create-windy 0.6.12 → 0.6.15

package/template/packages/server-sdk/src/agent-session-provider.ts

@@ -0,0 +1,63 @@
+import type { ModuleActor } from "./actor.js";
+
+export const MODULE_AGENT_SESSION_SCHEMA_VERSION = 1 as const;
+
+export interface ModuleAgentSessionContextV1 {
+  readonly actor: ModuleActor;
+  readonly operationKey: string;
+  readonly signal: AbortSignal;
+}
+
+export interface ModuleAgentSessionListInputV1 extends ModuleAgentSessionContextV1 {
+  readonly limit: number;
+  /** Provider 私有的不透明 keyset cursor；Host 只原样回传给同一 Provider。 */
+  readonly cursor?: string;
+}
+
+export interface ModuleAgentSessionGetInputV1 extends ModuleAgentSessionContextV1 {
+  readonly sourceId: string;
+}
+
+export interface ModuleAgentSessionSummaryV1 {
+  /** 仅在 Provider 与 Host 之间使用，不会返回给浏览器。 */
+  readonly sourceId: string;
+  readonly title: string;
+  readonly scopeLabel?: string;
+  readonly updatedAt: string;
+  readonly revision: string;
+}
+
+export interface ModuleAgentSessionPageV1 {
+  readonly sessions: readonly ModuleAgentSessionSummaryV1[];
+  readonly truncated: boolean;
+  /** truncated=true 时必须提供，用于 Host 继续读取直到完整。 */
+  readonly next?: string;
+}
+
+export interface ModuleAgentSessionMessageV1 {
+  readonly sequence: number;
+  readonly role: "user" | "assistant";
+  readonly content: string;
+  readonly createdAt: string;
+}
+
+export interface ModuleAgentSessionV1 extends ModuleAgentSessionSummaryV1 {
+  readonly messages: readonly ModuleAgentSessionMessageV1[];
+}
+
+/**
+ * 主站只读业务会话投影。Provider 只读业务事实，Host 负责按当前登录身份重新授权、
+ * 审计、有界校验与不透明 ID；V1 不支持业务会话的追加、重命名或删除。
+ */
+export interface ModuleAgentSessionProviderV1 {
+  readonly schemaVersion: typeof MODULE_AGENT_SESSION_SCHEMA_VERSION;
+  readonly key: string;
+  readonly operationKeys: readonly string[];
+  readonly featureKey: string;
+  readonly permissionKey: string;
+  readonly auditAction: string;
+  list(input: ModuleAgentSessionListInputV1): Promise<ModuleAgentSessionPageV1>;
+  get(
+    input: ModuleAgentSessionGetInputV1,
+  ): Promise<ModuleAgentSessionV1 | undefined>;
+}

package/template/packages/server-sdk/src/agent-source-invalidation-port.ts

@@ -0,0 +1,54 @@
+export interface ModuleAuthoritativeSourceCoordinateV1 {
+  readonly sourceKind: string;
+  readonly sourceId: string;
+  readonly version: string;
+  readonly sequence: number;
+  readonly digest?: string;
+}
+
+export interface ModuleAuthoritativeSourceEventV1 {
+  readonly eventId: string;
+  readonly eventSequence: number;
+  readonly occurredAt: string;
+}
+
+export interface ModuleAuthoritativeSourceInvalidationV1 {
+  readonly source: ModuleAuthoritativeSourceCoordinateV1;
+  readonly event: ModuleAuthoritativeSourceEventV1;
+}
+
+export type ModuleSourceInvalidationAppendResultV1 =
+  | "appended"
+  | "duplicate"
+  | "stale";
+
+/**
+ * Host binds module, Actor, Scope, and the module's current business transaction.
+ * Calls outside that authoritative transaction fail closed.
+ */
+export interface ModuleAuthoritativeSourceInvalidationPortV1 {
+  sourceDeleted(input: ModuleAuthoritativeSourceInvalidationV1):
+    Promise<ModuleSourceInvalidationAppendResultV1>;
+  sourceExpired(input: ModuleAuthoritativeSourceInvalidationV1):
+    Promise<ModuleSourceInvalidationAppendResultV1>;
+  sourceSuperseded(input: ModuleAuthoritativeSourceInvalidationV1):
+    Promise<ModuleSourceInvalidationAppendResultV1>;
+  authorizationRevoked(input: ModuleAuthoritativeSourceInvalidationV1):
+    Promise<ModuleSourceInvalidationAppendResultV1>;
+}
+
+export class ModuleAuthoritativeSourceInvalidationUnavailableError extends Error {
+  readonly code = "SOURCE_INVALIDATION_UNAVAILABLE" as const;
+
+  constructor() {
+    super("权威来源失效写入暂不可用");
+    this.name = "ModuleAuthoritativeSourceInvalidationUnavailableError";
+  }
+}
+
+export function requireModuleAuthoritativeSourceInvalidationPort(
+  port: ModuleAuthoritativeSourceInvalidationPortV1 | undefined,
+) {
+  if (!port) throw new ModuleAuthoritativeSourceInvalidationUnavailableError();
+  return port;
+}

package/template/packages/server-sdk/src/ai-operation-registration.ts

@@ -16,6 +16,8 @@ export interface ModuleAiOperationContext {
 export interface ModuleAiOperationPlan {
   readonly instructions: string;
   readonly userPrompt: string;
+  /** Host forwards this trusted business coordinate only for governed Case Memory lookup. */
+  readonly memoryScope?: { readonly caseId: string };
   /**
    * 可选 JSON Schema。宿主只把它交给受控 Runtime，并以 Manifest outputSchemaKey
    * 关联审计；业务不能在此选择模型、Provider 或 Endpoint。

package/template/packages/server-sdk/src/client-agent-session.ts

@@ -0,0 +1,107 @@
+import type { ModuleAiJsonValue } from "./ai-operation-registration.js";
+
+export const pageAgentClientRunCapability = "pageAgentClientRun" as const;
+
+export interface ModuleClientAgentHostPrincipal {
+  readonly actorId: string;
+  readonly installationId: string;
+  readonly sessionId: string;
+}
+
+export type ModuleClientAgentHostAuthPurpose = "control" | "completion";
+
+export interface ModuleClientAgentHostAuthAdapter {
+  ready(signal?: AbortSignal): Promise<boolean>;
+  authenticate(input: {
+    readonly token: string;
+    readonly purpose: ModuleClientAgentHostAuthPurpose;
+    readonly signal?: AbortSignal;
+  }): Promise<ModuleClientAgentHostPrincipal | undefined>;
+  /**
+   * Web Cookie 等当前登录会话可选入口。Host 已解析 canonical Actor，Adapter 只确认
+   * installation/session 绑定；返回 principal 仍不得携带权限、Scope 或业务坐标。
+   */
+  authenticateCurrentSession?(input: {
+    readonly request: Request;
+    readonly actorId: string;
+    readonly purpose: ModuleClientAgentHostAuthPurpose;
+    readonly signal?: AbortSignal;
+  }): Promise<ModuleClientAgentHostPrincipal | undefined>;
+  bindRevocations(
+    revoke: (principal: ModuleClientAgentHostPrincipal) => Promise<void>,
+  ): () => void;
+}
+
+export type ModuleClientAgentSessionStatus =
+  | "active"
+  | "completed"
+  | "cancelled"
+  | "revoked"
+  | "expired";
+
+export interface ModuleClientAgentSessionCreateInput {
+  readonly operationKey: string;
+  readonly input: ModuleAiJsonValue;
+  readonly clientBindingDigest: `sha256:${string}`;
+}
+
+export interface ModuleClientAgentSessionGrant {
+  readonly clientRunId: string;
+  readonly sessionId: string;
+  readonly trustedBaseUrl: string;
+  readonly modelAlias: string;
+  readonly limits: {
+    readonly maxSteps: number;
+    readonly maxRequestBytes: number;
+    readonly maxResponseBytes: number;
+    readonly maxDurationSeconds: number;
+    readonly maxConcurrentRequests: number;
+  };
+  readonly expiresAt: string;
+  readonly accessToken: string;
+  readonly capabilities: readonly [typeof pageAgentClientRunCapability];
+}
+
+export interface ModuleClientAgentSessionReceipt {
+  readonly receiptId: string;
+  readonly attempt: number;
+  readonly requestDigest: `sha256:${string}`;
+  readonly responseDigest: `sha256:${string}`;
+  readonly deploymentDigest: `sha256:${string}`;
+  readonly issuedAt: string;
+}
+
+export interface ModuleClientAgentSessionView {
+  readonly clientRunId: string;
+  readonly sessionId: string;
+  readonly operationKey: string;
+  readonly status: ModuleClientAgentSessionStatus;
+  readonly attemptCount: number;
+  readonly expiresAt: string;
+  readonly result?: ModuleAiJsonValue;
+}
+
+/**
+ * 宿主 Adapter 使用的通用 Client Agent Session port。
+ *
+ * 实现必须把调用绑定到当前 ModuleRequestContext，不接受调用方声明 Actor、权限或 Scope。
+ */
+export interface ModuleClientAgentSessionPort {
+  capabilities(): Promise<{
+    readonly capabilities: readonly [typeof pageAgentClientRunCapability];
+    readonly modelAlias: string;
+  }>;
+  create(
+    input: ModuleClientAgentSessionCreateInput,
+  ): Promise<ModuleClientAgentSessionGrant>;
+  status(sessionId: string): Promise<ModuleClientAgentSessionView>;
+  cancel(
+    sessionId: string,
+    reason?: string,
+  ): Promise<ModuleClientAgentSessionView>;
+  finalize(
+    sessionId: string,
+    receiptIds: readonly string[],
+    result?: ModuleAiJsonValue,
+  ): Promise<ModuleClientAgentSessionView>;
+}

package/template/packages/server-sdk/src/client-agent-workflow-artifact.contract.test.ts

@@ -0,0 +1,113 @@
+import { expect, test } from "bun:test";
+import {
+  CLIENT_AGENT_WORKFLOW_ARTIFACT_BINDING_LIMITS,
+  CLIENT_AGENT_WORKFLOW_ARTIFACT_TASK_KEY,
+  CLIENT_AGENT_WORKFLOW_ARTIFACT_WORK_ID_PREFIX,
+  type ModuleClientAgentHostAuthAdapter,
+  type ModuleClientAgentWorkflowArtifactBeginSpec,
+  type ModuleClientAgentWorkflowArtifactPort,
+  type ModuleClientAgentWorkflowArtifactProjectBinding,
+} from "../index.js";
+
+type ForbiddenLifecycleCoordinate = Extract<
+  keyof ModuleClientAgentWorkflowArtifactBeginSpec,
+  | "actorId"
+  | "installationId"
+  | "sessionId"
+  | "workflowRunId"
+  | "nodeRunId"
+  | "commandId"
+  | "scope"
+  | "fence"
+  | "provider"
+>;
+
+const lifecycleHasNoCallerCoordinates: [ForbiddenLifecycleCoordinate] extends [
+  never,
+]
+  ? true
+  : false = true;
+
+const projectBinding: ModuleClientAgentWorkflowArtifactProjectBinding = {
+  workflowKey: "analysis.cross-case.full-review",
+  nodeId: "page-agent-artifact",
+  operationKey: "analysis.cross-case.page-agent",
+  releaseDigest: `sha256:${"d".repeat(64)}`,
+  scopeContainmentContractVersion: 1,
+  terminalResultAuthority: {
+    version: "sharp.analysis-result.v1",
+    digest: `sha256:${"e".repeat(64)}`,
+    async canonicalize({ proposedResult }) {
+      return proposedResult;
+    },
+  },
+  clientTaskAuthority: {
+    version: "sharp.client-task.v1",
+    digest: `sha256:${"f".repeat(64)}`,
+    async build({ workflowInput }) {
+      return { taskKey: "sharp.full-review", input: workflowInput };
+    },
+  },
+  launchAuthority: {
+    version: "sharp.workflow-launch.v1",
+    digest: `sha256:${"a".repeat(64)}`,
+    async authorizeRelease() {},
+    async authorizeRun({ currentAuthorizationScope }) {
+      return {
+        authorizationScope: currentAuthorizationScope,
+      };
+    },
+  },
+  artifact: {
+    kind: "analysis-report",
+    contentType: "application/json",
+    filename: "analysis.json",
+    retentionPolicyKey: "analysis.case-artifact",
+    maxByteSize: 4 * 1024 * 1024,
+  },
+};
+
+const legacyHostAuth: ModuleClientAgentHostAuthAdapter = {
+  async ready() {
+    return true;
+  },
+  async authenticate() {
+    return undefined;
+  },
+  bindRevocations() {
+    return () => undefined;
+  },
+};
+
+test("公开 Workflow Artifact contract 只有三步 lifecycle", () => {
+  const methodNames: readonly (keyof ModuleClientAgentWorkflowArtifactPort)[] =
+    ["begin", "claimOrAdvance", "reconcileOrCancel"];
+
+  expect(methodNames).toEqual(["begin", "claimOrAdvance", "reconcileOrCancel"]);
+  expect(CLIENT_AGENT_WORKFLOW_ARTIFACT_TASK_KEY).toBe(
+    "system.agent-workflow.client-agent-artifact",
+  );
+  expect(CLIENT_AGENT_WORKFLOW_ARTIFACT_WORK_ID_PREFIX).toBe("cawa_");
+  expect(CLIENT_AGENT_WORKFLOW_ARTIFACT_BINDING_LIMITS).toEqual({
+    workflowKey: 160,
+    nodeId: 96,
+    operationKey: 200,
+    releaseDigest: 71,
+    terminalAuthorityVersion: 80,
+    terminalAuthorityDigest: 71,
+    clientTaskKey: 160,
+    clientTaskMaxBytes: 256 * 1024,
+    clientTaskInputArtifactMaxBytes: 16 * 1024 * 1024,
+    artifactKind: 80,
+    artifactContentType: 120,
+    artifactFilename: 240,
+    retentionPolicyKey: 256,
+    maxByteSize: 16 * 1024 * 1024,
+  });
+  expect(lifecycleHasNoCallerCoordinates).toBe(true);
+  expect(projectBinding.artifact.maxByteSize).toBe(4 * 1024 * 1024);
+});
+
+test("现有 Host Auth Adapter 不实现 Web Cookie seam 仍兼容", () => {
+  expect(legacyHostAuth.authenticateCurrentSession).toBeUndefined();
+});

package/template/packages/server-sdk/src/client-agent-workflow-artifact.ts

@@ -0,0 +1,183 @@
+import type { ModuleAiJsonValue } from "./ai-operation-registration.js";
+import type {
+  AgentWorkflowArtifactRef,
+  AgentWorkflowDefinition,
+  AgentWorkflowReleaseCoordinates,
+  AuthorizationScopeSnapshot,
+} from "@southwind-ai/shared";
+
+/** Workflow 图中的 Job node 必须固定引用此 taskKey。 */
+export const CLIENT_AGENT_WORKFLOW_ARTIFACT_TASK_KEY =
+  "system.agent-workflow.client-agent-artifact" as const;
+/** Browser-facing opaque work handle 的唯一稳定前缀。 */
+export const CLIENT_AGENT_WORKFLOW_ARTIFACT_WORK_ID_PREFIX = "cawa_" as const;
+export const CLIENT_AGENT_WORKFLOW_SCOPE_CONTAINMENT_CONTRACT_VERSION =
+  1 as const;
+/** Project binding 的公共 DTO 上限；Server Composition 必须在启动时 fail closed。 */
+export const CLIENT_AGENT_WORKFLOW_ARTIFACT_BINDING_LIMITS = {
+  workflowKey: 160,
+  nodeId: 96,
+  operationKey: 200,
+  releaseDigest: 71,
+  terminalAuthorityVersion: 80,
+  terminalAuthorityDigest: 71,
+  clientTaskKey: 160,
+  clientTaskMaxBytes: 256 * 1024,
+  clientTaskInputArtifactMaxBytes: 16 * 1024 * 1024,
+  artifactKind: 80,
+  artifactContentType: 120,
+  artifactFilename: 240,
+  retentionPolicyKey: 256,
+  maxByteSize: 16 * 1024 * 1024,
+} as const;
+
+export interface ModuleClientAgentWorkflowTaskInputArtifact {
+  readonly artifact: AgentWorkflowArtifactRef;
+  readonly value: ModuleAiJsonValue;
+}
+
+export interface ModuleClientAgentWorkflowExecutionTask {
+  readonly schemaVersion: 1;
+  readonly taskKey: string;
+  readonly input: ModuleAiJsonValue;
+  readonly inputDigest: `sha256:${string}`;
+}
+
+export interface ModuleClientAgentWorkflowClientTaskAuthority {
+  /** Project-owned canonical task projection contract version. */
+  readonly version: string;
+  /** Digest of the projection rules/configuration, never of the function body. */
+  readonly digest: `sha256:${string}`;
+  build(input: {
+    readonly workflowInput: ModuleAiJsonValue;
+    /** Host-opened JSON payloads after current durable/source reauthorization. */
+    readonly inputArtifacts: readonly ModuleClientAgentWorkflowTaskInputArtifact[];
+    readonly actorId: string;
+    readonly scopeDigest: `sha256:${string}`;
+    readonly signal: AbortSignal;
+  }): Promise<{ readonly taskKey: string; readonly input: ModuleAiJsonValue }>;
+}
+
+export interface ModuleClientAgentWorkflowArtifactTerminalResultAuthority {
+  /** Project-owned validator/canonicalizer contract version. */
+  readonly version: string;
+  /** Digest of the validator rules/configuration, never of the function body. */
+  readonly digest: `sha256:${string}`;
+  canonicalize(input: {
+    readonly workflowInput: ModuleAiJsonValue;
+    /** Host-opened canonical inputs after terminal-time reauthorization. */
+    readonly inputArtifacts: readonly ModuleClientAgentWorkflowTaskInputArtifact[];
+    readonly proposedResult: ModuleAiJsonValue;
+    readonly actorId: string;
+    readonly scopeDigest: `sha256:${string}`;
+    readonly signal: AbortSignal;
+  }): Promise<ModuleAiJsonValue>;
+}
+
+export interface ModuleClientAgentWorkflowProjectLaunchAuthority {
+  readonly version: string;
+  readonly digest: `sha256:${string}`;
+  authorizeRelease(input: {
+    readonly definition: AgentWorkflowDefinition;
+    readonly coordinates: AgentWorkflowReleaseCoordinates;
+    readonly actorId: string;
+    readonly signal: AbortSignal;
+  }): Promise<void>;
+  authorizeRun(input: {
+    readonly releaseId: string;
+    readonly releaseDigest: string;
+    readonly workflowInput: ModuleAiJsonValue;
+    readonly inputArtifacts: readonly AgentWorkflowArtifactRef[];
+    readonly actorId: string;
+    /** Host-captured current scope; project may only return this scope or a narrowing. */
+    readonly currentAuthorizationScope: AuthorizationScopeSnapshot;
+    readonly signal: AbortSignal;
+  }): Promise<{ readonly authorizationScope: AuthorizationScopeSnapshot }>;
+}
+
+export interface ModuleClientAgentWorkflowArtifactPolicy {
+  readonly kind: string;
+  readonly contentType: "application/json";
+  readonly filename: string;
+  readonly retentionPolicyKey: string;
+  readonly maxByteSize: number;
+}
+
+/**
+ * project-owned Composition 对已审核 Workflow release 的静态绑定。
+ * 该绑定只供 Host 装配，不能作为 Module lifecycle 调用参数。
+ */
+export interface ModuleClientAgentWorkflowArtifactProjectBinding {
+  readonly workflowKey: string;
+  readonly nodeId: string;
+  readonly operationKey: string;
+  /** 审核时登记的完整 Immutable Release digest；新 Release 不自动继承。 */
+  readonly releaseDigest: `sha256:${string}`;
+  /** Composition readiness：Host 必须按持久 Run scope ⊆ 当前 Actor scope 复验。 */
+  readonly scopeContainmentContractVersion: typeof CLIENT_AGENT_WORKFLOW_SCOPE_CONTAINMENT_CONTRACT_VERSION;
+  readonly terminalResultAuthority: ModuleClientAgentWorkflowArtifactTerminalResultAuthority;
+  /** Claim response 的 canonical execution input；raw Artifact 永不下发。 */
+  readonly clientTaskAuthority: ModuleClientAgentWorkflowClientTaskAuthority;
+  /** 受保护 Workflow 的 Release/Run 只能经 project preset authority。 */
+  readonly launchAuthority: ModuleClientAgentWorkflowProjectLaunchAuthority;
+  readonly artifact: ModuleClientAgentWorkflowArtifactPolicy;
+}
+
+export interface ModuleClientAgentWorkflowArtifactBeginSpec {
+  /** 业务输入；Actor、Scope、Run、Node、Fence 与幂等坐标全部由 Host 当前 attempt 固定。 */
+  readonly input: ModuleAiJsonValue;
+}
+
+/** Host 签发的不透明 lifecycle handle，调用方不得解析或持久化其内部坐标。 */
+export interface ModuleClientAgentWorkflowArtifactCommand {
+  readonly value: string;
+}
+
+export type ModuleClientAgentWorkflowArtifactStatus =
+  | "pending"
+  | "running"
+  | "completed"
+  | "cancelled";
+
+export type ModuleClientAgentWorkflowArtifactSafeCode =
+  | "HOST_UNAVAILABLE"
+  | "NO_PENDING_WORK"
+  | "CLAIM_CONFLICT"
+  | "WORK_NOT_FOUND"
+  | "WORK_EXPIRED"
+  | "WORK_CANCELLED"
+  | "RECEIPT_REJECTED"
+  | "ARTIFACT_REJECTED"
+  | "INTERNAL_ERROR";
+
+export interface ModuleClientAgentWorkflowArtifactSummary {
+  readonly artifactId: string;
+  readonly kind: string;
+  readonly contentType: string;
+  readonly filename: string;
+  readonly byteSize: number;
+  readonly sha256: string;
+}
+
+export interface ModuleClientAgentWorkflowArtifactView {
+  readonly command: ModuleClientAgentWorkflowArtifactCommand;
+  readonly status: ModuleClientAgentWorkflowArtifactStatus;
+  readonly artifact?: ModuleClientAgentWorkflowArtifactSummary;
+  readonly safeCode?: ModuleClientAgentWorkflowArtifactSafeCode;
+}
+
+/**
+ * Durable Handler 的深 Port。实现从当前 attempt 捕获 Actor、installation/session、
+ * Workflow Run/Node/command、Scope、generation/effect fence 与 Artifact writer。
+ */
+export interface ModuleClientAgentWorkflowArtifactPort {
+  begin(
+    spec: ModuleClientAgentWorkflowArtifactBeginSpec,
+  ): Promise<ModuleClientAgentWorkflowArtifactView>;
+  claimOrAdvance(
+    command: ModuleClientAgentWorkflowArtifactCommand,
+  ): Promise<ModuleClientAgentWorkflowArtifactView>;
+  reconcileOrCancel(
+    command: ModuleClientAgentWorkflowArtifactCommand,
+  ): Promise<ModuleClientAgentWorkflowArtifactView>;
+}

package/template/packages/server-sdk/src/debug-session-provider.ts

@@ -1,63 +1,14 @@
-import type { ModuleActor } from "./actor.js";
-
-export const MODULE_DEBUG_SESSION_SCHEMA_VERSION = 1 as const;
-
-export interface ModuleDebugSessionContextV1 {
-  readonly actor: ModuleActor;
-  readonly operationKey: string;
-  readonly signal: AbortSignal;
-}
-
-export interface ModuleDebugSessionListInputV1 extends ModuleDebugSessionContextV1 {
-  readonly limit: number;
-  /** Provider 私有的不透明 keyset cursor；Host 只原样回传给同一 Provider。 */
-  readonly cursor?: string;
-}
-
-export interface ModuleDebugSessionGetInputV1 extends ModuleDebugSessionContextV1 {
-  readonly sourceId: string;
-}
-
-export interface ModuleDebugSessionSummaryV1 {
-  /** 仅在 Provider 与 Host 之间使用，不会返回给 ADK Web。 */
-  readonly sourceId: string;
-  readonly title: string;
-  readonly scopeLabel?: string;
-  readonly updatedAt: string;
-  readonly revision: string;
-}
-
-export interface ModuleDebugSessionPageV1 {
-  readonly sessions: readonly ModuleDebugSessionSummaryV1[];
-  readonly truncated: boolean;
-  /** truncated=true 时必须提供，用于 Host 继续读取直到完整。 */
-  readonly next?: string;
-}
-
-export interface ModuleDebugSessionMessageV1 {
-  readonly sequence: number;
-  readonly role: "user" | "assistant";
-  readonly content: string;
-  readonly createdAt: string;
-}
-
-export interface ModuleDebugSessionV1 extends ModuleDebugSessionSummaryV1 {
-  readonly messages: readonly ModuleDebugSessionMessageV1[];
-}
-
-/**
- * 开发期 ADK Web 会话投影。Provider 只读业务事实，Host 负责重新授权、审计、
- * 有界校验与不透明 ID；V1 不支持业务会话的追加、重命名或删除。
- */
-export interface ModuleDebugSessionProviderV1 {
-  readonly schemaVersion: typeof MODULE_DEBUG_SESSION_SCHEMA_VERSION;
-  readonly key: string;
-  readonly operationKeys: readonly string[];
-  readonly featureKey: string;
-  readonly permissionKey: string;
-  readonly auditAction: string;
-  list(input: ModuleDebugSessionListInputV1): Promise<ModuleDebugSessionPageV1>;
-  get(
-    input: ModuleDebugSessionGetInputV1,
-  ): Promise<ModuleDebugSessionV1 | undefined>;
-}
+/** @deprecated 请改用 MODULE_AGENT_SESSION_SCHEMA_VERSION。 */
+export { MODULE_AGENT_SESSION_SCHEMA_VERSION as MODULE_DEBUG_SESSION_SCHEMA_VERSION } from "./agent-session-provider.js";
+
+/** @deprecated 请改用 ModuleAgentSession* 类型。 */
+export type {
+  ModuleAgentSessionContextV1 as ModuleDebugSessionContextV1,
+  ModuleAgentSessionGetInputV1 as ModuleDebugSessionGetInputV1,
+  ModuleAgentSessionListInputV1 as ModuleDebugSessionListInputV1,
+  ModuleAgentSessionMessageV1 as ModuleDebugSessionMessageV1,
+  ModuleAgentSessionPageV1 as ModuleDebugSessionPageV1,
+  ModuleAgentSessionProviderV1 as ModuleDebugSessionProviderV1,
+  ModuleAgentSessionSummaryV1 as ModuleDebugSessionSummaryV1,
+  ModuleAgentSessionV1 as ModuleDebugSessionV1,
+} from "./agent-session-provider.js";

package/template/packages/server-sdk/src/durable-handler.ts

@@ -9,6 +9,9 @@ import type {
   ModuleResourceFileRequest,
   ModuleStorageWritePortV1,
 } from "./storage-port.js";
+// @windy-module system.agent begin
+import type { ModuleWorkflowInputArtifactPublicationPortV1 } from "./workflow-input-artifact-port.js";
+// @windy-module system.agent end
 
 export interface ModuleDurableStoragePort {
   openResourceFile(
@@ -29,6 +32,10 @@ export interface ModuleDurableHandlerContext extends DurableHandlerContext {
   readonly storageWriter?: ModuleStorageWritePortV1;
   /** 每个 attempt 重新绑定 Actor、Scope 与当前授权。 */
   readonly reportStaging?: ModuleReportStagingPortV1;
+  // @windy-module system.agent begin
+  /** 真实 Durable Job artifact publication；不会把 Storage fileId 当 artifactId。 */
+  readonly workflowInputArtifacts?: ModuleWorkflowInputArtifactPublicationPortV1;
+  // @windy-module system.agent end
   readonly ai: ModuleBackgroundAiPort;
 }
 

package/template/packages/server-sdk/src/module-host.ts

@@ -1,5 +1,5 @@
 import type { ModuleAiOperationHandlerRegistration } from "./ai-operation-registration.js";
-import type { ModuleDebugSessionProviderV1 } from "./debug-session-provider.js";
+import type { ModuleAgentSessionProviderV1 } from "./agent-session-provider.js";
 import type { ModuleDurableHandlerDefinition } from "./durable-handler.js";
 import type { ModuleGovernedResourceRegistration } from "./data-governance-registration.js";
 import type { ModuleRolePreset } from "./role-preset.js";
@@ -69,9 +69,13 @@ export interface ModuleHost {
   registerRolePresets(presets: readonly ModuleRolePreset[]): void;
   /** 注册 Manifest `providers` 已声明的搜索 Provider。 */
   registerSearchProviders(providers: readonly ModuleSearchProvider[]): void;
-  /** 注册开发期 ADK Web 使用的只读业务会话投影。 */
+  /** 注册主站使用的只读业务会话投影。 */
+  registerAgentSessionProviders(
+    providers: readonly ModuleAgentSessionProviderV1[],
+  ): void;
+  /** @deprecated 请改用 registerAgentSessionProviders。 */
   registerDebugSessionProviders(
-    providers: readonly ModuleDebugSessionProviderV1[],
+    providers: readonly ModuleAgentSessionProviderV1[],
   ): void;
 }