create-windy 0.3.16 → 0.3.18

package/template/apps/server/src/audit/reliable-writer.ts

@@ -2,6 +2,7 @@ import type { AuditEvent } from "@southwind-ai/shared";
 import type { AuditEventWriter } from "../runtime.js";
 import {
   AuditWriteUnavailableError,
+  type AuditRecoveryFailure,
   type AuditWritePolicy,
   type AuditWriteStatus,
 } from "./contracts.js";
@@ -69,45 +70,62 @@ export class ReliableAuditWriter implements AuditEventWriter {
       await this.handlePersistenceFailure(redacted, policy);
       return;
     }
-    if (this.current.queued > 0) {
-      try {
-        await this.recover();
-      } catch {
-        // 当前事件已经持久化；恢复队列故障只触发告警，不回滚成功写入。
-      }
+    if (this.current.queued > 0 || this.current.recoveryFailure) {
+      await this.recover();
     }
   }
 
   async recover(): Promise<void> {
-    try {
-      await this.withQueueLock(async () => {
-        const events = await this.queue.read();
-        if (!events.length) {
-          this.current.queued = 0;
-          this.refreshState();
-          return;
-        }
-        const pending: AuditEvent[] = [];
-        for (let index = 0; index < events.length; index += 1) {
-          try {
-            await this.persistWithRetry(events[index]!);
-            this.markSuccess();
-          } catch {
-            pending.push(...events.slice(index));
-            break;
-          }
-        }
-        await this.queue.replace(pending);
-        this.current.queued = pending.length;
-        if (pending.length) {
-          this.markDegraded("关键审计恢复仍在等待持久化");
-        } else {
-          this.refreshState();
+    await this.withQueueLock(async () => {
+      const events = await this.readRecoveryQueue();
+      if (!events) return;
+      if (!events.length) {
+        this.current.queued = 0;
+        this.clearRecoveryFailure();
+        this.refreshState();
+        return;
+      }
+      const pending: AuditEvent[] = [];
+      for (let index = 0; index < events.length; index += 1) {
+        try {
+          await this.persistWithRetry(events[index]!);
+          this.markSuccess();
+        } catch {
+          pending.push(...events.slice(index));
+          break;
         }
-      });
+      }
+      if (!(await this.replaceRecoveryQueue(pending, events.length))) return;
+      this.current.queued = pending.length;
+      this.clearRecoveryFailure();
+      if (pending.length) {
+        this.markDegraded("关键审计恢复仍在等待持久化");
+      } else {
+        this.refreshState();
+      }
+    });
+  }
+
+  private async readRecoveryQueue(): Promise<AuditEvent[] | undefined> {
+    try {
+      return await this.queue.read();
     } catch (error) {
-      this.markDegraded("关键审计恢复队列不可用");
-      throw error;
+      this.markRecoveryDegraded(error);
+      return undefined;
+    }
+  }
+
+  private async replaceRecoveryQueue(
+    events: AuditEvent[],
+    currentQueueSize: number,
+  ): Promise<boolean> {
+    try {
+      await this.queue.replace(events);
+      return true;
+    } catch (error) {
+      this.current.queued = currentQueueSize;
+      this.markRecoveryDegraded(error);
+      return false;
     }
   }
 
@@ -133,6 +151,7 @@ export class ReliableAuditWriter implements AuditEventWriter {
         await this.queue.replace([...events, event]);
         this.current.queued = events.length + 1;
       });
+      this.clearRecoveryFailure();
       this.markDegraded("关键审计已进入可恢复队列");
     } catch {
       this.markDegraded("关键审计写入和恢复队列均不可用");
@@ -169,8 +188,20 @@ export class ReliableAuditWriter implements AuditEventWriter {
     this.options.onAlert?.(this.status());
   }
 
+  private markRecoveryDegraded(error: unknown): void {
+    const recoveryFailure = classifyRecoveryFailure(error);
+    this.current.recoveryFailure = recoveryFailure;
+    this.current.lastRecoveryFailureAt = this.now().toISOString();
+    this.markDegraded(recoveryFailureAlert(recoveryFailure));
+  }
+
+  private clearRecoveryFailure(): void {
+    delete this.current.recoveryFailure;
+    delete this.current.lastRecoveryFailureAt;
+  }
+
   private refreshState(): void {
-    if (this.current.queued === 0) {
+    if (this.current.queued === 0 && !this.current.recoveryFailure) {
       this.current.state = "healthy";
       delete this.current.alert;
     }
@@ -199,3 +230,36 @@ function boundedInteger(
 function sleep(milliseconds: number): Promise<void> {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
+
+function classifyRecoveryFailure(error: unknown): AuditRecoveryFailure {
+  if (error instanceof SyntaxError) {
+    return "invalid-format";
+  }
+  if (
+    typeof error === "object" &&
+    error !== null &&
+    "code" in error &&
+    (error.code === "EACCES" || error.code === "EPERM")
+  ) {
+    return "permission-denied";
+  }
+  if (
+    typeof error === "object" &&
+    error !== null &&
+    "code" in error &&
+    typeof error.code === "string"
+  ) {
+    return "io-error";
+  }
+  return "unknown";
+}
+
+function recoveryFailureAlert(failure: AuditRecoveryFailure): string {
+  const detail = {
+    "permission-denied": "文件权限不足",
+    "invalid-format": "队列文件格式无效",
+    "io-error": "文件读写失败",
+    unknown: "未知错误",
+  } satisfies Record<AuditRecoveryFailure, string>;
+  return `关键审计恢复队列不可用：${detail[failure]}`;
+}

package/template/apps/server/src/guards.ts

@@ -29,6 +29,22 @@ export interface RequestActor {
   scopeContext?: ScopeContext;
 }
 
+// @windy-module system.agent begin
+const moduleUserProjection = new WeakMap<RequestActor, string>();
+
+export function bindModuleUserProjection(
+  actor: RequestActor,
+  userId: string,
+): RequestActor {
+  moduleUserProjection.set(actor, userId);
+  return actor;
+}
+
+export function projectedModuleUserId(actor: RequestActor): string | undefined {
+  return moduleUserProjection.get(actor);
+}
+// @windy-module system.agent end
+
 export interface RequestGuardContext {
   requestId: string;
   actor: RequestActor;

package/template/apps/server/src/index.ts

@@ -1,5 +1,3 @@
-import { loadPlatformConfig } from "@southwind-ai/config";
-import pino from "pino";
 import { registerAdminBootstrapRoute } from "./admin/routes.js";
 import { registerSessionContextRoute } from "./session/routes.js";
 import { registerFoundationRoute } from "./foundation-route.js";
@@ -19,9 +17,9 @@ import { readPositiveInt } from "./runtime-config.js";
 // @windy-module system.agent begin
 import { registerAgentPlatformRuntime } from "./agent/runtime-bootstrap.js";
 import { DeferredAgentBackgroundOperationPortFactory } from "./agent/background-operation-port.js";
+import { resolveCurrentSystemActor } from "./system/actor.js";
 // @windy-module system.agent end
 import { createAuthRuntime } from "./auth/runtime.js";
-import { createServerPersistence } from "./persistence.js";
 // @windy-module system.license begin
 import { registerPlatformLicenseRoutes } from "./license/routes.js";
 import {
@@ -70,16 +68,8 @@ import {
   listenPlatformServer,
   logServerStartup,
 } from "./platform-http-runtime.js";
-
-const logger = pino({ name: "windy-server" });
-const platformConfig = loadPlatformConfig();
-const persistence = createServerPersistence(
-  process.env,
-  (status) => {
-    logger.error({ audit: status }, "审计持久化进入降级状态");
-  },
-  platformConfig,
-);
+import { createPlatformBootstrap } from "./platform-bootstrap.js";
+const { logger, persistence, platformConfig } = createPlatformBootstrap();
 // @windy-module system.audit begin
 await persistence?.auditWriter.recover();
 // @windy-module system.audit end
@@ -105,6 +95,10 @@ const useInstalledLicense =
 // @windy-module system.license end
 const runtime = createServerRuntime(process.env, {
   actorResolver: persistence?.actorResolver,
+  // @windy-module system.agent begin
+  adkDebugActorResolver: (actorId) =>
+    resolveCurrentSystemActor(systemRepositories, actorId),
+  // @windy-module system.agent end
   // @windy-module system.license begin
   licenseResolver: useInstalledLicense
     ? platformLicenseRuntime
@@ -145,7 +139,9 @@ const storageRuntime = createStorageRuntime(
   persistence?.db,
   moduleHosts.uploadPolicies,
 );
+// @windy-module system.configuration begin
 configurationRuntime.bindStorage(storageRuntime.uploads);
+// @windy-module system.configuration end
 // @windy-module system.storage end
 // @windy-module system.settings begin
 const platformSettings = createPlatformSettingsRuntime(
@@ -173,23 +169,37 @@ const moduleTaskDefinitions = createModuleTaskDefinitions(
 const moduleBackgroundAi = new DeferredAgentBackgroundOperationPortFactory();
 // @windy-module system.agent end
 const {
+  // @windy-module system.bulk-data begin
   bulkDataService,
+  // @windy-module system.bulk-data end
   scheduler,
   taskDefinitions: scheduledTaskDefinitions,
+  // @windy-module system.notification begin
   notifications: notificationRepository,
   notificationService,
+  // @windy-module system.notification end
+  // @windy-module system.workflow begin
   workflow: workflowService,
+  // @windy-module system.workflow end
+  // @windy-module system.data-governance begin
   governedExportService,
+  // @windy-module system.data-governance end
   durable: durableJobRuntime,
 } = await createApplicationServices({
   persistence,
   systemRepositories,
   foundation: foundationSnapshot,
   runtime,
+  // @windy-module system.storage begin
   storage: storageRuntime,
+  // @windy-module system.storage end
   moduleTasks: moduleTaskDefinitions,
+  // @windy-module system.bulk-data begin
   bulkRetentionDays: readPositiveInt(process.env.BULK_DATA_RETENTION_DAYS, 7),
+  // @windy-module system.bulk-data end
+  // @windy-module system.notification begin
   mailConfig: platformConfig.mail,
+  // @windy-module system.notification end
   moduleHosts,
   installModuleDurableHandlers: moduleHosts.installDurableHandlers,
   // @windy-module system.agent begin
@@ -214,11 +224,9 @@ const app = await createPlatformServerApp({
   logger,
   observability,
 });
-
 // @windy-module system.license begin
 registerPlatformLicenseRoutes(app, platformLicenseRuntime);
 // @windy-module system.license end
-
 // @windy-module system.settings begin
 platformSettings.register(app, runtime, features);
 // @windy-module system.settings end
@@ -254,16 +262,13 @@ registerStorageRoutes(
 // @windy-module system.search begin
 searchHost.register(app);
 // @windy-module system.search end
-
 registerAdminBootstrapRoute(app, runtime, {
   modules: foundationModules,
   snapshot: foundationSnapshot,
   loadMenus: () => systemRepositories.menuRegistry.tree(),
 });
 registerSessionContextRoute(app, runtime, features);
-
 registerFoundationRoute(app, runtime, foundationSnapshot, systemRepositories);
-
 // @windy-module system.data-governance begin
 registerGovernedUserExportRoutes(app, governedExportService, runtime, features);
 // @windy-module system.data-governance end
@@ -323,7 +328,6 @@ installModuleHttpRuntime(moduleHosts, app, {
   governedExportService,
   // @windy-module system.data-governance end
 });
-
 validateInstalledRuntime({
   modules: foundationModules,
   routes: app.routes,
@@ -338,7 +342,6 @@ validateInstalledRuntime({
   // @windy-module system.search end
   hosts: moduleHosts,
 });
-
 const port = listenPlatformServer(app);
 // @windy-module system.scheduler begin
 schedulerWorker.start();

package/template/apps/server/src/jobs/legacy-adapter.integration.test.ts

@@ -34,7 +34,6 @@ describePostgres("PostgreSQL legacy durable adapter", () => {
     });
     await pool.query(`
       truncate table
-        governed_export_requests,
         bulk_data_artifacts,
         bulk_data_jobs,
         scheduled_task_runs,

package/template/apps/server/src/jobs/legacy-adapter.test.ts

@@ -5,9 +5,11 @@ import { createServerRuntime } from "../runtime.js";
 import { InMemorySchedulerRepository } from "../scheduler/repository.js";
 import { SchedulerService } from "../scheduler/service.js";
 import type { SchedulerClock } from "../scheduler/types.js";
+// @windy-module system.bulk-data begin
 import { InMemoryBulkDataRepository } from "../bulk-data/repository.js";
 import { BulkDataService } from "../bulk-data/service.js";
 import type { BulkResourceHandler } from "../bulk-data/resource-handler.js";
+// @windy-module system.bulk-data end
 import { InMemoryDurableExecutionRepository } from "./in-memory-execution.js";
 import {
   DeferredLegacyExecutor,
@@ -17,6 +19,7 @@ import { DurableJobService } from "./service.js";
 import { DurableJobWorker } from "./worker.js";
 
 describe("legacy durable adapters", () => {
+  // @windy-module system.bulk-data begin
   test("running Bulk 在进程重启后回收 lease，重复启动与完成不重复执行", async () => {
     let now = new Date("2026-07-16T00:00:00.000Z");
     const legacy = new InMemoryBulkDataRepository();
@@ -107,6 +110,7 @@ describe("legacy durable adapters", () => {
       processedRows: 1,
     });
   });
+  // @windy-module system.bulk-data end
 
   test("Scheduler 采用未关联 running 记录且重放已完成记录为空操作", async () => {
     const now = new Date("2026-07-16T00:00:00.000Z");
@@ -179,6 +183,7 @@ describe("legacy durable adapters", () => {
   });
 });
 
+// @windy-module system.bulk-data begin
 function testBulkHandler(): BulkResourceHandler {
   return {
     scopeMode: "platform",
@@ -197,3 +202,4 @@ function actor(id: string) {
     permissionKeys: [],
   };
 }
+// @windy-module system.bulk-data end

package/template/apps/server/src/jobs/legacy-service-runtime.ts

@@ -1,10 +1,14 @@
 import { DurableHandlerRegistry } from "@southwind-ai/jobs";
+// @windy-module system.bulk-data begin
 import type { BlobStore } from "@southwind-ai/storage";
+// @windy-module system.bulk-data end
 import type { NodePgDatabase } from "drizzle-orm/node-postgres";
+// @windy-module system.bulk-data begin
 import { BulkDataService } from "../bulk-data/service.js";
 import type { BulkDataLimits } from "../bulk-data/input-validation.js";
 import type { BulkDataRepository } from "../bulk-data/repository.js";
 import type { BulkResourceHandler } from "../bulk-data/resource-handler.js";
+// @windy-module system.bulk-data end
 import type { createServerRuntime } from "../runtime.js";
 import type { SchedulerRepository } from "../scheduler/repository.js";
 import { SchedulerService } from "../scheduler/service.js";
@@ -18,19 +22,25 @@ import {
 } from "./legacy-adapter.js";
 import { DurableJobService } from "./service.js";
 import { DurableJobWorker, type DurableWorkerOptions } from "./worker.js";
+// @windy-module system.workflow begin
 import type { WorkflowService } from "../workflow/service.js";
 import { WorkflowTimeoutRuntime } from "../workflow/timeout-runtime.js";
+// @windy-module system.workflow end
 
 interface LegacyServiceRuntimeInput {
   db?: NodePgDatabase;
+  // @windy-module system.bulk-data begin
   bulkRepository: BulkDataRepository;
   bulkHandlers: BulkResourceHandler[];
   bulkLimits: Partial<BulkDataLimits>;
   blobStore: BlobStore;
+  // @windy-module system.bulk-data end
   schedulerRepository: SchedulerRepository;
   taskDefinitions: ScheduledTaskDefinition[];
   runtime: ReturnType<typeof createServerRuntime>;
+  // @windy-module system.workflow begin
   workflow: WorkflowService;
+  // @windy-module system.workflow end
   installModuleDurableHandlers?: (registry: DurableHandlerRegistry) => void;
   durableContextualize?: DurableWorkerOptions["contextualize"];
 }
@@ -47,13 +57,16 @@ export function createLegacyServiceRuntime(input: LegacyServiceRuntimeInput) {
   const worker = new DurableJobWorker(execution, registry, {
     contextualize: input.durableContextualize,
   });
+  // @windy-module system.workflow begin
   const workflowTimeout = new WorkflowTimeoutRuntime(
     service,
     worker,
     registry,
     input.workflow,
   );
+  // @windy-module system.workflow end
 
+  // @windy-module system.bulk-data begin
   const bulkExecutor = new DeferredLegacyExecutor();
   const bulkDataService = new BulkDataService(
     input.bulkRepository,
@@ -71,6 +84,7 @@ export function createLegacyServiceRuntime(input: LegacyServiceRuntimeInput) {
   bulkExecutor.attach(({ legacyId, generation }) =>
     bulkDataService.resumeDurable(legacyId, generation),
   );
+  // @windy-module system.bulk-data end
 
   const schedulerExecutor = new DeferredLegacyExecutor();
   const taskDefinitions = input.taskDefinitions;
@@ -91,10 +105,14 @@ export function createLegacyServiceRuntime(input: LegacyServiceRuntimeInput) {
   );
 
   return {
+    // @windy-module system.bulk-data begin
     bulkDataService,
+    // @windy-module system.bulk-data end
     scheduler,
     taskDefinitions,
+    // @windy-module system.workflow begin
     workflowTimeout,
+    // @windy-module system.workflow end
     durable: { facts, service, registry, worker },
   };
 }

package/template/apps/server/src/module-host/durable-context-unavailable.test.ts

@@ -0,0 +1,84 @@
+import { describe, expect, test } from "bun:test";
+import type { DurableHandlerContext } from "@southwind-ai/jobs";
+import { featureKey } from "@southwind-ai/shared";
+import { buildActorScopeContexts } from "../data-access/context.js";
+import { captureAuthorizationScope } from "../data-access/scope-snapshot.js";
+import type { RequestActor } from "../guards.js";
+import { createServerRuntime } from "../runtime.js";
+import { createModuleDurableContextualizer } from "./durable-context.js";
+
+const feature = {
+  key: featureKey("evidence.catalog"),
+  label: "电子物证",
+  module: "evidence",
+  visible: "visible" as const,
+  enabled: true,
+  stage: "stable" as const,
+};
+
+describe("模块 Durable Handler 可选端口", () => {
+  test("未挂载 Storage 时仍重建 Actor，并对文件读取 fail-closed", async () => {
+    const actor = currentActor();
+    const contextualize = createModuleDurableContextualizer({
+      hosts: {} as never,
+      runtime: createServerRuntime(
+        { NODE_ENV: "test" },
+        { featureCatalog: [feature] },
+      ),
+      features: [feature],
+      resolveActor: async () => actor,
+    });
+    const context = await contextualize({
+      claim: { job: job(actor) },
+      moduleName: "evidence",
+      context: baseContext(),
+    });
+
+    expect(context).toMatchObject({ actor: { id: "user-reader" } });
+    await expect(
+      (
+        context as typeof context & {
+          storage: { openResourceFile(input: never): Promise<unknown> };
+        }
+      ).storage.openResourceFile({} as never),
+    ).rejects.toThrow("模块 evidence 的存储 Port 未挂载");
+  });
+});
+
+function currentActor(): RequestActor {
+  return {
+    id: "user-reader",
+    type: "user",
+    name: "物证读取者",
+    roleCodes: ["investigator"],
+    permissionKeys: ["evidence.read"],
+    ...buildActorScopeContexts("user-reader", "dept-case", [
+      {
+        id: "role-investigator",
+        code: "investigator",
+        dataScope: "all",
+        departmentIds: [],
+      },
+    ]),
+  };
+}
+
+function job(actor: RequestActor) {
+  return {
+    id: "job-evidence",
+    requestedBy: actor.id,
+    authorizationScope: captureAuthorizationScope(actor.scopeContext).snapshot,
+  };
+}
+
+function baseContext(): DurableHandlerContext {
+  return {
+    jobId: "job-evidence",
+    stageKey: "main",
+    attemptNumber: 1,
+    signal: new AbortController().signal,
+    heartbeat: async () => undefined,
+    progress: async () => undefined,
+    publishArtifact: async () => undefined,
+  };
+}

package/template/apps/server/src/module-host/durable-context.test.ts

@@ -5,7 +5,9 @@ import { buildActorScopeContexts } from "../data-access/context.js";
 import { captureAuthorizationScope } from "../data-access/scope-snapshot.js";
 import type { RequestActor } from "../guards.js";
 import { createServerRuntime } from "../runtime.js";
+// @windy-module system.storage begin
 import { createStorageRuntime } from "../storage/runtime.js";
+// @windy-module system.storage end
 import { createModuleDurableContextualizer } from "./durable-context.js";
 import { initializeModuleHosts } from "./initialize.js";
 import { manifest } from "./test-fixtures.js";
@@ -82,6 +84,7 @@ describe("模块 Durable Handler 授权上下文", () => {
     ]);
   });
 
+  // @windy-module system.storage begin
   test("重启后按 requestedBy 重建 Actor 并允许同案跨上传者读取", async () => {
     const { contextualize, storage, actor, resolverCalls, runtime } =
       await setup();
@@ -131,7 +134,9 @@ describe("模块 Durable Handler 授权上下文", () => {
       }),
     );
   });
+  // @windy-module system.storage end
 
+  // @windy-module system.storage begin
   test("Scope 变化、权限撤销与资源绑定漂移均 fail-closed", async () => {
     const stable = currentActor();
     const scopeChanged = currentActor("self");
@@ -182,6 +187,7 @@ describe("模块 Durable Handler 授权上下文", () => {
       }),
     );
   });
+  // @windy-module system.storage end
 });
 
 async function setup(
@@ -220,7 +226,9 @@ async function setup(
       },
     ],
   });
+  // @windy-module system.storage begin
   const storage = createStorageRuntime({}, undefined, hosts.uploadPolicies);
+  // @windy-module system.storage end
   const runtime = createServerRuntime(
     { NODE_ENV: "test" },
     { featureCatalog: [evidenceFeature] },
@@ -228,14 +236,18 @@ async function setup(
   let calls = 0;
   return {
     actor: currentActor(),
+    // @windy-module system.storage begin
     storage,
+    // @windy-module system.storage end
     runtime,
     resolverCalls: () => calls,
     contextualize: createModuleDurableContextualizer({
       hosts,
       runtime,
       features: [evidenceFeature],
+      // @windy-module system.storage begin
       storage,
+      // @windy-module system.storage end
       backgroundAi,
       async resolveActor() {
         calls += 1;
@@ -283,6 +295,7 @@ function baseContext(attemptNumber: number): DurableHandlerContext {
   };
 }
 
+// @windy-module system.storage begin
 async function seedFile(storage: ReturnType<typeof createStorageRuntime>) {
   const bytes = new TextEncoder().encode("evidence");
   const sha256 = new Bun.CryptoHasher("sha256").update(bytes).digest("hex");
@@ -310,3 +323,4 @@ async function seedFile(storage: ReturnType<typeof createStorageRuntime>) {
   });
   return storage.uploads.complete(session.id, "user-uploader");
 }
+// @windy-module system.storage end

package/template/apps/server/src/module-host/durable-context.ts

@@ -21,6 +21,7 @@ import type { InitializedModuleHosts } from "./initialize.js";
 import {
   createModuleStoragePort,
   type ModuleStorageServices,
+  unavailableModuleStoragePort,
 } from "./storage-port.js";
 import { createModuleStorageScope } from "./storage-scope.js";
 import { toModuleActor } from "./request-context.js";
@@ -29,7 +30,7 @@ export interface ModuleDurableContextServices {
   readonly hosts: InitializedModuleHosts;
   readonly runtime: ReturnType<typeof createServerRuntime>;
   readonly features: readonly FeatureFlagDefinition[];
-  readonly storage: ModuleStorageServices;
+  readonly storage?: ModuleStorageServices;
   readonly backgroundAi?: {
     create(
       moduleName: string,
@@ -75,20 +76,21 @@ export function createModuleDurableContextualizer(
       request,
       actor,
     );
-    const storage = createModuleStoragePort(
-      services.storage,
-      createModuleStorageScope({
-        moduleName: input.moduleName,
-        purposes: services.hosts.uploadPurposesOf(input.moduleName),
-        resourceFileAccessPolicies: services.hosts.resourceFileAccessPoliciesOf(
-          input.moduleName,
-        ),
-        guardContext,
-        runtime: services.runtime,
-        features: services.features,
-        signal: input.context.signal,
-      }),
-    );
+    const storage = services.storage
+      ? createModuleStoragePort(
+          services.storage,
+          createModuleStorageScope({
+            moduleName: input.moduleName,
+            purposes: services.hosts.uploadPurposesOf(input.moduleName),
+            resourceFileAccessPolicies:
+              services.hosts.resourceFileAccessPoliciesOf(input.moduleName),
+            guardContext,
+            runtime: services.runtime,
+            features: services.features,
+            signal: input.context.signal,
+          }),
+        )
+      : unavailableModuleStoragePort(input.moduleName);
     const moduleContext: ModuleDurableHandlerContext = {
       ...input.context,
       actor: toModuleActor(actor),