create-windy 0.8.3 → 0.10.0

package/template/packages/modules/src/system-module-catalog.ts

@@ -1,260 +1,17 @@
 import type { ModuleFactory, ModuleManifest } from "./manifest.js";
-import {
-  auditActionKey,
-  permissionResource,
-} from "./system-module-ownership.js";
+import { permissionResource } from "./system-module-ownership.js";
 import { selectSystemMenus } from "./system-module-menu-selection.js";
 import { systemFoundationModule } from "./system-modules.js";
 import { selectSystemJsonSchemas } from "./system-module-schema-catalog.js";
-// @windy-module system.agent begin
-import { agentAuditActionKeys } from "./system-agent-audit-actions.js";
-// @windy-module system.agent end
-
-const catalogAgentModuleNames = new Set<string>();
-const catalogAgentAuditActionKeys = new Set<string>();
-// @windy-module system.agent begin
-catalogAgentModuleNames.add("system.agent");
-for (const key of agentAuditActionKeys) catalogAgentAuditActionKeys.add(key);
-// @windy-module system.agent end
-
-export interface SystemModuleDefinition {
-  name: string;
-  version: string;
-  label: string;
-  description: string;
-  dependencies?: readonly string[];
-  resources: readonly string[];
-  permissionKeys?: readonly string[];
-  excludedPermissionKeys?: readonly string[];
-  featureKeys: readonly string[];
-  runtimeActivation?: "physical-only";
-}
+import { selectSystemAuditActions } from "./system-module-audit-selection.js";
 
-export const systemModuleDefinitions = [
-  {
-    name: "system",
-    version: "0.1.0",
-    label: "系统核心",
-    description: "管理面准入、Feature 治理、数据库基线与审计动作目录。",
-    resources: ["admin", "runtime", "auth", "feature", "ui-components"],
-    featureKeys: [
-      "system.admin",
-      "system.runtime",
-      "system.auth",
-      "system.feature",
-      "system.ui-components",
-    ],
-  },
-  {
-    name: "system.identity",
-    version: "0.1.0",
-    label: "身份与权限",
-    description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
-    dependencies: ["system"],
-    resources: [
-      "user",
-      "user-directory",
-      "role",
-      "department",
-      "menu",
-      "dict",
-      "profile",
-    ],
-    excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: [
-      "system.rbac",
-      "system.user",
-      "system.role",
-      "system.department",
-      "system.menu",
-      "system.dict",
-      "system.user-directory",
-      "system.profile",
-    ],
-  },
-  // @windy-module system.settings begin
-  {
-    name: "system.settings",
-    version: "0.1.0",
-    label: "平台设置",
-    description: "品牌设置、Logo 与页面水印。",
-    dependencies: ["system"],
-    resources: ["settings", "watermark"],
-    featureKeys: ["system.settings", "system.watermark"],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.settings end
-  // @windy-module system.configuration begin
-  {
-    name: "system.configuration",
-    version: "0.1.0",
-    label: "配置版本",
-    description: "类型化模块配置、版本、差异、应用与回滚。",
-    dependencies: ["system"],
-    resources: ["config"],
-    featureKeys: ["system.config"],
-  },
-  // @windy-module system.configuration end
-  // @windy-module system.license begin
-  {
-    name: "system.license",
-    version: "0.1.0",
-    label: "License",
-    description: "License 安装、验签、到期限制与版本授权。",
-    dependencies: ["system"],
-    resources: ["license"],
-    featureKeys: ["system.license"],
-  },
-  // @windy-module system.license end
-  // @windy-module system.audit begin
-  {
-    name: "system.audit",
-    version: "0.1.0",
-    label: "审计日志",
-    description: "关键操作、权限拒绝和系统异常的安全追溯。",
-    dependencies: ["system"],
-    resources: ["audit"],
-    featureKeys: ["system.audit"],
-  },
-  // @windy-module system.audit end
-  // @windy-module system.storage begin
-  {
-    name: "system.storage",
-    version: "0.1.0",
-    label: "文件存储",
-    description: "上传、续传、下载与对象生命周期管理。",
-    dependencies: ["system", "system.settings", "system.scheduler"],
-    resources: ["storage"],
-    featureKeys: ["system.storage"],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.storage end
-  // @windy-module system.agent begin
-  {
-    name: "system.agent",
-    version: "0.1.2",
-    label: "Agent Tool",
-    description: "受 Feature、RBAC 和审计保护的 Agent 工具调用。",
-    dependencies: [
-      "system",
-      "system.audit",
-      "system.storage",
-      "system.scheduler",
-      "system.workflow",
-    ],
-    resources: [
-      "agent",
-      "agent-tools",
-      "agent-debug",
-      "agent-session",
-      "agent-workflow",
-      "ai-runtime",
-    ],
-    featureKeys: [
-      "system.agent",
-      "system.agent-tools",
-      "system.agent-debug",
-      "system.agent-session",
-      "system.agent-workflow",
-      "system.ai-runtime",
-    ],
-  },
-  // @windy-module system.agent end
-  // @windy-module system.operations begin
-  {
-    name: "system.operations",
-    version: "0.1.0",
-    label: "运维与调度",
-    description: "服务、数据库、缓存、磁盘与在线会话监控。",
-    dependencies: ["system", "system.configuration"],
-    resources: ["ops"],
-    featureKeys: ["system.ops"],
-  },
-  // @windy-module system.operations end
-  // @windy-module system.scheduler begin
-  {
-    name: "system.scheduler",
-    version: "0.1.0",
-    label: "任务调度",
-    description: "定时任务注册、执行、重试、历史与恢复。",
-    dependencies: ["system", "system.audit"],
-    resources: ["scheduler"],
-    featureKeys: ["system.scheduler"],
-  },
-  // @windy-module system.scheduler end
-  // @windy-module system.notification begin
-  {
-    name: "system.notification",
-    version: "0.1.0",
-    label: "站内通知",
-    description:
-      "通知定向与定时发布、用户偏好、外部渠道投递、修改历史、阅读、收藏和归档。",
-    dependencies: ["system", "system.identity", "system.scheduler"],
-    resources: ["notification"],
-    featureKeys: ["system.notification"],
-  },
-  // @windy-module system.notification end
-  // @windy-module system.workflow begin
-  {
-    name: "system.workflow",
-    version: "0.1.0",
-    label: "审批工作流",
-    description: "审批领取、转交、决定、取消与超时补偿。",
-    dependencies: [
-      "system",
-      "system.identity",
-      "system.notification",
-      "system.scheduler",
-    ],
-    resources: ["workflow"],
-    featureKeys: ["system.workflow"],
-  },
-  // @windy-module system.workflow end
-  // @windy-module system.bulk-data begin
-  {
-    name: "system.bulk-data",
-    version: "0.1.0",
-    label: "批量数据",
-    description: "批量导入导出、失败明细、结果留存与清理。",
-    dependencies: ["system", "system.storage", "system.scheduler"],
-    resources: ["bulk-data"],
-    featureKeys: ["system.bulk-data"],
-  },
-  // @windy-module system.bulk-data end
-  // @windy-module system.search begin
-  {
-    name: "system.search",
-    version: "0.1.0",
-    label: "平台搜索",
-    description: "权限感知的功能搜索与业务 SearchProvider 聚合。",
-    dependencies: ["system"],
-    resources: ["search"],
-    featureKeys: ["system.search"],
-  },
-  // @windy-module system.search end
-  // @windy-module system.data-governance begin
-  {
-    name: "system.data-governance",
-    version: "0.1.0",
-    label: "数据治理",
-    description: "敏感字段投影、明文访问与受治理导出。",
-    dependencies: [
-      "system",
-      "system.identity",
-      "system.audit",
-      "system.storage",
-      "system.workflow",
-      "system.scheduler",
-    ],
-    resources: [],
-    permissionKeys: ["system.user.reveal", "system.user.export"],
-    featureKeys: [],
-    runtimeActivation: "physical-only",
-  },
-  // @windy-module system.data-governance end
-] as const satisfies readonly SystemModuleDefinition[];
+import {
+  systemModuleDefinitions,
+  type SystemModuleDefinition,
+  type SystemModuleName,
+} from "./system-module-definitions.js";
 
-export type SystemModuleName = (typeof systemModuleDefinitions)[number]["name"];
+export * from "./system-module-definitions.js";
 
 export const systemModuleFactories: readonly ModuleFactory[] =
   systemModuleDefinitions.map(
@@ -323,22 +80,10 @@ function createSystemCapabilityModule(
       definition.name === "system.data-governance"
         ? aggregate.dataPolicies
         : [],
-    auditActions: isCore
-      ? aggregate.auditActions.filter(
-          (action) =>
-            auditActionKey(action) !== "system.user-directory.query" &&
-            !catalogAgentAuditActionKeys.has(auditActionKey(action)),
-        )
-      : definition.name === "system.identity"
-        ? aggregate.auditActions.filter(
-            (action) =>
-              auditActionKey(action) === "system.user-directory.query",
-          )
-        : catalogAgentModuleNames.has(definition.name)
-          ? aggregate.auditActions.filter((action) =>
-              catalogAgentAuditActionKeys.has(auditActionKey(action)),
-            )
-          : [],
+    auditActions: selectSystemAuditActions(
+      definition.name,
+      aggregate.auditActions,
+    ),
     metadata: {
       kind: "platform-capability",
       ...(definition.runtimeActivation

package/template/packages/modules/src/system-module-definitions.ts

@@ -0,0 +1,260 @@
+export interface SystemModuleDefinition {
+  name: string;
+  version: string;
+  label: string;
+  description: string;
+  dependencies?: readonly string[];
+  resources: readonly string[];
+  permissionKeys?: readonly string[];
+  excludedPermissionKeys?: readonly string[];
+  featureKeys: readonly string[];
+  runtimeActivation?: "physical-only";
+}
+
+export const systemModuleDefinitions = [
+  {
+    name: "system",
+    version: "0.1.0",
+    label: "系统核心",
+    description: "管理面准入、Feature 治理、数据库基线与审计动作目录。",
+    resources: ["admin", "runtime", "auth", "feature", "ui-components"],
+    featureKeys: [
+      "system.admin",
+      "system.runtime",
+      "system.auth",
+      "system.feature",
+      "system.ui-components",
+    ],
+  },
+  {
+    name: "system.identity",
+    version: "0.1.0",
+    label: "身份与权限",
+    description: "用户、角色、部门、菜单、字典、个人资料和数据范围。",
+    dependencies: ["system"],
+    resources: [
+      "user",
+      "user-directory",
+      "role",
+      "department",
+      "menu",
+      "dict",
+      "profile",
+    ],
+    excludedPermissionKeys: ["system.user.reveal", "system.user.export"],
+    featureKeys: [
+      "system.rbac",
+      "system.user",
+      "system.role",
+      "system.department",
+      "system.menu",
+      "system.dict",
+      "system.user-directory",
+      "system.profile",
+    ],
+  },
+  // @windy-module system.settings begin
+  {
+    name: "system.settings",
+    version: "0.1.0",
+    label: "平台设置",
+    description: "品牌设置、Logo 与页面水印。",
+    dependencies: ["system"],
+    resources: ["settings", "watermark"],
+    featureKeys: ["system.settings", "system.watermark"],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.settings end
+  // @windy-module system.configuration begin
+  {
+    name: "system.configuration",
+    version: "0.1.0",
+    label: "配置版本",
+    description: "类型化模块配置、版本、差异、应用与回滚。",
+    dependencies: ["system"],
+    resources: ["config"],
+    featureKeys: ["system.config"],
+  },
+  // @windy-module system.configuration end
+  // @windy-module system.license begin
+  {
+    name: "system.license",
+    version: "0.1.0",
+    label: "License",
+    description: "License 安装、验签、到期限制与版本授权。",
+    dependencies: ["system"],
+    resources: ["license"],
+    featureKeys: ["system.license"],
+  },
+  // @windy-module system.license end
+  // @windy-module system.audit begin
+  {
+    name: "system.audit",
+    version: "0.1.0",
+    label: "审计日志",
+    description: "关键操作、权限拒绝和系统异常的安全追溯。",
+    dependencies: ["system"],
+    resources: ["audit", "diagnostics"],
+    featureKeys: ["system.audit", "system.diagnostics"],
+  },
+  // @windy-module system.audit end
+  // @windy-module system.storage begin
+  {
+    name: "system.storage",
+    version: "0.1.0",
+    label: "文件存储",
+    description: "上传、续传、下载与对象生命周期管理。",
+    dependencies: ["system", "system.settings", "system.scheduler"],
+    resources: ["storage"],
+    featureKeys: ["system.storage"],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.storage end
+  // @windy-module system.media-runtime begin
+  {
+    name: "system.media-runtime",
+    version: "0.1.0",
+    label: "媒体运行时",
+    description: "受治理的文档、语音、嵌入与公共文件引用。",
+    dependencies: ["system", "system.audit", "system.storage"],
+    resources: ["document", "speech", "embedding", "ai-artifact"],
+    featureKeys: [
+      "system.document",
+      "system.speech",
+      "system.embedding",
+      "system.ai-artifact",
+    ],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.media-runtime end
+  // @windy-module system.agent begin
+  {
+    name: "system.agent",
+    version: "0.1.2",
+    label: "Agent Tool",
+    description: "受 Feature、RBAC 和审计保护的 Agent 工具调用。",
+    dependencies: [
+      "system",
+      "system.audit",
+      "system.storage",
+      "system.scheduler",
+      "system.workflow",
+      "system.media-runtime",
+    ],
+    resources: [
+      "agent",
+      "agent-tools",
+      "agent-debug",
+      "agent-workbench",
+      "agent-skill",
+      "agent-session",
+      "agent-workflow",
+      "ai-runtime",
+    ],
+    featureKeys: [
+      "system.agent",
+      "system.agent-tools",
+      "system.agent-debug",
+      "system.agent-workbench",
+      "system.agent-skill",
+      "system.agent-session",
+      "system.agent-workflow",
+      "system.ai-runtime",
+    ],
+  },
+  // @windy-module system.agent end
+  // @windy-module system.operations begin
+  {
+    name: "system.operations",
+    version: "0.1.0",
+    label: "运维与调度",
+    description: "服务、数据库、缓存、磁盘与在线会话监控。",
+    dependencies: ["system", "system.configuration"],
+    resources: ["ops"],
+    featureKeys: ["system.ops"],
+  },
+  // @windy-module system.operations end
+  // @windy-module system.scheduler begin
+  {
+    name: "system.scheduler",
+    version: "0.1.0",
+    label: "任务调度",
+    description: "定时任务注册、执行、重试、历史与恢复。",
+    dependencies: ["system", "system.audit"],
+    resources: ["scheduler"],
+    featureKeys: ["system.scheduler"],
+  },
+  // @windy-module system.scheduler end
+  // @windy-module system.notification begin
+  {
+    name: "system.notification",
+    version: "0.1.0",
+    label: "站内通知",
+    description:
+      "通知定向与定时发布、用户偏好、外部渠道投递、修改历史、阅读、收藏和归档。",
+    dependencies: ["system", "system.identity", "system.scheduler"],
+    resources: ["notification"],
+    featureKeys: ["system.notification"],
+  },
+  // @windy-module system.notification end
+  // @windy-module system.workflow begin
+  {
+    name: "system.workflow",
+    version: "0.1.0",
+    label: "审批工作流",
+    description: "审批领取、转交、决定、取消与超时补偿。",
+    dependencies: [
+      "system",
+      "system.identity",
+      "system.notification",
+      "system.scheduler",
+    ],
+    resources: ["workflow"],
+    featureKeys: ["system.workflow"],
+  },
+  // @windy-module system.workflow end
+  // @windy-module system.bulk-data begin
+  {
+    name: "system.bulk-data",
+    version: "0.1.0",
+    label: "批量数据",
+    description: "批量导入导出、失败明细、结果留存与清理。",
+    dependencies: ["system", "system.storage", "system.scheduler"],
+    resources: ["bulk-data"],
+    featureKeys: ["system.bulk-data"],
+  },
+  // @windy-module system.bulk-data end
+  // @windy-module system.search begin
+  {
+    name: "system.search",
+    version: "0.1.0",
+    label: "平台搜索",
+    description: "权限感知的功能搜索与业务 SearchProvider 聚合。",
+    dependencies: ["system"],
+    resources: ["search"],
+    featureKeys: ["system.search"],
+  },
+  // @windy-module system.search end
+  // @windy-module system.data-governance begin
+  {
+    name: "system.data-governance",
+    version: "0.1.0",
+    label: "数据治理",
+    description: "敏感字段投影、明文访问与受治理导出。",
+    dependencies: [
+      "system",
+      "system.identity",
+      "system.audit",
+      "system.storage",
+      "system.workflow",
+      "system.scheduler",
+    ],
+    resources: [],
+    permissionKeys: ["system.user.reveal", "system.user.export"],
+    featureKeys: [],
+    runtimeActivation: "physical-only",
+  },
+  // @windy-module system.data-governance end
+] as const satisfies readonly SystemModuleDefinition[];
+
+export type SystemModuleName = (typeof systemModuleDefinitions)[number]["name"];

package/template/packages/modules/src/system-modules-access.test.ts

@@ -61,6 +61,7 @@ describe("系统模块管理面与 MCP 注册", () => {
     ]);
   });
 
+  // @windy-module system.agent-ui begin
   test("AI Runtime 报表完整注册 Feature、权限、入口、API 与审计", () => {
     const manifest = systemFoundationModule();
     const menus = manifest.menus.flatMap((menu) => menu.children ?? []);
@@ -129,5 +130,6 @@ describe("系统模块管理面与 MCP 注册", () => {
       ]),
     );
   });
+  // @windy-module system.agent-ui end
   // @windy-module system.agent end
 });

package/template/packages/modules/src/system-modules.test.ts

@@ -219,7 +219,13 @@ describe("系统模块能力注册", () => {
 
   test("Sidebar 分类由 Manifest 目录声明", () => {
     const catalogs = systemFoundationModule().menus.map((menu) => menu.title);
-    expect(catalogs).toEqual(["组织与权限", "平台配置", "安全与合规", "运维"]);
+    expect(catalogs).toEqual([
+      "组织与权限",
+      "平台配置",
+      "安全与合规",
+      "运维",
+      "AI 与 Agent",
+    ]);
   });
 
   test("部门创建与迁移处置绑定独立权限、Feature 和审计动作", () => {

package/template/packages/modules/src/system-modules.ts

@@ -4,7 +4,9 @@ import {
   systemAgentToolSchemas,
   systemAgentTools,
 } from "./system-agent-tools.js";
+// @windy-module system.agent-ui begin
 import { systemAgentAdminMenus } from "./system-agent-admin-menus.js";
+// @windy-module system.agent-ui end
 import { systemAgentSupervisorSchemas } from "./system-agent-supervisor.js";
 // @windy-module system.agent end
 import { systemAdminRoutes } from "./system-admin-routes.js";
@@ -217,6 +219,17 @@ export function systemFoundationModule(): ModuleManifest {
             permissionKey: "system.audit.read",
             featureKey: "system.audit",
           },
+          {
+            key: "system.diagnostics",
+            title: "错误诊断",
+            type: "menu",
+            order: 25,
+            visible: true,
+            path: "/admin/system/diagnostics",
+            icon: "bug",
+            permissionKey: "system.diagnostics.read",
+            featureKey: "system.diagnostics",
+          },
           // @windy-module system.audit end
         ],
       },
@@ -241,13 +254,34 @@ export function systemFoundationModule(): ModuleManifest {
             featureKey: "system.ops",
           },
           // @windy-module system.operations end
-          // @windy-module system.agent begin
+          // @windy-module system.workflow begin
+          {
+            key: "system.workflow",
+            title: "审批任务",
+            type: "button",
+            order: 20,
+            visible: false,
+            permissionKey: "system.workflow.read",
+            featureKey: "system.workflow",
+          },
+          // @windy-module system.workflow end
+        ],
+      },
+      // @windy-module system.agent-ui begin
+      {
+        key: "system.ai",
+        title: "AI 与 Agent",
+        type: "catalog",
+        order: 50,
+        visible: true,
+        icon: "sparkles",
+        children: [
           ...systemAgentAdminMenus,
           {
             key: "system.agent-session",
             title: "Agent 会话",
             type: "menu",
-            order: 14,
+            order: 16,
             visible: true,
             path: "/admin/system/agent-sessions",
             icon: "messages-square",
@@ -258,7 +292,7 @@ export function systemFoundationModule(): ModuleManifest {
             key: "system.ai-runtime",
             title: "AI Runtime 报表",
             type: "menu",
-            order: 15,
+            order: 17,
             visible: true,
             path: "/admin/system/ai-runtime",
             icon: "activity",
@@ -269,27 +303,16 @@ export function systemFoundationModule(): ModuleManifest {
             key: "system.agent-workflow",
             title: "Agent Workflow",
             type: "menu",
-            order: 16,
+            order: 18,
             visible: true,
             path: "/admin/system/agent-workflows",
             icon: "git-fork",
             permissionKey: "system.agent-workflow.read",
             featureKey: "system.agent-workflow",
           },
-          // @windy-module system.agent end
-          // @windy-module system.workflow begin
-          {
-            key: "system.workflow",
-            title: "审批任务",
-            type: "button",
-            order: 20,
-            visible: false,
-            permissionKey: "system.workflow.read",
-            featureKey: "system.workflow",
-          },
-          // @windy-module system.workflow end
         ],
       },
+      // @windy-module system.agent-ui end
     ],
     adminRoutes: systemAdminRoutes,
     permissions: systemPermissions,