create-windy 0.6.18 → 0.6.20

package/dist/cli.js

@@ -33,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => {
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __require = import.meta.require;
 
-// ../../node_modules/cli-width/index.js
+// ../../node_modules/.bun/cli-width@4.1.0/node_modules/cli-width/index.js
 var require_cli_width = __commonJS((exports, module2) => {
   module2.exports = cliWidth;
   function normalizeOpts(options) {
@@ -73,7 +73,7 @@ var require_cli_width = __commonJS((exports, module2) => {
   }
 });
 
-// ../../node_modules/mute-stream/lib/index.js
+// ../../node_modules/.bun/mute-stream@3.0.0/node_modules/mute-stream/lib/index.js
 var require_lib = __commonJS((exports, module2) => {
   var Stream = __require("stream");
 
@@ -372,6 +372,7 @@ var agentOptionalModule = {
   documentation: [
     "docs/adr/0003-agent-session-event-source.md",
     "docs/architecture/agent-harness.md",
+    "docs/architecture/agent-runtime-compatibility.md",
     "docs/architecture/agent-workflow.md",
     "docs/architecture/durable-jobs.md",
     "docs/architecture/ai-egress.md",
@@ -3921,6 +3922,8 @@ bun run build
 bun run windy doctor
 bun run windy update --check
 bun run windy update --dry-run
+bun run windy update
+# \u5982\u9700\u5728\u672C\u6B21\u66F4\u65B0\u4E2D\u663E\u5F0F\u6267\u884C\u9879\u76EE\u8D28\u91CF\u811A\u672C\uFF1Abun run windy update --verify
 bun run windy module list
 ${moduleActivationCommands}
 ${includeOxc ? `bun run lint
@@ -3931,11 +3934,12 @@ ${includeOxc ? "\u63D0\u4EA4\u65F6 Husky \u4F1A\u901A\u8FC7 lint-staged \u4E0E O
 
 \u66F4\u65B0\u524D\u65E0\u9700\u63D0\u4EA4\u3001\u6682\u5B58\u6216\u6E05\u7406\u4E1A\u52A1\u6539\u52A8\u3002\`--dry-run\` \u53EA\u751F\u6210\u8BA1\u5212\uFF0C\u4E0D\u5199\u9879\u76EE\uFF1B\u65E0\u5173 WIP
 \u4FDD\u6301\u539F\u6837\uFF0C\u547D\u4E2D\u540C\u4E00\u8DEF\u5F84\u65F6\u6309\u51BB\u7ED3\u5FEB\u7167\u4E0E\u4E09\u65B9\u5408\u5E76 fail closed\u3002\u6B63\u5F0F\u66F4\u65B0\u5148\u5907\u4EFD\uFF0C\u518D\u505A
-package \u5B57\u6BB5\u7EA7\u5408\u5E76\u3001\u5171\u4EAB\u811A\u624B\u67B6\u4E09\u65B9\u5408\u5E76\u4E0E\u5B8C\u6574\u9A8C\u8BC1\u3002\u6574\u4E2A \`apps/web/src\` \u548C
+package \u5B57\u6BB5\u7EA7\u5408\u5E76\u3001\u5171\u4EAB\u811A\u624B\u67B6\u4E09\u65B9\u5408\u5E76\u4E0E\u5B89\u5168\u6536\u53E3\uFF1B\u9ED8\u8BA4\u4E0D\u6267\u884C\u9879\u76EE lint\u3001typecheck\u3001
+test \u6216 build\uFF0C\u4F20\u5165 \`--verify\` \u624D\u663E\u5F0F\u6267\u884C\u5E76\u8BB0\u5F55\u7ED3\u679C\u3002\u6574\u4E2A \`apps/web/src\` \u548C
 \`apps/server/src/app\` \u9ED8\u8BA4\u4FDD\u6301\u9879\u76EE\u7248\u672C\uFF1B\u5DF2\u767B\u8BB0\u7248\u672C recipe \u53EA\u4FEE\u6539\u5176\u58F0\u660E\u7684\u7A84\u951A\u70B9\u3002
 \u4EFB\u4F55\u51B2\u7A81\u90FD\u4F1A\u5728\u5199\u5165\u524D\u4E2D\u6B62\uFF0C\u6A21\u5757\u542F\u505C\u5728\u4EA4\u4E92
 \u7EC8\u7AEF\u786E\u8BA4\uFF1BCI\u3001Agent \u6216\u5176\u5B83\u975E TTY \u73AF\u5883\u5FC5\u987B\u663E\u5F0F\u4F20\u5165 \`--yes\`\u3002
-\u65E0\u5E76\u53D1\u53D8\u5316\u7684\u9A8C\u8BC1\u5931\u8D25\u4F1A\u81EA\u52A8\u56DE\u6EDA\uFF1B\u4E2D\u65AD\u6062\u590D\u4F7F\u7528
+\u5B89\u5168\u68C0\u67E5\u5931\u8D25\u4F1A\u81EA\u52A8\u56DE\u6EDA\uFF1B\u9879\u76EE\u8D28\u91CF\u811A\u672C\u5931\u8D25\u672C\u8EAB\u4E0D\u56DE\u6EDA\u5DF2\u5B89\u5168\u5E94\u7528\u7684\u66F4\u65B0\u3002\u4E2D\u65AD\u6062\u590D\u4F7F\u7528
 \`bun run windy doctor --repair\`\u3002\u8BE5\u547D\u4EE4\u5728\u63D0\u4EA4\u70B9\u524D\u4FDD\u7559\u5E76\u53D1\u7F16\u8F91\u5E76\u56DE\u6EDA\u5176\u4F59\u8DEF\u5F84\uFF0C
 \u5728 committed \u63D0\u4EA4\u70B9\u540E\u53EA\u5B8C\u6210\u4E8B\u52A1\u72B6\u6001\u4E0E\u5907\u4EFD\u6E05\u7406\uFF0C\u4E0D\u56DE\u6EDA\u9879\u76EE\u6587\u4EF6\u3002
 
@@ -4089,6 +4093,7 @@ var templateDocumentationFiles = [
   "docs/adr/0003-agent-session-event-source.md",
   "docs/architecture/admin-surface-boundary.md",
   "docs/architecture/agent-harness.md",
+  "docs/architecture/agent-runtime-compatibility.md",
   "docs/architecture/agent-workflow.md",
   "docs/architecture/ai-egress.md",
   "docs/architecture/ai-runtime.md",
@@ -4666,7 +4671,7 @@ function isMissing6(error) {
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin, stdout } from "process";
 
-// ../../node_modules/@inquirer/core/dist/lib/key.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/key.js
 var keybindings = ["emacs", "vim"];
 var keybindingLookup = new Set(keybindings);
 function isKeybinding(value) {
@@ -4683,7 +4688,7 @@ var isDownKey = (key, keybindings2 = []) => key.name === "down" || keybindings2.
 var isSpaceKey = (key) => key.name === "space";
 var isNumberKey = (key) => "1234567890".includes(key.name);
 var isEnterKey = (key) => key.name === "enter" || key.name === "return";
-// ../../node_modules/@inquirer/core/dist/lib/errors.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/errors.js
 class AbortPromptError extends Error {
   name = "AbortPromptError";
   message = "Prompt was aborted";
@@ -4709,10 +4714,10 @@ class HookError extends Error {
 class ValidationError extends Error {
   name = "ValidationError";
 }
-// ../../node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
 import { AsyncResource as AsyncResource2 } from "async_hooks";
 
-// ../../node_modules/@inquirer/core/dist/lib/hook-engine.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/hook-engine.js
 import { AsyncLocalStorage, AsyncResource } from "async_hooks";
 var hookStorage = new AsyncLocalStorage;
 function createStore(rl) {
@@ -4817,7 +4822,7 @@ var effectScheduler = {
   }
 };
 
-// ../../node_modules/@inquirer/core/dist/lib/use-state.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-state.js
 function isFactory(value) {
   return typeof value === "function";
 }
@@ -4838,7 +4843,7 @@ function useState(defaultValue) {
   });
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/use-effect.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-effect.js
 function useEffect(cb, depArray) {
   withPointer((pointer) => {
     const oldDeps = pointer.get();
@@ -4850,10 +4855,10 @@ function useEffect(cb, depArray) {
   });
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
 import { styleText } from "util";
 
-// ../../node_modules/@inquirer/figures/dist/index.js
+// ../../node_modules/.bun/@inquirer+figures@2.0.7/node_modules/@inquirer/figures/dist/index.js
 import process2 from "process";
 function isUnicodeSupported() {
   if (!process2.platform.startsWith("win")) {
@@ -5142,7 +5147,7 @@ var figures = shouldUseMain ? mainSymbols : fallbackSymbols;
 var dist_default = figures;
 var replacements = Object.entries(specialMainSymbols);
 
-// ../../node_modules/@inquirer/core/dist/lib/theme.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/theme.js
 var defaultTheme = {
   prefix: {
     idle: styleText("blue", "?"),
@@ -5170,7 +5175,7 @@ function getDefaultTheme() {
   };
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/make-theme.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/make-theme.js
 function isPlainObject(value) {
   if (typeof value !== "object" || value === null)
     return false;
@@ -5198,7 +5203,7 @@ function makeTheme(...themes) {
   return deepMerge(...themesToMerge);
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/use-prefix.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-prefix.js
 function usePrefix({ status = "idle", theme }) {
   const [showLoader, setShowLoader] = useState(false);
   const [tick, setTick] = useState(0);
@@ -5228,7 +5233,7 @@ function usePrefix({ status = "idle", theme }) {
   const iconName = status === "loading" ? "idle" : status;
   return typeof prefix === "string" ? prefix : prefix[iconName] ?? prefix["idle"];
 }
-// ../../node_modules/@inquirer/core/dist/lib/use-memo.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-memo.js
 function useMemo(fn, dependencies) {
   return withPointer((pointer) => {
     const prev = pointer.get();
@@ -5240,12 +5245,12 @@ function useMemo(fn, dependencies) {
     return prev.value;
   });
 }
-// ../../node_modules/@inquirer/core/dist/lib/use-ref.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-ref.js
 function useRef(val) {
   return useState({ current: val })[0];
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/use-keypress.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/use-keypress.js
 function useKeypress(userHandler) {
   const signal = useRef(userHandler);
   signal.current = userHandler;
@@ -5263,10 +5268,10 @@ function useKeypress(userHandler) {
     };
   }, []);
 }
-// ../../node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
 var import_cli_width = __toESM(require_cli_width(), 1);
 
-// ../../node_modules/fast-string-truncated-width/dist/utils.js
+// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/utils.js
 var getCodePointsLength = (() => {
   const SURROGATE_PAIR_RE = /[\uD800-\uDBFF][\uDC00-\uDFFF]/g;
   return (input) => {
@@ -5285,7 +5290,7 @@ var isWideNotCJKTNotEmoji = (x) => {
   return x === 8987 || x === 9001 || x >= 12272 && x <= 12287 || x >= 12289 && x <= 12350 || x >= 12441 && x <= 12543 || x >= 12549 && x <= 12591 || x >= 12593 && x <= 12686 || x >= 12688 && x <= 12771 || x >= 12783 && x <= 12830 || x >= 12832 && x <= 12871 || x >= 12880 && x <= 19903 || x >= 65040 && x <= 65049 || x >= 65072 && x <= 65106 || x >= 65108 && x <= 65126 || x >= 65128 && x <= 65131 || x >= 127488 && x <= 127490 || x >= 127504 && x <= 127547 || x >= 127552 && x <= 127560 || x >= 131072 && x <= 196605 || x >= 196608 && x <= 262141;
 };
 
-// ../../node_modules/fast-string-truncated-width/dist/index.js
+// ../../node_modules/.bun/fast-string-truncated-width@3.0.3/node_modules/fast-string-truncated-width/dist/index.js
 var ANSI_RE = /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]|\u001b\]8;[^;]*;.*?(?:\u0007|\u001b\u005c)/y;
 var CONTROL_RE = /[\x00-\x08\x0A-\x1F\x7F-\x9F]{1,1000}/y;
 var CJKT_WIDE_RE = /(?:(?![\uFF61-\uFF9F\uFF00-\uFFEF])[\p{Script=Han}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Hangul}\p{Script=Tangut}]){1,1000}/yu;
@@ -5384,7 +5389,7 @@ var getStringTruncatedWidth = (input, truncationOptions = {}, widthOptions = {})
 };
 var dist_default2 = getStringTruncatedWidth;
 
-// ../../node_modules/fast-string-width/dist/index.js
+// ../../node_modules/.bun/fast-string-width@3.0.2/node_modules/fast-string-width/dist/index.js
 var NO_TRUNCATION2 = {
   limit: Infinity,
   ellipsis: "",
@@ -5395,7 +5400,7 @@ var fastStringWidth = (input, options = {}) => {
 };
 var dist_default3 = fastStringWidth;
 
-// ../../node_modules/fast-wrap-ansi/lib/main.js
+// ../../node_modules/.bun/fast-wrap-ansi@0.2.2/node_modules/fast-wrap-ansi/lib/main.js
 var ESC = "\x1B";
 var CSI = "\x9B";
 var END_CODE = 39;
@@ -5607,7 +5612,7 @@ function wrapAnsi(string, columns, options) {
 `);
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/utils.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/utils.js
 function breakLines(content, width) {
   return content.split(`
 `).flatMap((line) => wrapAnsi(line, width, { trim: false, wordWrap: false }).split(`
@@ -5618,7 +5623,7 @@ function readlineWidth() {
   return import_cli_width.default({ defaultWidth: 80, output: readline().output });
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/pagination/use-pagination.js
 function usePointerPosition({ active, renderedItems, pageSize, loop }) {
   const state = useRef({
     lastPointer: active,
@@ -5684,12 +5689,12 @@ function usePagination({ items, active, renderItem, pageSize, loop = true }) {
   return pageBuffer.filter((line) => typeof line === "string").join(`
 `);
 }
-// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
 var import_mute_stream = __toESM(require_lib(), 1);
 import * as readline2 from "readline";
 import { AsyncResource as AsyncResource3 } from "async_hooks";
 
-// ../../node_modules/signal-exit/dist/mjs/signals.js
+// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -5699,7 +5704,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// ../../node_modules/signal-exit/dist/mjs/index.js
+// ../../node_modules/.bun/signal-exit@4.1.0/node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global = globalThis;
@@ -5897,10 +5902,10 @@ var {
   unload
 } = signalExitWrap(processOk(process3) ? new SignalExit(process3) : new SignalExitFallback);
 
-// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
 import { stripVTControlCharacters } from "util";
 
-// ../../node_modules/@inquirer/ansi/dist/index.js
+// ../../node_modules/.bun/@inquirer+ansi@2.0.7/node_modules/@inquirer/ansi/dist/index.js
 var ESC2 = "\x1B[";
 var cursorLeft = ESC2 + "G";
 var cursorHide = ESC2 + "?25l";
@@ -5916,7 +5921,7 @@ var cursorTo = (x, y) => {
 var eraseLine = ESC2 + "2K";
 var eraseLines = (lines) => lines > 0 ? (eraseLine + cursorUp(1)).repeat(lines - 1) + eraseLine + cursorLeft : "";
 
-// ../../node_modules/@inquirer/core/dist/lib/screen-manager.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/screen-manager.js
 var height = (content) => content.split(`
 `).length;
 var lastLine = (content) => content.split(`
@@ -5982,7 +5987,7 @@ class ScreenManager {
   }
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/promise-polyfill.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/promise-polyfill.js
 class PromisePolyfill extends Promise {
   static withResolver() {
     let resolve6;
@@ -5995,7 +6000,7 @@ class PromisePolyfill extends Promise {
   }
 }
 
-// ../../node_modules/@inquirer/core/dist/lib/create-prompt.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/create-prompt.js
 import path from "path";
 var nativeSetImmediate = globalThis.setImmediate;
 function getCallSites() {
@@ -6106,7 +6111,7 @@ function createPrompt(view) {
   };
   return prompt;
 }
-// ../../node_modules/@inquirer/core/dist/lib/Separator.js
+// ../../node_modules/.bun/@inquirer+core@11.2.1+7cb241fc07b679d9/node_modules/@inquirer/core/dist/lib/Separator.js
 import { styleText as styleText2 } from "util";
 class Separator {
   separator = styleText2("dim", Array.from({ length: 15 }).join(dist_default.line));
@@ -6120,7 +6125,7 @@ class Separator {
     return Boolean(choice && typeof choice === "object" && "type" in choice && choice.type === "separator");
   }
 }
-// ../../node_modules/@inquirer/checkbox/dist/index.js
+// ../../node_modules/.bun/@inquirer+checkbox@5.2.1+7cb241fc07b679d9/node_modules/@inquirer/checkbox/dist/index.js
 import { styleText as styleText3 } from "util";
 var checkboxTheme = {
   icon: {
@@ -8492,6 +8497,16 @@ var recipes = [
     id: "starter-0.6.17-to-0.6.18",
     from: "0.6.17",
     to: "0.6.18"
+  },
+  {
+    id: "starter-0.6.18-to-0.6.19",
+    from: "0.6.18",
+    to: "0.6.19"
+  },
+  {
+    id: "starter-0.6.19-to-0.6.20",
+    from: "0.6.19",
+    to: "0.6.20"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -8537,8 +8552,7 @@ function parseVersion2(version) {
 }
 
 // src/update/updater.ts
-import { readFile as readFile24, rm as rm8 } from "fs/promises";
-import { join as join29 } from "path";
+import { rm as rm8 } from "fs/promises";
 
 // src/update/artifacts.ts
 import { mkdtemp, readFile as readFile15 } from "fs/promises";
@@ -10859,12 +10873,48 @@ function safeTemporaryPath(root, path2) {
   return target;
 }
 
+// src/update/project-quality-verification.ts
+import { readFile as readFile24 } from "fs/promises";
+import { join as join29 } from "path";
+var qualityScriptNames = ["lint", "typecheck", "test", "build"];
+function skippedProjectQualityVerification() {
+  return {
+    status: "skipped",
+    steps: [
+      {
+        name: "\u9879\u76EE\u8D28\u91CF\u9A8C\u8BC1\uFF08lint/typecheck/test/build\uFF09",
+        status: "skipped"
+      }
+    ]
+  };
+}
+async function runProjectQualityVerification(projectDirectory, execute) {
+  const packageJson = JSON.parse(await readFile24(join29(projectDirectory, "package.json"), "utf8"));
+  const steps = [];
+  for (const name of qualityScriptNames) {
+    const stepName = `bun run ${name}`;
+    if (!packageJson.scripts?.[name]) {
+      steps.push({ name: stepName, status: "skipped" });
+      continue;
+    }
+    try {
+      await execute("bun", ["run", name], projectDirectory);
+      steps.push({ name: stepName, status: "passed" });
+    } catch {
+      steps.push({ name: stepName, status: "failed" });
+      return { status: "failed", steps };
+    }
+  }
+  return { status: "passed", steps };
+}
+
 // src/update/updater-report.ts
-async function writeUpdateReport(result2, steps, relativePath2, expected) {
+async function writeUpdateReport(result2, steps, projectQualityVerification, relativePath2, expected) {
   const lines = [
     `# Windy \u66F4\u65B0\u62A5\u544A ${result2.plan.id}`,
     "",
-    "- \u9A8C\u8BC1\u72B6\u6001\uFF1A\u5DF2\u901A\u8FC7\uFF1B\u4E8B\u52A1\u7ED3\u679C\u4EE5 update-state \u6700\u7EC8\u63D0\u4EA4\u4E3A\u51C6",
+    "- \u5B89\u5168\u63D0\u4EA4\u72B6\u6001\uFF1A\u5DF2\u901A\u8FC7\uFF1B\u4E8B\u52A1\u7ED3\u679C\u4EE5 update-state \u6700\u7EC8\u63D0\u4EA4\u4E3A\u51C6",
+    `- \u9879\u76EE\u8D28\u91CF\u9A8C\u8BC1\uFF1A${qualityStatusLabel(projectQualityVerification)}`,
     `- \u6765\u6E90\u7248\u672C\uFF1A${result2.plan.sourceVersion}`,
     `- \u76EE\u6807\u7248\u672C\uFF1A${result2.plan.targetVersion}`,
     `- Recipe\uFF1A${result2.plan.recipes.join("\u3001") || "\u65E0"}`,
@@ -10883,10 +10933,14 @@ async function writeUpdateReport(result2, steps, relativePath2, expected) {
       ...result2.plan.manualCleanup.map(({ message }) => `- ${message}`)
     ] : [],
     "",
-    "## \u9A8C\u8BC1",
+    "## \u5B89\u5168\u68C0\u67E5\u4E0E\u53EF\u9009\u9A8C\u8BC1",
     "",
     ...steps.map(({ name, status }) => `- ${name}\uFF1A${status}`),
     "",
+    ...projectQualityVerification === "skipped" ? [
+      "\u672C\u6B21\u66F4\u65B0\u672A\u6267\u884C\u9879\u76EE\u7EA7 lint/typecheck/test/build\u3002\u9700\u8981\u5B8C\u6574\u8D28\u91CF\u9A8C\u8BC1\u65F6\uFF0C\u8BF7\u5728\u9879\u76EE\u6839\u76EE\u5F55\u6309\u5B9E\u9645\u5B58\u5728\u7684\u811A\u672C\u663E\u5F0F\u8FD0\u884C\u8FD9\u4E9B\u547D\u4EE4\u3002",
+      ""
+    ] : [],
     "\u4E8B\u52A1\u63D0\u4EA4\u540E\u81EA\u52A8\u6E05\u7406\u5907\u4EFD\uFF1B\u82E5\u63D0\u793A\u6E05\u7406\u5F85\u5B8C\u6210\uFF0C\u8BF7\u8FD0\u884C `bun run windy doctor --repair`\u3002",
     ""
   ];
@@ -10895,6 +10949,13 @@ async function writeUpdateReport(result2, steps, relativePath2, expected) {
   await writeOwnedTransactionFile(result2.plan.projectDirectory, relativePath2, content, expected);
   return expectationForContent(relativePath2, content);
 }
+function qualityStatusLabel(status) {
+  if (status === "passed")
+    return "\u5DF2\u901A\u8FC7\uFF08\u663E\u5F0F --verify\uFF09";
+  if (status === "failed")
+    return "\u672A\u901A\u8FC7\uFF1B\u5347\u7EA7\u4ECD\u6309\u5B89\u5168\u68C0\u67E5\u7ED3\u679C\u63D0\u4EA4";
+  return "\u5DF2\u8DF3\u8FC7\uFF08\u9ED8\u8BA4\u4E0D\u6267\u884C lint/typecheck/test/build\uFF09";
+}
 
 // src/update/updater.ts
 class DefaultStarterUpdater {
@@ -10903,12 +10964,14 @@ class DefaultStarterUpdater {
   #beforeTransactionFinalize;
   #finalizeTransaction;
   #skipInstall;
+  #verifyProject;
   constructor(dependencies = {}) {
     this.#artifacts = dependencies.artifacts ?? new PublishedArtifactProvider;
     this.#execute = dependencies.execute ?? runCommand;
     this.#beforeTransactionFinalize = dependencies.beforeTransactionFinalize;
     this.#finalizeTransaction = dependencies.finalizeTransaction ?? finalizeOwnedTransaction;
     this.#skipInstall = dependencies.skipInstall ?? false;
+    this.#verifyProject = dependencies.verifyProject ?? false;
   }
   async plan(input) {
     return createUpdatePlan(input, this.#artifacts);
@@ -10979,18 +11042,11 @@ class DefaultStarterUpdater {
       const plannedPaths = new Set(result2.plan.files.map(({ path: path2 }) => path2));
       replaceExpectations(result2, verificationSnapshot.filter(({ path: path2 }) => !metadataPaths2.has(path2) && !plannedPaths.has(path2)));
       verificationExpectationsFrozen = true;
-      const packageJson = JSON.parse(await readFile24(join29(result2.plan.projectDirectory, "package.json"), "utf8"));
-      for (const name of ["lint", "typecheck", "test", "build"]) {
-        if (!packageJson.scripts?.[name]) {
-          steps.push({ name: `bun run ${name}`, status: "skipped" });
-          continue;
-        }
-        await this.#execute("bun", ["run", name], result2.plan.projectDirectory);
-        steps.push({ name: `bun run ${name}`, status: "passed" });
-      }
+      const projectQualityVerification = this.#verifyProject ? await runProjectQualityVerification(result2.plan.projectDirectory, this.#execute) : skippedProjectQualityVerification();
+      steps.push(...projectQualityVerification.steps);
       const metadataExpectations = await finalize(result2, stabilized);
       const reportPath = `.windy/reports/${result2.plan.id}.md`;
-      const reportExpectation = await writeUpdateReport(result2, steps, reportPath, expectedForPath(result2, reportPath));
+      const reportExpectation = await writeUpdateReport(result2, steps, projectQualityVerification.status, reportPath, expectedForPath(result2, reportPath));
       replaceExpectations(result2, [...metadataExpectations, reportExpectation]);
       await rm8(result2.plan.temporaryRoot, { recursive: true, force: true });
       await this.#beforeTransactionFinalize?.({ result: result2, reportPath });
@@ -11000,7 +11056,13 @@ class DefaultStarterUpdater {
         expectations: result2.finalizationExpectations,
         workspaceMembershipExpectations: result2.plan.finalWorkspaceMembershipExpectations ?? result2.plan.workspaceMembershipExpectations
       });
-      return { updateId: result2.plan.id, status: "passed", steps, reportPath };
+      return {
+        updateId: result2.plan.id,
+        status: "passed",
+        projectQualityVerification: projectQualityVerification.status,
+        steps,
+        reportPath
+      };
     } catch (error) {
       await rm8(result2.plan.temporaryRoot, { recursive: true, force: true });
       if (error instanceof TransactionCommittedCleanupPendingError) {
@@ -11013,7 +11075,7 @@ class DefaultStarterUpdater {
       if (verificationExpectationsFrozen) {
         const conflicts = await retainOwnedTransactionExpectationConflicts(result2.plan.projectDirectory, result2.transactionOwnerToken, result2.finalizationExpectations);
         if (conflicts.length) {
-          throw new Error(`\u66F4\u65B0\u9A8C\u8BC1\u671F\u95F4\u68C0\u6D4B\u5230\u5E76\u53D1\u4FEE\u6539\uFF0C\u4E8B\u52A1\u73B0\u573A\u5DF2\u4FDD\u7559\uFF1A${conflicts.join("\u3001")}`, { cause: error });
+          throw new Error(`\u66F4\u65B0\u5B89\u5168\u6536\u53E3\u671F\u95F4\u68C0\u6D4B\u5230\u5E76\u53D1\u4FEE\u6539\uFF0C\u4E8B\u52A1\u73B0\u573A\u5DF2\u4FDD\u7559\uFF1A${conflicts.join("\u3001")}`, { cause: error });
         }
       }
       await restoreUpdateState(result2.plan.projectDirectory, {
@@ -11025,7 +11087,7 @@ class DefaultStarterUpdater {
         phase: "ready",
         manifestHash: result2.expectedManifestHash
       });
-      throw new Error(`\u66F4\u65B0\u9A8C\u8BC1\u5931\u8D25\uFF0C\u9879\u76EE\u5DF2\u56DE\u6EDA\u5230 ${result2.plan.sourceVersion}\uFF1A${error instanceof Error ? error.message : String(error)}`, { cause: error });
+      throw new Error(`\u66F4\u65B0\u5B89\u5168\u68C0\u67E5\u5931\u8D25\uFF0C\u9879\u76EE\u5DF2\u56DE\u6EDA\u5230 ${result2.plan.sourceVersion}\uFF1A${error instanceof Error ? error.message : String(error)}`, { cause: error });
     }
   }
 }
@@ -11671,6 +11733,20 @@ function actionLabel(action) {
   return action === "add" ? "\u5B89\u88C5" : action === "update" ? "\u66F4\u65B0" : "\u5378\u8F7D";
 }
 
+// src/update/cli-quality-output.ts
+function printProjectQualityVerification(status) {
+  if (status === "passed") {
+    console.log("\u9879\u76EE\u8D28\u91CF\u9A8C\u8BC1\uFF1A\u5DF2\u901A\u8FC7\uFF08\u663E\u5F0F --verify\uFF09");
+    return;
+  }
+  if (status === "failed") {
+    console.error("\u9879\u76EE\u8D28\u91CF\u9A8C\u8BC1\uFF1A\u672A\u901A\u8FC7\uFF1B\u5347\u7EA7\u5DF2\u5B89\u5168\u63D0\u4EA4\uFF0C\u8BF7\u67E5\u770B\u4E0A\u65B9\u5931\u8D25\u547D\u4EE4\u548C\u66F4\u65B0\u62A5\u544A");
+    process.exitCode = 1;
+    return;
+  }
+  console.log("\u9879\u76EE\u8D28\u91CF\u9A8C\u8BC1\uFF1A\u5DF2\u8DF3\u8FC7\uFF1B\u53EF\u6309\u9700\u663E\u5F0F\u8FD0\u884C lint\u3001typecheck\u3001test \u548C build");
+}
+
 // src/update/cli.ts
 async function runLifecycleCommand(args, dependencies = {}) {
   const command = args[0];
@@ -11745,6 +11821,7 @@ var updateHelpText = `\u7528\u6CD5\uFF1Acreate-windy update [\u9009\u9879]
   --to <\u7248\u672C>                   \u66F4\u65B0\u5230\u6307\u5B9A\u7248\u672C
   --cwd <\u76EE\u5F55>                  \u6307\u5B9A\u9879\u76EE\u76EE\u5F55
   --skip-install                \u66F4\u65B0\u65F6\u4E0D\u6267\u884C bun install
+  --verify                      \u663E\u5F0F\u6267\u884C\u9879\u76EE lint/typecheck/test/build
   --force                       \u5F3A\u5236\u91C7\u7528\u5E73\u53F0\u57FA\u7EBF\u53C2\u4E0E\u4E09\u65B9\u5408\u5E76
   -h, --help                    \u663E\u793A update \u5E2E\u52A9\u5E76\u9000\u51FA
 `;
@@ -11777,7 +11854,8 @@ async function runUpdate(args, projectDirectory) {
     return;
   }
   const updater = new DefaultStarterUpdater({
-    skipInstall: args.includes("--skip-install")
+    skipInstall: args.includes("--skip-install"),
+    verifyProject: args.includes("--verify")
   });
   const plan = await updater.plan({
     projectDirectory,
@@ -11800,6 +11878,7 @@ async function runUpdate(args, projectDirectory) {
   const environmentRepair = await repairLocalEnvironment(projectDirectory);
   console.log(`
 \u66F4\u65B0\u5B8C\u6210\uFF1A${plan.sourceVersion} \u2192 ${plan.targetVersion}`);
+  printProjectQualityVerification(report.projectQualityVerification);
   console.log(`\u62A5\u544A\uFF1A${report.reportPath}`);
   printEnvironmentRepair(environmentRepair);
   if (environmentRepair.missingKeys.length || environmentRepair.duplicateKeys.length) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.6.18",
+  "version": "0.6.20",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "517a96ca3489632c4083fe08921935bb3f4b1781",
-  "generatorVersion": "0.6.18",
+  "templateCommit": "2b9bad011549abb0be1af6a4d0eefe60426f7247",
+  "generatorVersion": "0.6.20",
   "modules": [
     {
       "name": "system",

package/template/README.md

@@ -160,6 +160,8 @@ bun run build
 bun run windy doctor
 bun run windy update --check
 bun run windy update --dry-run
+bun run windy update
+# 如需在本次更新中显式执行项目质量脚本：bun run windy update --verify
 bun run windy module list
 # 当前组合没有可安全 runtime disable 的已安装可选模块
 bun run lint
@@ -170,11 +172,12 @@ bun run format
 
 更新前无需提交、暂存或清理业务改动。`--dry-run` 只生成计划，不写项目；无关 WIP
 保持原样，命中同一路径时按冻结快照与三方合并 fail closed。正式更新先备份，再做
-package 字段级合并、共享脚手架三方合并与完整验证。整个 `apps/web/src` 和
+package 字段级合并、共享脚手架三方合并与安全收口；默认不执行项目 lint、typecheck、
+test 或 build，传入 `--verify` 才显式执行并记录结果。整个 `apps/web/src` 和
 `apps/server/src/app` 默认保持项目版本；已登记版本 recipe 只修改其声明的窄锚点。
 任何冲突都会在写入前中止，模块启停在交互
 终端确认；CI、Agent 或其它非 TTY 环境必须显式传入 `--yes`。
-无并发变化的验证失败会自动回滚；中断恢复使用
+安全检查失败会自动回滚；项目质量脚本失败本身不回滚已安全应用的更新。中断恢复使用
 `bun run windy doctor --repair`。该命令在提交点前保留并发编辑并回滚其余路径，
 在 committed 提交点后只完成事务状态与备份清理，不回滚项目文件。
 

package/template/apps/agent-server/README.md

@@ -15,6 +15,7 @@ uv run mypy
 
 HTTP 接口：
 
+- `GET /api/agent/runtime/compatibility`（内部认证、V1 协议 Offer）
 - `POST /api/agent/runs`
 - `GET /api/agent/runs/:runId/events`
 - `GET /api/agent/runs/:runId/result`
@@ -24,6 +25,11 @@ Run 创建使用 `Idempotency-Key`。事件以 SSE 传输，支持 `Last-Event-I
 断线重放，并周期发送 comment heartbeat。Provider 或 Engine 异常只映射为 canonical
 安全错误，不把原始异常正文暴露给调用方。
 
+兼容 Offer 返回 Engine identity、支持的协议版本、传输能力、callback auth profile 及三层摘要。
+新 Windy Server 会在 Run 请求头固定所选版本和 Offer digest；新 Agent Server 仍接受完全不带 pin
+的旧调用方，但拒绝半套或不匹配 pin。它只用于同一受控部署，不能把内部 token 发给外部业务系统。
+跨系统限制见 [Remote Agent Runtime 兼容契约](../../docs/architecture/agent-runtime-compatibility.md)。
+
 配置以下仅服务端可见的环境变量后启用 Direct Engine：
 
 ```bash

package/template/apps/agent-server/src/southwind_agent_server/app.py

@@ -34,6 +34,12 @@ from .http_helpers import (
 )
 from .report_routes import create_report_router
 from .report_store import AgentRuntimeReportStore
+from .runtime_compatibility import (
+    OFFER_DIGEST_HEADER,
+    PROTOCOL_HEADER,
+    RuntimeCompatibilityError,
+    validate_runtime_compatibility_pin,
+)
 from .runtime_factory import (
     default_engine,
     default_report_store,
@@ -191,11 +197,28 @@ def create_app(
         request: StartRunRequest,
         idempotency_key: Annotated[str, Header(alias="Idempotency-Key")],
         authorization: Annotated[str | None, Header()] = None,
+        runtime_protocol: Annotated[str | None, Header(alias=PROTOCOL_HEADER)] = None,
+        runtime_offer_digest: Annotated[
+            str | None, Header(alias=OFFER_DIGEST_HEADER)
+        ] = None,
     ) -> StartRunResponse | JSONResponse:
         if not authorized(authorization, internal_token):
             return safe_error(403, "FORBIDDEN", "内部调用认证失败", False)
         if not idempotency_key.strip():
             return safe_error(400, "INVALID_INPUT", "幂等键不能为空", False)
+        try:
+            validate_runtime_compatibility_pin(
+                runtime_protocol,
+                runtime_offer_digest,
+                runtime_engine.engine_id,
+            )
+        except RuntimeCompatibilityError:
+            return safe_error(
+                409,
+                "RUNTIME_UNAVAILABLE",
+                "Agent Runtime compatibility pin 不匹配",
+                False,
+            )
         try:
             await require_vision_readiness(runtime_engine, request)
         except SafeEngineError as error:

package/template/apps/agent-server/src/southwind_agent_server/health_routes.py

@@ -7,6 +7,7 @@ from fastapi import FastAPI, Header
 from fastapi.responses import JSONResponse
 
 from .http_helpers import authorized, safe_error
+from .runtime_compatibility import COMPATIBILITY_PATH, runtime_compatibility_offer
 from .service import AgentRunService
 from .vlm_readiness import unavailable_vlm_snapshot
 
@@ -82,3 +83,11 @@ def install_health_routes(
                 "Agent Runtime Model coordinate 不可用",
                 True,
             )
+
+    @application.get(COMPATIBILITY_PATH, response_model=None)
+    async def runtime_compatibility(
+        authorization: Annotated[str | None, Header()] = None,
+    ) -> dict[str, object] | JSONResponse:
+        if not authorized(authorization, internal_token):
+            return safe_error(403, "FORBIDDEN", "内部调用认证失败", False)
+        return runtime_compatibility_offer(runtime.engine.engine_id)