create-windy 0.2.6 → 0.2.8

package/template/packages/modules/src/manifest.ts

@@ -1,23 +1,17 @@
 import type {
   ApiPermissionBinding,
+  AuditActionRegistration,
   AuditActionType,
   DataGovernancePolicyDefinition,
   FeatureFlagDefinition,
-  MigrationExecutionContext,
+  MigrationBundle,
+  MigrationDefinition,
   MenuNode,
   PermissionDefinition,
   SearchProviderManifestDefinition,
-} from "@windy/shared";
+} from "@southwind-ai/shared";
 
-export type MigrationDirection = "up" | "down";
-
-export interface MigrationDefinition {
-  id: string;
-  module: string;
-  description: string;
-  direction: MigrationDirection;
-  run(context: MigrationExecutionContext): Promise<void>;
-}
+export type { MigrationDefinition, MigrationDirection } from "@southwind-ai/shared";
 
 export interface ModuleToolDefinition {
   key: string;
@@ -77,12 +71,13 @@ export interface ModuleManifest {
   apiPermissions: ApiPermissionBinding[];
   features: FeatureFlagDefinition[];
   migrations: MigrationDefinition[];
+  migrationBundle?: MigrationBundle;
   schemaExports: ModuleSchemaExportDefinition[];
   tasks: ModuleScheduledTaskDefinition[];
   tools: ModuleToolDefinition[];
   providers: Array<ModuleProviderDefinition | SearchProviderManifestDefinition>;
   dataPolicies?: DataGovernancePolicyDefinition[];
-  auditActions: AuditActionType[];
+  auditActions: AuditActionRegistration[];
   metadata?: Record<string, unknown>;
 }
 

package/template/packages/modules/src/menu-composition.ts

@@ -1,4 +1,4 @@
-import type { MenuNode } from "@windy/shared";
+import type { MenuNode } from "@southwind-ai/shared";
 import type { ModuleManifest } from "./manifest.js";
 
 export function composeModuleMenus(

package/template/packages/modules/src/system-api-binding.ts

@@ -1,4 +1,4 @@
-import type { ApiPermissionBinding, HttpMethod } from "@windy/shared";
+import type { ApiPermissionBinding, HttpMethod } from "@southwind-ai/shared";
 
 interface ResourceBindingInput {
   path: string;

package/template/packages/modules/src/system-api-data-governance.ts

@@ -1,4 +1,4 @@
-import type { ApiPermissionBinding } from "@windy/shared";
+import type { ApiPermissionBinding } from "@southwind-ai/shared";
 import { binding } from "./system-api-binding.js";
 import { governedUserExportBindings } from "./system-governed-export-bindings.js";
 

package/template/packages/modules/src/system-api-permissions.ts

@@ -1,4 +1,4 @@
-import type { ApiPermissionBinding } from "@windy/shared";
+import type { ApiPermissionBinding } from "@southwind-ai/shared";
 import { binding, resourceBindings } from "./system-api-binding.js";
 // @windy-module system.data-governance begin
 import { dataGovernanceApiPermissionBindings } from "./system-api-data-governance.js";

package/template/packages/modules/src/system-data-governance.ts

@@ -1,4 +1,4 @@
-import { featureKey, type DataGovernancePolicyDefinition } from "@windy/shared";
+import { featureKey, type DataGovernancePolicyDefinition } from "@southwind-ai/shared";
 
 export const systemDataPolicies: DataGovernancePolicyDefinition[] = [
   {

package/template/packages/modules/src/system-features.ts

@@ -1,4 +1,4 @@
-import { featureKey, licenseVersionKey } from "@windy/shared";
+import { featureKey, licenseVersionKey } from "@southwind-ai/shared";
 import type { ModuleManifest } from "./manifest.js";
 
 // @windy-module system.scheduler begin

package/template/packages/modules/src/system-governed-export-bindings.ts

@@ -1,4 +1,4 @@
-import type { ApiPermissionBinding } from "@windy/shared";
+import type { ApiPermissionBinding } from "@southwind-ai/shared";
 import { binding } from "./system-api-binding.js";
 
 export function governedUserExportBindings(): ApiPermissionBinding[] {

package/template/packages/modules/src/system-module-catalog.ts

@@ -1,4 +1,4 @@
-import type { MenuNode } from "@windy/shared";
+import type { MenuNode } from "@southwind-ai/shared";
 import type { ModuleFactory, ModuleManifest } from "./manifest.js";
 import { systemFoundationModule } from "./system-modules.js";
 

package/template/packages/server-sdk/index.ts

@@ -0,0 +1,5 @@
+export type {
+  ModuleHost,
+  ModuleInitializer,
+  ModuleUploadPolicy,
+} from "./src/module-host.js";

package/template/packages/server-sdk/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@southwind-ai/server-sdk",
+  "version": "0.1.1",
+  "license": "UNLICENSED",
+  "type": "module",
+  "engines": {
+    "bun": ">=1.3.0"
+  },
+  "files": [
+    "index.ts",
+    "src/module-host.ts"
+  ],
+  "scripts": {
+    "typecheck": "tsc --noEmit --project tsconfig.json"
+  },
+  "dependencies": {
+    "@southwind-ai/jobs": "workspace:*"
+  },
+  "exports": {
+    ".": "./index.ts"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/template/packages/server-sdk/src/module-host.ts

@@ -0,0 +1,29 @@
+import type { DurableHandlerDefinition } from "@southwind-ai/jobs";
+
+export interface ModuleUploadPolicy {
+  purpose: string;
+  maxByteSize: number;
+  maxPartByteSize: number;
+  sessionTtlMs: number;
+  allowedTypes: Readonly<Record<string, readonly string[]>>;
+  signature?: "image" | "none";
+}
+
+/**
+ * 模块作用域 Host。注册的任务 Key 与上传用途必须使用初始化器模块名作为命名空间。
+ */
+export interface ModuleHost {
+  readonly moduleName: string;
+  registerUploadPolicy(policy: ModuleUploadPolicy): void;
+  registerDurableHandler<T>(definition: DurableHandlerDefinition<T>): void;
+}
+
+/**
+ * 已安装模块的 Server 初始化入口。
+ *
+ * 初始化器在 Storage 与 Durable Job 运行时创建前顺序执行；这里只注册定义，不启动 Worker。
+ */
+export interface ModuleInitializer {
+  readonly moduleName: string;
+  initialize(host: ModuleHost): Promise<void> | void;
+}

package/template/packages/server-sdk/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "esnext",
+    "module": "esnext",
+    "lib": ["esnext", "dom"],
+    "moduleResolution": "bundler",
+    "strict": true,
+    "noImplicitAny": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "outDir": "dist",
+    "types": ["bun"]
+  },
+  "include": ["src/**/*", "index.ts"],
+  "exclude": ["node_modules", "dist"]
+}

package/template/packages/shared/index.ts

@@ -3,9 +3,12 @@ export * from "./src/database.js";
 export * from "./src/data-governance.js";
 export * from "./src/feature.js";
 export * from "./src/license.js";
+export * from "./src/license-catalog.js";
+export * from "./src/migration.js";
 export * from "./src/module-configuration.js";
 export * from "./src/correlation.js";
 export * from "./src/notification.js";
+export * from "./src/password.js";
 export * from "./src/platform-settings.js";
 export * from "./src/profile.js";
 export * from "./src/primitives.js";

package/template/packages/shared/package.json

@@ -1,9 +1,20 @@
 {
-  "name": "@windy/shared",
-  "version": "0.1.0",
-  "private": true,
+  "name": "@southwind-ai/shared",
+  "version": "0.1.1",
+  "license": "UNLICENSED",
   "type": "module",
+  "engines": {
+    "bun": ">=1.3.0"
+  },
+  "files": [
+    "index.ts",
+    "src/**/*.ts",
+    "!src/**/*.test.ts"
+  ],
   "exports": {
     ".": "./index.ts"
+  },
+  "publishConfig": {
+    "access": "public"
   }
 }

package/template/packages/shared/src/audit.ts

@@ -1,5 +1,11 @@
 import type { EntityId, ISODateTime } from "./primitives.js";
 
+export interface AuditActionDefinition {
+  key: AuditActionType;
+  label: string;
+  description: string;
+}
+
 export const AUDIT_ACTION_DEFINITIONS = [
   { key: "auth.login", label: "账号登录", description: "用户登录平台。" },
   { key: "auth.logout", label: "账号退出", description: "用户退出平台。" },
@@ -200,7 +206,22 @@ export const AUDIT_ACTION_DEFINITIONS = [
   },
 ] as const;
 
-export type AuditActionType = (typeof AUDIT_ACTION_DEFINITIONS)[number]["key"];
+export type BuiltInAuditActionType =
+  (typeof AUDIT_ACTION_DEFINITIONS)[number]["key"];
+
+/**
+ * 审计日志持久化保持字符串协议；业务动作是否有效由 Module Composition
+ * 对 AuditActionDefinition 目录进行 fail-fast 校验。
+ */
+export type AuditActionType = BuiltInAuditActionType | (string & {});
+
+export type AuditActionRegistration = AuditActionType | AuditActionDefinition;
+
+export function isAuditActionDefinition(
+  registration: AuditActionRegistration,
+): registration is AuditActionDefinition {
+  return typeof registration !== "string";
+}
 
 export type AuditOutcome = "attempted" | "success" | "failure" | "denied";
 

package/template/packages/shared/src/license-catalog.test.ts

@@ -0,0 +1,17 @@
+import { describe, expect, test } from "bun:test";
+import { LICENSE_CATALOG } from "./license-catalog.js";
+
+describe("License Catalog", () => {
+  test("提供稳定且有序的默认产品版本", () => {
+    expect(LICENSE_CATALOG.map(({ key }) => key)).toEqual([
+      "free-trial",
+      "standard",
+      "advanced",
+    ]);
+    expect(
+      LICENSE_CATALOG.every(
+        ({ label, description }) => label.length > 0 && description.length > 0,
+      ),
+    ).toBe(true);
+  });
+});

package/template/packages/shared/src/license-catalog.ts

@@ -0,0 +1,33 @@
+import { licenseVersionKey, type LicenseVersionKey } from "./license.js";
+
+export interface LicenseCatalogDefinition {
+  key: LicenseVersionKey;
+  label: string;
+  description: string;
+  order: number;
+}
+
+export const LICENSE_CATALOG = [
+  {
+    key: licenseVersionKey("free-trial"),
+    label: "免费试用版",
+    description: "用于产品体验和非生产验证的基础版本。",
+    order: 10,
+  },
+  {
+    key: licenseVersionKey("standard"),
+    label: "标准版",
+    description: "面向常规企业业务场景的标准能力版本。",
+    order: 20,
+  },
+  {
+    key: licenseVersionKey("advanced"),
+    label: "高级版",
+    description: "包含高级治理、自动化和大批量处理能力。",
+    order: 30,
+  },
+] as const satisfies readonly LicenseCatalogDefinition[];
+
+export function licenseCatalogKeys(): ReadonlySet<LicenseVersionKey> {
+  return new Set(LICENSE_CATALOG.map(({ key }) => key));
+}

package/template/packages/shared/src/migration.ts

@@ -0,0 +1,39 @@
+import type { MigrationExecutionContext } from "./database.js";
+
+export const MIGRATION_BUNDLE_FORMAT_VERSION = "1" as const;
+
+export type MigrationDirection = "up" | "down";
+
+export interface MigrationDefinition {
+  id: string;
+  module: string;
+  description: string;
+  direction: MigrationDirection;
+  checksum?: string;
+  dependsOn?: readonly string[];
+  run(context: MigrationExecutionContext): Promise<void>;
+}
+
+export interface BundleMigrationDefinition extends MigrationDefinition {
+  checksum: string;
+}
+
+export interface MigrationBundle {
+  formatVersion: typeof MIGRATION_BUNDLE_FORMAT_VERSION;
+  module: string;
+  version: string;
+  dependencies?: readonly string[];
+  migrations: readonly BundleMigrationDefinition[];
+}
+
+export interface MigrationManifestSource {
+  name: string;
+  version: string;
+  dependencies?: readonly string[];
+  migrations: readonly MigrationDefinition[];
+  schemaExports?: readonly {
+    key: string;
+    migrationIds: readonly string[];
+  }[];
+  migrationBundle?: MigrationBundle;
+}

package/template/packages/shared/src/password.ts

@@ -0,0 +1,4 @@
+export const PASSWORD_POLICY = {
+  minLength: 12,
+  maxLength: 128,
+} as const;

package/template/packages/storage/package.json

@@ -1,12 +1,23 @@
 {
-  "name": "@windy/storage",
-  "version": "0.1.0",
-  "private": true,
+  "name": "@southwind-ai/storage",
+  "version": "0.1.1",
+  "license": "UNLICENSED",
   "type": "module",
+  "engines": {
+    "bun": ">=1.3.0"
+  },
+  "files": [
+    "index.ts",
+    "src/**/*.ts",
+    "!src/**/*.test.ts"
+  ],
   "scripts": {
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "exports": {
     ".": "./index.ts"
+  },
+  "publishConfig": {
+    "access": "public"
   }
 }

package/template/packages/license-sdk/index.ts

@@ -1,13 +0,0 @@
-export * from "./src/canonical-json.js";
-export * from "./src/client.js";
-export * from "./src/device.js";
-export * from "./src/file-storage.js";
-export * from "./src/installation.js";
-export * from "./src/offline-code.js";
-export * from "./src/offline-code-limits.js";
-export * from "./src/bounded-json-body.js";
-export * from "./src/payload.js";
-export * from "./src/storage.js";
-export * from "./src/v1-test-vector.js";
-export * from "./src/validation.js";
-export * from "./src/verification.js";

package/template/packages/license-sdk/package.json

@@ -1,18 +0,0 @@
-{
-  "name": "@windy/license-sdk",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "typecheck": "tsc --noEmit --project tsconfig.json"
-  },
-  "dependencies": {
-    "@windy/shared": "workspace:*",
-    "fflate": "^0.8.3"
-  },
-  "exports": {
-    ".": "./index.ts",
-    "./offline-code": "./src/offline-code.ts",
-    "./bounded-json-body": "./src/bounded-json-body.ts"
-  }
-}

package/template/packages/license-sdk/src/bounded-json-body.test.ts

@@ -1,65 +0,0 @@
-import { expect, test } from "bun:test";
-import {
-  BoundedJsonBodyError,
-  readBoundedJsonObject,
-} from "./bounded-json-body.js";
-import { OFFLINE_ACTIVATION_CODE_LIMITS } from "./offline-code-limits.js";
-
-test("Content-Length 超限时在读取请求流前稳定拒绝", async () => {
-  const request = new Request("http://localhost/api/license/runtime/install", {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      "content-length": String(OFFLINE_ACTIVATION_CODE_LIMITS.requestBytes + 1),
-    },
-    body: "{}",
-  });
-
-  await expect(readBoundedJsonObject(request)).rejects.toMatchObject({
-    code: "body-too-large",
-    status: 413,
-    message: "请求体过大，离线激活请求最多允许 64 KiB",
-  } satisfies Partial<BoundedJsonBodyError>);
-});
-
-test("拒绝与实际请求体不一致的 Content-Length", async () => {
-  const request = new Request("http://localhost/api/license/runtime/install", {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      "content-length": "1",
-    },
-    body: "{}",
-  });
-
-  await expect(readBoundedJsonObject(request)).rejects.toMatchObject({
-    code: "invalid-content-length",
-    status: 400,
-    message: "请求体长度与 Content-Length 不一致",
-  } satisfies Partial<BoundedJsonBodyError>);
-});
-
-test("无 Content-Length 的分块请求超过上限时停止读取", async () => {
-  const chunk = new Uint8Array(40 * 1024).fill(65);
-  let cancelled = false;
-  const body = new ReadableStream<Uint8Array>({
-    start(controller) {
-      controller.enqueue(chunk);
-      controller.enqueue(chunk);
-    },
-    cancel() {
-      cancelled = true;
-    },
-  });
-  const request = new Request("http://localhost/api/license/runtime/install", {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body,
-  });
-
-  await expect(readBoundedJsonObject(request)).rejects.toMatchObject({
-    code: "body-too-large",
-    status: 413,
-  } satisfies Partial<BoundedJsonBodyError>);
-  expect(cancelled).toBe(true);
-});

package/template/packages/license-sdk/src/bounded-json-body.ts

@@ -1,135 +0,0 @@
-import { OFFLINE_ACTIVATION_CODE_LIMITS } from "./offline-code-limits.js";
-
-export type BoundedJsonBodyErrorCode =
-  | "body-too-large"
-  | "invalid-content-length"
-  | "invalid-json"
-  | "invalid-object";
-
-export class BoundedJsonBodyError extends Error {
-  constructor(
-    readonly code: BoundedJsonBodyErrorCode,
-    message: string,
-    readonly status: 400 | 413,
-  ) {
-    super(message);
-    this.name = "BoundedJsonBodyError";
-  }
-}
-
-export async function readBoundedJsonObject(
-  request: Request,
-  maximumBytes = OFFLINE_ACTIVATION_CODE_LIMITS.requestBytes,
-): Promise<Record<string, unknown>> {
-  const declaredLength = parseContentLength(
-    request.headers.get("content-length"),
-  );
-  if (declaredLength !== undefined && declaredLength > maximumBytes) {
-    throw bodyTooLarge();
-  }
-
-  const bytes = await readBoundedBytes(request, maximumBytes);
-  if (declaredLength !== undefined && declaredLength !== bytes.byteLength) {
-    throw new BoundedJsonBodyError(
-      "invalid-content-length",
-      "请求体长度与 Content-Length 不一致",
-      400,
-    );
-  }
-
-  let value: unknown;
-  try {
-    const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-    value = JSON.parse(text);
-  } catch {
-    throw new BoundedJsonBodyError(
-      "invalid-json",
-      "请求体必须是有效的 JSON",
-      400,
-    );
-  }
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new BoundedJsonBodyError(
-      "invalid-object",
-      "请求体必须是 JSON 对象",
-      400,
-    );
-  }
-  return value as Record<string, unknown>;
-}
-
-export function boundedJsonBodyErrorResponse(
-  error: unknown,
-): Response | undefined {
-  if (!(error instanceof BoundedJsonBodyError)) return undefined;
-  return Response.json(
-    {
-      error:
-        error.code === "body-too-large"
-          ? "LICENSE_REQUEST_BODY_TOO_LARGE"
-          : "LICENSE_REQUEST_BODY_INVALID",
-      reason: error.message,
-    },
-    { status: error.status },
-  );
-}
-
-function parseContentLength(value: string | null): number | undefined {
-  if (value === null) return undefined;
-  if (!/^(0|[1-9]\d*)$/.test(value)) {
-    throw new BoundedJsonBodyError(
-      "invalid-content-length",
-      "Content-Length 必须是有效的非负整数",
-      400,
-    );
-  }
-  const parsed = Number(value);
-  if (!Number.isSafeInteger(parsed)) {
-    throw new BoundedJsonBodyError(
-      "invalid-content-length",
-      "Content-Length 超出安全范围",
-      400,
-    );
-  }
-  return parsed;
-}
-
-async function readBoundedBytes(
-  request: Request,
-  maximumBytes: number,
-): Promise<Uint8Array> {
-  if (!request.body) return new Uint8Array();
-  const reader = request.body.getReader();
-  const chunks: Uint8Array[] = [];
-  let total = 0;
-  try {
-    while (true) {
-      const { value, done } = await reader.read();
-      if (done) break;
-      if (value.byteLength > maximumBytes - total) {
-        await reader.cancel();
-        throw bodyTooLarge();
-      }
-      chunks.push(value);
-      total += value.byteLength;
-    }
-  } finally {
-    reader.releaseLock();
-  }
-
-  const joined = new Uint8Array(total);
-  let offset = 0;
-  for (const chunk of chunks) {
-    joined.set(chunk, offset);
-    offset += chunk.byteLength;
-  }
-  return joined;
-}
-
-function bodyTooLarge(): BoundedJsonBodyError {
-  return new BoundedJsonBodyError(
-    "body-too-large",
-    "请求体过大，离线激活请求最多允许 64 KiB",
-    413,
-  );
-}

package/template/packages/license-sdk/src/canonical-json.test.ts

@@ -1,28 +0,0 @@
-import { describe, expect, test } from "bun:test";
-import { CanonicalJsonError, canonicalizeJson } from "./canonical-json.js";
-
-describe("RFC 8785 canonical JSON", () => {
-  test("按 UTF-16 key 排序并使用 ECMAScript primitive 序列化", () => {
-    expect(
-      canonicalizeJson({
-        numbers: [Number("333333333.33333329"), 1e30, 4.5, 0.002, 1e-27],
-        string: '€$\u000f\nA\'B"\\"/',
-        literals: [null, true, false],
-      }),
-    ).toBe(
-      '{"literals":[null,true,false],"numbers":[333333333.3333333,1e+30,4.5,0.002,1e-27],"string":"€$\\u000f\\nA\'B\\"\\\\\\"/"}',
-    );
-  });
-
-  test("拒绝非 JSON 值、非有限数与非法 Unicode", () => {
-    expect(() => canonicalizeJson({ value: undefined })).toThrow(
-      CanonicalJsonError,
-    );
-    expect(() => canonicalizeJson(Number.NaN)).toThrow(
-      "JCS 不支持 NaN 或无穷大",
-    );
-    expect(() => canonicalizeJson("\ud800")).toThrow(
-      "JCS 不支持未配对的 UTF-16 surrogate",
-    );
-  });
-});