create-windy 0.6.12 → 0.6.15

package/dist/cli.js

@@ -271,6 +271,193 @@ function optionalModule(name, label, description, dependencies) {
   };
 }
 
+// src/optional-module-agent.ts
+var agentOptionalModule = {
+  ...optionalModule("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
+    "system",
+    "system.audit",
+    "system.storage",
+    "system.scheduler",
+    "system.workflow"
+  ]),
+  registryDependencies: [
+    {
+      sourceName: "@modelcontextprotocol/sdk",
+      name: "@modelcontextprotocol/sdk",
+      version: "^1.29.0"
+    },
+    {
+      sourceName: "ajv",
+      name: "ajv",
+      version: "^8.20.0"
+    }
+  ],
+  fileRoots: [
+    "apps/agent-server",
+    "apps/document-server",
+    "apps/speech-server",
+    "apps/embedding-server",
+    "apps/server/src/agent",
+    "apps/server/src/agent-workflow",
+    "apps/server/src/ai-runtime-report",
+    "apps/server/src/ai-runtime-readiness",
+    "apps/server/src/app/ai-screenshot-intake-binding.ts",
+    "apps/server/src/app/agent-runtime-composition.ts",
+    "apps/server/src/app/client-agent-host-auth-binding.ts",
+    "apps/server/src/app/client-agent-workflow-artifact-binding.ts",
+    "apps/server/src/app/document-output-artifact-bindings.ts",
+    "apps/server/src/app/speech-output-artifact-bindings.ts",
+    "apps/server/src/ai-artifact",
+    "apps/server/src/ai-output-artifact",
+    "apps/server/src/document",
+    "apps/server/src/speech",
+    "apps/server/src/embedding",
+    "apps/server/src/mcp",
+    "apps/server/src/module-host/ai-operation-port.ts",
+    "apps/server/src/module-host/ai-operation-port.test.ts",
+    "apps/server/src/module-host/agent-session-memory-port.ts",
+    "apps/server/src/module-host/agent-source-invalidation-port.ts",
+    "apps/server/src/module-host/workflow-input-artifact-port.ts",
+    "apps/server/src/module-host/workflow-input-artifact-port.test.ts",
+    "apps/server/src/module-host/workflow-input-materialization.ts",
+    "apps/server/src/module-host/workflow-input-materialization.test.ts",
+    "apps/server/src/module-host/tool-handlers.ts",
+    "apps/server/src/module-host/tool-handlers.test.ts",
+    "apps/server/src/module-host/module-secret-tool-boundary.test.ts",
+    "apps/web/src/pages/system/AiRuntimePage.vue",
+    "apps/web/src/pages/system/AgentSessionPage.vue",
+    "apps/web/src/pages/system/AgentSessionPage.webtest.ts",
+    "apps/web/src/pages/system/AgentWorkflowPage.vue",
+    "apps/web/src/pages/system/ai-runtime-presenter.ts",
+    "apps/web/src/pages/system/ai-runtime-presenter.webtest.ts",
+    "apps/web/src/pages/system/components/ai-runtime",
+    "apps/web/src/pages/system/components/agent-session",
+    "apps/web/src/pages/system/components/agent-workflow",
+    "apps/web/src/pages/system/composables/useAgentWorkflowRuns.ts",
+    "apps/web/src/pages/system/composables/useAgentSessions.ts",
+    "apps/web/src/pages/system/composables/useAgentSessions.webtest.ts",
+    "apps/web/src/pages/system/composables/useAiRuntimeReport.ts",
+    "apps/web/src/pages/system/composables/useAiRuntimeReport.webtest.ts",
+    "apps/web/src/services/agent-workflow-api.ts",
+    "apps/web/src/services/agent-session-api.ts",
+    "apps/web/src/services/agent-session-api.webtest.ts",
+    "apps/web/src/services/ai-runtime-api.ts",
+    "apps/web/src/services/ai-runtime-api.webtest.ts",
+    "scripts/provision-speech-readiness.ts",
+    "packages/modules/src/system-agent-audit-actions.ts",
+    "packages/modules/src/system-agent-tools.ts",
+    "packages/modules/src/system-agent-supervisor.ts",
+    "packages/modules/src/system-agent-supervisor.test.ts",
+    "packages/modules/src/system-ai-api-bindings.ts",
+    "packages/server-sdk/src/system-agent-supervisor.ts",
+    "packages/server-sdk/src/system-agent-supervisor.test.ts",
+    "packages/server-sdk/src/client-agent-workflow-artifact.ts",
+    "packages/server-sdk/src/client-agent-workflow-artifact.contract.test.ts",
+    "packages/server-sdk/src/workflow-input-artifact-port.ts",
+    "packages/server-sdk/src/workflow-input-artifact-validation.ts",
+    "packages/server-sdk/src/workflow-input-artifact-validation.contract.test.ts",
+    "packages/server-sdk/src/workflow-input-materialization-handler.ts",
+    "packages/database/src/agent-runtime-schema.test.ts",
+    "packages/database/src/ai-output-artifacts.test.ts",
+    "packages/shared/src/agent-workflow-definition.ts",
+    "packages/shared/src/agent-workflow-delegation.ts",
+    "packages/shared/src/agent-workflow-evaluation.ts",
+    "packages/shared/src/agent-workflow-events.ts",
+    "packages/shared/src/agent-workflow-run.ts",
+    "packages/shared/src/agent-workflow.ts",
+    "packages/shared/src/ai-runtime-report.ts",
+    "packages/shared/src/screenshot-context-digest.ts",
+    "packages/shared/src/screenshot-context-digest.test.ts"
+  ],
+  documentation: [
+    "docs/adr/0003-agent-session-event-source.md",
+    "docs/architecture/agent-harness.md",
+    "docs/architecture/agent-workflow.md",
+    "docs/architecture/durable-jobs.md",
+    "docs/architecture/ai-egress.md",
+    "docs/architecture/ai-runtime-readiness.md",
+    "docs/architecture/ai-runtime.md",
+    "docs/architecture/mcp-business-capabilities.md",
+    "docs/operations/agent-session-memory.md",
+    "docs/operations/agent-session-troubleshooting.md",
+    "docs/operations/agent-workflow-recovery.md",
+    "docs/operations/adk-retirement.md",
+    "docs/platform/agent-run-attestation.md",
+    "docs/platform/client-agent-session.md",
+    "docs/platform/vision-ai-runtime.md",
+    "docs/platform/agent-runtime.md",
+    "docs/platform/agent-runtime-observability.md",
+    "docs/platform/agent-supervisor-output-contract.md",
+    "docs/platform/agent-tools.md",
+    "docs/platform/agent-tool-approval.md",
+    "docs/platform/agent-tool-sandbox.md",
+    "docs/platform/agent-production-store.md",
+    "docs/platform/agent-run-reattachment.md",
+    "docs/platform/background-ai-operations.md",
+    "docs/platform/document-ai-runtime.md",
+    "docs/platform/speech-ai-runtime.md",
+    "docs/platform/embedding-ai-runtime.md"
+  ],
+  schemaFiles: [
+    "packages/database/src/schema/agent-runtime.ts",
+    "packages/database/src/schema/agent-context-message.ts",
+    "packages/database/src/schema/agent-session-receipt.ts",
+    "packages/database/src/schema/agent-session.ts",
+    "packages/database/src/schema/agent-workflow.ts",
+    "packages/database/src/schema/agent-workflow-delegation.ts",
+    "packages/database/src/schema/agent-workflow-effects.ts",
+    "packages/database/src/schema/agent-workflow-evaluation.ts",
+    "packages/database/src/schema/client-agent.ts",
+    "packages/database/src/schema/client-agent-workflow-artifact.ts",
+    "packages/database/src/schema/embedding-runtime.ts",
+    "packages/database/src/schema/ai-output-artifacts.ts"
+  ],
+  databaseTables: [
+    "agent_operation_releases",
+    "agent_runtime_runs",
+    "agent_runtime_events",
+    "agent_evaluation_results",
+    "agent_run_bindings",
+    "agent_screenshot_intakes",
+    "agent_runtime_report_runs",
+    "agent_runtime_report_attempts",
+    "client_agent_sessions",
+    "client_agent_receipts",
+    "client_agent_workflow_artifacts",
+    "embedding_run_bindings",
+    "ai_output_artifact_scopes",
+    "ai_output_artifacts",
+    "agent_sessions",
+    "agent_session_events",
+    "agent_session_checkpoints",
+    "agent_context_versions",
+    "agent_context_sources",
+    "agent_context_messages",
+    "agent_memory_projections",
+    "agent_memory_sources",
+    "agent_source_invalidations",
+    "agent_source_invalidation_deliveries",
+    "agent_session_run_projection_receipts",
+    "agent_workflow_definitions",
+    "agent_workflow_releases",
+    "agent_workflow_runs",
+    "agent_workflow_node_runs",
+    "agent_workflow_events",
+    "agent_workflow_delegations",
+    "agent_workflow_budget_reservations",
+    "agent_workflow_side_effect_commands",
+    "agent_workflow_side_effect_receipts",
+    "agent_workflow_evaluations"
+  ],
+  databaseStatementTokens: [
+    "idx_agent_context_sources_origin",
+    "idx_agent_memory_sources_origin",
+    "uk_agent_source_invalidations_sequence",
+    "agent_workflow_",
+    "client_agent_workflow_"
+  ]
+};
+
 // src/optional-module-storage.ts
 var storageOptionalModule = {
   ...optionalModule("system.storage", "\u6587\u4EF6\u5B58\u50A8", "\u4E0A\u4F20\u3001\u4E0B\u8F7D\u548C\u5BF9\u8C61\u751F\u547D\u5468\u671F\u3002", ["system", "system.settings", "system.scheduler"]),
@@ -320,104 +507,7 @@ var storageOptionalModule = {
 // src/optional-module-distribution.ts
 var optionalModuleManifests = [
   storageOptionalModule,
-  {
-    ...optionalModule("system.agent", "Agent Tool", "\u53D7\u63A7 Agent \u5DE5\u5177\u5BBF\u4E3B\u3002", [
-      "system",
-      "system.audit",
-      "system.storage",
-      "system.scheduler",
-      "system.workflow"
-    ]),
-    registryDependencies: [
-      {
-        sourceName: "@modelcontextprotocol/sdk",
-        name: "@modelcontextprotocol/sdk",
-        version: "^1.29.0"
-      },
-      {
-        sourceName: "ajv",
-        name: "ajv",
-        version: "^8.20.0"
-      }
-    ],
-    fileRoots: [
-      "apps/agent-server",
-      "apps/document-server",
-      "apps/speech-server",
-      "apps/embedding-server",
-      "apps/server/src/agent",
-      "apps/server/src/ai-runtime-report",
-      "apps/server/src/ai-runtime-readiness",
-      "apps/server/src/app/ai-screenshot-intake-binding.ts",
-      "apps/server/src/app/document-output-artifact-bindings.ts",
-      "apps/server/src/app/speech-output-artifact-bindings.ts",
-      "apps/server/src/ai-artifact",
-      "apps/server/src/ai-output-artifact",
-      "apps/server/src/document",
-      "apps/server/src/speech",
-      "apps/server/src/embedding",
-      "apps/server/src/mcp",
-      "apps/server/src/runtime-adk-debug.ts",
-      "apps/server/src/runtime-adk-debug.test.ts",
-      "apps/server/src/module-host/ai-operation-port.ts",
-      "apps/server/src/module-host/ai-operation-port.test.ts",
-      "apps/server/src/module-host/tool-handlers.ts",
-      "apps/server/src/module-host/tool-handlers.test.ts",
-      "apps/server/src/module-host/module-secret-tool-boundary.test.ts",
-      "apps/web/src/pages/system/AiRuntimePage.vue",
-      "apps/web/src/pages/system/ai-runtime-presenter.ts",
-      "apps/web/src/pages/system/ai-runtime-presenter.webtest.ts",
-      "apps/web/src/pages/system/components/ai-runtime",
-      "apps/web/src/pages/system/composables/useAiRuntimeReport.ts",
-      "apps/web/src/pages/system/composables/useAiRuntimeReport.webtest.ts",
-      "apps/web/src/services/ai-runtime-api.ts",
-      "apps/web/src/services/ai-runtime-api.webtest.ts",
-      "docker-compose.agent-debug.yml",
-      "scripts/dev-adk-web.ts",
-      "scripts/provision-speech-readiness.ts",
-      "packages/modules/src/system-agent-tools.ts",
-      "packages/database/src/agent-runtime-schema.test.ts",
-      "packages/database/src/ai-output-artifacts.test.ts",
-      "packages/shared/src/ai-runtime-report.ts",
-      "packages/shared/src/screenshot-context-digest.ts",
-      "packages/shared/src/screenshot-context-digest.test.ts"
-    ],
-    documentation: [
-      "docs/architecture/ai-runtime.md",
-      "docs/architecture/mcp-business-capabilities.md",
-      "docs/platform/agent-run-attestation.md",
-      "docs/platform/agent-runtime.md",
-      "docs/platform/agent-runtime-observability.md",
-      "docs/platform/agent-supervisor-output-contract.md",
-      "docs/platform/agent-tools.md",
-      "docs/platform/agent-tool-approval.md",
-      "docs/platform/agent-tool-sandbox.md",
-      "docs/platform/agent-production-store.md",
-      "docs/platform/agent-run-reattachment.md",
-      "docs/platform/background-ai-operations.md",
-      "docs/platform/document-ai-runtime.md",
-      "docs/platform/speech-ai-runtime.md",
-      "docs/platform/embedding-ai-runtime.md"
-    ],
-    schemaFiles: [
-      "packages/database/src/schema/agent-runtime.ts",
-      "packages/database/src/schema/embedding-runtime.ts",
-      "packages/database/src/schema/ai-output-artifacts.ts"
-    ],
-    databaseTables: [
-      "agent_operation_releases",
-      "agent_runtime_runs",
-      "agent_runtime_events",
-      "agent_evaluation_results",
-      "agent_run_bindings",
-      "agent_screenshot_intakes",
-      "agent_runtime_report_runs",
-      "agent_runtime_report_attempts",
-      "embedding_run_bindings",
-      "ai_output_artifact_scopes",
-      "ai_output_artifacts"
-    ]
-  },
+  agentOptionalModule,
   {
     ...optionalModule("system.scheduler", "\u4EFB\u52A1\u8C03\u5EA6", "\u4EFB\u52A1\u3001\u91CD\u8BD5\u3001\u5386\u53F2\u548C\u6062\u590D\u3002", ["system", "system.audit"]),
     fileRoots: [
@@ -1109,7 +1199,6 @@ import { lstat, open, readFile, rename, rm } from "fs/promises";
 import { join } from "path";
 var managedSecretKeys = [
   "AGENT_SERVER_INTERNAL_TOKEN",
-  "ADK_DEBUG_PLATFORM_TOKEN",
   "AGENT_RUN_ENCRYPTION_SECRET",
   "AI_ARTIFACT_ENCRYPTION_SECRET",
   "EMBEDDING_RUN_ENCRYPTION_SECRET",
@@ -1128,9 +1217,6 @@ async function initializeLocalEnvironment(projectRoot, generateSecret = defaultS
   if (/^AGENT_SERVER_INTERNAL_TOKEN=[ \t\r]*$/m.test(content)) {
     content = setEmptyVariable(content, "AGENT_SERVER_INTERNAL_TOKEN", generateSecret());
   }
-  if (/^ADK_DEBUG_PLATFORM_TOKEN=[ \t\r]*$/m.test(content)) {
-    content = setEmptyVariable(content, "ADK_DEBUG_PLATFORM_TOKEN", generateSecret());
-  }
   if (/^AGENT_RUN_ENCRYPTION_SECRET=[ \t\r]*$/m.test(content)) {
     content = setEmptyVariable(content, "AGENT_RUN_ENCRYPTION_SECRET", generateSecret());
   }
@@ -2710,11 +2796,8 @@ function dockerManifestCopyLines(directories) {
   return directories.map((directory) => `COPY ${directory}/package.json ${directory}/package.json`);
 }
 function rewriteAnchoredSection(source, anchor, lines) {
-  const { begin, end } = locateAnchoredSection(source, anchor);
-  const all = source.split(`
-`);
-  return [...all.slice(0, begin + 1), ...lines, ...all.slice(end)].join(`
-`);
+  const { begin, end, eol, lines: all } = locateAnchoredSection(source, anchor);
+  return [...all.slice(0, begin + 1), ...lines, ...all.slice(end)].join(eol);
 }
 function hasDockerfileCopyAnchors(source, target) {
   return source.includes(`# ${depsCopyAnchor} begin`) && source.includes(`# ${depsCopyAnchor} end`) && (!target.includeBuildClosure || source.includes(`# ${buildCopyAnchor} begin`) && source.includes(`# ${buildCopyAnchor} end`));
@@ -2764,8 +2847,11 @@ async function planDockerfileInProject(root, target, options = {}) {
 function locateAnchoredSection(source, anchor) {
   const beginMarker = `# ${anchor} begin`;
   const endMarker = `# ${anchor} end`;
-  const lines = source.split(`
-`);
+  const eol = source.includes(`\r
+`) ? `\r
+` : `
+`;
+  const lines = source.split(eol);
   const begin = lines.indexOf(beginMarker);
   const end = lines.indexOf(endMarker);
   if (begin === -1 || end === -1 || end <= begin) {
@@ -2774,7 +2860,7 @@ function locateAnchoredSection(source, anchor) {
   if (lines.indexOf(beginMarker, begin + 1) !== -1 || lines.indexOf(endMarker, end + 1) !== -1) {
     throw new Error(`Dockerfile \u951A\u70B9\u6BB5 ${anchor} \u91CD\u590D\uFF0C\u8BF7\u4FDD\u7559\u552F\u4E00\u4E00\u6BB5`);
   }
-  return { begin, end };
+  return { begin, end, eol, lines };
 }
 function parseManifest(content) {
   return JSON.parse(new TextDecoder().decode(content));
@@ -3163,8 +3249,25 @@ var starterServerBuild = `    build:
       context: .
       dockerfile: apps/server/Dockerfile
       args:
-        WINDY_DEBIAN_MIRROR: \${WINDY_DEBIAN_MIRROR:-http://mirrors.aliyun.com/debian}
-        WINDY_DEBIAN_SECURITY_MIRROR: \${WINDY_DEBIAN_SECURITY_MIRROR:-http://mirrors.aliyun.com/debian-security}`;
+        WINDY_DEBIAN_MIRROR: \${WINDY_DEBIAN_MIRROR:-http://deb.debian.org/debian}
+        WINDY_DEBIAN_SECURITY_MIRROR: \${WINDY_DEBIAN_SECURITY_MIRROR:-http://deb.debian.org/debian-security}`;
+function agentWorkflowServerEnvironment(includeAgent) {
+  return includeAgent ? "      WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON: ${WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON:-}" : "";
+}
+function optionalComposeVolumes(includeAgent, includeSearch, includeStorage) {
+  return [
+    ...includeAgent ? [
+      "  agent-run-data:",
+      "  tool-sandbox-ipc:",
+      "  document-run-data:",
+      "  speech-run-data:",
+      "  embedding-run-data:"
+    ] : [],
+    ...includeSearch ? ["  opensearch-data:"] : [],
+    ...includeStorage ? ["  server-storage-data:"] : []
+  ].join(`
+`);
+}
 
 // src/runtime-profile-files.ts
 var starterComposeBase = `services:
@@ -3210,9 +3313,11 @@ __STORAGE_SERVER_ENV__
       WINDY_SYSTEM_USAGE_PATHS: /app/data/audit
       PLATFORM_ENABLE_AI: \${PLATFORM_ENABLE_AI:-false}
       AGENT_SERVER_URL: http://agent-server:8080
+      WINDY_PUBLIC_BASE_URL: \${WINDY_PUBLIC_BASE_URL:-http://localhost:9747}
       AGENT_TOOL_HOST_URL: http://server:9747
 __TOOL_SANDBOX_SERVER_ENV__
       AGENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+__AGENT_WORKFLOW_SERVER_ENV__
       AI_ARTIFACT_URL: http://server:9747/api/internal/ai/artifacts
       AI_ARTIFACT_ENCRYPTION_SECRET: \${AI_ARTIFACT_ENCRYPTION_SECRET:-}
       DOCUMENT_SERVER_URL: \${DOCUMENT_SERVER_URL:-}
@@ -3321,6 +3426,7 @@ ${starterServerBuild}
         WINDY_PYPI_INDEX_URL: \${WINDY_PYPI_INDEX_URL:-http://mirrors.cloud.tencent.com/pypi/simple}
     environment:
       AGENT_SERVER_INTERNAL_TOKEN: \${AGENT_SERVER_INTERNAL_TOKEN:-}
+      AGENT_CONTEXT_HOST_URL: http://server:9747
       AGENT_RUN_STORE_PATH: /app/data/agent/runs.sqlite3
       AGENT_DATABASE_URL: postgresql://windy:\${POSTGRES_PASSWORD}@postgres:5432/windy
       AGENT_RUN_ENCRYPTION_SECRET: \${AGENT_RUN_ENCRYPTION_SECRET:-}
@@ -3453,19 +3559,10 @@ ${starterServerBuild}
 function starterComposeFor(includeAgent, includeSearch = true, includeStorage = true) {
   return starterComposeBase.replace(`  web:
 `, `${includeAgent ? agentComposeService : ""}  web:
-`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__STORAGE_SERVER_ENV__", includeStorage ? "      WINDY_STORAGE_ROOT: /app/data/storage" : "").replace("__STORAGE_SERVER_VOLUME__", includeStorage ? "      - server-storage-data:/app/data/storage" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
+`).replace("__TOOL_SANDBOX_SERVER_ENV__", includeAgent ? "      TOOL_SANDBOX_SOCKET: /run/windy-tool-sandbox/worker.sock" : "").replace("__AGENT_WORKFLOW_SERVER_ENV__", agentWorkflowServerEnvironment(includeAgent)).replace("__TOOL_SANDBOX_SERVER_VOLUME__", includeAgent ? "      - tool-sandbox-ipc:/run/windy-tool-sandbox" : "").replace("__STORAGE_SERVER_ENV__", includeStorage ? "      WINDY_STORAGE_ROOT: /app/data/storage" : "").replace("__STORAGE_SERVER_VOLUME__", includeStorage ? "      - server-storage-data:/app/data/storage" : "").replace("__OPENSEARCH_SERVER_ENV__", includeSearch ? `      OPENSEARCH_URL: \${OPENSEARCH_URL:-}
       OPENSEARCH_USERNAME: \${OPENSEARCH_USERNAME:-}
       OPENSEARCH_PASSWORD: \${OPENSEARCH_PASSWORD:-}
-      OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", [
-    includeAgent ? "  agent-run-data:" : "",
-    includeAgent ? "  tool-sandbox-ipc:" : "",
-    includeAgent ? "  document-run-data:" : "",
-    includeAgent ? "  speech-run-data:" : "",
-    includeAgent ? "  embedding-run-data:" : "",
-    includeSearch ? "  opensearch-data:" : "",
-    includeStorage ? "  server-storage-data:" : ""
-  ].filter(Boolean).join(`
-`));
+      OPENSEARCH_WORK_ORDER_INDEX: \${OPENSEARCH_WORK_ORDER_INDEX:-windy-work-orders-v1}` : "").replace("__OPENSEARCH_SERVICE__", includeSearch ? openSearchComposeService : "").replace("__OPTIONAL_VOLUMES__", optionalComposeVolumes(includeAgent, includeSearch, includeStorage));
 }
 var starterCompose = starterComposeFor(true);
 // src/runtime-environment-example.ts
@@ -3480,18 +3577,20 @@ ${includeStorage ? `
 ` : ""}
 ${includeAgent ? `
 # Agent profile \u4EC5\u7531\u670D\u52A1\u7AEF Agent Runtime \u8BFB\u53D6\uFF1B\u4E0D\u8981\u4F7F\u7528 VITE_ \u524D\u7F00\u3002
-# ADK Web \u901A\u8FC7 canonical Run API \u8C03\u8BD5\u9879\u76EE\u9009\u62E9\u7684\u771F\u5B9E\u6587\u672C Operation\uFF1B\u8C03\u8BD5 Token
-# \u7531 create-windy \u81EA\u52A8\u751F\u6210\uFF0C\u53EA\u6CE8\u5165 Server \u4E0E localhost-only ADK Web\u3002
 PLATFORM_ENABLE_AI=false
 AGENT_SERVER_INTERNAL_TOKEN=
-ADK_DEBUG_PLATFORM_TOKEN=
 AGENT_RUN_ENCRYPTION_SECRET=
+# Model \u8282\u70B9\u542F\u7528\u524D\u5FC5\u987B\u586B\u5165\u7531\u8FD0\u7EF4\u51BB\u7ED3\u7684 deployment/model \u4EF7\u683C\u76EE\u5F55\uFF1B\u7F3A\u5931\u65F6 readiness \u660E\u786E unavailable\u3002
+WINDY_AGENT_WORKFLOW_MODEL_PRICING_JSON=
+# \u975E Compose \u90E8\u7F72\u9700\u6307\u5411 Windy Server\uFF1B\u957F\u671F Session \u7684\u6A21\u578B\u8C03\u7528\u4F1A fail closed\u3002
+# AGENT_CONTEXT_HOST_URL=http://server:9747
 # \u591A\u526F\u672C\u751F\u4EA7\u9ED8\u8BA4\u4F7F\u7528 Compose \u6CE8\u5165\u7684 PostgreSQL\uFF1B\u7559\u7A7A\u624D\u56DE\u9000\u5355\u526F\u672C SQLite\u3002
 AGENT_DATABASE_URL=
 # \u53EF\u9009\uFF1A\u53EA\u53D1\u9001\u65E0 Prompt/\u8F93\u5165/\u8F93\u51FA\u7684 Agent Run \u5143\u6570\u636E Span\u3002
 OTEL_EXPORTER_OTLP_TRACES_ENDPOINT=
 OTEL_EXPORTER_OTLP_HEADERS=
 AI_ARTIFACT_ENCRYPTION_SECRET=
+WINDY_PUBLIC_BASE_URL=http://localhost:9747
 DOCUMENT_SERVER_URL=
 DOCUMENT_ARTIFACT_URL=
 DOCUMENT_OUTPUT_ARTIFACT_URL=
@@ -3609,7 +3708,7 @@ ${includeStorage ? "- \u5927\u62A5\u544A\u5BFC\u5165\uFF1A[\u53D7\u6CBB\u7406\u7
 ${includeOfflineLicense ? "- License \u6D88\u8D39\u7AEF\uFF1A[\u79BB\u7EBF\u6FC0\u6D3B\u4E0E\u5B89\u88C5\u534F\u8BAE](./license/license-offline-activation-code.md)\u4E0E[\u624B\u673A\u626B\u7801\u914D\u5BF9\u6FC0\u6D3B](./license/license-pairing-activation.md)\uFF1B\u8FD0\u884C\u65F6\u80FD\u529B\u7531 npm \u4F9D\u8D56 `@southwind-ai/license` \u63D0\u4F9B\u3002" : ""}
 - \u8FD0\u7EF4\uFF1A[\u53EF\u89C2\u6D4B\u6027](./operations/observability.md)${includeOperations ? " \u4E0E [\u8FD0\u7EF4\u603B\u89C8](./platform/operations-overview.md)" : ""}\u3002
 - \u4EA4\u4ED8\uFF1A[\u6309 registry digest \u4E0E OCI blob \u5DEE\u91CF\u53D1\u5E03](./operations/incremental-delivery.md)\u3002
-${includeAgent ? "- Agent\u3001\u591A\u6A21\u6001 Runtime \u4E0E MCP\uFF1A[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Document AI Runtime](./platform/document-ai-runtime.md)\u3001[Speech AI Runtime](./platform/speech-ai-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
+${includeAgent ? "- Agent\u3001\u591A\u6A21\u6001 Runtime \u4E0E MCP\uFF1A[Agent Harness](./architecture/agent-harness.md)\u3001[Agent Runtime \u63A5\u5165](./platform/agent-runtime.md)\u3001[Session/Memory \u8FD0\u7EF4](./operations/agent-session-memory.md)\u3001[Session \u6545\u969C\u901F\u67E5](./operations/agent-session-troubleshooting.md)\u3001[Agent Workflow](./architecture/agent-workflow.md)\u3001[Workflow \u6062\u590D\u8FD0\u7EF4](./operations/agent-workflow-recovery.md)\u3001[Document AI Runtime](./platform/document-ai-runtime.md)\u3001[Speech AI Runtime](./platform/speech-ai-runtime.md)\u3001[\u53D7\u63A7\u5DE5\u5177](./platform/agent-tools.md)\u4E0E[MCP \u4E1A\u52A1\u80FD\u529B](./architecture/mcp-business-capabilities.md)\u3002" : ""}
 - \u517C\u5BB9\uFF1A[RuoYi-Vue Adapter](./adapters/ruoyi-vue-compatibility.md)\u3002
 `;
 }
@@ -3729,22 +3828,10 @@ Speech Runtime \u53EA\u63A5\u6536\u6388\u6743 Artifact\uFF0C\u8D1F\u8D23\u683C\u
 Artifact\uFF1B\u5B9E\u65F6 ASR\u3001TTS \u548C Dictation \u5C1A\u672A\u5F00\u653E\u3002\u8BE6\u89C1
 [Speech AI Runtime](./docs/platform/speech-ai-runtime.md)\u3002
 
-\u5728 project-owned \u7684
-\`apps/agent-server/project/adk-web-debug.json\` \u7ED1\u5B9A\u4E00\u4E2A\u6EE1\u8DB3
-\`{ question: string } -> { text: string }\` \u7684\u771F\u5B9E Agent Operation \u4E0E\u5F53\u524D\u542F\u7528\u7684\u5F00\u53D1
-\u6570\u636E\u7528\u6237\u540E\uFF0C\u53EF\u5728\u672C\u673A\u8C03\u8BD5\uFF1A
-
-\`\`\`bash
-bun run dev:adk-web
-\`\`\`
-
-\u8BBF\u95EE \`http://127.0.0.1:8000\` \u5E76\u9009\u62E9 \`canonical_debug\`\u3002\u8BE5\u547D\u4EE4\u4F1A\u540C\u65F6\u542F\u52A8\u5B8C\u6574
-Agent Runtime\uFF1BWindy \u542F\u52A8\u811A\u672C\u8BFB\u53D6\u9879\u76EE\u9009\u62E9\u7684 Operation\uFF0CADK Web \u4F7F\u7528 create-windy
-\u81EA\u52A8\u751F\u6210\u7684\u968F\u673A\u8C03\u8BD5 Token\uFF0C\u7ECF canonical HTTP/SSE \u6267\u884C\u771F\u5B9E Operation\u3002Server \u4E13\u7528\u8EAB\u4EFD
-\u5411\u4E1A\u52A1 Module \u6295\u5F71\u8BE5\u7528\u6237\u7684\u771F\u5B9E\u6210\u5458 ID \u4E0E\u5F53\u524D Scope\uFF0C\u5E76\u628A\u6743\u9650\u6536\u7A84\u5230\u7528\u6237\u5DF2\u6709\u6743\u9650\u548C
-Operation/allowed Tools \u95ED\u5305\uFF1B\u6838\u5FC3\u5BA1\u8BA1\u4E3B\u4F53\u4ECD\u4E3A ADK Debug Service\u3002\u666E\u901A \`dev\`\u3001
-\`agent\` profile \u548C\u751F\u4EA7\u90E8\u7F72\u5747\u4E0D\u4F1A\u542F\u52A8\u6216\u66B4\u9732 ADK Web\uFF1B\u9875\u9762\u663E\u793A\u7684\u662F canonical Run
-\u6458\u8981\uFF0C\u4E0D\u662F\u5185\u90E8\u5B8C\u6574 Workflow \u56FE\u3002
+\u5F00\u53D1\u4E0E\u5BA1\u8BA1\u7EDF\u4E00\u4F7F\u7528 Windy \u4E3B\u7AD9\uFF1A\`/admin/system/ai-runtime\` \u63D0\u4F9B\u53D7\u6743\u9650\u4FDD\u62A4\u7684 Run\u3001
+Provider Attempt \u4E0E\u8131\u654F Trajectory\uFF1B\u4E1A\u52A1\u6A21\u5757\u53EF\u901A\u8FC7 \`registerAgentSessionProviders()\`
+\u6CE8\u518C\u5386\u53F2\u4F1A\u8BDD\u53EA\u8BFB\u6295\u5F71\u3002\u4E24\u8005\u5747\u590D\u7528\u5F53\u524D\u767B\u5F55\u8EAB\u4EFD\u3001Manifest Feature/RBAC \u4E0E Audit\uFF0C\u4E0D\u521B\u5EFA
+\u7B2C\u4E8C\u79CD\u8C03\u8BD5 Token\uFF0C\u4E5F\u4E0D\u4F1A\u5C55\u793A\u8F93\u5165\u8F93\u51FA\u6B63\u6587\u3001Tool \u53C2\u6570\u6216 Provider \u539F\u59CB\u54CD\u5E94\u3002
 ` : ""}
 ${includeSearch ? `
 ## OpenSearch \u641C\u7D22 profile
@@ -3912,7 +3999,7 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
     ...includeOxc ? { "lint-staged": sourceLintStaged ?? defaultLintStaged } : {},
     scripts: {
       ...includeOxc ? {
-        prepare: "git rev-parse --git-dir >/dev/null 2>&1 || exit 0; husky"
+        prepare: "husky"
       } : {},
       dev: "docker compose up",
       "docker:sync": "create-windy sync-docker",
@@ -3923,8 +4010,7 @@ function createStarterPackage(source, projectName, includeOxc = true, projectLic
       ...selectedModules.includes("system.agent") ? {
         "dev:agent": "docker compose --profile agent up --build",
         "dev:speech": "PLATFORM_ENABLE_AI=true SPEECH_SERVER_URL=http://speech-server:8091 docker compose --profile agent --profile speech up --build",
-        "speech:pins": "bun run scripts/provision-speech-readiness.ts",
-        "dev:adk-web": "bun run scripts/dev-adk-web.ts"
+        "speech:pins": "bun run scripts/provision-speech-readiness.ts"
       } : {},
       ...generatorVersion ? { windy: "create-windy" } : {},
       "dev:web": "bun run --cwd apps/web dev",
@@ -3970,13 +4056,11 @@ var templateRootFiles = [
   "README.md",
   "bunfig.toml",
   "docker-compose.yml",
-  "docker-compose.agent-debug.yml",
   "drizzle.config.ts",
   "module-schema.lineages.json",
   "package.json",
   "scripts/notification-postgres-regression.ts",
   "scripts/lib/postgres-regression.ts",
-  "scripts/dev-adk-web.ts",
   "scripts/provision-speech-readiness.ts"
 ];
 var templateDirectories = [
@@ -4002,7 +4086,10 @@ var templateDirectories = [
 ];
 var templateDocumentationFiles = [
   "docs/adapters/ruoyi-vue-compatibility.md",
+  "docs/adr/0003-agent-session-event-source.md",
   "docs/architecture/admin-surface-boundary.md",
+  "docs/architecture/agent-harness.md",
+  "docs/architecture/agent-workflow.md",
   "docs/architecture/ai-egress.md",
   "docs/architecture/ai-runtime.md",
   "docs/architecture/ai-runtime-readiness.md",
@@ -4029,19 +4116,29 @@ var templateDocumentationFiles = [
   "docs/development/ui-component-gallery.md",
   "docs/license/license-offline-activation-code.md",
   "docs/license/license-pairing-activation.md",
+  "docs/operations/agent-session-memory.md",
+  "docs/operations/agent-session-troubleshooting.md",
+  "docs/operations/adk-retirement.md",
   "docs/operations/observability.md",
+  "docs/operations/agent-workflow-recovery.md",
   "docs/operations/incremental-delivery.md",
   "docs/platform/agent-run-attestation.md",
-  "docs/platform/agent-supervisor-output-contract.md",
-  "docs/platform/agent-tools.md",
+  "docs/platform/client-agent-session.md",
   "docs/platform/agent-runtime.md",
   "docs/platform/agent-runtime-observability.md",
+  "docs/platform/agent-supervisor-output-contract.md",
+  "docs/platform/agent-tools.md",
+  "docs/platform/agent-tool-approval.md",
   "docs/platform/agent-tool-sandbox.md",
+  "docs/platform/agent-production-store.md",
+  "docs/platform/agent-run-reattachment.md",
+  "docs/platform/background-ai-operations.md",
   "docs/platform/audit-reliability.md",
   "docs/platform/bulk-data-jobs.md",
   "docs/platform/business-user-directory.md",
   "docs/platform/data-access-control.md",
   "docs/platform/document-ai-runtime.md",
+  "docs/platform/embedding-ai-runtime.md",
   "docs/platform/governed-export-renderers.md",
   "docs/platform/module-configuration.md",
   "docs/platform/navigation-registry.md",
@@ -6309,8 +6406,8 @@ import { rm as rm10 } from "fs/promises";
 import { resolve as resolve8 } from "path";
 
 // src/update/doctor.ts
-import { readFile as readFile11 } from "fs/promises";
-import { join as join16 } from "path";
+import { readFile as readFile12 } from "fs/promises";
+import { join as join17 } from "path";
 
 // src/update/process.ts
 import { spawn as spawn2 } from "child_process";
@@ -8205,6 +8302,64 @@ async function applyTransaction(plan) {
   };
 }
 
+// src/update/legacy-adk-retirement.ts
+import { lstat as lstat6, readFile as readFile11 } from "fs/promises";
+import { join as join16 } from "path";
+var projectOwnedDebugConfig = "apps/agent-server/project/adk-web-debug.json";
+var deprecatedEnvironmentKeys = [
+  "ADK_DEBUG_PLATFORM_TOKEN",
+  "WINDY_ADK_DEBUG_TOKEN",
+  "WINDY_ADK_DEBUG_OPERATION_KEY",
+  "WINDY_ADK_DEBUG_DATA_ACTOR_ID"
+];
+async function inspectAdkRetirement(projectDirectory) {
+  const findings = [];
+  if (await pathExists(join16(projectDirectory, projectOwnedDebugConfig))) {
+    findings.push({
+      kind: "project-owned-file",
+      path: projectOwnedDebugConfig,
+      message: `${projectOwnedDebugConfig} \u5C5E\u4E8E project-owned\uFF1BADK Web \u5DF2\u79FB\u9664\uFF0C\u4F46 Windy \u4E0D\u4F1A\u731C\u6D4B\u5220\u9664\uFF0C\u8BF7\u786E\u8BA4\u65E0\u5BA2\u6237\u7528\u9014\u540E\u4EBA\u5DE5\u6E05\u7406\u3002`
+    });
+  }
+  const environmentPath = join16(projectDirectory, ".env");
+  const metadata = await metadataOf(environmentPath);
+  if (!metadata)
+    return findings;
+  if (metadata.isSymbolicLink()) {
+    findings.push({
+      kind: "external-environment",
+      path: ".env",
+      message: "\u5916\u90E8\u6258\u7BA1\u7684 .env \u672A\u8BFB\u53D6\u6216\u6539\u5199\uFF1B\u8BF7\u4EBA\u5DE5\u786E\u8BA4\u5E76\u79FB\u9664\u5176\u4E2D\u5DF2\u5F03\u7528\u7684 ADK Debug \u914D\u7F6E\u3002"
+    });
+    return findings;
+  }
+  const content = await readFile11(environmentPath, "utf8");
+  for (const key of deprecatedEnvironmentKeys) {
+    if (!new RegExp(`^${key}=`, "m").test(content))
+      continue;
+    findings.push({
+      kind: "environment-key",
+      path: ".env",
+      key,
+      message: `${key} \u5DF2\u5F03\u7528\uFF1B\u4E3A\u907F\u514D\u8BEF\u5220\u5BA2\u6237 Secret\uFF0CWindy \u4E0D\u4F1A\u81EA\u52A8\u6539\u5199\u6216\u5220\u9664\u8BE5\u503C\u3002`
+    });
+  }
+  return findings;
+}
+async function pathExists(path2) {
+  return Boolean(await metadataOf(path2));
+}
+async function metadataOf(path2) {
+  try {
+    return await lstat6(path2);
+  } catch (error) {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") {
+      return;
+    }
+    throw error;
+  }
+}
+
 // src/update/doctor.ts
 var oxcPaths = new Set([
   ".oxfmtrc.json",
@@ -8222,11 +8377,12 @@ async function diagnoseProject(projectDirectory, repair = false) {
   }
   const mayRepairEnvironment = repair && recoveryAction !== "recovery-conflicts";
   const environmentRepair = mayRepairEnvironment ? await repairLocalEnvironment(projectDirectory) : undefined;
-  const [provenance, manifest, git, environment] = await Promise.all([
+  const [provenance, manifest, git, environment, manualCleanup] = await Promise.all([
     readGenerationProvenance(projectDirectory),
     readManagedFilesManifest(projectDirectory),
     captureProcess("git", ["status", "--porcelain"], projectDirectory),
-    environmentRepair ? Promise.resolve(environmentRepair) : inspectLocalEnvironment(projectDirectory)
+    environmentRepair ? Promise.resolve(environmentRepair) : inspectLocalEnvironment(projectDirectory),
+    inspectAdkRetirement(projectDirectory)
   ]);
   const modifiedManagedFiles = [];
   const missingManagedFiles = [];
@@ -8235,7 +8391,7 @@ async function diagnoseProject(projectDirectory, repair = false) {
     if (file.ownership === "project-owned")
       continue;
     try {
-      const changed = hashContent(await readFile11(join16(projectDirectory, file.path))) !== file.hash;
+      const changed = hashContent(await readFile12(join17(projectDirectory, file.path))) !== file.hash;
       if (!changed)
         continue;
       modifiedManagedFiles.push(file.path);
@@ -8264,6 +8420,7 @@ async function diagnoseProject(projectDirectory, repair = false) {
     localEnvironmentExternal: environment.externalFile,
     missingLocalEnvironmentKeys: environment.missingKeys,
     duplicateLocalEnvironmentKeys: environment.duplicateKeys,
+    manualCleanup,
     recoveryAction
   };
 }
@@ -8300,6 +8457,21 @@ var recipes = [
     id: "starter-0.6.11-to-0.6.12",
     from: "0.6.11",
     to: "0.6.12"
+  },
+  {
+    id: "starter-0.6.12-to-0.6.13",
+    from: "0.6.12",
+    to: "0.6.13"
+  },
+  {
+    id: "starter-0.6.13-to-0.6.14",
+    from: "0.6.13",
+    to: "0.6.14"
+  },
+  {
+    id: "starter-0.6.14-to-0.6.15",
+    from: "0.6.14",
+    to: "0.6.15"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -8345,18 +8517,18 @@ function parseVersion2(version) {
 }
 
 // src/update/updater.ts
-import { readFile as readFile23, rm as rm8 } from "fs/promises";
-import { join as join28 } from "path";
+import { readFile as readFile24, rm as rm8 } from "fs/promises";
+import { join as join29 } from "path";
 
 // src/update/artifacts.ts
-import { mkdtemp, readFile as readFile14 } from "fs/promises";
+import { mkdtemp, readFile as readFile15 } from "fs/promises";
 import { tmpdir } from "os";
-import { basename as basename10, join as join19 } from "path";
+import { basename as basename10, join as join20 } from "path";
 
 // src/update/published-artifacts.ts
 import { createHash as createHash4 } from "crypto";
-import { mkdir as mkdir6, readFile as readFile12, writeFile as writeFile10 } from "fs/promises";
-import { basename as basename9, join as join17 } from "path";
+import { mkdir as mkdir6, readFile as readFile13, writeFile as writeFile10 } from "fs/promises";
+import { basename as basename9, join as join18 } from "path";
 
 // src/update/safe-archive.ts
 import { mkdir as mkdir5 } from "fs/promises";
@@ -8408,17 +8580,17 @@ async function downloadPublicArtifact(temporaryRoot, label, version, expectedInt
   }
   const archive = await readBoundedResponse(response, `create-windy@${version} artifact `);
   verifyArchive(metadata, archive);
-  const destination = join17(temporaryRoot, `${label}-artifact`);
-  const archivePath = join17(temporaryRoot, `${label}.tgz`);
+  const destination = join18(temporaryRoot, `${label}-artifact`);
+  const archivePath = join18(temporaryRoot, `${label}.tgz`);
   await writeFile10(archivePath, archive);
   await extractSafeTarArchive({
     archivePath,
     destination,
     cwd: temporaryRoot
   });
-  const packageRoot2 = join17(destination, "package");
-  const packageJson = JSON.parse(await readFile12(join17(packageRoot2, "package.json"), "utf8"));
-  const template = await readTemplateMetadata(join17(packageRoot2, "template"));
+  const packageRoot2 = join18(destination, "package");
+  const packageJson = JSON.parse(await readFile13(join18(packageRoot2, "package.json"), "utf8"));
+  const template = await readTemplateMetadata(join18(packageRoot2, "template"));
   if (packageJson.name !== "create-windy" || packageJson.version !== version || template.generatorVersion !== version) {
     throw new Error(`create-windy@${version} \u5305\u8EAB\u4EFD\u6216\u6A21\u677F\u5143\u6570\u636E\u4E0D\u4E00\u81F4`);
   }
@@ -8550,10 +8722,10 @@ function verifyArchive(metadata, archive) {
   }
 }
 async function generatePublicArtifactProject(temporaryRoot, label, projectName, packageRoot2, provenance) {
-  const parent = join17(temporaryRoot, label);
+  const parent = join18(temporaryRoot, label);
   await mkdir6(parent, { recursive: true });
   const args = [
-    join17(packageRoot2, "dist/cli.js"),
+    join18(packageRoot2, "dist/cli.js"),
     projectName,
     "--yes",
     "--skip-install",
@@ -8573,26 +8745,26 @@ async function generatePublicArtifactProject(temporaryRoot, label, projectName,
     }
   }
   await assertProcess("bun", args, parent);
-  return join17(parent, projectName);
+  return join18(parent, projectName);
 }
 
 // src/module-history.ts
 import {
-  lstat as lstat6,
+  lstat as lstat7,
   mkdir as mkdir7,
   readdir as readdir8,
-  readFile as readFile13,
+  readFile as readFile14,
   writeFile as writeFile11
 } from "fs/promises";
-import { dirname as dirname8, join as join18, relative as relative5, sep as sep4 } from "path";
+import { dirname as dirname8, join as join19, relative as relative5, sep as sep4 } from "path";
 async function archiveRemovedModuleMigrations(input) {
   await assertExistingHistoryIntegrity(input.projectDirectory);
-  let changed = await copyMigrationTree(input.projectDirectory, ".windy/module-history", join18(input.targetDirectory, ".windy/module-history"));
+  let changed = await copyMigrationTree(input.projectDirectory, ".windy/module-history", join19(input.targetDirectory, ".windy/module-history"));
   const target = new Set(input.targetModules);
   const removed = moduleDistributionCatalog.filter(({ name }) => input.sourceModules.includes(name) && !target.has(name));
   for (const manifest of removed) {
     for (const root of manifest.migrationRoots) {
-      changed = await copyMigrationTree(input.projectDirectory, root, join18(input.targetDirectory, ".windy/module-history", manifest.name, root)) || changed;
+      changed = await copyMigrationTree(input.projectDirectory, root, join19(input.targetDirectory, ".windy/module-history", manifest.name, root)) || changed;
     }
   }
   if (changed) {
@@ -8600,7 +8772,7 @@ async function archiveRemovedModuleMigrations(input) {
   }
 }
 async function assertExistingHistoryIntegrity(projectDirectory) {
-  const historyRoot = join18(projectDirectory, ".windy/module-history");
+  const historyRoot = join19(projectDirectory, ".windy/module-history");
   const metadata = await readOptionalMetadata(historyRoot);
   if (!metadata)
     return;
@@ -8615,13 +8787,13 @@ async function assertExistingHistoryIntegrity(projectDirectory) {
     if (!entry || isMissingManagedFile(entry)) {
       throw new Error(`\u6A21\u5757 migration \u5386\u53F2\u672A\u767B\u8BB0\u5230\u53D7\u7BA1\u6E05\u5355\uFF1A${relativePath2}`);
     }
-    if (hashContent(await readFile13(path2)) !== entry.hash) {
+    if (hashContent(await readFile14(path2)) !== entry.hash) {
       throw new Error(`\u6A21\u5757 migration \u5386\u53F2\u5DF2\u88AB\u4FEE\u6539\uFF1A${relativePath2}`);
     }
   }
 }
 async function copyMigrationTree(projectRoot, relativeRoot, targetRoot) {
-  const sourceRoot = join18(projectRoot, relativeRoot);
+  const sourceRoot = join19(projectRoot, relativeRoot);
   const rootMetadata = await readOptionalMetadata(sourceRoot);
   if (!rootMetadata)
     return false;
@@ -8629,9 +8801,9 @@ async function copyMigrationTree(projectRoot, relativeRoot, targetRoot) {
     throw new Error(`\u6A21\u5757 migration \u6839\u76EE\u5F55\u65E0\u6548\uFF1A${relativeRoot}`);
   }
   for (const source of await collectRegularFiles(sourceRoot)) {
-    const target = join18(targetRoot, relative5(sourceRoot, source).split(sep4).join("/"));
+    const target = join19(targetRoot, relative5(sourceRoot, source).split(sep4).join("/"));
     await mkdir7(dirname8(target), { recursive: true });
-    await writeFile11(target, await readFile13(source));
+    await writeFile11(target, await readFile14(source));
   }
   return true;
 }
@@ -8641,8 +8813,8 @@ async function collectRegularFiles(root) {
   return files.sort();
   async function visit(directory) {
     for (const name of (await readdir8(directory)).sort()) {
-      const path2 = join18(directory, name);
-      const metadata = await lstat6(path2);
+      const path2 = join19(directory, name);
+      const metadata = await lstat7(path2);
       if (metadata.isSymbolicLink()) {
         throw new Error(`\u6A21\u5757 migration \u4E0D\u5141\u8BB8\u7B26\u53F7\u94FE\u63A5\uFF1A${path2}`);
       }
@@ -8655,7 +8827,7 @@ async function collectRegularFiles(root) {
 }
 async function readOptionalMetadata(path2) {
   try {
-    return await lstat6(path2);
+    return await lstat7(path2);
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return;
@@ -8671,10 +8843,10 @@ class PublishedArtifactProvider {
     this.#fetch = fetcher;
   }
   async prepare(projectDirectory, provenance, targetModules) {
-    const temporaryRoot = await mkdtemp(join19(tmpdir(), "windy-update-"));
+    const temporaryRoot = await mkdtemp(join20(tmpdir(), "windy-update-"));
     const projectName = await readProjectName2(projectDirectory);
-    const baseDirectory = join19(temporaryRoot, "base", projectName);
-    const targetDirectory = join19(temporaryRoot, "target", projectName);
+    const baseDirectory = join20(temporaryRoot, "base", projectName);
+    const targetDirectory = join20(temporaryRoot, "target", projectName);
     const baseArtifact = await downloadPublicArtifact(temporaryRoot, "base", provenance.generatorVersion, undefined, this.#fetch);
     if (baseArtifact.identity.templateCommit !== provenance.templateCommit) {
       throw new Error("Project Lock \u4E0E\u6765\u6E90 registry artifact \u7684 template commit \u4E0D\u4E00\u81F4");
@@ -8702,13 +8874,13 @@ class PublishedArtifactProvider {
   }
 }
 async function readProjectName2(projectDirectory) {
-  const source = JSON.parse(await readFile14(join19(projectDirectory, "package.json"), "utf8"));
+  const source = JSON.parse(await readFile15(join20(projectDirectory, "package.json"), "utf8"));
   return source.name || basename10(projectDirectory);
 }
 
 // src/update/planner.ts
-import { readFile as readFile21 } from "fs/promises";
-import { dirname as dirname9, join as join26 } from "path";
+import { readFile as readFile22 } from "fs/promises";
+import { dirname as dirname9, join as join27 } from "path";
 
 // src/update/docker-copy-update-plan.ts
 async function deriveDockerfilePlans(files, snapshots, paths, targetWorkspaceManifests) {
@@ -8796,16 +8968,16 @@ function matchesWorkspace(pattern, directory) {
 }
 
 // src/update/migration-reconciler.ts
-import { readFile as readFile18 } from "fs/promises";
-import { join as join22 } from "path";
+import { readFile as readFile19 } from "fs/promises";
+import { join as join23 } from "path";
 
 // src/update/migration-adoption.ts
-import { readFile as readFile17 } from "fs/promises";
-import { join as join21 } from "path";
+import { readFile as readFile18 } from "fs/promises";
+import { join as join22 } from "path";
 
 // src/update/migration-project-file.ts
-import { readFile as readFile15 } from "fs/promises";
-import { join as join20 } from "path";
+import { readFile as readFile16 } from "fs/promises";
+import { join as join21 } from "path";
 async function readProjectJson(input, path2) {
   const content = await readProjectFile(input, path2);
   if (!content) {
@@ -8821,7 +8993,7 @@ async function readProjectFile(input, path2) {
   }
   let content;
   try {
-    content = await readFile15(join20(input.projectDirectory, path2));
+    content = await readFile16(join21(input.projectDirectory, path2));
   } catch (error) {
     if (!isMissingFileError(error))
       throw error;
@@ -8836,7 +9008,7 @@ function isMissingFileError(error) {
 }
 
 // src/update/migration-history.ts
-import { readFile as readFile16 } from "fs/promises";
+import { readFile as readFile17 } from "fs/promises";
 var drizzleRoot = "packages/database/drizzle";
 var journalPath = `${drizzleRoot}/meta/_journal.json`;
 var migrationPattern = /^(\d{4})_(.+)$/;
@@ -8886,7 +9058,7 @@ function encodeJson(value) {
 `);
 }
 async function readJson(path2) {
-  return JSON.parse(await readFile16(path2, "utf8"));
+  return JSON.parse(await readFile17(path2, "utf8"));
 }
 
 // src/update/snapshot-delta.ts
@@ -8962,10 +9134,10 @@ async function inspectPreexistingMigrationAdoptions(input) {
       projectBeforeBytes,
       projectAfterBytes
     ] = await Promise.all([
-      readFile17(join21(input.targetDirectory, `${drizzleRoot}/${candidate.tag}.sql`)),
+      readFile18(join22(input.targetDirectory, `${drizzleRoot}/${candidate.tag}.sql`)),
       readProjectFile(input, projectSqlPath),
-      readJson(join21(input.targetDirectory, snapshotPath(previousTarget.tag))),
-      readJson(join21(input.targetDirectory, snapshotPath(candidate.tag))),
+      readJson(join22(input.targetDirectory, snapshotPath(previousTarget.tag))),
+      readJson(join22(input.targetDirectory, snapshotPath(candidate.tag))),
       readProjectFile(input, snapshotPath(previousProject.tag)),
       readProjectFile(input, projectSnapshotPath)
     ]);
@@ -9092,7 +9264,7 @@ async function reconcileDrizzleMigrations(input) {
     const tag = `${prefix}_${name}`;
     const sqlPath = `${drizzleRoot}/${tag}.sql`;
     const snapshotPath2 = `${drizzleRoot}/meta/${prefix}_snapshot.json`;
-    const sql = await readFile18(join22(input.targetDirectory, `${drizzleRoot}/${addition.tag}.sql`));
+    const sql = await readFile19(join23(input.targetDirectory, `${drizzleRoot}/${addition.tag}.sql`));
     merged.id = targetAfter.id;
     merged.prevId = currentSnapshot.id;
     const snapshot2 = encodeJson(merged);
@@ -9139,9 +9311,9 @@ function unchanged(targetManifest) {
 async function readJournals(input) {
   try {
     const [base, project, target] = await Promise.all([
-      readJson(join22(input.baseDirectory, journalPath)),
+      readJson(join23(input.baseDirectory, journalPath)),
       readProjectJson(input, journalPath),
-      readJson(join22(input.targetDirectory, journalPath))
+      readJson(join23(input.targetDirectory, journalPath))
     ]);
     return { base, project, target };
   } catch (error) {
@@ -9172,17 +9344,17 @@ async function readLatestSnapshot(input, journal) {
   return JSON.parse(new TextDecoder().decode(content));
 }
 async function readSnapshot(root, tag) {
-  return await readJson(join22(root, snapshotPath(tag)));
+  return await readJson(join23(root, snapshotPath(tag)));
 }
 
 // src/update/planner-file.ts
-import { readFile as readFile19 } from "fs/promises";
-import { join as join24 } from "path";
+import { readFile as readFile20 } from "fs/promises";
+import { join as join25 } from "path";
 
 // src/update/merge.ts
 import { mkdtemp as mkdtemp2, rm as rm6, writeFile as writeFile12 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 
 // src/update/merge-convergent-additions.ts
 async function reconcileConvergentAdditions(input) {
@@ -9324,11 +9496,11 @@ function sameLines(left, right) {
 
 // src/update/merge.ts
 async function mergeTextFile(base, ours, theirs) {
-  const root = await mkdtemp2(join23(tmpdir2(), "windy-merge-"));
+  const root = await mkdtemp2(join24(tmpdir2(), "windy-merge-"));
   try {
-    const oursPath = join23(root, "ours");
-    const basePath = join23(root, "base");
-    const theirsPath = join23(root, "theirs");
+    const oursPath = join24(root, "ours");
+    const basePath = join24(root, "base");
+    const theirsPath = join24(root, "theirs");
     await Promise.all([
       writeFile12(oursPath, ours),
       writeFile12(basePath, base),
@@ -9661,40 +9833,327 @@ function conflict(path2, reason, expectedProjectContent) {
   };
 }
 
+// src/update/recipe-project-owned-client-workflow.ts
+var clientWorkflowCompositionPath = "apps/server/src/app/agent-runtime-composition.ts";
+var clientWorkflowBindingPath = "apps/server/src/app/client-agent-workflow-artifact-binding.ts";
+var legacyDefaultBinding = `import type { ModuleClientAgentWorkflowArtifactProjectBinding } from "@southwind-ai/server-sdk";
+
+/**
+ * Project-owned Workflow -> PageAgent \u7ED1\u5B9A\u3002Starter \u9ED8\u8BA4\u7A7A\u6570\u7EC4\u5E76 fail closed\uFF1B
+ * \u4EA7\u54C1\u53EA\u4E3A\u5DF2\u5BA1\u6838\u3001\u5DF2\u53D1\u5E03\u7684\u56FA\u5B9A Workflow Job node \u589E\u52A0\u9759\u6001\u7ED1\u5B9A\u3002
+ */
+export const projectClientAgentWorkflowArtifactBindings: readonly ModuleClientAgentWorkflowArtifactProjectBinding[] =
+  [];
+`;
+var immutableReleaseDefaultBinding = `import type { ModuleClientAgentWorkflowArtifactProjectBinding } from "@southwind-ai/server-sdk";
+
+/**
+ * Project-owned Workflow -> PageAgent \u7ED1\u5B9A\u3002Starter \u9ED8\u8BA4\u7A7A\u6570\u7EC4\u5E76 fail closed\uFF1B
+ * \u4EA7\u54C1\u53EA\u4E3A\u5DF2\u5BA1\u6838\u3001\u5DF2\u53D1\u5E03\u7684\u56FA\u5B9A Workflow Job node \u589E\u52A0\u9759\u6001\u7ED1\u5B9A\u3002Operation \u5FC5\u987B\u58F0\u660E
+ * \`clientExecution.launchAuthority="workflow-artifact"\`\uFF1Bbinding \u5FC5\u987B\u767B\u8BB0 Immutable
+ * canonical \`releaseDigest\`\u3001scope containment contract v1\uFF0C\u4EE5\u53CA project launch\u3001client task\u3001terminal
+ * authority version/digest\u3002launch authority \u4ECE Host \u5F53\u524D scope \u663E\u5F0F\u6536\u7A84\uFF1Bterminal authority
+ * \u540C\u65F6\u590D\u9A8C Host \u91CD\u6388\u6743\u5E76\u6253\u5F00\u7684 canonical input artifacts\u3002project preset \u4F7F\u7528
+ * runtime.agentWorkflowProjects\uFF1B\u666E\u901A routes \u6C38\u8FDC\u4E0D\u80FD\u53D1\u5E03/\u542F\u52A8\u53D7\u4FDD\u62A4 Workflow\u3002
+ * \u53D1\u5E03 Release \u6216 authority contract \u540E\u5FC5\u987B\u91CD\u65B0\u5BA1\u6838\u5E76\u663E\u5F0F\u66F4\u65B0\u3002
+ */
+export const projectClientAgentWorkflowArtifactBindings: readonly ModuleClientAgentWorkflowArtifactProjectBinding[] =
+  [];
+`;
+var immutableReleaseCompositionHash = "98c23266799311cf26c160374aad738456888f3c04f40f3667122e28b3e8e188";
+var hostAuthImport = 'import { projectClientAgentHostAuthAdapter } from "./client-agent-host-auth-binding.js";';
+var workflowArtifactImport = 'import { projectClientAgentWorkflowArtifactBindings } from "./client-agent-workflow-artifact-binding.js";';
+var oldOmit = '    "clientAgentHostAuth" | "screenshotPageRegistry"';
+var newOmit = `    | "clientAgentHostAuth"
+    | "clientAgentWorkflowArtifactBindings"
+    | "screenshotPageRegistry"`;
+var hostAuthProperty = "    clientAgentHostAuth: projectClientAgentHostAuthAdapter,";
+var workflowArtifactProperty = `    clientAgentWorkflowArtifactBindings:
+      projectClientAgentWorkflowArtifactBindings,`;
+function planClientWorkflowProjectOwned(input) {
+  return input.path === clientWorkflowBindingPath ? planBinding(input) : planComposition(input);
+}
+function planBinding(input) {
+  if (!input.target)
+    return conflict2(input, "\u76EE\u6807\u7248\u672C\u7F3A\u5C11 Workflow binding seam");
+  const target = decode(input.target);
+  if (target !== immutableReleaseDefaultBinding) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C Workflow binding seam \u5951\u7EA6\u65E0\u6548");
+  }
+  if (!input.ours) {
+    return ready2(input, "create", "\u65B0\u589E\u9ED8\u8BA4\u5173\u95ED\u7684 Workflow binding seam", input.target);
+  }
+  const source = decode(input.ours);
+  if (source === target) {
+    return ready2(input, "preserve", "\u5DF2\u5305\u542B immutable release binding seam");
+  }
+  if (source !== legacyDefaultBinding) {
+    return conflict2(input, "Workflow binding seam \u4E0D\u662F 0.6.14 \u9ED8\u8BA4\u7A7A\u7248\u672C");
+  }
+  return ready2(input, "update", "\u5347\u7EA7\u9ED8\u8BA4\u7A7A Workflow binding seam", input.target);
+}
+function planComposition(input) {
+  if (!input.target) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C\u7F3A\u5C11 Agent Runtime Composition");
+  }
+  const target = decode(input.target);
+  if (hashContent(target) !== immutableReleaseCompositionHash) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C Agent Runtime Composition \u5951\u7EA6\u65E0\u6548");
+  }
+  if (!input.ours) {
+    return ready2(input, "create", "\u65B0\u589E Agent Runtime Composition", input.target);
+  }
+  const source = decode(input.ours);
+  if (source === target) {
+    return ready2(input, "preserve", "\u5DF2\u88C5\u914D Workflow Artifact binding");
+  }
+  if ([workflowArtifactImport, newOmit, workflowArtifactProperty].some((value) => source.includes(value))) {
+    return conflict2(input, "Agent Runtime Composition \u53EA\u5305\u542B\u90E8\u5206\u76EE\u6807\u88C5\u914D");
+  }
+  const runtimeConflict = validateLegacyRuntimeObject(source);
+  if (runtimeConflict)
+    return conflict2(input, runtimeConflict);
+  const replacements2 = [
+    {
+      anchor: hostAuthImport,
+      value: `${hostAuthImport}
+${workflowArtifactImport}`
+    },
+    {
+      anchor: oldOmit,
+      value: newOmit
+    },
+    {
+      anchor: hostAuthProperty,
+      value: `${hostAuthProperty}
+${workflowArtifactProperty}`
+    }
+  ];
+  let content = source;
+  for (const replacement of replacements2) {
+    if (occurrences(content, replacement.anchor) !== 1) {
+      return conflict2(input, `Agent Runtime Composition \u951A\u70B9\u4E0D\u552F\u4E00\uFF1A${replacement.anchor}`);
+    }
+    content = content.replace(replacement.anchor, replacement.value);
+  }
+  return ready2(input, "update", "\u88C5\u914D Workflow Artifact project binding", new TextEncoder().encode(content));
+}
+function ready2(input, action, reason, content) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action,
+    reason,
+    expectedProjectContent: input.expected,
+    content
+  };
+}
+function conflict2(input, message) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent: input.expected,
+    conflict: message
+  };
+}
+function decode(content) {
+  return new TextDecoder().decode(content);
+}
+function occurrences(source, value) {
+  return source.split(value).length - 1;
+}
+function validateLegacyRuntimeObject(source) {
+  const startAnchor = `  const runtime = registerAgentPlatformRuntime({
+    ...input,`;
+  const endAnchor = `
+  });`;
+  if (occurrences(source, startAnchor) !== 1 || occurrences(source, endAnchor) !== 1) {
+    return "Agent Runtime register object \u951A\u70B9\u4E0D\u552F\u4E00";
+  }
+  const start = source.indexOf(startAnchor);
+  const end = source.indexOf(endAnchor, start + startAnchor.length);
+  if (end < 0)
+    return "Agent Runtime register object \u7ED3\u675F\u951A\u70B9\u7F3A\u5931";
+  const object = source.slice(start, end);
+  const host = object.indexOf(hostAuthProperty);
+  if (host < 0)
+    return "Agent Runtime Host Auth property \u951A\u70B9\u7F3A\u5931";
+  const tail = object.slice(host + hostAuthProperty.length);
+  if (/^\s*\.\.\./m.test(tail)) {
+    return "Workflow binding \u63D2\u5165\u70B9\u540E\u5B58\u5728\u53EF\u8986\u76D6\u5B83\u7684 spread";
+  }
+  if (/["']clientAgentWorkflowArtifactBindings["']\s*:/.test(object) || /\[\s*["']clientAgentWorkflowArtifactBindings["']\s*\]/.test(object)) {
+    return "Agent Runtime \u5DF2\u5B58\u5728\u52A8\u6001 Workflow binding property";
+  }
+  return;
+}
+
+// src/update/recipe-project-owned-trajectory-test.ts
+var legacyAnchor = /^(\s*)traceId: "trace_1",\n\1attemptItems: \[$/gm;
+var migratedAnchor = /^(\s*)traceId: "trace_1",\n\1trajectory: \{\n\1 {2}available: true,\n\1 {2}events: \[\],\n\1\},\n\1attemptItems: \[$/gm;
+function addAiRuntimeTrajectoryTestFixture(source) {
+  const migrated = [...source.matchAll(migratedAnchor)];
+  if (migrated.length === 1)
+    return { content: source };
+  if (migrated.length > 1) {
+    return { error: "AI Runtime trajectory \u6D4B\u8BD5 fixture \u5DF2\u8FC1\u79FB\u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const legacy = [...source.matchAll(legacyAnchor)];
+  if (legacy.length !== 1) {
+    return { error: "AI Runtime trajectory \u6D4B\u8BD5 fixture \u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const anchor = legacy[0];
+  const indent = anchor[1];
+  return {
+    content: source.replace(anchor[0], [
+      `${indent}traceId: "trace_1",`,
+      `${indent}trajectory: {`,
+      `${indent}  available: true,`,
+      `${indent}  events: [],`,
+      `${indent}},`,
+      `${indent}attemptItems: [`
+    ].join(`
+`))
+  };
+}
+
 // src/update/recipe-project-owned.ts
 var managedPathsByRecipe = {
   "starter-0.6.8-to-0.6.9": [
     "apps/web/src/router/index.ts",
     "apps/web/src/router/platform-admin-route-bindings.ts"
+  ],
+  "starter-0.6.13-to-0.6.14": [
+    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts",
+    "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue",
+    "apps/web/src/router/index.ts",
+    "apps/web/src/router/platform-admin-route-bindings.ts",
+    "apps/web/src/services/ai-runtime-api.ts"
+  ],
+  "starter-0.6.14-to-0.6.15": [
+    clientWorkflowCompositionPath,
+    clientWorkflowBindingPath
   ]
 };
 function recipeManagedProjectOwnedPaths(recipes2) {
   return new Set(recipes2.flatMap((recipe) => managedPathsByRecipe[recipe] ?? []));
 }
+function recipeCanManageMissingProjectOwnedPath(path2) {
+  return path2 === clientWorkflowCompositionPath || path2 === clientWorkflowBindingPath;
+}
 async function planRecipeProjectOwned(input) {
+  if (input.path === clientWorkflowCompositionPath || input.path === clientWorkflowBindingPath) {
+    if (!input.target) {
+      return conflict3(input, "\u7248\u672C recipe \u6240\u9700\u7684\u76EE\u6807\u6587\u4EF6\u7F3A\u5931");
+    }
+    return planClientWorkflowProjectOwned({ ...input, target: input.target });
+  }
   if (!input.ours) {
-    return conflict2(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
+    return conflict3(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
   }
   const source = new TextDecoder().decode(input.ours);
-  const transformed = transformProjectAdminAnchor(input.path, source);
+  const target = input.target ? new TextDecoder().decode(input.target) : undefined;
+  const transformed = transformProjectOwnedAnchor(input.path, source, target);
   if ("error" in transformed)
-    return conflict2(input, transformed.error);
+    return conflict3(input, transformed.error);
   if (transformed.content === source) {
     return preserve(input, "\u5DF2\u5305\u542B\u7248\u672C recipe \u76EE\u6807\u5185\u5BB9");
   }
   return update(input, new TextEncoder().encode(transformed.content));
 }
-function transformProjectAdminAnchor(path2, source) {
+function transformProjectOwnedAnchor(path2, source, target) {
   if (path2 === "apps/web/src/router/index.ts") {
-    return addComponentPageLoader(source);
+    return addComponentPageLoader(source, target);
   }
   if (path2 === "apps/web/src/router/platform-admin-route-bindings.ts") {
-    return addComponentRouteBinding(source);
+    return addComponentRouteBinding(source, target);
+  }
+  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.webtest.ts") {
+    return addAiRuntimeTrajectoryTestFixture(source);
+  }
+  if (path2 === "apps/web/src/pages/system/components/ai-runtime/AiRuntimeRunDetailDialog.vue") {
+    return addAiRuntimeTrajectoryView(source);
+  }
+  if (path2 === "apps/web/src/services/ai-runtime-api.ts") {
+    return addAiRuntimeTrajectoryContract(source);
   }
   return { error: `\u7248\u672C recipe \u672A\u767B\u8BB0\u9879\u76EE\u951A\u70B9\uFF1A${path2}` };
 }
-function addComponentPageLoader(source) {
-  if (/^\s*"ui-components"\s*:/m.test(source))
+function addAiRuntimeTrajectoryContract(source) {
+  let content = source;
+  const typeField = '  readonly trajectory: RuntimeRunDetail["trajectory"];';
+  if (!content.includes(typeField)) {
+    const anchors = [
+      ...content.matchAll(/^(\s*)readonly attemptItems: readonly AiRuntimeAttempt\[\];$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "AiRuntimeRunDetail attemptItems \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${anchors[0][1]}readonly trajectory: RuntimeRunDetail["trajectory"];`);
+  }
+  const mapperField = "    trajectory: value.trajectory,";
+  if (!content.includes(mapperField)) {
+    const anchors = [
+      ...content.matchAll(/^(\s*)attemptItems: value\.attempts\.map\(attemptItem\),$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "runDetail attemptItems mapper \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${anchors[0][1]}trajectory: value.trajectory,`);
+  }
+  return { content };
+}
+function addAiRuntimeTrajectoryView(source) {
+  let content = source;
+  const componentImport = 'import AiRuntimeTrajectory from "./AiRuntimeTrajectory.vue";';
+  if (!content.includes(componentImport)) {
+    const anchors = [
+      ...content.matchAll(/^} from "\.\.\/\.\.\/ai-runtime-presenter";$/gm)
+    ];
+    if (anchors.length !== 1) {
+      return { error: "AI Runtime presenter import \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    content = content.replace(anchors[0][0], `${anchors[0][0]}
+${componentImport}`);
+  }
+  const componentUsage = '<AiRuntimeTrajectory :trajectory="detail.trajectory" />';
+  if (!content.includes(componentUsage)) {
+    const providerSections = [
+      ...content.matchAll(/^(\s*)<section class="space-y-3">\n\s*<h3 class="text-sm font-medium">Provider Attempts<\/h3>$/gm)
+    ];
+    if (providerSections.length !== 1) {
+      return { error: "Provider Attempts section \u951A\u70B9\u4E0D\u552F\u4E00" };
+    }
+    const providerSection = providerSections[0];
+    content = content.replace(providerSection[0], `${providerSection[1]}${componentUsage}
+
+${providerSection[0]}`);
+  }
+  return { content };
+}
+function addComponentPageLoader(source, target) {
+  const desired = [
+    {
+      key: "ui-components",
+      value: '() => import("@/pages/ui/UiComponentPage.vue")'
+    },
+    ...target?.includes('"agent-session": AgentSessionPage') ? [
+      {
+        key: "agent-session",
+        value: '() => import("@/pages/system/AgentSessionPage.vue")'
+      },
+      {
+        key: "agent-workflow",
+        value: '() => import("@/pages/system/AgentWorkflowPage.vue")'
+      }
+    ] : []
+  ];
+  const missing = desired.filter(({ key }) => !new RegExp(`^\\s*"${key}"\\s*:`, "m").test(source));
+  if (!missing.length)
     return { content: source };
   const declaration = source.indexOf("const platformAdminPageComponents");
   const start = source.indexOf("= {", declaration);
@@ -9709,31 +10168,47 @@ function addComponentPageLoader(source) {
     return { error: "platformAdminPageComponents profile \u951A\u70B9\u4E0D\u552F\u4E00" };
   }
   const profile = profiles[0];
-  const insertion = `${profile[0]}
-${profile[1]}"ui-components": () => import("@/pages/ui/UiComponentPage.vue"),`;
+  const insertion = [
+    profile[0],
+    ...missing.map(({ key, value }) => `${profile[1]}"${key}": ${value},`)
+  ].join(`
+`);
   return {
     content: source.slice(0, start) + block.replace(profile[0], insertion) + source.slice(end)
   };
 }
-function addComponentRouteBinding(source) {
+function addComponentRouteBinding(source, target) {
   const unionStart = source.indexOf("export type PlatformAdminPageKey =");
   const interfaceStart = source.indexOf("export interface PlatformAdminRouteBinding", unionStart);
   if (unionStart < 0 || interfaceStart < 0) {
     return { error: "\u627E\u4E0D\u5230 PlatformAdminPageKey \u9879\u76EE\u951A\u70B9" };
   }
+  const desiredPages = [
+    "ui-components",
+    ...target?.includes('routeKey: "system.agent-session"') ? ["agent-session", "agent-workflow"] : []
+  ];
   let content = source;
   const union = content.slice(unionStart, interfaceStart);
-  if (!union.includes('"ui-components"')) {
+  const missingPages = desiredPages.filter((page) => !union.includes(`"${page}"`));
+  if (missingPages.length) {
     const semicolon = content.lastIndexOf(";", interfaceStart);
     if (semicolon < unionStart) {
       return { error: "PlatformAdminPageKey \u7ED3\u675F\u951A\u70B9\u7F3A\u5931" };
     }
     content = `${content.slice(0, semicolon)}
-  | "ui-components"${content.slice(semicolon)}`;
-  }
-  if (content.includes('routeKey: "system.ui-components"')) {
+${missingPages.map((page) => `  | "${page}"`).join(`
+`)}${content.slice(semicolon)}`;
+  }
+  const desiredBindings = [
+    { routeKey: "system.ui-components", page: "ui-components" },
+    ...target?.includes('routeKey: "system.agent-session"') ? [
+      { routeKey: "system.agent-session", page: "agent-session" },
+      { routeKey: "system.agent-workflow", page: "agent-workflow" }
+    ] : []
+  ];
+  const missingBindings = desiredBindings.filter(({ routeKey }) => !content.includes(`routeKey: "${routeKey}"`));
+  if (!missingBindings.length)
     return { content };
-  }
   const features = [
     ...content.matchAll(/^(\s*)\{ routeKey: "system\.feature", page: "resource", resourceKey: "features" \},$/gm)
   ];
@@ -9742,8 +10217,11 @@ function addComponentRouteBinding(source) {
   }
   const feature = features[0];
   return {
-    content: content.replace(feature[0], `${feature[0]}
-${feature[1]}{ routeKey: "system.ui-components", page: "ui-components" },`)
+    content: content.replace(feature[0], [
+      feature[0],
+      ...missingBindings.map(({ routeKey, page }) => `${feature[1]}{ routeKey: "${routeKey}", page: "${page}" },`)
+    ].join(`
+`))
   };
 }
 function preserve(input, reason) {
@@ -9760,12 +10238,12 @@ function update(input, content) {
     path: input.path,
     ownership: "project-owned",
     action: "update",
-    reason: "\u7248\u672C recipe \u66F4\u65B0\u9879\u76EE Admin \u6269\u5C55\u951A\u70B9",
+    reason: "\u7248\u672C recipe \u66F4\u65B0\u9879\u76EE\u6269\u5C55\u951A\u70B9",
     expectedProjectContent: input.expected,
     content
   };
 }
-function conflict2(input, message) {
+function conflict3(input, message) {
   return {
     path: input.path,
     ownership: "project-owned",
@@ -9779,14 +10257,15 @@ function conflict2(input, message) {
 // src/update/planner-file.ts
 async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false, forcePlatformBaseline = false, manageRecipeProjectOwned = false) {
   const [base, theirs] = await Promise.all([
-    readOptional(join24(baseRoot, path2)),
-    targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional(join24(targetRoot, path2))
+    readOptional(join25(baseRoot, path2)),
+    targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional(join25(targetRoot, path2))
   ]);
   const ownership = source?.ownership ?? target?.ownership ?? classifyOwnership(path2);
   const expected = expectationForSnapshot(ours);
   if (ownership === "project-owned") {
-    if (manageRecipeProjectOwned) {
-      return planRecipeProjectOwned({ path: path2, ours, expected });
+    const hasExistingRecipeSource = source !== undefined && source.state !== "missing" && ours !== undefined;
+    if (manageRecipeProjectOwned && target && (hasExistingRecipeSource || recipeCanManageMissingProjectOwnedPath(path2))) {
+      return planRecipeProjectOwned({ path: path2, ours, target: theirs, expected });
     }
     if (manageGeneratedProjectOwned) {
       return planGeneratedProjectOwned(path2, source, target, ours, theirs, expected);
@@ -9795,29 +10274,29 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
     if (source && !target) {
-      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+      return conflict4(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
     }
     if (source && target && source.hash !== target.hash) {
-      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
+      return conflict4(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
     }
   }
   if (!source && target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
     }
-    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict3(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
+    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict4(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
   }
   if (source && !target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
     }
-    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict3(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
+    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict4(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
   }
   if (source && target && !ours) {
     return readyPlannedFile(path2, "project-owned", "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
   }
   if (!source || !target || !ours || !theirs) {
-    return conflict3(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
+    return conflict4(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
   }
   const oursChanged = hashContent(ours) !== source.hash;
   const sourceArtifactHash = artifactHashOf(source);
@@ -9831,7 +10310,7 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   });
   if (forceTargetBaseline && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (forceTargetBaseline) {
     return readyPlannedFile(path2, ownership, "update", "\u5F3A\u5236\u91C7\u7528\u76EE\u6807\u5E73\u53F0\u57FA\u7EBF", expected, theirs);
@@ -9841,11 +10320,11 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (targetChanged && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (!oursChanged && targetChanged && adoptedProjectDelta && base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict4(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
   if (!oursChanged) {
     return readyPlannedFile(path2, ownership, "update", "\u4EC5 Windy \u4FEE\u6539", expected, theirs);
@@ -9858,9 +10337,9 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
-  return conflict3(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
+  return conflict4(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
 }
 function shouldForcePlatformBaseline(input) {
   return input.forcePlatformBaseline && !input.oursChanged && input.base !== undefined && hashContent(input.base) !== input.sourceArtifactHash;
@@ -9881,7 +10360,7 @@ function readyPlannedFile(path2, ownership, action, reason, expectedProjectConte
 function expectationForSnapshot(content) {
   return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
 }
-function conflict3(path2, ownership, reason, expectedProjectContent) {
+function conflict4(path2, ownership, reason, expectedProjectContent) {
   return {
     path: path2,
     ownership,
@@ -9893,7 +10372,7 @@ function conflict3(path2, ownership, reason, expectedProjectContent) {
 }
 async function readOptional(path2) {
   try {
-    return await readFile19(path2);
+    return await readFile20(path2);
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return;
@@ -9945,27 +10424,27 @@ function hasExistingSourceForTest(path2, sourcePaths) {
 }
 
 // src/update/planner-snapshots.ts
-import { readFile as readFile20, stat as stat2 } from "fs/promises";
-import { join as join25 } from "path";
+import { readFile as readFile21, stat as stat2 } from "fs/promises";
+import { join as join26 } from "path";
 async function snapshotProjectFiles(project, paths, seed) {
   const snapshots = new Map(seed);
   await Promise.all([...paths].filter((path2) => !snapshots.has(path2)).map(async (path2) => {
-    snapshots.set(path2, await readOptional2(join25(project, path2)));
+    snapshots.set(path2, await readOptional2(join26(project, path2)));
   }));
   return snapshots;
 }
 async function snapshotProjectModes(project, paths) {
-  return new Map(await Promise.all([...paths].map(async (path2) => [path2, await readModeOptional(join25(project, path2))])));
+  return new Map(await Promise.all([...paths].map(async (path2) => [path2, await readModeOptional(join26(project, path2))])));
 }
 async function assertPlanSnapshots(project, expectations) {
   const changed = [];
   for (const expectation2 of expectations) {
-    const actual = expectationForSnapshot(await readOptional2(join25(project, expectation2.path)));
+    const actual = expectationForSnapshot(await readOptional2(join26(project, expectation2.path)));
     if (JSON.stringify(actual) !== JSON.stringify(expectation2.expected)) {
       changed.push(expectation2.path);
       continue;
     }
-    if ("mode" in expectation2 && await readModeOptional(join25(project, expectation2.path)) !== expectation2.mode) {
+    if ("mode" in expectation2 && await readModeOptional(join26(project, expectation2.path)) !== expectation2.mode) {
       changed.push(expectation2.path);
     }
   }
@@ -9997,7 +10476,7 @@ async function readSourceParentMode(path2) {
 }
 async function readOptional2(path2) {
   try {
-    return await readFile20(path2);
+    return await readFile21(path2);
   } catch (error) {
     if (isMissing7(error))
       return;
@@ -10041,8 +10520,8 @@ var oxcManagedPaths = new Set([
 ]);
 async function createUpdatePlan(request, artifacts, dependencies = {}) {
   await assertProjectReadyForUpdate(request.projectDirectory);
-  const manifestPath = join26(request.projectDirectory, ".windy/files.json");
-  const expectedManifestHash = hashContent(await readFile21(manifestPath));
+  const manifestPath = join27(request.projectDirectory, ".windy/files.json");
+  const expectedManifestHash = hashContent(await readFile22(manifestPath));
   const generationSnapshot = await readGenerationProvenanceSnapshot(request.projectDirectory);
   const provenance = generationSnapshot.provenance;
   const targetModules = resolveUpdateTargetModules(provenance.modules.map(({ name }) => name), request.targetModules);
@@ -10089,8 +10568,8 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
   const paths = new Set([...sourceEntries.keys(), ...targetEntries.keys()]);
   for (const path2 of paths) {
     if (!projectSnapshots.has(path2)) {
-      projectSnapshots.set(path2, await readOptional2(join26(request.projectDirectory, path2)));
-      projectModes.set(path2, await readModeOptional(join26(request.projectDirectory, path2)));
+      projectSnapshots.set(path2, await readOptional2(join27(request.projectDirectory, path2)));
+      projectModes.set(path2, await readModeOptional(join27(request.projectDirectory, path2)));
     }
   }
   const files = await planFiles({
@@ -10114,10 +10593,10 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
   for (const file of files) {
     file.expectedProjectMode = projectModes.get(file.path);
     if (file.action === "create" || file.action === "update") {
-      file.mode = file.expectedProjectMode ?? await readModeOptional(join26(artifactSet.targetDirectory, file.path));
+      file.mode = file.expectedProjectMode ?? await readModeOptional(join27(artifactSet.targetDirectory, file.path));
     }
     if (file.action === "create") {
-      file.parentMode = await readSourceParentMode(join26(artifactSet.targetDirectory, dirname9(file.path)));
+      file.parentMode = await readSourceParentMode(join27(artifactSet.targetDirectory, dirname9(file.path)));
     }
   }
   const plannedPaths = new Set(files.map(({ path: path2 }) => path2));
@@ -10137,7 +10616,8 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
     ...migrations.conflicts,
     ...files.flatMap((file) => file.conflict ? [`${file.path}\uFF1A${file.conflict}`] : [])
   ];
-  if (hashContent(await readFile21(manifestPath)) !== expectedManifestHash) {
+  const manualCleanup = await inspectAdkRetirement(request.projectDirectory);
+  if (hashContent(await readFile22(manifestPath)) !== expectedManifestHash) {
     throw new Error("\u751F\u6210\u66F4\u65B0\u8BA1\u5212\u671F\u95F4\u53D7\u7BA1\u6E05\u5355\u53D1\u751F\u53D8\u5316");
   }
   await assertPlanSnapshots(request.projectDirectory, [
@@ -10161,6 +10641,7 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
     workspaceMembershipExpectations: workspaceSnapshot.membershipExpectations,
     finalWorkspaceMembershipExpectations: deriveFinalWorkspaceMembership(workspaceSnapshot.membershipExpectations, targetWorkspaceSnapshot.membershipExpectations, files),
     conflicts,
+    manualCleanup,
     detachedToolchain,
     targetProvenance,
     sourceManifest,
@@ -10262,9 +10743,9 @@ function frozenManifestHash(file, finalizedHashes) {
 }
 
 // src/update/format-stabilizer.ts
-import { mkdir as mkdir8, mkdtemp as mkdtemp3, readFile as readFile22, rm as rm7, writeFile as writeFile13 } from "fs/promises";
+import { mkdir as mkdir8, mkdtemp as mkdtemp3, readFile as readFile23, rm as rm7, writeFile as writeFile13 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname10, extname as extname4, join as join27, resolve as resolve6, sep as sep5 } from "path";
+import { dirname as dirname10, extname as extname4, join as join28, resolve as resolve6, sep as sep5 } from "path";
 var formattedExtensions = new Set([
   ".cjs",
   ".css",
@@ -10303,7 +10784,7 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
     }
   }
   inputs.set(".windy/generation.json", new TextEncoder().encode(generationContent));
-  const temporaryRoot = await mkdtemp3(join27(tmpdir3(), "windy-update-format-"));
+  const temporaryRoot = await mkdtemp3(join28(tmpdir3(), "windy-update-format-"));
   try {
     const stagedPaths = await stageInputs(temporaryRoot, inputs);
     for (let offset = 0;offset < stagedPaths.length; offset += 80) {
@@ -10311,14 +10792,14 @@ async function stabilizeManagedContent(result2, execute, writeProjectFile) {
         "x",
         "oxfmt",
         "--write",
-        `--config=${join27(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
+        `--config=${join28(result2.plan.projectDirectory, ".oxfmtrc.json")}`,
         ...stagedPaths.slice(offset, offset + 80)
       ], result2.plan.projectDirectory);
     }
     const hashes = plannedContentHashes(result2);
     let formattedGeneration = generationContent;
     for (const [path2, original] of inputs) {
-      const formatted = await readFile22(safeTemporaryPath(temporaryRoot, path2));
+      const formatted = await readFile23(safeTemporaryPath(temporaryRoot, path2));
       if (path2 === ".windy/generation.json") {
         formattedGeneration = formatted.toString();
         continue;
@@ -10375,6 +10856,12 @@ async function writeUpdateReport(result2, steps, relativePath2, expected) {
     ] : [],
     `- \u4FEE\u6539\u6587\u4EF6\uFF1A${result2.changedFiles.length}`,
     `- Oxc \u4EE3\u7BA1\uFF1A${result2.plan.detachedToolchain ? "\u5DF2\u68C0\u6D4B\u5230\u5BA2\u6237\u63A5\u7BA1\u5E76\u4FDD\u7559" : "\u4FDD\u6301"}`,
+    ...result2.plan.manualCleanup?.length ? [
+      "",
+      "## \u4EBA\u5DE5\u6E05\u7406",
+      "",
+      ...result2.plan.manualCleanup.map(({ message }) => `- ${message}`)
+    ] : [],
     "",
     "## \u9A8C\u8BC1",
     "",
@@ -10472,7 +10959,7 @@ class DefaultStarterUpdater {
       const plannedPaths = new Set(result2.plan.files.map(({ path: path2 }) => path2));
       replaceExpectations(result2, verificationSnapshot.filter(({ path: path2 }) => !metadataPaths2.has(path2) && !plannedPaths.has(path2)));
       verificationExpectationsFrozen = true;
-      const packageJson = JSON.parse(await readFile23(join28(result2.plan.projectDirectory, "package.json"), "utf8"));
+      const packageJson = JSON.parse(await readFile24(join29(result2.plan.projectDirectory, "package.json"), "utf8"));
       for (const name of ["lint", "typecheck", "test", "build"]) {
         if (!packageJson.scripts?.[name]) {
           steps.push({ name: `bun run ${name}`, status: "skipped" });
@@ -10500,7 +10987,8 @@ class DefaultStarterUpdater {
         throw error;
       }
       if (error instanceof TransactionCasError) {
-        throw new Error("\u66F4\u65B0\u6700\u7EC8\u63D0\u4EA4\u53D1\u751F\u5E76\u53D1\u51B2\u7A81\uFF0C\u4E8B\u52A1\u73B0\u573A\u5DF2\u4FDD\u7559\uFF1B\u8BF7\u8FD0\u884C bun run windy doctor --repair", { cause: error });
+        const conflictDetail = error.paths.length ? `\uFF1A${error.paths.join("\u3001")}` : "";
+        throw new Error(`\u66F4\u65B0\u6700\u7EC8\u63D0\u4EA4\u53D1\u751F\u5E76\u53D1\u51B2\u7A81${conflictDetail}\uFF0C\u4E8B\u52A1\u73B0\u573A\u5DF2\u4FDD\u7559\uFF1B\u8BF7\u8FD0\u884C bun run windy doctor --repair`, { cause: error });
       }
       if (verificationExpectationsFrozen) {
         const conflicts = await retainOwnedTransactionExpectationConflicts(result2.plan.projectDirectory, result2.transactionOwnerToken, result2.finalizationExpectations);
@@ -10703,9 +11191,9 @@ function assertEnabledConflicts(target, catalog) {
   for (const [name, enabled] of target) {
     if (!enabled)
       continue;
-    const conflict4 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
-    if (conflict4)
-      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict4}`);
+    const conflict5 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
+    if (conflict5)
+      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict5}`);
   }
 }
 function assertCompatible(version, range, name) {
@@ -10720,7 +11208,7 @@ function reconcileProjectModuleRegistryPlan(plan, current, lifecycle) {
   if (!registryFile) {
     throw new Error("\u6A21\u5757\u751F\u547D\u5468\u671F\u8BA1\u5212\u7F3A\u5C11 project-owned \u88C5\u914D\u9009\u62E9");
   }
-  plan.conflicts = plan.conflicts.filter((conflict4) => !conflict4.startsWith(`${projectModuleRegistryPath}\uFF1A`));
+  plan.conflicts = plan.conflicts.filter((conflict5) => !conflict5.startsWith(`${projectModuleRegistryPath}\uFF1A`));
   delete registryFile.conflict;
   if (lifecycle.action === "update") {
     registryFile.action = "preserve";
@@ -11150,8 +11638,8 @@ function printModulePlan(plan, log) {
   for (const file of changed) {
     log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
   }
-  for (const conflict4 of plan.conflicts)
-    log(`  conflict ${conflict4}`);
+  for (const conflict5 of plan.conflicts)
+    log(`  conflict ${conflict5}`);
 }
 function hasChanges(lifecycle) {
   return lifecycle.addedModules.length > 0 || lifecycle.updatedModules.length > 0 || lifecycle.removedModules.length > 0;
@@ -11323,8 +11811,11 @@ function printPlan(plan) {
   console.log(`\u8BA1\u5212\u6539\u52A8\uFF1A${changed.length} \u4E2A\u6587\u4EF6\uFF1B\u51B2\u7A81\uFF1A${plan.conflicts.length}`);
   for (const file of changed)
     console.log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
-  for (const conflict4 of plan.conflicts)
-    console.log(`  conflict ${conflict4}`);
+  for (const conflict5 of plan.conflicts)
+    console.log(`  conflict ${conflict5}`);
+  for (const finding of plan.manualCleanup ?? []) {
+    console.log(`  manual ${finding.message}`);
+  }
   if (plan.detachedToolchain)
     console.log("Oxc\uFF1A\u68C0\u6D4B\u5230\u5BA2\u6237\u63A5\u7BA1\uFF0C\u76F8\u5173\u914D\u7F6E\u4FDD\u6301\u4E0D\u53D8");
 }
@@ -11347,6 +11838,9 @@ function printDoctor(report) {
   if (report.duplicateLocalEnvironmentKeys.length) {
     console.log(`\u672C\u5730 .env \u91CD\u590D\u5B9A\u4E49\uFF1A${report.duplicateLocalEnvironmentKeys.join("\u3001")}\uFF08\u8BF7\u4EBA\u5DE5\u5904\u7406\uFF09`);
   }
+  for (const finding of report.manualCleanup) {
+    console.log(`\u4EBA\u5DE5\u6E05\u7406\uFF1A${finding.message}`);
+  }
   if (report.recoveryRequired)
     console.log("\u6062\u590D\uFF1A\u68C0\u6D4B\u5230\u4E2D\u65AD\u66F4\u65B0\uFF0C\u8BF7\u8FD0\u884C doctor --repair");
   if (report.recoveryAction === "recovery-conflicts") {
@@ -11405,20 +11899,20 @@ import {
   cp,
   mkdir as mkdir9,
   mkdtemp as mkdtemp4,
-  readFile as readFile25,
+  readFile as readFile26,
   readdir as readdir9,
   rename as rename2,
   rm as rm11,
   writeFile as writeFile14
 } from "fs/promises";
-import { dirname as dirname11, join as join29, relative as relative7 } from "path";
+import { dirname as dirname11, join as join30, relative as relative7 } from "path";
 
 // src/module-schema/config.ts
-import { readFile as readFile24 } from "fs/promises";
+import { readFile as readFile25 } from "fs/promises";
 import { isAbsolute as isAbsolute2, relative as relative6, resolve as resolve9 } from "path";
 async function readModuleSchemaLineageConfig(projectDirectory, configPath) {
   const absolutePath = resolveProjectPath(projectDirectory, configPath);
-  const parsed = JSON.parse(await readFile24(absolutePath, "utf8"));
+  const parsed = JSON.parse(await readFile25(absolutePath, "utf8"));
   if (!isConfig(parsed)) {
     throw new Error("Module schema lineage \u914D\u7F6E\u65E0\u6548");
   }
@@ -11552,17 +12046,17 @@ async function handoffModuleSchemaLineages(options) {
 async function stageModuleLineages(project, temporaryRoot, config, execute) {
   const outputs = [];
   for (const [index, module2] of config.modules.entries()) {
-    const output = join29(temporaryRoot, `module-${index}`);
+    const output = join30(temporaryRoot, `module-${index}`);
     await mkdir9(output, { recursive: true });
-    const generatedConfig = join29(temporaryRoot, `module-${index}.config.ts`);
+    const generatedConfig = join30(temporaryRoot, `module-${index}.config.ts`);
     await writeDrizzleConfig(generatedConfig, project, module2.schema, relative7(temporaryRoot, output));
     await execute(generatedConfig, temporaryRoot);
     const sqlFiles = await listSqlFiles(output);
     if (sqlFiles.length !== 1) {
       throw new Error(`${module2.key} baseline \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration`);
     }
-    await writeFile14(join29(output, sqlFiles[0]), metadataOnlySql("module"));
-    await writeFile14(join29(output, "lineage.json"), `${JSON.stringify({
+    await writeFile14(join30(output, sqlFiles[0]), metadataOnlySql("module"));
+    await writeFile14(join30(output, "lineage.json"), `${JSON.stringify({
       schemaVersion: 1,
       moduleKey: module2.key,
       schema: module2.schema,
@@ -11576,25 +12070,25 @@ async function stageModuleLineages(project, temporaryRoot, config, execute) {
 }
 async function stagePlatformLineage(project, temporaryRoot, config, execute) {
   const source = resolveProjectPath(project, config.platform.out);
-  const output = join29(temporaryRoot, "platform");
+  const output = join30(temporaryRoot, "platform");
   await cp(source, output, { recursive: true });
   const before = new Set(await listSqlFiles(output));
-  const generatedConfig = join29(temporaryRoot, "platform.config.ts");
+  const generatedConfig = join30(temporaryRoot, "platform.config.ts");
   await writeDrizzleConfig(generatedConfig, project, config.platform.schema, relative7(temporaryRoot, output));
   await execute(generatedConfig, temporaryRoot);
   const created = (await listSqlFiles(output)).filter((path2) => !before.has(path2));
   if (created.length !== 1) {
     throw new Error("\u5E73\u53F0 lineage handoff \u5FC5\u987B\u6070\u597D\u751F\u6210\u4E00\u4E2A migration");
   }
-  const sqlPath = join29(output, created[0]);
+  const sqlPath = join30(output, created[0]);
   const allowed = config.modules.flatMap(({ legacyPlatformTables }) => legacyPlatformTables);
-  validatePlatformHandoffSql(await readFile25(sqlPath, "utf8"), allowed);
+  validatePlatformHandoffSql(await readFile26(sqlPath, "utf8"), allowed);
   await writeFile14(sqlPath, metadataOnlySql("platform"));
   return output;
 }
 async function installStagedLineages(project, temporaryRoot, config, stagedModules, stagedPlatform) {
   const platform = resolveProjectPath(project, config.platform.out);
-  const backup = join29(temporaryRoot, "platform-backup");
+  const backup = join30(temporaryRoot, "platform-backup");
   const installed = [];
   await rename2(platform, backup);
   try {
@@ -11641,9 +12135,9 @@ async function validateSchemaSources(project, config) {
   }
 }
 async function createTemporaryRoot(project) {
-  const windy = join29(project, ".windy");
+  const windy = join30(project, ".windy");
   await mkdir9(windy, { recursive: true });
-  return await mkdtemp4(join29(windy, "module-schema-handoff-"));
+  return await mkdtemp4(join30(windy, "module-schema-handoff-"));
 }
 async function listSqlFiles(root) {
   return (await readdir9(root)).filter((path2) => path2.endsWith(".sql")).sort();