create-windy 0.6.7 → 0.6.9

package/README.md

@@ -137,7 +137,7 @@ bun run windy update --dry-run
 bun run windy update
 ```
 
-`0.3.17` 是 Starter 更新的最低支持基线。更新器不检查 Git 工作区是否干净：只规划
+`0.6.6` 是 Starter 更新的最低支持基线。更新器不检查 Git 工作区是否干净：只规划
 目标版本实际变更的受管文件，从 source Project Lock 指向的精确 npm artifact 重建
 Base，并以 Base/Ours/Theirs 合并共享脚手架。未触及的业务修改不会进入更新判断；
 `package.json` 使用字段级合并；已发布 migration 只允许追加；冲突发生时不写项目，
@@ -146,7 +146,7 @@ Base，并以 Base/Ours/Theirs 合并共享脚手架。未触及的业务修改
 
 受管清单使用 schema v4：`hash` 冻结下游实际正文，`artifactHash` 在两者不同时记录
 公开模板基线；无正文的 missing tombstone 记住客户删除的 `project-owned` 路径。
-低于 `0.3.17` 的 Project Lock、旧清单 schema、损坏的 artifact lineage 或 recipe
+低于 `0.6.6` 的 Project Lock、旧清单 schema、损坏的 artifact lineage 或 recipe
 缺口都会在写文件前 fail closed，不提供旧状态的自动迁移路径。
 
 生成后的整个 `apps/web/src` 与整个 `apps/server/src/app` 都是 project-owned。普通

package/dist/cli.js

@@ -3480,7 +3480,8 @@ browser-safe \`./admin\` \u4E0E project-owned \u7684
 \`apps/web/src/app/web-composition.ts\` \u88C5\u914D\u9875\u9762\uFF0C\u4E0D\u590D\u5236\u7B2C\u4E8C\u4EFD Feature\u3001Permission
 \u6216\u8DEF\u7531\u6E05\u5355\u3002\u6574\u4E2A \`apps/web/src\` \u4E0E\u6574\u4E2A \`apps/server/src/app\` \u90FD\u662F
 project-owned\uFF0C\u5BA2\u6237\u53EF\u4EE5\u4FEE\u6539 Router\u3001layout\u3001\u9875\u9762\u3001Host \u548C Server \u7EC4\u5408\uFF1B\u666E\u901A
-\`windy update\` \u4E0D\u4F1A\u8986\u76D6\u6216\u4E09\u65B9\u5408\u5E76\u8FD9\u4E9B\u6587\u4EF6\u3002
+\`windy update\` \u4E0D\u4F1A\u6574\u6587\u4EF6\u8986\u76D6\u6216\u4E09\u65B9\u5408\u5E76\u8FD9\u4E9B\u6587\u4EF6\u3002\u7248\u672C recipe \u53EA\u6709\u5728\u663E\u5F0F\u767B\u8BB0
+path \u4E0E\u786E\u5B9A\u6027\u8BED\u4E49\u951A\u70B9\u540E\u624D\u80FD\u505A\u5E42\u7B49\u8FFD\u52A0\uFF1B\u951A\u70B9\u7F3A\u5931\u6216\u4E0D\u552F\u4E00\u65F6\u5FC5\u987B\u5728\u5199\u5165\u524D\u505C\u6B62\u3002
 
 \u7CBE\u786E\u751F\u6210\u6765\u6E90\u4FDD\u7559\u5728 \`.windy/generation.json\`\u3002\u5F53\u524D\u7248\u672C\u5DF2\u63D0\u4F9B\u53EF\u56DE\u6EDA\u7684
 \`windy update\` \u4E0E \`windy module list/enable/disable\`\u3002\u5F53\u524D\u5185\u7F6E\u6A21\u5757\u4ECD\u4F9D\u8D56
@@ -3514,7 +3515,8 @@ ${includeOxc ? "\u63D0\u4EA4\u65F6 Husky \u4F1A\u901A\u8FC7 lint-staged \u4E0E O
 \u66F4\u65B0\u524D\u65E0\u9700\u63D0\u4EA4\u3001\u6682\u5B58\u6216\u6E05\u7406\u4E1A\u52A1\u6539\u52A8\u3002\`--dry-run\` \u53EA\u751F\u6210\u8BA1\u5212\uFF0C\u4E0D\u5199\u9879\u76EE\uFF1B\u65E0\u5173 WIP
 \u4FDD\u6301\u539F\u6837\uFF0C\u547D\u4E2D\u540C\u4E00\u8DEF\u5F84\u65F6\u6309\u51BB\u7ED3\u5FEB\u7167\u4E0E\u4E09\u65B9\u5408\u5E76 fail closed\u3002\u6B63\u5F0F\u66F4\u65B0\u5148\u5907\u4EFD\uFF0C\u518D\u505A
 package \u5B57\u6BB5\u7EA7\u5408\u5E76\u3001\u5171\u4EAB\u811A\u624B\u67B6\u4E09\u65B9\u5408\u5E76\u4E0E\u5B8C\u6574\u9A8C\u8BC1\u3002\u6574\u4E2A \`apps/web/src\` \u548C
-\`apps/server/src/app\` \u4FDD\u6301\u9879\u76EE\u7248\u672C\u3002\u4EFB\u4F55\u51B2\u7A81\u90FD\u4F1A\u5728\u5199\u5165\u524D\u4E2D\u6B62\uFF0C\u6A21\u5757\u542F\u505C\u5728\u4EA4\u4E92
+\`apps/server/src/app\` \u9ED8\u8BA4\u4FDD\u6301\u9879\u76EE\u7248\u672C\uFF1B\u5DF2\u767B\u8BB0\u7248\u672C recipe \u53EA\u4FEE\u6539\u5176\u58F0\u660E\u7684\u7A84\u951A\u70B9\u3002
+\u4EFB\u4F55\u51B2\u7A81\u90FD\u4F1A\u5728\u5199\u5165\u524D\u4E2D\u6B62\uFF0C\u6A21\u5757\u542F\u505C\u5728\u4EA4\u4E92
 \u7EC8\u7AEF\u786E\u8BA4\uFF1BCI\u3001Agent \u6216\u5176\u5B83\u975E TTY \u73AF\u5883\u5FC5\u987B\u663E\u5F0F\u4F20\u5165 \`--yes\`\u3002
 \u65E0\u5E76\u53D1\u53D8\u5316\u7684\u9A8C\u8BC1\u5931\u8D25\u4F1A\u81EA\u52A8\u56DE\u6EDA\uFF1B\u4E2D\u65AD\u6062\u590D\u4F7F\u7528
 \`bun run windy doctor --repair\`\u3002\u8BE5\u547D\u4EE4\u5728\u63D0\u4EA4\u70B9\u524D\u4FDD\u7559\u5E76\u53D1\u7F16\u8F91\u5E76\u56DE\u6EDA\u5176\u4F59\u8DEF\u5F84\uFF0C
@@ -3694,6 +3696,7 @@ var templateDocumentationFiles = [
   "docs/development/custom-error-pages.md",
   "docs/development/custom-login-page.md",
   "docs/development/module-lifecycle.md",
+  "docs/development/ui-component-gallery.md",
   "docs/license/license-offline-activation-code.md",
   "docs/operations/observability.md",
   "docs/operations/incremental-delivery.md",
@@ -7716,82 +7719,22 @@ async function diagnoseProject(projectDirectory, repair = false) {
 }
 
 // src/update/recipes.ts
-var minimumSupportedUpdateVersion = "0.3.17";
+var minimumSupportedUpdateVersion = "0.6.6";
 var recipes = [
   {
-    id: "starter-0.3.17-to-0.3.18",
-    from: "0.3.17",
-    to: "0.3.18"
-  },
-  {
-    id: "starter-0.3.18-to-0.3.19",
-    from: "0.3.18",
-    to: "0.3.19"
-  },
-  {
-    id: "starter-0.3.19-to-0.4.0",
-    from: "0.3.19",
-    to: "0.4.0"
-  },
-  {
-    id: "starter-0.4.0-to-0.4.1",
-    from: "0.4.0",
-    to: "0.4.1"
-  },
-  {
-    id: "starter-0.4.1-to-0.5.0",
-    from: "0.4.1",
-    to: "0.5.0"
-  },
-  {
-    id: "starter-0.5.0-to-0.5.1",
-    from: "0.5.0",
-    to: "0.5.1"
-  },
-  {
-    id: "starter-0.5.1-to-0.5.2",
-    from: "0.5.1",
-    to: "0.5.2"
-  },
-  {
-    id: "starter-0.5.2-to-0.6.0",
-    from: "0.5.2",
-    to: "0.6.0"
-  },
-  {
-    id: "starter-0.6.0-to-0.6.1",
-    from: "0.6.0",
-    to: "0.6.1"
-  },
-  {
-    id: "starter-0.6.1-to-0.6.2",
-    from: "0.6.1",
-    to: "0.6.2"
-  },
-  {
-    id: "starter-0.6.2-to-0.6.3",
-    from: "0.6.2",
-    to: "0.6.3"
-  },
-  {
-    id: "starter-0.6.3-to-0.6.4",
-    from: "0.6.3",
-    to: "0.6.4"
-  },
-  {
-    id: "starter-0.6.4-to-0.6.5",
-    from: "0.6.4",
-    to: "0.6.5"
+    id: "starter-0.6.6-to-0.6.7",
+    from: "0.6.6",
+    to: "0.6.7"
   },
   {
-    id: "starter-0.6.5-to-0.6.6",
-    from: "0.6.5",
-    to: "0.6.6"
+    id: "starter-0.6.7-to-0.6.8",
+    from: "0.6.7",
+    to: "0.6.8"
   },
   {
-    id: "starter-0.6.6-to-0.6.7",
-    from: "0.6.6",
-    to: "0.6.7"
+    id: "starter-0.6.8-to-0.6.9",
+    from: "0.6.8",
+    to: "0.6.9"
   }
 ];
 function resolveRecipeChain(sourceVersion, targetVersion) {
@@ -8246,7 +8189,7 @@ async function deriveDockerfilePlans(files, snapshots, paths, targetWorkspaceMan
       continue;
     const source = new TextDecoder().decode(dockerSource);
     if (!hasDockerfileCopyAnchors(source, target)) {
-      dockerPlan.conflict = "Dockerfile \u7F3A\u5C11 0.3.17 \u57FA\u7EBF\u7684 COPY \u951A\u70B9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u8FC1\u79FB\u65E7\u683C\u5F0F";
+      dockerPlan.conflict = "Dockerfile \u7F3A\u5C11 0.6.6 \u57FA\u7EBF\u7684 COPY \u951A\u70B9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u8FC1\u79FB\u65E7\u683C\u5F0F";
       continue;
     }
     let next;
@@ -9153,8 +9096,123 @@ function conflict(path2, reason, expectedProjectContent) {
   };
 }
 
+// src/update/recipe-project-owned.ts
+var managedPathsByRecipe = {
+  "starter-0.6.8-to-0.6.9": [
+    "apps/web/src/router/index.ts",
+    "apps/web/src/router/platform-admin-route-bindings.ts"
+  ]
+};
+function recipeManagedProjectOwnedPaths(recipes2) {
+  return new Set(recipes2.flatMap((recipe) => managedPathsByRecipe[recipe] ?? []));
+}
+async function planRecipeProjectOwned(input) {
+  if (!input.ours) {
+    return conflict2(input, "\u7248\u672C recipe \u6240\u9700\u7684\u9879\u76EE\u951A\u70B9\u7F3A\u5931");
+  }
+  const source = new TextDecoder().decode(input.ours);
+  const transformed = transformProjectAdminAnchor(input.path, source);
+  if ("error" in transformed)
+    return conflict2(input, transformed.error);
+  if (transformed.content === source) {
+    return preserve(input, "\u5DF2\u5305\u542B\u7248\u672C recipe \u76EE\u6807\u5185\u5BB9");
+  }
+  return update(input, new TextEncoder().encode(transformed.content));
+}
+function transformProjectAdminAnchor(path2, source) {
+  if (path2 === "apps/web/src/router/index.ts") {
+    return addComponentPageLoader(source);
+  }
+  if (path2 === "apps/web/src/router/platform-admin-route-bindings.ts") {
+    return addComponentRouteBinding(source);
+  }
+  return { error: `\u7248\u672C recipe \u672A\u767B\u8BB0\u9879\u76EE\u951A\u70B9\uFF1A${path2}` };
+}
+function addComponentPageLoader(source) {
+  if (/^\s*"ui-components"\s*:/m.test(source))
+    return { content: source };
+  const declaration = source.indexOf("const platformAdminPageComponents");
+  const start = source.indexOf("= {", declaration);
+  const end = source.indexOf(`
+};`, start);
+  if (declaration < 0 || start < 0 || end < 0) {
+    return { error: "\u627E\u4E0D\u5230 platformAdminPageComponents \u9879\u76EE\u951A\u70B9" };
+  }
+  const block = source.slice(start, end);
+  const profiles = [...block.matchAll(/^(\s*)profile:\s*.*,$/gm)];
+  if (profiles.length !== 1) {
+    return { error: "platformAdminPageComponents profile \u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const profile = profiles[0];
+  const insertion = `${profile[0]}
+${profile[1]}"ui-components": () => import("@/pages/ui/UiComponentPage.vue"),`;
+  return {
+    content: source.slice(0, start) + block.replace(profile[0], insertion) + source.slice(end)
+  };
+}
+function addComponentRouteBinding(source) {
+  const unionStart = source.indexOf("export type PlatformAdminPageKey =");
+  const interfaceStart = source.indexOf("export interface PlatformAdminRouteBinding", unionStart);
+  if (unionStart < 0 || interfaceStart < 0) {
+    return { error: "\u627E\u4E0D\u5230 PlatformAdminPageKey \u9879\u76EE\u951A\u70B9" };
+  }
+  let content = source;
+  const union = content.slice(unionStart, interfaceStart);
+  if (!union.includes('"ui-components"')) {
+    const semicolon = content.lastIndexOf(";", interfaceStart);
+    if (semicolon < unionStart) {
+      return { error: "PlatformAdminPageKey \u7ED3\u675F\u951A\u70B9\u7F3A\u5931" };
+    }
+    content = `${content.slice(0, semicolon)}
+  | "ui-components"${content.slice(semicolon)}`;
+  }
+  if (content.includes('routeKey: "system.ui-components"')) {
+    return { content };
+  }
+  const features = [
+    ...content.matchAll(/^(\s*)\{ routeKey: "system\.feature", page: "resource", resourceKey: "features" \},$/gm)
+  ];
+  if (features.length !== 1) {
+    return { error: "system.feature Admin Route \u951A\u70B9\u4E0D\u552F\u4E00" };
+  }
+  const feature = features[0];
+  return {
+    content: content.replace(feature[0], `${feature[0]}
+${feature[1]}{ routeKey: "system.ui-components", page: "ui-components" },`)
+  };
+}
+function preserve(input, reason) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason,
+    expectedProjectContent: input.expected
+  };
+}
+function update(input, content) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "update",
+    reason: "\u7248\u672C recipe \u66F4\u65B0\u9879\u76EE Admin \u6269\u5C55\u951A\u70B9",
+    expectedProjectContent: input.expected,
+    content
+  };
+}
+function conflict2(input, message) {
+  return {
+    path: input.path,
+    ownership: "project-owned",
+    action: "preserve",
+    reason: "\u5BA2\u6237\u5DF2\u4FEE\u6539",
+    expectedProjectContent: input.expected,
+    conflict: message
+  };
+}
+
 // src/update/planner-file.ts
-async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false, forcePlatformBaseline = false) {
+async function planFile(path2, baseRoot, targetRoot, source, target, ours, provenance, targetContentOverride, manageGeneratedProjectOwned = false, forcePlatformBaseline = false, manageRecipeProjectOwned = false) {
   const [base, theirs] = await Promise.all([
     readOptional(join23(baseRoot, path2)),
     targetContentOverride ? Promise.resolve(targetContentOverride) : readOptional(join23(targetRoot, path2))
@@ -9162,6 +9220,9 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   const ownership = source?.ownership ?? target?.ownership ?? classifyOwnership(path2);
   const expected = expectationForSnapshot(ours);
   if (ownership === "project-owned") {
+    if (manageRecipeProjectOwned) {
+      return planRecipeProjectOwned({ path: path2, ours, expected });
+    }
     if (manageGeneratedProjectOwned) {
       return planGeneratedProjectOwned(path2, source, target, ours, theirs, expected);
     }
@@ -9169,26 +9230,26 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (path2.startsWith("packages/database/drizzle/") && path2.endsWith(".sql")) {
     if (source && !target) {
-      return conflict2(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
+      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u5220\u9664", expected);
     }
     if (source && target && source.hash !== target.hash) {
-      return conflict2(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
+      return conflict3(path2, ownership, "\u5DF2\u53D1\u5E03 migration \u4E0D\u53EF\u6539\u5199\uFF0C\u53EA\u80FD\u8FFD\u52A0\u65B0\u6587\u4EF6", expected);
     }
   }
   if (!source && target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "create", "\u76EE\u6807\u7248\u672C\u65B0\u589E", expected, theirs);
     }
-    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict2(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
+    return theirs && hashContent(ours) === target.hash ? readyPlannedFile(path2, ownership, "preserve", "\u5DF2\u5305\u542B\u76EE\u6807\u5185\u5BB9", expected) : conflict3(path2, ownership, "\u76EE\u6807\u7248\u672C\u65B0\u589E\u8DEF\u5F84\u5DF2\u88AB\u9879\u76EE\u5360\u7528", expected);
   }
   if (source && !target) {
     if (!ours) {
       return readyPlannedFile(path2, ownership, "preserve", "\u9879\u76EE\u5DF2\u5220\u9664", expected);
     }
-    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict2(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
+    return hashContent(ours) === source.hash ? readyPlannedFile(path2, ownership, "delete", "\u76EE\u6807\u7248\u672C\u5220\u9664", expected) : conflict3(path2, ownership, "\u5BA2\u6237\u4FEE\u6539\u540E Windy \u53C8\u5220\u9664", expected);
   }
   if (!source || !target || !ours || !theirs) {
-    return conflict2(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
+    return conflict3(path2, ownership, "\u6587\u4EF6\u72B6\u6001\u4E0D\u5B8C\u6574\uFF0C\u4E0D\u80FD\u5B89\u5168\u63A8\u65AD", expected);
   }
   const oursChanged = hashContent(ours) !== source.hash;
   const sourceArtifactHash = artifactHashOf(source);
@@ -9202,7 +9263,7 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   });
   if (forceTargetBaseline && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict2(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (forceTargetBaseline) {
     return readyPlannedFile(path2, ownership, "update", "\u5F3A\u5236\u91C7\u7528\u76EE\u6807\u5E73\u53F0\u57FA\u7EBF", expected, theirs);
@@ -9212,11 +9273,11 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (targetChanged && path2.endsWith("package.json") && base) {
     const merged = mergePackageJson(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict2(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "package.json \u5B57\u6BB5\u7EA7\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, `\u5B57\u6BB5\u51B2\u7A81\uFF1A${merged.conflicts.join("\u3001")}`, expected);
   }
   if (!oursChanged && targetChanged && adoptedProjectDelta && base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict2(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76\u5DF2\u91C7\u7EB3\u9879\u76EE\u589E\u91CF", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
   if (!oursChanged) {
     return readyPlannedFile(path2, ownership, "update", "\u4EC5 Windy \u4FEE\u6539", expected, theirs);
@@ -9229,9 +9290,9 @@ async function planFile(path2, baseRoot, targetRoot, source, target, ours, prove
   }
   if (base) {
     const merged = await mergeTextFile(base, ours, theirs);
-    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict2(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
+    return merged.content ? readyPlannedFile(path2, ownership, "update", "\u4E09\u65B9\u5408\u5E76", expected, merged.content) : conflict3(path2, ownership, merged.conflict || "\u4E09\u65B9\u5408\u5E76\u5931\u8D25", expected);
   }
-  return conflict2(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
+  return conflict3(path2, ownership, "\u5BA2\u6237\u548C Windy \u5747\u5DF2\u4FEE\u6539", expected);
 }
 function shouldForcePlatformBaseline(input) {
   return input.forcePlatformBaseline && !input.oursChanged && input.base !== undefined && hashContent(input.base) !== input.sourceArtifactHash;
@@ -9252,7 +9313,7 @@ function readyPlannedFile(path2, ownership, action, reason, expectedProjectConte
 function expectationForSnapshot(content) {
   return content ? { kind: "hash", value: hashContent(content) } : { kind: "missing" };
 }
-function conflict2(path2, ownership, reason, expectedProjectContent) {
+function conflict3(path2, ownership, reason, expectedProjectContent) {
   return {
     path: path2,
     ownership,
@@ -9426,6 +9487,7 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
   const versionRecipes = (dependencies.resolveVersionRecipes ?? resolveRecipeChain)(provenance.windyVersion, targetVersion);
   const moduleRecipes = resolveModuleRecipeIds(request);
   const recipes2 = [...versionRecipes.map(({ id }) => id), ...moduleRecipes];
+  const recipeProjectOwnedPaths = recipeManagedProjectOwnedPaths(recipes2);
   const [rawSourceManifest, rawTargetManifest] = await Promise.all([
     readManagedFilesManifest(request.projectDirectory),
     readManagedFilesManifest(artifactSet.targetDirectory)
@@ -9472,7 +9534,8 @@ async function createUpdatePlan(request, artifacts, dependencies = {}) {
     artifactSet,
     provenance,
     manageGeneratedProjectOwned: request.targetModules !== undefined,
-    forcePlatformBaseline: request.forcePlatformBaseline === true
+    forcePlatformBaseline: request.forcePlatformBaseline === true,
+    recipeProjectOwnedPaths
   });
   preserveTestsForExistingProjectOwnedSources(files, sourceEntries);
   await deriveDockerfilePlans(files, projectSnapshots, new Set([
@@ -9551,7 +9614,7 @@ async function planFiles(input) {
     } else if (forcedContent) {
       files.push(readyPlannedFile(path2, input.targetEntries.get(path2)?.ownership ?? input.sourceEntries.get(path2)?.ownership ?? classifyOwnership(path2), "update", "\u5408\u5E76\u5E73\u53F0\u4E0E\u4E0B\u6E38 migration \u5386\u53F2", expected, forcedContent));
     } else {
-      files.push(await planFile(path2, input.artifactSet.baseDirectory, input.artifactSet.targetDirectory, input.sourceEntries.get(path2), input.targetEntries.get(path2), ours, input.provenance, input.migrations.contentOverrides.get(path2), input.manageGeneratedProjectOwned, input.forcePlatformBaseline));
+      files.push(await planFile(path2, input.artifactSet.baseDirectory, input.artifactSet.targetDirectory, input.sourceEntries.get(path2), input.targetEntries.get(path2), ours, input.provenance, input.migrations.contentOverrides.get(path2), input.manageGeneratedProjectOwned, input.forcePlatformBaseline, input.recipeProjectOwnedPaths.has(path2)));
     }
   }
   return files;
@@ -10072,9 +10135,9 @@ function assertEnabledConflicts(target, catalog) {
   for (const [name, enabled] of target) {
     if (!enabled)
       continue;
-    const conflict3 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
-    if (conflict3)
-      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict3}`);
+    const conflict4 = catalog.get(name).conflicts.find((candidate) => target.get(candidate));
+    if (conflict4)
+      throw new Error(`\u6A21\u5757\u51B2\u7A81\uFF1A${name} \u4E0E ${conflict4}`);
   }
 }
 function assertCompatible(version, range, name) {
@@ -10089,7 +10152,7 @@ function reconcileProjectModuleRegistryPlan(plan, current, lifecycle) {
   if (!registryFile) {
     throw new Error("\u6A21\u5757\u751F\u547D\u5468\u671F\u8BA1\u5212\u7F3A\u5C11 project-owned \u88C5\u914D\u9009\u62E9");
   }
-  plan.conflicts = plan.conflicts.filter((conflict3) => !conflict3.startsWith(`${projectModuleRegistryPath}\uFF1A`));
+  plan.conflicts = plan.conflicts.filter((conflict4) => !conflict4.startsWith(`${projectModuleRegistryPath}\uFF1A`));
   delete registryFile.conflict;
   if (lifecycle.action === "update") {
     registryFile.action = "preserve";
@@ -10519,8 +10582,8 @@ function printModulePlan(plan, log) {
   for (const file of changed) {
     log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
   }
-  for (const conflict3 of plan.conflicts)
-    log(`  conflict ${conflict3}`);
+  for (const conflict4 of plan.conflicts)
+    log(`  conflict ${conflict4}`);
 }
 function hasChanges(lifecycle) {
   return lifecycle.addedModules.length > 0 || lifecycle.updatedModules.length > 0 || lifecycle.removedModules.length > 0;
@@ -10692,8 +10755,8 @@ function printPlan(plan) {
   console.log(`\u8BA1\u5212\u6539\u52A8\uFF1A${changed.length} \u4E2A\u6587\u4EF6\uFF1B\u51B2\u7A81\uFF1A${plan.conflicts.length}`);
   for (const file of changed)
     console.log(`  ${file.action.padEnd(6)} ${file.path}\uFF08${file.reason}\uFF09`);
-  for (const conflict3 of plan.conflicts)
-    console.log(`  conflict ${conflict3}`);
+  for (const conflict4 of plan.conflicts)
+    console.log(`  conflict ${conflict4}`);
   if (plan.detachedToolchain)
     console.log("Oxc\uFF1A\u68C0\u6D4B\u5230\u5BA2\u6237\u63A5\u7BA1\uFF0C\u76F8\u5173\u914D\u7F6E\u4FDD\u6301\u4E0D\u53D8");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-windy",
-  "version": "0.6.7",
+  "version": "0.6.9",
   "description": "创建单组织、单租户、私有部署优先的 Windy 企业 Dashboard Starter",
   "type": "module",
   "bin": {

package/template/.windy-template.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
-  "templateCommit": "dcc27b44de561eb3b4e6f9aea7869ba0f4299a62",
-  "generatorVersion": "0.6.7",
+  "templateCommit": "9176c4dc2db60979b5ce7fd89639da90648c49b9",
+  "generatorVersion": "0.6.9",
   "modules": [
     {
       "name": "system",

package/template/README.md

@@ -132,7 +132,8 @@ browser-safe `./admin` 与 project-owned 的
 `apps/web/src/app/web-composition.ts` 装配页面，不复制第二份 Feature、Permission
 或路由清单。整个 `apps/web/src` 与整个 `apps/server/src/app` 都是
 project-owned，客户可以修改 Router、layout、页面、Host 和 Server 组合；普通
-`windy update` 不会覆盖或三方合并这些文件。
+`windy update` 不会整文件覆盖或三方合并这些文件。版本 recipe 只有在显式登记
+path 与确定性语义锚点后才能做幂等追加；锚点缺失或不唯一时必须在写入前停止。
 
 精确生成来源保留在 `.windy/generation.json`。当前版本已提供可回滚的
 `windy update` 与 `windy module list/enable/disable`。当前内置模块仍依赖
@@ -166,7 +167,8 @@ bun run format
 更新前无需提交、暂存或清理业务改动。`--dry-run` 只生成计划，不写项目；无关 WIP
 保持原样，命中同一路径时按冻结快照与三方合并 fail closed。正式更新先备份，再做
 package 字段级合并、共享脚手架三方合并与完整验证。整个 `apps/web/src` 和
-`apps/server/src/app` 保持项目版本。任何冲突都会在写入前中止，模块启停在交互
+`apps/server/src/app` 默认保持项目版本；已登记版本 recipe 只修改其声明的窄锚点。
+任何冲突都会在写入前中止，模块启停在交互
 终端确认；CI、Agent 或其它非 TTY 环境必须显式传入 `--yes`。
 无并发变化的验证失败会自动回滚；中断恢复使用
 `bun run windy doctor --repair`。该命令在提交点前保留并发编辑并回滚其余路径，

package/template/apps/agent-server/README.md

@@ -1,6 +1,6 @@
-# Southwind AI Agent Server
+# Windy Agent Server
 
-Python 3.12 Agent 运行时。HTTP 层只公开 Southwind AI 的 canonical Agent 契约；真实业务
+Python 3.12 Agent 运行时。HTTP 层只公开 Windy 的 canonical Agent 契约；真实业务
 Run 在内部通过 Google ADK 2.5 的 Runner、Session、LlmAgent 和 Event 执行，ADK 类型不会
 越过 `AgentEngineAdapter`。模型调用继续复用受治理的 OpenAI-compatible
 `/chat/completions` Provider。
@@ -64,12 +64,12 @@ HTTP。Provider 请求包含连接和总超时、响应大小限制、错误脱
 readiness。缺少 URL/Model 时回退
 未配置的 `AdkEngineAdapter` 并返回 unavailable，不调用模型。测试另使用
 `DeterministicEngineAdapter`。每个 ADK Tool 只声明 Operation 已允许的 Key；其执行
-函数只回调 Southwind AI Tool Host，并携带当前 Run 的 opaque Execution Grant。
+函数只回调 Windy Tool Host，并携带当前 Run 的 opaque Execution Grant。
 
 未设置 `AGENT_RUN_STORE_PATH` 时使用的 `InMemoryRunStore` **仅用于 deterministic
 测试**。配置路径后使用有界 SQLite Store，可在单副本重启后保留 Run/Event/Result 和
 cursor；多副本部署仍必须替换为共享 Store。Execution Grant 与 Tool 授权由
-Southwind AI Server 签发和复核，Agent Server 不能自行扩大 Operation 的
+Windy Server 签发和复核，Agent Server 不能自行扩大 Operation 的
 `allowedToolKeys`。
 
 每次实际 `/chat/completions` HTTP 调用前，Runtime 会对 Manifest 允许的输入 JSON

package/template/apps/server/src/data-access/drizzle-predicate.ts

@@ -3,12 +3,16 @@ import type { DataScopeQuerySpecification } from "./query-specification.js";
 
 export class DataScopeBindingError extends Error {}
 
+export interface DrizzleDataScopeColumn {
+  getSQL(): unknown;
+}
+
 export interface DrizzleDataScopeBinding {
-  readonly ownerId?: AnyColumn;
+  readonly ownerId?: DrizzleDataScopeColumn;
   readonly tenant?:
-    | { readonly mode: "column"; readonly column: AnyColumn }
+    | { readonly mode: "column"; readonly column: DrizzleDataScopeColumn }
     | { readonly mode: "fixed"; readonly tenantId: string };
-  readonly dimensions?: Readonly<Record<string, AnyColumn>>;
+  readonly dimensions?: Readonly<Record<string, DrizzleDataScopeColumn>>;
 }
 
 export function compileDrizzleDataScopePredicate(
@@ -28,13 +32,13 @@ export function compileDrizzleDataScopePredicate(
         if (tenant.tenantId === branch.tenantId) return undefined;
         continue;
       }
-      predicates.push(eq(tenant.column, branch.tenantId));
+      predicates.push(eq(drizzleColumn(tenant.column), branch.tenantId));
     }
     if (branch.kind === "owner") {
       if (!binding.ownerId) {
         throw new DataScopeBindingError("scope binding missing ownerId");
       }
-      predicates.push(eq(binding.ownerId, branch.ownerId));
+      predicates.push(eq(drizzleColumn(binding.ownerId), branch.ownerId));
     }
     if (branch.kind === "dimension") {
       const column = binding.dimensions?.[branch.dimension];
@@ -43,8 +47,14 @@ export function compileDrizzleDataScopePredicate(
           `scope binding missing dimension: ${branch.dimension}`,
         );
       }
-      if (branch.values.length) predicates.push(inArray(column, branch.values));
+      if (branch.values.length) {
+        predicates.push(inArray(drizzleColumn(column), branch.values));
+      }
     }
   }
   return or(...predicates) || sql<boolean>`false`;
 }
+
+function drizzleColumn(column: DrizzleDataScopeColumn): AnyColumn {
+  return column as unknown as AnyColumn;
+}

package/template/apps/server/src/runtime-development.ts

@@ -36,6 +36,7 @@ export function developmentAdminActor(): RequestActor {
       "system.dict.manage",
       "system.feature.read",
       "system.feature.manage",
+      "system.ui-components.read",
       "system.search.read",
       "system.search.manage",
       "system.settings.read",

package/template/apps/web/src/layout/AppSidebar.vue

@@ -52,6 +52,7 @@ interface NavigationGroup {
 const iconMap: Record<string, Component> = {
   activity: ActivityIcon,
   bell: BellIcon,
+  blocks: BlocksIcon,
   "layout-dashboard": LayoutDashboardIcon,
   "book-open": BookOpenIcon,
   "building-2": Building2Icon,

package/template/apps/web/src/pages/ui/UiComponentPage.vue

@@ -0,0 +1,7 @@
+<script setup lang="ts">
+import UiComponentGallery from "./components/UiComponentGallery.vue";
+</script>
+
+<template>
+  <UiComponentGallery />
+</template>