === "string" && module3.version.length > 0;
 }
 
+// src/registry-dependencies.ts
+import { lstat as lstat3, readFile as readFile8, readdir as readdir3, writeFile as writeFile7 } from "node:fs/promises";
+import { basename as basename2, extname as extname2, join as join8 } from "node:path";
+var dependencySections = [
+  "dependencies",
+  "devDependencies",
+  "optionalDependencies",
+  "peerDependencies"
+];
+var replaceableExtensions = new Set([
+  ".css",
+  ".html",
+  ".js",
+  ".json",
+  ".md",
+  ".mjs",
+  ".ts",
+  ".tsx",
+  ".vue"
+]);
+async function materializeRegistryDependencies(root, dependencies) {
+  if (!dependencies.length)
+    return;
+  for (const path of await collectFiles3(root)) {
+    if (!replaceableExtensions.has(extname2(path)))
+      continue;
+    if (basename2(path) === "package.json") {
+      await rewritePackageJson(path, dependencies);
+      continue;
+    }
+    const source = await readFile8(path, "utf8");
+    const output = dependencies.reduce((value, dependency) => value.replaceAll(dependency.sourceName, dependency.name), source);
+    if (output !== source)
+      await writeFile7(path, output);
+  }
+}
+async function rewritePackageJson(path, registryDependencies) {
+  const value = JSON.parse(await readFile8(path, "utf8"));
+  let changed = false;
+  for (const section of dependencySections) {
+    const dependencies = value[section];
+    if (!dependencies)
+      continue;
+    for (const dependency of registryDependencies) {
+      if (!(dependency.sourceName in dependencies))
+        continue;
+      delete dependencies[dependency.sourceName];
+      dependencies[dependency.name] = dependency.version;
+      changed = true;
+    }
+  }
+  if (changed)
+    await writeFile7(path, `${JSON.stringify(value, null, 2)}
+`);
+}
+async function collectFiles3(root) {
+  const files = [];
+  await visit(root);
+  return files.sort();
+  async function visit(directory) {
+    for (const name of (await readdir3(directory)).sort()) {
+      if ([".git", "node_modules", "dist"].includes(name))
+        continue;
+      const path = join8(directory, name);
+      const metadata = await lstat3(path);
+      if (metadata.isSymbolicLink())
+        continue;
+      if (metadata.isDirectory())
+        await visit(path);
+      else
+        files.push(path);
+    }
+  }
+}
+
 // src/generator.ts
 async function generateProject(input) {
   validateProjectName(input.projectName);
@@ -1752,29 +1851,30 @@ async function generateProject(input) {
   const templateMetadata = await readTemplateMetadata(input.sourceRoot);
   const selectedModules = input.selectedModules ?? templateMetadata.modules.filter(({ name }) => includeExample || name !== "work-order").map(({ name }) => name);
   for (const relativePath2 of generationTemplatePaths(true, includeOxc)) {
-    await copyTree(await resolveTemplateSource(input.sourceRoot, relativePath2), join8(input.targetDirectory, relativePath2));
+    await copyTree(await resolveTemplateSource(input.sourceRoot, relativePath2), join9(input.targetDirectory, relativePath2));
   }
   await materializeSelectedModules(input.targetDirectory, selectedModules);
-  const packagePath = join8(input.targetDirectory, "package.json");
-  const packageJson = JSON.parse(await readFile8(packagePath, "utf8"));
-  await writeFile7(packagePath, `${JSON.stringify(createStarterPackage(packageJson, input.projectName, includeOxc, projectLicense, selectedModules, templateMetadata.generatorVersion), null, 2)}
+  await materializeRegistryDependencies(input.targetDirectory, selectedModuleManifests(selectedModules).flatMap(({ registryDependencies }) => registryDependencies));
+  const packagePath = join9(input.targetDirectory, "package.json");
+  const packageJson = JSON.parse(await readFile9(packagePath, "utf8"));
+  await writeFile8(packagePath, `${JSON.stringify(createStarterPackage(packageJson, input.projectName, includeOxc, projectLicense, selectedModules, templateMetadata.generatorVersion), null, 2)}
 `);
-  await writeFile7(join8(input.targetDirectory, "docker-compose.yml"), starterCompose);
-  await writeFile7(join8(input.targetDirectory, ".env.example"), environmentExample(includeExample));
-  await writeFile7(join8(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules));
-  await writeFile7(join8(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license")));
+  await writeFile8(join9(input.targetDirectory, "docker-compose.yml"), starterCompose);
+  await writeFile8(join9(input.targetDirectory, ".env.example"), environmentExample(includeExample));
+  await writeFile8(join9(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules));
+  await writeFile8(join9(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license")));
   await reflectCodeQualityChoice(input.targetDirectory, includeOxc);
   await applyWindyBaseLicense(input.targetDirectory);
   await applyProjectLicense(input.targetDirectory, projectLicense, input.licenseHolder);
   await prepareCustomerDockerfiles(input.targetDirectory);
   await writeGenerationProvenance(input.targetDirectory, templateMetadata, input.profile ?? starterProfile.key, selectedModules, includeOxc, projectLicense);
-  await rm3(join8(input.targetDirectory, "bun.lock"), { force: true });
+  await rm3(join9(input.targetDirectory, "bun.lock"), { force: true });
   await writeManagedFilesManifest(input.targetDirectory, templateMetadata.generatorVersion);
 }
 async function resolveTemplateSource(sourceRoot, relativePath2) {
-  const source = join8(sourceRoot, relativePath2);
+  const source = join9(sourceRoot, relativePath2);
   try {
-    await lstat3(source);
+    await lstat4(source);
     return source;
   } catch (error) {
     if (!isMissing2(error))
@@ -1783,13 +1883,13 @@ async function resolveTemplateSource(sourceRoot, relativePath2) {
   const alias = npmTemplateAliases[relativePath2];
   if (!alias)
     return source;
-  return join8(sourceRoot, alias);
+  return join9(sourceRoot, alias);
 }
 async function assertGeneratedProjectIsClean(targetDirectory) {
   const violations = [];
   await walk(targetDirectory, async (path) => {
-    const name = basename2(path);
-    const extension = extname2(name).toLowerCase();
+    const name = basename3(path);
+    const extension = extname3(name).toLowerCase();
     if (excludedNames.has(name) || excludedRuntimeFiles.has(name) || [".key", ".pem", ".p12", ".pfx"].includes(extension)) {
       violations.push(path.slice(targetDirectory.length + 1));
     }
@@ -1808,7 +1908,7 @@ function validateProjectName(projectName) {
 }
 async function assertTargetAvailable(targetDirectory) {
   try {
-    const entries = await readdir3(targetDirectory);
+    const entries = await readdir4(targetDirectory);
     if (entries.length)
       throw new Error("目标目录不是空目录");
   } catch (error) {
@@ -1818,28 +1918,28 @@ async function assertTargetAvailable(targetDirectory) {
   }
 }
 async function copyTree(source, target) {
-  const metadata = await lstat3(source);
-  const name = basename2(source);
+  const metadata = await lstat4(source);
+  const name = basename3(source);
   if (shouldExclude(name) || metadata.isSymbolicLink())
     return;
   if (metadata.isDirectory()) {
     await mkdir3(target, { recursive: true });
-    for (const child of await readdir3(source)) {
-      await copyTree(join8(source, child), join8(target, child));
+    for (const child of await readdir4(source)) {
+      await copyTree(join9(source, child), join9(target, child));
     }
     return;
   }
-  await mkdir3(join8(target, ".."), { recursive: true });
+  await mkdir3(join9(target, ".."), { recursive: true });
   await copyFile(source, target);
 }
 function shouldExclude(name) {
   return excludedNames.has(name) || excludedRuntimeFiles.has(name);
 }
 async function walk(directory, visit) {
-  for (const name of await readdir3(directory)) {
-    const path = join8(directory, name);
+  for (const name of await readdir4(directory)) {
+    const path = join9(directory, name);
     await visit(path);
-    if ((await lstat3(path)).isDirectory())
+    if ((await lstat4(path)).isDirectory())
       await walk(path, visit);
   }
 }
@@ -1907,6 +2007,8 @@ async function createProject(options, dependencies = {}) {
   log(`运行时：Bun ${bunVersion}`);
   log(options.initializeGit ? gitInitialized ? "Git：已创建 main 分支和首次提交" : "Git：项目已保留，请按上述提示完成初始化" : "Git：已按 --no-git 跳过");
   log(localEnvironment === "created" ? "本地 .env：已生成随机开发密码（权限 0600）" : "本地 .env：已存在，未覆盖");
+  log("初始平台账号：admin");
+  log("初始平台密码：查看 .env 中的 WINDY_BOOTSTRAP_ADMIN_PASSWORD（首次登录后必须修改）");
   log("下一步（启动数据库、迁移、后端与前端）：");
   log(`  cd ${options.projectName}`);
   log("  bun run dev");
@@ -1914,7 +2016,7 @@ async function createProject(options, dependencies = {}) {
 }
 async function inspectTarget(path) {
   try {
-    return (await readdir4(path)).length === 0 ? "empty" : "non-empty";
+    return (await readdir5(path)).length === 0 ? "empty" : "non-empty";
   } catch (error) {
     if (isMissing3(error))
       return "missing";
@@ -3686,8 +3788,8 @@ import { rm as rm8 } from "node:fs/promises";
 import { resolve as resolve4 } from "node:path";
 
 // src/update/doctor.ts
-import { readFile as readFile10 } from "node:fs/promises";
-import { join as join10 } from "node:path";
+import { readFile as readFile11 } from "node:fs/promises";
+import { join as join11 } from "node:path";
 
 // src/update/process.ts
 import { spawn as spawn3 } from "node:child_process";
@@ -3719,11 +3821,11 @@ import {
   access as access2,
   copyFile as copyFile2,
   mkdir as mkdir5,
-  readFile as readFile9,
+  readFile as readFile10,
   rm as rm5,
-  writeFile as writeFile8
+  writeFile as writeFile9
 } from "node:fs/promises";
-import { dirname as dirname3, join as join9 } from "node:path";
+import { dirname as dirname3, join as join10 } from "node:path";
 var updateStatePath = ".windy/update-state.json";
 async function applyTransaction(plan) {
   if (plan.conflicts.length) {
@@ -3732,7 +3834,7 @@ async function applyTransaction(plan) {
   const changed = plan.files.filter(({ action }) => action === "create" || action === "update" || action === "delete");
   for (const file of changed)
     assertSafePath(file.path);
-  const backupDirectory = join9(plan.projectDirectory, ".windy/backups", plan.id);
+  const backupDirectory = join10(plan.projectDirectory, ".windy/backups", plan.id);
   const protectedPaths = new Set([
     ...changed.map(({ path: path2 }) => path2),
     ".windy/generation.json",
@@ -3741,12 +3843,12 @@ async function applyTransaction(plan) {
   ]);
   const backupEntries = [];
   for (const path2 of protectedPaths) {
-    const source = join9(plan.projectDirectory, path2);
+    const source = join10(plan.projectDirectory, path2);
     const existed = await exists(source);
     backupEntries.push({ path: path2, existed });
     if (!existed)
       continue;
-    const target = join9(backupDirectory, "files", path2);
+    const target = join10(backupDirectory, "files", path2);
     await mkdir5(dirname3(target), { recursive: true });
     await copyFile2(source, target);
   }
@@ -3759,7 +3861,7 @@ async function applyTransaction(plan) {
   await writeState(plan.projectDirectory, state);
   try {
     for (const file of changed) {
-      const target = join9(plan.projectDirectory, file.path);
+      const target = join10(plan.projectDirectory, file.path);
       if (file.action === "delete") {
         await rm5(target, { force: true });
         continue;
@@ -3767,7 +3869,7 @@ async function applyTransaction(plan) {
       if (!file.content)
         throw new Error(`更新计划缺少文件内容：${file.path}`);
       await mkdir5(dirname3(target), { recursive: true });
-      await writeFile8(target, file.content);
+      await writeFile9(target, file.content);
     }
   } catch (error) {
     await restoreUpdateState(plan.projectDirectory, state);
@@ -3782,7 +3884,7 @@ async function applyTransaction(plan) {
 }
 async function readUpdateState(projectDirectory) {
   try {
-    const parsed = JSON.parse(await readFile9(join9(projectDirectory, updateStatePath), "utf8"));
+    const parsed = JSON.parse(await readFile10(join10(projectDirectory, updateStatePath), "utf8"));
     if (!isUpdateState(parsed))
       throw new Error("更新恢复状态无效，请人工检查 .windy 目录");
     return parsed;
@@ -3795,25 +3897,25 @@ async function readUpdateState(projectDirectory) {
 async function restoreUpdateState(projectDirectory, state) {
   for (const entry of state.entries) {
     assertSafePath(entry.path);
-    const target = join9(projectDirectory, entry.path);
+    const target = join10(projectDirectory, entry.path);
     if (!entry.existed) {
       await rm5(target, { force: true });
       continue;
     }
-    const backup = join9(state.backupDirectory, "files", entry.path);
+    const backup = join10(state.backupDirectory, "files", entry.path);
     await mkdir5(dirname3(target), { recursive: true });
     await copyFile2(backup, target);
   }
-  await rm5(join9(projectDirectory, updateStatePath), { force: true });
+  await rm5(join10(projectDirectory, updateStatePath), { force: true });
   await rm5(state.backupDirectory, { recursive: true, force: true });
 }
 async function clearUpdateState(projectDirectory) {
-  await rm5(join9(projectDirectory, updateStatePath), { force: true });
+  await rm5(join10(projectDirectory, updateStatePath), { force: true });
 }
 async function writeState(projectDirectory, state) {
-  const path2 = join9(projectDirectory, updateStatePath);
+  const path2 = join10(projectDirectory, updateStatePath);
   await mkdir5(dirname3(path2), { recursive: true });
-  await writeFile8(path2, `${JSON.stringify(state, null, 2)}
+  await writeFile9(path2, `${JSON.stringify(state, null, 2)}
 `);
 }
 async function exists(path2) {
@@ -3861,7 +3963,7 @@ async function diagnoseProject(projectDirectory, repair = false) {
     if (file.ownership === "project-owned")
       continue;
     try {
-      const changed = hashContent(await readFile10(join10(projectDirectory, file.path))) !== file.hash;
+      const changed = hashContent(await readFile11(join11(projectDirectory, file.path))) !== file.hash;
       if (!changed)
         continue;
       modifiedManagedFiles.push(file.path);
@@ -3897,7 +3999,9 @@ var recipes = [
   { id: "starter-0.2.2-to-0.2.3", from: "0.2.2", to: "0.2.3" },
   { id: "starter-0.2.3-to-0.2.4", from: "0.2.3", to: "0.2.4" },
   { id: "starter-0.2.4-to-0.2.5", from: "0.2.4", to: "0.2.5" },
-  { id: "starter-0.2.5-to-0.2.6", from: "0.2.5", to: "0.2.6" }
+  { id: "starter-0.2.5-to-0.2.6", from: "0.2.5", to: "0.2.6" },
+  { id: "starter-0.2.6-to-0.2.7", from: "0.2.6", to: "0.2.7" },
+  { id: "starter-0.2.7-to-0.2.8", from: "0.2.7", to: "0.2.8" }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
   if (sourceVersion === targetVersion)
@@ -3922,19 +4026,19 @@ function resolveRecipeChain(sourceVersion, targetVersion) {
 }
 
 // src/update/updater.ts
-import { mkdir as mkdir7, readFile as readFile13, rm as rm7, writeFile as writeFile10 } from "node:fs/promises";
-import { dirname as dirname4, join as join14 } from "node:path";
+import { mkdir as mkdir7, readFile as readFile14, rm as rm7, writeFile as writeFile11 } from "node:fs/promises";
+import { dirname as dirname4, join as join15 } from "node:path";
 
 // src/update/artifacts.ts
-import { mkdir as mkdir6, mkdtemp, readFile as readFile11 } from "node:fs/promises";
+import { mkdir as mkdir6, mkdtemp, readFile as readFile12 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { basename as basename3, join as join11 } from "node:path";
+import { basename as basename4, join as join12 } from "node:path";
 class PublishedArtifactProvider {
   async prepare(projectDirectory, provenance) {
-    const temporaryRoot = await mkdtemp(join11(tmpdir(), "windy-update-"));
+    const temporaryRoot = await mkdtemp(join12(tmpdir(), "windy-update-"));
     const projectName = await readProjectName2(projectDirectory);
-    const baseDirectory = join11(temporaryRoot, "base", projectName);
-    const targetDirectory = join11(temporaryRoot, "target", projectName);
+    const baseDirectory = join12(temporaryRoot, "base", projectName);
+    const targetDirectory = join12(temporaryRoot, "target", projectName);
     await generatePublishedBase(temporaryRoot, projectName, provenance, baseDirectory);
     await generateProject({
       sourceRoot: await resolveTemplateRoot(),
@@ -3950,7 +4054,7 @@ class PublishedArtifactProvider {
   }
 }
 async function generatePublishedBase(temporaryRoot, projectName, provenance, expectedDirectory) {
-  const parent = join11(temporaryRoot, "base");
+  const parent = join12(temporaryRoot, "base");
   await mkdir6(parent, { recursive: true });
   const args = [
     "--bun",
@@ -3974,33 +4078,33 @@ async function generatePublishedBase(temporaryRoot, projectName, provenance, exp
     }
   }
   await assertProcess("bunx", args, parent);
-  if (join11(parent, projectName) !== expectedDirectory) {
+  if (join12(parent, projectName) !== expectedDirectory) {
     throw new Error("历史 artifact 生成目录异常");
   }
 }
 async function readProjectName2(projectDirectory) {
-  const source = JSON.parse(await readFile11(join11(projectDirectory, "package.json"), "utf8"));
-  return source.name || basename3(projectDirectory);
+  const source = JSON.parse(await readFile12(join12(projectDirectory, "package.json"), "utf8"));
+  return source.name || basename4(projectDirectory);
 }
 
 // src/update/planner.ts
-import { access as access3, readFile as readFile12 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { access as access3, readFile as readFile13 } from "node:fs/promises";
+import { join as join14 } from "node:path";
 
 // src/update/merge.ts
-import { mkdtemp as mkdtemp2, rm as rm6, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdtemp as mkdtemp2, rm as rm6, writeFile as writeFile10 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 async function mergeTextFile(base, ours, theirs) {
-  const root = await mkdtemp2(join12(tmpdir2(), "windy-merge-"));
+  const root = await mkdtemp2(join13(tmpdir2(), "windy-merge-"));
   try {
-    const oursPath = join12(root, "ours");
-    const basePath = join12(root, "base");
-    const theirsPath = join12(root, "theirs");
+    const oursPath = join13(root, "ours");
+    const basePath = join13(root, "base");
+    const theirsPath = join13(root, "theirs");
     await Promise.all([
-      writeFile9(oursPath, ours),
-      writeFile9(basePath, base),
-      writeFile9(theirsPath, theirs)
+      writeFile10(oursPath, ours),
+      writeFile10(basePath, base),
+      writeFile10(theirsPath, theirs)
     ]);
     const result = await captureProcess("git", ["merge-file", "-p", "--diff3", oursPath, basePath, theirsPath], root);
     if (result.code === 0) {
@@ -4118,9 +4222,9 @@ async function createUpdatePlan(request, artifacts) {
 }
 async function planFile(path2, project, baseRoot, targetRoot, source, target) {
   const [ours, base, theirs] = await Promise.all([
-    readOptional(join13(project, path2)),
-    readOptional(join13(baseRoot, path2)),
-    readOptional(join13(targetRoot, path2))
+    readOptional(join14(project, path2)),
+    readOptional(join14(baseRoot, path2)),
+    readOptional(join14(targetRoot, path2))
   ]);
   const ownership = target?.ownership || source?.ownership || classifyOwnership(path2);
   if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
@@ -4188,7 +4292,7 @@ function conflict(path2, ownership, reason) {
 }
 async function readOptional(path2) {
   try {
-    return await readFile12(path2);
+    return await readFile13(path2);
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT")
       return;
@@ -4204,7 +4308,7 @@ async function assertGitClean(projectDirectory) {
 }
 async function assertNoPendingUpdate(projectDirectory) {
   try {
-    await access3(join13(projectDirectory, ".windy/update-state.json"));
+    await access3(join14(projectDirectory, ".windy/update-state.json"));
     throw new Error("检测到未完成更新，请先运行 bun run windy doctor --repair");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT")
@@ -4240,7 +4344,7 @@ class DefaultStarterUpdater {
     try {
       await this.#execute("bun", ["install", "--force"], result.plan.projectDirectory);
       steps.push({ name: "bun install --force", status: "passed" });
-      const packageJson = JSON.parse(await readFile13(join14(result.plan.projectDirectory, "package.json"), "utf8"));
+      const packageJson = JSON.parse(await readFile14(join15(result.plan.projectDirectory, "package.json"), "utf8"));
       for (const name of ["lint", "typecheck", "test", "build"]) {
         if (!packageJson.scripts?.[name]) {
           steps.push({ name: `bun run ${name}`, status: "skipped" });
@@ -4269,13 +4373,13 @@ class DefaultStarterUpdater {
 }
 async function finalize(result) {
   const root = result.plan.projectDirectory;
-  await writeFile10(join14(root, ".windy/generation.json"), `${JSON.stringify(result.plan.targetProvenance, null, 2)}
+  await writeFile11(join15(root, ".windy/generation.json"), `${JSON.stringify(result.plan.targetProvenance, null, 2)}
 `);
-  await writeFile10(join14(root, ".windy/files.json"), `${JSON.stringify(result.plan.targetManifest, null, 2)}
+  await writeFile11(join15(root, ".windy/files.json"), `${JSON.stringify(result.plan.targetManifest, null, 2)}
 `);
 }
 async function writeReport(result, steps, relativePath2) {
-  const path2 = join14(result.plan.projectDirectory, relativePath2);
+  const path2 = join15(result.plan.projectDirectory, relativePath2);
   await mkdir7(dirname4(path2), { recursive: true });
   const lines = [
     `# Windy 更新报告 ${result.plan.id}`,
@@ -4293,7 +4397,7 @@ async function writeReport(result, steps, relativePath2) {
     `备份保留在 \`.windy/backups/${result.plan.id}\`，确认稳定后可人工删除。`,
     ""
   ];
-  await writeFile10(path2, lines.join(`
+  await writeFile11(path2, lines.join(`
 `));
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {