create-windy 0.6.20 → 0.7.0

package/template/packages/database/drizzle/meta/_journal.json

@@ -442,6 +442,13 @@
       "when": 1787904000000,
       "tag": "0062_client_agent_workflow_artifact",
       "breakpoints": true
+    },
+    {
+      "idx": 63,
+      "version": "7",
+      "when": 1789011354550,
+      "tag": "0063_license_project_lifecycle",
+      "breakpoints": true
     }
   ]
 }

package/template/packages/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/database",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -15,7 +15,7 @@
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "dependencies": {
-    "@southwind-ai/shared": "workspace:^0.2.5",
+    "@southwind-ai/shared": "workspace:^0.3.0",
     "drizzle-orm": "^0.45.2"
   },
   "exports": {

package/template/packages/database/src/agent-runtime-schema.test.ts

@@ -312,7 +312,11 @@ test("Agent Run 固定不可变 Release 并持久化恢复租约", async () => {
       breakpoints: boolean;
     }[];
   };
-  expect(migrationJournal.entries.at(-1)).toMatchObject({
+  expect(
+    migrationJournal.entries.find(
+      (entry) => entry.tag === "0062_client_agent_workflow_artifact",
+    ),
+  ).toMatchObject({
     idx: 62,
     version: "7",
     tag: "0062_client_agent_workflow_artifact",

package/template/packages/database/src/schema/index.ts

@@ -17,6 +17,7 @@ export * from "./identity.js";
 // @windy-module system.license begin
 export * from "./license-legacy.js";
 export * from "./license-v1.js";
+export * from "./license-issuance-requests.js";
 // @windy-module system.license end
 export * from "./migration-history.js";
 // @windy-module system.notification begin

package/template/packages/database/src/schema/license-issuance-requests.ts

@@ -0,0 +1,59 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  index,
+  integer,
+  pgTable,
+  text,
+  timestamp,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+import { licenseProjects, licenses } from "./license-v1.js";
+
+export const licenseIssuanceRequests = pgTable(
+  "license_issuance_requests",
+  {
+    id: varchar("id", { length: 64 }).primaryKey(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 160 }).notNull(),
+    projectId: varchar("project_id", { length: 64 })
+      .notNull()
+      .references(() => licenseProjects.id, { onDelete: "restrict" }),
+    requestDigest: varchar("request_digest", { length: 64 }).notNull(),
+    reviewDigest: varchar("review_digest", { length: 64 }).notNull(),
+    licenseId: varchar("license_id", { length: 64 }).notNull(),
+    resultLicenseId: varchar("result_license_id", { length: 64 }).references(
+      () => licenses.id,
+      { onDelete: "restrict" },
+    ),
+    issuedAt: timestamp("issued_at", { withTimezone: true }).notNull(),
+    status: varchar("status", { length: 20 }).notNull().default("processing"),
+    fence: integer("fence").notNull().default(1),
+    leaseUntil: timestamp("lease_until", { withTimezone: true }).notNull(),
+    errorCode: varchar("error_code", { length: 80 }),
+    errorReason: text("error_reason"),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("uk_license_issuance_actor_key").on(
+      table.actorId,
+      table.idempotencyKey,
+    ),
+    uniqueIndex("uk_license_issuance_license").on(table.licenseId),
+    index("idx_license_issuance_project").on(table.projectId, table.createdAt),
+    check(
+      "ck_license_issuance_status",
+      sql`${table.status} in ('processing', 'failed', 'completed')`,
+    ),
+    check(
+      "ck_license_issuance_result",
+      sql`(${table.status} = 'completed') = (${table.resultLicenseId} is not null)`,
+    ),
+  ],
+);

package/template/packages/database/src/schema/license-v1.ts

@@ -2,6 +2,7 @@ import type { LicenseV1Claims, LicenseVersionKey } from "@southwind-ai/shared";
 import { sql } from "drizzle-orm";
 import {
   check,
+  type AnyPgColumn,
   index,
   integer,
   jsonb,
@@ -91,6 +92,10 @@ export const licenseContractVersions = pgTable(
     projectId: varchar("project_id", { length: 64 })
       .notNull()
       .references(() => licenseProjects.id, { onDelete: "restrict" }),
+    predecessorId: varchar("predecessor_id", { length: 64 }).references(
+      (): AnyPgColumn => licenseContractVersions.id,
+      { onDelete: "restrict" },
+    ),
     contractNumber: varchar("contract_number", { length: 120 }).notNull(),
     version: varchar("version", { length: 40 }).notNull(),
     licenseVersionId: varchar("license_version_id", { length: 64 })

package/template/packages/jobs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/jobs",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -16,7 +16,7 @@
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "dependencies": {
-    "@southwind-ai/shared": "workspace:^0.2.5",
+    "@southwind-ai/shared": "workspace:^0.3.0",
     "@southwind-ai/storage": "workspace:^"
   },
   "exports": {

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.2.8",
+  "version": "0.3.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/src/system-api-permissions.ts

@@ -95,6 +95,20 @@ export function systemApiPermissionBindings(): ApiPermissionBinding[] {
       permissionResource: "department",
       featureKey: "system.department",
     }),
+    binding(
+      "GET",
+      "/api/system/departments/organization",
+      "system.department.read",
+      "system.department",
+      "data.read",
+    ),
+    binding(
+      "GET",
+      "/api/system/departments/:id/transition-preview",
+      "system.department.manage",
+      "system.department",
+      "data.read",
+    ),
     binding(
       "POST",
       "/api/system/departments/quick",

package/template/packages/modules/src/system-features.ts

@@ -170,17 +170,6 @@ export const systemFeatures: ModuleManifest["features"] = [
     allowedLicenseVersions: advancedOnly,
   },
   // @windy-module system.bulk-data end
-  {
-    ...feature(
-      "system.ruoyi-compat",
-      "RuoYi-Vue 兼容层",
-      "可选适配旧 RuoYi-Vue 数据与接口，不影响平台标准模型。",
-    ),
-    visible: "hidden",
-    enabled: false,
-    stage: "internal",
-    allowedLicenseVersions: advancedOnly,
-  },
 ];
 
 function feature(

package/template/packages/modules/src/system-module-catalog.test.ts

@@ -71,6 +71,10 @@ describe("系统能力模块目录", () => {
     const aggregate = systemFoundationModule();
     const modules = systemModuleManifests();
 
+    expect(aggregate.features.map(({ key }) => key)).not.toContain(
+      "system.ruoyi-compat",
+    );
+
     expect(JSON.parse(JSON.stringify(composeModuleMenus(modules)))).toEqual(
       aggregate.menus.filter(
         (menu) => menu.type !== "catalog" || Boolean(menu.children?.length),

package/template/packages/modules/src/system-module-catalog.ts

@@ -39,7 +39,6 @@ export const systemModuleDefinitions = [
       "system.auth",
       "system.feature",
       "system.ui-components",
-      "system.ruoyi-compat",
     ],
   },
   {

package/template/packages/server-sdk/index.ts

@@ -65,55 +65,7 @@ export type {
   ModuleEmbeddingItem,
 } from "./src/ai-operation-port.js";
 export { ModuleAiOperationError } from "./src/ai-operation-port.js";
-export {
-  AI_OPERATION_MAX_REQUIRED_CAPABILITIES_V1,
-  AI_READINESS_REASON_CODES_V1,
-  AI_RUNTIME_KINDS_V1,
-  AI_RUNTIME_MAX_CAPABILITIES_PER_OFFER_V1,
-  AI_RUNTIME_MAX_OFFERS_V1,
-  AI_RUNTIME_MODALITIES_V1,
-  AI_RUNTIME_MAX_PROBE_TTL_SECONDS,
-  AI_RUNTIME_MAX_UNAVAILABLE_REASONS_V1,
-  AI_RUNTIME_PROBE_FAILURE_CODES_V1,
-  AI_RUNTIME_READINESS_SCHEMA_VERSION,
-  type AiOperationReadinessRequirementV1,
-  type AiOperationRequiredLimitsV1,
-  type AiOperationRequiredResourcesV1,
-  type AiReadinessReasonCodeV1,
-  type AiReadinessReasonV1,
-  type AiRuntimeDeploymentV1,
-  type AiRuntimeDownstreamProbeV1,
-  type AiRuntimeKindV1,
-  type AiRuntimeModalityV1,
-  type AiRuntimeOfferLimitsV1,
-  type AiRuntimeOfferV1,
-  type AiRuntimeOffersDigestV1,
-  type AiRuntimeProbeFailureCodeV1,
-  type AiRuntimeReadinessV1,
-  type AiRuntimeReadyV1,
-  type AiRuntimeReleaseDigestV1,
-  type AiRuntimeUnavailableV1,
-  type ModuleAiOperationReadinessPortV1,
-  type ModuleAiOperationReadinessV1,
-  type ModuleAiOperationReadyV1,
-  type ModuleAiOperationUnavailableV1,
-} from "./src/ai-runtime-readiness.js";
-export { computeAiRuntimeOffersDigestV1 } from "./src/ai-runtime-readiness-digest.js";
-export {
-  AI_RUNTIME_DEPLOYMENT_IDENTITY_PREFIX_V1,
-  parseAiRuntimeDeploymentIdentityV1,
-  type AiRuntimeDeploymentIdentityV1,
-} from "./src/ai-runtime-readiness-identity.js";
-export {
-  parseAiRuntimeReadinessV1,
-  type AiRuntimeReadinessParseResult,
-} from "./src/ai-runtime-readiness-validation.js";
-export {
-  projectAiOperationReadinessV1,
-  type ProjectAiOperationReadinessOptionsV1,
-} from "./src/ai-runtime-readiness-projection.js";
-export type { AiRuntimeTrustedFullAttestationV1 } from "./src/ai-runtime-readiness-trust.js";
-export { validAiOperationReadinessRequirementV1 } from "@southwind-ai/shared";
+export * from "./src/ai-runtime-readiness-exports.js";
 export type {
   ModuleBackgroundAiErrorCode,
   ModuleBackgroundAiOperationInput,

package/template/packages/server-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/server-sdk",
-  "version": "0.4.5",
+  "version": "0.5.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -16,6 +16,7 @@
     "src/ai-runtime-readiness.ts",
     "src/ai-runtime-readiness-capture.ts",
     "src/ai-runtime-readiness-digest.ts",
+    "src/ai-runtime-readiness-exports.ts",
     "src/ai-runtime-readiness-identity.ts",
     "src/ai-runtime-readiness-keys.ts",
     "src/ai-runtime-readiness-limits.ts",
@@ -67,7 +68,7 @@
   "dependencies": {
     "@southwind-ai/jobs": "workspace:^",
     "@southwind-ai/modules": "workspace:^",
-    "@southwind-ai/shared": "workspace:^0.2.5",
+    "@southwind-ai/shared": "workspace:^0.3.0",
     "@southwind-ai/storage": "workspace:^"
   },
   "exports": {

package/template/packages/server-sdk/src/ai-runtime-readiness-exports.ts

@@ -0,0 +1,49 @@
+export {
+  AI_OPERATION_MAX_REQUIRED_CAPABILITIES_V1,
+  AI_READINESS_REASON_CODES_V1,
+  AI_RUNTIME_KINDS_V1,
+  AI_RUNTIME_MAX_CAPABILITIES_PER_OFFER_V1,
+  AI_RUNTIME_MAX_OFFERS_V1,
+  AI_RUNTIME_MODALITIES_V1,
+  AI_RUNTIME_MAX_PROBE_TTL_SECONDS,
+  AI_RUNTIME_MAX_UNAVAILABLE_REASONS_V1,
+  AI_RUNTIME_PROBE_FAILURE_CODES_V1,
+  AI_RUNTIME_READINESS_SCHEMA_VERSION,
+  type AiOperationReadinessRequirementV1,
+  type AiOperationRequiredLimitsV1,
+  type AiOperationRequiredResourcesV1,
+  type AiReadinessReasonCodeV1,
+  type AiReadinessReasonV1,
+  type AiRuntimeDeploymentV1,
+  type AiRuntimeDownstreamProbeV1,
+  type AiRuntimeKindV1,
+  type AiRuntimeModalityV1,
+  type AiRuntimeOfferLimitsV1,
+  type AiRuntimeOfferV1,
+  type AiRuntimeOffersDigestV1,
+  type AiRuntimeProbeFailureCodeV1,
+  type AiRuntimeReadinessV1,
+  type AiRuntimeReadyV1,
+  type AiRuntimeReleaseDigestV1,
+  type AiRuntimeUnavailableV1,
+  type ModuleAiOperationReadinessPortV1,
+  type ModuleAiOperationReadinessV1,
+  type ModuleAiOperationReadyV1,
+  type ModuleAiOperationUnavailableV1,
+} from "./ai-runtime-readiness.js";
+export { computeAiRuntimeOffersDigestV1 } from "./ai-runtime-readiness-digest.js";
+export {
+  AI_RUNTIME_DEPLOYMENT_IDENTITY_PREFIX_V1,
+  parseAiRuntimeDeploymentIdentityV1,
+  type AiRuntimeDeploymentIdentityV1,
+} from "./ai-runtime-readiness-identity.js";
+export {
+  parseAiRuntimeReadinessV1,
+  type AiRuntimeReadinessParseResult,
+} from "./ai-runtime-readiness-validation.js";
+export {
+  projectAiOperationReadinessV1,
+  type ProjectAiOperationReadinessOptionsV1,
+} from "./ai-runtime-readiness-projection.js";
+export type { AiRuntimeTrustedFullAttestationV1 } from "./ai-runtime-readiness-trust.js";
+export { validAiOperationReadinessRequirementV1 } from "@southwind-ai/shared";

package/template/packages/shared/index.ts

@@ -23,7 +23,6 @@ export * from "./src/platform-settings.js";
 export * from "./src/profile.js";
 export * from "./src/primitives.js";
 export * from "./src/rbac.js";
-export * from "./src/ruoyi.js";
 export * from "./src/scheduler.js";
 export * from "./src/search-provider.js";
 // @windy-module system.agent begin
@@ -31,3 +30,5 @@ export * from "./src/screenshot-context-digest.js";
 // @windy-module system.agent end
 export * from "./src/stable-key.js";
 export * from "./src/workflow.js";
+
+export * from "./src/license-console-capabilities.js";

package/template/packages/shared/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/shared",
-  "version": "0.2.8",
+  "version": "0.3.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/shared/src/license-console-capabilities.ts

@@ -0,0 +1,163 @@
+import type { LicenseOperatorPermission } from "./license.js";
+
+/** 厂商签发中心独立认证域；不装配到客户 system.license。 */
+export const LICENSE_CONSOLE_CAPABILITIES = {
+  records: {
+    feature: "license.record",
+    permission: "license.record.read",
+    entry: "records",
+    apis: [
+      "GET /api/licenses",
+      "GET /api/licenses/:id",
+      "GET /api/licenses/:id/download",
+      "GET /api/licenses/:id/activation-code",
+      "GET /api/licenses/:id/events",
+      "GET /api/events",
+      "GET /api/customers",
+      "GET /api/customers/:id",
+      "GET /api/projects",
+      "GET /api/projects/:id",
+      "GET /api/contracts",
+      "GET /api/contracts/:id",
+      "GET /api/license-versions",
+      "GET /api/license-versions/:id",
+      "GET /api/nodes",
+      "GET /api/nodes/:id",
+      "GET /api/keys/active",
+      "GET /api/projects/:projectId/contracts",
+      "GET /api/projects/:projectId/nodes",
+      "GET /api/projects/:projectId/license-versions",
+      "GET /api/projects/:projectId/licenses",
+      "GET /api/keys",
+      "GET /api/signing/diagnostics",
+    ],
+    auditActions: ["license.downloaded"],
+  },
+  projects: {
+    feature: "license.project",
+    permission: "license.project.manage",
+    entry: "maintenance",
+    apis: [
+      "POST /api/customers",
+      "POST /api/projects",
+      "POST /api/contracts",
+      "POST /api/license-versions",
+      "POST /api/nodes",
+      "PATCH /api/customers/:id",
+      "PATCH /api/projects/:id",
+      "PATCH /api/contracts/:id",
+      "PATCH /api/license-versions/:id",
+      "PATCH /api/nodes/:id",
+      "PATCH /api/customers/:id/archive",
+      "PATCH /api/projects/:id/archive",
+      "PATCH /api/contracts/:id/archive",
+      "PATCH /api/license-versions/:id/archive",
+      "PATCH /api/nodes/:id/archive",
+    ],
+    auditActions: ["crud.create", "crud.update"],
+  },
+  issuance: {
+    feature: "license.issue",
+    permission: "license.issue",
+    entry: "project-issuance",
+    apis: [
+      "POST /api/projects/:projectId/licenses",
+      "POST /api/projects/:projectId/license-review",
+      "GET /api/projects/:projectId/issuance-requests/:key",
+      "POST /api/licenses",
+      "POST /api/licenses/:id/revocation-marks",
+      "POST /api/licenses/:id/note-corrections",
+    ],
+    auditActions: [
+      "license.issued",
+      "license.replaced",
+      "license.superseded",
+      "license.revocation-marked",
+      "license.note-corrected",
+    ],
+  },
+  keys: {
+    feature: "license.key",
+    permission: "license.key.rotate",
+    entry: "operations",
+    apis: ["POST /api/keys/rotate", "POST /api/keys/:keyId/compatibility"],
+    auditActions: ["license.key.rotated", "license.key.compatibility-declared"],
+  },
+  operators: {
+    feature: "license.operator",
+    permission: "license.operator.manage",
+    entry: "administration",
+    apis: [
+      "GET /api/operators",
+      "POST /api/operators",
+      "PATCH /api/operators/:id",
+    ],
+    auditActions: ["license.operator.created", "license.operator.updated"],
+  },
+  sessions: {
+    feature: "license.session",
+    permission: "license.session.revoke",
+    entry: "administration",
+    apis: ["POST /api/auth/sessions/:id/revoke"],
+    auditActions: ["auth.session.revoke"],
+  },
+  audit: {
+    feature: "license.audit",
+    permission: "license.audit.read",
+    entry: "administration",
+    apis: ["GET /api/audit-logs"],
+    auditActions: [],
+  },
+} as const satisfies Record<
+  string,
+  {
+    feature: string;
+    permission: LicenseOperatorPermission;
+    entry: string;
+    apis: readonly string[];
+    auditActions: readonly string[];
+  }
+>;
+
+export interface LicenseConsoleCapability {
+  feature: string;
+  permission: LicenseOperatorPermission;
+  entry: string;
+  apis: readonly string[];
+  auditActions: readonly string[];
+}
+export function validateLicenseConsoleCapabilities(
+  items: readonly LicenseConsoleCapability[] = Object.values(
+    LICENSE_CONSOLE_CAPABILITIES,
+  ),
+): void {
+  const features = new Set<string>();
+  const permissions = new Set<string>();
+  const apis = new Set<string>();
+  for (const item of items) {
+    if (features.has(item.feature) || permissions.has(item.permission))
+      throw new Error("签发中心能力声明重复");
+    if (
+      item.permission !== item.feature &&
+      !item.permission.startsWith(`${item.feature}.`)
+    )
+      throw new Error("签发中心权限基础 Key 不匹配");
+    features.add(item.feature);
+    permissions.add(item.permission);
+    for (const api of item.apis) {
+      if (apis.has(api)) throw new Error("签发中心 API 声明重复");
+      apis.add(api);
+    }
+  }
+}
+
+export function hasLicenseConsolePermission(
+  permissions: readonly string[],
+  permission: string,
+): boolean {
+  return (
+    Object.values(LICENSE_CONSOLE_CAPABILITIES).some(
+      (item) => item.permission === permission,
+    ) && permissions.includes(permission)
+  );
+}

package/template/packages/shared/src/license-console.ts

@@ -0,0 +1,94 @@
+import type {
+  LicenseContractVersion,
+  LicenseCustomer,
+  LicenseIssueRecord,
+  LicenseNode,
+  LicenseProject,
+  LicenseReplacement,
+  LicenseV1Claims,
+  LicenseVersion,
+} from "./license.js";
+
+export interface LicenseIssueSummary {
+  id: string;
+  customerId: string;
+  projectId: string;
+  contractVersionId: string;
+  nodeId: string;
+  operatorId: string;
+  claims: LicenseV1Claims;
+  targetSoftwareVersion?: string;
+  predecessor?: LicenseReplacement;
+  successor?: LicenseReplacement;
+  revocationMarked: boolean;
+}
+export interface LicenseConsoleCollections {
+  customers: LicenseCustomer;
+  projects: LicenseProject;
+  contracts: LicenseContractVersion;
+  nodes: LicenseNode;
+  "license-versions": LicenseVersion;
+  licenses: LicenseIssueSummary;
+}
+export interface LicenseListQuery {
+  page: number;
+  pageSize: number;
+  q?: string;
+  customerId?: string;
+  projectId?: string;
+  status?: string;
+  contractVersionId?: string;
+  nodeId?: string;
+  machineCode?: string;
+  licenseVersionKey?: string;
+  issuedFrom?: string;
+  issuedTo?: string;
+  expiresFrom?: string;
+  expiresTo?: string;
+  expiresWithinDays?: 7 | 30 | 60;
+}
+export interface LicensePage<T> {
+  items: T[];
+  total: number;
+  page: number;
+  pageSize: number;
+}
+export interface LicenseNewNode {
+  code: string;
+  name: string;
+  purpose?: string;
+  machineCode: string;
+}
+export interface LicenseReviewCommand {
+  contractVersionId: string;
+  nodeId?: string;
+  newNode?: LicenseNewNode;
+  expiresAt: string;
+  softwareVersion: string;
+  replacementOfLicenseId?: string;
+  replacementReason?: string;
+}
+export interface LicenseReviewConfirmation {
+  customer: LicenseCustomer;
+  project: LicenseProject;
+  contract: LicenseContractVersion;
+  licenseVersion: LicenseVersion;
+  node: LicenseNewNode;
+  keyId: string;
+  expiresAt: string;
+  softwareVersion: string;
+  replacementOfLicenseId?: string;
+  replacementReason?: string;
+}
+export interface LicenseReviewResult {
+  reviewDigest: string;
+  confirmation: LicenseReviewConfirmation;
+  blockingReasons: string[];
+}
+export interface LicenseRequestStatus {
+  status: "processing" | "failed" | "completed";
+  licenseId: string;
+  result?: LicenseIssueRecord;
+  error?: { code: string; reason: string };
+  retryAfterSeconds?: number;
+}

package/template/packages/shared/src/license.ts

@@ -1,6 +1,7 @@
 import type { EntityId, ISODateTime } from "./primitives.js";
 
 export * from "./license-legacy.js";
+export * from "./license-console.js";
 
 declare const entitlementKeyBrand: unique symbol;
 declare const licenseVersionKeyBrand: unique symbol;
@@ -132,6 +133,8 @@ export interface LicenseProject {
 }
 
 export interface LicenseContractVersion {
+  predecessorId?: EntityId;
+  issuedCount?: number;
   id: EntityId;
   projectId: EntityId;
   contractNumber: string;
@@ -147,6 +150,7 @@ export interface LicenseContractVersion {
 }
 
 export interface LicenseNode {
+  issuedCount?: number;
   id: EntityId;
   projectId: EntityId;
   code: string;
@@ -200,6 +204,7 @@ export type LicenseOperatorRole =
 
 export type LicenseOperatorPermission =
   | "license.record.read"
+  | "license.audit.read"
   | "license.issue"
   | "license.project.manage"
   | "license.key.rotate"