create-windy 0.3.19 → 0.4.0

package/template/docs/development/module-lifecycle.md

@@ -1,72 +1,66 @@
-# 部署期模块生命周期
+# 项目模块装配与生命周期
 
-Windy 已部署项目通过项目锁定版本的 `create-windy` 管理模块，不重新运行创建命令，
-也不手工复制源码：
+更新时间：2026-07-29。
+
+## 当前可用命令
+
+已部署项目通过项目锁定版本的 `create-windy` 管理装配选择：
 
 ```bash
 bun run windy module list
-bun run windy module add work-order --dry-run
-bun run windy module add work-order
-bun run windy module update work-order
-bun run windy module remove work-order --dry-run
-bun run windy module remove work-order --confirm-data-disposition
+bun run windy module enable <module>
+bun run windy module disable <module>
 ```
 
-## 计划与事务
-
-模块命令读取 `.windy/generation.json` 的当前集合，再用
-`ModuleDistributionManifest` 解析依赖、冲突、Windy 兼容范围、package、文件、
-Schema、migration 与卸载策略。目标组合仍由 immutable template 生成，之后进入与
-`windy update` 相同的 Base/Ours/Theirs 计划、文件 expectation、workspace 检查、
-CAS 写入、验证、Project Lock/受管清单提交和 `doctor --repair` 恢复流程。
+`windy.modules.json` 是 project-owned 装配声明，记录 Module 名称、无版本 package
+入口、`enabled`、顺序、Admin 可见性和配置；实际 package 版本只来自
+`package.json` 与 `bun.lock`。`enable/disable` 使用 CAS 事务只修改这份声明，不改
+`apps/web/src`、Server Composition、Router、layout 或 package 内容。
 
-模块命令要求项目的 `windyVersion`、`generatorVersion` 与当前 CLI 的 template 版本
-完全一致；旧项目先运行 `bun run windy update`。这样目录、recipe 和目标模板不会跨
-版本混用。
+启用会递归启用已经安装的依赖；依赖缺失、版本不兼容、冲突、核心模块停用或仍有启用
+模块依赖待停用模块时，在写入前拒绝。`system.settings` 的 Admin Route 引用
+`system.admin`，`system.storage` 承载 Settings 声明的公共品牌文件 Route，
+`system.data-governance` 也向其它 Feature 贡献治理能力；三者都不能
+只靠运行时开关安全停用，因此 `disable` 会 fail closed。部署后需要排除它们时必须由
+项目执行人工物理迁移，不能把修改 registry 当作已卸载。
 
-`add` 与 `remove` 是幂等操作：集合已满足时不启动事务。`update` 不改变集合，用当前
-CLI 重建所选模块并应用目录声明的更新 recipe。正式操作只处理计划涉及的文件，不检查
-无关 Git 工作区改动；客户修改过的受管文件或模块 project-owned 扩展点会形成冲突，
-不会被静默覆盖。
+## 创建期模块与部署期安装的边界
 
-## 数据处置
+当前目录中的 15 个平台模块和示例 `work-order` 都是 source/template distribution：
+它们在首次创建时通过 `--module`、`--all-modules`、`--no-optional-modules` 或
+`--no-example` 物理组合。其文件仍包含 project-owned Web、Server Composition、
+Repository 或业务源码，不是可以在已部署项目中独立落盘的 self-contained package。
 
-卸载首先输出数据处置计划。`--dry-run` 只展示文件和冲突；正式卸载必须显式传入
-`--confirm-data-disposition`。
+因此对这些内置模块执行下列命令时，CLI 会在生成更新计划和写项目之前 fail closed：
 
-| 策略           | 行为                                                               |
-| -------------- | ------------------------------------------------------------------ |
-| `retain-data`  | 默认；保留业务表与记录，不执行 down migration                      |
-| `archive-data` | 目录要求外部先归档；通过 `--data-plan <文件>` 绑定已审阅的处置文档 |
-| `manual`       | 目录要求人工决定；同样必须绑定处置文档                             |
-
-CLI 不连接生产数据库，确认参数表示部署操作人已完成并审阅相应动作，不代表 Windy
-自动执行 SQL 或数据库归档。即使策略名为 `archive-data`，CLI 对数据库本身仍是
-retain：数据删除或归档由处置文档约束的外部运维流程负责。目录策略只能被提高，不能
-从 `archive-data` 或 `manual` 降为 `retain-data`。
+```bash
+bun run windy module add <built-in-module>
+bun run windy module update <built-in-module>
+bun run windy module remove <built-in-module>
+```
 
-卸载不会删除已发布 migration。模块自有 migration 源文件按原相对路径保存到
-`.windy/module-history/<module>/`；模块重装时历史仍保留，数据库运行期继续以
-`windy_migration_history` 的 migration id 与 checksum 判定，不会因为代码重装而
-重复执行已应用迁移。历史目录受清单 hash 保护，缺失登记、符号链接或内容修改都会
-fail closed。
+重复 add 已安装模块、重复 remove 未安装模块仍按幂等 no-op 处理；只有实际集合会变化
+时才检查部署期能力。这不能作为安装、更新或卸载已经交付的证据。
 
-## 物理残留边界
+`ModuleDistributionManifest.deploymentInstall` 只有在模块完成以下闭环后才能标为
+`supported`：
 
-目标组合会重新物化 package、workspace、宿主 Adapter、Composition、Module
-Manifest、Feature、Permission、菜单、任务、Provider、Tool、Schema 和文档。卸载后
-这些运行时或生成期引用不得残留；允许保留的只有：
+- package 提供 browser-safe `./admin`、canonical `./manifest` 与
+  self-contained 根 `windyServerModule`；
+- 安装只更新依赖图和 `windy.modules.json`，不改写 project-owned Web/Server 源码；
+- Manifest、Host range、依赖闭包和实现完整性在安装、构建与监听前均 fail closed；
+- 数据处置、不可改写 migration、失败恢复和重复操作有真实部署回归证据。
 
-- 数据库中的业务数据与 migration ledger；
-- `.windy/module-history/` 下的不可执行迁移证据；
-- `.windy/reports/` 下的生命周期报告。
+当前目录没有 `deploymentInstall: "supported"` 的模块，所以没有 H3 模块，也不支持
+任意 npm package 名称的 H3 安装。需要客户 Repository 或项目运行时 attachment 的模块
+只能在 `apps/server/src/app/server-composition.ts` 由项目显式装配。
 
-如果其它已安装模块仍依赖待卸载模块，计划在写文件前拒绝。`system` 与
-`system.identity` 是 profile 核心，不支持卸载。
+## 数据与升级原则
 
-## H3 证据
+部署期物理卸载将来仍必须默认保留数据，不执行 down migration；`archive-data` 或
+`manual` 只能绑定已审阅的外部运维计划，CLI 不连接生产数据库，也不能声称已自动
+归档。已发布 Migration Bundle 的 ID 与 checksum 必须保留。
 
-通用 CLI 的存在不自动提升所有模块可靠度。`work-order` 的 H3 回归从纯核心项目开始，
-覆盖安装、重复安装、更新、保留数据卸载、重复卸载和重装，并检查 package、
-Project Lock 与 migration history artifact。其它模块保持 H2，直到分别通过同等级的
-安装、数据库、Server、卸载残留和恢复门禁。
+普通 `windy update` 只升级平台依赖、受管 Wrapper 和兼容运行内核，不重写
+`apps/web/src` 或 `apps/server/src/app`。模块协议不兼容时应
+诊断并停止，不能用模板覆盖客户 Composition 来制造成功。

package/template/docs/platform/navigation-registry.md

@@ -35,7 +35,8 @@ PUT /api/system/menus/:id/placement
 
 新增页面时先在所属 Module Manifest 用同一能力 Key 注册 Feature、权限、菜单和 API 绑定，再新增 Router 页面。Router 契约测试会比较所有 `type=menu` 的 Manifest 路径与 Web 路由，避免出现“菜单有入口但页面不存在”或“页面绕过注册表”的漂移。
 
-客户业务页面不直接修改 shared-scaffold Router 或侧栏。页面实现注册到
-project-owned 的 `apps/web/src/app/business-routes.ts`，平台 Router Adapter 统一补齐
-Feature/RBAC Guard；侧栏仍从服务端 Manifest 快照生成。完整接入与升级边界见
-[project-owned 业务 Web 路由](../development/business-web-routes.md)。
+业务 package 的 browser-safe `./admin` 提供 Manifest 窄投影与默认页面，项目可在
+project-owned `apps/web/src/app/web-composition.ts` 按 route key 覆盖 loader 和呈现；
+路径与 Feature/RBAC Guard 不在 Web 重复声明。侧栏仍从服务端 Manifest 快照生成。完整
+接入与升级边界见
+[project-owned Web 与 Admin UI 组合](../development/business-web-routes.md)。

package/template/package.json

@@ -27,7 +27,7 @@
     "generate:crud": "bun run packages/crud-generator/src/cli.ts",
     "create:windy": "bun run packages/create-windy/src/cli.ts",
     "test:create-windy": "bun run packages/create-windy/src/regression.ts",
-    "build": "bun run --cwd apps/web build",
+    "build": "bun run --cwd apps/server build && bun run --cwd apps/web build",
     "build:license": "bun run --cwd apps/license build:web",
     "db:generate": "drizzle-kit generate --config drizzle.config.ts",
     "db:migrate": "drizzle-kit migrate --config drizzle.config.ts",

package/template/packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/config",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/database",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/example-work-order/package.json

@@ -13,8 +13,14 @@
     "drizzle-orm": "^0.45.2",
     "zod": "^4.4.3"
   },
+  "peerDependencies": {
+    "vue": "^3.5.0"
+  },
   "exports": {
     ".": "./index.ts",
+    "./admin": "./src/admin.ts",
+    "./contract": "./src/contract.ts",
+    "./manifest": "./src/manifest.ts",
     "./migration-bundle": "./src/migration-bundle.ts"
   }
 }

package/template/packages/example-work-order/src/admin-page.ts

@@ -0,0 +1,78 @@
+import { defineComponent, h, onMounted, ref } from "vue";
+import type { WorkOrder, WorkOrderPage } from "./contract.js";
+
+export default defineComponent({
+  name: "DefaultWorkOrderAdminPage",
+  setup() {
+    const items = ref<WorkOrder[]>([]);
+    const loading = ref(true);
+    const error = ref("");
+
+    onMounted(async () => {
+      try {
+        const response = await fetch("/api/work-orders?page=1&pageSize=20");
+        if (!response.ok) throw new Error(`HTTP ${response.status}`);
+        const payload: unknown = await response.json();
+        if (!isWorkOrderPage(payload)) throw new Error("响应结构无效");
+        items.value = payload.items;
+      } catch {
+        error.value = "工单加载失败，请稍后重试。";
+      } finally {
+        loading.value = false;
+      }
+    });
+
+    return () =>
+      h("main", { class: "space-y-4 p-6" }, [
+        h("header", { class: "space-y-1" }, [
+          h("h1", { class: "text-2xl font-semibold" }, "工单管理"),
+          h(
+            "p",
+            { class: "text-sm text-muted-foreground" },
+            "模块 package 提供的默认页面；项目可在 Web Composition 中替换。",
+          ),
+        ]),
+        loading.value
+          ? h("p", "正在加载工单…")
+          : error.value
+            ? h("p", { role: "alert" }, error.value)
+            : h(
+                "ul",
+                { class: "divide-y rounded-md border" },
+                items.value.map((item) =>
+                  h("li", { class: "space-y-1 p-4", key: item.id }, [
+                    h("p", { class: "font-medium" }, item.title),
+                    h(
+                      "p",
+                      { class: "text-sm text-muted-foreground" },
+                      `${item.workflowStatus} · ${item.priority}`,
+                    ),
+                  ]),
+                ),
+              ),
+      ]);
+  },
+});
+
+function isWorkOrderPage(value: unknown): value is WorkOrderPage {
+  return (
+    isRecord(value) &&
+    Array.isArray(value.items) &&
+    value.items.every(
+      (item) =>
+        isRecord(item) &&
+        typeof item.id === "string" &&
+        typeof item.title === "string" &&
+        typeof item.description === "string" &&
+        typeof item.priority === "string" &&
+        typeof item.workflowStatus === "string",
+    ) &&
+    typeof value.page === "number" &&
+    typeof value.pageSize === "number" &&
+    typeof value.total === "number"
+  );
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}

package/template/packages/example-work-order/src/admin.ts

@@ -0,0 +1,35 @@
+import {
+  defineAdminUiManifest,
+  defineWindyAdminUiModule,
+} from "@southwind-ai/modules/admin-ui";
+
+export const workOrderAdminUiManifest = defineAdminUiManifest({
+  name: "work-order",
+  version: "0.1.0",
+  adminRoutes: [
+    {
+      key: "work-order.ticket.list",
+      path: "/admin/work-orders",
+      title: "工单管理",
+      surface: "sidebar",
+      directAccess: "guarded",
+      permissionKey: "work-order.ticket.read",
+      featureKey: "work-order.ticket",
+    },
+  ],
+});
+
+/**
+ * package 标准 Admin 导出，提供可独立装配的默认页面。
+ * 项目可以通过 project-owned Web Composition 覆盖页面 loader。
+ */
+export const windyAdminUiModule = defineWindyAdminUiModule({
+  manifest: workOrderAdminUiManifest,
+  hostRange: "^0.1.0",
+  pages: [
+    {
+      routeKey: "work-order.ticket.list",
+      load: () => import("./admin-page.js"),
+    },
+  ],
+});

package/template/packages/example-work-order/src/manifest.test.ts

@@ -1,8 +1,15 @@
 import { describe, expect, test } from "bun:test";
-import { workOrderModule } from "./manifest.js";
+import {
+  windyAdminUiModule,
+  workOrderAdminUiManifest,
+} from "@southwind-ai/example-work-order/admin";
+import {
+  windyModuleManifest,
+  workOrderModule,
+} from "@southwind-ai/example-work-order/manifest";
 
 describe("示例工单 Module Manifest", () => {
-  test("业务能力保留 API 与任务但不进入 Windy Admin Surface", () => {
+  test("业务能力注册 API、任务与 Windy Admin Surface", () => {
     const manifest = workOrderModule();
 
     expect(manifest.name).not.toBe("system");
@@ -16,16 +23,54 @@ describe("示例工单 Module Manifest", () => {
       "work-order.ticket.manage",
     ]);
     expect(manifest.apiPermissions).toHaveLength(5);
-    expect(manifest.menus).toEqual([]);
-    expect(manifest.adminRoutes).toEqual([]);
+    expect(
+      manifest.apiPermissions.map(({ auditAction }) => auditAction),
+    ).toEqual([
+      "data.read",
+      "data.read",
+      "crud.create",
+      "crud.update",
+      "crud.delete",
+    ]);
+    expect(manifest.menus).toEqual([
+      {
+        key: "work-order.ticket.list",
+        title: "工单管理",
+        type: "menu",
+        order: 100,
+        visible: true,
+        path: "/admin/work-orders",
+        icon: "clipboard-list",
+        featureKey: "work-order.ticket",
+        permissionKey: "work-order.ticket.read",
+      },
+    ]);
+    expect(manifest.adminRoutes).toEqual([
+      {
+        key: "work-order.ticket.list",
+        path: "/admin/work-orders",
+        title: "工单管理",
+        surface: "sidebar",
+        directAccess: "guarded",
+        featureKey: "work-order.ticket",
+        permissionKey: "work-order.ticket.read",
+      },
+    ]);
     expect(manifest.auditActions).toEqual(
-      expect.arrayContaining(["crud.create", "crud.update", "crud.delete"]),
+      expect.arrayContaining([
+        "crud.create",
+        "crud.update",
+        "crud.delete",
+        "data.read",
+        "task.execute",
+      ]),
     );
     expect(manifest.tasks).toContainEqual(
       expect.objectContaining({
         key: "work-order.ticket.snapshot",
         featureKey: "work-order.ticket",
         permissionKey: "work-order.ticket.manage",
+        auditAction: "task.execute",
       }),
     );
     expect(manifest.providers).toEqual([
@@ -50,5 +95,17 @@ describe("示例工单 Module Manifest", () => {
       persistence: "postgresql-with-memory-fallback",
       uiComposition: "external-business-app",
     });
+    expect(workOrderAdminUiManifest.adminRoutes).toEqual(manifest.adminRoutes);
+    expect(windyModuleManifest).toEqual(manifest);
+    expect(windyAdminUiModule).toMatchObject({
+      manifest: workOrderAdminUiManifest,
+      hostRange: "^0.1.0",
+      pages: [
+        expect.objectContaining({
+          routeKey: "work-order.ticket.list",
+          load: expect.any(Function),
+        }),
+      ],
+    });
   });
 });

package/template/packages/example-work-order/src/manifest.ts

@@ -2,11 +2,14 @@ import {
   defineSearchProvider,
   featureKey,
   licenseVersionKey,
+  type AuditActionType,
 } from "@southwind-ai/shared";
 import {
   WORK_ORDER_INITIAL_MIGRATION_ID,
+  WORK_ORDER_MODULE_DEPENDENCIES,
   workOrderMigrationBundle,
 } from "./migration-bundle.js";
+import { workOrderAdminUiManifest } from "./admin.js";
 
 const FEATURE_KEY = featureKey("work-order.ticket");
 
@@ -16,19 +19,52 @@ export function workOrderModule() {
     version: "0.1.0",
     label: "示例工单",
     description: "可删除的业务模块示例，演示完整平台能力接入。",
-    menus: [],
-    adminRoutes: [],
+    dependencies: [...WORK_ORDER_MODULE_DEPENDENCIES],
+    menus: [
+      {
+        key: "work-order.ticket.list",
+        title: "工单管理",
+        type: "menu" as const,
+        order: 100,
+        visible: true,
+        path: "/admin/work-orders",
+        icon: "clipboard-list",
+        permissionKey: "work-order.ticket.read",
+        featureKey: FEATURE_KEY,
+      },
+    ],
+    adminRoutes: [...workOrderAdminUiManifest.adminRoutes],
     permissions: [
       permission("read", "查看工单"),
       permission("create", "创建工单"),
       permission("manage", "管理工单"),
     ],
     apiPermissions: [
-      binding("GET", "/api/work-orders", "work-order.ticket.read"),
-      binding("GET", "/api/work-orders/:id", "work-order.ticket.read"),
-      binding("POST", "/api/work-orders", "work-order.ticket.create"),
-      binding("PUT", "/api/work-orders/:id", "work-order.ticket.manage"),
-      binding("DELETE", "/api/work-orders/:id", "work-order.ticket.manage"),
+      binding("GET", "/api/work-orders", "work-order.ticket.read", "data.read"),
+      binding(
+        "GET",
+        "/api/work-orders/:id",
+        "work-order.ticket.read",
+        "data.read",
+      ),
+      binding(
+        "POST",
+        "/api/work-orders",
+        "work-order.ticket.create",
+        "crud.create",
+      ),
+      binding(
+        "PUT",
+        "/api/work-orders/:id",
+        "work-order.ticket.manage",
+        "crud.update",
+      ),
+      binding(
+        "DELETE",
+        "/api/work-orders/:id",
+        "work-order.ticket.manage",
+        "crud.delete",
+      ),
     ],
     features: [
       {
@@ -61,6 +97,7 @@ export function workOrderModule() {
         description: "统计当前工单待办和高优先级积压，写入调度执行结果。",
         permissionKey: "work-order.ticket.manage",
         featureKey: FEATURE_KEY,
+        auditAction: "task.execute",
         intervalSeconds: 900,
         maxAttempts: 3,
         retryDelaySeconds: 60,
@@ -88,7 +125,9 @@ export function workOrderModule() {
       "crud.create" as const,
       "crud.update" as const,
       "crud.delete" as const,
+      "data.read" as const,
       "data.search" as const,
+      "task.execute" as const,
     ],
     metadata: {
       removableExample: true,
@@ -99,6 +138,12 @@ export function workOrderModule() {
   };
 }
 
+/**
+ * package 标准 Manifest 导出。构建与 Server 可用它核对窄 Admin 投影，
+ * 浏览器只能从 `./admin` 子路径加载。
+ */
+export const windyModuleManifest = workOrderModule();
+
 function permission(action: "read" | "create" | "manage", label: string) {
   return {
     key: `work-order.ticket.${action}`,
@@ -115,11 +160,13 @@ function binding(
   method: "GET" | "POST" | "PUT" | "DELETE",
   path: string,
   permissionKey: string,
+  auditAction: AuditActionType,
 ) {
   return {
     method,
     path,
     permissionKey,
     featureKey: "work-order.ticket",
+    auditAction,
   };
 }

package/template/packages/example-work-order/src/migration-bundle.ts

@@ -7,6 +7,14 @@ import {
 export const WORK_ORDER_INITIAL_MIGRATION_ID =
   "work-order.0001.create-work-orders";
 
+export const WORK_ORDER_MODULE_DEPENDENCIES = [
+  "system",
+  "system.identity",
+  "system.search",
+  "system.scheduler",
+  "system.storage",
+] as const;
+
 export const workOrderMigrationBundle: MigrationBundle = {
   formatVersion: MIGRATION_BUNDLE_FORMAT_VERSION,
   module: "work-order",

package/template/packages/example-work-order/src/server-module.ts

@@ -5,7 +5,7 @@ import type {
   ModuleSearchProvider,
   ModuleTaskHandler,
 } from "@southwind-ai/server-sdk";
-import { workOrderModule } from "./manifest.js";
+import { windyModuleManifest } from "./manifest.js";
 
 export interface WorkOrderServerBindings {
   readonly routes: readonly ModuleRouteDefinition[];
@@ -20,7 +20,7 @@ export function createWorkOrderServerModule(
   bindings: WorkOrderServerBindings,
 ): InstallableServerModule<ModuleManifest> {
   return {
-    manifest: workOrderModule(),
+    manifest: windyModuleManifest,
     setup(host) {
       host.registerUploadPolicy({
         purpose: "work-order.ticket.attachment",

package/template/packages/jobs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/jobs",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/index.ts

@@ -8,3 +8,7 @@ export * from "./src/system-module-catalog.js";
 export * from "./src/system-api-permissions.js";
 export * from "./src/tool-composition.js";
 export * from "./src/ai-network-policy.js";
+export * from "./src/project-module-assembly.js";
+export * from "./src/module-host-range.js";
+export * from "./src/admin-ui-manifest.js";
+export * from "./src/system-admin-ui-catalog.js";

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -15,7 +15,8 @@
     "@southwind-ai/shared": "workspace:^"
   },
   "exports": {
-    ".": "./index.ts"
+    ".": "./index.ts",
+    "./admin-ui": "./src/admin-ui-entry.ts"
   },
   "publishConfig": {
     "access": "public"

package/template/packages/modules/src/admin-ui-entry.ts

@@ -0,0 +1,8 @@
+export * from "./admin-ui-manifest.js";
+export * from "./module-host-range.js";
+export * from "./project-module-assembly.js";
+export * from "./system-admin-ui-catalog.js";
+export type {
+  AdminRouteSurface,
+  ModuleAdminRouteDefinition,
+} from "./manifest.js";

package/template/packages/modules/src/admin-ui-manifest.test.ts

@@ -0,0 +1,52 @@
+import { describe, expect, test } from "bun:test";
+import {
+  defineAdminUiManifest,
+  defineWindyAdminUiModule,
+  projectAdminUiManifest,
+} from "./admin-ui-manifest.js";
+import { systemModuleManifests } from "./system-module-catalog.js";
+import { systemAdminUiManifests } from "./system-admin-ui-catalog.js";
+
+describe("Admin UI 窄 Manifest", () => {
+  test("从完整 Manifest 只投影身份与 Admin Route", () => {
+    const full = systemModuleManifests().find(
+      ({ name }) => name === "system.identity",
+    )!;
+    const projected = projectAdminUiManifest(full);
+
+    expect(projected).toEqual({
+      name: full.name,
+      version: full.version,
+      adminRoutes: full.adminRoutes,
+    });
+    expect(projected).not.toHaveProperty("permissions");
+    expect(projected).not.toHaveProperty("migrations");
+  });
+
+  test("系统窄目录与完整 Manifest 的 Admin Route 保持同源", () => {
+    const full = new Map(
+      systemModuleManifests().map((manifest) => [
+        manifest.name,
+        projectAdminUiManifest(manifest),
+      ]),
+    );
+
+    expect(systemAdminUiManifests()).toEqual([...full.values()]);
+  });
+
+  test("标准 Admin UI Module 保留 Host range 与页面绑定", () => {
+    const manifest = defineAdminUiManifest({
+      name: "case",
+      version: "1.0.0",
+      adminRoutes: [],
+    });
+    const module = defineWindyAdminUiModule({
+      manifest,
+      hostRange: "^0.1.0",
+      pages: [],
+    });
+
+    expect(module.manifest).toBe(manifest);
+    expect(module.hostRange).toBe("^0.1.0");
+  });
+});