create-windy 0.5.2 → 0.6.0

package/dist/cli.js

@@ -34,8 +34,8 @@ var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports,
 var __require = import.meta.require;
 
 // ../../node_modules/.bun/cli-width@4.1.0/node_modules/cli-width/index.js
-var require_cli_width = __commonJS((exports, module3) => {
-  module3.exports = cliWidth;
+var require_cli_width = __commonJS((exports, module2) => {
+  module2.exports = cliWidth;
   function normalizeOpts(options) {
     const defaultOpts = {
       defaultWidth: 0,
@@ -74,7 +74,7 @@ var require_cli_width = __commonJS((exports, module3) => {
 });
 
 // ../../node_modules/.bun/mute-stream@3.0.0/node_modules/mute-stream/lib/index.js
-var require_lib = __commonJS((exports, module3) => {
+var require_lib = __commonJS((exports, module2) => {
   var Stream = __require("stream");
 
   class MuteStream extends Stream {
@@ -190,7 +190,7 @@ var require_lib = __commonJS((exports, module3) => {
       return this.#proxy("close", ...args);
     }
   }
-  module3.exports = MuteStream;
+  module2.exports = MuteStream;
 });
 
 // src/arguments.ts
@@ -239,29 +239,89 @@ function validateModuleDistributionCatalog(manifests) {
   return manifests;
 }
 
+// src/optional-module-base.ts
+function optionalModule(name, label, description, dependencies) {
+  const selection = "optional";
+  return {
+    name,
+    version: "0.1.0",
+    windyRange: "^0.5.0",
+    label,
+    description,
+    selection,
+    runtimeActivation: "toggle",
+    deploymentInstall: "project-composition-required",
+    dependencies,
+    conflicts: [],
+    runtimePackage: null,
+    packages: [],
+    registryDependencies: [],
+    fileRoots: [],
+    documentation: [],
+    schemaFiles: [],
+    migrationRoots: [],
+    databaseTables: [],
+    databaseLineageOwner: "platform",
+    transientDatabaseTables: [],
+    databaseStatementTokens: [],
+    uninstallPolicy: "retain-data",
+    installRecipe: `module-${name}-install`,
+    updateRecipes: [`module-${name}-update-0.1.0`],
+    uninstallRecipe: `module-${name}-uninstall`
+  };
+}
+
+// src/optional-module-storage.ts
+var storageOptionalModule = {
+  ...optionalModule("system.storage", "\u6587\u4EF6\u5B58\u50A8", "\u4E0A\u4F20\u3001\u4E0B\u8F7D\u548C\u5BF9\u8C61\u751F\u547D\u5468\u671F\u3002", ["system", "system.settings", "system.scheduler"]),
+  runtimeActivation: "physical-only",
+  registryDependencies: [
+    {
+      sourceName: "unicode-case-folding",
+      name: "unicode-case-folding",
+      version: "1.1.1"
+    }
+  ],
+  fileRoots: [
+    "apps/server/src/storage",
+    "apps/server/src/report-staging",
+    "apps/server/src/module-host/durable-storage-filesystem-restart.test.ts",
+    "apps/server/src/module-host/durable-storage-write.test.ts",
+    "apps/server/src/module-host/report-staging-port.ts",
+    "apps/server/src/module-host/route-installer.test.ts",
+    "apps/server/src/module-host/route-installer.test-fixture.ts",
+    "apps/server/src/module-host/storage-authorization-binding.test.ts",
+    "apps/server/src/module-host/storage-port.test.ts",
+    "apps/server/src/module-host/storage-restart-fixture.test-support.ts",
+    "apps/server/src/module-host/storage-restart-postgres.integration.test.ts",
+    "apps/server/src/module-host/storage-scope-drift-http.test.ts",
+    "apps/server/src/module-host/storage-stream-route.test.ts"
+  ],
+  documentation: [
+    "docs/architecture/object-storage.md",
+    "docs/architecture/report-staging.md"
+  ],
+  schemaFiles: [
+    "packages/database/src/schema/file-storage.ts",
+    "packages/database/src/schema/report-staging.ts"
+  ],
+  databaseTables: [
+    "file_upload_sessions",
+    "file_upload_parts",
+    "file_metadata",
+    "report_staging_groups",
+    "report_staging_sources",
+    "report_staging_entries",
+    "report_staging_read_leases",
+    "report_staging_claims"
+  ]
+};
+
 // src/optional-module-distribution.ts
 var optionalModuleManifests = [
+  storageOptionalModule,
   {
-    ...module("system.storage", "\u6587\u4EF6\u5B58\u50A8", "\u4E0A\u4F20\u3001\u4E0B\u8F7D\u548C\u5BF9\u8C61\u751F\u547D\u5468\u671F\u3002", [
-      "system",
-      "system.settings"
-    ]),
-    runtimeActivation: "physical-only",
-    fileRoots: [
-      "apps/server/src/storage",
-      "apps/server/src/module-host/route-installer.test.ts",
-      "apps/server/src/module-host/storage-port.test.ts"
-    ],
-    documentation: ["docs/architecture/object-storage.md"],
-    schemaFiles: ["packages/database/src/schema/file-storage.ts"],
-    databaseTables: [
-      "file_upload_sessions",
-      "file_upload_parts",
-      "file_metadata"
-    ]
-  },
-  {
-    ...module("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
+    ...optionalModule("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
       "system",
       "system.audit",
       "system.storage",
@@ -287,7 +347,12 @@ var optionalModuleManifests = [
       "apps/embedding-server",
       "apps/server/src/agent",
       "apps/server/src/ai-runtime-report",
+      "apps/server/src/ai-runtime-readiness",
+      "apps/server/src/app/ai-screenshot-intake-binding.ts",
+      "apps/server/src/app/document-output-artifact-bindings.ts",
+      "apps/server/src/app/speech-output-artifact-bindings.ts",
       "apps/server/src/ai-artifact",
+      "apps/server/src/ai-output-artifact",
       "apps/server/src/document",
       "apps/server/src/speech",
       "apps/server/src/embedding",
@@ -298,6 +363,7 @@ var optionalModuleManifests = [
       "apps/server/src/module-host/ai-operation-port.test.ts",
       "apps/server/src/module-host/tool-handlers.ts",
       "apps/server/src/module-host/tool-handlers.test.ts",
+      "apps/server/src/module-host/module-secret-tool-boundary.test.ts",
       "apps/web/src/pages/system/AiRuntimePage.vue",
       "apps/web/src/pages/system/ai-runtime-presenter.ts",
       "apps/web/src/pages/system/ai-runtime-presenter.webtest.ts",
@@ -308,8 +374,10 @@ var optionalModuleManifests = [
       "apps/web/src/services/ai-runtime-api.webtest.ts",
       "docker-compose.agent-debug.yml",
       "scripts/dev-adk-web.ts",
+      "scripts/provision-speech-readiness.ts",
       "packages/modules/src/system-agent-tools.ts",
       "packages/database/src/agent-runtime-schema.test.ts",
+      "packages/database/src/ai-output-artifacts.test.ts",
       "packages/shared/src/ai-runtime-report.ts"
     ],
     documentation: [
@@ -328,22 +396,27 @@ var optionalModuleManifests = [
       "docs/platform/speech-ai-runtime.md",
       "docs/platform/embedding-ai-runtime.md"
     ],
-    schemaFiles: ["packages/database/src/schema/agent-runtime.ts"],
+    schemaFiles: [
+      "packages/database/src/schema/agent-runtime.ts",
+      "packages/database/src/schema/embedding-runtime.ts",
+      "packages/database/src/schema/ai-output-artifacts.ts"
+    ],
     databaseTables: [
       "agent_operation_releases",
       "agent_runtime_runs",
       "agent_runtime_events",
       "agent_evaluation_results",
       "agent_run_bindings",
+      "agent_screenshot_intakes",
       "agent_runtime_report_runs",
-      "agent_runtime_report_attempts"
+      "agent_runtime_report_attempts",
+      "embedding_run_bindings",
+      "ai_output_artifact_scopes",
+      "ai_output_artifacts"
     ]
   },
   {
-    ...module("system.scheduler", "\u4EFB\u52A1\u8C03\u5EA6", "\u4EFB\u52A1\u3001\u91CD\u8BD5\u3001\u5386\u53F2\u548C\u6062\u590D\u3002", [
-      "system",
-      "system.audit"
-    ]),
+    ...optionalModule("system.scheduler", "\u4EFB\u52A1\u8C03\u5EA6", "\u4EFB\u52A1\u3001\u91CD\u8BD5\u3001\u5386\u53F2\u548C\u6062\u590D\u3002", ["system", "system.audit"]),
     fileRoots: [
       "apps/server/src/scheduler",
       "apps/server/src/jobs",
@@ -352,6 +425,7 @@ var optionalModuleManifests = [
       "apps/server/src/module-host/durable-context.test.ts",
       "apps/server/src/module-host/durable-context-guard.test.ts",
       "apps/server/src/module-host/durable-context-unavailable.test.ts",
+      "apps/server/src/module-host/module-secret-durable.test.ts",
       "apps/server/src/module-host/job-port.test.ts",
       "apps/server/src/module-host/task-definitions.ts",
       "packages/database/src/schema-durable-recovery.test.ts",
@@ -386,7 +460,7 @@ var optionalModuleManifests = [
     ]
   },
   {
-    ...module("system.notification", "\u7AD9\u5185\u901A\u77E5", "\u901A\u77E5\u5B9A\u5411\u4E0E\u5B9A\u65F6\u53D1\u5E03\u3001\u7528\u6237\u504F\u597D\u3001\u5916\u90E8\u6E20\u9053\u6295\u9012\u3001\u4FEE\u6539\u5386\u53F2\u3001\u9605\u8BFB\u3001\u6536\u85CF\u548C\u5F52\u6863\u3002", ["system", "system.identity", "system.scheduler"]),
+    ...optionalModule("system.notification", "\u7AD9\u5185\u901A\u77E5", "\u901A\u77E5\u5B9A\u5411\u4E0E\u5B9A\u65F6\u53D1\u5E03\u3001\u7528\u6237\u504F\u597D\u3001\u5916\u90E8\u6E20\u9053\u6295\u9012\u3001\u4FEE\u6539\u5386\u53F2\u3001\u9605\u8BFB\u3001\u6536\u85CF\u548C\u5F52\u6863\u3002", ["system", "system.identity", "system.scheduler"]),
     registryDependencies: [
       {
         sourceName: "nodemailer",
@@ -431,12 +505,7 @@ var optionalModuleManifests = [
     ]
   },
   {
-    ...module("system.workflow", "\u5BA1\u6279\u5DE5\u4F5C\u6D41", "\u5BA1\u6279\u3001\u8F6C\u4EA4\u3001\u8D85\u65F6\u548C\u8865\u507F\u3002", [
-      "system",
-      "system.identity",
-      "system.notification",
-      "system.scheduler"
-    ]),
+    ...optionalModule("system.workflow", "\u5BA1\u6279\u5DE5\u4F5C\u6D41", "\u5BA1\u6279\u3001\u8F6C\u4EA4\u3001\u8D85\u65F6\u548C\u8865\u507F\u3002", ["system", "system.identity", "system.notification", "system.scheduler"]),
     fileRoots: [
       "apps/server/src/workflow",
       "packages/database/src/schema-workflow-notification.test.ts"
@@ -446,11 +515,7 @@ var optionalModuleManifests = [
     databaseTables: ["workflow_work_items", "workflow_transitions"]
   },
   {
-    ...module("system.bulk-data", "\u6279\u91CF\u6570\u636E", "\u6279\u91CF\u5BFC\u5165\u5BFC\u51FA\u4E0E\u7ED3\u679C\u7559\u5B58\u3002", [
-      "system",
-      "system.storage",
-      "system.scheduler"
-    ]),
+    ...optionalModule("system.bulk-data", "\u6279\u91CF\u6570\u636E", "\u6279\u91CF\u5BFC\u5165\u5BFC\u51FA\u4E0E\u7ED3\u679C\u7559\u5B58\u3002", ["system", "system.storage", "system.scheduler"]),
     fileRoots: [
       "apps/server/src/bulk-data",
       "apps/server/src/jobs/legacy-adapter.integration.test.ts",
@@ -465,9 +530,7 @@ var optionalModuleManifests = [
     databaseTables: ["bulk_data_jobs", "bulk_data_artifacts"]
   },
   {
-    ...module("system.search", "\u5E73\u53F0\u641C\u7D22", "\u6743\u9650\u611F\u77E5\u641C\u7D22\u4E0E Provider \u805A\u5408\u3002", [
-      "system"
-    ]),
+    ...optionalModule("system.search", "\u5E73\u53F0\u641C\u7D22", "\u6743\u9650\u611F\u77E5\u641C\u7D22\u4E0E Provider \u805A\u5408\u3002", ["system"]),
     fileRoots: [
       "apps/server/src/search",
       "apps/server/src/module-host/search-providers.ts",
@@ -480,7 +543,7 @@ var optionalModuleManifests = [
     documentation: ["docs/architecture/search-provider-protocol.md"]
   },
   {
-    ...module("system.data-governance", "\u6570\u636E\u6CBB\u7406", "\u654F\u611F\u5B57\u6BB5\u3001\u660E\u6587\u8BBF\u95EE\u548C\u6CBB\u7406\u5BFC\u51FA\u3002", [
+    ...optionalModule("system.data-governance", "\u6570\u636E\u6CBB\u7406", "\u654F\u611F\u5B57\u6BB5\u3001\u660E\u6587\u8BBF\u95EE\u548C\u6CBB\u7406\u5BFC\u51FA\u3002", [
       "system",
       "system.identity",
       "system.audit",
@@ -506,7 +569,7 @@ var optionalModuleManifests = [
     databaseTables: ["governed_export_requests"]
   },
   {
-    ...module("work-order", "\u793A\u4F8B\u5DE5\u5355", "\u53EF\u66FF\u6362\u7684\u4E1A\u52A1\u6A21\u5757\u63A5\u5165\u793A\u4F8B\u3002", [
+    ...optionalModule("work-order", "\u793A\u4F8B\u5DE5\u5355", "\u53EF\u66FF\u6362\u7684\u4E1A\u52A1\u6A21\u5757\u63A5\u5165\u793A\u4F8B\u3002", [
       "system",
       "system.identity",
       "system.search",
@@ -532,36 +595,6 @@ var optionalModuleManifests = [
     databaseLineageOwner: "module"
   }
 ];
-function module(name, label, description, dependencies) {
-  const selection = "optional";
-  return {
-    name,
-    version: "0.1.0",
-    windyRange: "^0.5.0",
-    label,
-    description,
-    selection,
-    runtimeActivation: "toggle",
-    deploymentInstall: "project-composition-required",
-    dependencies,
-    conflicts: [],
-    runtimePackage: null,
-    packages: [],
-    registryDependencies: [],
-    fileRoots: [],
-    documentation: [],
-    schemaFiles: [],
-    migrationRoots: [],
-    databaseTables: [],
-    databaseLineageOwner: "platform",
-    transientDatabaseTables: [],
-    databaseStatementTokens: [],
-    uninstallPolicy: "retain-data",
-    installRecipe: `module-${name}-install`,
-    updateRecipes: [`module-${name}-update-0.1.0`],
-    uninstallRecipe: `module-${name}-uninstall`
-  };
-}
 
 // src/module-distribution.ts
 var requiredModuleNames = ["system", "system.identity"];
@@ -572,10 +605,10 @@ var recommendedModuleNames = [
   "system.operations"
 ];
 var platformModules = [
-  module2("system", "\u7CFB\u7EDF\u6838\u5FC3", "Admin \u51C6\u5165\u3001Feature \u4E0E\u6570\u636E\u5E93\u57FA\u7EBF\u3002", "required"),
-  module2("system.identity", "\u8EAB\u4EFD\u4E0E\u6743\u9650", "\u8BA4\u8BC1\u3001\u7528\u6237\u3001\u89D2\u8272\u3001\u7EC4\u7EC7\u548C\u6570\u636E\u8303\u56F4\u3002", "required", ["system"]),
+  module("system", "\u7CFB\u7EDF\u6838\u5FC3", "Admin \u51C6\u5165\u3001Feature \u4E0E\u6570\u636E\u5E93\u57FA\u7EBF\u3002", "required"),
+  module("system.identity", "\u8EAB\u4EFD\u4E0E\u6743\u9650", "\u8BA4\u8BC1\u3001\u7528\u6237\u3001\u89D2\u8272\u3001\u7EC4\u7EC7\u548C\u6570\u636E\u8303\u56F4\u3002", "required", ["system"]),
   {
-    ...module2("system.settings", "\u5E73\u53F0\u8BBE\u7F6E", "\u54C1\u724C\u3001Logo \u4E0E\u6C34\u5370\u3002", "recommended", ["system"]),
+    ...module("system.settings", "\u5E73\u53F0\u8BBE\u7F6E", "\u54C1\u724C\u3001Logo \u4E0E\u6C34\u5370\u3002", "recommended", ["system"]),
     runtimeActivation: "physical-only",
     fileRoots: [
       "apps/server/src/settings",
@@ -598,7 +631,7 @@ var platformModules = [
     ]
   },
   {
-    ...module2("system.configuration", "\u914D\u7F6E\u7248\u672C", "\u7C7B\u578B\u5316\u914D\u7F6E\u3001\u5E94\u7528\u548C\u56DE\u6EDA\u3002", "recommended", ["system"]),
+    ...module("system.configuration", "\u914D\u7F6E\u7248\u672C", "\u7C7B\u578B\u5316\u914D\u7F6E\u3001\u5E94\u7528\u548C\u56DE\u6EDA\u3002", "recommended", ["system"]),
     fileRoots: [
       "apps/server/src/configuration",
       "apps/web/src/pages/configuration",
@@ -613,7 +646,7 @@ var platformModules = [
     ]
   },
   {
-    ...module2("system.license", "\u79BB\u7EBF License", "\u79BB\u7EBF\u9A8C\u7B7E\u3001\u5B89\u88C5\u548C\u9650\u5236\u6001\u3002", "optional", ["system"]),
+    ...module("system.license", "\u79BB\u7EBF License", "\u79BB\u7EBF\u9A8C\u7B7E\u3001\u5B89\u88C5\u548C\u9650\u5236\u6001\u3002", "optional", ["system"]),
     registryDependencies: [
       {
         sourceName: "@southwind-ai/license",
@@ -665,7 +698,7 @@ var platformModules = [
     ]
   },
   {
-    ...module2("system.audit", "\u5BA1\u8BA1\u65E5\u5FD7", "\u5BA1\u8BA1\u67E5\u8BE2\u3001\u53EF\u9760\u5199\u5165\u548C\u6062\u590D\u3002", "recommended", ["system"]),
+    ...module("system.audit", "\u5BA1\u8BA1\u65E5\u5FD7", "\u5BA1\u8BA1\u67E5\u8BE2\u3001\u53EF\u9760\u5199\u5165\u548C\u6062\u590D\u3002", "recommended", ["system"]),
     fileRoots: [
       "apps/server/src/audit/drizzle-log-store.ts",
       "apps/server/src/audit/recovery-queue.ts",
@@ -689,7 +722,7 @@ var platformModules = [
     databaseStatementTokens: ["idx_audit_logs_"]
   },
   {
-    ...module2("system.operations", "\u8FD0\u7EF4\u76D1\u63A7", "\u670D\u52A1\u3001\u6570\u636E\u5E93\u3001\u7F13\u5B58\u3001\u78C1\u76D8\u548C\u4F1A\u8BDD\u76D1\u63A7\u3002", "recommended", ["system", "system.configuration"]),
+    ...module("system.operations", "\u8FD0\u7EF4\u76D1\u63A7", "\u670D\u52A1\u3001\u6570\u636E\u5E93\u3001\u7F13\u5B58\u3001\u78C1\u76D8\u548C\u4F1A\u8BDD\u76D1\u63A7\u3002", "recommended", ["system", "system.configuration"]),
     fileRoots: [
       "apps/server/src/system/operation-monitoring.ts",
       "apps/server/src/system/operation-monitoring.test.ts",
@@ -765,7 +798,7 @@ function selectedModuleManifests(names) {
   }
   return moduleDistributionCatalog.filter(({ name }) => selected.has(name));
 }
-function module2(name, label, description, selection, dependencies = []) {
+function module(name, label, description, selection, dependencies = []) {
   return {
     name,
     version: "0.1.0",
@@ -912,9 +945,10 @@ class CommandExecutionError extends Error {
     this.name = "CommandExecutionError";
   }
 }
-async function runCommand(command, args, cwd) {
+async function runCommand(command, args, cwd, options = {}) {
   const child = Bun.spawn([command, ...args], {
     cwd,
+    env: options.env ?? process.env,
     stderr: "inherit",
     stdin: "inherit",
     stdout: "inherit"
@@ -1059,7 +1093,9 @@ var managedSecretKeys = [
   "AGENT_SERVER_INTERNAL_TOKEN",
   "ADK_DEBUG_PLATFORM_TOKEN",
   "AGENT_RUN_ENCRYPTION_SECRET",
-  "AI_ARTIFACT_ENCRYPTION_SECRET"
+  "AI_ARTIFACT_ENCRYPTION_SECRET",
+  "EMBEDDING_RUN_ENCRYPTION_SECRET",
+  "AI_OUTPUT_ARTIFACT_REFERENCE_SECRET"
 ];
 async function initializeLocalEnvironment(projectRoot, generateSecret = defaultSecret) {
   const target = join(projectRoot, ".env");
@@ -1083,6 +1119,12 @@ async function initializeLocalEnvironment(projectRoot, generateSecret = defaultS
   if (/^AI_ARTIFACT_ENCRYPTION_SECRET=[ \t\r]*$/m.test(content)) {
     content = setEmptyVariable(content, "AI_ARTIFACT_ENCRYPTION_SECRET", generateSecret());
   }
+  if (/^EMBEDDING_RUN_ENCRYPTION_SECRET=[ \t\r]*$/m.test(content)) {
+    content = setEmptyVariable(content, "EMBEDDING_RUN_ENCRYPTION_SECRET", generateSecret());
+  }
+  if (/^AI_OUTPUT_ARTIFACT_REFERENCE_SECRET=[ \t\r]*$/m.test(content)) {
+    content = setEmptyVariable(content, "AI_OUTPUT_ARTIFACT_REFERENCE_SECRET", generateSecret());
+  }
   let handle;
   try {
     handle = await open(target, "wx", 384);
@@ -2584,8 +2626,9 @@ function collapseRemovalRoots(paths) {
 }
 async function stripModuleBlocks(root, selected) {
   for (const path of await collectFiles2(root)) {
-    if (!textExtensions.has(extname(path)))
+    if (basename3(path) !== "Dockerfile" && !textExtensions.has(extname(path))) {
       continue;
+    }
     const source = await readFile6(path, "utf8");
     if (!source.includes("@windy-module"))
       continue;
@@ -2762,6 +2805,31 @@ Skill \u4ECD\u53EF\u7528\u4E8E\u666E\u901A\u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\u
 `;
 }
 
+// src/runtime-profile-opensearch.ts
+var openSearchComposeService = `  opensearch:
+    profiles: ["search"]
+    image: opensearchproject/opensearch:2.19.3
+    environment:
+      discovery.type: single-node
+      DISABLE_INSTALL_DEMO_CONFIG: "true"
+      DISABLE_SECURITY_PLUGIN: "true"
+      OPENSEARCH_JAVA_OPTS: "-Xms512m -Xmx512m"
+    ports:
+      - "127.0.0.1:19200:9200"
+    volumes:
+      - opensearch-data:/usr/share/opensearch/data
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "curl -fsS http://127.0.0.1:9200/_cluster/health?wait_for_status=yellow",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+
+`;
+
 // src/runtime-profile-files.ts
 var starterComposeBase = `services:
   postgres:
@@ -2804,6 +2872,7 @@ var starterComposeBase = `services:
       DATABASE_URL: postgresql://windy:\${POSTGRES_PASSWORD}@postgres:5432/windy
       WINDY_BOOTSTRAP_ADMIN_PASSWORD: \${WINDY_BOOTSTRAP_ADMIN_PASSWORD:?\u8BF7\u5728 .env \u4E2D\u8BBE\u7F6E\u7BA1\u7406\u5458\u521D\u59CB\u5BC6\u7801}
       WINDY_AUDIT_QUEUE_FILE: /app/data/audit/recovery-queue.json
+__STORAGE_SERVER_ENV__
       WINDY_CONTAINERIZED: "1"
       BUN_CONFIG_NO_CLEAR_TERMINAL_ON_RELOAD: "true"
       WINDY_SYSTEM_USAGE_PATHS: /app/data/audit
@@ -2815,6 +2884,9 @@ __TOOL_SANDBOX_SERVER_ENV__
       AI_ARTIFACT_URL: http://server:9747/api/internal/ai/artifacts
       AI_ARTIFACT_ENCRYPTION_SECRET: \${AI_ARTIFACT_ENCRYPTION_SECRET:-}
       DOCUMENT_SERVER_URL: \${DOCUMENT_SERVER_URL:-}
+      AI_OUTPUT_ARTIFACT_REFERENCE_SECRET: \${AI_OUTPUT_ARTIFACT_REFERENCE_SECRET:-}
+      DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY: \${DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY:-}
+      DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST: \${DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST:-}
       SPEECH_SERVER_URL: \${SPEECH_SERVER_URL:-}
       EMBEDDING_SERVER_URL: \${EMBEDDING_SERVER_URL:-}
 __OPENSEARCH_SERVER_ENV__
@@ -2824,6 +2896,7 @@ __OPENSEARCH_SERVER_ENV__
       - ./apps/server:/app/apps/server
       - ./packages:/app/packages
       - server-audit-data:/app/data/audit
+__STORAGE_SERVER_VOLUME__
 __TOOL_SANDBOX_SERVER_VOLUME__
     depends_on:
       migrate:
@@ -2864,29 +2937,6 @@ volumes:
   postgres-data:
   server-audit-data:
 __OPTIONAL_VOLUMES__
-`;
-var openSearchComposeService = `  opensearch:
-    profiles: ["search"]
-    image: opensearchproject/opensearch:2.19.3
-    environment:
-      discovery.type: single-node
-      DISABLE_INSTALL_DEMO_CONFIG: "true"
-      DISABLE_SECURITY_PLUGIN: "true"
-      OPENSEARCH_JAVA_OPTS: "-Xms512m -Xmx512m"
-    ports:
-      - "127.0.0.1:19200:9200"
-    volumes:
-      - opensearch-data:/usr/share/opensearch/data
-    healthcheck:
-      test:
-        [
-          "CMD-SHELL",
-          "curl -fsS http://127.0.0.1:9200/_cluster/health?wait_for_status=yellow",
-        ]
-      interval: 10s
-      timeout: 5s
-      retries: 12
-
 `;
 var agentComposeService = `  tool-sandbox-init:
     profiles: ["agent"]
@@ -2955,8 +3005,17 @@ var agentComposeService = `  tool-sandbox-init:
       AI_PROVIDER_CONNECT_TIMEOUT_MS: \${AI_PROVIDER_CONNECT_TIMEOUT_MS:-5000}
       AI_PROVIDER_REQUEST_TIMEOUT_MS: \${AI_PROVIDER_REQUEST_TIMEOUT_MS:-60000}
       AI_PROVIDER_MAX_RESPONSE_BYTES: \${AI_PROVIDER_MAX_RESPONSE_BYTES:-2097152}
+      AI_PROVIDER_MAX_DURATION_SECONDS: \${AI_PROVIDER_MAX_DURATION_SECONDS:-300}
+      AI_PROVIDER_MAX_INPUT_BYTES: \${AI_PROVIDER_MAX_INPUT_BYTES:-67108864}
+      AI_PROVIDER_MAX_ARTIFACTS: \${AI_PROVIDER_MAX_ARTIFACTS:-16}
+      AI_PROVIDER_MAX_PIXELS_PER_ARTIFACT: \${AI_PROVIDER_MAX_PIXELS_PER_ARTIFACT:-100000000}
       AI_PROVIDER_CAPABILITIES: \${AI_PROVIDER_CAPABILITIES:-text-generation}
       AI_PROVIDER_INPUT_MODALITIES: \${AI_PROVIDER_INPUT_MODALITIES:-text}
+      AI_PROVIDER_DEPLOYMENT_IDENTITY: \${AI_PROVIDER_DEPLOYMENT_IDENTITY:-}
+      AI_PROVIDER_RELEASE_DIGEST: \${AI_PROVIDER_RELEASE_DIGEST:-}
+      AI_PROVIDER_READINESS_TTL_SECONDS: \${AI_PROVIDER_READINESS_TTL_SECONDS:-60}
+      AI_PROVIDER_MAX_CONCURRENT_RUNS: \${AI_PROVIDER_MAX_CONCURRENT_RUNS:-1}
+      AI_PROVIDER_MAX_QUEUE_DEPTH: \${AI_PROVIDER_MAX_QUEUE_DEPTH:-0}
     volumes:
       - agent-run-data:/app/data/agent
     depends_on:
@@ -2974,9 +3033,13 @@ var agentComposeService = `  tool-sandbox-init:
       DOCUMENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
       DOCUMENT_RUN_STORE_PATH: /app/data/document/runs.sqlite3
       DOCUMENT_ARTIFACT_URL: \${DOCUMENT_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      DOCUMENT_OUTPUT_ARTIFACT_URL: \${DOCUMENT_OUTPUT_ARTIFACT_URL:-http://server:9747/api/internal/ai/output-artifacts}
       DOCUMENT_ADAPTER_URL: \${DOCUMENT_ADAPTER_URL:-}
       DOCUMENT_ADAPTER_TOKEN: \${DOCUMENT_ADAPTER_TOKEN:-}
       DOCUMENT_DEPLOYMENT_KEY: \${DOCUMENT_DEPLOYMENT_KEY:-}
+      DOCUMENT_DEPLOYMENT_IDENTITY: \${DOCUMENT_DEPLOYMENT_IDENTITY:-}
+      DOCUMENT_RELEASE_DIGEST: \${DOCUMENT_RELEASE_DIGEST:-}
+      DOCUMENT_OFFERS_DIGEST: \${DOCUMENT_OFFERS_DIGEST:-}
       DOCUMENT_ADAPTER_CAPABILITIES: \${DOCUMENT_ADAPTER_CAPABILITIES:-document.ocr,document.layout,document.table}
       DOCUMENT_MAX_UNITS: \${DOCUMENT_MAX_UNITS:-500}
     volumes:
@@ -2994,12 +3057,23 @@ var agentComposeService = `  tool-sandbox-init:
       SPEECH_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
       SPEECH_RUN_STORE_PATH: /app/data/speech/runs.sqlite3
       SPEECH_ARTIFACT_URL: \${SPEECH_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      SPEECH_OUTPUT_ARTIFACT_URL: \${SPEECH_OUTPUT_ARTIFACT_URL:-http://server:9747/api/internal/ai/output-artifacts}
       SPEECH_ADAPTER_URL: \${SPEECH_ADAPTER_URL:-}
       SPEECH_ADAPTER_TOKEN: \${SPEECH_ADAPTER_TOKEN:-}
       SPEECH_DEPLOYMENT_KEY: \${SPEECH_DEPLOYMENT_KEY:-}
-      SPEECH_ADAPTER_CAPABILITIES: \${SPEECH_ADAPTER_CAPABILITIES:-speech.transcribe.batch,speech.normalize,speech.vad,speech.timestamps}
+      SPEECH_DEPLOYMENT_IDENTITY: \${SPEECH_DEPLOYMENT_IDENTITY:-}
+      SPEECH_RELEASE_DIGEST: \${SPEECH_RELEASE_DIGEST:-}
+      SPEECH_OFFERS_DIGEST: \${SPEECH_OFFERS_DIGEST:-}
+      SPEECH_ADAPTER_CAPABILITIES: \${SPEECH_ADAPTER_CAPABILITIES:-speech.transcribe.batch,speech.translate,speech.vad,speech.timestamps}
       SPEECH_MAX_UNITS: \${SPEECH_MAX_UNITS:-100000}
       SPEECH_MAX_MEDIA_DURATION_SECONDS: \${SPEECH_MAX_MEDIA_DURATION_SECONDS:-86400}
+      SPEECH_MAX_INPUT_ARTIFACT_BYTES: \${SPEECH_MAX_INPUT_ARTIFACT_BYTES:-2147483648}
+      SPEECH_MAX_INLINE_OUTPUT_BYTES: \${SPEECH_MAX_INLINE_OUTPUT_BYTES:-67108864}
+      SPEECH_MAX_OUTPUT_ARTIFACT_BYTES: \${SPEECH_MAX_OUTPUT_ARTIFACT_BYTES:-536870912}
+      SPEECH_MAX_CONCURRENT_RUNS: \${SPEECH_MAX_CONCURRENT_RUNS:-1}
+      SPEECH_MAX_QUEUE_DEPTH: \${SPEECH_MAX_QUEUE_DEPTH:-0}
+      SPEECH_READINESS_TIMEOUT_SECONDS: \${SPEECH_READINESS_TIMEOUT_SECONDS:-5}
+      SPEECH_READINESS_TTL_SECONDS: \${SPEECH_READINESS_TTL_SECONDS:-60}
     volumes:
       - speech-run-data:/app/data/speech
     depends_on:
@@ -3014,6 +3088,7 @@ var agentComposeService = `  tool-sandbox-init:
     environment:
       EMBEDDING_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
       EMBEDDING_ARTIFACT_URL: \${EMBEDDING_ARTIFACT_URL:-http://server:9747/api/internal/ai/artifacts}
+      EMBEDDING_RUN_ARTIFACT_URL: \${EMBEDDING_RUN_ARTIFACT_URL:-http://server:9747/api/internal/embeddings/runs}
       EMBEDDING_ADAPTER_URL: \${EMBEDDING_ADAPTER_URL:-}
       EMBEDDING_ADAPTER_TOKEN: \${EMBEDDING_ADAPTER_TOKEN:-}
       EMBEDDING_DEPLOYMENT_KEY: \${EMBEDDING_DEPLOYMENT_KEY:-}
@@ -3024,15 +3099,20 @@ var agentComposeService = `  tool-sandbox-init:
       EMBEDDING_NORMALIZED: \${EMBEDDING_NORMALIZED:-true}
       EMBEDDING_CAPABILITIES: \${EMBEDDING_CAPABILITIES:-embedding.text}
       EMBEDDING_MAX_UNITS: \${EMBEDDING_MAX_UNITS:-256}
+      EMBEDDING_RUN_ENCRYPTION_SECRET: \${EMBEDDING_RUN_ENCRYPTION_SECRET:-}
+      EMBEDDING_MAX_CONCURRENT_RUNS: \${EMBEDDING_MAX_CONCURRENT_RUNS:-1}
+      EMBEDDING_RUN_TERMINAL_TTL_SECONDS: \${EMBEDDING_RUN_TERMINAL_TTL_SECONDS:-604800}
+    volumes:
+      - embedding-run-data:/app/data/embedding
     depends_on:
       server:
         condition: service_started
 
 `;
-function starterComposeFor(includeAgent, includeSearch = true) {
+function starterComposeFor(includeAgent, includeSearch = true, includeStorage = true) {
   return starterComposeBase.replace(`  web:
 `, `${includeAgent ? agentComposeService : ""}  web:
-`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
+`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__STORAGE_SERVER_ENV__", includeStorage ? "      WINDY_STORAGE_ROOT: /app/data/storage" : "").replace("__STORAGE_SERVER_VOLUME__", includeStorage ? "      - server-storage-data:/app/data/storage" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
       OPENSEARCH_USERNAME: \${OPENSEARCH_USERNAME:-}
       OPENSEARCH_PASSWORD: \${OPENSEARCH_PASSWORD:-}
       OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", [
@@ -3040,16 +3120,23 @@ function starterComposeFor(includeAgent, includeSearch = true) {
     includeAgent ? "  tool-sandbox-ipc:" : "",
     includeAgent ? "  document-run-data:" : "",
     includeAgent ? "  speech-run-data:" : "",
-    includeSearch ? "  opensearch-data:" : ""
+    includeAgent ? "  embedding-run-data:" : "",
+    includeSearch ? "  opensearch-data:" : "",
+    includeStorage ? "  server-storage-data:" : ""
   ].filter(Boolean).join(`
 `));
 }
 var starterCompose = starterComposeFor(true);
 // src/runtime-environment-example.ts
-function environmentExample(includeExample, includeAgent = true, includeSearch = true) {
+function environmentExample(includeExample, includeAgent = true, includeSearch = true, includeStorage = true) {
   return `# \u590D\u5236\u4E3A .env \u540E\u586B\u5199\u3002\u4E0D\u8981\u63D0\u4EA4\u771F\u5B9E\u5BC6\u7801\u3002
 POSTGRES_PASSWORD=
 WINDY_BOOTSTRAP_ADMIN_PASSWORD=
+${includeStorage ? `
+# Compose \u9ED8\u8BA4\u628A Storage \u4E0E\u62A5\u544A\u6682\u5B58\u6301\u4E45\u5316\u5230 /app/data/storage\u3002
+# \u5982\u9700\u72EC\u7ACB\u6302\u8F7D\u62A5\u544A\u6682\u5B58\u76EE\u5F55\uFF0C\u8BF7\u540C\u65F6\u4FEE\u6539 Compose volume\u3002
+# WINDY_REPORT_STAGING_ROOT=/app/data/storage/report-staging
+` : ""}
 ${includeAgent ? `
 # Agent profile \u4EC5\u7531\u670D\u52A1\u7AEF Agent Runtime \u8BFB\u53D6\uFF1B\u4E0D\u8981\u4F7F\u7528 VITE_ \u524D\u7F00\u3002
 # ADK Web \u901A\u8FC7 canonical Run API \u8C03\u8BD5\u9879\u76EE\u9009\u62E9\u7684\u771F\u5B9E\u6587\u672C Operation\uFF1B\u8C03\u8BD5 Token
@@ -3066,21 +3153,40 @@ OTEL_EXPORTER_OTLP_HEADERS=
 AI_ARTIFACT_ENCRYPTION_SECRET=
 DOCUMENT_SERVER_URL=
 DOCUMENT_ARTIFACT_URL=
+DOCUMENT_OUTPUT_ARTIFACT_URL=
 DOCUMENT_ADAPTER_URL=
 DOCUMENT_ADAPTER_TOKEN=
 DOCUMENT_DEPLOYMENT_KEY=
+DOCUMENT_DEPLOYMENT_IDENTITY=
+DOCUMENT_RELEASE_DIGEST=
+DOCUMENT_OFFERS_DIGEST=
+AI_OUTPUT_ARTIFACT_REFERENCE_SECRET=
+DOCUMENT_OUTPUT_ARTIFACT_SINK_IDENTITY=
+DOCUMENT_OUTPUT_ARTIFACT_SINK_RELEASE_DIGEST=
 # DOCUMENT_ADAPTER_CAPABILITIES=document.ocr,document.layout,document.table
 # DOCUMENT_MAX_UNITS=500
 SPEECH_SERVER_URL=
 SPEECH_ARTIFACT_URL=
+SPEECH_OUTPUT_ARTIFACT_URL=
 SPEECH_ADAPTER_URL=
 SPEECH_ADAPTER_TOKEN=
 SPEECH_DEPLOYMENT_KEY=
-# SPEECH_ADAPTER_CAPABILITIES=speech.transcribe.batch,speech.normalize,speech.vad,speech.timestamps
+SPEECH_DEPLOYMENT_IDENTITY=
+SPEECH_RELEASE_DIGEST=
+SPEECH_OFFERS_DIGEST=
+# SPEECH_ADAPTER_CAPABILITIES=speech.transcribe.batch,speech.translate,speech.vad,speech.timestamps
 # SPEECH_MAX_UNITS=100000
 # SPEECH_MAX_MEDIA_DURATION_SECONDS=86400
+# SPEECH_MAX_INPUT_ARTIFACT_BYTES=2147483648
+# SPEECH_MAX_INLINE_OUTPUT_BYTES=67108864
+# SPEECH_MAX_OUTPUT_ARTIFACT_BYTES=536870912
+# SPEECH_MAX_CONCURRENT_RUNS=1
+# SPEECH_MAX_QUEUE_DEPTH=0
+# SPEECH_READINESS_TIMEOUT_SECONDS=5
+# SPEECH_READINESS_TTL_SECONDS=60
 EMBEDDING_SERVER_URL=
 EMBEDDING_ARTIFACT_URL=
+EMBEDDING_RUN_ARTIFACT_URL=
 EMBEDDING_ADAPTER_URL=
 EMBEDDING_ADAPTER_TOKEN=
 EMBEDDING_DEPLOYMENT_KEY=
@@ -3091,6 +3197,9 @@ EMBEDDING_DIMENSIONS=
 # EMBEDDING_NORMALIZED=true
 # EMBEDDING_CAPABILITIES=embedding.text,embedding.image
 # EMBEDDING_MAX_UNITS=256
+EMBEDDING_RUN_ENCRYPTION_SECRET=
+# EMBEDDING_MAX_CONCURRENT_RUNS=1
+# EMBEDDING_RUN_TERMINAL_TTL_SECONDS=604800
 QWEN_API_URL=
 QWEN_API_KEY=
 QWEN_MODEL=
@@ -3098,10 +3207,19 @@ AI_PROVIDER_HTTPS_HOST_ALLOWLIST=
 # VLM Deployment \u793A\u4F8B\uFF1Atext-generation,vision\uFF1B\u8F93\u5165\u6A21\u6001\uFF1Atext,image
 # AI_PROVIDER_CAPABILITIES=text-generation
 # AI_PROVIDER_INPUT_MODALITIES=text
+# AI_PROVIDER_DEPLOYMENT_IDENTITY=
+# AI_PROVIDER_RELEASE_DIGEST=
+# AI_PROVIDER_READINESS_TTL_SECONDS=60
+# AI_PROVIDER_MAX_CONCURRENT_RUNS=1
+# AI_PROVIDER_MAX_QUEUE_DEPTH=0
 # AI_PROVIDER_AUDIT_RETENTION_DAYS=90
 # AI_PROVIDER_CONNECT_TIMEOUT_MS=5000
 # AI_PROVIDER_REQUEST_TIMEOUT_MS=60000
 # AI_PROVIDER_MAX_RESPONSE_BYTES=2097152
+# AI_PROVIDER_MAX_DURATION_SECONDS=300
+# AI_PROVIDER_MAX_INPUT_BYTES=67108864
+# AI_PROVIDER_MAX_ARTIFACTS=16
+# AI_PROVIDER_MAX_PIXELS_PER_ARTIFACT=100000000
 ` : ""}
 
 ${includeSearch ? `# OpenSearch profile \u9ED8\u8BA4\u4E0D\u542F\u52A8\uFF1Bbun run dev:search \u4F1A\u53EA\u5411 Server \u6CE8\u5165\u5BB9\u5668\u5185\u5730\u5740\u3002
@@ -3120,8 +3238,8 @@ OPENSEARCH_PASSWORD=
 ` : ""}
 `;
 }
-// src/project-files.ts
-function starterDocsReadme(includeOfflineLicense = true, includeAgent = true, includeOperations = true) {
+// src/starter-docs-readme.ts
+function starterDocsReadme(includeOfflineLicense = true, includeAgent = true, includeOperations = true, includeStorage = true) {
   return `# Windy Starter \u6587\u6863
 
 \u672C\u76EE\u5F55\u53EA\u5305\u542B\u5BA2\u6237\u8FD0\u884C\u9879\u76EE\u9700\u8981\u7684\u5E73\u53F0\u67B6\u6784\u3001\u5F00\u53D1\u63A5\u5165\u548C\u8FD0\u7EF4\u53EF\u89C2\u6D4B\u6027\u6587\u6863\u3002
@@ -3129,17 +3247,20 @@ License \u7B7E\u53D1\u4E2D\u5FC3\u3001\u72EC\u7ACB\u7B7E\u540D\u670D\u52A1\u3001
 \u89C4\u5212\u5C5E\u4E8E\u8F6F\u4EF6\u4F9B\u5E94\u65B9\u63A7\u5236\u9762\uFF0C\u4E0D\u8FDB\u5165\u5BA2\u6237 Starter\u3002
 
 - \u67B6\u6784\uFF1A\u4ECE [Module Manifest \u7EC4\u5408](./architecture/module-manifest-composition.md) \u5F00\u59CB\u3002
+- \u5916\u90E8\u51ED\u636E\uFF1A[\u6A21\u5757 Secret \u89E3\u6790 Port](./architecture/module-secret-resolution.md)\u3002
 - \u6570\u636E\u5E93\uFF1A\u4E1A\u52A1\u8868\u4F7F\u7528 [Migration Bundle \u4E0E\u72EC\u7ACB Drizzle lineage](./architecture/migration-bundle.md)\u3002
 - \u5E73\u53F0\u5F00\u53D1\uFF1A\u4ECE [\u7CFB\u7EDF CRUD API](./platform/system-crud-api.md) \u548C [CRUD \u751F\u6210\u5668](./development/crud-generator.md) \u5F00\u59CB\u3002
 - Web \u4E1A\u52A1\u9875\u9762\uFF1A[project-owned \u4E1A\u52A1 Web \u8DEF\u7531](./development/business-web-routes.md)\u3002
 - \u90E8\u7F72\u671F\u6A21\u5757\u7BA1\u7406\uFF1A[\u6A21\u5757\u751F\u547D\u5468\u671F](./development/module-lifecycle.md)\u3002
 - \u4E1A\u52A1\u6A21\u5757\u5F00\u53D1\uFF1A[windy-business-module Skill](../.agents/skills/windy-business-module/SKILL.md)\u3002
+${includeStorage ? "- \u5927\u62A5\u544A\u5BFC\u5165\uFF1A[\u53D7\u6CBB\u7406\u7684\u5927\u62A5\u544A\u6682\u5B58](./architecture/report-staging.md)\u3002" : ""}
 ${includeOfflineLicense ? "- License \u6D88\u8D39\u7AEF\uFF1A[\u79BB\u7EBF\u6FC0\u6D3B\u4E0E\u5B89\u88C5\u534F\u8BAE](./license/license-offline-activation-code.md)\uFF1B\u8FD0\u884C\u65F6\u80FD\u529B\u7531 npm \u4F9D\u8D56 `@southwind-ai/license` \u63D0\u4F9B\u3002" : ""}
 - \u8FD0\u7EF4\uFF1A[\u53EF\u89C2\u6D4B\u6027](./operations/observability.md)${includeOperations ? " \u4E0E [\u8FD0\u7EF4\u603B\u89C8](./platform/operations-overview.md)" : ""}\u3002
 ${includeAgent ? "- Agent\u3001\u591A\u6A21\u6001 Runtime \u4E0E MCP\uFF1A[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Document AI Runtime](./platform/document-ai-runtime.md)\u3001[Speech AI Runtime](./platform/speech-ai-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
 - \u517C\u5BB9\uFF1A[RuoYi-Vue Adapter](./adapters/ruoyi-vue-compatibility.md)\u3002
 `;
 }
+// src/project-files.ts
 function starterReadme(projectName, includeExample = true, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = []) {
   const selected = new Set(selectedModules);
   const includeAgent = selected.has("system.agent");
@@ -3438,6 +3559,8 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
       } : {},
       ...selectedModules.includes("system.agent") ? {
         "dev:agent": "docker compose --profile agent up --build",
+        "dev:speech": "PLATFORM_ENABLE_AI=true SPEECH_SERVER_URL=http://speech-server:8091 docker compose --profile agent --profile speech up --build",
+        "speech:pins": "bun run scripts/provision-speech-readiness.ts",
         "dev:adk-web": "bun run scripts/dev-adk-web.ts"
       } : {},
       ...generatorVersion ? { windy: "create-windy" } : {},
@@ -3452,6 +3575,7 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
         "bun run --cwd apps/server typecheck",
         "bun run --cwd packages/ai-client typecheck",
         "bun run --cwd packages/jobs typecheck",
+        "bun run --cwd packages/shared typecheck",
         "bun run --cwd packages/server-sdk typecheck",
         "bun run --cwd packages/storage typecheck",
         "bun run --cwd packages/database typecheck",
@@ -3488,7 +3612,8 @@ var templateRootFiles = [
   "package.json",
   "scripts/notification-postgres-regression.ts",
   "scripts/lib/postgres-regression.ts",
-  "scripts/dev-adk-web.ts"
+  "scripts/dev-adk-web.ts",
+  "scripts/provision-speech-readiness.ts"
 ];
 var templateDirectories = [
   ".agents/skills/windy-business-module",
@@ -3515,6 +3640,7 @@ var templateDocumentationFiles = [
   "docs/architecture/admin-surface-boundary.md",
   "docs/architecture/ai-egress.md",
   "docs/architecture/ai-runtime.md",
+  "docs/architecture/ai-runtime-readiness.md",
   "docs/architecture/data-scope-query-enforcement.md",
   "docs/architecture/durable-jobs.md",
   "docs/architecture/foundation-infrastructure.md",
@@ -3523,8 +3649,11 @@ var templateDocumentationFiles = [
   "docs/architecture/migration-bundle.md",
   "docs/architecture/module-host.md",
   "docs/architecture/module-manifest-composition.md",
+  "docs/architecture/module-secret-resolution.md",
   "docs/architecture/object-storage.md",
+  "docs/architecture/report-staging.md",
   "docs/architecture/search-provider-protocol.md",
+  "docs/architecture/speech-variants.md",
   "docs/architecture/server-module-interface.md",
   "docs/architecture/web-access-snapshot-resilience.md",
   "docs/development/business-web-routes.md",
@@ -3674,8 +3803,8 @@ function isGenerationProvenance(value) {
 function isModuleVersion(value) {
   if (!value || typeof value !== "object")
     return false;
-  const module3 = value;
-  return typeof module3.name === "string" && module3.name.length > 0 && typeof module3.version === "string" && module3.version.length > 0;
+  const module2 = value;
+  return typeof module2.name === "string" && module2.name.length > 0 && typeof module2.version === "string" && module2.version.length > 0;
 }
 
 // src/registry-dependencies.ts
@@ -3876,10 +4005,10 @@ async function generateProject(input) {
   const packageJson = JSON.parse(await readFile10(packagePath, "utf8"));
   await writeFile9(packagePath, `${JSON.stringify(createStarterPackage(packageJson, input.projectName, includeOxc, projectLicense, selectedModules, templateMetadata.generatorVersion), null, 2)}
 `);
-  await writeFile9(join11(input.targetDirectory, "docker-compose.yml"), starterComposeFor(selectedModules.includes("system.agent"), selectedModules.includes("system.search")));
-  await writeFile9(join11(input.targetDirectory, ".env.example"), environmentExample(includeExample, selectedModules.includes("system.agent"), selectedModules.includes("system.search")));
+  await writeFile9(join11(input.targetDirectory, "docker-compose.yml"), starterComposeFor(selectedModules.includes("system.agent"), selectedModules.includes("system.search"), selectedModules.includes("system.storage")));
+  await writeFile9(join11(input.targetDirectory, ".env.example"), environmentExample(includeExample, selectedModules.includes("system.agent"), selectedModules.includes("system.search"), selectedModules.includes("system.storage")));
   await writeFile9(join11(input.targetDirectory, "README.md"), starterReadme(input.projectName, includeExample, includeOxc, projectLicense, selectedModules));
-  await writeFile9(join11(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), selectedModules.includes("system.agent"), selectedModules.includes("system.operations")));
+  await writeFile9(join11(input.targetDirectory, "docs/README.md"), starterDocsReadme(selectedModules.includes("system.license"), selectedModules.includes("system.agent"), selectedModules.includes("system.operations"), selectedModules.includes("system.storage")));
   await reflectCodeQualityChoice(input.targetDirectory, includeOxc);
   await applyWindyBaseLicense(input.targetDirectory);
   await applyProjectLicense(input.targetDirectory, projectLicense, input.licenseHolder);
@@ -7589,6 +7718,11 @@ var recipes = [
     id: "starter-0.5.1-to-0.5.2",
     from: "0.5.1",
     to: "0.5.2"
+  },
+  {
+    id: "starter-0.5.2-to-0.6.0",
+    from: "0.5.2",
+    to: "0.6.0"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -9156,7 +9290,7 @@ var oxcManagedPaths = new Set([
   ".oxlintrc.json",
   ".husky/pre-commit"
 ]);
-async function createUpdatePlan(request, artifacts) {
+async function createUpdatePlan(request, artifacts, dependencies = {}) {
   await assertProjectReadyForUpdate(request.projectDirectory);
   const manifestPath = join25(request.projectDirectory, ".windy/files.json");
   const expectedManifestHash = hashContent(await readFile21(manifestPath));
@@ -9169,7 +9303,7 @@ async function createUpdatePlan(request, artifacts) {
   if (targetVersion !== targetProvenance.generatorVersion) {
     throw new Error(`\u5F53\u524D CLI \u53EA\u80FD\u66F4\u65B0\u5230 ${targetProvenance.generatorVersion}\uFF0C\u8BF7\u8FD0\u884C create-windy@${targetVersion}`);
   }
-  const versionRecipes = resolveRecipeChain(provenance.windyVersion, targetVersion);
+  const versionRecipes = (dependencies.resolveVersionRecipes ?? resolveRecipeChain)(provenance.windyVersion, targetVersion);
   const moduleRecipes = resolveModuleRecipeIds(request);
   const recipes2 = [...versionRecipes.map(({ id }) => id), ...moduleRecipes];
   const [rawSourceManifest, rawTargetManifest] = await Promise.all([
@@ -10364,7 +10498,7 @@ async function runUpdate(args, projectDirectory) {
     console.log(recipes2.length ? `\u53EF\u66F4\u65B0\uFF1A${current.windyVersion} \u2192 ${target}\uFF08${recipes2.length} \u4E2A\u8FDE\u7EED recipe\uFF09` : `\u5DF2\u662F\u5F53\u524D CLI \u652F\u6301\u7684\u6700\u65B0\u7248\u672C ${current.windyVersion}`);
     return;
   }
-  if (!recipes2.length) {
+  if (!recipes2.length && current.templateCommit === template.templateCommit) {
     console.log(`\u9879\u76EE\u5DF2\u7ECF\u662F ${target}\uFF0C\u65E0\u9700\u66F4\u65B0`);
     return;
   }
@@ -10554,8 +10688,8 @@ function isPlatform(value) {
 function isModule(value) {
   if (!value || typeof value !== "object")
     return false;
-  const module3 = value;
-  return typeof module3.key === "string" && /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/.test(module3.key) && isStringList(module3.schema) && typeof module3.out === "string" && isStringList(module3.legacyPlatformTables) && module3.legacyPlatformTables.every(isTableName);
+  const module2 = value;
+  return typeof module2.key === "string" && /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/.test(module2.key) && isStringList(module2.schema) && typeof module2.out === "string" && isStringList(module2.legacyPlatformTables) && module2.legacyPlatformTables.every(isTableName);
 }
 function isStringList(value) {
   return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && item.length > 0);
@@ -10572,10 +10706,10 @@ function validatePaths(projectDirectory, config) {
     resolveProjectPath(projectDirectory, path2);
   }
   const platformOut = resolveProjectPath(projectDirectory, config.platform.out);
-  for (const module3 of config.modules) {
-    const moduleOut = resolveProjectPath(projectDirectory, module3.out);
+  for (const module2 of config.modules) {
+    const moduleOut = resolveProjectPath(projectDirectory, module2.out);
     if (moduleOut === platformOut || moduleOut.startsWith(`${platformOut}/`) || platformOut.startsWith(`${moduleOut}/`)) {
-      throw new Error(`${module3.key} \u7684 lineage \u8F93\u51FA\u4E0D\u80FD\u4E0E\u5E73\u53F0\u76EE\u5F55\u91CD\u53E0`);
+      throw new Error(`${module2.key} \u7684 lineage \u8F93\u51FA\u4E0D\u80FD\u4E0E\u5E73\u53F0\u76EE\u5F55\u91CD\u53E0`);
     }
   }
 }
@@ -10583,14 +10717,14 @@ function validateUniqueness(config) {
   const keys = new Set;
   const outputs = new Set;
   const tables = new Set;
-  for (const module3 of config.modules) {
-    if (keys.has(module3.key))
-      throw new Error(`Module key \u91CD\u590D\uFF1A${module3.key}`);
-    if (outputs.has(module3.out))
-      throw new Error(`Module lineage \u8F93\u51FA\u91CD\u590D\uFF1A${module3.out}`);
-    keys.add(module3.key);
-    outputs.add(module3.out);
-    for (const table of module3.legacyPlatformTables) {
+  for (const module2 of config.modules) {
+    if (keys.has(module2.key))
+      throw new Error(`Module key \u91CD\u590D\uFF1A${module2.key}`);
+    if (outputs.has(module2.out))
+      throw new Error(`Module lineage \u8F93\u51FA\u91CD\u590D\uFF1A${module2.out}`);
+    keys.add(module2.key);
+    outputs.add(module2.out);
+    for (const table of module2.legacyPlatformTables) {
       if (tables.has(table))
         throw new Error(`\u65E7\u5E73\u53F0\u8868\u91CD\u590D\u58F0\u660E\uFF1A${table}`);
       tables.add(table);
@@ -10646,27 +10780,27 @@ async function handoffModuleSchemaLineages(options) {
   }
   return {
     moduleCount: config.modules.length,
-    tableCount: config.modules.reduce((total, module3) => total + module3.legacyPlatformTables.length, 0)
+    tableCount: config.modules.reduce((total, module2) => total + module2.legacyPlatformTables.length, 0)
   };
 }
 async function stageModuleLineages(project, temporaryRoot, config, execute) {
   const outputs = [];
-  for (const [index, module3] of config.modules.entries()) {
+  for (const [index, module2] of config.modules.entries()) {
     const output = join28(temporaryRoot, `module-${index}`);
     await mkdir9(output, { recursive: true });
     const generatedConfig = join28(temporaryRoot, `module-${index}.config.ts`);
-    await writeDrizzleConfig(generatedConfig, project, module3.schema, relative6(temporaryRoot, output));
+    await writeDrizzleConfig(generatedConfig, project, module2.schema, relative6(temporaryRoot, output));
     await execute(generatedConfig, temporaryRoot);
     const sqlFiles = await listSqlFiles(output);
     if (sqlFiles.length !== 1) {
-      throw new Error(`${module3.key} baseline \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration`);
+      throw new Error(`${module2.key} baseline \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration`);
     }
     await writeFile14(join28(output, sqlFiles[0]), metadataOnlySql("module"));
     await writeFile14(join28(output, "lineage.json"), `${JSON.stringify({
       schemaVersion: 1,
-      moduleKey: module3.key,
-      schema: module3.schema,
-      legacyPlatformTables: module3.legacyPlatformTables,
+      moduleKey: module2.key,
+      schema: module2.schema,
+      legacyPlatformTables: module2.legacyPlatformTables,
       productionExecutor: "module-migration-bundle"
     }, null, 2)}
 `);
@@ -10699,10 +10833,10 @@ async function installStagedLineages(project, temporaryRoot, config, stagedModul
   await rename2(platform, backup);
   try {
     await rename2(stagedPlatform, platform);
-    for (const [index, module3] of config.modules.entries()) {
-      const output = resolveProjectPath(project, module3.out);
+    for (const [index, module2] of config.modules.entries()) {
+      const output = resolveProjectPath(project, module2.out);
       if (await exists(output)) {
-        throw new Error(`${module3.key} lineage \u8F93\u51FA\u5DF2\u5B58\u5728\uFF0C\u7981\u6B62\u8986\u76D6`);
+        throw new Error(`${module2.key} lineage \u8F93\u51FA\u5DF2\u5B58\u5728\uFF0C\u7981\u6B62\u8986\u76D6`);
       }
       await mkdir9(dirname9(output), { recursive: true });
       await rename2(stagedModules[index], output);
@@ -10734,9 +10868,9 @@ async function validateSchemaSources(project, config) {
   ]) {
     await access3(resolveProjectPath(project, schema));
   }
-  for (const module3 of config.modules) {
-    if (await exists(resolveProjectPath(project, module3.out))) {
-      throw new Error(`${module3.key} lineage \u8F93\u51FA\u5DF2\u5B58\u5728\uFF0C\u7981\u6B62\u8986\u76D6`);
+  for (const module2 of config.modules) {
+    if (await exists(resolveProjectPath(project, module2.out))) {
+      throw new Error(`${module2.key} lineage \u8F93\u51FA\u5DF2\u5B58\u5728\uFF0C\u7981\u6B62\u8986\u76D6`);
     }
   }
 }