create-windy 0.6.1 → 0.6.3

package/dist/cli.js

@@ -33,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = import.meta.require;
 
-// ../../node_modules/.bun/cli-width@4.1.0/node_modules/cli-width/index.js
+// ../../node_modules/cli-width/index.js
 var require_cli_width = __commonJS((exports, module2) => {
   module2.exports = cliWidth;
   function normalizeOpts(options) {
@@ -73,7 +73,7 @@ var require_cli_width = __commonJS((exports, module2) => {
   }
 });
 
-// ../../node_modules/.bun/mute-stream@3.0.0/node_modules/mute-stream/lib/index.js
+// ../../node_modules/mute-stream/lib/index.js
 var require_lib = __commonJS((exports, module2) => {
   var Stream = __require("stream");
 
@@ -2832,6 +2832,14 @@ var openSearchComposeService = `  opensearch:
 
 `;
 
+// src/runtime-profile-compose-build.ts
+var starterServerBuild = `    build:
+      context: .
+      dockerfile: apps/server/Dockerfile
+      args:
+        WINDY_DEBIAN_MIRROR: \${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: \${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}`;
+
 // src/runtime-profile-files.ts
 var starterComposeBase = `services:
   postgres:
@@ -2851,9 +2859,7 @@ var starterComposeBase = `services:
       retries: 5
 
   migrate:
-    build:
-      context: .
-      dockerfile: apps/server/Dockerfile
+${starterServerBuild}
     command: ["bun", "run", "db:migrate"]
     environment:
       DATABASE_URL: postgresql://windy:\${POSTGRES_PASSWORD}@postgres:5432/windy
@@ -2864,9 +2870,7 @@ var starterComposeBase = `services:
         condition: service_healthy
 
   server:
-    build:
-      context: .
-      dockerfile: apps/server/Dockerfile
+${starterServerBuild}
     command: ["bun", "run", "--cwd", "apps/server", "dev"]
     environment:
       NODE_ENV: development
@@ -2942,9 +2946,7 @@ __OPTIONAL_VOLUMES__
 `;
 var agentComposeService = `  tool-sandbox-init:
     profiles: ["agent"]
-    build:
-      context: .
-      dockerfile: apps/server/Dockerfile
+${starterServerBuild}
     user: "0:0"
     command:
       [
@@ -2965,9 +2967,7 @@ var agentComposeService = `  tool-sandbox-init:
 
   tool-sandbox:
     profiles: ["agent"]
-    build:
-      context: .
-      dockerfile: apps/server/Dockerfile
+${starterServerBuild}
     command: ["bun", "run", "apps/server/src/agent/sandbox-worker.ts"]
     environment:
       TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock
@@ -3554,6 +3554,10 @@ var defaultLintStaged = {
   "*.{css,html,json,jsonc,less,md,mdx,scss,yaml,yml}": "oxfmt --write",
   "*.{cjs,cts,js,jsx,mjs,mts,ts,tsx,vue}": ["oxfmt --write", "oxlint"]
 };
+var migrationCliDependencies = {
+  "drizzle-orm": "^0.45.2",
+  pg: "^8.22.0"
+};
 function createStarterPackage(source, projectName, includeOxc = true, projectLicense = "UNLICENSED", selectedModules = [], generatorVersion) {
   const { "lint-staged": sourceLintStaged, ...sourceWithoutLintStaged } = source;
   const devDependencies = { ...source.devDependencies };
@@ -3613,6 +3617,7 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
       test: "bun test && bun run --cwd apps/web test"
     },
     devDependencies: {
+      ...migrationCliDependencies,
       ...devDependencies,
       ...generatorVersion ? { "create-windy": generatorVersion } : {}
     }
@@ -4224,7 +4229,7 @@ function isMissing6(error) {
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin, stdout } from "process";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/key.js
+// ../../node_modules/@inquirer/core/dist/lib/key.js
 var keybindings = ["emacs", "vim"];
 var keybindingLookup = new Set(keybindings);
 function isKeybinding(value) {
@@ -4241,7 +4246,7 @@ var isDownKey = (key, keybindings2 = []) => key.name === "down" || keybindings2.
 var isSpaceKey = (key) => key.name === "space";
 var isNumberKey = (key) => "1234567890".includes(key.name);
 var isEnterKey = (key) => key.name === "enter" || key.name === "return";
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/errors.js
+// ../../node_modules/@inquirer/core/dist/lib/errors.js
 class AbortPromptError extends Error {
   name = "AbortPromptError";
   message = "Prompt was aborted";
@@ -4267,10 +4272,10 @@ class HookError extends Error {
 class ValidationError extends Error {
   name = "ValidationError";
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/@inquirer/core/dist/lib/use-state.js
 import { AsyncResource as AsyncResource2 } from "async_hooks";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/hook-engine.js
+// ../../node_modules/@inquirer/core/dist/lib/hook-engine.js
 import { AsyncLocalStorage, AsyncResource } from "async_hooks";
 var hookStorage = new AsyncLocalStorage;
 function createStore(rl) {
@@ -4375,7 +4380,7 @@ var effectScheduler = {
   }
 };
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/@inquirer/core/dist/lib/use-state.js
 function isFactory(value) {
   return typeof value === "function";
 }
@@ -4396,7 +4401,7 @@ function useState(defaultValue) {
   });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-effect.js
+// ../../node_modules/@inquirer/core/dist/lib/use-effect.js
 function useEffect(cb, depArray) {
   withPointer((pointer) => {
     const oldDeps = pointer.get();
@@ -4408,10 +4413,10 @@ function useEffect(cb, depArray) {
   });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/@inquirer/core/dist/lib/theme.js
 import { styleText } from "util";
 
-// ../../node_modules/.bun/@inquirer+figures@2.0.7/node_modules/@inquirer/figures/dist/index.js
+// ../../node_modules/@inquirer/figures/dist/index.js
 import process2 from "process";
 function isUnicodeSupported() {
   if (!process2.platform.startsWith("win")) {
@@ -4700,7 +4705,7 @@ var figures = shouldUseMain ? mainSymbols : fallbackSymbols;
 var dist_default = figures;
 var replacements = Object.entries(specialMainSymbols);
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/@inquirer/core/dist/lib/theme.js
 var defaultTheme = {
   prefix: {
     idle: styleText("blue", "?"),
@@ -4728,7 +4733,7 @@ function getDefaultTheme() {
   };
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/make-theme.js
+// ../../node_modules/@inquirer/core/dist/lib/make-theme.js
 function isPlainObject(value) {
   if (typeof value !== "object" || value === null)
     return false;
@@ -4756,7 +4761,7 @@ function makeTheme(...themes) {
   return deepMerge(...themesToMerge);
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-prefix.js
+// ../../node_modules/@inquirer/core/dist/lib/use-prefix.js
 function usePrefix({ status = "idle", theme }) {
   const [showLoader, setShowLoader] = useState(false);
   const [tick, setTick] = useState(0);
@@ -4786,7 +4791,7 @@ function usePrefix({ status = "idle", theme }) {
   const iconName = status === "loading" ? "idle" : status;
   return typeof prefix === "string" ? prefix : prefix[iconName] ?? prefix["idle"];
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-memo.js
+// ../../node_modules/@inquirer/core/dist/lib/use-memo.js
 function useMemo(fn, dependencies) {
   return withPointer((pointer) => {
     const prev = pointer.get();
@@ -4798,12 +4803,12 @@ function useMemo(fn, dependencies) {
     return prev.value;
   });
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-ref.js
+// ../../node_modules/@inquirer/core/dist/lib/use-ref.js
 function useRef(val) {
   return useState({ current: val })[0];
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-keypress.js
+// ../../node_modules/@inquirer/core/dist/lib/use-keypress.js
 function useKeypress(userHandler) {
   const signal = useRef(userHandler);
   signal.current = userHandler;
@@ -4821,10 +4826,10 @@ function useKeypress(userHandler) {
     };
   }, []);
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/@inquirer/core/dist/lib/utils.js
 var import_cli_width = __toESM(require_cli_width(), 1);
 
-// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/utils.js
+// ../../node_modules/fast-string-truncated-width/dist/utils.js
 var getCodePointsLength = (() => {
   const SURROGATE_PAIR_RE = /[\uD800-\uDBFF][\uDC00-\uDFFF]/g;
   return (input) => {
@@ -4843,7 +4848,7 @@ var isWideNotCJKTNotEmoji = (x) => {
   return x === 8987 || x === 9001 || x >= 12272 && x <= 12287 || x >= 12289 && x <= 12350 || x >= 12441 && x <= 12543 || x >= 12549 && x <= 12591 || x >= 12593 && x <= 12686 || x >= 12688 && x <= 12771 || x >= 12783 && x <= 12830 || x >= 12832 && x <= 12871 || x >= 12880 && x <= 19903 || x >= 65040 && x <= 65049 || x >= 65072 && x <= 65106 || x >= 65108 && x <= 65126 || x >= 65128 && x <= 65131 || x >= 127488 && x <= 127490 || x >= 127504 && x <= 127547 || x >= 127552 && x <= 127560 || x >= 131072 && x <= 196605 || x >= 196608 && x <= 262141;
 };
 
-// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/index.js
+// ../../node_modules/fast-string-truncated-width/dist/index.js
 var ANSI_RE = /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]|\u001b\]8;[^;]*;.*?(?:\u0007|\u001b\u005c)/y;
 var CONTROL_RE = /[\x00-\x08\x0A-\x1F\x7F-\x9F]{1,1000}/y;
 var CJKT_WIDE_RE = /(?:(?![\uFF61-\uFF9F\uFF00-\uFFEF])[\p{Script=Han}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Hangul}\p{Script=Tangut}]){1,1000}/yu;
@@ -4942,7 +4947,7 @@ var getStringTruncatedWidth = (input, truncationOptions = {}, widthOptions = {})
 };
 var dist_default2 = getStringTruncatedWidth;
 
-// ../../node_modules/.bun/fast-string-width@3.0.2/node_modules/fast-string-width/dist/index.js
+// ../../node_modules/fast-string-width/dist/index.js
 var NO_TRUNCATION2 = {
   limit: Infinity,
   ellipsis: "",
@@ -4953,7 +4958,7 @@ var fastStringWidth = (input, options = {}) => {
 };
 var dist_default3 = fastStringWidth;
 
-// ../../node_modules/.bun/fast-wrap-ansi@0.2.2/node_modules/fast-wrap-ansi/lib/main.js
+// ../../node_modules/fast-wrap-ansi/lib/main.js
 var ESC = "\x1B";
 var CSI = "\x9B";
 var END_CODE = 39;
@@ -5165,7 +5170,7 @@ function wrapAnsi(string, columns, options) {
 `);
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/@inquirer/core/dist/lib/utils.js
 function breakLines(content, width) {
   return content.split(`
 `).flatMap((line) => wrapAnsi(line, width, { trim: false, wordWrap: false }).split(`
@@ -5176,7 +5181,7 @@ function readlineWidth() {
   return import_cli_width.default({ defaultWidth: 80, output: readline().output });
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
+// ../../node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
 function usePointerPosition({ active, renderedItems, pageSize, loop }) {
   const state = useRef({
     lastPointer: active,
@@ -5242,12 +5247,12 @@ function usePagination({ items, active, renderItem, pageSize, loop = true }) {
   return pageBuffer.filter((line) => typeof line === "string").join(`
 `);
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
+// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
 var import_mute_stream = __toESM(require_lib(), 1);
 import * as readline2 from "readline";
 import { AsyncResource as AsyncResource3 } from "async_hooks";
 
-// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/signals.js
+// ../../node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -5257,7 +5262,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/index.js
+// ../../node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global = globalThis;
@@ -5455,10 +5460,10 @@ var {
   unload
 } = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback);
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
 import { stripVTControlCharacters } from "util";
 
-// ../../node_modules/.bun/@inquirer+ansi@2.0.7/node_modules/@inquirer/ansi/dist/index.js
+// ../../node_modules/@inquirer/ansi/dist/index.js
 var ESC2 = "\x1B[";
 var cursorLeft = ESC2 + "G";
 var cursorHide = ESC2 + "?25l";
@@ -5474,7 +5479,7 @@ var cursorTo = (x, y) => {
 var eraseLine = ESC2 + "2K";
 var eraseLines = (lines) => lines > 0 ? (eraseLine + cursorUp(1)).repeat(lines - 1) + eraseLine + cursorLeft : "";
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
 var height = (content) => content.split(`
 `).length;
 var lastLine = (content) => content.split(`
@@ -5540,7 +5545,7 @@ class ScreenManager {
   }
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/promise-polyfill.js
+// ../../node_modules/@inquirer/core/dist/lib/promise-polyfill.js
 class PromisePolyfill extends Promise {
   static withResolver() {
     let resolve6;
@@ -5553,7 +5558,7 @@ class PromisePolyfill extends Promise {
   }
 }
 
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
+// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
 import path from "path";
 var nativeSetImmediate = globalThis.setImmediate;
 function getCallSites() {
@@ -5664,7 +5669,7 @@ function createPrompt(view) {
   };
   return prompt;
 }
-// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/Separator.js
+// ../../node_modules/@inquirer/core/dist/lib/Separator.js
 import { styleText as styleText2 } from "util";
 class Separator {
   separator = styleText2("dim", Array.from({ length: 15 }).join(dist_default.line));
@@ -5678,7 +5683,7 @@ class Separator {
     return Boolean(choice && typeof choice === "object" && "type" in choice && choice.type === "separator");
   }
 }
-// ../../node_modules/.bun/@inquirer+checkbox@5.2.1+7cb241fc07b679d9/node_modules/@inquirer/checkbox/dist/index.js
+// ../../node_modules/@inquirer/checkbox/dist/index.js
 import { styleText as styleText3 } from "util";
 var checkboxTheme = {
   icon: {
@@ -7752,6 +7757,16 @@ var recipes = [
     id: "starter-0.6.0-to-0.6.1",
     from: "0.6.0",
     to: "0.6.1"
+  },
+  {
+    id: "starter-0.6.1-to-0.6.2",
+    from: "0.6.1",
+    to: "0.6.2"
+  },
+  {
+    id: "starter-0.6.2-to-0.6.3",
+    from: "0.6.2",
+    to: "0.6.3"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -10493,11 +10508,15 @@ function actionLabel(action) {
 }
 
 // src/update/cli.ts
-async function runLifecycleCommand(args) {
+async function runLifecycleCommand(args, dependencies = {}) {
   const command = args[0];
   if (command !== "doctor" && command !== "update" && command !== "module" && command !== "sync-docker") {
     return false;
   }
+  if (command === "update" && (args.includes("--help") || args.includes("-h"))) {
+    (dependencies.log || console.log)(updateHelpText);
+    return true;
+  }
   const projectDirectory = resolve8(readValue3(args, "--cwd") || process.cwd());
   if (command === "module") {
     await runModuleLifecycleCommand(args.slice(1), projectDirectory);
@@ -10551,9 +10570,20 @@ async function runLifecycleCommand(args) {
     }
     return true;
   }
-  await runUpdate(args, projectDirectory);
+  await (dependencies.runUpdate || runUpdate)(args, projectDirectory);
   return true;
 }
+var updateHelpText = `\u7528\u6CD5\uFF1Acreate-windy update [\u9009\u9879]
+
+\u9009\u9879\uFF1A
+  --check                       \u68C0\u67E5\u662F\u5426\u5B58\u5728\u53EF\u7528\u66F4\u65B0
+  --dry-run                     \u751F\u6210\u8BA1\u5212\u4F46\u4E0D\u5199\u5165\u9879\u76EE\u6587\u4EF6
+  --to <\u7248\u672C>                   \u66F4\u65B0\u5230\u6307\u5B9A\u7248\u672C
+  --cwd <\u76EE\u5F55>                  \u6307\u5B9A\u9879\u76EE\u76EE\u5F55
+  --skip-install                \u66F4\u65B0\u65F6\u4E0D\u6267\u884C bun install
+  --force                       \u5F3A\u5236\u91C7\u7528\u5E73\u53F0\u57FA\u7EBF\u53C2\u4E0E\u4E09\u65B9\u5408\u5E76
+  -h, --help                    \u663E\u793A update \u5E2E\u52A9\u5E76\u9000\u51FA
+`;
 async function runUpdate(args, projectDirectory) {
   const template = await readTemplateMetadata(await resolveTemplateRoot());
   const requested = readValue3(args, "--to");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.6.1",
+  "version": "0.6.3",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "a035c896c8821fe9a2f3ef3aca9d30b7ec1fb096",
-  "generatorVersion": "0.6.1",
+  "templateCommit": "9dd151f4a0b95e2f7004aa34b97790b645e1bbb7",
+  "generatorVersion": "0.6.3",
   "modules": [
     {
       "name": "system",

package/template/_bunfig.toml

@@ -1,2 +1,7 @@
 [workspace]
 packages = ["apps/*", "packages/*"]
+
+# 生成项目的迁移 CLI 与原生模块在服务器和从 macOS 导入的 Linux 镜像中
+# 都需要传统、可直接解析的 node_modules 布局。
+[install]
+linker = "hoisted"

package/template/apps/server/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM oven/bun:1.3.14-alpine AS deps
+FROM oven/bun:1.3.14 AS deps
 WORKDIR /app
 
 COPY package.json bun.lock ./
@@ -23,12 +23,21 @@ COPY packages/server-sdk/package.json packages/server-sdk/package.json
 COPY packages/shared/package.json packages/shared/package.json
 COPY packages/storage/package.json packages/storage/package.json
 # windy-copy:deps end
-RUN --mount=type=cache,id=windy-bun-1.3.14,target=/root/.bun/install/cache,sharing=shared bun -e 'const child=Bun.spawn(["bun","install","--frozen-lockfile","--no-progress"],{stdin:"inherit",stdout:"inherit",stderr:"inherit"});const heartbeat=setInterval(()=>console.log("[windy] Bun 依赖安装仍在进行"),15000);const exitCode=await child.exited;clearInterval(heartbeat);process.exit(exitCode)'
+RUN --mount=type=cache,id=windy-bun-1.3.14,target=/root/.bun/install/cache,sharing=shared bun -e 'const child=Bun.spawn(["bun","install","--frozen-lockfile","--no-progress","--backend=copyfile","--linker=hoisted","--ignore-scripts"],{stdin:"inherit",stdout:"inherit",stderr:"inherit"});const heartbeat=setInterval(()=>console.log("[windy] Bun 依赖安装仍在进行"),15000);const exitCode=await child.exited;clearInterval(heartbeat);process.exit(exitCode)' && bun --cwd apps/server -e 'await import("argon2")'
 
 FROM deps AS runner
 # @windy-module system.storage begin
-RUN apk add --no-cache libarchive=3.8.3-r0 libarchive-tools=3.8.3-r0 \
-    && apk add --no-cache --virtual .windy-report-staging-build build-base=0.5-r3 libarchive-dev=3.8.3-r0
+# The native archive helper needs a compiler. Avoid Alpine apk here: its source
+# transfer can stall indefinitely under cross-architecture BuildKit emulation.
+ARG WINDY_DEBIAN_MIRROR=http://deb.debian.org/debian
+ARG WINDY_DEBIAN_SECURITY_MIRROR=http://deb.debian.org/debian-security
+RUN set -eu; \
+    echo "$WINDY_DEBIAN_MIRROR" | grep -Eq '^https?://[A-Za-z0-9./:_-]+$'; \
+    echo "$WINDY_DEBIAN_SECURITY_MIRROR" | grep -Eq '^https?://[A-Za-z0-9./:_-]+$'; \
+    sed -i "s|http://deb.debian.org/debian-security|$WINDY_DEBIAN_SECURITY_MIRROR|g; s|http://deb.debian.org/debian|$WINDY_DEBIAN_MIRROR|g" /etc/apt/sources.list.d/debian.sources; \
+    if ! timeout --kill-after=5s 90s sh -c 'apt-get update -o Acquire::http::AllowRedirect=false -o Acquire::http::Timeout=30 -o Acquire::https::Timeout=30 -o Acquire::Retries=0 && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --yes build-essential libarchive-dev libarchive-tools'; then \
+      echo "APT 包源不可用或 90 秒总时限已到：无法安装 report-staging 依赖" >&2; exit 70; \
+    fi
 # @windy-module system.storage end
 COPY drizzle.config.ts drizzle.config.ts
 COPY apps/server apps/server
@@ -40,7 +49,8 @@ RUN cc -std=c11 -O2 -Wall -Wextra -Werror \
     && strip /usr/local/bin/windy-report-archive-stream \
     && chown root:root /usr/local/bin/windy-report-archive-stream \
     && chmod 0555 /usr/local/bin/windy-report-archive-stream \
-    && apk del .windy-report-staging-build
+    && apt-get purge --auto-remove --yes build-essential libarchive-dev \
+    && rm -rf /var/lib/apt/lists/*
 # @windy-module system.storage end
 COPY --chmod=0555 deploy/production/server-entrypoint.sh /usr/local/bin/windy-server-entrypoint
 RUN mkdir -p /app/data/audit /app/data/license && chown -R bun:bun /app/data

package/template/apps/web/Dockerfile

@@ -23,7 +23,7 @@ COPY packages/server-sdk/package.json packages/server-sdk/package.json
 COPY packages/shared/package.json packages/shared/package.json
 COPY packages/storage/package.json packages/storage/package.json
 # windy-copy:deps end
-RUN --mount=type=cache,id=windy-bun-1.3.14,target=/root/.bun/install/cache,sharing=shared bun -e 'const child=Bun.spawn(["bun","install","--frozen-lockfile","--no-progress"],{stdin:"inherit",stdout:"inherit",stderr:"inherit"});const heartbeat=setInterval(()=>console.log("[windy] Bun 依赖安装仍在进行"),15000);const exitCode=await child.exited;clearInterval(heartbeat);process.exit(exitCode)'
+RUN --mount=type=cache,id=windy-bun-1.3.14,target=/root/.bun/install/cache,sharing=shared bun -e 'const child=Bun.spawn(["bun","install","--frozen-lockfile","--no-progress","--backend=copyfile","--linker=hoisted","--ignore-scripts"],{stdin:"inherit",stdout:"inherit",stderr:"inherit"});const heartbeat=setInterval(()=>console.log("[windy] Bun 依赖安装仍在进行"),15000);const exitCode=await child.exited;clearInterval(heartbeat);process.exit(exitCode)' && bun --cwd apps/server -e 'await import("argon2")'
 
 FROM deps AS build
 # windy-copy:build begin

package/template/docker-compose.yml

@@ -19,6 +19,9 @@ services:
     build:
       context: .
       dockerfile: apps/server/Dockerfile
+      args:
+        WINDY_DEBIAN_MIRROR: ${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: ${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}
     command: ["bun", "run", "db:migrate"]
     environment:
       DATABASE_URL: postgresql://windy:${POSTGRES_PASSWORD}@postgres:5432/windy
@@ -32,6 +35,9 @@ services:
     build:
       context: .
       dockerfile: apps/server/Dockerfile
+      args:
+        WINDY_DEBIAN_MIRROR: ${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: ${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}
     command: ["bun", "run", "--cwd", "apps/server", "dev"]
     environment:
       NODE_ENV: development
@@ -100,6 +106,9 @@ services:
     build:
       context: .
       dockerfile: apps/server/Dockerfile
+      args:
+        WINDY_DEBIAN_MIRROR: ${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: ${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}
     user: "0:0"
     command:
       [
@@ -123,6 +132,9 @@ services:
     build:
       context: .
       dockerfile: apps/server/Dockerfile
+      args:
+        WINDY_DEBIAN_MIRROR: ${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: ${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}
     command: ["bun", "run", "apps/server/src/agent/sandbox-worker.ts"]
     environment:
       TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock

package/template/package.json

@@ -83,10 +83,12 @@
     "@types/bun": "^1.3.14",
     "@types/pg": "^8.20.0",
     "drizzle-kit": "^0.31.10",
+    "drizzle-orm": "^0.45.2",
     "husky": "^9.1.7",
     "lint-staged": "^17.1.1",
     "oxfmt": "^0.59.0",
     "oxlint": "^1.74.0",
+    "pg": "^8.22.0",
     "typescript": "5.9.3"
   },
   "dependencies": {}