create-windy 0.6.17 → 0.6.19

package/template/apps/server/src/agent/remote-runtime-compatibility.test.ts

@@ -0,0 +1,147 @@
+import { afterEach, describe, expect, test } from "bun:test";
+import { createAgentRuntimeCompatibilityOfferV1 } from "@southwind-ai/server-sdk";
+import type { AgentRuntimeOperation } from "./run-contracts.js";
+import { RemoteAgentRuntime } from "./remote-runtime.js";
+
+const servers: Bun.Server<unknown>[] = [];
+
+afterEach(() => {
+  for (const server of servers.splice(0)) server.stop(true);
+});
+
+describe("RemoteAgentRuntime compatibility", () => {
+  test("V1 协商成功后固定协议版本与 Offer 摘要", async () => {
+    let startHeaders: Headers | undefined;
+    const offer = createAgentRuntimeCompatibilityOfferV1(
+      "windy.direct.openai-compatible.v1",
+    );
+    const server = Bun.serve({
+      port: 0,
+      fetch(request) {
+        if (isCompatibilityRequest(request)) return Response.json(offer);
+        startHeaders = request.headers;
+        return accepted("run_pinned");
+      },
+    });
+    servers.push(server);
+    const runtime = remote(server, "require-v1");
+
+    await runtime.start(agentOperation(), "pinned-1");
+
+    expect(startHeaders?.get("x-windy-agent-runtime-protocol")).toBe("1");
+    expect(startHeaders?.get("x-windy-agent-runtime-offer-digest")).toBe(
+      offer.offerDigest,
+    );
+    expect(startHeaders?.get("authorization")).toBe("Bearer test-token");
+  });
+
+  test("prefer-v1 只对旧 Runtime 的 404 回退为 legacy", async () => {
+    let starts = 0;
+    const server = Bun.serve({
+      port: 0,
+      fetch(request) {
+        if (isCompatibilityRequest(request)) {
+          return new Response(null, { status: 404 });
+        }
+        starts += 1;
+        return accepted("run_legacy");
+      },
+    });
+    servers.push(server);
+
+    await expect(
+      remote(server, "prefer-v1").start(agentOperation(), "legacy-1"),
+    ).resolves.toEqual({
+      runId: "run_legacy",
+      status: "accepted",
+      eventsUrl: "/api/agent/runs/run_legacy/events",
+    });
+    expect(starts).toBe(1);
+  });
+
+  test("require-v1 拒绝旧 Runtime，畸形 Offer 也不会降级", async () => {
+    for (const response of [
+      new Response(null, { status: 404 }),
+      Response.json({ schemaVersion: 1 }),
+    ]) {
+      let starts = 0;
+      const server = Bun.serve({
+        port: 0,
+        fetch(request) {
+          if (isCompatibilityRequest(request)) return response.clone();
+          starts += 1;
+          return Response.json({});
+        },
+      });
+      servers.push(server);
+
+      await expect(
+        remote(server, "require-v1").start(agentOperation(), "required-1"),
+      ).rejects.toMatchObject({
+        code: "RUNTIME_UNAVAILABLE",
+        retryable: false,
+      });
+      expect(starts).toBe(0);
+    }
+  });
+});
+
+function remote(server: Bun.Server<unknown>, mode: "prefer-v1" | "require-v1") {
+  return new RemoteAgentRuntime({
+    baseUrl: server.url.toString(),
+    internalToken: "test-token",
+    toolHostUrl: "http://server.internal",
+    compatibilityMode: mode,
+  });
+}
+
+function isCompatibilityRequest(request: Request): boolean {
+  return new URL(request.url).pathname === "/api/agent/runtime/compatibility";
+}
+
+function accepted(runId: string): Response {
+  return Response.json({
+    runId,
+    status: "accepted",
+    eventsUrl: `/api/agent/runs/${runId}/events`,
+  });
+}
+
+function agentOperation(): AgentRuntimeOperation {
+  return {
+    kind: "agent",
+    operationKey: "business.answer",
+    input: { question: "你好" },
+    inputModalities: ["text"],
+    requiredCapabilities: ["text-generation"],
+    artifacts: [],
+    instructions: "回答业务问题",
+    userPrompt: "你好",
+    outputSchemaKey: "business.output.v1",
+    allowedTools: [],
+    limits: {
+      maxDurationSeconds: 60,
+      maxInputBytes: 4_096,
+      maxOutputBytes: 4_096,
+    },
+    providerEgress: {
+      mode: "configured-endpoint",
+      deploymentKey: "ai.openai-compatible",
+    },
+    providerDataPolicy: { inputFields: [], envelopeFields: [] },
+    toolNetworkPolicy: { mode: "forbidden" },
+    executionGrant: "grant_1",
+    release: {
+      releaseId: "release_test",
+      operationVersion: "1.0.0",
+      workflowVersion: "workflow-1",
+      promptVersion: "prompt-1",
+      routeVersion: "route-1",
+      outputSchemaVersion: "output-schema-1",
+      toolSchemaVersion: "schema-1",
+      manifestDigest: "0".repeat(64),
+    },
+    traceId: "trace_1",
+    reporting: { actorId: "user_1", actorType: "user" },
+  };
+}

package/template/apps/server/src/agent/remote-runtime.ts

@@ -1,8 +1,16 @@
-import type {
-  AgentRuntimeOperation,
-  AgentRuntimePort,
-  AgentRuntimeStartResponse,
+import {
+  AgentRuntimeError,
+  type AgentRuntimeOperation,
+  type AgentRuntimePort,
+  type AgentRuntimeStartResponse,
 } from "./run-contracts.js";
+import {
+  AGENT_RUNTIME_COMPATIBILITY_PATH_V1,
+  AGENT_RUNTIME_OFFER_DIGEST_HEADER_V1,
+  AGENT_RUNTIME_PROTOCOL_HEADER_V1,
+  localAgentRuntimeCompatibilityRequirementsV1,
+  negotiateAgentRuntimeCompatibilityV1,
+} from "@southwind-ai/server-sdk";
 import { assertVisionReadinessPin } from "./vision-readiness-pin.js";
 import {
   parseRemoteStart,
@@ -15,6 +23,8 @@ export interface RemoteAgentRuntimeOptions {
   internalToken: string;
   toolHostUrl: string;
   timeoutMs?: number;
+  /** Legacy is the default for direct callers; platform composition opts into rolling V1. */
+  compatibilityMode?: "prefer-v1" | "require-v1";
 }
 
 export class RemoteAgentRuntime implements AgentRuntimePort {
@@ -33,6 +43,7 @@ export class RemoteAgentRuntime implements AgentRuntimePort {
     request: AgentRuntimeOperation,
     idempotencyKey: string,
   ): Promise<AgentRuntimeStartResponse> {
+    const compatibilityHeaders = await this.compatibilityHeaders();
     if (request.readinessPin) {
       await assertVisionReadinessPin(request.readinessPin, () => this.health());
     }
@@ -103,6 +114,7 @@ export class RemoteAgentRuntime implements AgentRuntimePort {
       headers: {
         "content-type": "application/json",
         "idempotency-key": idempotencyKey,
+        ...compatibilityHeaders,
       },
       body: JSON.stringify(remoteRequest),
     });
@@ -160,6 +172,38 @@ export class RemoteAgentRuntime implements AgentRuntimePort {
     return { deploymentKey, model };
   }
 
+  private async compatibilityHeaders(): Promise<Record<string, string>> {
+    const mode = this.options.compatibilityMode;
+    if (!mode) return {};
+    let response: Response;
+    try {
+      response = await this.request(AGENT_RUNTIME_COMPATIBILITY_PATH_V1);
+    } catch {
+      throw new AgentRuntimeError(
+        "RUNTIME_UNAVAILABLE",
+        "Agent Runtime compatibility 探测失败",
+        true,
+      );
+    }
+    if (response.status === 404 && mode === "prefer-v1") return {};
+    if (!response.ok) throw await remoteRuntimeError(response);
+    let value: unknown;
+    try {
+      value = await readBoundedCompatibilityOffer(response);
+    } catch {
+      throw incompatibleRuntime("CONTRACT_INVALID");
+    }
+    const negotiation = negotiateAgentRuntimeCompatibilityV1(
+      value,
+      localAgentRuntimeCompatibilityRequirementsV1(),
+    );
+    if (!negotiation.ok) throw incompatibleRuntime(negotiation.code);
+    return {
+      [AGENT_RUNTIME_PROTOCOL_HEADER_V1]: String(negotiation.protocolVersion),
+      [AGENT_RUNTIME_OFFER_DIGEST_HEADER_V1]: negotiation.offer.offerDigest,
+    };
+  }
+
   private async request(
     path: string,
     init: RequestInit = {},
@@ -187,6 +231,24 @@ export class RemoteAgentRuntime implements AgentRuntimePort {
   }
 }
 
+function incompatibleRuntime(code: string): AgentRuntimeError {
+  return new AgentRuntimeError(
+    "RUNTIME_UNAVAILABLE",
+    `Agent Runtime compatibility 不匹配（${code}）`,
+    false,
+  );
+}
+
+async function readBoundedCompatibilityOffer(
+  response: Response,
+): Promise<unknown> {
+  const bytes = new Uint8Array(await response.arrayBuffer());
+  if (bytes.byteLength > 64 * 1_024) {
+    throw new Error("Agent Runtime compatibility Offer 超过上限");
+  }
+  return JSON.parse(new TextDecoder().decode(bytes)) as unknown;
+}
+
 function isRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }

package/template/apps/server/src/agent/runtime-bootstrap.ts

@@ -104,6 +104,7 @@ export function registerAgentPlatformRuntime(input: AgentPlatformRuntimeInput) {
     baseUrl: agentServerUrl,
     internalToken,
     toolHostUrl: process.env.AGENT_TOOL_HOST_URL || "http://server:9747",
+    compatibilityMode: "prefer-v1",
   });
   const clientAgentSessionRuntime = createClientAgentSessionRuntime({
     app: input.app,

package/template/apps/web/src/components/common/FormDialog.vue

@@ -34,6 +34,7 @@ const props = withDefaults(
     loading: false,
     submitDisabled: false,
     preventOutsideClose: false,
+    contentClass: "sm:max-w-2xl",
   },
 );
 

package/template/apps/web/src/components/common/ModalLayout.webtest.ts

@@ -33,6 +33,7 @@ describe("Modal 布局", () => {
       "min-h-[min(12rem,calc(100dvh-2rem))]",
     );
     expect(content?.className).toContain("overflow-hidden");
+    expect(content?.className).toContain("sm:max-w-2xl");
     expect(body?.className).toContain("overflow-y-auto");
     expect(footer?.className).toContain("shrink-0");
 

package/template/apps/web/src/components/ui/dialog/DialogContent.vue

@@ -44,7 +44,7 @@ const forwarded = useForwardPropsEmits(delegatedProps, emits);
       v-bind="{ ...$attrs, ...forwarded }"
       :class="
         cn(
-          'bg-popover text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 ring-foreground/10 fixed top-1/2 left-1/2 z-50 flex min-h-[min(12rem,calc(100dvh-2rem))] max-h-[calc(100dvh-2rem)] w-full max-w-[calc(100%-2rem)] -translate-x-1/2 -translate-y-1/2 flex-col gap-4 overflow-hidden rounded-xl p-4 text-sm ring-1 duration-100 outline-none sm:max-w-sm',
+          'bg-popover text-popover-foreground data-open:animate-in data-closed:animate-out data-closed:fade-out-0 data-open:fade-in-0 data-closed:zoom-out-95 data-open:zoom-in-95 ring-foreground/10 fixed top-1/2 left-1/2 z-50 flex min-h-[min(12rem,calc(100dvh-2rem))] max-h-[calc(100dvh-2rem)] w-full max-w-[calc(100%-2rem)] -translate-x-1/2 -translate-y-1/2 flex-col gap-4 overflow-hidden rounded-xl p-4 text-sm ring-1 duration-100 outline-none sm:max-w-xl',
           props.class,
         )
       "

package/template/apps/web/src/components/ui/dialog/DialogScrollContent.vue

@@ -35,7 +35,7 @@ const forwarded = useForwardPropsEmits(delegatedProps, emits);
       <DialogContent
         :class="
           cn(
-            'relative z-50 grid w-full max-w-lg my-8 gap-4 border border-border bg-background p-6 shadow-lg duration-200 sm:rounded-lg md:w-full',
+            'relative z-50 my-8 grid w-full max-w-2xl gap-4 border border-border bg-background p-6 shadow-lg duration-200 sm:rounded-lg md:w-full',
             props.class,
           )
         "

package/template/apps/web/src/pages/system/components/SystemResourceEditor.vue

@@ -52,6 +52,7 @@ const title = computed(() => (props.item ? "编辑记录" : "新增记录"));
       ref="resourceForm"
       :item="item"
       :defaults="defaults"
+      :permissions="permissions || []"
       :department-create-mode="departmentCreateMode"
       @submit="emit('submit', $event)"
     />

package/template/apps/web/src/pages/system/components/user-account/CreateDepartmentDialog.vue

@@ -0,0 +1,182 @@
+<script setup lang="ts">
+import {
+  computed,
+  inject,
+  onBeforeUnmount,
+  onMounted,
+  shallowRef,
+  watch,
+} from "vue";
+import { routerKey } from "vue-router";
+import FormDialog from "@/components/common/FormDialog.vue";
+import UnsavedChangesDialog from "@/components/common/UnsavedChangesDialog.vue";
+import { Input } from "@/components/ui/input";
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import { useUnsavedChangesConfirmation } from "@/composables/useUnsavedChangesConfirmation";
+import {
+  createSystemResource,
+  quickCreateDepartment,
+  type SystemRecord,
+} from "@/services/system-api";
+
+interface DepartmentOption {
+  id: string;
+  code: string;
+  name: string;
+  parentId?: string;
+}
+
+const open = defineModel<boolean>("open", { default: false });
+const props = defineProps<{
+  mode: "create" | "manage";
+  departments: DepartmentOption[];
+}>();
+const emit = defineEmits<{
+  created: [department: DepartmentOption];
+}>();
+
+const name = shallowRef("");
+const code = shallowRef("");
+const parentId = shallowRef<string>();
+const saving = shallowRef(false);
+const error = shallowRef("");
+const confirmation = useUnsavedChangesConfirmation();
+const router = inject(routerKey, null);
+let removeRouteGuard: (() => void) | undefined;
+
+const dirty = computed(
+  () => open.value && Boolean(name.value || code.value || parentId.value),
+);
+const valid = computed(() =>
+  Boolean(name.value.trim() && code.value.trim() && parentId.value),
+);
+
+watch(open, (value) => {
+  if (!value) reset();
+});
+
+onMounted(() => {
+  window.addEventListener("beforeunload", preventDirtyUnload);
+  removeRouteGuard = router?.beforeEach(() =>
+    dirty.value ? confirmation.request(create) : true,
+  );
+});
+
+onBeforeUnmount(() => {
+  window.removeEventListener("beforeunload", preventDirtyUnload);
+  removeRouteGuard?.();
+});
+
+async function create(): Promise<boolean> {
+  if (saving.value || !valid.value) return false;
+  saving.value = true;
+  error.value = "";
+  try {
+    const payload = {
+      code: code.value.trim(),
+      name: name.value.trim(),
+      parentId: parentId.value,
+      order: 100,
+    };
+    const created =
+      props.mode === "create"
+        ? await quickCreateDepartment(payload)
+        : await createSystemResource("departments", payload);
+    emit("created", readDepartment(created));
+    open.value = false;
+    return true;
+  } catch (currentError) {
+    error.value =
+      currentError instanceof Error
+        ? currentError.message
+        : String(currentError);
+    return false;
+  } finally {
+    saving.value = false;
+  }
+}
+
+function beforeClose() {
+  return dirty.value ? confirmation.request(create) : true;
+}
+
+function preventDirtyUnload(event: BeforeUnloadEvent) {
+  if (!dirty.value) return;
+  event.preventDefault();
+  event.returnValue = "";
+}
+
+function reset() {
+  name.value = "";
+  code.value = "";
+  parentId.value = undefined;
+  error.value = "";
+}
+
+function readDepartment(record: SystemRecord): DepartmentOption {
+  return {
+    id: record.id,
+    code: typeof record.code === "string" ? record.code : code.value.trim(),
+    name: typeof record.name === "string" ? record.name : name.value.trim(),
+    parentId:
+      typeof record.parentId === "string" ? record.parentId : parentId.value,
+  };
+}
+</script>
+
+<template>
+  <FormDialog
+    v-model:open="open"
+    title="新建部门"
+    description="创建成功后会自动选为该用户的所属部门。"
+    submit-text="创建并选中"
+    :loading="saving"
+    :submit-disabled="!valid"
+    :before-close="beforeClose"
+    content-class="sm:max-w-xl"
+    @submit="create"
+  >
+    <p v-if="error" class="text-sm text-destructive">{{ error }}</p>
+    <div class="grid gap-4 sm:grid-cols-2">
+      <label class="grid gap-2 text-sm font-medium">
+        <span>部门名称</span>
+        <Input v-model="name" placeholder="例如 销售部" />
+      </label>
+      <label class="grid gap-2 text-sm font-medium">
+        <span>部门编码</span>
+        <Input v-model="code" placeholder="例如 sales" />
+      </label>
+    </div>
+    <label class="grid gap-2 text-sm font-medium">
+      <span>上级部门</span>
+      <Select v-model="parentId">
+        <SelectTrigger class="w-full" aria-label="上级部门">
+          <SelectValue placeholder="请选择上级部门" />
+        </SelectTrigger>
+        <SelectContent>
+          <SelectItem
+            v-for="department in departments"
+            :key="department.id"
+            :value="department.id"
+          >
+            {{ department.name }}（{{ department.code }}）
+          </SelectItem>
+        </SelectContent>
+      </Select>
+    </label>
+  </FormDialog>
+
+  <UnsavedChangesDialog
+    :open="confirmation.open.value"
+    :saving="confirmation.saving.value"
+    description="部门信息尚未保存。取消会留在当前表单；保存成功后才会继续关闭或离开。"
+    @cancel="confirmation.cancel"
+    @save="confirmation.save"
+  />
+</template>

package/template/apps/web/src/pages/system/components/user-account/CreateDepartmentDialog.webtest.ts

@@ -0,0 +1,93 @@
+import { defineComponent } from "vue";
+import { afterEach, describe, expect, test, vi } from "vitest";
+import { flushPromises, mount } from "@vue/test-utils";
+import CreateDepartmentDialog from "./CreateDepartmentDialog.vue";
+
+const api = vi.hoisted(() => ({
+  quickCreateDepartment: vi.fn(),
+  createSystemResource: vi.fn(),
+}));
+
+vi.mock("@/services/system-api", async () => {
+  const actual = await vi.importActual<typeof import("@/services/system-api")>(
+    "@/services/system-api",
+  );
+  return { ...actual, ...api };
+});
+
+afterEach(() => {
+  vi.clearAllMocks();
+  document.body.innerHTML = "";
+});
+
+describe("CreateDepartmentDialog", () => {
+  test("在独立 Modal 中创建部门并回传新部门", async () => {
+    api.quickCreateDepartment.mockResolvedValue({
+      id: "dept_sales",
+      code: "sales",
+      name: "销售部",
+      parentId: "dept_root",
+    });
+    const wrapper = mount(CreateDepartmentDialog, {
+      attachTo: document.body,
+      props: {
+        open: true,
+        mode: "create",
+        departments: [{ id: "dept_root", code: "root", name: "总部" }],
+      },
+      global: {
+        stubs: {
+          FormDialog: defineComponent({
+            props: {
+              open: Boolean,
+              submitDisabled: Boolean,
+            },
+            emits: ["submit", "update:open"],
+            template:
+              '<div role="dialog"><slot /><button data-testid="submit" :disabled="submitDisabled" @click="$emit(\'submit\')">提交</button></div>',
+          }),
+          Input: defineComponent({
+            props: { modelValue: String },
+            emits: ["update:modelValue"],
+            template:
+              '<input :value="modelValue" @input="$emit(\'update:modelValue\', $event.target.value)" />',
+          }),
+          Select: defineComponent({
+            emits: ["update:modelValue"],
+            template:
+              "<button data-testid=\"choose-parent\" @click=\"$emit('update:modelValue', 'dept_root')\"><slot /></button>",
+          }),
+          SelectTrigger: { template: "<span><slot /></span>" },
+          SelectValue: { template: "<span />" },
+          SelectContent: { template: "<span><slot /></span>" },
+          SelectItem: { template: "<span><slot /></span>" },
+          UnsavedChangesDialog: { template: "<div />" },
+        },
+      },
+    });
+    await flushPromises();
+
+    const inputs = wrapper.findAll("input");
+    await inputs[0]!.setValue("销售部");
+    await inputs[1]!.setValue("sales");
+    await wrapper.get('[data-testid="choose-parent"]').trigger("click");
+    await wrapper.get('[data-testid="submit"]').trigger("click");
+    await flushPromises();
+
+    expect(api.quickCreateDepartment).toHaveBeenCalledWith({
+      code: "sales",
+      name: "销售部",
+      parentId: "dept_root",
+      order: 100,
+    });
+    expect(wrapper.emitted("created")?.at(-1)).toEqual([
+      {
+        id: "dept_sales",
+        code: "sales",
+        name: "销售部",
+        parentId: "dept_root",
+      },
+    ]);
+    wrapper.unmount();
+  });
+});

package/template/apps/web/src/pages/system/components/user-account/RolePermissionSummary.vue

@@ -0,0 +1,59 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import type { PermissionDefinition } from "@southwind-ai/shared";
+import {
+  groupPermissions,
+  unknownPermissionKeys,
+} from "../role-policy/permission-tree";
+
+const props = defineProps<{
+  permissionKeys: string[];
+  permissions: PermissionDefinition[];
+}>();
+
+const knownPermissions = computed(() => {
+  const selected = new Set(props.permissionKeys);
+  return props.permissions.filter(({ key }) => selected.has(key));
+});
+const groups = computed(() => groupPermissions(knownPermissions.value));
+const unknownKeys = computed(() =>
+  unknownPermissionKeys(props.permissionKeys, props.permissions),
+);
+</script>
+
+<template>
+  <p
+    v-if="!permissionKeys.length"
+    class="mt-3 border-t pt-3 text-xs text-muted-foreground"
+  >
+    未分配功能权限
+  </p>
+  <details v-else class="mt-3 border-t pt-3 text-xs">
+    <summary
+      class="cursor-pointer select-none font-medium text-muted-foreground hover:text-foreground"
+    >
+      查看 {{ permissionKeys.length }} 项功能权限
+    </summary>
+    <div class="mt-3 grid gap-3">
+      <section v-for="group in groups" :key="group.key" class="grid gap-2">
+        <p class="font-medium text-foreground">{{ group.label }}</p>
+        <div
+          v-for="resource in group.resources"
+          :key="resource.key"
+          class="grid gap-1 sm:grid-cols-[8rem_1fr]"
+        >
+          <span class="text-muted-foreground">{{ resource.label }}</span>
+          <span class="leading-5">
+            {{ resource.permissions.map(({ label }) => label).join("、") }}
+          </span>
+        </div>
+      </section>
+      <section v-if="unknownKeys.length" class="grid gap-1">
+        <p class="font-medium text-amber-700 dark:text-amber-400">
+          未注册的历史权限
+        </p>
+        <code class="break-all leading-5">{{ unknownKeys.join("、") }}</code>
+      </section>
+    </div>
+  </details>
+</template>