create-windy 0.8.3 → 0.10.0

package/template/packages/database/drizzle/meta/_journal.json

@@ -449,6 +449,34 @@
       "when": 1789011354550,
       "tag": "0063_license_project_lifecycle",
       "breakpoints": true
+    },
+    {
+      "idx": 64,
+      "version": "7",
+      "when": 1793213711851,
+      "tag": "0064_dsh_skills_diagnostics",
+      "breakpoints": true
+    },
+    {
+      "idx": 65,
+      "version": "7",
+      "when": 1793897949256,
+      "tag": "0065_durable_job_lease_snapshot_lookup",
+      "breakpoints": true
+    },
+    {
+      "idx": 66,
+      "version": "7",
+      "when": 1793979537210,
+      "tag": "0066_agent_source_sequence_bigint",
+      "breakpoints": true
+    },
+    {
+      "idx": 67,
+      "version": "7",
+      "when": 1793983613438,
+      "tag": "0067_media_runtime_access",
+      "breakpoints": true
     }
   ]
 }

package/template/packages/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/database",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -15,8 +15,8 @@
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "dependencies": {
-    "@southwind-ai/shared": "workspace:^0.3.0",
-    "drizzle-orm": "^0.45.2"
+    "@southwind-ai/shared": "workspace:^0.3.2",
+    "drizzle-orm": "^0.45.4"
   },
   "exports": {
     ".": "./index.ts"
@@ -25,6 +25,6 @@
     "access": "public"
   },
   "devDependencies": {
-    "pg": "^8.22.0"
+    "pg": "^8.23.1"
   }
 }

package/template/packages/database/src/schema/agent-session.ts

@@ -1,5 +1,6 @@
 import { sql } from "drizzle-orm";
 import {
+  bigint,
   check,
   doublePrecision,
   index,
@@ -148,7 +149,7 @@ export const agentContextSources = pgTable(
     sourceKind: varchar("source_kind", { length: 48 }).notNull(),
     sourceId: varchar("source_id", { length: 256 }).notNull(),
     sourceVersion: varchar("source_version", { length: 160 }).notNull(),
-    sourceSequence: integer("source_sequence").notNull(),
+    sourceSequence: bigint("source_sequence", { mode: "number" }).notNull(),
     sourceDigest: varchar("source_digest", { length: 71 }).notNull(),
     validityStatus: varchar("validity_status", { length: 16 }).notNull(),
     validityReason: varchar("validity_reason", { length: 32 }),
@@ -238,7 +239,7 @@ export const agentMemorySources = pgTable(
     sourceKind: varchar("source_kind", { length: 48 }).notNull(),
     sourceId: varchar("source_id", { length: 256 }).notNull(),
     sourceVersion: varchar("source_version", { length: 160 }).notNull(),
-    sourceSequence: integer("source_sequence").notNull(),
+    sourceSequence: bigint("source_sequence", { mode: "number" }).notNull(),
     sourceDigest: varchar("source_digest", { length: 71 }).notNull(),
     validityStatus: varchar("validity_status", { length: 16 }).notNull(),
     validityReason: varchar("validity_reason", { length: 32 }),
@@ -270,7 +271,7 @@ export const agentSourceInvalidations = pgTable(
     sourceKind: varchar("source_kind", { length: 48 }).notNull(),
     sourceId: varchar("source_id", { length: 256 }).notNull(),
     sourceVersion: varchar("source_version", { length: 160 }).notNull(),
-    sequence: integer("sequence").notNull(),
+    sequence: bigint("sequence", { mode: "number" }).notNull(),
     sourceDigest: varchar("source_digest", { length: 71 }),
     cause: varchar("cause", { length: 32 }).notNull(),
     status: varchar("status", { length: 24 }).notNull().default("pending"),

package/template/packages/database/src/schema/agent-skills.ts

@@ -0,0 +1,65 @@
+import {
+  boolean,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  primaryKey,
+  timestamp,
+  varchar,
+} from "drizzle-orm/pg-core";
+import type {
+  AgentSkillBundle,
+  AgentSkillVersion,
+  AuditEvent,
+} from "@southwind-ai/shared";
+
+export const agentSkillVersions = pgTable(
+  "agent_skill_versions",
+  {
+    tenantId: varchar("tenant_id", { length: 64 }).notNull(),
+    skillKey: varchar("skill_key", { length: 64 }).notNull(),
+    version: integer("version").notNull(),
+    metadata: jsonb("metadata").$type<AgentSkillVersion>().notNull(),
+    bundle: jsonb("bundle").$type<AgentSkillBundle>().notNull(),
+    auditCommitted: boolean("audit_committed").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    primaryKey({ columns: [table.tenantId, table.skillKey, table.version] }),
+    index("idx_agent_skill_catalog").on(
+      table.tenantId,
+      table.auditCommitted,
+      table.skillKey,
+    ),
+  ],
+);
+
+export const agentSkillMutations = pgTable(
+  "agent_skill_mutations",
+  {
+    tenantId: varchar("tenant_id", { length: 64 }).notNull(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    idempotencyKey: varchar("idempotency_key", { length: 160 }).notNull(),
+    requestDigest: varchar("request_digest", { length: 71 }).notNull(),
+    skillKey: varchar("skill_key", { length: 64 }).notNull(),
+    version: integer("version").notNull(),
+    result: jsonb("result").$type<AgentSkillVersion>().notNull(),
+    audit: jsonb("audit").$type<AuditEvent>().notNull(),
+    auditCommitted: boolean("audit_committed").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    primaryKey({
+      columns: [table.tenantId, table.actorId, table.idempotencyKey],
+    }),
+    index("idx_agent_skill_audit_pending").on(
+      table.auditCommitted,
+      table.createdAt,
+    ),
+  ],
+);

package/template/packages/database/src/schema/diagnostics.ts

@@ -0,0 +1,27 @@
+import {
+  index,
+  integer,
+  pgTable,
+  timestamp,
+  varchar,
+} from "drizzle-orm/pg-core";
+
+export const diagnosticEvents = pgTable(
+  "diagnostic_events",
+  {
+    diagnosticId: varchar("diagnostic_id", { length: 41 }).primaryKey(),
+    requestId: varchar("request_id", { length: 160 }).notNull(),
+    occurredAt: timestamp("occurred_at", { withTimezone: true }).notNull(),
+    expiresAt: timestamp("expires_at", { withTimezone: true }).notNull(),
+    service: varchar("service", { length: 24 }).notNull(),
+    stage: varchar("stage", { length: 24 }).notNull(),
+    method: varchar("method", { length: 16 }).notNull(),
+    route: varchar("route", { length: 256 }).notNull(),
+    statusCode: integer("status_code").notNull(),
+    errorCode: varchar("error_code", { length: 80 }).notNull(),
+  },
+  (table) => [
+    index("idx_diagnostic_events_expiry").on(table.expiresAt),
+    index("idx_diagnostic_events_request").on(table.requestId),
+  ],
+);

package/template/packages/database/src/schema/durable-jobs.ts

@@ -147,6 +147,10 @@ export const durableJobLeases = pgTable(
       .on(table.stageId)
       .where(sql`${table.status} = 'active'`),
     index("idx_durable_job_leases_expiry").on(table.status, table.expiresAt),
+    index("idx_durable_job_leases_job_acquired").on(
+      table.jobId,
+      table.acquiredAt,
+    ),
     check("ck_durable_job_leases_fencing", sql`${table.fencingToken} > 0`),
   ],
 );

package/template/packages/database/src/schema/index.ts

@@ -41,6 +41,16 @@ export * from "./agent-session-receipt.js";
 export * from "./agent-session.js";
 export * from "./client-agent.js";
 export * from "./client-agent-workflow-artifact.js";
+// @windy-module system.agent end
+// @windy-module system.media-runtime begin
 export * from "./embedding-runtime.js";
 export * from "./ai-output-artifacts.js";
+// @windy-module system.media-runtime end
+
+// @windy-module system.agent begin
+export * from "./agent-skills.js";
 // @windy-module system.agent end
+
+// @windy-module system.audit begin
+export * from "./diagnostics.js";
+// @windy-module system.audit end

package/template/packages/database/src/schema-durable-recovery.test.ts

@@ -1,7 +1,7 @@
 // @windy-module system.scheduler begin
 import { describe, expect, test } from "bun:test";
 import { getTableConfig } from "drizzle-orm/pg-core";
-import { durableJobRecoveries } from "./schema/index.js";
+import { durableJobLeases, durableJobRecoveries } from "./schema/index.js";
 
 describe("durable job recovery schema", () => {
   test("人工恢复事实按任务与外部请求幂等", async () => {
@@ -27,5 +27,25 @@ describe("durable job recovery schema", () => {
       'CREATE UNIQUE INDEX "uk_durable_job_recoveries_idempotency"',
     );
   });
+  test("历史租约查找索引覆盖所有状态并支持按获取时间排序", async () => {
+    const name = "idx_durable_job_leases_job_acquired";
+    const index = getTableConfig(durableJobLeases).indexes.find(
+      ({ config }) => config.name === name,
+    );
+    expect(index?.config.columns).toEqual([
+      expect.objectContaining({ name: "job_id" }),
+      expect.objectContaining({ name: "acquired_at" }),
+    ]);
+    expect(index?.config.where).toBeUndefined();
+    const migration = await Bun.file(
+      new URL(
+        "../drizzle/0065_durable_job_lease_snapshot_lookup.sql",
+        import.meta.url,
+      ),
+    ).text();
+    expect(migration).toMatch(
+      /CREATE INDEX "idx_durable_job_leases_job_acquired" ON "durable_job_leases" USING btree \("job_id","acquired_at"\);/,
+    );
+  });
 });
 // @windy-module system.scheduler end

package/template/packages/database/src/schema-source-sequence.test.ts

@@ -0,0 +1,24 @@
+// @windy-module system.agent begin
+import { describe, expect, test } from "bun:test";
+import {
+  agentContextSources,
+  agentMemorySources,
+  agentSourceInvalidations,
+} from "./schema/agent-session.js";
+
+describe("来源序号持久化范围", () => {
+  test("来源坐标使用 bigint，读取毫秒序号仍为精确 number", () => {
+    for (const column of [
+      agentContextSources.sourceSequence,
+      agentMemorySources.sourceSequence,
+      agentSourceInvalidations.sequence,
+    ]) {
+      expect(column.getSQLType()).toBe("bigint");
+      expect(column.mapFromDriverValue("1793979283424")).toBe(1793979283424);
+      expect(column.mapFromDriverValue(String(Number.MAX_SAFE_INTEGER))).toBe(
+        Number.MAX_SAFE_INTEGER,
+      );
+    }
+  });
+});
+// @windy-module system.agent end

package/template/packages/example-work-order/package.json

@@ -10,8 +10,8 @@
     "@southwind-ai/modules": "workspace:*",
     "@southwind-ai/server-sdk": "workspace:*",
     "@southwind-ai/shared": "workspace:*",
-    "drizzle-orm": "^0.45.2",
-    "zod": "^4.4.3"
+    "drizzle-orm": "^0.45.4",
+    "zod": "^4.6.7"
   },
   "peerDependencies": {
     "vue": "^3.5.0"

package/template/packages/modules/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/modules",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {

package/template/packages/modules/src/admin-ui-boundary.test.ts

@@ -0,0 +1,33 @@
+import { expect, test } from "bun:test";
+
+// Inspect the resolved graph before tree-shaking: Vite dev serves these imports
+// even when production could eliminate unused exports.
+test("browser admin UI entry does not traverse full platform assembly", async () => {
+  const loaded: string[] = [];
+  const result = await Bun.build({
+    entrypoints: [import.meta.dir + "/admin-ui-entry.ts"],
+    target: "browser",
+    write: false,
+    plugins: [
+      {
+        name: "record-browser-dependencies",
+        setup(build) {
+          build.onLoad({ filter: /\.[cm]?[jt]s$/ }, (args) => {
+            loaded.push(args.path.split("/").at(-1)!);
+            return undefined;
+          });
+        },
+      },
+    ],
+  });
+  expect(result.success).toBe(true);
+  expect(loaded).toContain("system-module-definitions.ts");
+  expect(loaded).not.toContain("system-module-catalog.ts");
+  expect(loaded).not.toContain("system-modules.ts");
+  expect(
+    loaded.filter((name) =>
+      /^system-agent-|^system-ai-|^system-api-/.test(name),
+    ),
+  ).toEqual([]);
+  expect(loaded).not.toContain("system-audit-actions.ts");
+});

package/template/packages/modules/src/composition.ts

@@ -1,4 +1,3 @@
-import type { MenuNode } from "@southwind-ai/shared";
 import type {
   ModuleImplementationBindings,
   ModuleManifest,
@@ -10,7 +9,11 @@ import {
   validateCapabilityKeyAlignment,
 } from "./capability-guard-validation.js";
 import { validateImplementationBindings } from "./implementation-bindings.js";
-import { composeModuleMenus } from "./menu-composition.js";
+import {
+  composeModuleMenus,
+  flattenMenus,
+  validateMenuRoutes,
+} from "./menu-composition.js";
 import { validateCapabilityCatalogs } from "./catalog-validation.js";
 import {
   snapshotModuleManifestSecrets,
@@ -125,9 +128,13 @@ export function validateModuleComposition(
   validateImplementationBindings(
     {
       adminRoutes: adminRoutes.map(({ key }) => key),
-      apiRoutes: apiRoutes.map(apiRouteKey),
+      apiRoutes: apiRoutes
+        .map(apiRouteKey)
+        .filter((key) => !implementations.unavailableApiRoutes?.has(key)),
       tasks: tasks.map(({ key }) => key),
-      tools: tools.map(({ key }) => key),
+      tools: tools
+        .map(({ key }) => key)
+        .filter((key) => !implementations.unavailableTools?.has(key)),
       providers: providers.map(({ key }) => key),
     },
     aiOperations,
@@ -304,26 +311,6 @@ function validateReferences(
   }
 }
 
-function validateMenuRoutes(
-  menus: readonly MenuNode[],
-  routes: readonly ModuleManifest["adminRoutes"][number][],
-): void {
-  const byPath = new Map(routes.map((route) => [route.path, route]));
-  for (const menu of menus) {
-    if (!menu.path) continue;
-    const route = byPath.get(menu.path);
-    if (!route)
-      throw new Error(`菜单 ${menu.key} 缺少 Admin Route：${menu.path}`);
-    if (
-      route.directAccess !== "admin-admission" &&
-      (route.permissionKey !== menu.permissionKey ||
-        route.featureKey !== menu.featureKey)
-    ) {
-      throw new Error(`菜单 ${menu.key} 与 Admin Route Guard 不一致`);
-    }
-  }
-}
-
 function validateSchemaMigrations(
   schemas: readonly ModuleManifest["schemaExports"][number][],
 ): void {
@@ -342,7 +329,3 @@ function unique(label: string, values: readonly string[]): Set<string> {
   }
   return result;
 }
-
-function flattenMenus(menus: readonly MenuNode[]): MenuNode[] {
-  return menus.flatMap((menu) => [menu, ...flattenMenus(menu.children || [])]);
-}

package/template/packages/modules/src/manifest.ts

@@ -291,6 +291,8 @@ export interface ModuleManifest {
 export type ModuleFactory = () => ModuleManifest;
 
 export interface ModuleImplementationBindings {
+  unavailableApiRoutes?: ReadonlySet<string>;
+  unavailableTools?: ReadonlySet<string>;
   adminRoutes?: readonly string[];
   apiRoutes?: readonly string[];
   tasks?: readonly string[];

package/template/packages/modules/src/menu-composition.ts

@@ -52,3 +52,27 @@ function assertSameMenuShell(left: MenuNode, right: MenuNode): void {
     }
   }
 }
+
+export function validateMenuRoutes(
+  menus: readonly MenuNode[],
+  routes: readonly ModuleManifest["adminRoutes"][number][],
+): void {
+  const byPath = new Map(routes.map((route) => [route.path, route]));
+  for (const menu of menus) {
+    if (!menu.path) continue;
+    const route = byPath.get(menu.path);
+    if (!route)
+      throw new Error(`菜单 ${menu.key} 缺少 Admin Route：${menu.path}`);
+    if (
+      route.directAccess !== "admin-admission" &&
+      (route.permissionKey !== menu.permissionKey ||
+        route.featureKey !== menu.featureKey)
+    ) {
+      throw new Error(`菜单 ${menu.key} 与 Admin Route Guard 不一致`);
+    }
+  }
+}
+
+export function flattenMenus(menus: readonly MenuNode[]): MenuNode[] {
+  return menus.flatMap((menu) => [menu, ...flattenMenus(menu.children || [])]);
+}

package/template/packages/modules/src/system-admin-routes.ts

@@ -120,8 +120,16 @@ export const systemAdminRoutes: ModuleManifest["adminRoutes"] = [
     "system.audit.read",
     "system.audit",
   ),
+  route(
+    "system.diagnostics",
+    "/admin/system/diagnostics",
+    "错误诊断",
+    "sidebar",
+    "system.diagnostics.read",
+    "system.diagnostics",
+  ),
   // @windy-module system.audit end
-  // @windy-module system.agent begin
+  // @windy-module system.agent-ui begin
   route(
     "system.agent-tools",
     "/admin/system/agent-tools",
@@ -162,7 +170,23 @@ export const systemAdminRoutes: ModuleManifest["adminRoutes"] = [
     "system.agent-workflow.read",
     "system.agent-workflow",
   ),
-  // @windy-module system.agent end
+  route(
+    "system.agent-skill",
+    "/admin/system/agent-skills",
+    "Agent 技能",
+    "sidebar",
+    "system.agent-skill.read",
+    "system.agent-skill",
+  ),
+  route(
+    "system.agent-workbench",
+    "/admin/system/agent-workbench",
+    "Agent 原生工作台",
+    "sidebar",
+    "system.agent-workbench.use",
+    "system.agent-workbench",
+  ),
+  // @windy-module system.agent-ui end
   // @windy-module system.operations begin
   route(
     "system.ops",

package/template/packages/modules/src/system-admin-ui-catalog.ts

@@ -1,6 +1,6 @@
 import type { AdminUiManifest } from "./admin-ui-manifest.js";
 import { systemAdminRoutes } from "./system-admin-routes.js";
-import { systemModuleDefinitions } from "./system-module-catalog.js";
+import { systemModuleDefinitions } from "./system-module-definitions.js";
 
 const definitions = [
   ["system", ["system.feature", "system.ui-components"]],
@@ -25,20 +25,27 @@ const definitions = [
   ["system.license", ["system.license"]],
   // @windy-module system.license end
   // @windy-module system.audit begin
-  ["system.audit", ["system.audit"]],
+  ["system.audit", ["system.audit", "system.diagnostics"]],
   // @windy-module system.audit end
   // @windy-module system.storage begin
   ["system.storage", []],
   // @windy-module system.storage end
+  // @windy-module system.media-runtime begin
+  ["system.media-runtime", []],
+  // @windy-module system.media-runtime end
   // @windy-module system.agent begin
   [
     "system.agent",
     [
+      // @windy-module system.agent-ui begin
       "system.agent-tools",
       "system.agent-debug",
+      "system.agent-skill",
+      "system.agent-workbench",
       "system.agent-session",
       "system.ai-runtime",
       "system.agent-workflow",
+      // @windy-module system.agent-ui end
     ],
   ],
   // @windy-module system.agent end
@@ -73,13 +80,18 @@ const versionByName = new Map(
 );
 
 export function systemAdminUiManifests(): AdminUiManifest[] {
-  return definitions.map(([name, routeKeys]) => ({
-    name,
-    version: versionByName.get(name) ?? "0.1.0",
-    adminRoutes: routeKeys.map((key) => {
-      const route = routeByKey.get(key);
-      if (!route) throw new Error(`系统 Admin Route 未定义：${key}`);
-      return { ...route };
-    }),
-  }));
+  return definitions.map(([name, routeKeys]) => {
+    const selected = new Set<string>(routeKeys);
+    for (const key of selected) {
+      if (!routeByKey.has(key))
+        throw new Error(`系统 Admin Route 未定义：${key}`);
+    }
+    return {
+      name,
+      version: versionByName.get(name) ?? "0.1.0",
+      adminRoutes: systemAdminRoutes
+        .filter(({ key }) => selected.has(key))
+        .map((route) => ({ ...route })),
+    };
+  });
 }

package/template/packages/modules/src/system-agent-admin-bindings.ts

@@ -1,8 +1,10 @@
 import type { ApiPermissionBinding } from "@southwind-ai/shared";
+import { dshApiBindings } from "./system-agent-dsh.js";
 import { binding } from "./system-api-binding.js";
 
 export function systemAgentAdminBindings(): ApiPermissionBinding[] {
   return [
+    ...dshApiBindings(),
     binding(
       "GET",
       "/api/agent/admin/tools",

package/template/packages/modules/src/system-agent-admin-menus.ts

@@ -23,4 +23,24 @@ export const systemAgentAdminMenus: ModuleManifest["menus"] = [
     permissionKey: "system.agent-debug.read",
     featureKey: "system.agent-debug",
   },
+  ...[
+    [
+      "system.agent-workbench",
+      "Agent 原生工作台",
+      "agent-workbench",
+      "use",
+      "messages-square",
+    ],
+    ["system.agent-skill", "Agent 技能", "agent-skills", "read", "library"],
+  ].map(([key, title, path, action, icon], order) => ({
+    key: key!,
+    title: title!,
+    path: `/admin/system/${path}`,
+    type: "menu" as const,
+    visible: true,
+    order: order + 14,
+    icon,
+    permissionKey: `${key}.${action}`,
+    featureKey: key,
+  })),
 ];

package/template/packages/modules/src/system-agent-audit-actions.ts

@@ -1,4 +1,7 @@
+import { dshAuditActionKeys } from "./system-agent-dsh.js";
+
 export const agentAuditActionKeys: ReadonlySet<string> = new Set([
+  ...dshAuditActionKeys,
   "system.agent-tools.read",
   "system.agent-debug.read",
   "agent.debug.recording.read",