create-windy 0.3.2 → 0.3.5

package/dist/cli.js

@@ -229,7 +229,9 @@ var optionalModuleManifests = [
   {
     ...module("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
       "system",
-      "system.audit"
+      "system.audit",
+      "system.storage",
+      "system.scheduler"
     ]),
     registryDependencies: [
       {
@@ -245,17 +247,41 @@ var optionalModuleManifests = [
     ],
     fileRoots: [
       "apps/agent-server",
+      "apps/document-server",
+      "apps/speech-server",
+      "apps/embedding-server",
       "apps/server/src/agent",
+      "apps/server/src/ai-artifact",
+      "apps/server/src/document",
+      "apps/server/src/speech",
+      "apps/server/src/embedding",
       "apps/server/src/mcp",
       "apps/server/src/module-host/tool-handlers.ts",
       "apps/server/src/module-host/tool-handlers.test.ts",
-      "packages/modules/src/system-agent-tools.ts"
+      "packages/modules/src/system-agent-tools.ts",
+      "packages/database/src/agent-runtime-schema.test.ts"
     ],
     documentation: [
       "docs/architecture/ai-runtime.md",
       "docs/architecture/mcp-business-capabilities.md",
       "docs/platform/agent-runtime.md",
-      "docs/platform/agent-tools.md"
+      "docs/platform/agent-tools.md",
+      "docs/platform/agent-tool-approval.md",
+      "docs/platform/agent-tool-sandbox.md",
+      "docs/platform/agent-production-store.md",
+      "docs/platform/agent-run-reattachment.md",
+      "docs/platform/background-ai-operations.md",
+      "docs/platform/document-ai-runtime.md",
+      "docs/platform/speech-ai-runtime.md",
+      "docs/platform/embedding-ai-runtime.md"
+    ],
+    schemaFiles: ["packages/database/src/schema/agent-runtime.ts"],
+    databaseTables: [
+      "agent_operation_releases",
+      "agent_runtime_runs",
+      "agent_runtime_events",
+      "agent_evaluation_results",
+      "agent_run_bindings"
     ]
   },
   {
@@ -267,7 +293,11 @@ var optionalModuleManifests = [
       "apps/server/src/scheduler",
       "apps/server/src/jobs",
       "apps/server/src/application-services.ts",
+      "apps/server/src/module-host/durable-context.ts",
+      "apps/server/src/module-host/durable-context.test.ts",
+      "apps/server/src/module-host/job-port.test.ts",
       "apps/server/src/module-host/task-definitions.ts",
+      "packages/database/src/schema-durable-recovery.test.ts",
       "apps/web/src/pages/system/components/SchedulerOperationsPanel.vue",
       "apps/web/src/pages/system/components/SchedulerOperationsPanel.webtest.ts",
       "apps/web/src/pages/system/components/SchedulerRunTable.vue",
@@ -401,6 +431,11 @@ var optionalModuleManifests = [
     ]),
     fileRoots: [
       "apps/server/src/data-governance",
+      "apps/server/src/module-host/governed-resource-routes.ts",
+      "apps/server/src/module-host/governed-export-routes.ts",
+      "apps/server/src/module-host/governed-export-route-support.ts",
+      "apps/server/src/module-host/governed-export-routes.test.ts",
+      "apps/server/src/module-host/governed-resources.test.ts",
       "packages/modules/src/system-api-data-governance.ts",
       "packages/modules/src/system-data-governance.ts",
       "packages/modules/src/system-governed-export-bindings.ts",
@@ -426,6 +461,7 @@ var optionalModuleManifests = [
     ],
     documentation: ["docs/development/example-work-order.md"],
     schemaFiles: ["packages/example-work-order/src/drizzle-schema.ts"],
+    migrationRoots: ["packages/example-work-order/drizzle"],
     databaseTables: ["work_orders"],
     databaseLineageOwner: "module"
   }
@@ -435,6 +471,7 @@ function module(name, label, description, dependencies) {
   return {
     name,
     version: "0.1.0",
+    windyRange: "^0.3.0",
     label,
     description,
     selection,
@@ -445,11 +482,15 @@ function module(name, label, description, dependencies) {
     fileRoots: [],
     documentation: [],
     schemaFiles: [],
+    migrationRoots: [],
     databaseTables: [],
     databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
-    uninstallPolicy: "retain-data"
+    uninstallPolicy: "retain-data",
+    installRecipe: `module-${name}-install`,
+    updateRecipes: [`module-${name}-update-0.1.0`],
+    uninstallRecipe: `module-${name}-uninstall`
   };
 }
 
@@ -507,7 +548,7 @@ var platformModules = [
       {
         sourceName: "@southwind-ai/license",
         name: "@southwind-ai/license",
-        version: "^0.1.3"
+        version: "^0.1.4"
       }
     ],
     fileRoots: [
@@ -654,6 +695,7 @@ function module2(name, label, description, selection, dependencies = []) {
   return {
     name,
     version: "0.1.0",
+    windyRange: "^0.3.0",
     label,
     description,
     selection,
@@ -664,11 +706,15 @@ function module2(name, label, description, selection, dependencies = []) {
     fileRoots: [],
     documentation: [],
     schemaFiles: [],
+    migrationRoots: [],
     databaseTables: [],
     databaseLineageOwner: "platform",
     transientDatabaseTables: [],
     databaseStatementTokens: [],
-    uninstallPolicy: "retain-data"
+    uninstallPolicy: "retain-data",
+    installRecipe: `module-${name}-install`,
+    updateRecipes: [`module-${name}-update-0.1.0`],
+    uninstallRecipe: `module-${name}-uninstall`
   };
 }
 function validateCatalog(manifests) {
@@ -689,6 +735,12 @@ function validateCatalog(manifests) {
       if (!names.has(conflict))
         throw new Error(`${manifest.name} \u51B2\u7A81\u6A21\u5757\u672A\u77E5\uFF1A${conflict}`);
     }
+    if (!manifest.installRecipe) {
+      throw new Error(`${manifest.name} \u7F3A\u5C11\u5B89\u88C5 recipe`);
+    }
+    if (!manifest.uninstallRecipe) {
+      throw new Error(`${manifest.name} \u7F3A\u5C11\u5378\u8F7D recipe`);
+    }
   }
   return manifests;
 }
@@ -773,6 +825,11 @@ var helpText = `create-windy <\u9879\u76EE\u540D> [\u9009\u9879]
   create-windy update --check [--cwd <\u76EE\u5F55>]
   create-windy update --dry-run [--to <\u7248\u672C>] [--cwd <\u76EE\u5F55>]
   create-windy update [--to <\u7248\u672C>] [--cwd <\u76EE\u5F55>]
+  create-windy module list [--cwd <\u76EE\u5F55>]
+  create-windy module add <key...> [--dry-run] [--cwd <\u76EE\u5F55>]
+  create-windy module update [key...] [--dry-run] [--cwd <\u76EE\u5F55>]
+  create-windy module remove <key...> [--dry-run] [--data-disposition <\u7B56\u7565>]
+    [--data-plan <\u6587\u4EF6>] [--confirm-data-disposition] [--cwd <\u76EE\u5F55>]
   create-windy reconcile --to <\u7CBE\u786E\u7248\u672C> [--cwd <\u76EE\u5F55>] [--apply]
   create-windy schema handoff [--config <JSON>] [--cwd <\u76EE\u5F55>]
 
@@ -962,6 +1019,9 @@ async function initializeLocalEnvironment(projectRoot, generateSecret = defaultS
   if (/^AGENT_SERVER_INTERNAL_TOKEN=[ \t\r]*$/m.test(content)) {
     content = setEmptyVariable(content, "AGENT_SERVER_INTERNAL_TOKEN", generateSecret());
   }
+  if (/^AI_ARTIFACT_ENCRYPTION_SECRET=[ \t\r]*$/m.test(content)) {
+    content = setEmptyVariable(content, "AI_ARTIFACT_ENCRYPTION_SECRET", generateSecret());
+  }
   let handle;
   try {
     handle = await open(target, "wx", 384);
@@ -979,7 +1039,11 @@ async function initializeLocalEnvironment(projectRoot, generateSecret = defaultS
   return "created";
 }
 function setEmptyVariable(source, key, value) {
-  if (value.length < 12 || /\s|=/.test(value)) {
+  const minimumLength = [
+    "AGENT_SERVER_INTERNAL_TOKEN",
+    "AI_ARTIFACT_ENCRYPTION_SECRET"
+  ].includes(key) ? 32 : 12;
+  if (value.length < minimumLength || /\s|=/.test(value)) {
     throw new Error(`${key} \u7684\u968F\u673A\u503C\u4E0D\u6EE1\u8DB3\u672C\u5730\u5BC6\u7801\u5B89\u5168\u8981\u6C42`);
   }
   const pattern = new RegExp(`^${key}=[ \\t\\r]*$`, "m");
@@ -3212,9 +3276,9 @@ MCP \u6BCF\u6B21\u8C03\u7528\u90FD\u4F1A\u91CD\u65B0\u6267\u884C Feature\u3001RB
 \u548C \`dev:agent\` \u662F\u53E6\u4E00\u6761\u53EF\u9009\u94FE\u8DEF\u3002\u5B8C\u6574\u8FB9\u754C\u89C1
 [MCP \u4E1A\u52A1\u80FD\u529B](./docs/architecture/mcp-business-capabilities.md) \u4E0E
 [Agent Tool](./docs/platform/agent-tools.md)\u3002` : `\u5F53\u524D\u7EC4\u5408\u672A\u5305\u542B \`system.agent\`\uFF0CMCP Server\u3001Agent Tool Host \u548C\u76F8\u5173\u6587\u6863\u5DF2\u88AB
-\u7269\u7406\u88C1\u526A\u3002\u82E5\u9879\u76EE\u5C1A\u53EF\u91CD\u65B0\u751F\u6210\uFF0C\u8BF7\u5728\u521B\u5EFA\u65F6\u589E\u52A0 \`--module system.agent\` \u6216\u4F7F\u7528
-\`--all-modules\`\uFF1B\u90E8\u7F72\u540E\u7684\u901A\u7528 \`module add\` \u5C1A\u672A\u4EA4\u4ED8\uFF0C\u4E0D\u8981\u624B\u5DE5\u590D\u5236 MCP Adapter
-\u6216\u53E6\u5EFA\u6388\u6743\u94FE\u3002\u4ED3\u5E93 Skill \u4ECD\u53EF\u7528\u4E8E\u666E\u901A\u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\u3002`}
+\u7269\u7406\u88C1\u526A\u3002\u521B\u5EFA\u65F6\u53EF\u589E\u52A0 \`--module system.agent\` \u6216\u4F7F\u7528 \`--all-modules\`\uFF1B\u5DF2\u90E8\u7F72
+\u9879\u76EE\u4F7F\u7528 \`bun run windy module add system.agent\`\uFF0C\u4E0D\u8981\u624B\u5DE5\u590D\u5236 MCP Adapter \u6216
+\u53E6\u5EFA\u6388\u6743\u94FE\u3002\u4ED3\u5E93 Skill \u4ECD\u53EF\u7528\u4E8E\u666E\u901A\u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\u3002`}
 `;
 }
 
@@ -3266,7 +3330,13 @@ var starterComposeBase = `services:
       PLATFORM_ENABLE_AI: \${PLATFORM_ENABLE_AI:-false}
       AGENT_SERVER_URL: http://agent-server:8080
       AGENT_TOOL_HOST_URL: http://server:9747
+__TOOL_SANDBOX_SERVER_ENV__
       AGENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+      AI_ARTIFACT_URL: http://server:9747/api/internal/ai/artifacts
+      AI_ARTIFACT_ENCRYPTION_SECRET: \${AI_ARTIFACT_ENCRYPTION_SECRET:-}
+      DOCUMENT_SERVER_URL: \${DOCUMENT_SERVER_URL:-}
+      SPEECH_SERVER_URL: \${SPEECH_SERVER_URL:-}
+      EMBEDDING_SERVER_URL: \${EMBEDDING_SERVER_URL:-}
 __OPENSEARCH_SERVER_ENV__
     ports:
       - "9747:9747"
@@ -3274,6 +3344,7 @@ __OPENSEARCH_SERVER_ENV__
       - ./apps/server:/app/apps/server
       - ./packages:/app/packages
       - server-audit-data:/app/data/audit
+__TOOL_SANDBOX_SERVER_VOLUME__
     depends_on:
       migrate:
         condition: service_completed_successfully
@@ -3337,7 +3408,53 @@ var openSearchComposeService = `  opensearch:
       retries: 12
 
 `;
-var agentComposeService = `  agent-server:
+var agentComposeService = `  tool-sandbox-init:
+    profiles: ["agent"]
+    build:
+      context: .
+      dockerfile: apps/server/Dockerfile
+    user: "0:0"
+    command:
+      [
+        "sh",
+        "-c",
+        "chmod 0700 /run/windy-tool-sandbox && chown 1000:1000 /run/windy-tool-sandbox",
+      ]
+    network_mode: none
+    read_only: true
+    cap_drop: ["ALL"]
+    cap_add: ["CHOWN"]
+    security_opt:
+      - no-new-privileges:true
+    volumes:
+      - tool-sandbox-ipc:/run/windy-tool-sandbox
+    healthcheck:
+      disable: true
+
+  tool-sandbox:
+    profiles: ["agent"]
+    build:
+      context: .
+      dockerfile: apps/server/Dockerfile
+    command: ["bun", "run", "apps/server/src/agent/sandbox-worker.ts"]
+    environment:
+      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock
+    network_mode: none
+    read_only: true
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,nodev,size=16m
+    cap_drop: ["ALL"]
+    security_opt:
+      - no-new-privileges:true
+    volumes:
+      - tool-sandbox-ipc:/run/windy-tool-sandbox
+    depends_on:
+      tool-sandbox-init:
+        condition: service_completed_successfully
+    healthcheck:
+      disable: true
+
+  agent-server:
     profiles: ["agent"]
     build:
       context: .
@@ -3345,6 +3462,10 @@ var agentComposeService = `  agent-server:
     environment:
       AGENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
       AGENT_RUN_STORE_PATH: /app/data/agent/runs.sqlite3
+      AGENT_DATABASE_URL: postgresql://windy:\${POSTGRES_PASSWORD}@postgres:5432/windy
+      AGENT_RUN_ENCRYPTION_SECRET: \${AGENT_RUN_ENCRYPTION_SECRET:-}
+      OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: \${OTEL_EXPORTER_OTLP_TRACES_ENDPOINT:-}
+      OTEL_EXPORTER_OTLP_HEADERS: \${OTEL_EXPORTER_OTLP_HEADERS:-}
       AI_PROVIDER_AUDIT_STORE_PATH: /app/data/agent/provider-audit.sqlite3
       AI_PROVIDER_AUDIT_RETENTION_DAYS: \${AI_PROVIDER_AUDIT_RETENTION_DAYS:-90}
       QWEN_API_URL: \${QWEN_API_URL:-}
@@ -3354,8 +3475,75 @@ var agentComposeService = `  agent-server:
       AI_PROVIDER_CONNECT_TIMEOUT_MS: \${AI_PROVIDER_CONNECT_TIMEOUT_MS:-5000}
       AI_PROVIDER_REQUEST_TIMEOUT_MS: \${AI_PROVIDER_REQUEST_TIMEOUT_MS:-60000}
       AI_PROVIDER_MAX_RESPONSE_BYTES: \${AI_PROVIDER_MAX_RESPONSE_BYTES:-2097152}
+      AI_PROVIDER_CAPABILITIES: \${AI_PROVIDER_CAPABILITIES:-text-generation}
+      AI_PROVIDER_INPUT_MODALITIES: \${AI_PROVIDER_INPUT_MODALITIES:-text}
     volumes:
       - agent-run-data:/app/data/agent
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      server:
+        condition: service_started
+
+  document-server:
+    profiles: ["document"]
+    build:
+      context: .
+      dockerfile: apps/document-server/Dockerfile
+    environment:
+      DOCUMENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+      DOCUMENT_RUN_STORE_PATH: /app/data/document/runs.sqlite3
+      DOCUMENT_ARTIFACT_URL: \${DOCUMENT_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      DOCUMENT_ADAPTER_URL: \${DOCUMENT_ADAPTER_URL:-}
+      DOCUMENT_ADAPTER_TOKEN: \${DOCUMENT_ADAPTER_TOKEN:-}
+      DOCUMENT_DEPLOYMENT_KEY: \${DOCUMENT_DEPLOYMENT_KEY:-}
+      DOCUMENT_ADAPTER_CAPABILITIES: \${DOCUMENT_ADAPTER_CAPABILITIES:-document.ocr,document.layout,document.table}
+      DOCUMENT_MAX_UNITS: \${DOCUMENT_MAX_UNITS:-500}
+    volumes:
+      - document-run-data:/app/data/document
+    depends_on:
+      server:
+        condition: service_started
+
+  speech-server:
+    profiles: ["speech"]
+    build:
+      context: .
+      dockerfile: apps/speech-server/Dockerfile
+    environment:
+      SPEECH_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+      SPEECH_RUN_STORE_PATH: /app/data/speech/runs.sqlite3
+      SPEECH_ARTIFACT_URL: \${SPEECH_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      SPEECH_ADAPTER_URL: \${SPEECH_ADAPTER_URL:-}
+      SPEECH_ADAPTER_TOKEN: \${SPEECH_ADAPTER_TOKEN:-}
+      SPEECH_DEPLOYMENT_KEY: \${SPEECH_DEPLOYMENT_KEY:-}
+      SPEECH_ADAPTER_CAPABILITIES: \${SPEECH_ADAPTER_CAPABILITIES:-speech.transcribe.batch,speech.normalize,speech.vad,speech.timestamps}
+      SPEECH_MAX_UNITS: \${SPEECH_MAX_UNITS:-100000}
+      SPEECH_MAX_MEDIA_DURATION_SECONDS: \${SPEECH_MAX_MEDIA_DURATION_SECONDS:-86400}
+    volumes:
+      - speech-run-data:/app/data/speech
+    depends_on:
+      server:
+        condition: service_started
+
+  embedding-server:
+    profiles: ["embedding"]
+    build:
+      context: .
+      dockerfile: apps/embedding-server/Dockerfile
+    environment:
+      EMBEDDING_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+      EMBEDDING_ARTIFACT_URL: \${EMBEDDING_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      EMBEDDING_ADAPTER_URL: \${EMBEDDING_ADAPTER_URL:-}
+      EMBEDDING_ADAPTER_TOKEN: \${EMBEDDING_ADAPTER_TOKEN:-}
+      EMBEDDING_DEPLOYMENT_KEY: \${EMBEDDING_DEPLOYMENT_KEY:-}
+      EMBEDDING_DEPLOYMENT_ALIAS: \${EMBEDDING_DEPLOYMENT_ALIAS:-}
+      EMBEDDING_MODEL: \${EMBEDDING_MODEL:-}
+      EMBEDDING_MODEL_VERSION: \${EMBEDDING_MODEL_VERSION:-}
+      EMBEDDING_DIMENSIONS: \${EMBEDDING_DIMENSIONS:-}
+      EMBEDDING_NORMALIZED: \${EMBEDDING_NORMALIZED:-true}
+      EMBEDDING_CAPABILITIES: \${EMBEDDING_CAPABILITIES:-embedding.text}
+      EMBEDDING_MAX_UNITS: \${EMBEDDING_MAX_UNITS:-256}
     depends_on:
       server:
         condition: service_started
@@ -3402,16 +3590,20 @@ var agentComposeService = `  agent-server:
 function starterComposeFor(includeAgent, includeSearch = true) {
   return starterComposeBase.replace(`  web:
 `, `${includeAgent ? agentComposeService : ""}  web:
-`).replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
+`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
       OPENSEARCH_USERNAME: \${OPENSEARCH_USERNAME:-}
       OPENSEARCH_PASSWORD: \${OPENSEARCH_PASSWORD:-}
       OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", [
     includeAgent ? "  agent-run-data:" : "",
+    includeAgent ? "  tool-sandbox-ipc:" : "",
+    includeAgent ? "  document-run-data:" : "",
+    includeAgent ? "  speech-run-data:" : "",
     includeSearch ? "  opensearch-data:" : ""
   ].filter(Boolean).join(`
 `));
 }
 var starterCompose = starterComposeFor(true);
+// src/runtime-environment-example.ts
 function environmentExample(includeExample, includeAgent = true, includeSearch = true) {
   return `# \u590D\u5236\u4E3A .env \u540E\u586B\u5199\u3002\u4E0D\u8981\u63D0\u4EA4\u771F\u5B9E\u5BC6\u7801\u3002
 POSTGRES_PASSWORD=
@@ -3421,10 +3613,47 @@ ${includeAgent ? `
 # ADK Web \u8C03\u8BD5 profile \u4E0D\u8BFB\u53D6\u4EE5\u4E0B\u53D8\u91CF\uFF0C\u4E5F\u4E0D\u80FD\u8C03\u7528\u771F\u5B9E\u4E1A\u52A1 Operation \u6216 Tool\u3002
 PLATFORM_ENABLE_AI=false
 AGENT_SERVER_INTERNAL_TOKEN=
+AGENT_RUN_ENCRYPTION_SECRET=
+# \u591A\u526F\u672C\u751F\u4EA7\u9ED8\u8BA4\u4F7F\u7528 Compose \u6CE8\u5165\u7684 PostgreSQL\uFF1B\u7559\u7A7A\u624D\u56DE\u9000\u5355\u526F\u672C SQLite\u3002
+AGENT_DATABASE_URL=
+# \u53EF\u9009\uFF1A\u53EA\u53D1\u9001\u65E0 Prompt/\u8F93\u5165/\u8F93\u51FA\u7684 Agent Run \u5143\u6570\u636E Span\u3002
+OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=
+OTEL_EXPORTER_OTLP_HEADERS=
+AI_ARTIFACT_ENCRYPTION_SECRET=
+DOCUMENT_SERVER_URL=
+DOCUMENT_ARTIFACT_URL=
+DOCUMENT_ADAPTER_URL=
+DOCUMENT_ADAPTER_TOKEN=
+DOCUMENT_DEPLOYMENT_KEY=
+# DOCUMENT_ADAPTER_CAPABILITIES=document.ocr,document.layout,document.table
+# DOCUMENT_MAX_UNITS=500
+SPEECH_SERVER_URL=
+SPEECH_ARTIFACT_URL=
+SPEECH_ADAPTER_URL=
+SPEECH_ADAPTER_TOKEN=
+SPEECH_DEPLOYMENT_KEY=
+# SPEECH_ADAPTER_CAPABILITIES=speech.transcribe.batch,speech.normalize,speech.vad,speech.timestamps
+# SPEECH_MAX_UNITS=100000
+# SPEECH_MAX_MEDIA_DURATION_SECONDS=86400
+EMBEDDING_SERVER_URL=
+EMBEDDING_ARTIFACT_URL=
+EMBEDDING_ADAPTER_URL=
+EMBEDDING_ADAPTER_TOKEN=
+EMBEDDING_DEPLOYMENT_KEY=
+EMBEDDING_DEPLOYMENT_ALIAS=
+EMBEDDING_MODEL=
+EMBEDDING_MODEL_VERSION=
+EMBEDDING_DIMENSIONS=
+# EMBEDDING_NORMALIZED=true
+# EMBEDDING_CAPABILITIES=embedding.text,embedding.image
+# EMBEDDING_MAX_UNITS=256
 QWEN_API_URL=
 QWEN_API_KEY=
 QWEN_MODEL=
 AI_PROVIDER_HTTPS_HOST_ALLOWLIST=
+# VLM Deployment \u793A\u4F8B\uFF1Atext-generation,vision\uFF1B\u8F93\u5165\u6A21\u6001\uFF1Atext,image
+# AI_PROVIDER_CAPABILITIES=text-generation
+# AI_PROVIDER_INPUT_MODALITIES=text
 # AI_PROVIDER_AUDIT_RETENTION_DAYS=90
 # AI_PROVIDER_CONNECT_TIMEOUT_MS=5000
 # AI_PROVIDER_REQUEST_TIMEOUT_MS=60000
@@ -3448,7 +3677,7 @@ OPENSEARCH_PASSWORD=
 `;
 }
 // src/project-files.ts
-function starterDocsReadme(includeOfflineLicense = true, includeAgent = true) {
+function starterDocsReadme(includeOfflineLicense = true, includeAgent = true, includeOperations = true) {
   return `# Windy Starter \u6587\u6863
 
 \u672C\u76EE\u5F55\u53EA\u5305\u542B\u5BA2\u6237\u8FD0\u884C\u9879\u76EE\u9700\u8981\u7684\u5E73\u53F0\u67B6\u6784\u3001\u5F00\u53D1\u63A5\u5165\u548C\u8FD0\u7EF4\u53EF\u89C2\u6D4B\u6027\u6587\u6863\u3002
@@ -3458,10 +3687,12 @@ License \u7B7E\u53D1\u4E2D\u5FC3\u3001\u72EC\u7ACB\u7B7E\u540D\u670D\u52A1\u3001
 - \u67B6\u6784\uFF1A\u4ECE [Module Manifest \u7EC4\u5408](./architecture/module-manifest-composition.md) \u5F00\u59CB\u3002
 - \u6570\u636E\u5E93\uFF1A\u4E1A\u52A1\u8868\u4F7F\u7528 [Migration Bundle \u4E0E\u72EC\u7ACB Drizzle lineage](./architecture/migration-bundle.md)\u3002
 - \u5E73\u53F0\u5F00\u53D1\uFF1A\u4ECE [\u7CFB\u7EDF CRUD API](./platform/system-crud-api.md) \u548C [CRUD \u751F\u6210\u5668](./development/crud-generator.md) \u5F00\u59CB\u3002
+- Web \u4E1A\u52A1\u9875\u9762\uFF1A[project-owned \u4E1A\u52A1 Web \u8DEF\u7531](./development/business-web-routes.md)\u3002
+- \u90E8\u7F72\u671F\u6A21\u5757\u7BA1\u7406\uFF1A[\u6A21\u5757\u751F\u547D\u5468\u671F](./development/module-lifecycle.md)\u3002
 - \u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\uFF1A[windy-business-module Skill](../.agents/skills/windy-business-module/SKILL.md)\u3002
 ${includeOfflineLicense ? "- License \u6D88\u8D39\u7AEF\uFF1A[\u79BB\u7EBF\u6FC0\u6D3B\u4E0E\u5B89\u88C5\u534F\u8BAE](./license/license-offline-activation-code.md)\uFF1B\u8FD0\u884C\u65F6\u80FD\u529B\u7531 npm \u4F9D\u8D56 `@southwind-ai/license` \u63D0\u4F9B\u3002" : ""}
-- \u8FD0\u7EF4\uFF1A[\u53EF\u89C2\u6D4B\u6027](./operations/observability.md) \u4E0E [\u8FD0\u7EF4\u603B\u89C8](./platform/operations-overview.md)\u3002
-${includeAgent ? "- Agent \u4E0E MCP\uFF1A[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
+- \u8FD0\u7EF4\uFF1A[\u53EF\u89C2\u6D4B\u6027](./operations/observability.md)${includeOperations ? " \u4E0E [\u8FD0\u7EF4\u603B\u89C8](./platform/operations-overview.md)" : ""}\u3002
+${includeAgent ? "- Agent\u3001\u591A\u6A21\u6001 Runtime \u4E0E MCP\uFF1A[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Document AI Runtime](./platform/document-ai-runtime.md)\u3001[Speech AI Runtime](./platform/speech-ai-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
 - \u517C\u5BB9\uFF1A[RuoYi-Vue Adapter](./adapters/ruoyi-vue-compatibility.md)\u3002
 `;
 }
@@ -3469,7 +3700,7 @@ function starterReadme(projectName, includeExample = true, includeOxc = true, pr
   const selected = new Set(selectedModules);
   const includeAgent = selected.has("system.agent");
   const includeSearch = selected.has("system.search");
-  const moduleRows = moduleDistributionCatalog.map(({ name, description, selection }) => `| \`${name}\` | ${selected.has(name) ? "\u5DF2\u5305\u542B" : "\u672A\u5305\u542B"} | ${selection === "required" ? "H0" : "H2"} | ${description} |`).join(`
+  const moduleRows = moduleDistributionCatalog.map(({ name, description, selection }) => `| \`${name}\` | ${selected.has(name) ? "\u5DF2\u5305\u542B" : "\u672A\u5305\u542B"} | ${selection === "required" ? "H0" : name === "work-order" ? "H3" : "H2"} | ${description} |`).join(`
 `);
   return `# ${projectName}
 
@@ -3543,6 +3774,30 @@ bun run dev:agent
 \`AI_PROVIDER_HTTPS_HOST_ALLOWLIST\`\u3002\u8FD0\u884C\u4E0E\u6A21\u5757
 \u63A5\u5165\u7EC6\u8282\u89C1 [Agent Runtime \u63A5\u5165](./docs/platform/agent-runtime.md)\u3002
 
+Document Runtime \u540C\u6837\u9ED8\u8BA4\u5173\u95ED\u3002\u914D\u7F6E\u81F3\u5C11 32 \u5B57\u7B26\u7684
+\`AI_ARTIFACT_ENCRYPTION_SECRET\`\u3001\u672C\u5730\u6216\u5185\u7F51 \`DOCUMENT_ADAPTER_URL\` \u53CA\u5176
+capability \u540E\u8FD0\u884C\uFF1A
+
+\`\`\`bash
+bun run dev:document
+\`\`\`
+
+\u8BE5 profile \u53EA\u63A5\u53D7\u5E73\u53F0\u7B7E\u53D1\u7684\u77ED\u65F6 opaque ArtifactRef\uFF1B\u4E1A\u52A1\u4E0D\u5F97\u4F20 Base64\u3001\u5BBF\u4E3B\u8DEF\u5F84\u6216
+\u4EFB\u610F\u516C\u7F51 URL\u3002\u672A\u914D\u7F6E Document Adapter \u65F6\u4EC5\u5BF9\u5E94 Operation \u8FD4\u56DE\u7A33\u5B9A unavailable\uFF0C
+\u666E\u901A\u4E1A\u52A1\u4E0E\u6587\u672C Agent \u4E0D\u53D7\u5F71\u54CD\u3002\u8BE6\u89C1
+[Document AI Runtime](./docs/platform/document-ai-runtime.md)\u3002
+
+\u6279\u91CF\u8BED\u97F3\u8F6C\u5199\u4F7F\u7528\u72EC\u7ACB Speech profile\u3002\u914D\u7F6E\u672C\u5730/\u5185\u7F51
+\`SPEECH_ADAPTER_URL\` \u4E0E capability \u540E\u8FD0\u884C\uFF1A
+
+\`\`\`bash
+bun run dev:speech
+\`\`\`
+
+Speech Runtime \u53EA\u63A5\u6536\u6388\u6743 Artifact\uFF0C\u8D1F\u8D23\u683C\u5F0F\u5F52\u4E00\u5316\u3001VAD/\u65F6\u95F4\u6233\u5951\u7EA6\u3001\u7A33\u5B9A\u5206\u6BB5\u4E0E\u7ED3\u679C
+Artifact\uFF1B\u5B9E\u65F6 ASR\u3001TTS \u548C Dictation \u5C1A\u672A\u5F00\u653E\u3002\u8BE6\u89C1
+[Speech AI Runtime](./docs/platform/speech-ai-runtime.md)\u3002
+
 ADK Web \u4EC5\u7528\u4E8E\u672C\u673A\u5F00\u53D1\u8C03\u8BD5\uFF1A
 
 \`\`\`bash
@@ -3602,19 +3857,22 @@ create-windy \u5728\u672C\u673A \`.env\` \u4E2D\u968F\u673A\u751F\u6210\u7684 \`
 | \u6CD5\u5F8B\u8BB8\u53EF | \`${projectLicense}\` |
 
 \u5E73\u53F0\u5F53\u524D\u6CE8\u518C\u7684\u5168\u90E8\u6A21\u5757\u5982\u4E0B\u3002H0 \u8868\u793A profile \u9501\u5B9A\u6838\u5FC3\uFF1BH2 \u8868\u793A\u521B\u5EFA\u65F6\u53EF\u4EE5\u7269\u7406\u5305\u542B\u6216
-\u6392\u9664\uFF0C\u5E76\u5DF2\u6709\u751F\u6210\u3001\u7C7B\u578B\u68C0\u67E5\u3001\u6D4B\u8BD5\u548C\u6784\u5EFA\u8BC1\u636E\u3002H2 \u4E0D\u4EE3\u8868\u9879\u76EE\u90E8\u7F72\u540E\u5DF2\u7ECF\u652F\u6301\u65E0\u635F\u5B89\u88C5\u3001
-\u5347\u7EA7\u6216\u5378\u8F7D\uFF1B\u90A3\u9700\u8981 H3 \u7684\u751F\u547D\u5468\u671F\u547D\u4EE4\u4E0E\u6570\u636E\u5904\u7F6E\u8BC1\u636E\u3002
+\u6392\u9664\uFF1BH3 \u8FD8\u5177\u5907\u90E8\u7F72\u671F\u5B89\u88C5\u3001\u66F4\u65B0\u3001\u6570\u636E\u4FDD\u7559\u5378\u8F7D\u548C\u91CD\u88C5\u8BC1\u636E\u3002\u901A\u7528\u751F\u547D\u5468\u671F\u547D\u4EE4\u4F1A\u4FDD\u5B88
+\u5904\u7406\u6240\u6709\u76EE\u5F55\u6A21\u5757\uFF0C\u4F46\u53EA\u6709\u901A\u8FC7\u5B8C\u6574 H3 \u56DE\u5F52\u7684\u6A21\u5757\u624D\u6807\u8BB0\u4E3A H3\u3002
 
 | Module Key | \u5F53\u524D\u9879\u76EE | \u70ED\u63D2\u62D4\u53EF\u9760\u5EA6 | \u8BF4\u660E |
 | ---------- | -------- | ------------ | ---- |
 ${moduleRows}
 
 \u9879\u76EE\u81EA\u6709\u4E1A\u52A1\u6A21\u5757\u4EE5 \`apps/server/src/installed-business-modules.ts\` \u88C5\u914D\u7684 Module Manifest
-\u4E3A\u51C6\uFF1Bshared-scaffold README \u4E0D\u590D\u5236\u9879\u76EE\u4E1A\u52A1 Key\uFF0C\u907F\u514D\u5E73\u53F0\u5347\u7EA7\u56FA\u5316\u4EA7\u54C1\u547D\u540D\u3002
+\u4E3A\u51C6\uFF1B\u5BF9\u5E94 Vue \u9875\u9762\u5728 project-owned \u7684
+\`apps/web/src/app/business-routes.ts\` \u6CE8\u518C\uFF0C\u4FA7\u680F\u7EE7\u7EED\u4ECE\u670D\u52A1\u7AEF Manifest \u5FEB\u7167\u751F\u6210\u3002
+\u4E0D\u8981\u4E3A\u589E\u52A0\u4E1A\u52A1\u9875\u9762\u4FEE\u6539 shared-scaffold Router \u6216 AppSidebar\u3002shared-scaffold README
+\u4E0D\u590D\u5236\u9879\u76EE\u4E1A\u52A1 Key\uFF0C\u907F\u514D\u5E73\u53F0\u5347\u7EA7\u56FA\u5316\u4EA7\u54C1\u547D\u540D\u3002
 
 \u7CBE\u786E\u751F\u6210\u6765\u6E90\u548C\u9009\u62E9\u8BB0\u5F55\u5728 \`.windy/generation.json\`\u3002\u5F53\u524D\u7248\u672C\u5DF2\u63D0\u4F9B\u53EF\u56DE\u6EDA\u7684
-\`windy update\`\uFF1B\u901A\u7528 \`module add/remove\` \u5C1A\u672A\u4EA4\u4ED8\uFF0C\u4E0D\u8981\u628A Feature Flag \u5173\u95ED\u5F53\u6210
-\u6A21\u5757\u5DF2\u7ECF\u5378\u8F7D\u3002
+\`windy update\` \u4E0E \`windy module list/add/update/remove\`\u3002Feature Flag \u5173\u95ED\u4ECD\u4E0D
+\u7B49\u4E8E\u6A21\u5757\u5378\u8F7D\u3002
 
 ## \u5E38\u7528\u547D\u4EE4
 
@@ -3630,6 +3888,9 @@ bun run build
 bun run windy doctor
 bun run windy update --check
 bun run windy update --dry-run
+bun run windy module list
+bun run windy module add work-order --dry-run
+bun run windy module remove work-order --dry-run
 bun run windy reconcile --to <\u7CBE\u786E\u76EE\u6807\u7248\u672C>
 ${includeOxc ? `bun run lint
 bun run format` : "# \u672C\u9879\u76EE\u672A\u9884\u88C5 lint/format \u5DE5\u5177\uFF0C\u53EF\u6309\u56E2\u961F\u9700\u8981\u81EA\u884C\u9009\u62E9\u3002"}
@@ -3666,8 +3927,9 @@ create-windy \u9ED8\u8BA4\u5EFA\u7ACB \`main\` \u5206\u652F\u5E76\u521B\u5EFA \`
 \u6CA1\u6709\u914D\u7F6E Git \u7528\u6237\u8EAB\u4EFD\uFF0C\u6587\u4EF6\u4F1A\u4FDD\u7559\u5728\u6682\u5B58\u533A\uFF1B\u914D\u7F6E\u8EAB\u4EFD\u540E\u624B\u52A8\u63D0\u4EA4\u5373\u53EF\u3002
 
 \u5F53\u524D\u5DF2\u4EA4\u4ED8\u7684 Windy \u66F4\u65B0\u5668\u4F1A\u6839\u636E Project Lock \u548C\u6587\u4EF6\u6240\u6709\u6743\uFF0C\u4ECE npm \u5386\u53F2 artifact
-\u91CD\u5EFA Base \u5E76\u6267\u884C\u4E09\u65B9\u5408\u5E76\uFF1B\u5B83\u4E0D\u8FDE\u63A5\u79C1\u6709\u6E90\u4ED3\u5E93\uFF0C\u4E5F\u4E0D\u4F1A\u9759\u9ED8\u8986\u76D6\u9879\u76EE\u4EE3\u7801\u3002\u90E8\u7F72\u671F\u901A\u7528
-\`module add/update/remove\` \u5C1A\u672A\u4EA4\u4ED8\u3002
+\u91CD\u5EFA Base \u5E76\u6267\u884C\u4E09\u65B9\u5408\u5E76\uFF1B\u5B83\u4E0D\u8FDE\u63A5\u79C1\u6709\u6E90\u4ED3\u5E93\uFF0C\u4E5F\u4E0D\u4F1A\u9759\u9ED8\u8986\u76D6\u9879\u76EE\u4EE3\u7801\u3002\u6A21\u5757
+\u751F\u547D\u5468\u671F\u547D\u4EE4\u590D\u7528\u540C\u4E00\u8BA1\u5212\u3001\u4E8B\u52A1\u3001\u9A8C\u8BC1\u4E0E\u6062\u590D\u8FB9\u754C\uFF1B\u5378\u8F7D\u9ED8\u8BA4\u4FDD\u7559\u6570\u636E\u5E93\u6570\u636E\uFF0C\u5E76\u8981\u6C42
+\u663E\u5F0F\u786E\u8BA4\u6570\u636E\u5904\u7F6E\u8BA1\u5212\u3002
 
 ## License
 
@@ -3764,6 +4026,9 @@ var templateDirectories = [
   ".agents/skills/windy-business-module",
   "apps/server",
   "apps/agent-server",
+  "apps/document-server",
+  "apps/speech-server",
+  "apps/embedding-server",
   "apps/web",
   "examples",
   "packages/ai-client",
@@ -3784,23 +4049,32 @@ var templateDocumentationFiles = [
   "docs/architecture/ai-runtime.md",
   "docs/architecture/data-scope-query-enforcement.md",
   "docs/architecture/durable-jobs.md",
+  "docs/architecture/foundation-infrastructure.md",
   "docs/architecture/minimal-approval-workflow.md",
   "docs/architecture/mcp-business-capabilities.md",
   "docs/architecture/migration-bundle.md",
+  "docs/architecture/module-host.md",
   "docs/architecture/module-manifest-composition.md",
   "docs/architecture/object-storage.md",
   "docs/architecture/search-provider-protocol.md",
+  "docs/architecture/server-module-interface.md",
+  "docs/architecture/web-access-snapshot-resilience.md",
+  "docs/development/business-web-routes.md",
   "docs/development/crud-generator.md",
   "docs/development/custom-error-pages.md",
   "docs/development/custom-login-page.md",
+  "docs/development/module-lifecycle.md",
   "docs/license/license-offline-activation-code.md",
   "docs/operations/observability.md",
   "docs/platform/agent-tools.md",
   "docs/platform/agent-runtime.md",
+  "docs/platform/agent-tool-sandbox.md",
   "docs/platform/audit-reliability.md",
   "docs/platform/bulk-data-jobs.md",
   "docs/platform/business-user-directory.md",
   "docs/platform/data-access-control.md",
+  "docs/platform/document-ai-runtime.md",
+  "docs/platform/governed-export-renderers.md",
   "docs/platform/module-configuration.md",
   "docs/platform/navigation-registry.md",
   "docs/platform/notifications.md",
@@ -3809,7 +4083,9 @@ var templateDocumentationFiles = [
   "docs/platform/platform-authentication.md",
   "docs/platform/platform-shell-settings.md",
   "docs/platform/scheduled-task-executor.md",
+  "docs/platform/speech-ai-runtime.md",
   "docs/platform/system-crud-api.md",
+  "docs/platform/vision-ai-runtime.md",
   "docs/platform/web-system-crud.md",
   "docs/product/built-in-roles.md"
 ];
@@ -4030,7 +4306,7 @@ async function generateProject(input) {
   await writeFile8(join12(input.targetDirectory, "docker-compose.yml"), starterComposeFor(selectedModules.includes("system.agent"), selectedModules.includes("system.search")));
   await writeFile8(join12(input.targetDirectory, ".env.example"), environmentExample(includeExample, selectedModules.includes("system.agent"), selectedModules.includes("system.search")));
   await writeFile8(join12(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules));
-  await writeFile8(join12(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), selectedModules.includes("system.agent")));
+  await writeFile8(join12(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), selectedModules.includes("system.agent"), selectedModules.includes("system.operations")));
   await reflectCodeQualityChoice(input.targetDirectory, includeOxc);
   await applyWindyBaseLicense(input.targetDirectory);
   await applyProjectLicense(input.targetDirectory, projectLicense, input.licenseHolder);
@@ -5957,8 +6233,8 @@ function sentenceWithoutStop(value) {
 }
 
 // src/update/cli.ts
-import { rm as rm10 } from "fs/promises";
-import { resolve as resolve7 } from "path";
+import { rm as rm11 } from "fs/promises";
+import { resolve as resolve8 } from "path";
 
 // src/reconcile/managed-reconciler.ts
 import { rm as rm6 } from "fs/promises";
@@ -8366,8 +8642,51 @@ function isObject(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
+// src/update/planner-project-owned.ts
+function planGeneratedProjectOwned(path2, source, target, ours, theirs, expected) {
+  if (!source && target) {
+    return !ours && theirs ? ready(path2, "create", "\u6A21\u5757\u5B89\u88C5\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9", expected, theirs) : conflict(path2, "\u6A21\u5757\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
+  }
+  if (source && !target) {
+    if (!ours) {
+      return ready(path2, "preserve", "\u6A21\u5757\u8DEF\u5F84\u5DF2\u79FB\u9664", expected);
+    }
+    return hashContent(ours) === source.hash ? ready(path2, "delete", "\u6A21\u5757\u5378\u8F7D\u79FB\u9664\u672A\u4FEE\u6539\u6269\u5C55\u70B9", expected) : conflict(path2, "\u5BA2\u6237\u4FEE\u6539\u8FC7\u6A21\u5757\u6269\u5C55\u70B9\uFF0C\u62D2\u7EDD\u5378\u8F7D", expected);
+  }
+  if (!source || !target || !ours || !theirs) {
+    return ready(path2, "preserve", "\u9879\u76EE\u62E5\u6709\uFF0C\u6A21\u5757\u7EC4\u5408\u672A\u6539\u53D8", expected);
+  }
+  if (hashContent(ours) === target.hash) {
+    return ready(path2, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u6A21\u5757\u7EC4\u5408", expected);
+  }
+  if (source.hash === target.hash) {
+    return ready(path2, "preserve", "\u6A21\u5757\u7EC4\u5408\u672A\u6539\u53D8", expected);
+  }
+  return hashContent(ours) === source.hash ? ready(path2, "update", "\u66F4\u65B0\u672A\u4FEE\u6539\u7684\u6A21\u5757\u7EC4\u5408\u6269\u5C55\u70B9", expected, theirs) : conflict(path2, "\u5BA2\u6237\u4FEE\u6539\u8FC7\u6A21\u5757\u7EC4\u5408\u6269\u5C55\u70B9", expected);
+}
+function ready(path2, action, reason, expectedProjectContent, content) {
+  return {
+    path: path2,
+    ownership: "project-owned",
+    action,
+    reason,
+    expectedProjectContent,
+    content
+  };
+}
+function conflict(path2, reason, expectedProjectContent) {
+  return {
+    path: path2,
+    ownership: "project-owned",
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent,
+    conflict: reason
+  };
+}
+
 // src/update/planner-file.ts
-async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride) {
+async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false) {
   const [base, theirs] = await Promise.all([
     readOptional(join19(baseRoot, path2)),
     targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional(join19(targetRoot, path2))
@@ -8375,6 +8694,9 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   const ownership = source?.ownership === "project-owned" ? source.ownership : target?.ownership || source?.ownership || classifyOwnership(path2);
   const expected = expectationForSnapshot(ours);
   if (ownership === "project-owned") {
+    if (manageGeneratedProjectOwned) {
+      return planGeneratedProjectOwned(path2, source, target, ours, theirs, expected);
+    }
     return !source && !ours && theirs ? readyPlannedFile(path2, ownership, "create", "\u65B0\u589E\u9879\u76EE\u6269\u5C55\u70B9", expected, theirs) : readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u62E5\u6709\uFF0CWindy \u4E0D\u8986\u76D6", expected);
   }
   const repaired = ours && theirs ? repairKnownDerivedFile({
@@ -8389,26 +8711,26 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
     if (source && !target) {
-      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+      return conflict2(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
     }
     if (source && target && source.hash !== target.hash) {
-      return conflict(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
+      return conflict2(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
     }
   }
   if (!source && target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
     }
-    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
+    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict2(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
   }
   if (source && !target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
     }
-    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
+    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict2(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
   }
   if (!source || !target || !ours || !theirs) {
-    return conflict(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
+    return conflict2(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
   }
   const oursChanged = hashContent(ours) !== source.hash;
   const sourceArtifactHash = artifactHashOf(source);
@@ -8428,13 +8750,13 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict2(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (ownership === "shared-scaffold" && base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict2(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
-  return conflict(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
+  return conflict2(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
 }
 function targetChangedSinceBase(sourceHash, base, target) {
   return base && target ? hashContent(base) !== hashContent(target) : !!target && hashContent(target) !== sourceHash;
@@ -8452,7 +8774,7 @@ function readyPlannedFile(path2, ownership, action, reason, expectedProjectConte
 function expectationForSnapshot(content) {
   return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
 }
-function conflict(path2, ownership, reason, expectedProjectContent) {
+function conflict2(path2, ownership, reason, expectedProjectContent) {
   return {
     path: path2,
     ownership,
@@ -8633,7 +8955,10 @@ var recipes = [
   { id: "starter-0.2.33-to-0.2.34", from: "0.2.33", to: "0.2.34" },
   { id: "starter-0.2.34-to-0.3.0", from: "0.2.34", to: "0.3.0" },
   { id: "starter-0.3.0-to-0.3.1", from: "0.3.0", to: "0.3.1" },
-  { id: "starter-0.3.1-to-0.3.2", from: "0.3.1", to: "0.3.2" }
+  { id: "starter-0.3.1-to-0.3.2", from: "0.3.1", to: "0.3.2" },
+  { id: "starter-0.3.2-to-0.3.3", from: "0.3.2", to: "0.3.3" },
+  { id: "starter-0.3.3-to-0.3.4", from: "0.3.3", to: "0.3.4" },
+  { id: "starter-0.3.4-to-0.3.5", from: "0.3.4", to: "0.3.5" }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
   if (sourceVersion === targetVersion)
@@ -8674,13 +8999,15 @@ async function createUpdatePlan(request, artifacts) {
   const expectedManifestHash = hashContent(await readFile17(manifestPath));
   const generationSnapshot = await readGenerationProvenanceSnapshot(request.projectDirectory);
   const provenance = generationSnapshot.provenance;
-  const artifactSet = await artifacts.prepare(request.projectDirectory, provenance);
+  const artifactSet = await artifacts.prepare(request.projectDirectory, provenance, request.targetModules);
   const targetProvenance = await readGenerationProvenance(artifactSet.targetDirectory);
   const targetVersion = request.targetVersion || targetProvenance.generatorVersion;
   if (targetVersion !== targetProvenance.generatorVersion) {
     throw new Error(`\u5F53\u524D CLI \u53EA\u80FD\u66F4\u65B0\u5230 ${targetProvenance.generatorVersion}\uFF0C\u8BF7\u8FD0\u884C create-windy@${targetVersion}`);
   }
-  const recipes2 = resolveRecipeChain(provenance.windyVersion, targetVersion);
+  const versionRecipes = resolveRecipeChain(provenance.windyVersion, targetVersion);
+  const moduleRecipes = resolveModuleRecipeIds(request);
+  const recipes2 = [...versionRecipes.map(({ id }) => id), ...moduleRecipes];
   const [rawSourceManifest, rawTargetManifest] = await Promise.all([
     readManagedFilesManifest(request.projectDirectory),
     readManagedFilesManifest(artifactSet.targetDirectory)
@@ -8693,6 +9020,7 @@ async function createUpdatePlan(request, artifacts) {
     ...generatedTargetManifest.files.map(({ path: path2 }) => path2)
   ]);
   const workspaceSnapshot = await snapshotWorkspacePackages(request.projectDirectory, { allowMissingRoot: true });
+  const targetWorkspaceSnapshot = await snapshotWorkspacePackages(artifactSet.targetDirectory, { allowMissingRoot: true });
   const projectSnapshots = await snapshotProjectFiles(request.projectDirectory, initialPaths, workspaceSnapshot.manifests);
   projectSnapshots.set(generationMetadataFile, generationSnapshot.content);
   const projectModes = await snapshotProjectModes(request.projectDirectory, initialPaths);
@@ -8706,8 +9034,7 @@ async function createUpdatePlan(request, artifacts) {
   });
   const targetManifest = await carryReconciledBaselines(sourceManifest, migrations.targetManifest, projectSnapshots, artifactSet.targetDirectory);
   targetProvenance.appliedRecipes = [
-    ...provenance.appliedRecipes,
-    ...recipes2.map(({ id }) => id)
+    ...new Set([...provenance.appliedRecipes, ...recipes2])
   ];
   const sourceEntries = new Map(sourceManifest.files.map((item) => [item.path, item]));
   const targetEntries = new Map(targetManifest.files.map((item) => [item.path, item]));
@@ -8725,7 +9052,8 @@ async function createUpdatePlan(request, artifacts) {
     targetEntries,
     migrations,
     artifactSet,
-    provenance
+    provenance,
+    manageGeneratedProjectOwned: request.targetModules !== undefined
   });
   deriveWebDockerfilePlan(files, projectSnapshots, new Set([...paths, ...workspaceSnapshot.manifests.keys()]));
   for (const file of files) {
@@ -8772,18 +9100,33 @@ async function createUpdatePlan(request, artifacts) {
     projectDirectory: request.projectDirectory,
     sourceVersion: provenance.windyVersion,
     targetVersion,
-    recipes: recipes2.map(({ id }) => id),
+    recipes: recipes2,
     files,
     dependencyExpectations,
     workspaceMembershipExpectations: workspaceSnapshot.membershipExpectations,
+    finalWorkspaceMembershipExpectations: targetWorkspaceSnapshot.membershipExpectations,
     conflicts,
     detachedToolchain,
     targetProvenance,
     sourceManifest,
     targetManifest,
-    temporaryRoot: artifactSet.temporaryRoot
+    temporaryRoot: artifactSet.temporaryRoot,
+    lifecycle: request.lifecycle
   };
 }
+function resolveModuleRecipeIds(request) {
+  const lifecycle = request.lifecycle;
+  if (!lifecycle)
+    return [];
+  const catalog = new Map(moduleDistributionCatalog.map((manifest) => [manifest.name, manifest]));
+  if (lifecycle.action === "add") {
+    return lifecycle.addedModules.map((name) => catalog.get(name).installRecipe);
+  }
+  if (lifecycle.action === "remove") {
+    return lifecycle.removedModules.map((name) => catalog.get(name).uninstallRecipe);
+  }
+  return lifecycle.updatedModules.flatMap((name) => catalog.get(name).updateRecipes);
+}
 async function planFiles(input) {
   const files = [];
   for (const path2 of [...input.paths].sort()) {
@@ -8797,7 +9140,7 @@ async function planFiles(input) {
     } else if (forcedContent) {
       files.push(readyPlannedFile(path2, input.targetEntries.get(path2)?.ownership ?? input.sourceEntries.get(path2)?.ownership ?? classifyOwnership(path2), "update", "\u5408\u5E76\u5E73\u53F0\u4E0E\u4E0B\u6E38 migration \u5386\u53F2", expected, forcedContent));
     } else {
-      files.push(await planFile(path2, input.artifactSet.baseDirectory, input.artifactSet.targetDirectory, input.sourceEntries.get(path2), input.targetEntries.get(path2), ours, input.provenance, input.migrations.contentOverrides.get(path2)));
+      files.push(await planFile(path2, input.artifactSet.baseDirectory, input.artifactSet.targetDirectory, input.sourceEntries.get(path2), input.targetEntries.get(path2), ours, input.provenance, input.migrations.contentOverrides.get(path2), input.manageGeneratedProjectOwned));
     }
   }
   return files;
@@ -9514,23 +9857,113 @@ async function diagnoseProject(projectDirectory, repair = false) {
 }
 
 // src/update/updater.ts
-import { readFile as readFile23, rm as rm9 } from "fs/promises";
-import { join as join30 } from "path";
+import { readFile as readFile24, rm as rm9 } from "fs/promises";
+import { join as join31 } from "path";
 
 // src/update/artifacts.ts
-import { mkdtemp as mkdtemp3, readFile as readFile21 } from "fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile22 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { basename as basename8, join as join28 } from "path";
+import { basename as basename8, join as join29 } from "path";
+
+// src/module-history.ts
+import {
+  lstat as lstat5,
+  mkdir as mkdir7,
+  readdir as readdir8,
+  readFile as readFile21,
+  writeFile as writeFile11
+} from "fs/promises";
+import { dirname as dirname7, join as join28, relative as relative4, sep as sep4 } from "path";
+async function archiveRemovedModuleMigrations(input) {
+  await assertExistingHistoryIntegrity(input.projectDirectory);
+  let changed = await copyMigrationTree(input.projectDirectory, ".windy/module-history", join28(input.targetDirectory, ".windy/module-history"));
+  const target = new Set(input.targetModules);
+  const removed = moduleDistributionCatalog.filter(({ name }) => input.sourceModules.includes(name) && !target.has(name));
+  for (const manifest of removed) {
+    for (const root of manifest.migrationRoots) {
+      changed = await copyMigrationTree(input.projectDirectory, root, join28(input.targetDirectory, ".windy/module-history", manifest.name, root)) || changed;
+    }
+  }
+  if (changed) {
+    await writeManagedFilesManifest(input.targetDirectory, input.generatorVersion);
+  }
+}
+async function assertExistingHistoryIntegrity(projectDirectory) {
+  const historyRoot = join28(projectDirectory, ".windy/module-history");
+  const metadata = await readOptionalMetadata(historyRoot);
+  if (!metadata)
+    return;
+  if (metadata.isSymbolicLink() || !metadata.isDirectory()) {
+    throw new Error("\u6A21\u5757 migration \u5386\u53F2\u76EE\u5F55\u65E0\u6548");
+  }
+  const manifest = await readManagedFilesManifest(projectDirectory);
+  const expected = new Map(manifest.files.map((entry) => [entry.path, entry]));
+  for (const path2 of await collectRegularFiles(historyRoot)) {
+    const relativePath2 = relative4(projectDirectory, path2).split(sep4).join("/");
+    const entry = expected.get(relativePath2);
+    if (!entry || isMissingManagedFile(entry)) {
+      throw new Error(`\u6A21\u5757 migration \u5386\u53F2\u672A\u767B\u8BB0\u5230\u53D7\u7BA1\u6E05\u5355\uFF1A${relativePath2}`);
+    }
+    if (hashContent(await readFile21(path2)) !== entry.hash) {
+      throw new Error(`\u6A21\u5757 migration \u5386\u53F2\u5DF2\u88AB\u4FEE\u6539\uFF1A${relativePath2}`);
+    }
+  }
+}
+async function copyMigrationTree(projectRoot, relativeRoot, targetRoot) {
+  const sourceRoot = join28(projectRoot, relativeRoot);
+  const rootMetadata = await readOptionalMetadata(sourceRoot);
+  if (!rootMetadata)
+    return false;
+  if (rootMetadata.isSymbolicLink() || !rootMetadata.isDirectory()) {
+    throw new Error(`\u6A21\u5757 migration \u6839\u76EE\u5F55\u65E0\u6548\uFF1A${relativeRoot}`);
+  }
+  for (const source of await collectRegularFiles(sourceRoot)) {
+    const target = join28(targetRoot, relative4(sourceRoot, source).split(sep4).join("/"));
+    await mkdir7(dirname7(target), { recursive: true });
+    await writeFile11(target, await readFile21(source));
+  }
+  return true;
+}
+async function collectRegularFiles(root) {
+  const files = [];
+  await visit(root);
+  return files.sort();
+  async function visit(directory) {
+    for (const name of (await readdir8(directory)).sort()) {
+      const path2 = join28(directory, name);
+      const metadata = await lstat5(path2);
+      if (metadata.isSymbolicLink()) {
+        throw new Error(`\u6A21\u5757 migration \u4E0D\u5141\u8BB8\u7B26\u53F7\u94FE\u63A5\uFF1A${path2}`);
+      }
+      if (metadata.isDirectory())
+        await visit(path2);
+      else if (metadata.isFile())
+        files.push(path2);
+    }
+  }
+}
+async function readOptionalMetadata(path2) {
+  try {
+    return await lstat5(path2);
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return;
+    }
+    throw error;
+  }
+}
+
+// src/update/artifacts.ts
 class PublishedArtifactProvider {
   #fetch;
   constructor(fetcher = globalThis.fetch) {
     this.#fetch = fetcher;
   }
-  async prepare(projectDirectory, provenance) {
-    const temporaryRoot = await mkdtemp3(join28(tmpdir3(), "windy-update-"));
+  async prepare(projectDirectory, provenance, targetModules) {
+    const temporaryRoot = await mkdtemp3(join29(tmpdir3(), "windy-update-"));
     const projectName = await readProjectName3(projectDirectory);
-    const baseDirectory = join28(temporaryRoot, "base", projectName);
-    const targetDirectory = join28(temporaryRoot, "target", projectName);
+    const baseDirectory = join29(temporaryRoot, "base", projectName);
+    const targetDirectory = join29(temporaryRoot, "target", projectName);
     const baseArtifact = await downloadPublicArtifact(temporaryRoot, "base", provenance.generatorVersion, undefined, this.#fetch);
     if (baseArtifact.identity.templateCommit !== provenance.templateCommit) {
       throw new Error("Project Lock \u4E0E\u6765\u6E90 registry artifact \u7684 template commit \u4E0D\u4E00\u81F4");
@@ -9540,18 +9973,25 @@ class PublishedArtifactProvider {
       sourceRoot: await resolveTemplateRoot(),
       targetDirectory,
       projectName,
-      selectedModules: provenance.modules.map(({ name }) => name),
-      includeExample: provenance.choices.includeExample,
+      selectedModules: targetModules ?? provenance.modules.map(({ name }) => name),
+      includeExample: (targetModules ?? provenance.modules.map(({ name }) => name)).includes("work-order"),
       includeOxc: provenance.choices.includeOxc,
       projectLicense: provenance.legalLicense,
       licenseHolder: provenance.legalLicense === "MIT" ? "Windy project owner" : undefined,
       profile: provenance.profile
     });
+    await archiveRemovedModuleMigrations({
+      projectDirectory,
+      targetDirectory,
+      sourceModules: provenance.modules.map(({ name }) => name),
+      targetModules: targetModules ?? provenance.modules.map(({ name }) => name),
+      generatorVersion: (await readGenerationProvenance(targetDirectory)).generatorVersion
+    });
     return { temporaryRoot, baseDirectory, targetDirectory };
   }
 }
 async function readProjectName3(projectDirectory) {
-  const source = JSON.parse(await readFile21(join28(projectDirectory, "package.json"), "utf8"));
+  const source = JSON.parse(await readFile22(join29(projectDirectory, "package.json"), "utf8"));
   return source.name || basename8(projectDirectory);
 }
 
@@ -9618,9 +10058,9 @@ function frozenManifestHash(file, finalizedHashes) {
 }
 
 // src/update/format-stabilizer.ts
-import { mkdir as mkdir7, mkdtemp as mkdtemp4, readFile as readFile22, rm as rm8, writeFile as writeFile11 } from "fs/promises";
+import { mkdir as mkdir8, mkdtemp as mkdtemp4, readFile as readFile23, rm as rm8, writeFile as writeFile12 } from "fs/promises";
 import { tmpdir as tmpdir4 } from "os";
-import { dirname as dirname7, extname as extname4, join as join29, resolve as resolve6, sep as sep4 } from "path";
+import { dirname as dirname8, extname as extname4, join as join30, resolve as resolve6, sep as sep5 } from "path";
 var formattedExtensions = new Set([
   ".cjs",
   ".css",
@@ -9659,7 +10099,7 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
     }
   }
   inputs.set(".windy/generation.json", new TextEncoder().encode(generationContent));
-  const temporaryRoot = await mkdtemp4(join29(tmpdir4(), "windy-update-format-"));
+  const temporaryRoot = await mkdtemp4(join30(tmpdir4(), "windy-update-format-"));
   try {
     const stagedPaths = await stageInputs(temporaryRoot, inputs);
     for (let offset = 0;offset < stagedPaths.length; offset += 80) {
@@ -9667,14 +10107,14 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
         "x",
         "oxfmt",
         "--write",
-        `--config=${join29(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
+        `--config=${join30(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
         ...stagedPaths.slice(offset, offset + 80)
       ], result2.plan.projectDirectory);
     }
     const hashes = plannedContentHashes(result2);
     let formattedGeneration = generationContent;
     for (const [path2, original] of inputs) {
-      const formatted = await readFile22(safeTemporaryPath(temporaryRoot, path2));
+      const formatted = await readFile23(safeTemporaryPath(temporaryRoot, path2));
       if (path2 === ".windy/generation.json") {
         formattedGeneration = formatted.toString();
         continue;
@@ -9700,15 +10140,15 @@ async function stageInputs(temporaryRoot, inputs) {
   const paths = [];
   for (const [path2, content] of inputs) {
     const target = safeTemporaryPath(temporaryRoot, path2);
-    await mkdir7(dirname7(target), { recursive: true });
-    await writeFile11(target, content);
+    await mkdir8(dirname8(target), { recursive: true });
+    await writeFile12(target, content);
     paths.push(target);
   }
   return paths;
 }
 function safeTemporaryPath(root, path2) {
   const target = resolve6(root, path2);
-  if (!target.startsWith(`${resolve6(root)}${sep4}`)) {
+  if (!target.startsWith(`${resolve6(root)}${sep5}`)) {
     throw new Error(`\u683C\u5F0F\u5316\u8DEF\u5F84\u8D8A\u51FA\u4E34\u65F6\u76EE\u5F55\uFF1A${path2}`);
   }
   return target;
@@ -9771,7 +10211,7 @@ class DefaultStarterUpdater {
       const plannedPaths = new Set(result2.plan.files.map(({ path: path2 }) => path2));
       replaceExpectations(result2, verificationSnapshot.filter(({ path: path2 }) => !metadataPaths2.has(path2) && !plannedPaths.has(path2)));
       verificationExpectationsFrozen = true;
-      const packageJson = JSON.parse(await readFile23(join30(result2.plan.projectDirectory, "package.json"), "utf8"));
+      const packageJson = JSON.parse(await readFile24(join31(result2.plan.projectDirectory, "package.json"), "utf8"));
       for (const name of ["lint", "typecheck", "test", "build"]) {
         if (!packageJson.scripts?.[name]) {
           steps.push({ name: `bun run ${name}`, status: "skipped" });
@@ -9790,7 +10230,7 @@ class DefaultStarterUpdater {
         projectDirectory: result2.plan.projectDirectory,
         ownerToken: result2.transactionOwnerToken,
         expectations: result2.finalizationExpectations,
-        workspaceMembershipExpectations: result2.plan.workspaceMembershipExpectations
+        workspaceMembershipExpectations: result2.plan.finalWorkspaceMembershipExpectations ?? result2.plan.workspaceMembershipExpectations
       });
       return { updateId: result2.plan.id, status: "passed", steps, reportPath };
     } catch (error) {
@@ -9854,6 +10294,12 @@ async function writeReport(result2, steps, relativePath2) {
     `- \u6765\u6E90\u7248\u672C\uFF1A${result2.plan.sourceVersion}`,
     `- \u76EE\u6807\u7248\u672C\uFF1A${result2.plan.targetVersion}`,
     `- Recipe\uFF1A${result2.plan.recipes.join("\u3001") || "\u65E0"}`,
+    ...result2.plan.lifecycle ? [
+      `- \u6A21\u5757\u52A8\u4F5C\uFF1A${result2.plan.lifecycle.action}`,
+      `- \u8BF7\u6C42\u6A21\u5757\uFF1A${result2.plan.lifecycle.requestedModules.join("\u3001")}`,
+      `- \u6570\u636E\u5904\u7F6E\uFF1A${result2.plan.lifecycle.dataDisposition ?? "\u4E0D\u9002\u7528"}`,
+      `- \u6570\u636E\u5904\u7F6E\u6587\u6863\uFF1A${result2.plan.lifecycle.dataPlan ?? "\u65E0"}`
+    ] : [],
     `- \u4FEE\u6539\u6587\u4EF6\uFF1A${result2.changedFiles.length}`,
     `- Oxc \u4EE3\u7BA1\uFF1A${result2.plan.detachedToolchain ? "\u5DF2\u68C0\u6D4B\u5230\u5BA2\u6237\u63A5\u7BA1\u5E76\u4FDD\u7559" : "\u4FDD\u6301"}`,
     "",
@@ -9877,13 +10323,275 @@ function expectedForPath(result2, path2) {
   return expectation2.expected;
 }
 
+// src/module-lifecycle.ts
+import { access as access2, rm as rm10 } from "fs/promises";
+import { resolve as resolve7 } from "path";
+
+// src/module-version-range.ts
+function isVersionInCaretRange(version, range) {
+  const current = parseVersion2(version);
+  const base = range.startsWith("^") ? parseVersion2(range.slice(1)) : undefined;
+  if (!current || !base || compareVersion(current, base) < 0)
+    return false;
+  const upper = base[0] > 0 ? [base[0] + 1, 0, 0] : base[1] > 0 ? [0, base[1] + 1, 0] : [0, 0, base[2] + 1];
+  return compareVersion(current, upper) < 0;
+}
+function parseVersion2(value) {
+  const match = value.match(/^(\d+)\.(\d+)\.(\d+)$/);
+  if (!match)
+    return;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function compareVersion(left, right) {
+  for (let index = 0;index < 3; index += 1) {
+    const difference = left[index] - right[index];
+    if (difference)
+      return difference;
+  }
+  return 0;
+}
+
+// src/module-lifecycle.ts
+async function runModuleLifecycleCommand(args, projectDirectory, dependencies = {}) {
+  const action = args[0];
+  if (!isAction(action)) {
+    throw new Error("module \u53EA\u652F\u6301 list\u3001add\u3001update\u3001remove");
+  }
+  const log = dependencies.log ?? console.log;
+  const provenance = await readGenerationProvenance(projectDirectory);
+  const installed = provenance.modules.map(({ name }) => name);
+  if (action === "list") {
+    printModuleList(provenance.modules, log);
+    return;
+  }
+  const cliVersion = dependencies.cliVersion ?? (await readTemplateMetadata(await resolveTemplateRoot())).generatorVersion;
+  if (provenance.generatorVersion !== cliVersion || provenance.windyVersion !== cliVersion) {
+    throw new Error(`module \u547D\u4EE4\u8981\u6C42 CLI \u4E0E\u9879\u76EE Windy \u7248\u672C\u4E00\u81F4\uFF1A\u9879\u76EE ${provenance.windyVersion}\uFF0CCLI ${cliVersion}\uFF1B\u8BF7\u5148\u8FD0\u884C bun run windy update`);
+  }
+  const requested = positionalModules(args.slice(1));
+  const lifecycle = await resolveLifecyclePlan({
+    action,
+    requested,
+    installed,
+    windyVersion: provenance.windyVersion,
+    args,
+    projectDirectory
+  });
+  printDataPlan(lifecycle, log);
+  if (!hasChanges(lifecycle)) {
+    log("\u6A21\u5757\u96C6\u5408\u5DF2\u6EE1\u8DB3\u8BF7\u6C42\uFF0C\u65E0\u9700\u4FEE\u6539");
+    return;
+  }
+  const targetModules = resolveTargetModules(installed, lifecycle);
+  const updater = dependencies.updater ?? new DefaultStarterUpdater;
+  const plan = await updater.plan({
+    projectDirectory,
+    targetVersion: provenance.windyVersion,
+    targetModules,
+    lifecycle
+  });
+  printModulePlan(plan, log);
+  if (args.includes("--dry-run")) {
+    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    log(`
+\u6F14\u7EC3\u5B8C\u6210\uFF1A\u672A\u5199\u5165\u9879\u76EE\u6587\u4EF6`);
+    return;
+  }
+  if (action === "remove" && !args.includes("--confirm-data-disposition")) {
+    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    throw new Error("\u5378\u8F7D\u524D\u5FC5\u987B\u5BA1\u9605\u6570\u636E\u5904\u7F6E\u8BA1\u5212\u5E76\u4F20\u5165 --confirm-data-disposition");
+  }
+  if (plan.conflicts.length) {
+    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    throw new Error("\u5B58\u5728\u6A21\u5757\u751F\u547D\u5468\u671F\u51B2\u7A81\uFF0C\u9879\u76EE\u672A\u88AB\u4FEE\u6539");
+  }
+  const result2 = await updater.apply(plan);
+  const report = await updater.verify(result2);
+  log(`
+\u6A21\u5757${actionLabel(action)}\u5B8C\u6210\uFF1A${requested.join("\u3001")}`);
+  log(`\u62A5\u544A\uFF1A${report.reportPath}`);
+}
+async function resolveLifecyclePlan(input) {
+  const known = new Map(moduleDistributionCatalog.map((manifest) => [manifest.name, manifest]));
+  const requested = input.action === "update" && input.requested.length === 0 ? [...input.installed] : input.requested;
+  if (!requested.length) {
+    throw new Error(`module ${input.action} \u81F3\u5C11\u9700\u8981\u4E00\u4E2A\u6A21\u5757 key`);
+  }
+  for (const name of requested) {
+    const manifest = known.get(name);
+    if (!manifest)
+      throw new Error(`\u672A\u77E5\u6A21\u5757\uFF1A${name}`);
+    assertWindyCompatible(input.windyVersion, manifest.windyRange, name);
+  }
+  if (input.action === "add") {
+    const target = resolveModuleSelection({
+      requested: [...input.installed, ...requested],
+      includeRecommended: false
+    });
+    for (const name of target) {
+      const manifest = known.get(name);
+      assertWindyCompatible(input.windyVersion, manifest.windyRange, manifest.name);
+    }
+    return {
+      action: input.action,
+      requestedModules: requested,
+      addedModules: target.filter((name) => !input.installed.includes(name)),
+      updatedModules: [],
+      removedModules: []
+    };
+  }
+  if (input.action === "update") {
+    const absent = requested.filter((name) => !input.installed.includes(name));
+    if (absent.length) {
+      throw new Error(`\u672A\u5B89\u88C5\u6A21\u5757\u4E0D\u80FD\u66F4\u65B0\uFF1A${absent.join("\u3001")}`);
+    }
+    return {
+      action: input.action,
+      requestedModules: requested,
+      addedModules: [],
+      updatedModules: requested,
+      removedModules: []
+    };
+  }
+  const required = requested.filter((name) => requiredModuleNames.includes(name));
+  if (required.length) {
+    throw new Error(`\u6838\u5FC3\u6A21\u5757\u4E0D\u53EF\u5378\u8F7D\uFF1A${required.join("\u3001")}`);
+  }
+  const removed = requested.filter((name) => input.installed.includes(name));
+  assertRemovalDependencies(input.installed, removed);
+  const dataDisposition = resolveDataDisposition(removed.map((name) => known.get(name).uninstallPolicy), readValue2(input.args, "--data-disposition"));
+  const dataPlan = readValue2(input.args, "--data-plan");
+  if (dataDisposition !== "retain-data") {
+    if (!dataPlan) {
+      throw new Error(`${dataDisposition} \u5378\u8F7D\u5FC5\u987B\u901A\u8FC7 --data-plan \u63D0\u4F9B\u5DF2\u5BA1\u9605\u7684\u5904\u7F6E\u6587\u6863`);
+    }
+    await access2(resolve7(input.projectDirectory, dataPlan));
+  }
+  return {
+    action: input.action,
+    requestedModules: requested,
+    addedModules: [],
+    updatedModules: [],
+    removedModules: removed,
+    dataDisposition,
+    dataPlan
+  };
+}
+function resolveTargetModules(installed, lifecycle) {
+  if (lifecycle.action === "add") {
+    return resolveModuleSelection({
+      requested: [...installed, ...lifecycle.addedModules],
+      includeRecommended: false
+    });
+  }
+  if (lifecycle.action === "remove") {
+    const removed = new Set(lifecycle.removedModules);
+    return installed.filter((name) => !removed.has(name));
+  }
+  return installed;
+}
+function resolveDataDisposition(policies, requested) {
+  const disposition = requested ?? strongestPolicy(policies);
+  if (disposition !== "retain-data" && disposition !== "archive-data" && disposition !== "manual") {
+    throw new Error(`\u4E0D\u652F\u6301\u7684\u6570\u636E\u5904\u7F6E\u7B56\u7565\uFF1A${disposition}`);
+  }
+  const minimum = strongestPolicy(policies);
+  const rank = {
+    "retain-data": 0,
+    "archive-data": 1,
+    manual: 2
+  };
+  if (rank[disposition] < rank[minimum]) {
+    throw new Error(`\u6A21\u5757\u76EE\u5F55\u8981\u6C42 ${minimum}\uFF0C\u4E0D\u80FD\u964D\u7EA7\u4E3A ${disposition}`);
+  }
+  return disposition;
+}
+function strongestPolicy(policies) {
+  if (policies.includes("manual"))
+    return "manual";
+  if (policies.includes("archive-data"))
+    return "archive-data";
+  return "retain-data";
+}
+function assertRemovalDependencies(installed, removed) {
+  const removedSet = new Set(removed);
+  const blockers = moduleDistributionCatalog.filter(({ name, dependencies }) => installed.includes(name) && !removedSet.has(name) && dependencies.some((dependency) => removedSet.has(dependency))).map(({ name }) => name);
+  if (blockers.length) {
+    throw new Error(`\u4ECD\u6709\u5DF2\u5B89\u88C5\u6A21\u5757\u4F9D\u8D56\u5F85\u5378\u8F7D\u6A21\u5757\uFF1A${blockers.join("\u3001")}`);
+  }
+}
+function assertWindyCompatible(version, range, moduleName) {
+  if (!isVersionInCaretRange(version, range)) {
+    throw new Error(`${moduleName} \u8981\u6C42 Windy ${range}\uFF0C\u5F53\u524D\u4E3A ${version}`);
+  }
+}
+function positionalModules(args) {
+  const valueFlags = new Set(["--data-disposition", "--data-plan", "--cwd"]);
+  const output = [];
+  for (let index = 0;index < args.length; index += 1) {
+    const value = args[index];
+    if (valueFlags.has(value)) {
+      index += 1;
+    } else if (!value.startsWith("-")) {
+      output.push(value);
+    }
+  }
+  return [...new Set(output)];
+}
+function printModuleList(installed, log) {
+  const installedVersions = new Map(installed.map(({ name, version }) => [name, version]));
+  log("Windy \u6A21\u5757\uFF1A");
+  for (const manifest of moduleDistributionCatalog) {
+    const installedVersion = installedVersions.get(manifest.name);
+    const status = installedVersion ? "installed" : "available";
+    const version = installedVersion ? `${manifest.name}@${installedVersion}\uFF08catalog ${manifest.version}\uFF09` : `${manifest.name}@${manifest.version}`;
+    log(`  ${status.padEnd(9)} ${version}`);
+  }
+}
+function printDataPlan(lifecycle, log) {
+  if (lifecycle.action !== "remove")
+    return;
+  log("\u6A21\u5757\u5378\u8F7D\u6570\u636E\u5904\u7F6E\u8BA1\u5212\uFF1A");
+  log(`  \u6A21\u5757\uFF1A${lifecycle.removedModules.join("\u3001") || "\u5747\u672A\u5B89\u88C5"}`);
+  log(`  \u6570\u636E\uFF1A${lifecycle.dataDisposition ?? "retain-data"}`);
+  log("  migration\uFF1A\u4FDD\u7559\u5230 .windy/module-history\uFF0C\u4E0D\u6267\u884C down migration");
+  if (lifecycle.dataPlan)
+    log(`  \u8FD0\u7EF4\u5904\u7F6E\u6587\u6863\uFF1A${lifecycle.dataPlan}`);
+}
+function printModulePlan(plan, log) {
+  const changed = plan.files.filter(({ action }) => action !== "preserve");
+  log(`\u6A21\u5757\u6587\u4EF6\u8BA1\u5212\uFF1A${changed.length} \u4E2A\u53D8\u66F4\uFF1B${plan.conflicts.length} \u4E2A\u51B2\u7A81`);
+  for (const file of changed) {
+    log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
+  }
+  for (const conflict3 of plan.conflicts)
+    log(`  conflict ${conflict3}`);
+}
+function hasChanges(lifecycle) {
+  return lifecycle.addedModules.length > 0 || lifecycle.updatedModules.length > 0 || lifecycle.removedModules.length > 0;
+}
+function readValue2(args, flag) {
+  const index = args.indexOf(flag);
+  return index >= 0 ? args[index + 1] : undefined;
+}
+function isAction(value) {
+  return value === "list" || value === "add" || value === "update" || value === "remove";
+}
+function actionLabel(action) {
+  return action === "add" ? "\u5B89\u88C5" : action === "update" ? "\u66F4\u65B0" : "\u5378\u8F7D";
+}
+
 // src/update/cli.ts
 async function runLifecycleCommand(args) {
   const command = args[0];
-  if (command !== "doctor" && command !== "update" && command !== "reconcile" && command !== "sync-docker") {
+  if (command !== "doctor" && command !== "update" && command !== "module" && command !== "reconcile" && command !== "sync-docker") {
     return false;
   }
-  const projectDirectory = resolve7(readValue2(args, "--cwd") || process.cwd());
+  const projectDirectory = resolve8(readValue3(args, "--cwd") || process.cwd());
+  if (command === "module") {
+    await runModuleLifecycleCommand(args.slice(1), projectDirectory);
+    return true;
+  }
   if (command === "sync-docker") {
     const result2 = await planWebDockerfileInProject(projectDirectory, {
       requireAnchors: true
@@ -9940,7 +10648,7 @@ async function runReconcile(args, projectDirectory) {
   });
   const plan = await reconciler.plan({
     projectDirectory,
-    targetVersion: readValue2(args, "--to") ?? ""
+    targetVersion: readValue3(args, "--to") ?? ""
   });
   console.log(`Windy \u5BF9\u8D26\u8BA1\u5212\uFF1A${plan.sourceVersion} \u2192 ${plan.targetVersion}\uFF1B\u53EF\u8BC1\u660E ${plan.reconciled.length}\uFF1B\u4FDD\u5B88\u672A\u51B3 ${plan.unresolved.length}`);
   for (const item of plan.reconciled) {
@@ -9950,7 +10658,7 @@ async function runReconcile(args, projectDirectory) {
     console.log(`  unresolved ${item.path}\uFF08${item.reason}\uFF09`);
   }
   if (!args.includes("--apply")) {
-    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    await rm11(plan.temporaryRoot, { recursive: true, force: true });
     console.log(`
 \u6F14\u7EC3\u5B8C\u6210\uFF1A\u672A\u5199\u5165\u9879\u76EE\u6587\u4EF6\uFF1B\u4F7F\u7528 --apply \u4EC5\u63D0\u4EA4\u5BF9\u8D26\u5143\u6570\u636E`);
     return;
@@ -9961,12 +10669,12 @@ async function runReconcile(args, projectDirectory) {
 \u5BF9\u8D26\u5B8C\u6210\uFF1AProject Lock \u4ECD\u4E3A ${plan.sourceVersion}`);
     console.log(`\u62A5\u544A\uFF1A${result2.reportPath}`);
   } finally {
-    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    await rm11(plan.temporaryRoot, { recursive: true, force: true });
   }
 }
 async function runUpdate(args, projectDirectory) {
   const template = await readTemplateMetadata(await resolveTemplateRoot());
-  const requested = readValue2(args, "--to");
+  const requested = readValue3(args, "--to");
   const registryVersion = requested ? undefined : await readRegistryLatest();
   if (registryVersion && compareVersions2(registryVersion, template.generatorVersion) > 0 && !args.includes("--no-delegate")) {
     if (args.includes("--check")) {
@@ -9996,13 +10704,13 @@ async function runUpdate(args, projectDirectory) {
   const plan = await updater.plan({ projectDirectory, targetVersion: target });
   printPlan(plan);
   if (args.includes("--dry-run")) {
-    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    await rm11(plan.temporaryRoot, { recursive: true, force: true });
     console.log(`
 \u6F14\u7EC3\u5B8C\u6210\uFF1A\u672A\u5199\u5165\u9879\u76EE\u6587\u4EF6`);
     return;
   }
   if (plan.conflicts.length) {
-    await rm10(plan.temporaryRoot, { recursive: true, force: true });
+    await rm11(plan.temporaryRoot, { recursive: true, force: true });
     throw new Error("\u5B58\u5728\u66F4\u65B0\u51B2\u7A81\uFF1B\u8BF7\u6309\u4E0A\u65B9\u6E05\u5355\u5904\u7406\u540E\u91CD\u65B0\u8FD0\u884C\uFF0C\u9879\u76EE\u672A\u88AB\u4FEE\u6539");
   }
   const result2 = await updater.apply(plan);
@@ -10036,8 +10744,8 @@ function printPlan(plan) {
   console.log(`\u8BA1\u5212\u6539\u52A8\uFF1A${changed.length} \u4E2A\u6587\u4EF6\uFF1B\u51B2\u7A81\uFF1A${plan.conflicts.length}`);
   for (const file of changed)
     console.log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
-  for (const conflict2 of plan.conflicts)
-    console.log(`  conflict ${conflict2}`);
+  for (const conflict3 of plan.conflicts)
+    console.log(`  conflict ${conflict3}`);
   if (plan.detachedToolchain)
     console.log("Oxc\uFF1A\u68C0\u6D4B\u5230\u5BA2\u6237\u63A5\u7BA1\uFF0C\u76F8\u5173\u914D\u7F6E\u4FDD\u6301\u4E0D\u53D8");
 }
@@ -10060,7 +10768,7 @@ function printDoctor(report) {
     console.log("\u6062\u590D\uFF1A\u5DF2\u4ECE\u4E8B\u52A1\u5907\u4EFD\u56DE\u6EDA");
   }
 }
-function readValue2(args, flag) {
+function readValue3(args, flag) {
   const index = args.indexOf(flag);
   return index >= 0 ? args[index + 1] : undefined;
 }
@@ -10087,28 +10795,28 @@ function compareVersions2(left, right) {
 }
 
 // src/module-schema/cli.ts
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 
 // src/module-schema/handoff.ts
 import {
-  access as access2,
+  access as access3,
   cp,
-  mkdir as mkdir8,
+  mkdir as mkdir9,
   mkdtemp as mkdtemp5,
-  readFile as readFile25,
-  readdir as readdir8,
+  readFile as readFile26,
+  readdir as readdir9,
   rename,
-  rm as rm11,
-  writeFile as writeFile12
+  rm as rm12,
+  writeFile as writeFile13
 } from "fs/promises";
-import { dirname as dirname8, join as join31, relative as relative5 } from "path";
+import { dirname as dirname9, join as join32, relative as relative6 } from "path";
 
 // src/module-schema/config.ts
-import { readFile as readFile24 } from "fs/promises";
-import { isAbsolute as isAbsolute2, relative as relative4, resolve as resolve8 } from "path";
+import { readFile as readFile25 } from "fs/promises";
+import { isAbsolute as isAbsolute2, relative as relative5, resolve as resolve9 } from "path";
 async function readModuleSchemaLineageConfig(projectDirectory, configPath) {
   const absolutePath = resolveProjectPath(projectDirectory, configPath);
-  const parsed = JSON.parse(await readFile24(absolutePath, "utf8"));
+  const parsed = JSON.parse(await readFile25(absolutePath, "utf8"));
   if (!isConfig(parsed)) {
     throw new Error("Module schema lineage \u914D\u7F6E\u65E0\u6548");
   }
@@ -10122,8 +10830,8 @@ async function readModuleSchemaLineageConfig(projectDirectory, configPath) {
 function resolveProjectPath(projectDirectory, path2) {
   if (isAbsolute2(path2))
     throw new Error(`\u8DEF\u5F84\u5FC5\u987B\u76F8\u5BF9\u9879\u76EE\u6839\u76EE\u5F55\uFF1A${path2}`);
-  const resolved = resolve8(projectDirectory, path2);
-  const projectRelative = relative4(projectDirectory, resolved);
+  const resolved = resolve9(projectDirectory, path2);
+  const projectRelative = relative5(projectDirectory, resolved);
   if (projectRelative.startsWith("..") || isAbsolute2(projectRelative)) {
     throw new Error(`\u8DEF\u5F84\u8D8A\u51FA\u9879\u76EE\u6839\u76EE\u5F55\uFF1A${path2}`);
   }
@@ -10232,7 +10940,7 @@ async function handoffModuleSchemaLineages(options) {
     const stagedPlatform = await stagePlatformLineage(project, temporaryRoot, config, execute);
     await installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform);
   } finally {
-    await rm11(temporaryRoot, { recursive: true, force: true });
+    await rm12(temporaryRoot, { recursive: true, force: true });
   }
   return {
     moduleCount: config.modules.length,
@@ -10242,17 +10950,17 @@ async function handoffModuleSchemaLineages(options) {
 async function stageModuleLineages(project, temporaryRoot, config, execute) {
   const outputs = [];
   for (const [index, module3] of config.modules.entries()) {
-    const output = join31(temporaryRoot, `module-${index}`);
-    await mkdir8(output, { recursive: true });
-    const generatedConfig = join31(temporaryRoot, `module-${index}.config.ts`);
-    await writeDrizzleConfig(generatedConfig, project, module3.schema, relative5(temporaryRoot, output));
+    const output = join32(temporaryRoot, `module-${index}`);
+    await mkdir9(output, { recursive: true });
+    const generatedConfig = join32(temporaryRoot, `module-${index}.config.ts`);
+    await writeDrizzleConfig(generatedConfig, project, module3.schema, relative6(temporaryRoot, output));
     await execute(generatedConfig, temporaryRoot);
     const sqlFiles = await listSqlFiles(output);
     if (sqlFiles.length !== 1) {
       throw new Error(`${module3.key} baseline \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration`);
     }
-    await writeFile12(join31(output, sqlFiles[0]), metadataOnlySql("module"));
-    await writeFile12(join31(output, "lineage.json"), `${JSON.stringify({
+    await writeFile13(join32(output, sqlFiles[0]), metadataOnlySql("module"));
+    await writeFile13(join32(output, "lineage.json"), `${JSON.stringify({
       schemaVersion: 1,
       moduleKey: module3.key,
       schema: module3.schema,
@@ -10266,25 +10974,25 @@ async function stageModuleLineages(project, temporaryRoot, config, execute) {
 }
 async function stagePlatformLineage(project, temporaryRoot, config, execute) {
   const source = resolveProjectPath(project, config.platform.out);
-  const output = join31(temporaryRoot, "platform");
+  const output = join32(temporaryRoot, "platform");
   await cp(source, output, { recursive: true });
   const before = new Set(await listSqlFiles(output));
-  const generatedConfig = join31(temporaryRoot, "platform.config.ts");
-  await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative5(temporaryRoot, output));
+  const generatedConfig = join32(temporaryRoot, "platform.config.ts");
+  await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative6(temporaryRoot, output));
   await execute(generatedConfig, temporaryRoot);
   const created = (await listSqlFiles(output)).filter((path2) => !before.has(path2));
   if (created.length !== 1) {
     throw new Error("\u5E73\u53F0 lineage handoff \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration");
   }
-  const sqlPath = join31(output, created[0]);
+  const sqlPath = join32(output, created[0]);
   const allowed = config.modules.flatMap(({ legacyPlatformTables }) => legacyPlatformTables);
-  validatePlatformHandoffSql(await readFile25(sqlPath, "utf8"), allowed);
-  await writeFile12(sqlPath, metadataOnlySql("platform"));
+  validatePlatformHandoffSql(await readFile26(sqlPath, "utf8"), allowed);
+  await writeFile13(sqlPath, metadataOnlySql("platform"));
   return output;
 }
 async function installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform) {
   const platform = resolveProjectPath(project, config.platform.out);
-  const backup = join31(temporaryRoot, "platform-backup");
+  const backup = join32(temporaryRoot, "platform-backup");
   const installed = [];
   await rename(platform, backup);
   try {
@@ -10294,21 +11002,21 @@ async function installStagedLineages(project, temporaryRoot, config, stagedModul
       if (await exists(output)) {
         throw new Error(`${module3.key} lineage \u8F93\u51FA\u5DF2\u5B58\u5728\uFF0C\u7981\u6B62\u8986\u76D6`);
       }
-      await mkdir8(dirname8(output), { recursive: true });
+      await mkdir9(dirname9(output), { recursive: true });
       await rename(stagedModules[index], output);
       installed.push(output);
     }
   } catch (error) {
-    await rm11(platform, { recursive: true, force: true });
+    await rm12(platform, { recursive: true, force: true });
     await rename(backup, platform);
     for (const output of installed)
-      await rm11(output, { recursive: true, force: true });
+      await rm12(output, { recursive: true, force: true });
     throw error;
   }
 }
 async function writeDrizzleConfig(path2, project, schemas, out) {
   const absoluteSchemas = schemas.map((schema) => resolveProjectPath(project, schema));
-  await writeFile12(path2, `import { defineConfig } from "drizzle-kit";
+  await writeFile13(path2, `import { defineConfig } from "drizzle-kit";
 export default defineConfig(${JSON.stringify({
     dialect: "postgresql",
     schema: absoluteSchemas,
@@ -10322,7 +11030,7 @@ async function validateSchemaSources(project, config) {
     ...config.platform.schema,
     ...config.modules.flatMap(({ schema: schema2 }) => schema2)
   ]) {
-    await access2(resolveProjectPath(project, schema));
+    await access3(resolveProjectPath(project, schema));
   }
   for (const module3 of config.modules) {
     if (await exists(resolveProjectPath(project, module3.out))) {
@@ -10331,12 +11039,12 @@ async function validateSchemaSources(project, config) {
   }
 }
 async function createTemporaryRoot(project) {
-  const windy = join31(project, ".windy");
-  await mkdir8(windy, { recursive: true });
-  return await mkdtemp5(join31(windy, "module-schema-handoff-"));
+  const windy = join32(project, ".windy");
+  await mkdir9(windy, { recursive: true });
+  return await mkdtemp5(join32(windy, "module-schema-handoff-"));
 }
 async function listSqlFiles(root) {
-  return (await readdir8(root)).filter((path2) => path2.endsWith(".sql")).sort();
+  return (await readdir9(root)).filter((path2) => path2.endsWith(".sql")).sort();
 }
 async function executeDrizzleGenerate(configPath, cwd) {
   await assertProcess("bunx", ["--bun", "drizzle-kit", "generate", "--config", configPath], cwd, true);
@@ -10349,7 +11057,7 @@ async function assertCleanGit(project) {
 }
 async function exists(path2) {
   try {
-    await access2(path2);
+    await access3(path2);
     return true;
   } catch {
     return false;
@@ -10363,15 +11071,15 @@ async function runModuleSchemaCommand(args) {
   if (args[1] !== "handoff") {
     throw new Error("\u5F53\u524D schema \u547D\u4EE4\u53EA\u652F\u6301 handoff");
   }
-  const projectDirectory = resolve9(readValue3(args, "--cwd") || process.cwd());
+  const projectDirectory = resolve10(readValue4(args, "--cwd") || process.cwd());
   const result2 = await handoffModuleSchemaLineages({
     projectDirectory,
-    configPath: readValue3(args, "--config")
+    configPath: readValue4(args, "--config")
   });
   console.log(`Module schema lineage \u4EA4\u63A5\u5B8C\u6210\uFF1A${result2.moduleCount} \u4E2A\u6A21\u5757\u3001${result2.tableCount} \u5F20\u65E7\u5E73\u53F0 snapshot \u8868`);
   return true;
 }
-function readValue3(args, flag) {
+function readValue4(args, flag) {
   const index = args.indexOf(flag);
   return index >= 0 ? args[index + 1] : undefined;
 }