create-windy 0.6.14 → 0.6.15

package/dist/cli.js

@@ -304,6 +304,7 @@ var agentOptionalModule = {
     "apps/server/src/app/ai-screenshot-intake-binding.ts",
     "apps/server/src/app/agent-runtime-composition.ts",
     "apps/server/src/app/client-agent-host-auth-binding.ts",
+    "apps/server/src/app/client-agent-workflow-artifact-binding.ts",
     "apps/server/src/app/document-output-artifact-bindings.ts",
     "apps/server/src/app/speech-output-artifact-bindings.ts",
     "apps/server/src/ai-artifact",
@@ -316,6 +317,10 @@ var agentOptionalModule = {
     "apps/server/src/module-host/ai-operation-port.test.ts",
     "apps/server/src/module-host/agent-session-memory-port.ts",
     "apps/server/src/module-host/agent-source-invalidation-port.ts",
+    "apps/server/src/module-host/workflow-input-artifact-port.ts",
+    "apps/server/src/module-host/workflow-input-artifact-port.test.ts",
+    "apps/server/src/module-host/workflow-input-materialization.ts",
+    "apps/server/src/module-host/workflow-input-materialization.test.ts",
     "apps/server/src/module-host/tool-handlers.ts",
     "apps/server/src/module-host/tool-handlers.test.ts",
     "apps/server/src/module-host/module-secret-tool-boundary.test.ts",
@@ -346,6 +351,12 @@ var agentOptionalModule = {
     "packages/modules/src/system-ai-api-bindings.ts",
     "packages/server-sdk/src/system-agent-supervisor.ts",
     "packages/server-sdk/src/system-agent-supervisor.test.ts",
+    "packages/server-sdk/src/client-agent-workflow-artifact.ts",
+    "packages/server-sdk/src/client-agent-workflow-artifact.contract.test.ts",
+    "packages/server-sdk/src/workflow-input-artifact-port.ts",
+    "packages/server-sdk/src/workflow-input-artifact-validation.ts",
+    "packages/server-sdk/src/workflow-input-artifact-validation.contract.test.ts",
+    "packages/server-sdk/src/workflow-input-materialization-handler.ts",
     "packages/database/src/agent-runtime-schema.test.ts",
     "packages/database/src/ai-output-artifacts.test.ts",
     "packages/shared/src/agent-workflow-definition.ts",
@@ -362,6 +373,7 @@ var agentOptionalModule = {
     "docs/adr/0003-agent-session-event-source.md",
     "docs/architecture/agent-harness.md",
     "docs/architecture/agent-workflow.md",
+    "docs/architecture/durable-jobs.md",
     "docs/architecture/ai-egress.md",
     "docs/architecture/ai-runtime-readiness.md",
     "docs/architecture/ai-runtime.md",
@@ -396,6 +408,7 @@ var agentOptionalModule = {
     "packages/database/src/schema/agent-workflow-effects.ts",
     "packages/database/src/schema/agent-workflow-evaluation.ts",
     "packages/database/src/schema/client-agent.ts",
+    "packages/database/src/schema/client-agent-workflow-artifact.ts",
     "packages/database/src/schema/embedding-runtime.ts",
     "packages/database/src/schema/ai-output-artifacts.ts"
   ],
@@ -410,6 +423,7 @@ var agentOptionalModule = {
     "agent_runtime_report_attempts",
     "client_agent_sessions",
     "client_agent_receipts",
+    "client_agent_workflow_artifacts",
     "embedding_run_bindings",
     "ai_output_artifact_scopes",
     "ai_output_artifacts",
@@ -439,7 +453,8 @@ var agentOptionalModule = {
     "idx_agent_context_sources_origin",
     "idx_agent_memory_sources_origin",
     "uk_agent_source_invalidations_sequence",
-    "agent_workflow_"
+    "agent_workflow_",
+    "client_agent_workflow_"
   ]
 };
 
@@ -8452,6 +8467,11 @@ var recipes = [
     id: "starter-0.6.13-to-0.6.14",
     from: "0.6.13",
     to: "0.6.14"
+  },
+  {
+    id: "starter-0.6.14-to-0.6.15",
+    from: "0.6.14",
+    to: "0.6.15"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -9813,6 +9833,163 @@ function conflict(path2, reason, expectedProjectContent) {
   };
 }
 
+// src/update/recipe-project-owned-client-workflow.ts
+var clientWorkflowCompositionPath = "apps/server/src/app/agent-runtime-composition.ts";
+var clientWorkflowBindingPath = "apps/server/src/app/client-agent-workflow-artifact-binding.ts";
+var legacyDefaultBinding = `import type { ModuleClientAgentWorkflowArtifactProjectBinding } from "@southwind-ai/server-sdk";
+
+/**
+ * Project-owned Workflow -> PageAgent \u7ED1\u5B9A\u3002Starter \u9ED8\u8BA4\u7A7A\u6570\u7EC4\u5E76 fail closed\uFF1B
+ * \u4EA7\u54C1\u53EA\u4E3A\u5DF2\u5BA1\u6838\u3001\u5DF2\u53D1\u5E03\u7684\u56FA\u5B9A Workflow Job node \u589E\u52A0\u9759\u6001\u7ED1\u5B9A\u3002
+ */
+export const projectClientAgentWorkflowArtifactBindings: readonly ModuleClientAgentWorkflowArtifactProjectBinding[] =
+  [];
+`;
+var immutableReleaseDefaultBinding = `import type { ModuleClientAgentWorkflowArtifactProjectBinding } from "@southwind-ai/server-sdk";
+
+/**
+ * Project-owned Workflow -> PageAgent \u7ED1\u5B9A\u3002Starter \u9ED8\u8BA4\u7A7A\u6570\u7EC4\u5E76 fail closed\uFF1B
+ * \u4EA7\u54C1\u53EA\u4E3A\u5DF2\u5BA1\u6838\u3001\u5DF2\u53D1\u5E03\u7684\u56FA\u5B9A Workflow Job node \u589E\u52A0\u9759\u6001\u7ED1\u5B9A\u3002Operation \u5FC5\u987B\u58F0\u660E
+ * \`clientExecution.launchAuthority="workflow-artifact"\`\uFF1Bbinding \u5FC5\u987B\u767B\u8BB0 Immutable
+ * canonical \`releaseDigest\`\u3001scope containment contract v1\uFF0C\u4EE5\u53CA project launch\u3001client task\u3001terminal
+ * authority version/digest\u3002launch authority \u4ECE Host \u5F53\u524D scope \u663E\u5F0F\u6536\u7A84\uFF1Bterminal authority
+ * \u540C\u65F6\u590D\u9A8C Host \u91CD\u6388\u6743\u5E76\u6253\u5F00\u7684 canonical input artifacts\u3002project preset \u4F7F\u7528
+ * runtime.agentWorkflowProjects\uFF1B\u666E\u901A routes \u6C38\u8FDC\u4E0D\u80FD\u53D1\u5E03/\u542F\u52A8\u53D7\u4FDD\u62A4 Workflow\u3002
+ * \u53D1\u5E03 Release \u6216 authority contract \u540E\u5FC5\u987B\u91CD\u65B0\u5BA1\u6838\u5E76\u663E\u5F0F\u66F4\u65B0\u3002
+ */
+export const projectClientAgentWorkflowArtifactBindings: readonly ModuleClientAgentWorkflowArtifactProjectBinding[] =
+  [];
+`;
+var immutableReleaseCompositionHash = "98c23266799311cf26c160374aad738456888f3c04f40f3667122e28b3e8e188";
+var hostAuthImport = 'import { projectClientAgentHostAuthAdapter } from "./client-agent-host-auth-binding.js";';
+var workflowArtifactImport = 'import { projectClientAgentWorkflowArtifactBindings } from "./client-agent-workflow-artifact-binding.js";';
+var oldOmit = '    "clientAgentHostAuth" | "screenshotPageRegistry"';
+var newOmit = `    | "clientAgentHostAuth"
+    | "clientAgentWorkflowArtifactBindings"
+    | "screenshotPageRegistry"`;
+var hostAuthProperty = "    clientAgentHostAuth: projectClientAgentHostAuthAdapter,";
+var workflowArtifactProperty = `    clientAgentWorkflowArtifactBindings:
+      projectClientAgentWorkflowArtifactBindings,`;
+function planClientWorkflowProjectOwned(input) {
+  return input.path === clientWorkflowBindingPath ? planBinding(input) : planComposition(input);
+}
+function planBinding(input) {
+  if (!input.target)
+    return conflict2(input, "\u76EE\u6807\u7248\u672C\u7F3A\u5C11 Workflow binding seam");
+  const target = decode(input.target);
+  if (target !== immutableReleaseDefaultBinding) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C Workflow binding seam \u5951\u7EA6\u65E0\u6548");
+  }
+  if (!input.ours) {
+    return ready2(input, "create", "\u65B0\u589E\u9ED8\u8BA4\u5173\u95ED\u7684 Workflow binding seam", input.target);
+  }
+  const source = decode(input.ours);
+  if (source === target) {
+    return ready2(input, "preserve", "\u5DF2\u5305\u542B immutable release binding seam");
+  }
+  if (source !== legacyDefaultBinding) {
+    return conflict2(input, "Workflow binding seam \u4E0D\u662F 0.6.14 \u9ED8\u8BA4\u7A7A\u7248\u672C");
+  }
+  return ready2(input, "update", "\u5347\u7EA7\u9ED8\u8BA4\u7A7A Workflow binding seam", input.target);
+}
+function planComposition(input) {
+  if (!input.target) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C\u7F3A\u5C11 Agent Runtime Composition");
+  }
+  const target = decode(input.target);
+  if (hashContent(target) !== immutableReleaseCompositionHash) {
+    return conflict2(input, "\u76EE\u6807\u7248\u672C Agent Runtime Composition \u5951\u7EA6\u65E0\u6548");
+  }
+  if (!input.ours) {
+    return ready2(input, "create", "\u65B0\u589E Agent Runtime Composition", input.target);
+  }
+  const source = decode(input.ours);
+  if (source === target) {
+    return ready2(input, "preserve", "\u5DF2\u88C5\u914D Workflow Artifact binding");
+  }
+  if ([workflowArtifactImport, newOmit, workflowArtifactProperty].some((value) => source.includes(value))) {
+    return conflict2(input, "Agent Runtime Composition \u53EA\u5305\u542B\u90E8\u5206\u76EE\u6807\u88C5\u914D");
+  }
+  const runtimeConflict = validateLegacyRuntimeObject(source);
+  if (runtimeConflict)
+    return conflict2(input, runtimeConflict);
+  const replacements2 = [
+    {
+      anchor: hostAuthImport,
+      value: `${hostAuthImport}
+${workflowArtifactImport}`
+    },
+    {
+      anchor: oldOmit,
+      value: newOmit
+    },
+    {
+      anchor: hostAuthProperty,
+      value: `${hostAuthProperty}
+${workflowArtifactProperty}`
+    }
+  ];
+  let content = source;
+  for (const replacement of replacements2) {
+    if (occurrences(content, replacement.anchor) !== 1) {
+      return conflict2(input, `Agent Runtime Composition \u951A\u70B9\u4E0D\u552F\u4E00\uFF1A${replacement.anchor}`);
+    }
+    content = content.replace(replacement.anchor, replacement.value);
+  }
+  return ready2(input, "update", "\u88C5\u914D Workflow Artifact project binding", new TextEncoder().encode(content));
+}
+function ready2(input, action, reason, content) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action,
+    reason,
+    expectedProjectContent: input.expected,
+    content
+  };
+}
+function conflict2(input, message) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent: input.expected,
+    conflict: message
+  };
+}
+function decode(content) {
+  return new TextDecoder().decode(content);
+}
+function occurrences(source, value) {
+  return source.split(value).length - 1;
+}
+function validateLegacyRuntimeObject(source) {
+  const startAnchor = `  const runtime = registerAgentPlatformRuntime({
+    ...input,`;
+  const endAnchor = `
+  });`;
+  if (occurrences(source, startAnchor) !== 1 || occurrences(source, endAnchor) !== 1) {
+    return "Agent Runtime register object \u951A\u70B9\u4E0D\u552F\u4E00";
+  }
+  const start = source.indexOf(startAnchor);
+  const end = source.indexOf(endAnchor, start + startAnchor.length);
+  if (end < 0)
+    return "Agent Runtime register object \u7ED3\u675F\u951A\u70B9\u7F3A\u5931";
+  const object = source.slice(start, end);
+  const host = object.indexOf(hostAuthProperty);
+  if (host < 0)
+    return "Agent Runtime Host Auth property \u951A\u70B9\u7F3A\u5931";
+  const tail = object.slice(host + hostAuthProperty.length);
+  if (/^\s*\.\.\./m.test(tail)) {
+    return "Workflow binding \u63D2\u5165\u70B9\u540E\u5B58\u5728\u53EF\u8986\u76D6\u5B83\u7684 spread";
+  }
+  if (/["']clientAgentWorkflowArtifactBindings["']\s*:/.test(object) || /\[\s*["']clientAgentWorkflowArtifactBindings["']\s*\]/.test(object)) {
+    return "Agent Runtime \u5DF2\u5B58\u5728\u52A8\u6001 Workflow binding property";
+  }
+  return;
+}
+
 // src/update/recipe-project-owned-trajectory-test.ts
 var legacyAnchor = /^(\s*)traceId: "trace_1",\n\1attemptItems: \[$/gm;
 var migratedAnchor = /^(\s*)traceId: "trace_1",\n\1trajectory: \{\n\1 {2}available: true,\n\1 {2}events: \[\],\n\1\},\n\1attemptItems: \[$/gm;
@@ -9854,20 +10031,33 @@ var managedPathsByRecipe = {
     "apps/web/src/router/index.ts",
     "apps/web/src/router/platform-admin-route-bindings.ts",
     "apps/web/src/services/ai-runtime-api.ts"
+  ],
+  "starter-0.6.14-to-0.6.15": [
+    clientWorkflowCompositionPath,
+    clientWorkflowBindingPath
   ]
 };
 function recipeManagedProjectOwnedPaths(recipes2) {
   return new Set(recipes2.flatMap((recipe) => managedPathsByRecipe[recipe] ?? []));
 }
+function recipeCanManageMissingProjectOwnedPath(path2) {
+  return path2 === clientWorkflowCompositionPath || path2 === clientWorkflowBindingPath;
+}
 async function planRecipeProjectOwned(input) {
+  if (input.path === clientWorkflowCompositionPath || input.path === clientWorkflowBindingPath) {
+    if (!input.target) {
+      return conflict3(input, "\u7248\u672C recipe \u6240\u9700\u7684\u76EE\u6807\u6587\u4EF6\u7F3A\u5931");
+    }
+    return planClientWorkflowProjectOwned({ ...input, target: input.target });
+  }
   if (!input.ours) {
-    return conflict2(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
+    return conflict3(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
   }
   const source = new TextDecoder().decode(input.ours);
   const target = input.target ? new TextDecoder().decode(input.target) : undefined;
   const transformed = transformProjectOwnedAnchor(input.path, source, target);
   if ("error" in transformed)
-    return conflict2(input, transformed.error);
+    return conflict3(input, transformed.error);
   if (transformed.content === source) {
     return preserve(input, "\u5DF2\u5305\u542B\u7248\u672C recipe \u76EE\u6807\u5185\u5BB9");
   }
@@ -10053,7 +10243,7 @@ function update(input, content) {
     content
   };
 }
-function conflict2(input, message) {
+function conflict3(input, message) {
   return {
     path: input.path,
     ownership: "project-owned",
@@ -10073,7 +10263,8 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   const ownership = source?.ownership ?? target?.ownership ?? classifyOwnership(path2);
   const expected = expectationForSnapshot(ours);
   if (ownership === "project-owned") {
-    if (manageRecipeProjectOwned && source) {
+    const hasExistingRecipeSource = source !== undefined && source.state !== "missing" && ours !== undefined;
+    if (manageRecipeProjectOwned && target && (hasExistingRecipeSource || recipeCanManageMissingProjectOwnedPath(path2))) {
       return planRecipeProjectOwned({ path: path2, ours, target: theirs, expected });
     }
     if (manageGeneratedProjectOwned) {
@@ -10083,29 +10274,29 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
     if (source && !target) {
-      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+      return conflict4(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
     }
     if (source && target && source.hash !== target.hash) {
-      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
+      return conflict4(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
     }
   }
   if (!source && target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
     }
-    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict3(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
+    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict4(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
   }
   if (source && !target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
     }
-    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict3(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
+    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict4(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
   }
   if (source && target && !ours) {
     return readyPlannedFile(path2, "project-owned", "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
   }
   if (!source || !target || !ours || !theirs) {
-    return conflict3(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
+    return conflict4(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
   }
   const oursChanged = hashContent(ours) !== source.hash;
   const sourceArtifactHash = artifactHashOf(source);
@@ -10119,7 +10310,7 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   });
   if (forceTargetBaseline && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (forceTargetBaseline) {
     return readyPlannedFile(path2, ownership, "update", "\u5F3A\u5236\u91C7\u7528\u76EE\u6807\u5E73\u53F0\u57FA\u7EBF", expected, theirs);
@@ -10129,11 +10320,11 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (targetChanged && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (!oursChanged && targetChanged && adoptedProjectDelta && base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict4(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
   if (!oursChanged) {
     return readyPlannedFile(path2, ownership, "update", "\u4EC5 Windy \u4FEE\u6539", expected, theirs);
@@ -10146,9 +10337,9 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict4(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
-  return conflict3(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
+  return conflict4(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
 }
 function shouldForcePlatformBaseline(input) {
   return input.forcePlatformBaseline && !input.oursChanged && input.base !== undefined && hashContent(input.base) !== input.sourceArtifactHash;
@@ -10169,7 +10360,7 @@ function readyPlannedFile(path2, ownership, action, reason, expectedProjectConte
 function expectationForSnapshot(content) {
   return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
 }
-function conflict3(path2, ownership, reason, expectedProjectContent) {
+function conflict4(path2, ownership, reason, expectedProjectContent) {
   return {
     path: path2,
     ownership,
@@ -11000,9 +11191,9 @@ function assertEnabledConflicts(target, catalog) {
   for (const [name, enabled] of target) {
     if (!enabled)
       continue;
-    const conflict4 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
-    if (conflict4)
-      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict4}`);
+    const conflict5 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
+    if (conflict5)
+      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict5}`);
   }
 }
 function assertCompatible(version, range, name) {
@@ -11017,7 +11208,7 @@ function reconcileProjectModuleRegistryPlan(plan, current, lifecycle) {
   if (!registryFile) {
     throw new Error("\u6A21\u5757\u751F\u547D\u5468\u671F\u8BA1\u5212\u7F3A\u5C11 project-owned \u88C5\u914D\u9009\u62E9");
   }
-  plan.conflicts = plan.conflicts.filter((conflict4) => !conflict4.startsWith(`${projectModuleRegistryPath}\uFF1A`));
+  plan.conflicts = plan.conflicts.filter((conflict5) => !conflict5.startsWith(`${projectModuleRegistryPath}\uFF1A`));
   delete registryFile.conflict;
   if (lifecycle.action === "update") {
     registryFile.action = "preserve";
@@ -11447,8 +11638,8 @@ function printModulePlan(plan, log) {
   for (const file of changed) {
     log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
   }
-  for (const conflict4 of plan.conflicts)
-    log(`  conflict ${conflict4}`);
+  for (const conflict5 of plan.conflicts)
+    log(`  conflict ${conflict5}`);
 }
 function hasChanges(lifecycle) {
   return lifecycle.addedModules.length > 0 || lifecycle.updatedModules.length > 0 || lifecycle.removedModules.length > 0;
@@ -11620,8 +11811,8 @@ function printPlan(plan) {
   console.log(`\u8BA1\u5212\u6539\u52A8\uFF1A${changed.length} \u4E2A\u6587\u4EF6\uFF1B\u51B2\u7A81\uFF1A${plan.conflicts.length}`);
   for (const file of changed)
     console.log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
-  for (const conflict4 of plan.conflicts)
-    console.log(`  conflict ${conflict4}`);
+  for (const conflict5 of plan.conflicts)
+    console.log(`  conflict ${conflict5}`);
   for (const finding of plan.manualCleanup ?? []) {
     console.log(`  manual ${finding.message}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.6.14",
+  "version": "0.6.15",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.agents/skills/windy-business-module/SKILL.md

@@ -44,8 +44,8 @@ description: "在 Windy 或 create-windy 生成项目中新增或修改业务 Mo
    - 流式写入和大报告分别使用可选 Storage Writer / Report Staging Port、显式 policy
      与 `require*()` helper；Tool 不继承 Writer，缺少 `system.storage` 时直接说明物理
      裁剪边界。
-   **完成标准：业务代码未注入 UploadRepository、BlobStore、Secret locator 或平台
-   manage Repository，缺失 Port 会稳定 fail closed。**
+     **完成标准：业务代码未注入 UploadRepository、BlobStore、Secret locator 或平台
+     manage Repository，缺失 Port 会稳定 fail closed。**
 7. 业务资源含敏感字段时，在 Manifest 声明 Data Policy、standard read、
    sensitive-disclosure reveal、governed-export Permission 和对应 API，再用
    `registerGovernedResources()` 注册对象授权、脱敏投影、受控字段读取与分页 Source。
@@ -67,17 +67,66 @@ description: "在 Windy 或 create-windy 生成项目中新增或修改业务 Mo
     和可选 readiness pin。`system.agent` 的面向用户回答使用平台 Supervisor typed
     final-answer 契约；Durable Handler 只通过 Actor-aware 后台 AI Port 恢复同一幂等
     Run。浏览器或桌面宿主本地编排模型循环时使用 governed Client Agent Session，不向
-    客户端下发 Provider Secret 或 execution grant。**完成标准：Operation 的声明、
-    Handler、发布坐标、输出投影和运行边界一致。**
+    客户端下发 Provider Secret 或 execution grant。Workflow 需要 PageAgent 产物时复用固定
+    `system.agent-workflow.client-agent-artifact` Job taskKey，并在 project-owned Composition
+    登记唯一 Workflow/Node/Operation/Artifact binding；业务 Handler 不直接取得 Client Agent
+    Session、Host Auth、BlobStore 或内部 Durable Context Port。Workflow 专用 Operation 声明
+    `launchAuthority="workflow-artifact"`；binding 登记 scope contract、project launch、
+    client task 与 terminal authority 的静态 version/digest。受保护 Workflow 只能走未暴露为
+    通用路由的 `agentWorkflowProjects` Seam；通用 release/run 即使 digest 相同也 fail closed。
+    claim 的 raw input Artifact 只在 Host 当前重授权后交给 client task authority，Web/Extension
+    只消费 ai-client 严格解析后的有界 canonical task，不自行拼 ArtifactRef、locator 或 prompt。
+    模块把 Storage/JSON 作为下游 Workflow input 时，Route 先经两阶段
+    `workflowInputMaterialization.begin/resolve` 等待真实 Job succeeded，Handler 再用
+    `workflowInputArtifacts` 正式发布，不得把 fileId 当 artifactId；固定 Manifest task 只注册
+    同 key/feature/permission/audit 的 Durable Handler，不额外注册 scheduled no-op。
+    **完成标准：Operation 的声明、
+    Handler、固定 taskKey、项目绑定、发布坐标、输出投影和运行边界一致。**
 11. 补齐 Manifest/Composition、Repository/Service、Guard 拒绝和 Handler 契约覆盖；按
     条件覆盖 Durable 重试/恢复、Tool 未授权发现/调用、资源文件、Secret、治理导出、
-    可选模块裁剪、Sandbox 隔离和 AI 恢复。**完成标准：每个新增能力至少有成功路径、
-    关键拒绝路径和声明/实现漂移检查。**
+    可选模块裁剪、Sandbox 隔离和 AI 恢复。Client Agent Workflow 还要覆盖 pending/fence
+    原子提交、短期 claim、稳定 receipt/Blob putOnce/Durable publishArtifactOnce、两阶段取消与
+    重启恢复。**完成标准：每个新增能力至少有成功路径、关键拒绝路径和声明/实现漂移检查。**
 12. 更新长期文档，并按当前仓库 `AGENTS.md` 与 `package.json` 分层验证。windy-platform
     普通小提交只运行允许的静态检查；合并候选统一运行 `test:merge`，冻结发版候选才运行
     一次 `release:verify`。仅当项目提供 `lint` 脚本时运行 lint；一个 cohesive slice 一个
     Conventional Commit。**完成标准：验证层级、未执行项和提交 SHA 均可审计。**
 
+## Client Agent Workflow 重复故障解法
+
+- 跨层 opaque ID 必须选一个 canonical prefix，并同步 Server 生成器、public SDK、客户端
+  validator、样例与文档；不要用“兼容多个前缀”隐藏漂移。
+- 新增 Drizzle Migration 必须同步 SQL、schema、journal 和 snapshot；snapshot `prevId` 精确指向
+  前一 snapshot `id`，并用仓库锁定版本独立再生成比对。
+- Workflow fence 必须约束每一次 Provider attempt：预留前、出网紧前和在途期间从 canonical
+  Run/Node/command/generation/fence 与当前授权复核；撤销或 checker 不确定时先 revoke Session。
+- Session finalize 到 Blob/bridge complete 是明确崩溃窗；恢复只读 completed Session 的 receipt、
+  final result 和 terminal digest，确定性 `putOnce`/complete，禁止等待浏览器或重放 Provider。
+- completed replay 必须持久化并比较 `receiptIds + result` 的 canonical terminal request digest；
+  完全一致才幂等，任何漂移 fail closed。
+- completed replay 使用 terminal-safe authorization：继续复核当前 Actor/RBAC/Scope、claim/Host/
+  Session 与原 Release/Definition/command 不可变坐标，但不能重新要求 command 为 dispatched 或
+  Run active；撤权隐藏、摘要漂移冲突。
+- Workflow PageAgent project binding 必须 pin 审核 Release 的 `releaseDigest`；loader 验证固定
+  taskKey Job 唯一，且只有无 branch/fallback/skip 的 `job -> artifact -> final` 直接链，Artifact
+  kind/policy 与绑定一致。新 Release 必须重新审核，不能静默继承旧权限。
+- 不要用当前 scope digest 等于冻结 Run digest 作为多案授权证明。Host 读取持久 Job scope，验证
+  当前 canonical Actor scope 包含冻结范围；只允许当前更宽或相等，不恢复冻结范围以外权限。
+- terminal authority 的 binding digest 只包含稳定 version/digest，不包含函数；拒绝发生在 Session
+  completed transition 前；它必须收到 terminal-time 重新授权并打开的 canonical JSON input artifacts，
+  不能只看 output schema。普通 Run/Session create 必须同时拒绝 workflow-only Operation。
+- project launch authority 必须接收 Host capture 的 `currentAuthorizationScope`，只返回它的收窄范围；
+  Host 再做 containment。业务代码不得硬编码或猜 tenant、roleIds、grants。
+- pre-start Workflow input 物化必须是两阶段：Request Context coordinator `begin` 提交固定模块
+  materializer 的真实 Durable Job，`resolve` 仅在 succeeded 且 publication/source metadata 完全匹配
+  时返回 refs；begin、Durable payload 与 worker publication 共用 strict parser，mode 字段互斥且拒绝
+  unknown/unsafe/超预算 JSON。ready 后业务 prepare 仍重读 sourceIds 并逐项匹配，Workflow start
+  再复验 Artifact。
+- Targeted patch 新增 project-owned seam 时，连续 recipe 必须覆盖 public source 缺失、精确旧默认空、
+  精确新默认空和客户修改四态。binding 用完整字节白名单；Composition 的 import/type/runtime property
+  作为原子唯一锚点组。任何部分装配、重复、换行/注释漂移或非空客户 binding 都在写入前 fail closed；
+  未选择所属可选模块时不得注入 seam。candidate regression 固定以上一公开版本为直接来源。
+
 ## 项目所有权与自动装配
 
 - `apps/web/src`、`apps/server/src/app`、业务模块源码和 `windy.modules.json` 都是
@@ -98,7 +147,8 @@ description: "在 Windy 或 create-windy 生成项目中新增或修改业务 Mo
   `packages/server-sdk/src/request-context.ts`、`packages/server-sdk/src/durable-handler.ts`
 - Tool 与 AI：`packages/server-sdk/src/tool-registration.ts`、
   `packages/server-sdk/src/sandbox-tool.ts`、
-  `packages/server-sdk/src/ai-operation-registration.ts`
+  `packages/server-sdk/src/ai-operation-registration.ts`、
+  `packages/server-sdk/src/client-agent-workflow-artifact.ts`
 - Secret、Storage 与治理：`packages/server-sdk/src/secret-port.ts`、
   `packages/server-sdk/src/secret-binding.ts`、`packages/server-sdk/src/storage-port.ts`、
   `packages/server-sdk/src/report-staging-port.ts`、
@@ -111,7 +161,7 @@ description: "在 Windy 或 create-windy 生成项目中新增或修改业务 Mo
 - 条件能力：`docs/architecture/module-secret-resolution.md`、
   `docs/architecture/report-staging.md`、`docs/platform/governed-export-renderers.md`、
   `docs/platform/agent-tool-approval.md`、`docs/platform/background-ai-operations.md`、
-  `docs/platform/client-agent-session.md`
+  `docs/platform/client-agent-session.md`、`docs/architecture/agent-workflow.md`
 
 某个事实源或 `system.agent` / `system.storage` 不存在时，先说明当前生成组合的物理边界，
 不在业务层补一套替代实现。

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "74fc88e548934dbda773291c4ad078d16a5396d1",
-  "generatorVersion": "0.6.14",
+  "templateCommit": "270df5f3da5ba6512a0f305109d874f2c8bf757e",
+  "generatorVersion": "0.6.15",
   "modules": [
     {
       "name": "system",